Acceptable Use Policy

1. Scope

This Acceptable Use Policy ("AUP") sets out the rules for using (a) the website trossremote.com and (b) equipment, accounts, networks and support channels provided by tross kkeys OÜ (registry code 17549658, Loosivälja tee 2, Metsakasti küla, Viimsi vald, Harju maakond 74019, Estonia) as part of the HomeDesk IT service. It applies to website visitors, customers and the end users (employees) to whom customers make the service available. Customers are responsible for ensuring that their end users comply with this AUP.

2. Use of the website

You must not:

• attempt to gain unauthorised access to the Website, its servers, or any connected system or network;
• probe, scan or test the vulnerability of the Website or circumvent any security or authentication measure;
• introduce malware, or conduct denial-of-service attacks or any activity that disrupts the Website;
• use automated means (bots, scrapers) to harvest content or contact data, except for search engines that honour our robots directives;
• submit false, defamatory, infringing or unlawful content through our forms, or impersonate another person or company;
• frame or mirror the Website or reuse its content commercially without our written consent.

3. Use of managed equipment and service

Equipment, software licences, accounts and network components provided under the HomeDesk IT service are supplied for the customer's business purposes. End users must not:

• use managed equipment or accounts for unlawful purposes, including infringing intellectual property rights, distributing illegal content, harassment, fraud or unauthorised access to third-party systems;
• remove, disable or circumvent management, encryption, endpoint-protection or monitoring agents installed by tross kkeys;
• install unapproved software, modify system settings reserved to administrators, or attempt to obtain administrative privileges;
• share credentials, MFA devices or managed equipment with any other person, including household members;
• connect managed devices to networks or storage media known to be compromised, or disable the managed network segment or secure access client;
• use the helpdesk abusively, or for matters unrelated to the customer's business;
• physically alter, sell, pledge or dispose of equipment owned by tross kkeys, or fail to return it when requested.

4. Security obligations of end users

• Keep devices locked when unattended and report loss or theft to the helpdesk immediately, and in any case within 24 hours.
• Accept updates and restarts requested by the management platform within the time window indicated.
• Report suspected phishing, malware or security incidents to the helpdesk without delay.
• Use only the password manager and MFA methods provided; never reuse company passwords elsewhere.

5. Monitoring and privacy

To deliver and secure the service, tross kkeys collects technical telemetry from managed devices: inventory, software versions, patch and encryption status, security events and connectivity metrics. We do not read e‑mail content, documents, keystrokes or private browsing history of end users, and we do not access webcams or microphones. Remote support sessions take place only with the end user's explicit, visible consent, except for emergency containment of a confirmed security incident, which is logged and reported to the customer. Details are set out in the Data Processing Agreement and the customer's own employee privacy notice, which the customer is responsible for providing.

6. Enforcement

Where we reasonably believe this AUP has been breached we may, proportionately to the risk: warn the customer; isolate, lock or remotely wipe an affected device; suspend an account or network segment; or, in serious or repeated cases, terminate the service in accordance with the customer agreement. We will inform the customer's designated contact as soon as practicable. We may also report unlawful activity to the competent authorities and cooperate with their investigations.

7. Reporting abuse

To report misuse of our Website or service, or a security vulnerability, please e‑mail security@trossremote.com. We welcome responsible disclosure and will acknowledge reports within two business days.