1. Lawful and authorised use
Users must use AtlastFMS only for a lawful business purpose and only for data, accounts, organisations, banks and tax authorities they are authorised to manage. Users must not impersonate another person, mislead a regulator, conceal who approved an action, infringe rights, or upload content they have no right to process.
2. Security and service integrity
Users must not introduce malware; obtain or test another tenant's data; bypass authentication, rate limits, confirmation gates or billing controls; probe or scan without prior written authorisation; disrupt availability; scrape at unreasonable volume; or use unsupported automation or credentials. Coordinated security testing can be agreed through contact@atlastfms.com.
3. Financial, tax and connected-service integrity
Users must not falsify records or evidence, submit information they know is materially false, misuse HMRC or Open Banking authority, manipulate invoices or payment links for fraud, or use AI output without the review required by the product. Provider terms and applicable laws must be followed.
4. Prohibited content and data
Users must not use the service to facilitate fraud, tax evasion, money laundering, sanctions evasion, harassment, exploitation, unlawful discrimination or intellectual-property infringement. Special-category, criminal-offence, children's or high-risk identity data must not be uploaded unless necessary, lawful, proportionate and suitable for the selected business workflow.
5. Response and reporting
We may investigate, preserve evidence, restrict the affected feature or suspend access proportionately where reasonably necessary to protect the service or comply with law. We will normally explain the issue and allow remediation unless doing so would create risk or breach law. Report suspected misuse to contact@atlastfms.com.