Launching Openfort Enterprise

Openfort Acceptable Use Policy

Last Updated: August 6, 2026

1. How to Use This Policy

This Acceptable Use Policy ("Policy") describes the businesses, activities, and uses that are prohibited when using the wallet infrastructure, key-management, and payment orchestration services (the "Services") provided by Alamas Labs Inc., doing business as Openfort ("Openfort," "we," "us," or "our"). It applies to everyone who accesses the Services: developers integrating our SDKs and APIs, businesses on managed, hybrid, or self-hosted deployments, and end users of applications built on Openfort.

This Policy is part of, and incorporated into, our Terms of Service and Developer Terms. By using the Services, you agree to comply with this Policy. If you do not agree, do not use the Services.

2. Restricted Jurisdictions and Persons

You may not use the Services if you are:

  • Located in, ordinarily resident in, or operating from any country or region subject to comprehensive economic sanctions, including Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine;
  • An individual or entity named on any restricted-party list maintained by the United States, United Kingdom, European Union, or United Nations, including the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) Specially Designated Nationals and Blocked Persons List;
  • Owned or controlled by, or acting on behalf of, any person or entity described above.

3. Prohibited Businesses and Activities

You may not use the Services in connection with any business or activity that involves:

  • Illegal drugs, controlled substances, or paraphernalia marketed for illegal use;
  • Child sexual abuse material or any sexual content involving minors;
  • Human trafficking or its facilitation;
  • Illegal adult services;
  • Fraud, deceptive practices, Ponzi or pyramid schemes, market manipulation, or the sale of counterfeit goods;
  • Money laundering, terrorist financing, or evasion of sanctions or export controls;
  • Infringement of intellectual property or other proprietary rights;
  • Unlicensed money services, gambling, securities, or other regulated activity conducted without the licences, registrations, or authorizations required in the jurisdictions where you operate;
  • Ransomware, malware, or the proceeds of hacks, exploits, or theft of digital assets;
  • Any other activity that violates applicable law or regulation.

4. Prohibited Uses of the Services

Regardless of your business, when using the Services you may not:

  • Provide false, inaccurate, or misleading identity or business information to Openfort, or conceal the nature of your activity;
  • Hold yourself out as a custodian, money transmitter, exchange, or similar regulated business built on the Services without the required licensure, or represent that Openfort provides you with such licensure;
  • Attempt to access, extract, or reconstruct private keys, key shares, or credentials belonging to other users, or otherwise compromise the security of any wallet, signer deployment, or the Services themselves;
  • Bypass, probe, or defeat authentication, transaction policies, rate limits, or other access controls, except through security research conducted with our prior written authorization;
  • Use gas sponsorship, paymasters, or fee abstraction to subsidize activity prohibited by this Policy or to drain sponsored funds through artificial or automated transactions;
  • Send spam, operate bot networks that simulate genuine users, or scrape the Services other than through our documented APIs;
  • Use Openfort's names, logos, or trademarks except as permitted by our brand guidelines or a written agreement, or misrepresent your relationship with Openfort;
  • Resell or white-label the Services in a manner that conceals from us the identity of the businesses operating on them, except under an enterprise agreement that provides for it;
  • Interfere with or disrupt the integrity or performance of the Services or the data they contain.

5. Enforcement

We may investigate suspected violations of this Policy and take any action we consider appropriate, including suspending or terminating access to the Services immediately and without prior notice, disabling API keys or projects, declining to sponsor transactions, and reporting activity to law enforcement or regulatory authorities where we believe we are required or permitted to do so. Self-hosted deployments remain subject to this Policy with respect to any Openfort-operated services they consume, including APIs, support, and updates.

6. Changes to This Policy

We may update this Policy from time to time as the Services, the law, and industry practice evolve. Material changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Services after changes become effective constitutes acceptance of the updated Policy.

7. Contact

Questions about this Policy, or reports of activity that may violate it, can be sent to legal@openfort.io.