Acceptable Use Policy

This Acceptable Use Policy ("AUP") governs your use of Lucitra's services, including engagements, Agent Teams, and this website (the "Services"). It is incorporated by reference into our Terms of Service. Lucitra, Inc. ("Lucitra") may update this AUP, and material changes will be posted here.

1. Permitted Uses

The Services put agent teams on scoped work under human approval. Permitted uses include:

• Building, maintaining, and migrating software in codebases you control or are authorized to work in
• Research, evidence synthesis, and due diligence where conclusions are traced to sources
• Running agent teams under governance policies, budgets, and approval gates
• Integrating that work into your own review, CI, and deployment processes
• Academic research and educational use

2. Prohibited Uses

You may not use the Services for any of the following:

• Weapons systems. Autonomous weapons, weapons targeting, or other lethal autonomous systems.
• Mass surveillance. Monitoring of individuals at population scale, or any surveillance of people without a lawful basis.
• Deceptive content. Generating disinformation, synthetic media intended to deceive, or content impersonating a real person or organization.
• Unauthorized access. Directing agents at systems, accounts, or data you are not authorized to access.
• Clinical decision-making without a clinician. Presenting agent output as a diagnosis, a treatment decision, or advice to a patient. Healthcare output is reviewed by a qualified person before it reaches anyone it concerns.
• Illegal activity. Any use that violates applicable local, state, national, or international law.
• Circumventing controls. Disabling, evading, or misrepresenting the approval, budget, or audit controls, including configuring an approval step to be satisfied by an agent rather than a person.
• Credential abuse. Sharing credentials with unauthorized parties, or using credentials obtained through unauthorized means.
• Service disruption. Deliberately overloading, disrupting, or degrading the Services.

3. Health and Regulated Data

Do not place protected health information into the Services before a Business Associate Agreement is executed. If you are unsure whether data in scope qualifies, ask legal@lucitra.ai before it is transferred, not after.

The same principle applies to other regulated categories. Tell us what constraints apply to your data before work starts, so the controls can be set correctly rather than retrofitted.

4. Fair Use

Use of the Services is subject to fair use and to the limits set in your engagement agreement. Automated integrations should include reasonable backoff and retry behavior. We may throttle or suspend usage that generates load disproportionate to legitimate use.

5. Export Control

The Services are subject to US export control laws and regulations. You may not use the Services if you are located in, or are a national or resident of, a country subject to comprehensive US sanctions. You are responsible for compliance with applicable export control and sanctions laws.

6. Abuse Reporting

Report use of the Services that violates this AUP to abuse@lucitra.ai. Security vulnerabilities go to security@lucitra.ai. We investigate all reports.

7. Consequences of Violation

Violations may result in:

• A written warning with a remediation period
• Temporary suspension of access
• Termination of the account or engagement
• Reporting to law enforcement where required

We will make reasonable efforts to notify you before acting, except where immediate action is necessary to protect the Services, another customer, or a person.