Acceptable Use Policy

Effective Date: February 15, 2026
Last Updated: February 15, 2026

1. Introduction

This Acceptable Use Policy ("AUP") governs your use of the Nublou Cloud P&L platform (the "Services") provided by Nublou ("we," "us," or "our"). This AUP applies to all users who access or use the Services, including employees, contractors, and authorized agents of the subscribing entity ("Customer," "you," or "your").

This AUP is incorporated by reference into the agreement between you and Nublou governing your use of the Services (the "Agreement"). Capitalized terms not defined in this AUP have the meanings given to them in the Agreement.

By using the Services, you agree to comply with this AUP. If you do not agree, you must discontinue use of the Services.

2. Scope

This AUP applies to all use of the Nublou product deployed via Azure Marketplace into your Azure subscription, including:

  • The Nublou web application and administration interface
  • Data ingested into, processed by, or published from Nublou (including cloud billing data, revenue data, budgets, business metadata, and integrations with third-party systems)
  • Reports, datasets, and outputs generated by Nublou and consumed via Power BI, Microsoft Fabric, Excel, Office 365 integrations, or other connected tools
  • Any APIs hosted within your tenant as part of the Nublou deployment

This AUP does not govern use of the Nublou marketing website (nublou.io), which is covered by our Privacy Policy.

3. Permitted Use

The Services are provided for the purpose of cloud financial management, including Cloud P&L analysis, cost allocation, budgeting, unit economics, and related financial and operational reporting for your organization.

You are permitted to:

  • Import and integrate data from cloud providers (Azure, AWS, GCP), ERP systems (e.g., Microsoft Dynamics), CRM systems (e.g., Salesforce), and other business systems to enrich your Cloud P&L model.
  • Import business-sensitive information, including revenue data, budgets, ownership information, team names, cost center details, and other business metadata. This data resides in your Azure tenant and is governed by your own data classification and protection policies.
  • Share data and outputs with other users within your organization using Microsoft data services (Power BI, Microsoft Fabric, Office 365 integrations, Excel) and any other tools you connect. There are no Nublou-imposed restrictions on the number of users who may access shared data.
  • Configure security controls on your data, including row-level protections and role-based access controls within Nublou and connected Microsoft services. You determine and manage these controls.
  • Use APIs hosted within your Azure tenant as part of the Nublou deployment for internal automation, integration, and data consumption purposes. These APIs run in your infrastructure, and you control access to them.

4. Prohibited Use

You agree not to use the Services for any purpose that is unlawful, harmful, or inconsistent with the intended use described in Section 3. Specifically, you shall not:

4.1 Illegal and harmful activities

  • Use the Services in violation of any applicable local, national, or international law or regulation.
  • Use the Services to process, store, or transmit data that you do not have the legal right to use or that infringes the intellectual property rights of any third party.
  • Use the Services to facilitate fraud, money laundering, or any other illegal financial activity.

4.2 Reverse engineering and competitive misuse

  • Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, algorithms, data models, or architecture of the Nublou platform, except to the extent expressly permitted by applicable law that cannot be waived by contract.
  • Use the Services, or any data or insights derived from the Services, to build, improve, train, or benchmark a competing product or service.
  • Systematically scrape, extract, or harvest Nublou platform content, interfaces, or outputs for purposes unrelated to your authorized use of the Services.

4.3 Security and integrity

  • Attempt to gain unauthorized access to any part of the Services, other customers' deployments, or Nublou's vendor-side systems.
  • Introduce viruses, malware, worms, trojan horses, or other harmful code into the Services or any connected systems.
  • Interfere with, disrupt, or degrade the performance or availability of the Services, including the Nublou licensing and operational heartbeat mechanisms.
  • Circumvent, disable, or tamper with any security features, authentication mechanisms, access controls, or licensing checks implemented in the Services.
  • Probe, scan, or test the vulnerability of the Services or any associated infrastructure without prior written authorization from Nublou.

