Acceptable Use

Our customers, partners, and other stakeholders depend on us to protect the data in our possession. This page describes how our staff are expected to use Risely’s systems and devices responsibly so that we safeguard that data.

Our approach

Risely is committed to safeguarding the data processed by our staff, software, and services. Everyone who interacts with our systems is responsible for exercising good judgment in how they use devices, data, and network resources, in accordance with our policies and standards and with applicable laws and regulations. These expectations apply to:

• any company-issued electronic, computing, storage, or network device;
• any company-owned systems accessed over the internet or an internal network, including servers, software, operating systems, storage, and network accounts; and
• any company-administered accounts with third-party services such as email, storage, infrastructure, software, APIs, and business systems, whether accessed from company devices or personal ones.

A shared responsibility

Risely has a culture of trust and integrity, and security is a company-wide effort that depends on cooperation from everyone who works with our systems. We take precautions to use systems appropriately and to avoid deliberately or inadvertently performing destructive or illegal actions. Company-issued devices and accounts are not personal property, and their use for personal reasons is limited.

Protecting critical data

• All data stored on computing and storage devices used for Risely’s work remains the property of Risely.
• Critical data must be handled and secured in accordance with our Data Classification Policy.
• Staff must promptly report the theft, loss, or unauthorized disclosure of any critical data.
• Staff may access, use, or share critical data only to the extent authorized and necessary to perform their job responsibilities.
• We reserve the right to audit and monitor systems, equipment, and networks at any time to ensure compliance with this policy.

Unacceptable use

Staff may not use Risely-managed resources for activities that are illegal or prohibited under applicable law. Prohibited activities include the following.

Systems and networks

• violating the intellectual property rights of any person or company, including unauthorized copying, distribution, or use of copyrighted material;
• exporting software, technical information, or encryption technology in violation of export control laws;
• introducing malicious programs into Risely networks or devices;
• misusing Risely devices or networks, for example for cryptocurrency mining or botnet control;
• sharing credentials for Risely-managed computers or third-party services, or allowing others to use your account or device (this does not apply to approved single sign-on or similar technologies);
• using Risely assets to procure or transmit material that violates sexual harassment policies or creates a hostile workplace;
• making fraudulent offers of products or services from a Risely account;
• accessing data or accounts you are not authorized to access, or disrupting network communication or computer processing;
• running network monitoring that intercepts data not intended for your device, except when troubleshooting for Risely;
• circumventing user authentication or the security of any host, network, or account used by Risely; and
• tunneling between network segments or security zones, except when troubleshooting for the benefit of Risely and its customers.

Email and communications

• forwarding confidential business emails or documents to personal external email addresses.

Where there is sufficient reason to do so, Risely may retrieve messages from archives and servers without prior notice. Where necessary, any such investigation is conducted with the knowledge of senior management.

Returning assets

All Risely-owned computing resources must be returned when someone leaves the company.

Questions

If you have any questions about this policy, contact us at [email protected].