Acceptable use policy

This acceptable use policy covers Risved Cloud, the managed deployment service provided by AN (Rådhusvej 48, 2920 Charlottenlund, Denmark) under any ongoing agreement. It is designed to protect us, our customers, and the wider internet from unethical, irresponsible, and illegal activity.

It does not cover the open-source Risved core, which you run on your own infrastructure under the AGPL-3.0 licence and under whatever policies your own provider sets.

Customers found engaging in activities prohibited by this policy may have their service suspended and their account terminated. In extreme cases we may be legally obliged to report them to the relevant authorities.

This policy was last reviewed on 9 September 2026.

What Risved Cloud is for

Risved Cloud runs web applications. You connect a Git repository, we build it into a container and serve it over HTTP behind a managed reverse proxy on infrastructure we operate.

It is not a general-purpose virtual server. You do not receive shell or root access to the machine, and the machine is not yours to repurpose. Anything that is not a web application or a service supporting one falls outside what the platform is for, and much of it is prohibited below.

Fair use

We provide our facilities on the assumption that your use will be business as usual, as described in your plan. If your use is excessive, we may charge additional fees or restrict capacity.

We are opposed to all forms of abuse, discrimination, rights infringement, and any action that harms or disadvantages a group, an individual, or a shared resource. We expect our customers and their end users to engage with our products in the same spirit.

Customer accountability

We regard customers as responsible for their own actions and for the actions of anyone using our products with their permission. That responsibility extends to anyone using our products without authorisation as a result of the customer failing to put reasonable security measures in place.

By accepting our products, customers agree to ensure adherence to this policy on behalf of their end users. Complaints about a customer or their end users will be forwarded to the nominated contact for the account.

If a customer, their end user, or anyone using our products as a result of the customer violates this policy, we may terminate any products associated with the offending account, terminate the account itself, or take any remedial or preventative action we consider appropriate, without notice. To the extent permitted by law, no credit is available for interruptions of service resulting from a violation of this policy.

If your application accepts user-generated content, you are responsible for what your users publish through it, and we expect you to have a way to receive abuse reports and act on them. We will not police your users for you, but we will hold you accountable for systemic abuse originating from your deployment.

Prohibited activity

Illegal material and rights infringement

Our products must not be used to transmit, distribute, or store material in violation of any applicable law. This includes but is not limited to material protected by copyright, trademark, trade secret, or other intellectual property right used without proper authorisation, and material that is obscene, defamatory, constitutes an illegal threat, or violates export control law.

Child sexual abuse material is reported to law enforcement without notice and without exception.

You are solely responsible for all material you input, upload, transmit, create, or publish through our products, and for obtaining legal permission to use any works included in it.

Spam and unsolicited messaging

Our products must not be used to send unsolicited bulk or commercial messages in violation of the laws applicable to your jurisdiction. This includes sending spam, soliciting customers from spam sent through other providers, and collecting replies to spam sent through other providers.

Mailing lists run on our products must be confirmed opt-in. Verification of the recipient's express permission must be available for the lifespan of the list. Lists or databases purchased from third parties for this purpose are prohibited.

This applies to messages sent using our products, and to messages sent from any network that refer the recipient to a site hosted on our products.

Malicious and exploitative activity

Our products must not be used to distribute malware, ransomware, or exploit kits; to operate command-and-control infrastructure; or to host phishing pages or credential harvesting.

Our products must not be used for network sniffing, pinging, packet spoofing, flooding, mail-bombing, port scanning, brute-force attempts, or denial-of-service attacks, whether against our infrastructure or anyone else's.

Our products must not be used to access any account or electronic resource that you do not own or are not authorised to access.

Our products must not be used to harass another group or individual. Harassment includes denial-of-service attacks, hate speech, advocacy of racial or ethnic intolerance, and any activity intended to threaten, abuse, infringe the rights of, or discriminate against any group or individual.

Also prohibited: obtaining or attempting to obtain services from us with intent to avoid payment; using our facilities to obtain services from another provider with intent to avoid payment; unauthorised access, alteration, or destruction of information about our customers or end users; interfering with other customers' use of our facilities; publishing content or links that incite violence, depict a violent act, or threaten anyone's health and safety; any act in violation of consumer protection law; and any violation of a person's privacy.

Our products may not be used by any person or entity involved in, or suspected of involvement in, illegal gambling; terrorism; narcotics trafficking; arms trafficking; or the proliferation, development, manufacture, or use of nuclear, chemical, or biological weapons, weapons of mass destruction, or missiles, including any affiliation with others who support such activities.

Infrastructure misuse

Our products must not be used to run VPN endpoints, open or private proxies, SOCKS servers, Tor relays or exit nodes, or any service whose purpose is to forward third-party traffic or obscure its origin.

Our products must not be used to mine cryptocurrency, or to run proof-of-work or comparable workloads whose primary purpose is consuming compute rather than serving your application.

Our products must not be resold as raw compute, storage, or bandwidth. You may run your own product on Risved Cloud and serve your own customers through it; you may not offer shell, virtual machine, or container access to third parties.

Our products must not be used to attempt to escape container isolation, to reach other customers' data or resources, to reach infrastructure metadata services, or to circumvent quotas, metering, or billing.

You are also bound by the acceptable use policy of the infrastructure provider hosting your deployment. Where that policy is stricter than this one, it applies.

Unauthorised use of Risved property

We prohibit impersonation of Risved, representation of a significant business relationship with Risved, or claimed ownership of any Risved property including our products and brand, for the purpose of fraudulently gaining service, custom, patronage, or user trust.

Reporting abuse

Email abuse@risved.com. Include the domain or IP address, what you observed, and timestamps with the timezone. We aim to acknowledge reports within one business day, and to act on credible reports of active harm, such as malware distribution, phishing, or ongoing attack traffic, within hours.

How we enforce this

Our normal response is graduated. We contact you, describe the problem, and give you a reasonable window to fix it. Most issues are misconfiguration rather than intent, and we would rather you fixed them than lost your deployment.

Where there is active harm to others, we act first and explain afterwards. That can mean suspending a deployment immediately, and in severe or repeated cases terminating the account.

Suspension stops your application serving traffic; your data is retained. Termination archives and then deletes your infrastructure according to our normal retention schedule. We will tell you what we did and why, except where the law prevents us or where notice would frustrate a law enforcement investigation.

About this policy

This policy outlines a non-exclusive list of activities and intent we consider unacceptable. We reserve the right to decline or discontinue service to anyone.

We may modify this policy at any time by publishing the revised version on our website. The revised version takes effect from the earlier of:

• the date you use our products after we publish the revised version; or
• 30 days after we publish the revised version.

Questions: legal@risved.com