Acceptable Use Policy
This Acceptable Use Policy ("AUP") governs the use of all services, systems, tools, access credentials, deliverables, and platforms provided by Ventaris Technology Group ("Company," "we," "us," or "our") to its clients and authorized users ("Client," "you," or "your"). This AUP is incorporated by reference into and forms part of the Master Services Agreement and Terms of Service between the Client and Ventaris Technology Group.
The purpose of this AUP is to protect the integrity, security, and reliability of our services; to safeguard the interests of all clients and third parties; and to ensure compliance with applicable law. By accessing or using any service provided by Ventaris Technology Group, you agree to comply with this AUP in its entirety.
1. Scope of Policy
This AUP applies to:
- All services delivered by Ventaris Technology Group, including managed IT, cybersecurity assessments, cloud services, consulting, and support
- Any systems, networks, portals, or tools to which Ventaris Technology Group grants the Client access in connection with a service engagement
- All users authorized by the Client to interact with Ventaris Technology Group systems or deliverables, including employees, contractors, and agents of the Client
- Any data, credentials, reports, configurations, or intellectual property provided by Ventaris Technology Group to the Client
You are responsible for ensuring that all authorized users within your organization are made aware of and comply with this AUP.
2. Permitted Uses
Use of Ventaris Technology Group services is permitted only for lawful, legitimate business purposes within the scope of the applicable engagement agreement.
- Accessing systems and tools provided by Ventaris Technology Group for the purposes defined in the applicable Statement of Work
- Using deliverables, reports, and documentation for internal business operations and decision-making
- Submitting support requests and communicating with Ventaris Technology Group personnel through authorized channels
- Providing information and access necessary for Ventaris Technology Group to deliver contracted services
- Using provided credentials to access client portals and reporting dashboards for legitimate operational purposes
3. Prohibited Uses
The following activities are strictly prohibited in connection with any Ventaris Technology Group service, system, or deliverable:
3.1 Unauthorized Access and System Abuse
- Accessing, probing, scanning, or testing any system, network, or service not expressly authorized in a signed engagement agreement
- Attempting to circumvent authentication controls, firewalls, access restrictions, or security configurations
- Using tools or techniques to escalate privileges beyond those explicitly granted
- Exploiting vulnerabilities identified during an engagement for any purpose other than remediation
- Sharing access credentials with unauthorized individuals or entities
- Accessing Ventaris Technology Group systems or personnel networks outside of the authorized scope of the engagement
3.2 Illegal and Harmful Activities
- Using any service in violation of any applicable federal, state, or local law or regulation
- Engaging or directing Ventaris Technology Group to engage in unauthorized penetration testing or offensive security activities against systems not owned or authorized by the Client
- Using services to transmit, store, or process material that is obscene, defamatory, fraudulent, or otherwise illegal
- Using services to facilitate extortion, ransomware deployment, or other criminal activity
- Attempting to evade regulatory compliance obligations through misuse of services
- Using service deliverables to misrepresent the security posture of systems to regulators, auditors, or third parties
3.3 Interference and Disruption
- Taking any action that interferes with, disrupts, or degrades Ventaris Technology Group systems, infrastructure, or service delivery to other clients
- Introducing malware, ransomware, spyware, or other malicious code into any system associated with a Ventaris Technology Group engagement
- Conducting denial-of-service attacks or load tests against systems without explicit written authorization
- Engaging in activities that generate excessive or unauthorized load on monitored infrastructure
3.4 Intellectual Property and Confidentiality
- Reproducing, distributing, or publicly disclosing Ventaris Technology Group proprietary methodologies, tools, templates, or frameworks without express written consent
- Reverse engineering any tool, script, or software provided by Ventaris Technology Group
- Using security assessment findings, vulnerability reports, or architecture documentation in a manner that could harm Ventaris Technology Group or its other clients
- Disclosing confidential information obtained through the engagement to unauthorized third parties
4. Cybersecurity Assessment Authorization
Cybersecurity assessment, penetration testing, vulnerability scanning, and related security evaluation services carry specific authorization requirements. Before any such service commences, the Client must provide:
- A signed Rules of Engagement document specifying the authorized scope, target systems, timeframes, and testing methodologies
- Written confirmation that the Client holds legal ownership of or explicit written authorization from the owner of all in-scope systems
- Contact information for individuals authorized to halt testing activities in an emergency
- Confirmation of any regulatory or compliance obligations that may affect testing activities
Ventaris Technology Group will not perform any security testing activity beyond the boundaries defined in the signed authorization documentation. The Client assumes full legal responsibility for ensuring that proper authorization exists for all in-scope systems and assets.
5. Reporting Violations
If you become aware of any violation of this AUP, whether by your own users or by a third party, you are encouraged to report it promptly to Ventaris Technology Group at info@ventaristechnologygroup.com. Include as much detail as possible, including the nature of the violation, systems involved, and any relevant timestamps or evidence.
We take all reported violations seriously and will investigate promptly. Reports made in good faith will be treated confidentially to the extent permitted by law.
6. Consequences of Violation
Violations of this AUP may result in the following actions, at the sole discretion of Ventaris Technology Group:
The severity of the response will be proportional to the nature and impact of the violation. Ventaris Technology Group reserves the right to preserve and disclose any information necessary to satisfy applicable law, respond to legal process, or protect the rights and safety of Ventaris Technology Group, its clients, and the public.
7. Amendments
Ventaris Technology Group reserves the right to update this AUP at any time to reflect changes in services, technology, legal requirements, or security practices. Material changes will be communicated to active Clients with at least fifteen (15) days advance notice. Continued use of services after the effective date of any revision constitutes acceptance of the updated AUP.
7575 E Redfield Rd
Scottsdale, AZ 85260