AXAxosHub
Features Plans Integrations Workspace FAQ Login FAQ How to sign in My workspace Sign in to workspace
Legal · v. 1 August 2026

Acceptable Use Policy

This Acceptable Use Policy ("AUP") sets out the categories of use of the AxosHub cloud productivity workspace (the "Service") that are permitted, restricted or prohibited. It is incorporated by reference into the Terms of Service at /terms. Violations may result in suspension or termination of the affected workspace subject to the notice and grace-period requirements set out in the Terms.

1. Scope

This AUP applies to every workspace on the Service, on every plan, on every seat. It applies to content created by workspace owners, to content created by workspace members, and to content injected into the workspace via the workspace API, sub-processors and connected integrations.

2. Permitted uses

The Service is intended for personal and professional productivity — capturing notes, tracking tasks, planning calendar events, collaborating with colleagues, storing incidental attachments, exchanging content with third-party services via authorised integrations. Any use within these parameters, and consistent with applicable law, is permitted.

3. Prohibited content

The following categories of content are prohibited from being stored, transmitted or processed via the Service:

  • Content that infringes intellectual-property rights of third parties (unauthorised copies of copyrighted works, trademark-infringing material).
  • Content that constitutes defamation, harassment, threats or the incitement of violence against identifiable individuals or groups.
  • Content that depicts or promotes child sexual abuse or exploitation. Any workspace found to contain such material is immediately suspended and reported to competent authorities in accordance with applicable law.
  • Content that is unlawful under the laws of the Federal Republic of Germany, including material prohibited under §§86, 86a, 130, 131 StGB.
  • Personal data of third parties processed in a manner that violates the GDPR.
  • Financial data governed by PCI-DSS (payment-card numbers), except in a form that is masked or tokenised to the extent that it falls outside PCI-DSS scope.
  • Protected health information governed by HIPAA or equivalent healthcare-privacy regimes, unless the Controller has entered into a separate business-associate agreement with AxosHub — which is not offered as standard.
  • Classified government information.

4. Prohibited uses

The following uses of the Service are prohibited regardless of the content involved:

  • Use of the Service to send unsolicited bulk communications (spam) via the connected integrations, the workspace API or the calendar invitation feature.
  • Use of the Service to perform, coordinate or facilitate distributed-denial-of-service attacks, network intrusion, malware distribution or credential stuffing against third parties.
  • Use of the workspace API to circumvent the rate limits published at /docs/workspace-api-tokens through distribution across many tokens, workspaces or IPs.
  • Use of the Service to store, process or transmit content that violates the AUP of any connected integration (Google, Slack, GitHub, Linear, Zapier).
  • Reverse engineering of the workspace application beyond what is expressly permitted by mandatory law (in particular §69e UrhG).
  • Attempts to gain unauthorised access to other workspaces, to the underlying infrastructure or to internal AxosHub systems.
  • Automated crawling or scraping of AxosHub-controlled pages (axoshub.org, api.axoshub.org) that materially exceeds the rate a legitimate user or workspace API caller would generate.

5. Reporting violations

Suspected violations of this AUP may be reported to abuse@axoshub.org. Reports should include the workspace identifier where known, the specific content or behaviour concerned, and enough context for our team to investigate. We acknowledge every abuse report within one business day and respond substantively within seven business days.

6. Enforcement

On receipt of a credible report or on independent detection of a violation, we take one or more of the following actions proportionate to the severity of the violation: informational warning to the workspace admin; temporary suspension of the workspace pending investigation; permanent suspension with a 30-day grace period during which the workspace can be exported; immediate termination for the most severe violations (in particular child sexual abuse material, which triggers immediate suspension and reporting to authorities); revocation of specific workspace API tokens or connected integrations that facilitated the violation.

7. Appeals

The workspace admin may appeal any enforcement action by writing to abuse@axoshub.org within 30 days of the action. Appeals are reviewed by a member of the AxosHub team not involved in the original decision. Appeals are decided within 14 business days of receipt.

