PRIMEMATCH AI™

ACCEPTABLE USE POLICY

Version 1.0 | Production-Quality First Draft for Attorney Review

Effective Date: February 2026
Legal Entity: Lyfe Share Inc.
Principal Office: 6991 Peachtree Industrial Blvd. #400, Suite. A-15, Peachtree Corners, GA 30092
Abuse / Security Contact: michael@lyfeshare.io
Governing Law / Venue: Georgia

This Acceptable Use Policy (“AUP”) is incorporated into the PrimeMatch AI™ Master Terms of Service and applies to all websites, applications, white-label portals, APIs, AI Agents™, marketplace functionality, integrations, mobile applications when released, and related services. It should be reviewed with the Master Terms of Service, Privacy Policy, AI Transparency & Recommendation Policy, Partner Matching & Marketplace Agreement, Government Contracting Policy, applicable Order Forms, enterprise agreements, Data Processing Addenda, and public-sector addenda.

TABLE OF CONTENTS

1. Purpose, Scope, and Incorporation

2. Definitions and Proprietary Concepts

3. Core Acceptable-Use Standard

4. Lawful Use and User Responsibility

5. Decision-Support Boundary and Human Oversight

6. Account Security, Identity, and Credential Use

7. Fraud, Deception, Impersonation, and Misrepresentation

8. Government Contracting and Procurement Misconduct

9. Marketplace Abuse and Counterparty Misconduct

10. Prohibited Data and Restricted Information

11. Privacy, Personal Data, and Surveillance Misuse

12. Cybersecurity Abuse, Malicious Activity, and Circumvention

13. Scraping, Extraction, Reverse Engineering, and Competitive Misuse

14. API, Integration, Rate-Limit, and Automation Abuse

15. AI Agent™ and Autonomous Workflow Restrictions

16. AI-Generated Content and Communication Restrictions

17. Intellectual Property, Confidentiality, and Third-Party Rights

18. Spam, Harassment, Manipulation, and Abusive Communications

19. Reputation Intelligence, Reviews, Scores, and Gaming the Platform

20. Partner Matching, Teaming, and Collusion Restrictions

21. White-Label Portals, Enterprise Administrators, and Multi-Tenant Conduct

22. Security Testing, Vulnerability Research, and Responsible Disclosure

23. Excessive Resource Consumption and Service Interference

24. Sanctions, Export Controls, Restricted Parties, and High-Risk Use

25. Content Moderation, Detection, and Platform Integrity Measures

26. Investigations, Evidence Preservation, and Cooperation

27. Suspension, Throttling, Quarantine, and Termination

28. Reporting Violations and Appeals

29. Disclaimers, Indemnification, and Liability Allocation

30. Governing Law, Changes, Severability, and Survival

Appendix A. Prohibited and Restricted Use Matrix

Appendix B. AI Agent™ Human-Approval Controls

Appendix C. Government Contracting Prohibited Conduct Examples

Appendix D. Marketplace Integrity Rules

PRIMEMATCH AI™ ACCEPTABLE USE POLICY

This AUP establishes minimum conduct, content, security, automation, marketplace, and integrity requirements for all access to and use of PrimeMatch AI™. The purpose of this AUP is to protect PrimeMatch AI, its customers, Authorized Users, Marketplace Providers, government and commercial counterparties, third-party data sources, and the integrity, security, availability, and lawful operation of the Platform.

PrimeMatch AI™ is an AI-powered Partner Intelligence Platform. It provides decision-support and workflow capabilities; it does not replace professional judgment, independently authorize legally binding acts, or assume responsibility for user decisions. A user’s access to sophisticated analytics, AI assistance, matching, automation, or marketplace tools does not reduce that user’s duty to comply with law, contract, professional obligations, procurement rules, privacy requirements, intellectual-property rights, security requirements, or internal policies.

