Acceptable Use Policy

Version 2.0 — 23 September 2026

1. Purpose and applicability

This Acceptable Use Policy ("AUP") describes the permitted and prohibited use of Databeamer.

Databeamer is a secure communication and collaboration platform provided by:

Full Join B.V.
Philitelaan 57, unit 404B
5617 AK Eindhoven, the Netherlands
Chamber of Commerce (KvK) number: 71160620
Telephone: 040 209 4163
Email: hello@databeamer.io

The service may be used, among other things, for secure communication, collaboration, storage, information exchange, and organizing information within organizations and Workspaces.

This AUP applies to all users of Databeamer and forms part of the General Terms and Conditions.

This AUP is intended to:

protect the security and reliability of Databeamer;
protect users and third parties against misuse;
promote lawful and responsible use of the Service;
clarify which forms of use are not permitted.

Where a separate agreement contains additional terms of use, those arrangements apply alongside this AUP.

2. Basic principles

Databeamer may be used only for lawful purposes and in a manner that does not pose an unacceptable risk to other users, third parties, Full Join, or the operation of the Service.

Users and organizations are responsible for their own use of Databeamer and for use by persons to whom they have granted access.

The fact that Databeamer uses strong client-side end-to-end encryption does not change the obligation to use the Service lawfully and responsibly.

Full Join respects the confidentiality that results from the cryptographic architecture. This AUP is therefore primarily directed at the use of the Service and the conduct of users, rather than at routine content review.

3. Prohibited use

Databeamer may not be used for activities that violate applicable laws and regulations, this AUP, or the General Terms and Conditions.

3.1 Illegal activities

Databeamer may not be used to:

commit, prepare or facilitate criminal offenses;
facilitate fraud, deception, identity theft, or other forms of misrepresentation;
trade in stolen data or assets;
facilitate money laundering or other financial crime;
incite others to engage in criminal activity;
circumvent applicable sanctions, export or trade restrictions.

3.2 Harm to individuals

Databeamer may not be used to intentionally threaten, intimidate, stalk, blackmail, or otherwise seriously harm individuals.

Facilitating violence or other serious forms of physical harm is likewise not permitted.

3.3 Sexual abuse and exploitation

Databeamer may not be used for sexual exploitation or abuse.

In particular, Databeamer may not be used to produce, distribute, obtain, or facilitate material involving the sexual abuse of minors.

3.4 Terrorism and violent extremism

Databeamer may not be used to plan, facilitate or support terrorist activities or violent extremism.

3.5 Intellectual property and trade secrets

Databeamer may not be used in a manner that infringes the intellectual property rights, copyrights, trademark rights, database rights or trade secrets of others.

The user or organization must hold the rights or permission necessary to store, process, transmit or share the relevant information.

3.6 Deception, impersonation and misuse of the Verification Mark

It is not permitted to:

impersonate another person or organization;
falsely present oneself as a representative of Full Join;
use identities or organizations in a misleading manner;
use Databeamer to intentionally mislead recipients as to the origin of communication;
falsely present oneself as a verified user or verified organization, or create the impression that a Verification Mark is present when this is not the case;
present a Verification Mark as a quality mark, certification, professional qualification or license;
provide false or falsified information when applying for a Verification Mark.

What the Verification Mark does and does not mean is set out in Chapter 4 of the General Terms and Conditions.

4. Misuse of the Service

4.1 Unauthorized access

It is not permitted to:

gain access to accounts, organizations or Workspaces for which no permission has been granted;
circumvent access rights or authentication mechanisms;
use the accounts or authentication means of others without permission;
circumvent the security measures of Databeamer or of underlying systems.

4.2 Attacks and disruption

It is not permitted to intentionally disrupt or overload Databeamer or the underlying infrastructure. This includes, among other things:

denial-of-service and distributed denial-of-service attacks;
intentionally causing excessive load;
automated attacks on authentication;
distributing malware;
executing malicious code;
intentionally causing disruptions or damage to data.

4.3 Security research and vulnerabilities

It is not permitted to carry out security research on Databeamer in a manner that could cause damage or disrupt the service for other users.

Security research conducted responsibly and in accordance with the applicable procedure is welcome. Vulnerabilities can be reported via security@databeamer.io.

