Acceptable Use Policy (AUP) & AI Guidelines

1. Core Principles & Purpose

ProvenTen is built to empower B2B sales, marketing, and revenue operations teams to centralize customer reference assets, automate consent workflows, match prospects with customer advocates, and auto-inject verified proof points into commercial sales materials.

To safeguard system security, protect customer advocate trust, maintain absolute data integrity, and ensure strict compliance with European data protection laws (including GDPR), all users must adhere to the acceptable use rules and responsible AI guidelines set forth in this document.

2. Prohibited Platform Activities

You agree not to use ProvenTen, its generated materials, or its integrated workflows to engage in, facilitate, or promote any of the following activities:

A. Advocate & Reference Contact Misuse

• Unauthorized Outreach & Consent Bypass: Directing prospects to contact customer references, or harvesting advocate details from the platform for unauthorized outreach, without a valid recorded consent status or outside of authorized reference permissions.
• Misrepresentation & Data Alteration: Altering, falsifying, or exaggerating customer quotes, case study metrics, or advocate details auto-generated by our AI engine or hosted within the platform when generating sales materials, proposals, scripts, or collateral.
• Advocate Fatigue & Policy Violations: Requesting customer introductions or distributing advocate contact information in violation of internal contact caps set by your organization or individual reference consent parameters.

B. Security & System Integrity

• Unauthorized Testing & Penetration: Attempting to probe, scan, or test the vulnerability of ProvenTen's infrastructure, platform code, or EU-hosted datacenters (Frankfurt & Helsinki) without explicit prior written authorization.
• Malicious Software & Code Injection: Uploading, injecting, or transmitting viruses, malware, trojan horses, worms, or any other malicious scripts or disruptive code.
• API Abuse & Scraping: Exceeding allocated API rate limits, executing automated web scraping, or attempting to harvest platform assets, advocate datasets, or sales intelligence outside of authorized platform interfaces.
• Credential Sharing: Sharing individual user seats or login credentials across multiple individuals to circumvent seat-based licensing or role-based access controls (RBAC).

C. Illegal & Harmful Material

• Uploading, storing, or generating content that is defamatory, unlawful, harassing, discriminatory, fraudulent, or infringing upon third-party intellectual property rights.
• Storing unencrypted sensitive personal data (e.g., special category GDPR data, health records, financial credentials) within standard notes or sales proof text fields.

3. Responsible AI & Content Generation Guidelines

ProvenTen utilizes Artificial Intelligence models ("AI Engine") to deliver core capabilities, including AI Reference Matching (matching prospects to references by industry, deal size, or pain point) and Sales Content Generation (auto-injecting proof points into decks, proposals, RFPs, and cold-call scripts).

When utilizing AI features on ProvenTen, you must abide by the following guidelines:

A. Enterprise Data Isolation & Zero-Training Guarantee

• No Public Model Training: Customer Data, reference identities, case studies, and CRM records uploaded to or processed by ProvenTen are never used to train, re-train, or fine-tune public foundation AI models. Your proprietary sales intelligence remains strictly isolated within your dedicated enterprise environment.
• 100% EU Data Sovereignty: All AI inferences, prompt executions, and data processing take place exclusively within Tier-4 EU datacenters (Frankfurt & Helsinki) in full compliance with EU data sovereignty standards.

B. Human-in-the-Loop & Commercial Verification

• User Verification Requirement: AI-generated sales materials (proposals, scripts, decks, case study summaries) are created programmatically based on your proof database. Users must review and verify output accuracy before distributing materials externally to prospective buyers, partners, or public channels.
• Output Responsibility: While ProvenTen's AI Engine is designed for high precision, AI models may occasionally produce incomplete outputs. Enterprise users remain solely responsible for the final accuracy of commercial claims and metrics presented in their sales cycles.

C. Prohibited AI Practices

You may not use ProvenTen's AI features to:

• Generate fraudulent, misleading, or deceptive business claims or unfair competitive intelligence.
• Reverse-engineer, execute prompt injection attacks, or manipulate AI prompts to extract system architectures, underlying system instructions, or data belonging to other enterprise tenants.
• Generate automated deceptive messaging or engage in practices violating regulatory frameworks, including the EU AI Act.

4. Third-Party Integrations & CRM Synchronization

ProvenTen integrates with third-party platforms, including CRMs (Salesforce, HubSpot, Microsoft Dynamics 365, Pipedrive), communication applications (Slack, Microsoft Teams, Outlook, Gmail), and browser extensions.

• Users are responsible for maintaining compliance with the terms of service and acceptable use policies of any connected third-party platforms.
• Any data imported into or synchronized with ProvenTen via integrations must be lawfully collected and processed in accordance with applicable privacy legislation.

5. Audit, Enforcement & Reporting

A. Monitoring & Compliance

ProvenTen reserves the right (but assumes no obligation) to audit account usage, API activity, and platform interaction logs to verify compliance with this policy, maintain system security, and protect advocate privacy.

B. Enforcement Actions

Failure to comply with this AUP or AI Usage Guidelines may result in administrative or corrective actions, including but not limited to:

• Issuance of a formal written warning or request to rectify non-compliant usage.
• Temporary restriction or suspension of AI features, API access, or platform seats.
• Permanent termination of account access for severe or repeated violations without entitlement to a refund.
• Disclosure of unlawful activities to law enforcement authorities or regulatory bodies where required by law.

C. Reporting Policy Violations

If you discover or suspect a violation of this Acceptable Use Policy, advocate consent misuse, or an AI output safety issue, please notify our compliance team:

• Email: compliance@proventen.com
• Postal Address: ProvenTen, Axelia II, Agricolankatu 4, 20520 Turku, Finland

6. Updates to This Policy

We may update this Acceptable Use Policy & AI Guidelines from time to time to reflect evolving legal standards (such as updates to the EU AI Act), technological advancements, or modifications to our platform capabilities. Any revised version will be published on our platform with an updated "Last Updated" date. Your continued use of ProvenTen after any modifications signifies your acceptance of the updated policy.