Acceptable Use Policy (AUP) & Responsible AI Use Policy

2. Scope and Applicability

This Policy applies to all customers, developers, enterprise users, authorised account holders, resellers, and other parties accessing or using Invincible AI services.

It covers:

• GPU computing and virtual machine instances.
• AI model training and fine-tuning.
• AI inference and generative AI APIs.
• Large language models and multimodal AI applications.
• Cloud storage, databases, and hosted datasets.
• AI-generated text, images, audio, video, and other content.
• Applications and services deployed on Invincible AI infrastructure.
• Third-party GPU and cloud infrastructure accessed through our platform.
• Customer-operated services, endpoints, and applications hosted through Invincible AI.

Customers must ensure that their employees, contractors, authorised users, and other persons accessing services through their accounts comply with this Policy.

3. Customer Responsibility for Content and Workloads

Customers are responsible for the content, datasets, models, applications, prompts, outputs, and workloads they upload, process, generate, host, publish, transmit, or distribute through Invincible AI services.

Customers must ensure that they possess the necessary rights, permissions, licences, consents, and legal authority for such activities.

Invincible AI primarily provides technology infrastructure and associated services and does not automatically approve, endorse, or assume editorial responsibility for customer-controlled content merely because its infrastructure is used.

Customers remain responsible for reviewing and validating AI-generated outputs before publication, distribution, or use in consequential decisions.

Nothing in this Policy excludes responsibilities that Invincible AI may have under applicable law or arising from services it directly controls.

4. Prohibited Activities

Customers must not use Invincible AI services for unlawful, abusive, fraudulent, or otherwise prohibited purposes.

4.1 Illegal and Unauthorised Content

Customers must not knowingly upload, generate, host, distribute, or facilitate content that:

• Violates applicable laws or legally binding orders.
• Infringes copyrights, trademarks, trade secrets, or other intellectual property rights.
• Unlawfully discloses personal, confidential, or proprietary information.
• Constitutes unlawful harassment, threats, intimidation, or defamation.
• Facilitates fraud, identity theft, financial scams, or impersonation.
• Contains child sexual abuse material or otherwise unlawfully exploits minors.
• Promotes or facilitates terrorism or other unlawful violent activities.
• Involves other content or activities prohibited by applicable law.

4.2 Cybersecurity Abuse

Customers must not use Invincible AI infrastructure to:

• Develop, deploy, distribute, or operate malware, ransomware, or malicious software.
• Conduct unauthorised penetration testing, network intrusion, or credential attacks.
• Launch denial-of-service attacks or disrupt third-party systems.
• Operate botnets or unauthorised command-and-control infrastructure.
• Conduct phishing, credential harvesting, or unauthorised surveillance.
• Circumvent authentication, security controls, or infrastructure restrictions.
• Access, extract, or disclose data without authorisation.

Legitimate security research, defensive testing, and authorised penetration testing may be permitted subject to applicable laws, provider restrictions, and any required prior authorisation.

4.3 Infrastructure Misuse

Customers must not:

• Use computing resources for prohibited cryptocurrency mining.
• Interfere with infrastructure stability or other customers' workloads.
• Circumvent resource limits, billing controls, or platform security mechanisms.
• Resell or redistribute services where prohibited by the applicable agreement.
• Conceal malicious activity or falsify account information.
• Use infrastructure in violation of applicable sanctions, export controls, or provider restrictions.

5. Responsible Use of Artificial Intelligence

Invincible AI supports the development and deployment of artificial intelligence for legitimate commercial, research, educational, and technological purposes.

Customers developing or operating AI applications through our infrastructure are responsible for implementing safeguards appropriate to the risks associated with their use cases.

These may include human oversight, output validation, access controls, risk assessments, testing, and appropriate disclosures.

5.1 Deepfakes, Synthetic Media, and Impersonation

Customers must not use Invincible AI services to create or distribute unlawful or materially deceptive synthetic content, including:

• Unauthorised impersonation intended to deceive or defraud.
• Non-consensual intimate imagery.
• Fraudulent voice cloning or identity impersonation.
• Synthetic content used to facilitate scams or identity theft.
• Deceptive media intended to cause unlawful harm.
• Other prohibited synthetic or manipulated content under applicable law.

Lawful creative, artistic, research, educational, or other permitted uses of synthetic media are not automatically prohibited.

Customers must comply with applicable consent, disclosure, labelling, and transparency requirements.

5.2 High-Risk and Consequential AI Applications

Customers using AI systems in sensitive or consequential environments must implement appropriate safeguards.

These may include applications involving:

• Healthcare and medical decisions.
• Financial services, lending, and insurance.
• Employment and recruitment.
• Education and assessments.
• Law enforcement and public safety.
• Biometric identification and surveillance.
• Critical infrastructure.
• Other regulated or high-impact decision-making.