ARTICLE 1. PURPOSE, SCOPE, AND INCORPORATION

1.1 Scope.

This AUP applies to every customer, organization, Authorized User, administrator, affiliate, Marketplace Provider, integration partner, developer, consultant, subcontractor, agent, and other person that accesses or uses PrimeMatch AI™, directly or indirectly. It applies regardless of whether access occurs through the standard Platform, an enterprise environment, a white-label portal, API, embedded workflow, AI Agent™, single sign-on connection, marketplace interface, or future mobile application.

Customers are responsible for ensuring that their Authorized Users and persons acting through customer-controlled credentials, integrations, tokens, service accounts, or automation comply with this AUP. Enterprise administrators shall communicate applicable restrictions to users and implement reasonable internal controls.

1.2 Relationship to Other Agreements.

This AUP supplements the Master Terms of Service, Privacy Policy, AI Transparency & Recommendation Policy, Partner Matching & Marketplace Agreement, Government Contracting Policy, and any applicable signed agreement. A violation of this AUP constitutes a violation of the governing PrimeMatch AI agreement.

If a signed enterprise or public-sector agreement expressly permits conduct otherwise restricted by this AUP, the signed agreement controls only to the extent of the express conflict. No informal communication, sales statement, support response, or technical capability constitutes permission to engage in prohibited conduct.

ARTICLE 2. DEFINITIONS AND PROPRIETARY CONCEPTS

2.1 PrimeMatch AI™ Intellectual Property.

PrimeMatch AI™ includes proprietary software, architecture, workflows, data structures, models, algorithms, interfaces, scoring frameworks, AI systems, analytics, APIs, documentation, and related intellectual property. PrimeMatch Confidence™, Organization DNA™, Opportunity DNA™, Team DNA™, Relationship DNA™, Proposal DNA™, Growth DNA™, Trust Score™, Team Strength Index™, PrimeMatch Intelligence™, Partner Intelligence™, Opportunity Intelligence™, Proposal Intelligence™, Executive Intelligence™, Marketplace Intelligence™, Enterprise Intelligence™, AI Agent™, Intelligence Engine™, Semantic Matching Engine™, Knowledge Graph™, and Learning Engine™ are proprietary names, methodologies, analytical frameworks, scoring systems, software systems, trademarks, trade secrets, or other intellectual property belonging to PrimeMatch AI or its licensors.

Nothing in this AUP grants a right to copy, replicate, benchmark for competitive development, reverse engineer, extract, decompile, derive, reproduce, publish, resell, expose, or create a substitute for any proprietary PrimeMatch AI system except as expressly permitted by a signed agreement or non-waivable law.

2.2 AI Output.

“AI Output” means any recommendation, ranking, score, confidence value, prediction, forecast, draft, summary, extraction, classification, generated communication, suggested partner, suggested opportunity, proposal assistance, risk indicator, inferred attribute, or other output generated or assisted by PrimeMatch AI’s AI-enabled systems.

AI Outputs are informational decision-support only and are not factual guarantees, legal conclusions, certifications, endorsements, procurement determinations, or promises of future outcomes.

ARTICLE 3. CORE ACCEPTABLE-USE STANDARD

3.1 General Standard.

Users shall use PrimeMatch AI only for lawful, authorized, legitimate business, procurement, commercial, research, administrative, collaboration, marketplace, and decision-support purposes consistent with the governing agreement. Users shall exercise reasonable judgment proportionate to the sensitivity and consequence of the activity.

Users shall not use the Platform in a manner that harms or is reasonably likely to harm PrimeMatch AI, another user, a government agency, a commercial counterparty, a data provider, a third party, the integrity of a procurement, or the security or availability of any system.

3.2 Attempts and Facilitation.

Prohibitions in this AUP apply not only to completed acts but also to attempted acts, instructions, prompts, configurations, scripts, workflows, integrations, or coordinated activity designed to enable or facilitate prohibited conduct.

A user may not use another account, intermediary, affiliate, API client, AI Agent™, marketplace participant, or external system to accomplish conduct that the user could not lawfully or contractually perform directly.

