Acceptable Use Policy

This Acceptable Use Policy ("Policy") establishes the rules governing access to and use of the Portal Platform™ and all services operated by JHS Solutions LLC ("Company," "we," "our," or "us").

The purpose of this Policy is to:

protect Users;

protect the integrity of electronic transactions;

maintain Platform security;

reduce fraud;

promote responsible use;

support compliance with applicable laws;

preserve the reliability and reputation of the Platform.

This Policy applies to every User, organization, developer, enterprise customer, administrator, signer, API consumer, contractor, and any other individual or entity accessing the Platform.

This Policy forms part of the Portal Platform Legal Suite™ and should be read together with:

LEGAL-001 — Master Terms of Service;

LEGAL-002 — Privacy Policy;

LEGAL-003 — Communications Policy;

LEGAL-004 — Security Policy;

LEGAL-005 — AI Services Policy;

LEGAL-006 — Electronic Signature Disclosure & Consent;

LEGAL-007 — Cookie Policy; and

all other applicable Platform policies.

1.1 Purpose

This Policy establishes acceptable standards governing access to and use of the Platform.

Its objectives include:

protecting customers;

protecting signers;

protecting enterprise organizations;

protecting electronic records;

preventing fraud;

protecting Platform infrastructure;

promoting lawful conduct;

maintaining trust in electronic transactions.

1.2 Scope

This Policy applies to all use of:

Portal Platform™;

eSignare®;

Customer Workspace;

Signer Portal;

Administrator Portal;

Trust Center™;

Certificate of Completion™;

Dispatch Center™;

AI Services;

APIs;

Mobile Applications;

Enterprise Services;

future Company products.

1.3 General User Responsibilities

Every User agrees to use the Platform:

lawfully;

honestly;

responsibly;

in good faith;

consistently with applicable laws;

consistently with contractual obligations;

in a manner that does not interfere with other Users or the Company's operations.

Users remain responsible for all activity conducted through their Accounts unless otherwise provided by applicable law.

1.4 Authorized Use

The Platform may only be used for legitimate business, personal, governmental, educational, nonprofit, or other lawful purposes.

Authorized use includes activities such as:

preparing documents;

requesting electronic signatures;

executing agreements;

verifying completed transactions;

managing records;

communicating through Platform services;

enterprise administration;

API integrations authorized by the Company;

AI-assisted workflows;

future authorized services.

1.5 Compliance with Law

Users shall comply with all applicable:

federal laws;

Florida laws;

state laws;

local laws;

regulations;

court orders;

governmental requirements;

contractual obligations;

professional responsibilities.

Users remain responsible for determining whether their particular use of the Platform complies with applicable law.

1.6 Good Faith Use

Users agree not to intentionally misuse the Platform or use Platform services in a manner designed to:

deceive;

manipulate;

harass;

intimidate;

interfere with operations;

damage the Company's reputation;

damage other Users;

circumvent security;

evade lawful obligations.

The Company reserves the right to investigate conduct that appears inconsistent with good-faith use.

1.7 Shared Responsibility

The Company provides technology that facilitates secure electronic transactions.

Users remain responsible for:

protecting their credentials;

reviewing documents;

maintaining accurate information;

ensuring authority to sign;

complying with legal obligations;

exercising independent judgment.

The Company does not supervise or control every action performed by Users.

1.8 Continuous Improvement

The Company may revise acceptable use requirements as:

technologies evolve;

cybersecurity threats emerge;

legal requirements change;

Platform capabilities expand;

enterprise requirements develop.

Updated policies become effective as described in the Master Terms of Service.

2.1 General Prohibition

Users shall not use the Platform in any manner that is unlawful, fraudulent, deceptive, abusive, harmful, or inconsistent with this Policy, the Master Terms of Service, or applicable law.

The Company reserves the right to investigate any activity reasonably believed to violate this Policy.

