Acceptable Use Policy

This policy sets the boundary of what NACRE Intel may be used for. It exists because we cannot see your purpose: you choose who is investigated and why, and only you know whether that is lawful in your sector and jurisdiction. What follows is what you must be able to say is true each time you run an investigation.

1. What you confirm each time you use the service

By starting an investigation, you confirm that:

You have a lawful basis. Under the GDPR you are the controller for the personal data processed in that investigation. You have identified a lawful basis under Article 6 and can document it. Where you rely on legitimate interests, you have carried out and recorded a balancing assessment.
You have a specific purpose, and you can document it. We do not ask you to declare it and we do not hold it — your record of why an investigation was justified is yours to keep, and it is what you will be asked for if you are ever asked. “Due diligence” on its own is not a purpose.
Where your use touches criminal matters, you are authorised to process that data. Sanctions listings, litigation, regulatory action and adverse media are data relating to criminal convictions and offences under Article 10 GDPR. Private organisations may only process it where Union or Member State law authorises them to — anti-money-laundering obligations are the common example. If no such authorisation applies to you, you must not use the service for that purpose.
You will handle your own transparency obligations. Article 14 may require you to tell the person that you hold data about them. That obligation is yours, not ours.
No decision will be taken by the machine alone. You will not use a dossier or a risk score as the sole basis for a decision producing legal or similarly significant effects for the person, as described in Article 22 GDPR. A person will review the sources and decide.
You have authority to accept this policy for your organisation and will make its users aware of it.

2. What the service is not built for

NACRE Intel is a general-purpose research and verification tool. It is not designed, marketed, offered or intended for determining a person’s eligibility for employment, credit, insurance, housing, education or public benefits, nor for assessing creditworthiness or insurance risk.

If you use it for any of those purposes, you do so on your own responsibility and as the provider or deployer of the resulting system under the applicable regime — including, where relevant, the EU Artificial Intelligence Act and, in the United States, the Fair Credit Reporting Act. Those obligations become yours, and we do not assume them.

3. Prohibited uses

You must not use NACRE Intel:

to stalk, harass, intimidate, threaten, dox or exert control over any person, or in connection with a domestic, custody or personal dispute;
to investigate a person you know or reasonably believe to be under 18;
to target or profile a person on the basis of racial or ethnic origin, political opinion, religion, trade union membership, health, sex life or sexual orientation, or to seek out such information about them;
to compile, sell or supply dossiers as a consumer report, background-check product or credit reference to third parties;
to attempt to identify or investigate a person whom we have excluded from the service, or to circumvent that exclusion by using variants of their name;
to interfere with the service: automated scraping of it, circumventing rate limits or credit accounting, probing its security, or reverse-engineering the prompts or models behind it;
in breach of any law, court order or regulatory requirement that applies to you, or of the terms of any source the service reads.

4. Sources

The service reads publicly accessible pages. It respects robots directives and, in consequence, a great deal of material — most social platforms in particular — cannot be read at all. Absence of a finding is not evidence of absence, and you should not present it as such.

5. Enforcement

We may suspend or terminate an account where we reasonably believe this policy has been breached, and we may do so without notice where there is a risk to a person. We do not routinely review the content of investigations, and this policy does not oblige us to monitor your use.

If you believe the service is being used against you or someone you know in breach of this policy, write to privacy@nacre.edda.cloud. See also the Notice to Individuals.