Acceptable Use Policy

• 1.1 This Policy applies to everyone who uses therisk.global and the platform sites published at addresses beginning with therisk.global/ (together, the Site), including its tools, instruments, maps, data services, forms, community spaces and any interface for machines (each a Service).
• 1.2 Organisation-wide matters are governed by the documents GCRI Canada publishes on its main site: the Terms and Conditions of GCRI Canada. This document adds what is specific to the platform sites and does not repeat them.
• 1.3 It forms part of the Terms of Use. A breach of this Policy is a breach of those Terms.

• 2.1 Do not attempt to gain access to any account, system or data you are not authorised to use, to probe or test the vulnerability of a Service outside the Security and responsible disclosure policy, or to circumvent any authentication, rate limit or access control.
• 2.2 Do not introduce malicious code, interfere with the operation of a Service, or send requests at a volume or in a manner that impairs its availability for others.

• 3.1 Automated access is allowed only through the documented interfaces of a Service, within their stated limits, and with a user agent that identifies the operator and a contact address. Crawlers respect the robots directives of the Site.
• 3.2 Reuse at scale of material of the Site follows the licence stated on that material and the Research and Data Terms. Personal information that appears on the Site, such as the names of contributors, may not be harvested or compiled into profiles.
• 3.3 Training, testing or evaluating a machine-learning model on material of the Site is subject to the licence of that material and to the reservation stated in the AI-use Statement; the attribution and no-endorsement conditions of a licence apply to any model output that reproduces the material.

• 4.1 Do not impersonate GCRI Canada, its staff, a contributor, a public authority or any other person, and do not misrepresent an affiliation with any of them.
• 4.2 Do not present material of the Site as issued, approved, verified or vouched for by a body that has not done so, and do not present an illustrative figure, a simulated dataset or a compatibility profile as a result, a finding or an assessment.
• 4.3 Do not use a name, emblem or visual identity of an institution or programme except as the Trademark and Name Use Policy allows.

• 5.1 Do not submit or share content that is unlawful, defamatory, harassing, hateful, discriminatory, threatening, obscene or that infringes the intellectual property, privacy or other rights of anyone.
• 5.2 Do not submit personal information about other people without a lawful basis, special-category information about anyone, or security-sensitive detail such as unpatched vulnerabilities of named systems or the precise locations of critical infrastructure.
• 5.3 Do not submit traditional, sacred or culturally sensitive knowledge without the free, prior and informed consent of the community that holds it (see the Contribution Terms).
• 5.4 Do not use a Service to send advertising, unsolicited bulk messages or fundraising appeals.

• 6.1 Material generated or substantially altered with an AI system and submitted to a Service is disclosed as such by the person who submits it, who remains responsible for it.
• 6.2 Do not use a Service to create or spread synthetic material that could mislead people about a real event, a real person or the position of an institution, or to generate content attributed to the publisher or to any contributor without their consent.

• 7.1 Do not use a Service in breach of the economic sanctions or export-control laws that apply to you or to the publisher, or on behalf of a person subject to sanctions.
• 7.2 Do not use material, data, models or instruments of the Site to plan or carry out harm to people, infrastructure, ecosystems or communities.

• 8.1 Misuse may be reported to contact@therisk.global, with the address of the material or the description of the activity concerned.
• 8.2 Measures are proportionate to the breach and may include a warning, the removal or restriction of content, the suspension or closure of access, and a report to the competent authority where the law requires it or a person is at risk. The person concerned is told what was done and why, unless the law or the safety of others prevents it, and may ask for the decision to be reviewed under the Complaints and integrity reporting procedure.

• 9.1 This Policy and any dispute about it are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-laws rules that would apply another law, without prejudice to any mandatory protection of the law of the country where a user lives.
• 9.2 Changes to this Policy are published on this page with a new version and effective date.

Prepared for review by legal counsel before adoption.