Company Records — Acceptable Use Policy

Version 1.0 · Effective date: 15 July 2026

This Acceptable Use Policy is Schedule 1 to the Company Records Terms of Service (v1.0) and forms part of them. Capitalised terms have the meanings given in the Terms.

Part A — Permitted purposes

You may use Reports and Report Content only for the business Permitted Purposes in clause 5 of the Terms, namely: KYC/CDD; AML, counter-terrorist-financing, and sanctions compliance; counterparty, supplier, vendor, and third-party due diligence; fraud prevention and detection; business-counterparty credit-risk assessment; corporate compliance, regulatory, audit, legal, and investigatory purposes; and corporate transactions and business onboarding.

Part B — Prohibited purposes

You must not use the Service, any Report, or any Report Content for any of the following:

• Decisions about individuals in a personal capacity — any consumer-credit, lending-eligibility, insurance, or benefits decision about a natural person.
• Employment and tenancy screening — recruitment, vetting, employment, tenancy, or letting decisions about individuals.
• Harassment and profiling — stalking, harassment, intimidation, "doxxing", or profiling of individuals; any unlawful, discriminatory, or rights-infringing purpose.
• Marketing — direct marketing to natural persons, or building a marketing or enrichment profile of natural persons.
• Bulk extraction and scraping — extracting, scraping, harvesting, or bulk-downloading data, or automated access other than through the interfaces we provide.
• Resale and redistribution — reselling, redistributing, sub-licensing, or making Reports or Report Content available to third parties, except internal sharing within your organisation and with your professional advisers for a Permitted Purpose.
• Competing database or model — building, populating, training, or enriching any database, dataset, model, or product that competes with, or reproduces a substantial part of, the Service or its content.
• No lawful basis — any purpose for which you lack your own lawful basis under Data Protection Law.
• Unlawful use — any use in breach of applicable law, registry terms, sanctions, or export controls.

Part C — Technical acceptable use

• Access the Service only through the interfaces we provide; do not circumvent authentication, rate limits, or security controls.
• Do not probe, scan, or test the vulnerability of the Service, or defeat any bot-mitigation or access control.
• Respect applicable rate limits and fair-use limits; one Account per business unless we agree otherwise in writing.
• Keep your credentials secure and notify us promptly of any unauthorised use.

Breach of this Policy is a material breach of the Terms (clause 6.2) and may result in immediate suspension or termination of your access (clause 16.1).

Company Records Acceptable Use Policy v1.0. Effective 15 July 2026. Schedule 1 to the Company Records Terms of Service v1.0. Know Your Customer (Ireland) Limited, CRO 595161.