Our commitment. Where a researcher complies with the rules for responsible research set out in Chapter 16 of the Security Policy, Full Join will not report the matter to the police and will not take civil action against that researcher in connection with that research. The same commitment applies where a researcher unintentionally accesses third-party data, reports this immediately, does not further distribute the data, and destroys it at our request.

This commitment does not affect Full Join's obligation to comply with a legally valid request from a competent authority.

4.4 Spam and unsolicited communication

Databeamer may not be used for:

spam;
mass unsolicited communication;
phishing;
misleading commercial communication;
sending communications without the required consent;
intentionally circumventing anti-abuse measures relating to communication functionalities.

4.5 Misuse of accounts

Accounts and Seats may be used only in accordance with the subscription chosen and the arrangements made.

It is not permitted to:

resell accounts or Seats without permission;
intentionally share access rights with unauthorized persons;
structurally circumvent subscription limits;
have multiple persons structurally use a single personal account where this is not explicitly permitted contractually;
use an organization account beyond the authority granted by the organization.

5. Responsibility for access and Customer Content

5.1 Access rights

The user or organization is responsible for carefully granting access rights.

For organizational use, the organization determines which users are granted access to the organization and which individuals are granted access to specific Workspaces.

The organization is also responsible for timely revocation of access where a person is no longer authorized. This also applies to withdrawing a Verification Mark during offboarding.

5.2 Transfers, Requests, Forms and Mail

Where information is shared via Transfers, Requests, Forms or Mail, the user or organization is responsible for correctly selecting recipients and other involved individuals.

The user must verify that information is provided to the correct persons, and that the delivery mode chosen fits the sensitivity of the information. The available modes are set out in §4.5 of the Security Policy.

5.3 Account and recovery data

Users are responsible for protecting their authentication and recovery data.

It is not permitted to intentionally make recovery phrases, passwords, PINs or other security data available to unauthorized persons.

5.4 Lawful Customer Content

The Customer is responsible for the lawfulness of the information stored, processed or shared via Databeamer.

The Customer must ensure that it holds the necessary rights, permission and legal basis to process the relevant information via Databeamer.

6. Encryption and confidentiality

6.1 No exception to the law

Databeamer's client-side end-to-end encryption is intended to protect the confidentiality and security of customer information.

Encryption does not provide a justification for unlawful use of the Service.

6.2 No routine content review

Full Join does not hold sufficient key material to independently decrypt protected Customer Content into plaintext. The full description of this architecture, including the modes for delivery to recipients without a Databeamer account, is set out in Chapter 4 of the Security Policy.

Full Join therefore does not carry out routine content review of protected Customer Content.

This also means that a report concerning specific content does not automatically mean that Full Join is itself able to view, assess or delete that content.

6.3 What Full Join can assess

Depending on the situation, Full Join may investigate the use of the Service on the basis of information available within its area of management. This may relate to:

account data;
authentication and security events;
access and authorization data;
Workspace and user relationships;
usage patterns;
technical data;
reports from users or third parties;
information provided by the user concerned;
lawful requests from competent authorities.

Exactly which data is available to Full Join depends on the relevant functionality and on Databeamer's technical architecture.

7. Reporting misuse or unlawful use

7.1 Making a report

Anyone may make a report where they reasonably suspect that Databeamer is being used in violation of this AUP, the General Terms and Conditions, or applicable law.

A report should, as far as possible, contain sufficient information to assess the situation, including:

the identity and contact details of the reporter;
a description of the alleged misuse;
relevant data with which the account, organization, Workspace, or communication concerned can be identified;
the reason why the use is suspected to violate this AUP or the law;
relevant supporting information.

A report may be addressed to compliance@databeamer.io or submitted via the form on our website.

Security incidents and technical vulnerabilities can be reported via security@databeamer.io.

7.2 Assessment of reports

Full Join assesses reports on the basis of the information reasonably available to it, taking into account:

the severity and nature of the report;
the reliability of the information provided;
the available technical information;
the rights and interests of the users involved;
applicable laws and regulations;
the technical possibilities and limitations of Databeamer.

A report does not automatically mean that a violation has occurred.

7.3 Reports concerning protected content

Where a report concerns protected Customer Content that Full Join cannot decrypt, Full Join is unable to independently assess that content in plaintext.

