What Jatzo may not be used for

This policy says what the Jatzo service may not be used for. It applies to everybody who uses it.

You may use Jatzo to

Check emails you, or your organisation, received and are entitled to have checked, to decide whether they are safe to act on, and to learn to recognise phishing and fraud.

You may not use Jatzo to

1. Attack or probe any system, including Jatzo's own. That includes trying to get round its limits, its isolation, or its authentication; testing it for vulnerabilities without following our vulnerability disclosure policy; and overloading it.
2. Gain access you are not entitled to, to any account, mailbox or system, or help anybody else do so. Using Jatzo in a way that would be an offence under the Computer Misuse Act 1990 is prohibited.
3. Check email you have no right to process: an email from a mailbox you have no authority over, or one obtained unlawfully.
4. Test or tune a phishing campaign, by submitting messages you or somebody else wrote in order to learn how to avoid detection. Authorised internal awareness training with your own organisation's agreement is not prohibited, provided it is the kind a reasonable security team would run.
5. Build a competing product, including by collecting Jatzo's results, rules or scores at scale.
6. Share an account or a Seat, or give somebody access to a Workspace they are not authorised to be in.
7. Submit special category data or criminal offence data unnecessarily. Jatzo does not need the health, beliefs or criminal record of anybody in order to check an email. If an email contains them, you may still check it; do not send such information to us in any other way.
8. Break any law, including data protection, export control and sanctions law.

What happens if the policy is broken

Jatzo may suspend access for the Workspace or the individual concerned, as the Business Terms (clause 15) and the website Terms of Service describe, and may end the agreement for a serious or repeated breach. Jatzo will report conduct it reasonably believes is a crime to the relevant authorities where it is required or appropriate to do so.

Reporting misuse

Tell us through the contact form, choosing Security / Privacy.