ARTICLE 4. LAWFUL USE AND USER RESPONSIBILITY

4.1 Compliance with Law and Contract.

Users must comply with all laws, regulations, court orders, sanctions, export controls, privacy obligations, contractual restrictions, confidentiality duties, procurement rules, intellectual-property rights, and organizational policies applicable to their use of the Platform.

PrimeMatch AI does not guarantee legal compliance and does not undertake to determine which laws, clauses, certifications, licenses, insurance requirements, security obligations, professional standards, or procurement restrictions apply to a user.

4.2 User Decisions.

Users remain solely responsible for all business, procurement, legal, financial, staffing, proposal, contracting, marketplace, vendor, and partnership decisions. The presence of a recommendation, score, match, alert, AI Output, workflow, or automated capability does not mean that PrimeMatch AI has approved the resulting action.

Users must obtain appropriate internal approvals and professional advice before taking actions that may create material legal, financial, regulatory, security, or contractual consequences.

ARTICLE 5. DECISION-SUPPORT BOUNDARY AND HUMAN OVERSIGHT

5.1 No Autonomous Substitution for Responsible Officials.

Users shall not treat PrimeMatch Confidence™, Trust Score™, Team Strength Index™, Opportunity Intelligence™, Partner Intelligence™, Proposal Intelligence™, Executive Intelligence™, Marketplace Intelligence™, or any other PrimeMatch Intelligence™ output as a substitute for required human judgment.

Users must independently review material recommendations, rankings, forecasts, generated proposal content, partner assessments, and suggested actions before relying on them.

5.2 High-Impact Actions.

Users shall maintain meaningful human approval for legally binding submissions, certifications, representations, pricing commitments, government filings, proposal submissions, teaming commitments, vendor selections, contract modifications, payment approvals, employment decisions, security attestations, and other high-impact actions unless applicable law and the governing PrimeMatch AI agreement expressly permit a different control model.

No AI Agent™ shall be represented as an attorney, contracting officer, certifying official, corporate officer, licensed professional, or other person with legal authority merely because it can generate or transmit content.

ARTICLE 6. ACCOUNT SECURITY, IDENTITY, AND CREDENTIAL USE

6.1 Account Integrity.

Users must provide accurate account information, protect credentials, use only authorized accounts, and promptly report suspected compromise. Users may not share credentials in violation of an organization’s policy, bypass seat or licensing limits, sell account access, or create fictitious identities to obtain access.

Customers are responsible for promptly disabling accounts and tokens for departed personnel, contractors, compromised devices, unauthorized integrations, and persons who no longer require access.

6.2 Impersonation and Credential Abuse.

Users shall not impersonate another individual, organization, government official, contracting officer, evaluator, PrimeMatch AI employee, Marketplace Provider, partner, or customer. Users shall not forge authorization, spoof identifiers, manipulate account attributes, or use credentials obtained through phishing, credential stuffing, theft, or other unauthorized means.

ARTICLE 7. FRAUD, DECEPTION, IMPERSONATION, AND MISREPRESENTATION

7.1 Prohibited Deception.

Users shall not use PrimeMatch AI to create, facilitate, conceal, or transmit fraudulent, materially misleading, or deceptive information. Prohibited conduct includes fabricated credentials, invented past performance, false references, falsified licenses, altered certifications, fictional personnel qualifications, deceptive financial representations, sham transactions, fake reviews, and knowingly false statements.

Users shall not manipulate AI-generated content to create a false impression that a government agency, customer, partner, PrimeMatch AI, or other third party has endorsed, approved, certified, or verified a person, organization, product, proposal, or transaction.

7.2 Identity and Organizational Claims.

Users may not falsely claim socioeconomic status, ownership, control, security clearance, contract vehicle access, award history, certifications, insurance, bonding, licensing, geographic presence, workforce capacity, financial capacity, or other qualification. Users shall correct material inaccuracies they discover in their profile or marketplace listing.