4.4 Misrepresentation

  • Impersonate any person or entity, or misrepresent your affiliation with any person or entity, in connection with the Services.
  • Provide false or misleading information in connection with your account, licensing, or billing.

5. Your Data and Content

5.1 Ownership

You retain all ownership rights in the data and content you import into or create within the Services ("Your Data"). Nublou does not claim any ownership interest in Your Data.

5.2 Responsibility

You are solely responsible for:

  • The accuracy, quality, legality, and appropriateness of Your Data.
  • Ensuring that your use of data imported from third-party systems (e.g., ERP, CRM, billing exports) complies with your agreements with those third-party providers.
  • Configuring and maintaining appropriate access controls, row-level security, and role-based permissions on Your Data within the Services and connected Microsoft data services.
  • Ensuring that any business-sensitive or confidential information imported into the Services is handled in accordance with your organization's data classification and protection policies.

5.3 No monitoring obligation

Because Your Data resides in your Azure tenant, Nublou does not monitor, review, or audit the content of Your Data. You are responsible for ensuring compliance with this AUP and applicable laws with respect to Your Data.

6. Partner and Reseller Use

6.1 Authorized partners

Nublou works with authorized partners and resellers who may deploy, configure, and support the Services on behalf of Customers. Partners may perform Azure Marketplace deployments on your behalf as part of the CSP reseller process.

6.2 Partner obligations

Authorized partners must:

  • Comply with a separate Nublou Reseller Agreement governing their rights and obligations.
  • Adhere to this AUP in their own use of and interaction with the Services.
  • Ensure that any Customer deployments they manage are properly licensed and that applicable fees are paid to Nublou as specified in the Reseller Agreement.

6.3 Restrictions

  • Partners may not provide access to the Services to end customers free of charge to Nublou. All deployments must be covered by valid licensing arrangements.
  • Partners may not sublicense, redistribute, or repackage the Services except as expressly authorized in their Reseller Agreement.
  • Unauthorized resale, redistribution, or provision of the Services is prohibited.

7. Enforcement

7.1 Approach

Nublou takes a flexible approach to enforcement. We prefer to work with Customers to resolve issues collaboratively. However, we reserve the right to take action when necessary to protect the Services, our users, and our business.

7.2 Actions we may take

If we reasonably believe you have violated this AUP, we may, at our sole discretion and without prejudice to any other rights or remedies:

  • Notify you of the violation and request that you take corrective action within a specified timeframe.
  • Suspend your access to the Services, in whole or in part, until the violation is resolved.
  • Terminate your access to the Services and the Agreement if the violation is material, repeated, or not remedied after notice.

7.3 Severity-based response

  • Minor or inadvertent violations (e.g., misconfiguration, unintentional policy breach): We will notify you and work with you to resolve the issue.
  • Serious violations (e.g., reverse engineering, competitive benchmarking, security interference, licensing circumvention): We may suspend access immediately and without prior notice if we reasonably believe that continued use poses a risk to the integrity, security, or availability of the Services.

7.4 No liability for enforcement actions

Nublou shall not be liable to you or any third party for any suspension or termination of access to the Services taken in good faith pursuant to this AUP.

8. Reporting Violations

If you become aware of any violation of this AUP, including by other users within your organization, please report it promptly to:

Email: security@nublou.com
Subject line: [AUP Violation Report]

We will investigate all reports in good faith and take appropriate action.

9. Changes to This Policy

We may update this AUP from time to time. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy.
  • Provide at least 30 days' notice via email or a prominent notice within the Services before the changes take effect.

Continued use of the Services after the effective date of a revised AUP constitutes your acceptance of the updated terms.

10. Contact Us

If you have questions about this Acceptable Use Policy, please contact us:

Nublou
Email: legal@nublou.com
Subject line: [AUP Inquiry]

Last updated: February 15, 2026