Annex B: Acceptable use policy
DRAFT 0.4 for attorney review, 22 October 2026. Not published. Not in force.
Annex to the Ledgeforge Terms of Service. Applies to every Customer and every User of Accounting, FinSight, Loadwyse, the Ledgeforge login and portal, and Billing.
1. The short version
Use the Services for your own lawful business records and your firm's work. Do not try to get at anyone else's data, do not attack or overload the Services, and do not put information into them that you have no right to hold.
2. You must not
2.1 Break the law, including POPIA, tax law, the Cybercrimes Act 19 of 2020, and the Financial Intelligence Centre Act, or use the Services to record or hide fraud, money laundering or tax evasion.
2.2 Put in information you have no right to hold, including another person's personal information without a lawful basis, special personal information without a basis under POPIA s27 and our prior written agreement, or information about children without a basis under s35.
2.3 Share logins. Each person must have their own login. Do not let another person use yours, and do not create logins for people who are not real Users.
2.4 Get round limits or payment, for example by splitting one company into several organisations to stay on a free plan, hiding Loadwyse staff from the staff count, or using a demonstration organisation for real work.
2.5 Try to reach another Customer's data, test our security without our written permission, scan or probe our systems, or get round sign-in, two-factor, Turnstile or rate limits.
2.6 Overload or harm the Services: automated scraping, sending unusually large volumes of requests, uploading malware, or interfering with other Customers' use.
2.7 Copy or rebuild the Services: reverse engineer the software or the automated analysis rules, except where the law allows it; or resell the Services without our written agreement.
2.8 Send spam or harassment through the Services' email features. Emails sent from the Services must relate to your genuine business with the recipient. Unsolicited commercial communications must meet ECTA s45 and POPIA s69.
2.9 Present automated analysis as something it is not, for example as an audit opinion, as advice from Ledgeforge, or as the output of "AI".
3. Security testing
If you want to test the security of the Services, ask us first at [SECURITY EMAIL]. If you find a weakness, tell us privately and give us a reasonable time to fix it before telling anyone else. We will not take action against anyone who reports a weakness in good faith and follows this rule.
4. What we may do
4.1 If we reasonably believe this policy has been broken we may: ask you to stop; remove the content concerned; suspend the User concerned; or suspend the Customer's access, as set out in clause 14 of the Terms of Service.
4.2 We will act in proportion to the harm, tell you what we did and why (unless the law prevents us) and restore access once the problem is resolved. Suspension never deletes your data, and the export rights in Annex C still apply.
4.3 We may report suspected crimes to the authorities and must co-operate with lawful requests.
[ATTORNEY: Confirm wording around FICA. Ledgeforge is not an accountable institution, but Loadwyse users (accounting firms) may be. Is any statement needed?]