Skip to content

Acceptable Use Policy

Last updated 2026-10-13 · Version 1.0

This Acceptable Use Policy (“AUP”) is part of the Subscription Agreement and applies to everyone who uses the Service through a Customer’s Tenant. Capitalized terms not defined here have the meanings given in the Subscription Agreement.

1. Managing devices and people

You must not use the Service to:

  1. enroll or manage a device that you do not own or are not legally authorized to manage;
  2. track, monitor, or locate a person covertly, or in a way that is unlawful, including stalking, harassment, or surveillance of a partner, family member, or other individual without their knowledge and a lawful basis;
  3. collect information about End Users without the notices and consents required by law;
  4. intercept communications, or collect network, location, or usage information, in violation of wiretapping, electronic communications, or employee-monitoring laws;
  5. lock, erase, or otherwise interfere with a device to extort, coerce, or harm its user, or to withhold a device or its data unlawfully.

2. Harmful content and code

You must not use the Service to:

  1. distribute malware, ransomware, spyware, or other harmful code through scripts, app or package deployment, or any other feature;
  2. distribute software or content that infringes intellectual property rights, or that you are not licensed to distribute;
  3. store or transmit content that is unlawful.

3. Protecting the Service

You must not:

  1. access, or attempt to access, another customer’s Tenant or data, or circumvent tenant isolation, authentication, rate limits, usage limits, or other security or billing controls;
  2. probe, scan, or test the vulnerability of the Service, or load-test it, without our prior written permission. Good-faith security research reported to us under our disclosure process is welcome;
  3. interfere with or disrupt the Service, its infrastructure, or other customers’ use of it;
  4. reverse engineer the Service except as permitted by law, or use it to build a competing product;
  5. use credentials, tokens, or certificates issued to one device or user from another device or user;
  6. use automated means to access the Service other than through its documented APIs and the MCP server, within their limits.

4. Restricted data and laws

  1. Do not submit the restricted data described in Section 8 of the Subscription Agreement (health, payment card, and special category data).
  2. Do not use the Service in violation of export control or sanctions laws, or in or from a sanctioned country or by a sanctioned person.
  3. Do not resell, sublicense, or provide the Service to third parties, or manage other organizations’ devices as a service provider, without a separate written partner agreement with Xavier.

5. Enforcement

We may investigate suspected violations. If we reasonably believe this AUP has been violated, we may remove content, disable credentials, or suspend all or part of the Service as described in the Subscription Agreement, and may report unlawful activity to the authorities. To report abuse of the Service, use our contact form.