Acceptable Use Policy

Last Modified: May 1, 2026

Use of any product or service provided by Hex including the Service (collectively, the "Hex Offerings") is subject to this acceptable use policy (the "Acceptable Use Policy").

Unless otherwise indicated, capitalized terms used herein but not defined herein have the meanings ascribed to them in the applicable agreements between Customer and Hex governing Customer's use of the Hex Offerings (the "Agreement"), or if not defined in the Agreement, in the applicable Hex terms and conditions located at https://learn.hex.tech/docs/legal/terms-and-conditions (the "Website").

I. GENERAL USE RESTRICTIONS

Customer may not:

A. Use the Hex Offerings in any way that violates or facilitates the violation of applicable law. This includes:

a. Engaging in illegal activity such as terrorism; cybersecurity crime; organized crime; or child sexual exploitation or the generation of Child Sexual Abuse Material (CSAM);

b. Violating copyright, trademark, or other intellectual property laws;

c. Violating any person's privacy rights, including by attempting to collect, infer, predict, store, process, or disclose protected or personally identifiable information, such as credentials, account information, credit card numbers, addresses, location, or other contact information without a lawful basis for doing so;

d. Engaging in the unauthorized practice of any regulated profession, including the financial, legal, or medical/health professions; or

e. Accessing or authorizing anyone to access the Hex Offerings from an embargoed country or location designated as supporting terrorist activities by the United States Government.

B. Use the Hex Offerings in any way that could harm them or impair another person's authorized use of the Hex Offerings. This includes:

a. Attempting to gain unauthorized access to the Hex Offerings (other than what is permitted by Hex's vulnerability disclosure program), acting to deny others' authorized access to the Hex Offerings, or authorizing any third party to inappropriately access or use the Hex Offerings on Customer's behalf (such as sharing account credentials with multiple individuals);

b. Using the Hex Offerings to try to gain unauthorized access to any other service, data, account, system, or network by any means;

c. Using content or technology that harms, interferes with, or limits Hex's or any other user's normal operation of Hex's products and services, including monitoring traffic or data; and

d. Circumventing, disabling, or interfering with any metering, usage tracking, rate-limiting, or billing mechanism of the Hex Offerings.

C. Use the Hex Offerings in any way that is intended to harm others (other than normal competition with third parties). This includes:

a. Using the Hex Offerings to store, generate, or transmit viruses, malware, malicious code, trojan horses, or anything designed to impair the proper operation of any website or computer system; and

b. Using the Hex Offerings to harm, threaten, stalk, defame, defraud, deceive, or harass anyone for any reason.

D. Use the Hex Offerings to violate Hex's intellectual property rights or otherwise compete with Hex. This includes:

a. Accessing or using any intellectual property in or related to the Hex Offerings, except as expressly permitted under the Agreement;

b. Copying the Hex Offerings, or any part, feature, function, or user interface thereof, except as expressly allowed for such Hex Offerings under the Agreement;

c. Using the Hex Offerings to assist in the creation of similar or competitive products or services to be used apart from the Service; and

d. Reselling, sublicensing, or commercially redistributing access to the Hex Offerings or any Output to third parties, except as expressly permitted under the Agreement.

E. Engage in cryptocurrency mining or similar activities.

F. Create or maintain any account that is not associated with at least one Authorized User, or access the Service exclusively through automated means without an Authorized User actively managing such access.

G. Use any automated tool, script, or third-party agent to scrape, extract, or systematically collect data from the Service or any content accessible through the Service, except where such automated access is authorized by an Authorized User and conducted through the Service's APIs, Agent functionality, or Customer's authorized integrations.

II. USE OF HEX AI FEATURES

If Customer elects to use AI Services, as described in the Documentation (collectively, the "Hex AI Features"), Customer's use is subject to the following:

a. Where Customer uses Hex AI Features as part of a process that results in decisions with legal or similarly significant effects on individuals, including decisions relating to finance, employment, healthcare, housing, or insurance, Customer must ensure that a qualified person reviews and takes responsibility for the final decision, that AI Feature outputs are not the sole basis for that decision, and that affected individuals are informed of the role of AI in the process to the extent required by applicable law.

b. Customer and its Authorized Users may not use Hex AI Features to generate individualized advice that in the ordinary course of business would be provided by a licensed professional, including financial, legal, or medical advice.

c. Customer and its Authorized Users may not use Hex AI Features to generate or provide individualized medical advice, treatment, or diagnosis to a consumer or end user.

d. For clarity, this section does not limit Customer from using Hex AI Features for other purposes, such as customer support in regulated industries, or to assist a licensed professional where Hex AI Features were not used to generate the individualized advice itself. When Hex AI Features are used to assist in preparing individualized advice (e.g., summarization or drafting), there must be a qualified person reviewing the output before it is relied upon or delivered.

