Acceptable Use Policy

Last updated: February 23, 2026

Quick Summary

This summary is for convenience only. The full policy below governs your use of the service.

  • This policy supplements our Terms and Conditions.
  • Don't use the service for anything illegal or harmful.
  • API tokens are personal — don't share them or embed them in public repos.
  • We enforce rate limits; circumventing them is a violation.
  • Don't redistribute or resell our modules.
  • Violations may lead to warnings, suspension, or termination.

1. Introduction

This Acceptable Use Policy ("AUP") supplements our Terms and Conditions. It describes what you can and can't do with compliance.tf. Violating this policy may result in warnings, suspension, or termination of your account.

2. Prohibited Conduct

You agree not to use the Service to:

  • Engage in any illegal activity
  • Distribute malware, viruses, or other harmful code
  • Impersonate any person or entity
  • Harass, threaten, or abuse other users
  • Send spam or unsolicited communications
  • Interfere with the operation of the Service

3. Reverse Engineering

You may not decompile, disassemble, or reverse-engineer the Service or any part of it. You may not attempt to circumvent security features, extract source code, or derive proprietary algorithms from the Service. This includes attempting to reconstruct Terraform module source code beyond what's provided in your subscription.

4. Unauthorized Access

Don't probe, scan, or test our infrastructure for vulnerabilities without written permission. Don't attempt to access other users' accounts, data, or resources. Don't use the Service to gain unauthorized access to any system, network, or data.

5. Scraping and Automated Access

Automated access to the Service is only permitted through our official API using valid API tokens. Scraping, crawling, or any other automated data collection from the website is prohibited. Our CLI and API tokens are the authorized methods for programmatic access.

6. API Token Usage

API tokens are personal and non-transferable. Don't share your tokens with others. Don't embed tokens in public repositories, open-source projects, or any publicly accessible location. You're responsible for all activity that occurs under your tokens. If you believe a token has been compromised, revoke it immediately and contact us.

7. Rate Limits

We enforce rate limits to keep the service running smoothly for everyone. Attempting to circumvent, bypass, or exceed rate limits — including through multiple accounts, distributed requests, or other techniques — is a violation of this policy.

8. Resale and Redistribution

You may not resell, sublicense, or redistribute access to the Service. You may not redistribute Terraform modules obtained through the Service except as permitted by the End-User License Agreement. Each subscription is for the subscribing organization's internal use only.

9. Export Controls

You must comply with all applicable export control and sanctions laws, including those of Norway, the European Union, and the United States. See section 2 of our Terms and Conditions for details on sanctioned nations and territories.

10. Enforcement

We take a graduated approach to enforcement. Depending on the severity and nature of the violation, we may:

  • Issue a warning
  • Temporarily suspend your access
  • Permanently terminate your account

We'll try to give you notice before taking action, but we reserve the right to act immediately when necessary to protect the Service or other users. If you believe an enforcement action was taken in error, contact us through our Contact page to appeal.