Full Join may, where appropriate, ask the relevant user or organization for further information and may, depending on the situation, take measures with respect to the account, the access, or the use of the Service.

Full Join will not act as though it has assessed content that it is technically unable to view.

8. Enforcement

8.1 Possible measures

Where Full Join determines, or reasonably suspects, that Databeamer is being used in violation of this AUP, the General Terms and Conditions, or applicable law, Full Join may take appropriate measures.

Depending on the severity and the circumstances, these measures may include, among other things:

a warning;
a request to adjust the use;
withdrawal of a Verification Mark;
temporarily restricting certain functionalities;
blocking specific access;
suspending an account or organization;
terminating an account or agreement;
reporting a situation to a competent authority where this is legally required or justified.

The measure taken is proportionate to the nature, severity and circumstances of the situation.

8.2 Immediate measures

Where there is a serious and immediate risk to the safety, integrity or availability of Databeamer or to other users, Full Join may take appropriate measures without prior warning.

8.3 Organization accounts

Where Databeamer is used via an organization, Full Join will, where possible, first inform and involve the relevant organization administrator.

This is not required where immediate action is necessary, where the organization itself is part of the misuse, or where laws or regulations preclude prior notification.

8.4 No general content removal

Because protected Customer Content is encrypted client-side, Full Join is not always able to directly delete specific content.

Where measures are necessary, they may therefore, depending on the circumstances, relate to access to the account, the organization, the Workspace, or the relevant functionality.

9. Requests from competent authorities

Full Join may be required to comply with a legally valid request, order, or other obligation from a competent authority.

Full Join assesses such requests in accordance with applicable laws and regulations.

Where a request concerns protected Customer Content that Full Join is technically unable to decrypt, Full Join cannot provide that content in plaintext to the relevant authority.

To the extent legally permitted, Full Join assesses the validity and scope of a request and informs the Customer where this is possible and appropriate.

10. Misuse of reporting procedures

It is not permitted to intentionally misuse reporting, complaint or escalation procedures. This includes, among other things:

knowingly false reports;
false accusations;
reports intended to harass another user;
knowingly providing misleading information;
repeatedly submitting unfounded reports in order to influence access to the Service.

Full Join may take appropriate measures against misuse of reporting procedures.

11. Geographic and legal restrictions

Databeamer is primarily aimed at customers and organizations within the European Union, the United Kingdom, Norway and Switzerland.

This focus does not constitute a ground for refusal: Full Join does not refuse any customer, and does not restrict access, on the basis of nationality, place of residence, or place of establishment within the European Union.

Databeamer may not be used where this would result in Full Join or the user violating applicable sanctions, export or trade restrictions.

Full Join may restrict access only where necessary to comply with sanctions legislation, export controls, licensing conditions, or other legal obligations to which it is subject.

12. Changes to this AUP

Full Join may amend this AUP where necessary due to:

changes to the Service;
new functionalities;
developments in technology;
security risks;
changes in laws and regulations;
changes in business operations or policy.

The current version is published on the Databeamer website and states the version number and the date of the last change.

For material changes that affect a Customer's position, notice will be given in advance. The right of termination set out in Chapter 17 of the General Terms and Conditions applies to such changes.

13. Relationship to other documents

This AUP forms part of Databeamer's legal framework and should be read in conjunction with:

the General Terms and Conditions;
the Privacy Statement;
the Cookie Policy;
the Security Policy;
the public Data Processing Agreement, where applicable;
any additional contractual arrangements.

This AUP sets out what is understood by responsible use of Databeamer. The Security Policy describes Full Join's security measures. The Privacy Statement describes Full Join's processing of personal data. The Data Processing Agreement sets out the arrangements regarding the processing of personal data on behalf of the Customer.

In the event of a conflict, the order of precedence set out in §1.4 of the General Terms and Conditions applies.

14. Contact

For reports of possible misuse or compliance matters:
compliance@databeamer.io or the form on our website

For security incidents and vulnerabilities:
security@databeamer.io

For other questions:
hello@databeamer.io or 040 209 4163

Full Join B.V.
Philitelaan 57, unit 404B
5617 AK Eindhoven, the Netherlands
Chamber of Commerce (KvK) number: 71160620