2.2 Fraudulent Activities

Users shall not knowingly use the Platform to:

commit fraud;

facilitate fraud;

conceal fraudulent conduct;

falsify records;

forge signatures;

impersonate another person;

misrepresent identity;

submit false information;

alter completed electronic records without authorization;

create deceptive audit trails;

manipulate Verification IDs;

interfere with Certificates of Completion™;

misrepresent authority to execute documents;

facilitate financial fraud;

facilitate identity theft.

The Company may immediately suspend access where fraudulent activity is reasonably suspected.

2.3 Identity Misrepresentation

Users shall not:

create false accounts;

impersonate individuals;

impersonate organizations;

use another person's credentials;

share authentication credentials without authorization;

falsify identity verification information;

misrepresent authority to act on behalf of another person or organization.

The Company may require additional identity verification whenever reasonably necessary.

2.4 Unauthorized Access

Users shall not attempt to:

gain unauthorized access;

bypass authentication;

bypass Multi-Factor Authentication;

circumvent security controls;

access restricted resources;

elevate privileges;

access another user's information;

interfere with administrative functions;

compromise APIs;

interfere with enterprise environments.

Unauthorized access attempts may result in immediate suspension and referral to appropriate authorities where warranted.

2.5 Cybersecurity Abuse

Users shall not engage in activities including:

hacking;

penetration attempts without written authorization;

malware distribution;

ransomware deployment;

phishing;

credential harvesting;

denial-of-service attacks;

distributed denial-of-service attacks;

brute-force attacks;

vulnerability exploitation;

malicious automation;

unauthorized security testing;

interception of communications;

session hijacking;

packet manipulation;

reverse engineering for malicious purposes.

Nothing in this Policy prohibits good-faith vulnerability reporting conducted in accordance with the Company's Responsible Disclosure procedures.

2.6 Harmful Content

Users shall not knowingly upload, distribute, transmit, or store content that:

violates applicable law;

contains malicious software;

facilitates criminal conduct;

promotes terrorism or violent extremism;

infringes intellectual property rights;

contains child sexual abuse material;

facilitates human trafficking;

contains unlawful obscene material;

violates court orders;

infringes privacy rights;

contains malicious code.

The Company reserves the right to remove or restrict access to prohibited content consistent with applicable law.

2.6A Document Safety, Restricted Documents and Upload Certification

Users may upload, transmit, store, prepare, send, or request signatures on documents only when they are authorized to possess and use those documents and when the contemplated use is lawful in each applicable jurisdiction.

Users shall not knowingly use the Platform for documents or content that are illegal, fraudulently created or used, malicious, unlawfully obtained, subject to governmental handling restrictions that prohibit use of the Platform, or otherwise prohibited by this Policy.

The Company may require a Document Upload Certification and may record the certification, timestamp, account, network information, document hash, and related security metadata for security, compliance, fraud-prevention, and audit purposes.

2.6B Classified, Restricted and Government-Controlled Information

The Platform is not an authorized system for classified national-security information or other government-controlled information that requires handling within an accredited, approved, restricted, or specially authorized information system.

Users shall not upload information marked or known to be classified, secret, top secret, confidential for national-security purposes, compartmented, restricted, export-controlled, defense-restricted, or otherwise subject to governmental handling rules that prohibit processing through the Platform.

Because similar words may appear in ordinary private documents, automated detection of a marking is a security signal only and is not a legal determination that information is classified. When a risk signal is detected, the Company may block the workflow or place the document in restricted quarantine pending appropriate review.

2.6C Sexual Exploitation and Explicit Adult Content

The Platform strictly prohibits child sexual abuse material, sexual exploitation of minors, non-consensual intimate material where prohibited by law, sexual trafficking material, and other illegal sexual content.

The Platform also prohibits use of eSignare document-signing services primarily to distribute or transact in pornographic or sexually explicit entertainment content, even where such material may be lawful in a particular jurisdiction, unless the Company expressly authorizes a specific use in writing.

