Start your analysisGet started
[ Legal · Nomisma LLC ]

Acceptable Use Policy

Version v1 · Effective 26 October 2026 · Last updated 26 October 2026

This Acceptable Use Policy sets out what the Customer and its Users may and may not do with Smartsteps. It forms part of the Terms of Service. Capitalised terms have the meanings given in the Terms.

1. Scope

1.1 This Acceptable Use Policy ("AUP") applies to all use of the Service by a Customer and its Users. The Customer is responsible for its Users' compliance with it.

1.2 A breach of this AUP is a breach of the Terms of Service.

2. Authorised Websites and Documents Only

2.1 The Customer may submit a website for crawling, or a document for analysis, only if the Customer owns or controls it, or is authorised by its owner or operator to have it scanned by an automated tool. Each submission is a representation that this is the case.

2.2 The Customer must not:

  • submit, or cause the Service to crawl, a competitor's website or any other website it is not authorised to have scanned;
  • use the Service to investigate, monitor or gather intelligence about a third party's website, practices or documents without that party's authorisation;
  • submit a website address designed to direct the crawler at internal networks, private services, administrative interfaces, or any system other than a public website the Customer is authorised to scan;
  • submit a website or document behind a login, paywall or other access control that the Customer is not authorised to pass; or
  • use the Service in a way that breaches the terms of use of a website, or any law on computer misuse, unauthorised access or data protection.

2.3 Nomisma may ask the Customer to demonstrate its authorisation for any website at any time, and may decline or stop crawling while the matter is resolved.

2.4 If SmartstepsBot visited your website. SmartstepsBot identifies itself with the user agent "SmartstepsBot/0.1 (+https://smartsteps.ai/bot)". If you operate a website that SmartstepsBot visited and you did not authorise the visit, please write to info@nomisma.ai with the address of the website and the approximate time of the visit. We will investigate and, where appropriate, stop crawling the website and act against the account concerned.

3. No Abuse of Smartsteps

The Customer must not:

  • scrape, crawl, harvest or bulk-extract data from the Service, including its library of legal obligations, Reports of other Customers, or any other content, except its own Customer Content and Reports through the Service's normal features;
  • attempt to access another Customer's Workspace or data, or to bypass authentication, access controls or security measures;
  • probe, scan or test the vulnerability of the Service, except under the Security Overview and Vulnerability Disclosure policy;
  • overload, flood or disrupt the Service or its infrastructure, or interfere with other Customers' use of it;
  • introduce malware or other harmful code, including in uploaded documents;
  • attempt to extract the Service's prompts, instructions or internal configuration, or to manipulate the AI Features through content designed to subvert their instructions;
  • reverse-engineer, decompile or attempt to derive the source code of the Service, except to the extent that this restriction is prohibited by law; or
  • use the Service, its Reports or its outputs to build or train a competing product or service.

4. Credits and Usage Limits

The Customer must not attempt to bypass, manipulate or exceed Credit allowances or other usage limits, including by creating multiple accounts or Workspaces to obtain additional free or introductory Credits, by sharing an account between separate businesses, or by exploiting a fault in metering. If the Customer discovers such a fault, it must report it to info@nomisma.ai.

5. No Reselling

The Customer may use the Service for its own business and for businesses it controls. The Customer must not resell, sublicense, rent or provide the Service, or Reports produced by it, to third parties as a service, including by running scans for clients as an agency, consultancy or white-label provider, unless Nomisma has agreed to this in writing.

6. Reports, Certification and Endorsement

6.1 Reports are informational and are not legal advice or a certification of compliance (see the Legal Disclaimer). The Customer must not:

  • present a Report, a standing score or a finding to any person as a legal opinion, a legal certification, an audit opinion, or proof of compliance with any law;
  • state or imply that Smartsteps or Nomisma has reviewed, approved, certified or endorsed the Customer, its website or its practices;
  • display any Smartsteps or Nomisma name, logo, badge, seal or similar mark on a website or in materials, without Nomisma's prior written permission; or
  • alter a Report in a way that misrepresents what the Service found and then attribute it to Smartsteps.

6.2 The Customer may share Reports with its legal advisers, auditors, insurers, investors and regulators, as provided in the Terms of Service, provided it does not misrepresent their nature.

7. Lawful Content and Use

The Customer must not use the Service to store, process or transmit content that:

  • is unlawful, defamatory, fraudulent or deceptive;
  • infringes or misappropriates the intellectual property, privacy or other rights of any person;
  • the Customer lacks the rights, or where required the consents, to submit; or
  • consists of special categories of personal data, health information, payment card data or government identification numbers, other than to the limited extent that such information appears in a public policy document or on a public page of a Customer Website.

The Customer must not use the Service to harass any person or for any purpose that is unlawful in the jurisdiction where the Customer operates.

8. Enforcement

8.1 Where Nomisma reasonably believes that this AUP has been breached, it may act in proportion to the breach, including by:

  • declining or stopping a crawl, or removing or disabling access to Customer Content;
  • suspending a User or a Workspace, in whole or in part;
  • withdrawing Credits obtained in breach of Section 4; or
  • terminating the Agreement, as provided in the Terms of Service.

8.2 Where a breach creates an urgent security, legal or third-party risk, including a crawl that appears unauthorised, Nomisma may act immediately and give notice afterwards. Otherwise, where practicable, Nomisma will give notice and an opportunity to cure first.

8.3 Fees are not refunded where the Service is suspended or terminated because of a breach of this AUP, except where required by law.

8.4 Nothing in this AUP limits Nomisma's other rights under the Terms of Service or at law.

Nomisma requires valid legal process before disclosing Customer or User data to law enforcement or other authorities, and discloses only what that process requires. Requests should be sent to info@nomisma.ai and must identify the requesting authority, the legal basis relied on and the specific data sought. Where Nomisma processes data on a Customer's behalf, it will refer requests for that data to the Customer where lawful, and will notify the affected Customer before disclosure unless prohibited by law or where notice would create a risk to life or safety.

10. Reporting

Suspected abuse, unauthorised crawling or any other breach of this AUP can be reported to info@nomisma.ai. Nomisma investigates reports promptly and does not disclose a reporter's identity to the party reported on except where required by law. Security vulnerabilities should be reported as described in the Security Overview and Vulnerability Disclosure.