Acceptable Use Policy

Last updated: June 18, 2026

Boardwalk runs your code and your agents on hosted compute with network access. A workflow can send messages, reach external services, and act on credentials you provide, so misuse here doesn't just affect us: it affects the systems and people your workflows touch. This Acceptable Use Policy ("AUP") describes what you may not use Boardwalk for. It applies to accounts, organizations, workflows, runs, agents, integrations, API clients, and the CLI. It is part of our Terms of Service.

You are responsible for the behavior of every workflow, agent, automation, integration, and team member acting under your account or organization. "You did it" and "your workflow did it" are the same to us.

1. Lawful use

Use Boardwalk only in compliance with applicable law in every jurisdiction where you operate or where your workflows act. Don't use the Service to facilitate illegal activity or to violate the rights of others, including sanctions, export-control, anti-corruption, consumer-protection, privacy, employment, healthcare, financial-services, election, and platform-access laws that apply to your workflows.

2. No spam, scams, or deceptive messaging

You may not use Boardwalk to:

• Send unsolicited bulk messages, spam, or content that violates anti-spam laws (CAN-SPAM, CASL, GDPR/ePrivacy, and similar).
• Run phishing, credential-harvesting, or financial-scam campaigns.
• Send fraudulent solicitations, fake invoices, or fake support requests.
• Send messages that disguise their origin, route, or sender identity.
• Operate engagement, review, follower, or content farms, or otherwise generate inauthentic activity at scale.

3. No attacks on other systems

Because runs can reach the network, you may not use Boardwalk as a platform to attack or interfere with others. You may not:

• Launch denial-of-service, amplification, brute-force, or credential-stuffing attacks from Boardwalk against any target.
• Scan, probe, or test systems you don't own or have explicit permission to test.
• Scrape or harvest data in violation of a site's terms, applicable law, or technical access controls.
• Distribute or stage malware, ransomware, exploits, or other harmful code.

4. No abuse of compute resources

You may not use Boardwalk's hosted compute to:

• Mine cryptocurrency, run distributed-computing workloads unrelated to a genuine workflow, or otherwise consume resources primarily to extract value from the compute itself.
• Circumvent, disable, or interfere with rate limits, quotas, spend caps, billing meters, or other usage controls.
• Operate workloads designed to degrade the Service or other customers' experience.

5. Harmful and abusive content

You may not use Boardwalk to generate, store, send, or distribute content that:

• Harasses, threatens, defames, or abuses other people.
• Promotes violence against, or terrorism by, individuals or groups.
• Is hateful toward people based on race, ethnicity, national origin, religion, disability, gender, sexual orientation, gender identity, or other protected characteristics.
• Is child sexual abuse material (CSAM) or non-consensual intimate imagery (NCII), including AI-generated variants of either, or that sexually exploits, grooms, or endangers minors.

6. Privacy and confidentiality

You may not use Boardwalk to:

• Collect, scrape, expose, or misuse personal information without authorization or a lawful basis.
• Dox, surveil, or stalk individuals.
• Process or transmit information you don't have the right to use (including confidential information of an employer, customer, or third party).

7. Security and platform integrity

You may not:

• Probe, scan, or test the Service for vulnerabilities except as permitted under our Security Disclosure Policy.
• Attempt to bypass authentication, authorization, tenant isolation, the credential broker, the egress controls, or other safeguards.
• Attempt to access another organization's workflows, runs, secrets, or artifacts.
• Exploit prompt-injection or content-injection techniques to take over an agent or its host without authorization, or to make a workflow act against its operator's intent.

8. Intellectual property

You may not:

• Infringe copyright, trademark, patent, trade-secret, publicity, or other rights.
• Use the Service to circumvent technical protection measures.
• Scrape the hosted Service at scale or use it to build a substantially similar competing product.

For copyright complaints, see our Abuse Reporting page; we follow DMCA notice-and-counter-notice procedures.

9. AI safety expectations

If your workflow generates content using a language model, you are responsible for the outputs as if you wrote them yourself. In particular:

• Don't use Boardwalk to generate or distribute content listed in Sections 5 or 6.
• Don't use it to provide unauthorized professional advice presented as authoritative (for example, individualized medical, legal, or financial advice you are not licensed to give).
• Don't use it to generate election-related disinformation or to impersonate political figures or election officials.
• Where you operate an automated agent that interacts with people, don't misrepresent it as human where doing so would cause harm or violate law (such as Cal. Bot Disclosure Act).
• Don't use Boardwalk to make or substantially assist decisions that produce legal or similarly significant effects for a person, such as eligibility for employment, credit, education, housing, insurance, healthcare, or public benefits, unless you have completed the required legal, privacy, bias, safety, notice, consent, human-review, and appeal controls for that use.
• Don't bypass, disable, or misrepresent model-provider safety systems, usage policies, or output restrictions.

10. Enforcement

We may investigate suspected violations and take any action we reasonably consider appropriate, including:

• Issuing a warning.
• Restricting or removing specific content, workflows, or features.
• Throttling or suspending API access or run execution.
• Suspending or terminating individual accounts, workflows, or organizations.
• Reporting violations to law enforcement or other authorities.

For severe or ongoing harm, such as active CSAM distribution, targeted threats, security attacks, or large-scale spam or scanning, we may act immediately and without prior notice. For lower-severity issues, we'll generally try to give you notice and a chance to fix the problem first.

11. Appeals

If we've restricted or terminated your access and you think we've made a mistake, email abuse@boardwalk.shwith your account identifier and the relevant context. We'll review and respond. Appeals don't apply to terminations for legal compliance (for example, sanctions or court orders).

12. Reporting

To report a violation of this AUP, email abuse@boardwalk.sh or see our Abuse Reporting & Enforcement page.

13. Updates

We may update this AUP from time to time. Material changes will be posted here with a revised "Last updated" date.