Acceptable Use Policy

1. Purpose and scope

This Acceptable Use Policy sets the limits on how the Witnio service may be used. It forms part of the Terms of Service and applies to every account, user, API key and integration.

Witnio's business is verifying a customer's own systems with the customer's own test traffic. Everything below follows from that single principle: you may observe what you own or hold written authorisation to observe, and nothing else.

Witnio does not sell anonymous message reception, does not sell access to another person's communications, and does not support grey-area uses. If you need a service that receives messages for accounts you do not control, Witnio is the wrong supplier.

2. The authorisation rule

Before you configure a target, a number or a sender, you must own it or hold the owner's express written authorisation to test and monitor it. Witnio may ask you to produce that authorisation at any time and may disable the configuration until you do.

Every message and call you direct at a Witnio number must be your own test traffic, originated by you or by a provider acting on your instruction. It must never be a communication addressed to a real end user.

Every sender you register as authorised must be one you control. A check with no authorised sender observes nothing: that is deliberate, and it is not a defect.

Authorisation is continuing. If you lose it — a contract ends, a domain changes hands, a number is released — remove the configuration immediately.

3. Prohibited uses

You may not use the service to:

• receive, read or intercept a message, call or one-time passcode addressed to another person;
• register for, recover, take over or retain access to an account, wallet, profile or identity that is not yours;
• test, scan, probe or monitor a system, domain, application, number or account you do not own and are not expressly authorised to test;
• commit or facilitate fraud, identity theft, phishing by message or by call, social engineering, or the evasion of a fraud or anti-abuse control;
• send or support unsolicited bulk messaging, or evade a carrier's filtering, registration or brand-verification requirement;
• operate a SIM farm, a number farm, an account farm, an engagement farm, or any automated creation of accounts at scale;
• harass, stalk, threaten, defame or endanger any person;
• handle content that is unlawful, that sexually exploits a minor, that infringes another party's rights, or that a law forbids you to hold;
• circumvent a device limit, an account limit, a rate limit, a quota or a billing control, or share credentials in order to do so;
• disrupt, overload, degrade or reverse-engineer the platform, the devices or the evidence signing scheme;
• resell the service, or expose it to third parties as a service of your own, without a written agreement;
• alter an Evidence record, misrepresent one, or present a result as a measurement of a network, a country or a carrier that it does not describe;
• breach a law that applies to you, including laws on the interception and confidentiality of communications, telecommunications, data protection, consumer protection, and sanctions.

4. Devices, numbers and shared infrastructure

Devices, SIM cards and telephone numbers are shared platform infrastructure operated by Witnio. They are assigned to you for the scope stated in your plan; they are not sold, leased or transferred to you, and you acquire no right to a specific number beyond that assignment.

A number may be reassigned when your subscription ends or your assignment is released. Do not publish a Witnio number, do not register it with a third-party service, and never use it as a contact or account-recovery number.

Where a corridor pairs a number registered in one country with a device physically in another, you must not describe a result from it as a measurement of that country's network.

5. Limits and fair use

Every plan carries explicit limits. Requests are rate-limited per tenant and per key, concurrency and burst are capped, and admission control may queue or refuse work when the fleet or a corridor is saturated.

Do not try to exceed a limit by opening additional accounts, rotating keys, or distributing one workload across tenants. Persistent pressure on limits is treated as abuse rather than as a request for capacity — ask us for capacity instead.

At 80 per cent of a limit you are warned; at 100 per cent your plan's overage policy applies, which by default pauses consumption rather than letting spend run.

6. Security research

Witnio welcomes reports about its own platform. Test only against your own tenant, never against another tenant, never against the underlying systems of the device farm, and never in a way that degrades service for others. Do not access, alter or retain data that is not yours, and report what you find to the security contact below before disclosing it anywhere else.

Authorisation to test Witnio does not extend to Witnio's providers, to carriers, or to any third-party system reachable from a Witnio device.

7. Enforcement

Witnio may act immediately and without prior notice where it reasonably believes this policy has been breached, or that the platform, a customer or a third party is at risk. The available measures are: suspend an API key; suspend a user; suspend a tenant; stop new jobs; preserve evidence; and alert.

Enforcement is targeted rather than platform-wide, and it preserves the Evidence already generated so a dispute can be examined afterwards.

Witnio may also terminate the account without refund, recover the costs the breach caused, report unlawful activity to the competent authority and to any affected provider, and preserve records for that purpose.

You are responsible for everything that happens under your account, including the acts of your users and of anything using your keys.

8. Reporting abuse

If you believe a Witnio number, device or account is being used against this policy, write to [email protected] with the number or account, the time in UTC, and what you observed. Security vulnerabilities in the platform go to [email protected].

Witnio investigates every report and acts on what it can verify.

9. Changes

Witnio may update this policy as new forms of abuse appear. The version in force is the one published here at the time of your use.

A change that materially restricts permitted use is notified to account contacts at least 30 days in advance, unless a legal requirement or an active abuse makes a shorter period necessary.