Customers are responsible for determining whether their applications require regulatory approvals, human review, testing, impact assessments, or other safeguards.

AI-generated outputs must not be treated as automatically accurate or authoritative.

5.3 AI Model Safety and Validation

Customers are responsible for evaluating AI models before deployment and monitoring their operation as appropriate.

Customers should assess:

• Accuracy and reliability.
• Bias and discriminatory outcomes.
• Data privacy and confidentiality.
• Security vulnerabilities.
• Model licensing and intellectual property restrictions.
• Potential misuse and foreseeable harmful outputs.
• Appropriate human oversight.

Invincible AI does not guarantee that third-party or customer-deployed AI models will produce accurate, unbiased, lawful, or error-free results.

6. Intellectual Property and Copyright Compliance

Customers must ensure that all datasets, AI models, training materials, prompts, uploaded files, and generated content are used in compliance with applicable intellectual property laws and licensing obligations.

Customers must not knowingly use Invincible AI infrastructure to infringe third-party copyrights, trademarks, trade secrets, or other protected rights.

Customers are responsible for obtaining required licences and permissions for proprietary datasets, software, models, and other materials.

Invincible AI reserves the right to investigate credible intellectual property complaints and take appropriate action, including restricting access to affected services or content where legally justified.

Repeat or serious infringements may result in account suspension or termination.

7. Data Privacy and Personal Information

Customers must comply with applicable privacy and data protection laws when processing personal information through Invincible AI infrastructure.

Customers are responsible for:

• Establishing a lawful basis for processing personal data.
• Obtaining required consents or authorisations.
• Providing legally required privacy notices.
• Applying appropriate security safeguards.
• Restricting access to sensitive information.
• Complying with applicable data retention and deletion obligations.
• Respecting data subject rights.
• Meeting applicable cross-border transfer requirements.

Invincible AI processes customer personal data in accordance with its Privacy Policy, Data Processing Addendum, and applicable contractual obligations.

Customers must not use the services to unlawfully collect, disclose, trade, or exploit personal information.

8. Customer Content Ownership and Publication

Customers retain their existing rights in content, datasets, models, and applications submitted to or developed through the platform, subject to applicable law and third-party rights.

Invincible AI does not acquire ownership of customer content solely by providing infrastructure or processing services.

Customers are responsible for determining whether AI-generated outputs may lawfully be published, distributed, sold, licensed, or otherwise used.

Invincible AI does not automatically endorse, verify, approve, or assume editorial responsibility for customer-generated or customer-published content.

Customers must independently verify that content intended for publication complies with applicable laws, third-party rights, and this Policy.

Invincible AI may remove or restrict access to content where required by law, authorised under the applicable agreement, or reasonably necessary to address serious violations of this Policy.

9. Customer Content Indemnification

To the extent permitted by applicable law, customers agree to defend, indemnify, and hold harmless the applicable Invincible AI contracting entity, its officers, employees, and authorised representatives against third-party claims, damages, liabilities, and reasonable legal expenses arising from:

• Unlawful or unauthorised customer content.
• Infringement of third-party intellectual property rights by customer-controlled materials.
• Fraudulent, defamatory, deceptive, or otherwise unlawful content published or distributed by the customer.
• Unlawful processing or disclosure of personal information by the customer.
• Customer violations of this Policy or applicable laws.
• Unauthorised use of AI models, datasets, or applications.

These obligations apply to the extent the claims arise from the customer's acts, omissions, instructions, or contractual breaches.

They do not extend to losses attributable to Invincible AI's own unlawful conduct, negligence, or breach of its contractual obligations.

The defence, settlement, and notification procedures applicable to indemnification claims shall be governed by the relevant customer agreement.

Nothing in this section limits liability that cannot lawfully be excluded.

10. Monitoring, Abuse Detection, and Investigation

Invincible AI may undertake reasonable monitoring and security analysis to protect infrastructure integrity, prevent abuse, and comply with legal obligations.

Such activities may include analysis of:

• Infrastructure usage patterns.
• Network traffic metadata.
• Authentication and access logs.
• API request metadata.
• Security events.
• Resource consumption.
• Indicators of malicious or unauthorised activity.

Invincible AI does not undertake a general obligation to proactively review all customer content merely because that content is hosted or processed through its infrastructure.

Where necessary and legally permitted, Invincible AI may investigate credible complaints or suspected violations.

Any access to customer content during an investigation shall be limited to what is reasonably necessary, authorised, and legally permissible.

11. Reporting Unlawful Content and Abuse

Individuals, customers, rights holders, and other affected parties may report suspected violations of this Policy.

Reports may concern:

• Unlawful or infringing content.
• Fraudulent AI applications.
• Deepfake impersonation.
• Cybersecurity threats.
• Unauthorised data disclosure.
• Intellectual property infringement.
• Other prohibited activity.

