Acceptable Use Policy

Scope and responsibility

Rwk Group Holding AB, Swedish company registration number 559544-6450, with registered address Törnrosvägen 74A, 181 61 Lidingö, Sweden, operates the Lane Labs service ("Lane", "Lane Labs", "we", "us"). This Acceptable Use Policy ("AUP") applies to each business customer and authorised user under an agreement that expressly incorporates it.

The customer is responsible for its authorised users, Customer Data, instructions, configurations and outputs. It must maintain appropriate human oversight, use Lane only for lawful business purposes and ensure it has all rights and legal bases needed for the data it submits or connects.

Unlawful, harmful or rights-infringing use

You must not use Lane to:

• violate applicable law, regulation, sanctions or a binding court or regulatory order;
• infringe, misappropriate or unlawfully disclose intellectual property, privacy, confidentiality or other rights;
• create, upload, request or distribute unlawful, fraudulent, defamatory, abusive, exploitative or deceptive material;
• facilitate violence, exploitation of children, trafficking, discrimination or other serious harm;
• impersonate another person or organisation, misrepresent the origin of an output, or conduct phishing, spam or fraud; or
• process data that you are not authorised to collect, use, disclose or transfer.

Restricted data

Do not submit special-category personal data under GDPR Article 9, personal data relating to criminal convictions or offences, authentication secrets, payment-card data, government-issued identifiers, or similarly sensitive data unless the executed Order Form and processing specification expressly authorise the category, purpose and safeguards. An ordinary financial record is not automatically special- category data, but it may still be highly confidential and must be handled proportionately.

Never place passwords, private keys, secret access tokens or full payment-card credentials in prompts, documents or support requests. Integration credentials may be provided only through a supported secure connection flow.

AI output and consequential decisions

Lane assists financial work; it does not replace professional judgment. You must arrange review by a suitably qualified person and verify material figures, assumptions, sources and conclusions before an output is relied upon or shared. Source references, where supported, are an aid to review and not a guarantee of correctness.

You must not:

• present an AI-generated output as independently verified when it has not been reviewed;
• use Lane as the sole basis for a decision that produces legal, credit, employment, insurance, investment or similarly significant effects on a person;
• use Lane to provide regulated advice unless appropriately authorised professionals independently review and take responsibility for the advice; or
• intentionally generate or deploy manipulative, discriminatory or materially misleading output.

Security and service integrity

You must not:

• gain or attempt unauthorised access to an account, workspace, system, network or data;
• share individual credentials, bypass access controls, probe for vulnerabilities without written authorisation, or evade usage or safety limits;
• upload malware or code intended to disrupt, damage, surveil or obtain unauthorised access;
• interfere with service availability or impose an unreasonable load, including through unapproved automated scraping or bulk requests;
• reverse engineer or extract source code, model parameters, system prompts or non-public training data except to the extent a prohibition is not enforceable under mandatory law; or
• resell, sublicense or make Lane available to a third party except as the Order Form expressly permits.

Good-faith security research is permitted only under a published vulnerability- disclosure process or our prior written authorisation.

Enforcement and reporting

We may investigate a credible suspected violation and take proportionate steps permitted by the Agreement, including limiting the affected activity or suspending affected access. Where practicable and lawful, we will notify the customer, preserve relevant evidence, minimise disruption and allow a reasonable opportunity to remedy the issue. Immediate action may be taken where needed to prevent imminent harm, unauthorised access or unlawful processing. Termination is governed by the Agreement.

Report suspected misuse through the notice channel stated in the Order Form. Written reports may also be sent to Rwk Group Holding AB, Törnrosvägen 74A, 181 61 Lidingö, Sweden. Do not send secret credentials or unnecessary personal data in a report.