ARTICLE 8. GOVERNMENT CONTRACTING AND PROCUREMENT MISCONDUCT

8.1 Procurement Integrity.

Users shall not use the Platform to obtain, solicit, upload, analyze, exploit, or disseminate contractor bid or proposal information, source selection information, procurement-sensitive information, or other nonpublic government information when possession or use would violate procurement-integrity restrictions, law, regulation, contract, or agency instruction.

Users shall not use PrimeMatch AI to coordinate bid rigging, market allocation, collusive pricing, improper exchanges of competitively sensitive information, false certifications, sham subcontracting, undisclosed organizational conflicts of interest, or improper influence over government personnel.

8.2 False Claims and Certifications.

Users shall not direct PrimeMatch AI or an AI Agent™ to create or submit knowingly false claims, invoices, cost data, pricing data, representations, certifications, compliance statements, cybersecurity attestations, socioeconomic-status statements, progress reports, or other government submissions.

Users remain responsible for independently validating all government-contracting submissions and for complying with the Government Contracting Policy.

ARTICLE 9. MARKETPLACE ABUSE AND COUNTERPARTY MISCONDUCT

9.1 Marketplace Integrity.

Users shall not use the PrimeMatch AI marketplace to perpetrate fraud, launder funds, evade contractual restrictions, conceal beneficial ownership where disclosure is required, manipulate payment processes, engage in fictitious transactions, abuse chargebacks, submit false disputes, or transact for unlawful goods or services.

Marketplace Providers shall accurately describe qualifications, services, availability, pricing, licenses, insurance, certifications, personnel, and deliverables. Providers may not list services they are legally prohibited or materially unable to perform.

9.2 Off-Platform Evasion.

Where marketplace fees, referral rules, or transaction terms apply, users may not use the Platform to identify counterparties and then intentionally structure substantially related transactions outside the Platform solely to evade contractual fees or obligations, except where expressly permitted by the applicable agreement.

ARTICLE 10. PROHIBITED DATA AND RESTRICTED INFORMATION

10.1 Restricted Data.

Users shall not upload or process classified information, source selection information, improperly obtained contractor bid or proposal information, unlawfully obtained personal data, stolen credentials, malicious code, or other information whose possession or processing through the selected environment is prohibited.

CUI, covered defense information, export-controlled technical data, protected health information, payment-card data, highly sensitive personnel data, law-enforcement-sensitive information, or other regulated data may be processed only when the specific PrimeMatch AI service environment and written agreement expressly authorize that category and the customer has satisfied its independent compliance obligations.

10.2 Data Minimization.

Users shall avoid uploading unnecessary sensitive data. Where a business purpose can be achieved with redacted, aggregated, tokenized, masked, or less sensitive information, users should use the less sensitive form consistent with applicable requirements.

ARTICLE 11. PRIVACY, PERSONAL DATA, AND SURVEILLANCE MISUSE

11.1 Personal Data.

Users must have a lawful basis or other legally sufficient authority for personal data they submit, search, match, enrich, analyze, or disclose through PrimeMatch AI. Users shall not use the Platform for stalking, doxxing, unlawful surveillance, discriminatory profiling, identity theft, harassment, or unauthorized background investigations.

Users may not intentionally infer or exploit highly sensitive personal attributes for prohibited discriminatory, exploitative, or unlawful purposes.

11.2 Monitoring and Employees.

Customers using analytics, audit logs, communications, workflow data, or activity information to monitor employees, contractors, or users are responsible for providing notices, obtaining consents where required, satisfying labor and privacy requirements, and establishing lawful internal policies.

ARTICLE 12. CYBERSECURITY ABUSE, MALICIOUS ACTIVITY, AND CIRCUMVENTION

12.1 Prohibited Security Conduct.

Except for expressly authorized security testing under Article 22, users shall not probe, scan, exploit, disrupt, overload, compromise, bypass, or attempt to defeat authentication, authorization, encryption, isolation, rate limiting, logging, access controls, data segregation, content safeguards, abuse controls, or other technical protections.