Security controls may restrict access to suspected illegal sexual content and may use specialized handling procedures designed to reduce unnecessary human exposure and support legally required escalation.

2.6D Global and Jurisdiction-Specific Restrictions

This Policy establishes a global minimum standard. Additional restrictions may apply based on the User's location, the location of recipients, the origin or destination of information, the subject matter of the document, sanctions and trade controls, data-protection requirements, national-security rules, court orders, or other applicable law.

Where local law is more restrictive than this Policy, Users must comply with the more restrictive legal requirement. Availability of Platform functionality in a country does not mean that every document type or transaction is lawful in that country.

2.6E Automated Screening, Quarantine and Review

The Company may use automated and manual security controls to identify malware, malicious PDF features, suspicious document structures, fraud indicators, restricted-government markings, prohibited-content indicators, abuse patterns, and other safety risks.

Possible outcomes may include CLEAR, REVIEW, RESTRICTED, or MALICIOUS. A REVIEW or RESTRICTED outcome may prevent creation, sending, signing, sharing, or further processing of a document. A MALICIOUS outcome may result in immediate rejection.

Automated systems may produce false positives or false negatives. Safety decisions do not constitute legal advice or a determination of criminality, fraud, classification status, authenticity, or legal enforceability.

2.6F Enforcement, Preservation and Cooperation

Where reasonably necessary and legally permitted, the Company may preserve relevant hashes, metadata, security logs, account records, and quarantined data for security investigation, dispute handling, legal compliance, or protection of the Platform.

The Company may restrict, suspend, or terminate access and may cooperate with lawful governmental requests or fulfill reporting obligations where required by applicable law. The Company will not represent routine automated screening as a substitute for governmental classification review, law-enforcement investigation, or judicial determination.

2.7 Intellectual Property Violations

Users shall not use the Platform to:

knowingly infringe copyrights;

violate trademarks;

misappropriate trade secrets;

distribute unauthorized software;

reproduce protected works without authorization;

remove ownership notices;

circumvent technological protection measures.

Users remain responsible for ensuring they possess appropriate rights to documents uploaded to the Platform.

2.8 AI Misuse

Users shall not use AI Services to:

generate fraudulent documents;

impersonate individuals;

create deceptive communications;

facilitate cybercrime;

evade legal obligations;

automate unlawful activity;

generate phishing campaigns;

bypass Platform safeguards;

knowingly submit harmful prompts intended to compromise AI systems.

The Company may suspend AI functionality for Users who violate this Policy.

2.9 API Abuse

Users shall not:

exceed authorized API usage;

circumvent rate limits;

share API credentials without authorization;

attempt unauthorized API access;

scrape Platform data;

perform unauthorized automated harvesting;

interfere with API availability;

use APIs contrary to published documentation.

API access may be suspended immediately where abuse is detected.

2.10 Communications Abuse

Users shall not use the Platform to:

send spam;

transmit unsolicited bulk communications;

distribute malware;

conduct phishing campaigns;

send deceptive communications;

evade communication consent requirements;

harass recipients;

abuse Dispatch Center™ services;

manipulate communication records.

The Company reserves the right to suspend communication capabilities where abuse is reasonably suspected.

2.11 Payment Abuse

Users shall not:

submit fraudulent payment information;

initiate abusive chargebacks;

use stolen payment methods;

manipulate subscription systems;

exploit trial programs;

create multiple accounts to avoid subscription fees;

interfere with billing operations.

The Company reserves all rights available under applicable law to recover unpaid amounts and investigate payment fraud.

2.12 Platform Interference

Users shall not intentionally interfere with:

Platform availability;

software functionality;

network operations;

authentication services;

electronic signature workflows;

Trust Center™;

Dispatch Center™;

Certificate of Completion™ generation;

reporting systems;

administrative functions;

future Platform services.

