ACCEPTABLE USE & CLIENT RESPONSIBILITIES POLICY

SAI Technology

Effective Date: December 15, 2025

Last Updated: December 15, 2025

Approved By: Management, SAI Technology

1. PURPOSE

This policy defines acceptable and prohibited use of systems, platforms, and services provided or managed by SAI Technology and outlines the responsibilities of clients and their authorized users.

The objectives are to:

Protect system security, reliability, and performance
Ensure lawful and ethical use of technology services
Clearly define client obligations and boundaries
Prevent misuse that could expose SAI Technology or other clients to risk

2. SCOPE

All client institutions engaging SAI Technology
All users accessing platforms or systems managed by SAI Technology
All services including hosting, managed platforms, integrations, support, and automation

3. ACCEPTABLE USE

Clients and their users must use SAI Technology systems:

Only for lawful, authorized business purposes
In accordance with applicable laws and regulations
In line with documented system functionality and service agreements

Acceptable use includes:

Accessing systems using authorized credentials
Uploading and processing data relevant to the client’s operations
Using platforms in a manner that does not degrade performance or security

4. PROHIBITED ACTIVITIES

Clients and users must not engage in activities including, but not limited to:

4.1 Security Violations

Attempting to bypass authentication or access controls
Sharing credentials between users
Introducing malware, ransomware, or malicious scripts
Conducting unauthorized vulnerability scans or penetration tests

4.2 System Abuse

Excessive or abusive use that degrades system performance
Circumventing usage limits or safeguards
Using systems in ways not intended or documented

4.3 Illegal or Harmful Use

Processing unlawful, fraudulent, or deceptive content
Hosting or distributing illegal materials
Infringing intellectual property rights
Harassment, abuse, or discrimination through managed platforms

4.4 Data Misuse

Uploading personal data without lawful basis or consent
Processing sensitive data without appropriate safeguards
Exporting or sharing data in violation of contractual or legal obligations

5. CLIENT RESPONSIBILITIES

Clients are responsible for:

5.1 Data Protection and Compliance

Acting as Data Controller for end-user data
Providing legally compliant privacy notices and obtaining necessary consents
Defining lawful purposes for data processing

5.2 User Management

Managing user accounts, roles, and permissions
Ensuring users follow security and acceptable use requirements
Promptly notifying SAI Technology of unauthorized access

5.3 Credential Security

Safeguarding login credentials
Enforcing strong password practices
Immediately revoking access for departed or role-changed users

5.4 Incident Reporting

Reporting security incidents exclusively via https://saitechnology.co/support

Providing accurate and timely information during investigations

5.5 Content and Data Accuracy

Ensuring data uploaded or processed is accurate and lawful
Maintaining backups of client-side data where applicable

6. SAI TECHNOLOGY RESPONSIBILITIES

SAI Technology is responsible for:

Maintaining secure and reliable infrastructure
Implementing appropriate technical and organizational safeguards
Responding to incidents in accordance with the Incident Response Policy
Providing support within agreed service levels

SAI Technology is not responsible for:

Client-generated content or data accuracy
Misuse of systems by client users
Legal consequences arising from client data practices

7. SUPPORT AND COMMUNICATION

7.1 Official Support Channel

All support requests, including incidents and access issues, must be submitted via: https://saitechnology.co/support

Requests made via email, messaging apps, or verbal communication are not considered official until logged.

7.2 Emergency Requests

Emergency support is limited to:

System outages
Security incidents
Critical service disruptions

Emergency handling is subject to contractual SLAs.

8. MONITORING AND ENFORCEMENT

SAI Technology may:

Monitor system usage for security, performance, and compliance
Investigate suspected violations
Suspend or restrict access where misuse is detected

Actions may include:

Temporary suspension
Permanent termination of access
Notification to client administrators
Legal or regulatory reporting where required

9. CONSEQUENCES OF VIOLATION

Violations of this policy may result in:

Immediate suspension of services
Termination of agreements
Liability for damages or remediation costs
Regulatory or legal action

SAI Technology reserves the right to act swiftly where security or legal risk is present.

10. POLICY UPDATES

This policy may be updated to reflect:

Changes in law or regulation
New service offerings
Security or operational requirements

Material changes will be communicated to clients in advance where practicable.

11. GOVERNING LAW

This policy is governed by the laws of the Republic of Ghana.

12. CONTACT INFORMATION

Support & Policy Inquiries