Photo by Mikhail Nilov from Pexels

Your team just signed up for a new SaaS tool. The vendor's website looks polished, the free trial went smoothly, and now you need to review their Acceptable Use Policy (AUP) before rolling it out company-wide. But where do you start? AUPs are often buried in vendor documentation, written in legal language, and loaded with restrictions that could blindside your team mid-project.

An acceptable use policy is a set of rules that defines what customers can and cannot do with a service. Violate it, and your account can be suspended, sometimes without warning. This guide gives you a practical checklist to spot hidden traps, enforce reasonable boundaries, and protect your organization before problems arise.

TL;DR

  • An AUP sets the rules for how you can use a vendor's service; breaking them risks account suspension or data loss.
  • Search for AUPs on vendor websites, privacy policy pages, and terms of service links, they're often scattered across multiple places.
  • Use the checklist below to scan for high-risk clauses like forced arbitration, AI training on your data, and vague definitions of "prohibited use."
  • Terms Doctor's A-F grading system highlights AUP red flags in seconds, so you don't have to read dense legal text manually.
  • Document your review and share findings with stakeholders before final sign-off.

Why acceptable use policies matter for B2B teams

business meeting
Photo by Sora Shimazaki from Pexels

An AUP is more than fine print, it's a legal contract between your organization and the vendor. Acceptable use policies define which actions trigger account suspension, data deletion, or legal action. Many teams skip this step and discover problems only after a vendor locks them out mid-campaign or deletes their data without explanation.

Common AUP violations include:

  • Reselling or redistributing the service without permission
  • Using the platform to train AI models (including competitor AI systems)
  • Scraping data or automating access beyond the vendor's stated limits
  • Reverse-engineering the service or circumventing security controls
  • Using the service for illegal activities, harassment, or spam
  • Sharing login credentials across teams or departments without proper licensing
  • Storing sensitive data (payment cards, government IDs) in violation of the vendor's security tier
Each vendor writes its AUP differently. Some are strict and broadly worded; others are permissive and specific. Your job is to determine whether the vendor's rules align with your team's actual use case before committing budget and data.
0
Consumer-protection checks in Terms Doctor

How to find an acceptable use policy

Vendors often hide AUPs in three places:

  1. On the main website – Check the footer links for "Terms of Service," "Legal," or "Acceptable Use."
  2. In the privacy policy – Some vendors embed AUP language inside their privacy document.
  3. In account settings – After signing up, log into the dashboard and search for a "Legal" or "Compliance" section.
If you can't find the AUP after a quick search, email the vendor's support team and ask them to send it. Reputable vendors will respond within 24 hours. If they avoid the question or say "we don't have one," that's a red flag, it often means they reserve the right to suspend your account on a whim with no clear rules.

Key takeaway: Always review an AUP before your team starts using a vendor's service; finding surprises after launch is costly and disruptive.

The B2B SaaS acceptable use policy review checklist

document analysis
Photo by Mikhail Nilov from Pexels

Use this checklist during your review. For each item, decide whether the vendor's AUP rule is acceptable or a dealbreaker for your team.

Acceptable Use Policy Review Checklist

Your progress is saved automatically in your browser.

Step-by-step review process

Acceptable use policy review checklist for B2B SaaS teams process
Figure 1: Acceptable use policy review checklist for B2B SaaS teams at a glance.

Follow this workflow to review an AUP systematically:

  1. Collect the document – Request the AUP, ToS, and privacy policy from the vendor. Ask for a plain-text or PDF version (easier to search).
  1. Search for red-flag keywords – Use Ctrl+F (Cmd+F on Mac) to search for: "terminate," "suspend," "delete," "arbitration," "liability," "indemnify," "AI training," "auto-renew," and "sole discretion." Each hit deserves a closer read.
  1. Cross-reference with your use case – Does the vendor prohibit anything your team actually plans to do? If yes, ask the vendor if they'll grant an exception in writing.
  1. Check for change history – Scroll to the bottom of the AUP and look for a changelog or version date. If the document was last updated three years ago, the vendor may not actively maintain it.
  1. Document your findings – Use a shared spreadsheet or document to record which clauses passed or failed your checklist. Include the clause text, its location in the AUP, and your team's decision (accept, negotiate, or reject).
  1. Present to stakeholders – Share your summary with your manager, legal team (if available), and budget owner. Ask them to sign off before the vendor is locked into a contract.
  1. Get it in writing – If you negotiate any exceptions or clarifications with the vendor, insist they send a signed amendment to the AUP. Email promises don't hold up later.
Terms pages with hidden auto-renewal clauses
0%

