Acceptable Use Policy

This policy sets the rules for using Zrico, provided by [company legal name]. It applies to every firm that subscribes and to every person the firm lets use its workspace. The firm is responsible for making sure its people follow it.

This policy is part of our Terms of Service. If the two conflict, the Terms of Service control.

1. Prohibited uses

Do not use Zrico to:

• Break the law. This includes violating anyone's privacy, confidentiality, intellectual property or other rights, or breaching professional rules that apply to you.
• Cause harm. This includes harassment, threats, fraud, deception, impersonation, discrimination, or content that sexualizes minors.
• Create or spread malware, or plan or carry out attacks on any system or network.
• Abuse the service. This includes probing, scanning or testing our systems for weaknesses without our written permission, overloading them, or interfering with other customers. Report security issues to security@zrico.com instead.
• Get around budgets or limits. This includes avoiding the included AI usage budget, rate limits or seat counts, for example by using one firm's access for another firm.
• Share accounts. Each seat is for one named person. Do not share sign-in details or let others use your account.
• Scrape or extract the service, its models or its outputs by automated means, except through features we provide.
• Resell or sublicense Zrico, or offer it to people outside your firm as a service, without our written agreement.
• Try to access another firm's workspace or data, or any part of the service you are not authorized to use.
• Use outputs to build competing AI models, where a model provider's terms forbid it.

2. AI provider policies

Zrico gives you access to models from several providers. When you use a provider's model, you must also follow that provider's usage policy:

• Anthropic (Claude models, including through AWS Bedrock): the Anthropic Usage Policy. Anthropic has published an updated version that takes effect on November 12, 2026. Among other things, it clarifies the rules for high-risk uses (see section 3), adds rules against deceptive influence operations, non-consensual tracking and weapons-related software, and prohibits sustained, pointless abuse aimed at the model.
• OpenAI (GPT models and embeddings): the OpenAI Usage Policies. Among other things, they prohibit giving tailored advice that requires a license (such as legal or medical advice) without appropriate involvement of a licensed professional.
• AWS (Bedrock): the AWS Acceptable Use Policy, in addition to Anthropic's policy for Claude models.

These policies change from time to time. The current version on the provider's site applies. If a provider's policy is stricter than this one, follow the stricter rule.

3. High-risk uses: legal, financial, insurance and medical

Zrico is built for professional firms. Much of their work is "high-risk" under the provider policies, because AI output can affect a specific person's legal rights, money, insurance or health. For this work:

• A qualified professional must review the output before anyone relies on it or it goes out. The reviewer must have the right expertise (for example, a licensed attorney, CPA or licensed insurance professional), must be able to change or reject the output, and stays responsible for the result.
• Disclose AI use where required. Tell clients and other people who receive the work that AI was used, when the law, your professional rules or the provider policies require it. Anthropic's updated policy requires telling affected individuals when AI helped produce a covered recommendation or decision about them. You do not need to name the model or provider unless a rule requires it.
• Do not present raw AI output as professional advice. Output can be wrong, incomplete or out of date. Check citations, figures and facts.

Specific limits

• No patient health information. Do not enter protected health information (PHI) or other patient health records. Zrico is not set up for HIPAA, and we do not sign business associate agreements.
• No regulated broker-dealer or RIA communications. Do not use Zrico to create, send or store communications that must be kept under SEC or FINRA recordkeeping rules. We do not provide a compliant archive.
• No automated decisions about people without human review. Do not use Zrico to make decisions with legal or similarly significant effects on a person, such as credit, insurance eligibility or pricing, employment, or housing, unless a qualified person reviews and is able to change each decision.
• No consumer-facing bots. Zrico is for your firm's internal use. Do not connect it to a service where the public talks directly to the AI.

4. Your responsibilities

The firm is responsible for:

• deciding what information its people may put into Zrico, consistent with its duties of confidentiality and any client instructions;
• getting any consents it needs from clients;
• supervising its people's use of AI under its professional rules; and
• keeping sign-in details secure and removing people who leave.

5. Enforcement

If we believe this policy has been broken, we may:

• ask the firm to stop or fix the problem;
• remove or block specific content or access;
• suspend a user or the whole workspace, with notice where practical; or
• end the firm's subscription under the Terms of Service.

We may act without notice when needed to protect the service, other customers or third parties, or to meet a provider's or legal requirement. We may report illegal activity to the authorities and provide information to AI providers when their policies require it.

6. Reporting

To report abuse, a security issue or a suspected breach of this policy, email security@zrico.com. For other questions, email support@zrico.com.