2.13 Automated Abuse

Except as expressly authorized by the Company, Users shall not deploy:

bots;

crawlers;

scrapers;

automated account creation tools;

automated signature systems;

unauthorized robotic process automation;

automated credential testing;

unauthorized AI agents.

Authorized enterprise integrations and approved APIs are excluded from this restriction.

2.14 Investigations

The Company may investigate suspected violations of this Policy.

Investigative actions may include:

review of audit logs;

review of authentication records;

review of communication records;

review of transaction metadata;

consultation with service providers;

temporary account restrictions;

requests for additional verification;

preservation of relevant evidence;

cooperation with law enforcement where legally appropriate.

Investigations will be conducted in accordance with applicable law and the Company's legal obligations.

2.15 Enforcement

Where the Company reasonably believes this Policy has been violated, it may take one or more actions including:

issuing warnings;

requiring corrective action;

suspending specific features;

suspending AI Services;

suspending API access;

suspending communications;

temporarily restricting accounts;

permanently terminating accounts;

removing prohibited content;

cancelling subscriptions where permitted by law;

reporting unlawful conduct to appropriate authorities;

pursuing civil remedies;

exercising any additional rights available under applicable law or contract.

The Company will determine appropriate enforcement measures based on the nature, severity, frequency, and circumstances of the conduct.

3.1 Ongoing User Responsibilities

Users remain responsible for using the Platform in a lawful, ethical, and responsible manner.

Users agree to:

maintain accurate account information;

safeguard authentication credentials;

enable available security features, including Multi-Factor Authentication (MFA), where appropriate;

promptly report suspected unauthorized access;

review documents before sending or signing;

maintain authority to act on behalf of themselves or any represented organization;

comply with applicable laws and regulations;

cooperate with reasonable security or compliance inquiries.

Users are responsible for all activity occurring under their accounts unless otherwise required by applicable law.

3.2 Reporting Violations

The Company encourages Users to promptly report suspected violations of this Policy, including:

fraud;

identity theft;

phishing;

unauthorized account access;

malware;

abusive communications;

intellectual property violations;

AI misuse;

API abuse;

cybersecurity vulnerabilities;

unlawful content.

Reports may be submitted through the Company's designated support, compliance, or security contact channels.

3.3 Investigation Procedures

When investigating suspected violations, the Company may:

review audit logs;

review authentication records;

review communication records;

review document metadata;

review transaction history;

consult third-party service providers;

preserve relevant evidence;

temporarily restrict Platform access;

request additional information or verification;

cooperate with law enforcement or regulatory authorities where legally required.

Investigations will be conducted in a manner reasonably designed to protect Platform security, Users, and applicable legal rights.

3.4 Suspension of Services

The Company may temporarily suspend access to all or part of the Platform where it reasonably believes that suspension is necessary to:

protect Users;

protect Platform security;

investigate suspected misconduct;

prevent fraud;

respond to cybersecurity threats;

comply with applicable law;

protect intellectual property;

preserve system integrity.

Suspension may occur with or without prior notice where immediate action is reasonably necessary.

3.5 Termination

The Company may terminate Accounts or restrict access where Users:

materially violate this Policy;

repeatedly violate Platform rules;

engage in unlawful activity;

compromise Platform security;

misuse AI Services;

abuse communications systems;

abuse payment systems;

misuse APIs;

interfere with Platform operations;

engage in fraudulent conduct.

Termination does not relieve Users of obligations that survive termination under the Master Terms of Service or applicable law.

3.6 Appeals

Where appropriate and consistent with security, legal, and operational considerations, Users whose Accounts have been suspended or terminated may request a review by contacting the Company through designated support or compliance channels.

Submission of an appeal does not guarantee reinstatement.

The Company reserves the right to deny reinstatement where it reasonably determines that continued access presents unacceptable legal, security, operational, or business risk.

