Acceptable Use Policy

1. Who this applies to

This Acceptable Use Policy (“AUP”) applies to every person who accesses or uses the Writford platform, whether as a solicitor, an authorised person within a regulated firm, or a member of a customer's personnel. By accessing Writford you agree to comply with this AUP.

2. Professional-responsibility expectations

Writford is an AI assistant supplied to qualified UK legal professionals. The solicitor (and, where applicable, the regulated firm) remains responsible for any work product produced with assistance from the platform, including the accuracy of legal analysis, the correctness of cited authority, and compliance with the SRA Standards and Regulations.

You agree that you will:

• independently verify legal authority before relying on Writford's output in advice given to a client or in correspondence sent to a court, tribunal or counterparty;
• not represent Writford's output as your own independent legal analysis without verification;
• use Writford in a manner consistent with paragraph 6.3 of the SRA Code of Conduct (confidentiality) and the duty in paragraph 1.4 of the Code (not misleading clients);
• make appropriate disclosures to clients about your use of artificial intelligence in their matter where required by your professional rules;
• maintain your own records of advice given, in line with your firm's file-management policy.

3. Prohibited uses

You will not use Writford to:

1. commit, facilitate or attempt any criminal offence under English law or the law of any jurisdiction where the conduct also takes place;
2. plan, execute or facilitate fraud, money laundering, terrorist financing, sanctions evasion, child sexual abuse, modern slavery, harassment, or any form of violence or abuse;
3. create or distribute materially false, misleading or defamatory legal content intended to deceive a court, tribunal, regulator, counsel, counterparty or client;
4. attempt to impersonate another person, including by signing legal documents with a name that is not your own or that you are not authorised to use;
5. process personal data unlawfully, including processing without a lawful basis under UK GDPR Article 6 (or Article 9 where relevant);
6. generate content designed to evade or undermine the SRA Standards and Regulations, anti-money-laundering rules, or any other binding professional regulation;
7. upload, process, transmit or generate content that infringes the intellectual-property rights of a third party where you have no licence to do so;
8. upload malware, viruses, ransomware, exploit code or any executable content;
9. attempt to extract, reverse-engineer, copy or otherwise obtain the source code, model weights, prompt templates or proprietary configuration of the platform;
10. circumvent rate limits, billing, authentication, access controls, or any other technical limit imposed by the platform; or to share an account with another person other than as expressly permitted by the Terms of Service;
11. conduct automated load-testing, scraping, or stress-testing of the platform without prior written agreement from Writford;
12. resell, sub-license or otherwise commercially exploit the platform outside the licence granted under the Terms of Service.

4. Content quality and verification

Writford's output is generated by large-language-model AI and grounded against retrieved sources where possible, but it is not legal advice. You must:

• read every cited authority before relying on it;
• treat any source or citation flagged as lower-confidence or unverified as an instruction to verify against current primary authority before reliance;
• not present generated output to a client, court or counsel as if it had been independently verified when it has not;
• not use Writford to produce content for unsolicited bulk communications, “churn” submissions to a regulator, or any conduct that would breach the SRA's rules on advertising or unsolicited approaches.

5. Client confidentiality and minimum-necessary data

You agree to apply the data-minimisation principle in UK GDPR Article 5(1)(c) when entering information into Writford. In particular:

• do not paste client identifiers (names, addresses, dates of birth, NI numbers, passport numbers) into the chat where their inclusion is not necessary for the question;
• where you must include client facts, treat the entered text as confidential to your firm and your client, and store it only in Writford's matter folders intended for that purpose;
• do not enter information about a person who has not consented to that processing where consent is the only available lawful basis;
• do not enter content covered by a court order restricting disclosure (including reporting restrictions and anonymity orders) without first taking your own advice.

6. Security and account hygiene

You will:

• keep your account credentials secret; not share them with any other person; and use a unique password for Writford that you do not use elsewhere;
• enable any multi-factor authentication option offered by Writford or by your single-sign-on provider;
• notify Writford promptly at info@writford.co.uk if you suspect unauthorised access to your account, a security vulnerability, or that your credentials have been disclosed;
• log out of shared devices, including conference-room terminals;
• not retain client data in Writford for longer than necessary for the matter, in line with your firm's retention policy.

7. AI safety and responsible disclosure

If you discover a prompt or content pattern that causes Writford to produce unsafe, illegal, discriminatory or seriously misleading legal output, please report it to info@writford.co.uk with enough detail for us to reproduce it. We treat such reports as priority and will not pursue action against good-faith reporters under this AUP for the act of reporting.

8. Consequences of breach

Writford may suspend or terminate access where we reasonably believe that you have breached this AUP, where suspension is necessary to investigate a suspected breach, or where continued use of the platform poses a risk to other customers, the platform's integrity, or Writford. Where the breach is capable of remedy we will give you reasonable opportunity to remedy it before terminating, except where (a) the breach is non-remediable, (b) we are required by law or by regulatory order to act sooner, or (c) the breach involves conduct described in clause 3.

Where we reasonably believe that you have engaged in conduct described in clause 3 we may also: report to the relevant law enforcement, regulatory or professional body; preserve relevant logs and audit records in line with our legal obligations; and pursue any other remedy available under the Agreement or in law.

9. Complaints and contact

If you wish to raise a concern about another customer's conduct on the platform, or about a Writford response that you believe breaches this AUP, please contact info@writford.co.uk with the matter reference (if any), a description of the conduct, and any supporting evidence. We acknowledge receipt of such reports within five working days.

10. Changes to this AUP

We may update this AUP from time to time, for example to reflect changes in the SRA Standards and Regulations, in ICO guidance, or in the platform's features. Where the change is material we will notify account administrators on a paid plan by email at least thirty (30) days in advance, except where the change is required for safety, legal or regulatory reasons in which case it takes effect immediately and we will notify as soon as practicable.