Vigia acceptable use policy

AI draft for legal review. This is a first draft prepared with AI assistance for 365solutions. It is not legal advice. It must not be published until a qualified South African attorney has reviewed it in full. Points the lawyer must confirm are listed in section 9.

Version 0.1 (draft) · 9 November 2026 · Website footer: Acceptable use · forms part of the subscription agreement

1. Who this applies to

1.1 This policy applies to every security company that subscribes to Vigia (the "Customer") and to everyone who uses Vigia through it: staff, clients, households and members ("Users"). The Customer is responsible for its Users following it.

1.2 Words defined in the subscription agreement have the same meaning here.

2. Use Vigia lawfully

You must not use Vigia to:

(a) break any law, including data protection, labour, private-security, firearms, interception and monitoring, consumer protection and tax laws;

(b) commit or help commit any offence under the Cybercrimes Act 19 of 2020, or any fraud;

(c) collect, store or share personal information without a lawful basis, or beyond the purposes in your notices to staff and clients;

(d) track or monitor any person in a way the law does not allow — in particular, staff must not be tracked off duty, and residents' details must not be exposed to other residents without consent;

(e) harass, threaten, defame or discriminate against anyone.

3. Protect the safety features

The safety features (panic, duress, man down, welfare checks, dispatch) protect people. You must not:

(a) raise false or test panic, duress or alarm events except in a test mode or a drill announced to your command centre;

(b) configure Vigia to hide, delay or suppress safety alerts;

(c) tell staff or clients to rely on Vigia as their only means of calling for help (subscription agreement clause 11).

4. Keep accounts and devices secure

You must:

(a) not share accounts, passwords, PINs or one-time codes;

(b) not enrol devices for anyone other than the person they are issued to, or let a guard clock in for another;

(c) not use mock-location tools, rooted or jailbroken devices, or modified apps to falsify location, attendance or presence checks;

(d) report a lost or stolen device or a suspected account compromise to your administrator at once, and your administrator must revoke it.

5. Respect the platform and other customers

You must not:

(a) try to access another customer's data, or data in your own account that your role does not allow;

(b) probe, scan or test the security of Vigia without our written permission (use the responsible disclosure route in our security statement);

(c) upload malware, or files designed to evade our checks;

(d) overload the service — for example through scripts that exceed the published rate limits — or use the API outside its documentation and your Plan;

(e) reverse-engineer, copy or resell Vigia except as your Order allows;

(f) use Vigia to build a competing product, or to benchmark it publicly without our consent.

6. Messages

6.1 You must not use Vigia's SMS, WhatsApp, email or push features to send:

(a) unsolicited marketing, unless the recipient consented or is an existing customer and can opt out (POPIA section 69, ECTA section 45);

(b) misleading, unlawful or offensive content;

(c) one-time codes, passwords or personal information to anyone other than the intended person.

6.2 You must follow the rules of the messaging channels (for example WhatsApp's business policies and mobile operators' rules on sender IDs).

7. Evidence and records

You must not:

(a) alter or delete records to mislead your clients, insurers, a regulator, the police or a court (corrections are made through Vigia's correction process, which keeps the original);

(b) disclose incident evidence except through Vigia's logged disclosure links or as the law requires;

(c) upload content you have no right to use.

8. What we may do

8.1 If we reasonably believe this policy has been broken, we may investigate, remove the content concerned, suspend the User or device, or suspend the Service as the subscription agreement clause 9 allows. We will keep the safety path running wherever we safely can, and tell the Customer's administrator unless the law prevents us.

8.2 We may report suspected crimes to the authorities and co-operate with lawful requests.

9. Points for legal review

1. Whether clause 2(d) and clause 3 should be stated as Customer warranties in the subscription agreement as well.
2. Interaction of clause 8.2 with the Cybercrimes Act reporting provisions and with confidentiality under the DPA.
3. Whether the restriction on public benchmarking (clause 5(f)) is acceptable under competition law.