Acceptable Use Policy

1. Scope

This policy applies to everyone using ITSPracticing and forms part of the Terms of Service. Inside a mission you may take any action the mission offers, including bad decisions — that is how simulations teach. The rules below are about the platform and the people on it.

2. Do not misuse the platform

• Do not access, or try to access, another person's account, attempts, recordings or Institution.
• Do not probe, scan or test the platform's security except as allowed by our vulnerability disclosure policy (see below).
• Do not overload the Service, run automated scripts or scrapers against it, or interfere with other users, unless we have agreed in writing.
• Do not bypass limits, practice-mode restrictions, hint rules or assessment controls, or tamper with requests to change scores, evidence or timing.
• Do not upload malware, or content that is unlawful, infringing, harassing, hateful, sexually explicit or violent.
• Do not reverse engineer the Service except where the law expressly permits it despite this restriction.

3. Academic and professional integrity

• Follow your Institution's rules on collaboration and on outside tools, including AI tools.
• Do not submit someone else's work as your own, or let someone else complete your attempt.
• Do not share assessment missions, model answers or evaluation criteria where your Institution has asked you not to.
• Do not try to make an AI-played character reveal assessment criteria or step outside its role.

Integrity indicators produced by the Service are signals for your instructor to look at, not findings of misconduct. Decisions about misconduct are made by your Institution under its own procedures.

4. Keep real data out

Simulations are fictional. Do not enter real personal data, real customer or company records, real passwords, API keys or other secrets into missions, findings, emails or authored content. Instructors authoring missions must not base characters on identifiable real people without their consent.

5. Security research

We welcome reports of vulnerabilities. Test only against your own account, stop as soon as you reach data that is not yours, and report it privately as described in Security and Vulnerability Disclosure. Good-faith research that follows that policy is authorised, and we will not take legal action against it.

6. Enforcement and reporting

We may remove content, suspend accounts or tell the relevant Institution when this policy is broken, in proportion to the problem. To report misuse, write to info@itspracticing.com.