Users shall not upload malware, ransomware, destructive code, credential stealers, botnet software, cryptominers, malicious macros, exploit payloads, or content designed to compromise PrimeMatch AI, another user, an integration, or a third-party system.

12.2 Circumvention.

Users shall not attempt to discover hidden system prompts, confidential model instructions, security rules, proprietary scoring logic, protected API methods, internal credentials, customer-isolated data, or other nonpublic system information through prompt injection, model extraction, side-channel attacks, automated probing, or similar techniques.

ARTICLE 13. SCRAPING, EXTRACTION, REVERSE ENGINEERING, AND COMPETITIVE MISUSE

13.1 Scraping and Bulk Extraction.

Users shall not scrape, crawl, spider, harvest, systematically download, mirror, index, cache, or bulk extract Platform content, partner profiles, marketplace listings, scores, recommendations, graph relationships, search results, or other data except through an expressly authorized API or export function and within documented limits.

Users may not use automated methods to create a substitute database, competing directory, competing marketplace, competing matching engine, or dataset intended to reproduce a material portion of PrimeMatch AI’s proprietary value.

13.2 Reverse Engineering.

Users shall not reverse engineer, decompile, disassemble, decode, benchmark for competitive replication, infer model weights, reconstruct proprietary scoring formulas, discover hidden taxonomies, derive training or evaluation datasets, or otherwise attempt to reproduce PrimeMatch AI’s proprietary systems except to the limited extent such restriction is prohibited by non-waivable law.

Competitive intelligence concerning publicly observable features does not authorize copying of proprietary expression, architecture, workflows, models, or methodologies.

ARTICLE 14. API, INTEGRATION, RATE-LIMIT, AND AUTOMATION ABUSE

14.1 API Use.

APIs may be used only with valid credentials, within assigned scopes, for documented and authorized purposes, and in accordance with rate limits, technical documentation, data licenses, and contractual restrictions. Users shall not rotate accounts, IP addresses, tokens, tenants, or identities to circumvent quotas or controls.

Users shall secure API keys and service credentials, restrict privileges, rotate compromised secrets, and prevent unauthorized downstream use.

14.2 Integrations.

Users are responsible for integrations they configure, including the legality of transferred data, permissions, downstream actions, data mappings, recipient systems, and automated triggers. Users shall not configure an integration to exfiltrate another tenant’s data, bypass access controls, or transmit Restricted Government Information to an unauthorized service.

ARTICLE 15. AI AGENT™ AND AUTONOMOUS WORKFLOW RESTRICTIONS

15.1 Agent Governance.

AI Agents™ must operate within the permissions, scopes, approval thresholds, and business purposes established by the customer and PrimeMatch AI. Customers shall monitor agent activity and maintain human escalation mechanisms appropriate to foreseeable risk.

Users shall not deliberately configure an AI Agent™ to evade approval requirements, conceal activity, alter audit trails, impersonate a human approver, create unauthorized financial commitments, submit government certifications without human review, or take actions exceeding the authority of the person or organization deploying the agent.

15.2 External Actions.

Before enabling an AI Agent™ to send communications, update records, call external APIs, create marketplace transactions, modify partner data, or trigger downstream systems, the customer must assess consequences, establish safeguards, and verify that recipients and external systems are authorized.

ARTICLE 16. AI-GENERATED CONTENT AND COMMUNICATION RESTRICTIONS

16.1 Review and Accuracy.

Users must review AI-generated proposal assistance, communications, recommendations, summaries, reports, analyses, and other material content before external reliance or transmission. Users shall not knowingly publish or submit materially false content merely because it was generated by PrimeMatch AI.

Users shall distinguish draft assistance from verified factual content where the context makes such distinction necessary to avoid deception or material misunderstanding.

16.2 Harmful or Unlawful Content.

Users shall not use PrimeMatch AI to generate or disseminate unlawful threats, extortion, discriminatory harassment, malicious impersonation, defamatory fabrications, fraudulent instructions, malware, or content intended to facilitate unlawful activity.

PrimeMatch AI may implement safety controls or refuse generation where content presents legal, security, fraud, procurement-integrity, privacy, or platform-integrity concerns.

