Legal

Acceptable Use Policy

Effective November 11, 2026 · Iron Spur Labs LLC

Acceptable Use Policy

Last updated: November 11, 2026

This policy applies to everything you do with Trailboss: the agents and jobs you run, the environments they create, and the apps Trailboss hosts for you. It's part of the Terms of Service.

Not allowed

Abusing compute

  • Cryptocurrency mining, proof-of-work, or any workload whose main purpose is to consume compute rather than build or run your software.
  • Using hosted hours, preview environments or the free tier as general-purpose compute, proxies, VPNs or file hosting.
  • Opening multiple accounts or organizations to get more free credit.

Attacking others

  • Scanning, probing, attacking or load-testing systems you don't own or aren't authorized to test.
  • Malware, ransomware, botnets, credential stuffing, or command-and-control infrastructure.
  • Denial-of-service attacks, or traffic designed to overwhelm a service.
  • Getting around Trailboss's own limits, egress controls, policies, approvals or isolation, or trying to reach another organization's data.

Harmful content in apps we host

  • Phishing, impersonating another person or organization, or collecting credentials or payment details under false pretences.
  • Spam, or sending email or messages people didn't ask for.
  • Child sexual abuse material (reported to the authorities), content that promotes violence or terrorism, or harassment.
  • Infringing someone else's copyright, trademarks or other rights.
  • Anything illegal where you or your users are.

Misusing AI

  • Using agents to produce any of the above, or to defeat a model provider's safety measures.
  • Representing AI output as human-reviewed when it wasn't, where that matters (for example in regulated work).

Security research

Testing your own organization, apps and infrastructure is fine. To test Trailboss itself, follow our responsible-disclosure policy at support@trailboss.dev; don't access other customers' data, degrade the service, or keep data you find.

What we do

  • Hosted workloads have egress allowlists, plan limits on time, CPU and memory, and budget ceilings. Jobs that look like abuse may be stopped automatically.
  • Apps we host are scanned for phishing and malware and can be reported to support@trailboss.dev.
  • When something breaks this policy we may, depending on severity: warn you; cancel jobs; take a hosted app offline; suspend the organization (no new jobs run, existing ones are cancelled); or close it. Takedowns and suspensions are recorded in your audit log. Where the law and safety allow, we tell you why and give you a chance to fix it.
  • We cooperate with lawful requests from authorities and report illegal content where required.

Reporting

Send reports of abuse, phishing or infringement to support@trailboss.dev with the URL and what you saw.