Orisma
Start your company
  1. Home
  2. Acceptable use policy

Acceptable use policy

Version 2026-11-01

Draft for review by our partner law firm. Not yet in force.

In short

  • Use Orisma only for lawful companies with honestly declared owners.
  • Keep API keys secret and give each assistant only the access it needs.
  • Do not try to reach data that is not yours or overload the service.
  • We can suspend a key or an account that breaks these rules.

1. The companies you form or manage

You may not use Orisma to:

  • form or run a company for any unlawful purpose, including fraud, money laundering, terrorist financing or tax evasion;
  • hide the true owners or controllers of a company, including through undisclosed nominee arrangements;
  • form a company for, or controlled by, a person or entity subject to EU, UN or other applicable sanctions;
  • carry on business that needs a licence the company does not have, such as banking, investment services or gambling, without first obtaining it;
  • add a person to an application without that person's knowledge and agreement.

2. The app

You may not:

  • try to access accounts, companies, documents or data that are not yours;
  • probe, scan or test the security of the service without our written permission;
  • upload files that contain malware or that you have no right to share;
  • interfere with the service, including by sending excessive automated requests;
  • resell or provide the service to others without our written agreement.

3. AI assistants, MCP and API keys

3.1 Each key belongs to you. Create one key per assistant or script, give it the narrowest company and scope (read only, or read and write) it needs, and revoke it when you stop using it.

3.2 Keep keys secret. Prefer a connection through our consent screen or a key sent in a request header. A key placed in the connection address appears in that address and in logs, so treat that address like a password.

3.3 You are responsible for everything done with your keys. Review what an assistant enters into your application before you pay or sign. Assistants cannot sign or pay, and you may not try to get around that.

3.4 Do not use keys to collect data at a volume or frequency beyond normal use for your own companies. Each key is limited to 60 requests a minute and 2,000 a day, with lower limits for changes and uploads. Above that, requests are refused for a short time.

4. Reporting

If you think a key or account was misused, or you find a security problem, write to hello@orisma.co straight away.

5. Consequences

We may revoke keys, suspend access or end the service under clause 14 of our Terms of service if these rules are broken, and report unlawful activity to the competent authorities where the law requires it.