Acceptable Use Policy — Cloud Ready Solutions

Effective: 27 July 2026 Last updated: 27 July 2026 Version: 2026.07 (calendar-versioned — YYYY.MM of issue)

1. What this policy covers

This Acceptable Use Policy ("AUP") sets out how the Partner Portal, the services CRS supplies, and the Vendor products CRS distributes may and may not be used.

It applies to:

• Partners — resellers and managed service providers who have accepted the Partner Agreement. The AUP forms part of that Agreement (see clause 1 of the Partner Agreement).
• Anyone using a Partner Portal account, whether an employee, contractor, or agent of the Partner.
• End Users, to the extent the Partner is responsible for passing these obligations on (clause 5).

Capitalised terms not defined here have the meaning given in the Partner Agreement or the Terms of Sale.

In this policy, "CRS", "we", and "us" mean Cloud Recovery Solutions Pty Ltd ABN 68 166 375 766, trading as Cloud Ready Solutions.

2. The basic obligation

You must use CRS services and Vendor products lawfully, honestly, and in a way that does not damage CRS, a Vendor, another partner, or an End User.

If you are unsure whether something is permitted, ask us first at support@cloudreadysolutions.com.au. Asking is never held against you; assuming is.

3. Prohibited use

You must not use CRS services, the Partner Portal, or Vendor products supplied by CRS to:

3.1 Break the law

• (a) commit, facilitate, or conceal any criminal or unlawful act;
• (b) infringe anyone's intellectual property rights, including by distributing unlicensed software or circumventing licence enforcement;
• (c) breach privacy or data protection law, including handling personal information without a lawful basis;
• (d) breach sanctions or export controls, or supply to a sanctioned person, entity, or destination;
• (e) engage in bribery, corruption, money laundering, or tax evasion; or
• (f) store or distribute child sexual abuse material, or content that incites violence or terrorism. We report this class of material to law enforcement without notice to you.

3.2 Harm systems or people

• (a) gain or attempt to gain unauthorised access to any system, account, or data;
• (b) introduce malware, ransomware, or any other malicious code;
• (c) conduct denial-of-service attacks, or use CRS-supplied infrastructure to launch attacks on others;
• (d) conduct penetration testing, vulnerability scanning, or security research against CRS systems or another party's systems without our prior written consent;
• (e) circumvent, disable, or interfere with any security, authentication, rate limiting, or usage-metering control; or
• (f) harass, threaten, defame, or stalk any person.

3.3 Misuse the commercial relationship

• (a) misrepresent your Tier, certification status, or relationship with CRS or a Vendor;
• (b) make claims about a product that are not substantiated by published CRS or Vendor material;
• (c) submit false, speculative, or duplicate Deal Registrations, or register opportunities you are not genuinely pursuing;
• (d) obtain partner pricing for goods or services you are not reselling to a genuine End User, including for your own resale outside the Territory;
• (e) resell, sublicense, or transfer Vendor products in breach of the applicable Vendor Terms;
• (f) share, publish, or misuse CRS pricing, cost price, rebate, or margin information (this obligation is absolute and survives termination — see clause 18.4 of the Partner Agreement); or
• (g) use CRS or Vendor Marks other than as permitted by clause 10 of the Partner Agreement.

3.4 Misuse messaging and marketing

• (a) send unsolicited commercial electronic messages in breach of the Spam Act 2003 (Cth), the Unsolicited Electronic Messages Act 2007 (NZ), or equivalent law in the Territory;
• (b) send messages that misrepresent their sender or origin, or that omit a functional unsubscribe facility where one is required; or
• (c) use CRS-supplied contact data, referred leads, or Deal Registration information for general marketing rather than for the specific opportunity (see clause 13.3 of the Partner Agreement).

4. Portal accounts and security

• 4.1 Each person who uses the Partner Portal must have their own account. Shared or generic logins are not permitted.
• 4.2 You must enable multi-factor authentication where it is available.
• 4.3 You must revoke access promptly for anyone who leaves your organisation or changes role.
• 4.4 You are responsible for everything done through your accounts, whether or not you authorised it.
• 4.5 You must tell us immediately at security@cloudreadysolutions.com.au if you suspect an account has been compromised, credentials have leaked, or data has been accessed without authority.
• 4.6 You must not automate access to the Partner Portal (scraping, bulk export, scripted ordering) without our prior written consent. Legitimate integration needs are usually approved — ask.

5. Passing obligations on to End Users

Where you resell a Vendor product, you are responsible for ensuring the End User is bound by terms at least as protective as this AUP and the applicable Vendor Terms.

If an End User's conduct would breach this AUP had you done it yourself, we may treat it as your breach for the purposes of clause 6 — so this is worth getting right in your own customer contracts.

6. What we do if this policy is breached

• 6.1 Our response is proportionate to the seriousness of the breach and to whether it is deliberate, repeated, or promptly remedied.
• 6.2 Where the breach is minor and capable of remedy, we will normally raise it with you and give you a reasonable opportunity to fix it before taking further action.
• 6.3 Where there is a serious or ongoing risk to CRS, a Vendor, another partner, an End User, or the public — including active security incidents, unlawful content, or sanctions exposure — we may suspend access immediately and without prior notice under clause 20.4 of the Partner Agreement. We will tell you why as soon as we reasonably can.
• 6.4 We may also revoke affected Deal Registrations, withdraw Tier benefits or credit, report the matter to a Vendor or to law enforcement, and terminate the Partner Agreement under clause 20.3 where the breach is material.
• 6.5 Suspension does not relieve you of amounts owing, and does not limit any other right or remedy we have.

7. Reporting a problem

If you are reporting a security vulnerability in a CRS system in good faith, tell us before disclosing it publicly and give us a reasonable opportunity to fix it. We will not pursue action against good-faith researchers who follow that path and who do not access, alter, or exfiltrate other people's data.

8. Changes to this policy

CRS may amend this AUP on 30 days' written notice under clause 23.1 of the Partner Agreement. The current version is always published at cloudreadysolutions.com.au/acceptable-use, and the published version governs (clause 23.9 of the Partner Agreement).

9. Contact

Cloud Recovery Solutions Pty Ltd (trading as Cloud Ready Solutions) ABN 68 166 375 766 Suite 707, 35-45 Spring St, Bondi Junction NSW 2022, Australia Phone: 1800 752 706