3.7 Reservation of Rights

The Company reserves all rights available under:

applicable law;

contract;

equity;

intellectual property law;

consumer protection law;

cybersecurity law;

common law;

other applicable legal authorities.

Failure to enforce any provision of this Policy on one occasion shall not constitute a waiver of the Company's right to enforce that provision or any other provision in the future.

3.8 Availability Disclaimer

The Platform is provided on an "AS IS" and "AS AVAILABLE" basis.

The Company does not guarantee:

uninterrupted availability;

continuous access;

compatibility with every device;

uninterrupted communications;

uninterrupted AI Services;

uninterrupted API availability;

uninterrupted cloud services.

Operational interruptions may occur due to maintenance, cybersecurity events, third-party provider issues, Internet outages, force majeure events, or other circumstances beyond the Company's reasonable control.

3.9 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES ARISING FROM:

enforcement of this Policy;

suspension of Accounts;

termination of Accounts;

removal of content;

cybersecurity incidents;

communications interruptions;

AI Service interruptions;

third-party service failures;

Internet outages;

force majeure events.

Nothing in this section limits liability that cannot lawfully be limited.

3.10 Relationship to Other Policies

This Acceptable Use Policy forms part of the Portal Platform Legal Suite™ and should be interpreted together with:

LEGAL-001 — Master Terms of Service;

LEGAL-002 — Privacy Policy;

LEGAL-003 — Communications Policy;

LEGAL-004 — Security Policy;

LEGAL-005 — AI Services Policy;

LEGAL-006 — Electronic Signature Disclosure & Consent;

LEGAL-007 — Cookie Policy;

LEGAL-009 — Trust Center™ Policy;

LEGAL-010 — Record Retention Policy;

LEGAL-011 — Accessibility Statement;

LEGAL-012 — Subprocessors & Third-Party Services;

LEGAL-013 — Data Processing Addendum;

LEGAL-014 — Enterprise Terms;

LEGAL-015 — eSignare Notary™ Terms;

LEGAL-016 — IPEN & RON Supplement;

and any additional policies adopted by the Company.

Where another policy governs a more specific subject, that policy shall control with respect to that subject matter while this Acceptable Use Policy governs the general standards for Platform use.

3.11 Amendments

The Company may revise this Policy to reflect:

changes in technology;

legal developments;

cybersecurity risks;

operational improvements;

Platform enhancements;

new products and services;

regulatory guidance.

Material revisions will be communicated using reasonable electronic methods where required by applicable law.

Continued use of the Platform following the effective date of revised policies constitutes acceptance of the updated Acceptable Use Policy to the extent permitted by applicable law.

3.12 Contact for Acceptable Use Questions

Questions regarding this Acceptable Use Policy or the reporting of prohibited activities may be submitted to:

JHS Solutions LLC

Email: support@esignare.com

Support is available for matters including:

Reporting Abuse

Reporting Fraud

Unauthorized Access

Intellectual Property Concerns

Platform Misuse

Account Restrictions

Appeals of Enforcement Actions

Acceptable Use Questions

General Customer Support

Additional contact methods and support resources may be published through the Portal Platform™ from time to time.

Where required by applicable law, the Company may designate a compliance or legal representative to assist with acceptable use-related inquiries.

3.13 Severability

If any provision of this Policy is determined by a court of competent jurisdiction to be invalid, illegal, or unenforceable, the remaining provisions shall remain in full force and effect.

Any invalid provision shall be interpreted or modified only to the extent necessary to preserve its intended purpose while maintaining the overall effectiveness of this Policy.

ACKNOWLEDGMENT

BY ACCESSING OR USING THE PORTAL PLATFORM™, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO COMPLY WITH THIS ACCEPTABLE USE POLICY.

FAILURE TO COMPLY WITH THIS POLICY MAY RESULT IN SUSPENSION, TERMINATION, LEGAL ACTION, OR OTHER REMEDIES AVAILABLE TO THE COMPANY UNDER APPLICABLE LAW.