e. Customer and its Authorized Users may not use Hex AI Features to explicitly predict, or categorize individuals based on, a protected characteristic, including but not limited to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, age, gender, sexual orientation, disability, health status, medical condition, financial status, or criminal history. This does not limit use cases designed specifically to identify fraud, security vulnerabilities, or unauthorized access, or to identify and reduce bias in AI systems.

f. Customer will not disable, evade, disrupt, or interfere with any content filters or safety systems that are part of Hex AI Features.

g. Customer may not misrepresent the origin of any Output by claiming or implying it was created by a human or represent an Output as an original work. Customer may not remove any markings automatically applied to an Output to indicate it was AI-generated. Customer will promptly stop using, displaying, or distributing any Output upon receiving notice of a claim that such Output violates a third party's intellectual property right. Customer will not use or communicate to third parties any Output in breach of applicable laws governing "deepfake" content. Capitalized terms "Input" and "Output" have the meanings given in the Agreement.

h. Customer will not use Hex AI Features for: (i) practices prohibited under applicable law, including, to the extent applicable to Customer's use, the EU Artificial Intelligence Act; or (ii) any use that is unsafe or hazardous, including any use that could result in death, serious bodily injury, or disruption of critical infrastructure. Customer is responsible for ensuring its use of Hex AI Features complies with all applicable laws and regulations.

i. Where Customer deploys Hex AI Features in a product or service made available to end users, Customer must appropriately disclose to those end users the role of AI in generating outputs they receive, to the extent required by applicable law.

j. Customer may not use Hex AI Features or any Output to develop, train, fine-tune, test, or improve any product or service that competes with the Hex Offerings, including other artificial intelligence models.

k. Hex AI Features are not designed to be used with Restricted Data or At-Risk Data, as those terms are defined in the Agreement. Customer is solely responsible for understanding and applying any laws, regulations, and industry standards applicable to Customer's data when using any Hex AI Feature.

l. Hex may suspend, modify, or discontinue Hex AI Features without prior notice (a) if necessary to comply with applicable law or relevant intellectual property rights, or (b) in Hex's sole discretion, provided such suspension, modification, or discontinuance does not materially diminish the features and functionality purchased by Customer.

m. Where Customer authorizes AI agents, orchestration layers, or automated workflows to interact with the Service, Customer is the sole principal for all such interactions. Customer is responsible for setting permissions, monitoring agent behavior, and ensuring compliance with this Acceptable Use Policy regardless of the degree of human oversight involved. Customer assumes all risk associated with third-party agents, tools, or integrations (including Model Context Protocol servers or similar frameworks) authorized by Customer to access or act within the Service.

n. Customer may not use Hex AI Features to generate, distribute, or facilitate: (i) content that is harmful, illegal, deceptive, defamatory, or threatening; (ii) content designed to harass, bully, or intimidate any individual; (iii) non-consensual intimate imagery or deepfake content of real individuals; or (iv) content that exploits minors in any way.

o. Hex AI Features use technology provided by third-party AI subprocessors (the "AI Providers"), including but not limited to Google LLC ("Google"), OpenAI OpCo, LLC ("OpenAI"), Anthropic, PBC ("Anthropic"), and Snowflake Inc. ("Snowflake"). Customer may not use Hex AI Features in a manner that violates any applicable AI Provider policy, including but not limited to: Google's Generative AI Prohibited Use Policy; OpenAI's Usage Policies; Anthropic's Usage Policy; and Snowflake's Acceptable Use Policy. Each of the foregoing policies may be updated from time to time and are expressly incorporated by reference into this Acceptable Use Policy. A current list of AI Providers is available at https://learn.hex.tech/docs/legal/subprocessors.

III. BENCHMARKING

Subject to the use restrictions herein, Customer may conduct benchmark tests of the Service, including the Hex AI Features (each a "Test"). With the exception of Tests involving Previews, Customer may publicly disclose, or allow third parties to publicly disclose, the results of the Test as long as (1) Customer shares the Test results with Hex reasonably in advance of its disclosure, and (2) the disclosure includes all information necessary to replicate the Test. Test results involving Preview features are confidential and cannot be publicly disclosed without Hex's prior written approval.

IV. VIOLATIONS

Customer will report any violations of this Acceptable Use Policy, or any issues with any of the Hex Offerings, including the Service and the Hex AI Features, to Hex at [email protected].

V. GENERAL TERMS

In the event of any conflict between the Agreement and this Acceptable Use Policy, the order of precedence set forth in the Agreement will govern. This Acceptable Use Policy may be updated by Hex from time to time upon reasonable notice (which may be provided through the Service or by posting an updated version of this Acceptable Use Policy on the Website). Any violation of this Acceptable Use Policy may result in the suspension or termination of Customer's access to and use of the Service or other Hex Offerings. Customer is responsible for its Authorized Users' compliance with this Acceptable Use Policy and that it will not encourage any third parties to perform activities prohibited herein. If any provision of this Acceptable Use Policy is held unenforceable, the remaining provisions remain in full effect.