Reports should, where possible, include:

• A description of the alleged violation.
• The relevant URL, endpoint, account, or other identifier.
• Supporting evidence.
• The reporter's contact information.
• Any relevant legal notice or rights ownership information.

Abuse Reports and Legal Notices

contact@invincibleai.ai

Security Incidents and Data Protection

ciso@invincibleocean.com

Invincible AI will review reports according to their nature, severity, and applicable legal requirements.

Submitting a report does not automatically guarantee removal or suspension of the reported content.

12. Enforcement and Account Suspension

Where Invincible AI reasonably determines that a customer has violated this Policy, it may take proportionate action, subject to applicable law and contractual obligations.

Actions may include:

• Issuing a warning or requesting corrective action.
• Restricting specific API endpoints or workloads.
• Temporarily suspending affected GPU instances or services.
• Disabling access to unlawful or prohibited content.
• Restricting account privileges.
• Suspending or terminating accounts for serious or repeated violations.
• Preserving relevant records where legally required.
• Cooperating with competent authorities where legally required.

In cases involving imminent harm, serious security threats, or legally mandated action, Invincible AI may act without advance notice where permitted.

Where appropriate, customers may be provided with information about the enforcement action and an opportunity to submit an explanation or appeal.

13. Third-Party Infrastructure and Model Providers

Invincible AI may provide access to computing resources, AI models, storage, and networking services operated by third-party providers.

Customers must comply with applicable provider restrictions and licensing conditions communicated as part of the relevant service.

Certain activities may be prohibited by an infrastructure provider even if not expressly listed in this Policy.

Invincible AI may restrict affected services where necessary to comply with valid provider requirements, applicable law, or contractual obligations.

Customers remain responsible for ensuring that their workloads are compatible with the selected infrastructure and applicable third-party terms.

14. Legacy API Operations and Finii

Invincible AI previously operated under the Invincible Ocean brand, providing enterprise API-based digital onboarding, KYC, identity verification, and related services.

Effective 1 July 2026, Invincible Ocean limited its legacy verification API operations and initiated a planned phased discontinuation of those services.

New customer onboarding for the legacy verification API business has been discontinued.

Existing customers with active contractual arrangements continue to be supported through the Finii platform, subject to their respective agreements and applicable service conditions.

Legacy customers remain responsible for lawful use of verification data and compliance with applicable privacy, identity verification, and data protection requirements.

The transition to Invincible AI does not authorise unrelated reuse of legacy customer data for AI model training or other purposes without appropriate legal and contractual authority.

15. Compliance with Applicable Laws

Customers must comply with all laws and regulations applicable to their use of Invincible AI services.

Depending on the jurisdiction and activity, these may include:

• Applicable Indian information technology, cybersecurity, and data protection laws.
• UAE cybercrime, data protection, and electronic communications laws.
• GDPR and other applicable European data protection requirements.
• Applicable intellectual property laws.
• Export control and sanctions regulations.
• Sector-specific AI and technology regulations.
• Applicable requirements concerning synthetic media, unlawful content, and online services.

Customers are responsible for obtaining any licences, permissions, registrations, or regulatory approvals required for their specific applications.

Invincible AI may impose additional restrictions where necessary to comply with applicable laws or binding regulatory requirements.

16. Disclaimer and Limitation of Responsibility

Invincible AI provides infrastructure and technology services that customers may configure and use for a wide range of applications.

Unless expressly agreed otherwise, Invincible AI does not control the purposes for which customers independently deploy their applications or publish their content.

Invincible AI does not guarantee the legality, accuracy, originality, reliability, or suitability of customer-generated or third-party AI outputs.

Customers are responsible for evaluating their applications and content before deployment or publication.

Nothing in this Policy excludes or limits any statutory duty, liability, or obligation that Invincible AI cannot lawfully exclude.

Any applicable contractual limitations of liability shall be governed by the Terms of Service or relevant enterprise agreement.

17. Policy Updates

Invincible AI may update this Policy to reflect changes in technology, regulatory requirements, security practices, or the services offered.

Material changes affecting existing customers will be communicated where required by law or contract.

The latest version will be published on the Invincible AI website.

Changes to binding customer obligations will take effect in accordance with the applicable agreement and legal requirements.

18. Contact Information

For enquiries regarding this Policy, suspected abuse, unlawful content, or formal legal notices, please contact:

Invincible AI

Website: https://www.invincibleai.ai

General Enquiries, Abuse Reports and Legal Notices

contact@invincibleai.ai

Office of the Chief Information Security Officer (CISO)

Security, Privacy and Data Protection

ciso@invincibleocean.com

Invincible AI is part of the Invincible Intelligence Group technology ecosystem.