Acceptable Use and Information Security Policy

1. Required safeguards

• Use only approved devices, networks, browsers, storage locations, and communication channels.
• Use multi-factor authentication when required and never disclose or approve an authentication request you did not initiate.
• Verify recipients before sending carrier, driver, claim, contract, or compliance information.
• Store exports and downloaded files only in approved locations and delete local copies when no longer needed.
• Report phishing, misdirected communications, lost devices, suspicious prompts, and unauthorized access immediately.

2. Prohibited activities

• Accessing or attempting to access carriers, users, documents, communications, or functions outside your assigned role or carrier scope.
• Sharing credentials, passwords, verification codes, recovery methods, authenticator approvals, or active sessions, or approving a sign-in you did not initiate.
• Disabling, bypassing, probing, or interfering with authentication, authorization, monitoring, audit, retention, or other security controls.
• Sending, copying, uploading, or storing protected information in personal email, consumer storage, public AI services, or any other unapproved system.
• Bulk scraping, unapproved automation, excessive downloading, mass export, or systematic collection of platform data.
• Altering, concealing, falsifying, destroying, or deleting records to evade an audit, investigation, retention requirement, or legal or contractual obligation.
• Uploading malware, executable code, unapproved software, unlawful content, or material unrelated to authorized Amin Consulting Group business.
• Disclosing confidential information to an unauthorized person or failing to verify a recipient before sending protected information.
• Using unapproved devices, networks, browsers, removable media, applications, or communication channels to access or handle platform information.
• Photographing, screen-capturing, printing, or reproducing sensitive information without an authorized business need and approved safeguards.
• Using platform information to harass, discriminate, retaliate, misrepresent, compete improperly, or pursue any unauthorized personal or commercial purpose.

3. Incident response and cooperation

Users must promptly preserve relevant information and cooperate with authorized security, compliance, legal, and management reviews. Do not independently notify outside parties about a suspected incident unless authorized.

4. Enforcement

Violations may result in access restriction, revocation, disciplinary action, contractual remedies, or referral to appropriate authorities, consistent with applicable law and organizational policy.