Acceptable Use Policy

Effective Date: September 26, 2026

This Acceptable Use Policy (“AUP”) is part of the Terms of Service (“Agreement”) between Customer and Berkman LLC (“Berkman”). It applies to all use of the Lextree compliance management platform (“Platform”) by Customer and its Authorized Users.

Capitalized terms not defined here have the meanings given in the Agreement.

1. Purpose

This AUP describes the standards of conduct Berkman expects from everyone who uses the Platform. It exists to protect the security, availability, and integrity of the Platform — and to protect all customers who rely on it.

2. General Conduct

Customer agrees to use the Platform only for lawful business purposes consistent with the Agreement. Customer must:

(a) comply with all applicable laws, regulations, and third-party rights;

(b) follow the Documentation and any usage guidelines Berkman publishes; and

3. Prohibited Conduct

Customer must not, and must not permit any Authorized User or third party to:

3.1 Security and Infrastructure

(a) attempt to gain unauthorized access to the Platform, other Accounts, other Subscriptions, or any systems or networks connected to the Platform;

(b) probe, scan, or test the vulnerability of the Platform or any related system or network without Berkman’s prior written consent;

(c) interfere with, disrupt, or place an unreasonable load on the Platform or its infrastructure — including through denial-of-service attacks, flooding, or intentional overloading;

(d) bypass, disable, or circumvent any security, authentication, or access-control feature of the Platform;

(e) introduce viruses, worms, trojans, ransomware, or other malicious code into the Platform; or

(f) use any automated means — including bots, scrapers, crawlers, or scripts — to access or interact with the Platform, except through APIs Berkman makes available and in compliance with the API Terms.

3.2 Content and Data

(a) upload, store, or transmit content that is illegal, defamatory, obscene, threatening, harassing, or hateful;

(b) upload, store, or transmit content that infringes any third party’s intellectual property rights, privacy rights, or other legal rights;

(c) store Prohibited Data as defined in Section 4.4 of the Agreement, including personal identification numbers, health information, payment card data, biometric identifiers, GDPR special-category data, or criminal-conviction and offence data;

(d) impersonate any person or entity, or misrepresent Customer’s or an Authorized User’s identity or affiliation; or

(e) use the Platform to collect, store, or process personal data in a way that violates applicable privacy or data protection law.

3.3 Abuse of the Platform

(a) use the Platform to send unsolicited messages, spam, or bulk communications;

(b) use the Platform to build, train, or improve a competing product or service;

(c) resell, redistribute, or make the Platform available to anyone other than Authorized Users under Customer’s Subscription;

(d) use the Platform outside the business purposes permitted by Sections 3.1 and 3.3(d) of the Agreement, which include authorized client records and compliance work; or

(e) encourage, assist, or enable any third party to do anything this AUP prohibits.

4. Resource Consumption

Customer must use the Platform’s resources — including storage, API calls, and processing capacity — within the limits of its Subscription Plan. Berkman may throttle or restrict access if Customer’s usage significantly exceeds normal patterns or its Plan limits.

If Berkman identifies unusual usage, Berkman will notify Customer and work with Customer to resolve it before taking further action, except where immediate action is necessary to protect the Platform.

5. AI Features

If Customer uses AI Features described in Section 19 of the Agreement:

(a) Customer must not use AI outputs as a substitute for qualified professional review — AI outputs are assistive tools, not legal, tax, or regulatory advice;

(b) Customer must not use AI Features to generate content that is misleading, fraudulent, or harmful;

(c) Customer must not circumvent security controls to extract protected non-public software or data. This restriction does not limit rights granted by applicable open-source licenses or mandatory law; and

(d) Customer is responsible for its use of AI Features under applicable laws. Berkman remains responsible for obligations applicable to its own role and processing.

6. Monitoring and Enforcement

6.1 Right to Monitor

Berkman may monitor use of the Platform to enforce this AUP, protect Platform security, and comply with legal obligations, subject to the Agreement and applicable DPA. Berkman does not routinely monitor the content of Customer Data, but may review it when Berkman has reason to believe a violation has occurred.

6.2 Reporting Violations

Customer should report activity that violates this AUP to team@lextree.ai.

6.3 Enforcement Actions

If Berkman reasonably believes Customer has violated this AUP, Berkman may take one or more of the following actions:

(a) notify Customer and request that Customer cure the violation;

(b) temporarily restrict or suspend Customer’s access to the Platform;

(d) terminate the Agreement as provided in its Section 8.3.

6.4 Notice and Opportunity to Cure

Where practicable, Berkman will notify Customer and give Customer a reasonable opportunity to cure a violation before suspending access or removing content. Berkman may suspend access or remove harmful content immediately, without prior notice, if a violation poses an imminent risk to the Platform, other customers, or third parties. Suspension does not itself terminate the Agreement; termination follows Section 8.3 of the Agreement, including its notice and cure provisions.

6.5 No Liability for Enforcement

To the extent permitted by law and subject to Berkman’s express obligations under the Agreement and applicable DPA, Berkman is not liable for actions taken in good faith to enforce this AUP. Section 14 of the Agreement governs applicable limitations and exceptions.

7. Changes to This Policy

Berkman may update this AUP from time to time. Material changes follow the notice procedures in Section 9 of the Agreement. Non-material changes take effect when posted. Continued use of the Platform after changes constitutes acceptance.

8. Contact

Questions about this AUP and reports of violations may be sent to team@lextree.ai.

This Acceptable Use Policy is Exhibit B to the Terms of Service.