Enforcement Actions

AskBiz enforces its policies with the following principles:

• Proportionality — the severity of the enforcement action matches the severity of the violation
• Consistency — similar violations receive similar treatment, regardless of who committed them
• Transparency — we tell you what policy was violated and what action we are taking
• Due process — except in cases requiring immediate action, we notify you before taking action and give you an opportunity to respond
• Appealability — all enforcement decisions can be appealed through our formal process

In increasing order of severity:

Warning: A formal notification that a policy has been violated. No immediate restriction on account access. A second violation of the same policy may escalate to a higher action.

Feature restriction: Access to specific features is restricted (e.g. API access suspended while investigation is ongoing, or AI chat disabled for an account found to be generating fraudulent content).

Account suspension: Temporary suspension of all account access. Duration depends on the violation — from 24 hours for minor violations to 90 days for serious ones. Data is preserved during suspension.

Account termination: Permanent closure of the account. Applied for serious or repeated violations. Data is deleted per our retention policy after 30 days.

Legal referral: For violations that may constitute criminal offences (fraud, unauthorised computer access, sanctions breaches), we may refer to law enforcement or regulatory authorities.

The following violations may result in immediate account suspension without prior notice:

• Active security attack or attempted unauthorised access to other accounts
• Confirmed fraudulent financial data generation with evidence of intent to deceive a regulated party
• Sanctions breach — use of AskBiz by or on behalf of a sanctioned entity
• Active API abuse causing service degradation for other users
• Confirmed child safety violation
• Receipt of a valid court order requiring immediate account restriction

In all other cases, we will notify you and provide an opportunity to respond before taking action.

Enforcement decisions are made by trained staff members following documented internal procedures. We do not rely solely on automated systems for enforcement decisions that restrict or terminate access.

For complex or borderline cases, a second senior staff member reviews the decision before it is implemented. All enforcement decisions are logged and subject to internal audit.

For users in the EU, our enforcement procedures are designed to comply with the procedural requirements of the EU Digital Services Act (DSA) Article 17.