Skip to content
SafeTrace
Sign inStart a trial

Draft, requires legal review. These documents are drafts and are not yet in force. Text in [square brackets] is still to be completed or confirmed.

SafeTrace Acceptable Use Policy

Version 0.1 (draft for legal review), 13 October 2026. Not yet in force.

This policy forms part of the SafeTrace Terms of Service. It applies to everyone who uses SafeTrace, including through the API. If you break it, we may remove content or suspend access under clause 6 of the Terms.

You must not

  1. Use the Service in breach of any law, including data protection law.
  2. Upload personal data that you have no lawful basis to process, or more personal data than your purpose needs.
  3. Enter patient information, or use SafeTrace as an electronic patient record or clinical record. Keep notes and photos to the equipment, and make sure photos do not show patients or their information.
  4. Record a test result, declaration, release or override that you know to be false, or record a test as carried out by someone who did not carry it out.
  5. Share your sign-in details or authenticator, let anyone else use your account, or release equipment on someone else's behalf.
  6. Upload content that is unlawful, defamatory or harassing, or that infringes someone else's intellectual property or confidentiality, including copying manufacturers' service manuals into procedures beyond what the law allows.
  7. Upload malware, or files designed to exploit software. Do not disguise a file's type.
  8. Try to access organisations, clients or records you have not been given access to. This includes probing for other customers' data, guessing identifiers, or getting around role, client or API scope restrictions.
  9. Test the Service's security, load or vulnerabilities without our written permission. We welcome responsible disclosure to [SECURITY EMAIL].
  10. Interfere with the Service. This includes exceeding API rate limits on purpose, scraping, or attempts to disrupt it for others.
  11. Share API keys outside the system they were created for, or embed them in software that others can read.
  12. Resell or make the Service available to third parties, except giving your own clients, auditors and advisers access for your own purposes.
  13. Reverse engineer the Service, or copy it to build a competing product, except where the law allows.
  14. Tamper with evidence, reports or audit records, or present a watermarked or unreleased report as a released one.

Reporting

Report misuse or a suspected security issue to [SECURITY EMAIL]. If you think someone has accessed your organisation without permission, tell your organisation's owner and us straight away.