Red flags to watch for

team collaboration
Photo by Thirdman from Pexels

These AUP clauses often hide nasty surprises:

  • "Sole discretion" – Vendor can suspend your account, delete your data, or raise prices with no notice or explanation.
  • "AI training" or "machine learning" – Vendor reserves the right to feed your data into their AI models or sell training rights to competitors.
  • Forced arbitration – You can't sue the vendor; you must submit to private arbitration (expensive and unfair to you).
  • Broad indemnification – You agree to pay the vendor's legal fees if someone sues them, even if it's their fault.
  • Auto-renewal without explicit opt-in – Subscription automatically renews, and you can't easily cancel.
  • Vague "prohibited use" definitions – "You may not use the service in ways that harm the vendor's business" is too vague to actually follow.
  • Data ownership ambiguity – Vendor claims rights to your content or customer data after you upload it.
  • No refund policy – All sales are final, no matter what happens.
"The TrustCloud AUP template is structured to cover the critical areas auditors and regulators expect while remaining practical and easy to understand for end‑users."
>, Acceptable use policy template guide for 2026: Download for free

How Terms Doctor helps

Manually reading and parsing 20-page legal documents is slow and error-prone. Terms Doctor runs 101 consumer-protection checks on any vendor's ToS and AUP in seconds, highlighting the exact clauses that matter most:

  • Flags forced arbitration and AI training on your data
  • Grades the entire terms page A–F so you can compare vendors at a glance
  • Tracks when vendors change their policies, so you catch surprise updates
  • Exports a report you can share with your team and stakeholders
The free Chrome, Edge, Brave, Opera, and Vivaldi extension works on any website. Just visit the vendor's terms page, click the Terms Doctor icon, and get an instant summary. No more manual searching through legalese.
Example red-flag alert: "This service reserves the right to train AI models on your data. Terms Doctor highlights this automatically, so you don't miss it."

FAQ

Frequently Asked Questions

An AUP specifies what customers can and cannot do with the service. A ToS is the entire legal contract, which includes payment terms, liability limits, and dispute resolution. The AUP is usually a section within or alongside the ToS. Both matter, but the AUP is the part that tells you what gets your account suspended.
Sometimes. Smaller vendors or those competing for your business may agree to carve out exceptions or clarify vague language. Always ask in writing, and get their response in an amendment signed by an authorized representative. Never rely on email promises alone.
Walk away. A vendor that hides its AUP or refuses to explain its rules is signaling that it reserves the right to change the rules or enforce them arbitrarily. Reputable vendors are transparent about their policies because they have nothing to hide.
Terms Doctor runs its 101 checks on any website's terms page. If the AUP is on a separate page, you can run the extension there too. The tool automatically flags clauses related to AI training, forced arbitration, auto-renewal, and data use, all of which commonly appear in AUPs.
At least once per year, or whenever the vendor announces a policy update. Terms Doctor tracks changes to terms pages over time, so you can set up alerts and catch surprises. Some vendors update their AUPs quietly, hoping customers don't notice.

Document your review and move forward

Reviewing an AUP takes 30 minutes with a good checklist and 2–3 hours if you're reading the whole thing carefully. The time investment saves you from account lockouts, surprise data deletions, and vendor disputes down the road.

Before your team signs on the dotted line, make sure you and your stakeholders have reviewed the AUP, documented your findings, and agreed that the vendor's rules work for your use case. Use the checklist above, lean on Terms Doctor to spot the high-risk clauses automatically, and ask the vendor to clarify anything that feels ambiguous.

Once you've crossed the finish line, save a copy of the AUP in your records and set a calendar reminder to re-review it annually. SaaS vendors change their terms frequently, and staying alert keeps your team safe.

Additional Resources