- Responsible disclosure of a security issue is welcome and will not be treated as a violation — report it - privately rather than publicly. + Enforcement. Where use threatens the service or other tenants, we respond proportionately — + typically a warning first, then reduced rate limits, then suspension, and termination only for serious or + repeated violations. Where circumstances permit, notice is given before access is restricted.
++ Security research is welcome and is not a violation of these terms when reported privately. + Report findings through{" "} + GitHub Security Advisories{" "} + rather than a public issue — see{" "} + Security & Privacy FAQ{" "} + for what happens next. Do not access other tenants' data, degrade the service, or run automated scans + against production while testing. +
+ + +Open source. The Autopilot Monitor source code is published on GitHub under the licence stated in that repository. That licence governs the code — it does not grant rights to the hosted service, its infrastructure, its data, or the Autopilot Monitor name and branding.
+Your data stays yours. Enrollment telemetry, configuration, and diagnostics belong to your organization. Using the service grants only the rights needed to operate it for you, as described in the Privacy Policy.
+Rules you contribute are covered by the licence grant described under "Your Data, Suspension and Termination" below.
+Third-party components remain the property of their respective owners and are used under their own licences; see the attributions below.
+