Code of Conduct

This Code of Conduct sets out the standards of behaviour that apply to everyone who accesses or uses the SeqOps website, software, Monitoring Agent, Cloud Platform and related Services, including Users, Partners, Partner Users and any person acting on their behalf (each referred to in this Code as “you”).

This Code of Conduct is referred to in, and is binding under, the Terms and Conditions for Users and the Terms and Conditions for Partners (together, the “Terms”). Capitalised terms not defined in this Code have the meanings given to them in the applicable Terms. In the event of any inconsistency between this Code and the Terms, any Master Service Agreement or any Data Processing Agreement, those documents shall prevail.

1.Purpose and Scope

1.1SeqOps provides a cloud-delivered platform that helps organisations understand and improve the security of their own infrastructure. This Code exists to keep the platform secure, lawful and trustworthy for everyone who uses it.

1.2This Code applies to all use of the Website and the Services, including use of AI-assisted functionality, integrations, support channels and any communication with SeqOps, other Users or Partners.

1.3Partners are responsible for ensuring that their Partner Users, personnel and any other persons acting on their behalf are made aware of and comply with this Code.

2.Authorised and Lawful Use

2.1You shall use the Services only for their intended purpose, being the monitoring, analysis and improvement of the security of systems, infrastructure, networks and cloud environments that you own or are authorised to monitor.

2.2You shall only deploy the Monitoring Agent, connect cloud accounts or otherwise use the Services in relation to systems for which you have lawful ownership or explicit authorisation. You shall not use the Services to monitor, scan or analyse any third-party system without such authorisation.

2.3You shall comply with all laws and regulations applicable to your use of the Services, including data protection, intellectual property, export control and sanctions laws.

2.4You shall not use the Services, or permit them to be used, by or for the benefit of any sanctioned or restricted party, or for any prohibited end use under applicable export control laws, including activities relating to weapons of mass destruction or prohibited military end uses.

2.5You shall not impersonate any person or entity, or misrepresent your affiliation with any person or entity.

3.Security of the Platform

3.1You shall not attempt to gain unauthorised access to the Website, the Services, the Cloud Platform or any related systems or networks, or to the accounts or data of any other User or Partner.

3.2You shall not probe, scan or test the vulnerability of SeqOps systems, or attempt to bypass any security, authentication, permission or usage controls, unless SeqOps has expressly authorised such activity in writing.

3.3You shall not transmit viruses, malicious code or harmful content, interfere with or disrupt the normal operation of the Services, or use bots, scrapers or other automated means to access the Services without SeqOps’s express written permission.

3.4You shall not copy, modify, sublicense, reverse engineer, decompile or attempt to access the source code of the Services or the Monitoring Agent, except to the extent permitted by mandatory law.

3.5Responsible disclosure: if you believe you have found a security vulnerability in the Services, please report it promptly to support@seqops.io, do not access, modify or retain data beyond what is necessary to demonstrate the issue, and allow SeqOps a reasonable period to address it before any disclosure.

4.Accounts and Access

4.1You shall keep your login credentials confidential and shall not share accounts. Each person using the Services should have their own individual user account.

4.2You should use multi-factor authentication where it is available and assign roles and permissions on a least-privilege basis, removing access promptly when it is no longer required.

4.3You shall notify SeqOps, and where applicable the relevant Partner, immediately if you suspect any unauthorised access to or use of an account.

5.Confidentiality and Data Protection

5.1You shall treat security findings, vulnerability information, system configurations and any other Confidential Information made available through the Services as confidential, and use it only for the purposes permitted under the Terms.

5.2Where you provide services to other Users, you shall only access the information that is relevant for the provision of those services, in accordance with the Terms, any relevant agreement with the User, this Code and applicable law.

5.3You shall not submit passwords, authentication secrets, payment card details, special categories of personal data or other unnecessary personal data through support channels, the website chatbot or other communication tools.

5.4You remain responsible for having an appropriate legal basis for any personal data you submit to or collect through the Services. Processing carried out by SeqOps on your behalf is governed by the applicable Data Processing Agreement.

5.5You shall not use information obtained through the Services to exploit or attack any system, or to disclose vulnerabilities of an identifiable organisation without that organisation’s authorisation.

6.AI-Assisted Functionality

6.1AI-generated outputs, alerts and recommendations are provided to support your decisions. You should review them before relying or acting on them; they do not replace appropriate professional or technical judgement.

6.2You shall not use AI-assisted functionality to generate malicious code, exploits or attack instructions, or attempt to circumvent the permissions, instructions or safeguards that apply to such functionality.

6.3You shall only submit information to AI-assisted functionality that you are entitled to submit.

7.Partner Business Conduct

7.1Partners shall ensure that information, prices, descriptions and commercial terms they provide to Partner Users in connection with the Services are accurate, complete and not misleading, and shall honour the terms they expressly offer to Partner Users.

7.2Partners shall respond to inquiries, expressions of interest and orders from Partner Users within a reasonable time.

7.3Partners shall comply with applicable anti-bribery and anti-corruption laws and shall not offer, give or accept any improper payment or advantage in connection with the Services.

7.4Partners shall not misrepresent their relationship with SeqOps, and shall not present SeqOps findings, reports or recommendations as a certification of compliance with any law, standard or regulatory framework.

8.Reporting and Enforcement

8.1If you become aware of any conduct that breaches this Code, please inform SeqOps without undue delay at support@seqops.io.

8.2SeqOps may investigate suspected breaches of this Code and may, in accordance with the Terms, suspend or terminate accounts, and take appropriate legal action.

8.3SeqOps will not take action against anyone for reporting a suspected breach of this Code in good faith.

9.Changes to this Code

9.1SeqOps may update this Code from time to time to reflect changes in the Services, its practices or applicable law. The updated version will be published on the SeqOps website and will state the date of the latest update.

10.Contact Us

If you have questions or concerns about this Code of Conduct, please contact us at support@seqops.io

Thank you for choosing SeqOps

SeqOps AB, Tynäsgatan 12 a, 652 16 Karlstad, Sweden.