Bona Fide Acceptable Use Policy

Effective date: 19 October 2026 · Last updated: 19 October 2026

This policy is part of the Bona Fide Terms of Service. It applies to every customer, workspace member, API key, AI agent and end user of a customer’s integration. Customers are responsible for their users and end users following it.

E-signature services are a common target for phishing: attackers copy the look of signature emails to steal passwords or payments. Recipients trust a Bona Fide email because it comes from us, so we protect that trust strictly.

1. You must not use Bona Fide to

Deceive or defraud

• Send phishing: envelopes, emails, documents or links designed to obtain passwords, payment details, one-time codes or other credentials, or to lead recipients to malicious websites.
• Impersonate any person, company, government body or brand, or misrepresent who the sender is, including through workspace names, branding, sender names, custom email domains or white-label features.
• Commit or facilitate fraud, forgery, identity theft, invoice or payment-redirection scams, advance-fee schemes, or get someone to sign a document by deception or coercion.
• Sign on someone else’s behalf without their authority, or falsify evidence, timestamps or audit trails.

Send unwanted or harmful messages

• Send spam or unsolicited bulk messages, or send envelopes to purchased, scraped or rented address lists.
• Send SMS codes or messages in breach of telecom rules (for example TCPA, 10DLC or carrier requirements).
• Use always-on signing links or the API to generate envelopes in volumes that are not driven by real recipients.

Break the law or others’ rights

• Upload or send content that is illegal, including child sexual abuse material, content that infringes intellectual property or privacy rights, or that is defamatory, harassing, threatening or hateful.
• Process personal data without a legal basis, or collect data from recipients that you have no right to collect.
• Violate export control or sanctions laws.
• Process protected health information without a separately signed Business Associate Agreement with us, or other data the Terms restrict.

Abuse the platform

• Upload malware, or documents designed to exploit PDF readers, converters or other software.
• Probe, scan or test the vulnerability of the Services, or bypass authentication, rate limits, usage metering or plan limits, except with our prior written permission. Please report security vulnerabilities you find to security@bonafidesign.com.
• Overload the Services (denial-of-service, excessive automated requests) or interfere with other customers.
• Access data that is not yours, or use another customer’s credentials.
• Resell or white-label the Services outside the Platform plan.
• Use the public verification or anchor endpoints to scrape or enumerate data.

Misuse AI agents

• Configure an AI agent or MCP client to sign documents on behalf of a person, or to send envelopes, without that person’s or your organization’s authorization. Automatic signing on behalf of your own organization (auto-sign roles) is allowed only where you have authorized it for that signer.

2. What we do about violations

We may, depending on severity and with or without notice: remove or block content, void envelopes, disable signing links, revoke API keys, block sending, suspend or close a workspace, and report illegal activity to authorities. We try to warn first and allow you to fix the problem unless the violation is serious, deliberate, repeated, or puts recipients at risk (phishing is always treated as serious). Where the law requires, we will tell you the reasons and how to contest the decision.

3. Reporting abuse

Received a suspicious email or document that claims to come from Bona Fide? Do not enter passwords or payment details. Forward the email to security@bonafidesign.com (this address appears in every email we send). You can also report illegal content or other abuse of the Services to the same address. Please describe the content, where it is (for example the link or envelope you received), and why you believe it is illegal or abusive. This includes notices from the European Union about content you consider illegal.

Copyright notices. Send notices of claimed copyright infringement to contact@bonafidesign.com with “Copyright notice” in the subject line, or by mail to The Republic US LLC, 16192 Coastal Highway, Lewes, Delaware 19958, USA. A notice must include the elements in 17 U.S.C. § 512(c)(3):

• a physical or electronic signature of a person authorized to act on behalf of the owner of the right claimed to be infringed;
• identification of the copyrighted work claimed to have been infringed;
• identification of the material claimed to be infringing, and information reasonably sufficient to permit us to locate it;
• your contact information, such as address, telephone number and email address;
• a statement that you have a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent or the law; and
• a statement that the information in the notice is accurate, and, under penalty of perjury, that you are authorized to act on behalf of the owner of the right claimed to be infringed.

We may terminate repeat infringers’ accounts.

4. Changes

We may update this policy to address new abuse patterns. Material changes will be notified as described in the Terms.

Contact: The Republic US LLC (Bona Fide), 16192 Coastal Highway, Lewes, Delaware 19958, USA · contact@bonafidesign.com

Published in English, which is the governing version. Questions: contact@bonafidesign.com. The Republic US LLC, 16192 Coastal Highway, Lewes, Delaware 19958, USA · +1 302 984 7474