8. Cooperation with authorities

We cooperate with law-enforcement and regulatory authorities to the extent required by binding legal order. We publish an annual transparency report at /security-whitepaper summarising the number and nature of requests received in the preceding calendar year, aggregated to protect confidentiality.

9. Changes

We may update this AUP from time to time to reflect new categories of misuse, evolving legal requirements or refinements to enforcement practice. Material changes are announced by email to the workspace address at least 30 days before they take effect.

10. Repeat-offence policy

A workspace admin whose seat is found to have committed a violation of this AUP receives a written warning by email to the workspace address on the first infraction, unless the violation falls into one of the immediate-termination categories listed above. A second infraction of the same kind within a rolling twelve-month period escalates to a fixed thirty-day suspension of the affected seat; the workspace itself remains operational for other seats. A third infraction within the same twelve-month period escalates to permanent removal of the seat and, at AxosHub's discretion, termination of the workspace subscription.

11. Interaction with legal-order compliance

A workspace suspended under this AUP for suspected illegal content is subject to the standard legal-preservation obligations owed to competent authorities. That means the workspace contents are preserved for at least ninety days after suspension so that they can be handed over on binding legal order. This preservation duty overrides the ordinary /workspace-deletion flow for the duration of the ninety-day window. Once the window elapses without a legal order being received, deletion proceeds normally.

12. Coordination with connected integrations

Where a violation of this AUP is committed via a connected integration (for instance, sending abusive Slack messages from a workspace hook, or scraping GitHub through a workspace API token), we coordinate with the operator of the connected integration to the extent required by law and by our own contracts with those operators. This may include disabling the offending integration at the source, revoking OAuth grants issued to the workspace, and sharing minimal necessary information with the integration operator to prevent recurrence.

13. Publication of enforcement statistics

Aggregated enforcement statistics are published quarterly in the "Transparency" section of the security whitepaper at /security-whitepaper. The statistics include the number of abuse reports received, the number of workspaces suspended, the number of workspaces terminated, the number of appeals filed, and the number of appeals upheld. No workspace-identifying information is disclosed in these statistics.

14. Relationship with Terms of Service

This AUP is incorporated by reference into the Terms of Service at /terms. In the event of conflict between this AUP and the Terms of Service, the Terms of Service prevail. In the event of conflict between this AUP and the Data Processing Agreement at /dpa, the DPA prevails for matters relating to processing of personal data on behalf of the workspace admin acting as data controller.

15. Special notes on shared workspaces

On Team and Business workspaces, an AUP violation committed by a single seat may implicate the workspace admin under the doctrine of vicarious responsibility for third-party actions carried out on tools they operate. AxosHub's practice is to hold the offending seat directly responsible in the first instance, and to escalate to the workspace admin only where (i) the admin was aware of the violation and failed to act, or (ii) the admin has failed to configure standard controls (per-seat notifications, audit-log review, IP allowlist on Business) that would have detected the violation in the ordinary course.

Workspace admins are encouraged to configure the audit-log alerting available on the Business plan to catch AUP-adjacent behaviour early: unusual sign-in patterns, sudden surges in API-token issuance, calendar-invitation volumes that suggest spam-adjacent behaviour. Guidance on setting up these alerts is in the docs.

16. Interaction with law enforcement

We handle law-enforcement requests according to a published protocol: written request required, competent jurisdiction verified, scope narrowed to the minimum necessary, notification of the affected workspace admin unless prohibited by law, and disclosure only of the data expressly required by the request. Statistics on the number and nature of law-enforcement requests received are published in the annual transparency section of the security whitepaper.

17. Contact

Questions about this AUP may be sent to support@axoshub.org. Abuse reports to abuse@axoshub.org. Postal address: AxosHub GmbH, Chausseestraße 22, 10115 Berlin, Germany. Response targets: acknowledgement of abuse reports within one business day, substantive response within seven business days.