ARTICLE 17. INTELLECTUAL PROPERTY, CONFIDENTIALITY, AND THIRD-PARTY RIGHTS

17.1 Rights of Others.

Users shall not upload, reproduce, distribute, or direct PrimeMatch AI to transform materials in a manner that infringes copyrights, trademarks, trade secrets, privacy rights, publicity rights, database rights, contractual restrictions, or other rights of third parties.

Users are responsible for obtaining rights necessary to provide Customer Data and to authorize the processing contemplated by their use of the Platform.

17.2 Confidential Information.

Users shall not disclose another party’s confidential information to PrimeMatch AI unless authorized by the applicable confidentiality obligation. Access to a partner profile, proposal workspace, relationship record, or enterprise dashboard does not authorize disclosure outside the permitted audience.

ARTICLE 18. SPAM, HARASSMENT, MANIPULATION, AND ABUSIVE COMMUNICATIONS

18.1 Outreach.

AI-generated communications and partner outreach must be used responsibly. Users shall not use PrimeMatch AI for spam campaigns, deceptive solicitation, unlawful automated marketing, harassment, repeated unwanted contact, phishing, credential harvesting, or messages that falsify identity or affiliation.

Users are responsible for compliance with applicable marketing, telemarketing, electronic communications, privacy, and consent requirements.

18.2 Platform Conduct.

Users shall not threaten, intimidate, abuse, or harass other users, Marketplace Providers, PrimeMatch AI personnel, government officials, or commercial counterparties through Platform communication features.

ARTICLE 19. REPUTATION INTELLIGENCE, REVIEWS, SCORES, AND GAMING THE PLATFORM

19.1 No Manipulation.

Users shall not manipulate Trust Score™, PrimeMatch Confidence™, Team Strength Index™, Reputation Intelligence, reviews, ratings, relationship signals, engagement metrics, marketplace metrics, or matching outcomes through fake accounts, coordinated activity, reciprocal review schemes, undisclosed self-review, bots, fabricated transactions, false disputes, or intentional data poisoning.

Users shall not offer compensation or benefits conditioned on a false or misleading review or on suppression of legitimate negative feedback.

19.2 Score Interpretation.

No score is a guarantee of honesty, performance, financial stability, compatibility, eligibility, compliance, or future behavior. Users must not market a score as a certification or government endorsement unless PrimeMatch AI expressly authorizes the specific representation in writing.

ARTICLE 20. PARTNER MATCHING, TEAMING, AND COLLUSION RESTRICTIONS

20.1 Lawful Teaming.

Users may use Partner Intelligence™, Team DNA™, Relationship DNA™, and Team Strength Index™ to evaluate prospective relationships, but must independently conduct due diligence and negotiate appropriate written agreements.

Users shall not use matching or collaboration functionality to coordinate unlawful price fixing, bid suppression, market allocation, improper exchange of competitively sensitive information, sham competition, or other anticompetitive conduct.

20.2 No Unauthorized Commitments.

A match, message, saved partner, team recommendation, collaboration workspace, or AI-generated teaming suggestion does not create a legal partnership, joint venture, agency, fiduciary relationship, subcontract, exclusivity obligation, or workshare commitment. Users shall not represent otherwise without a separate binding agreement.

ARTICLE 21. WHITE-LABEL PORTALS, ENTERPRISE ADMINISTRATORS, AND MULTI-TENANT CONDUCT

21.1 Enterprise Responsibility.

Enterprise customers and white-label operators are responsible for their own branding, user communications, internal policies, eligibility rules, administrative decisions, and organization-specific workflows. They may not present PrimeMatch AI proprietary scores or methodologies as their own proprietary systems unless expressly licensed to do so.

Administrators must use role-based permissions and organization hierarchies responsibly and shall not access user data merely out of curiosity or for unauthorized competitive, personal, retaliatory, or discriminatory purposes.

21.2 Tenant Separation.

Users shall not attempt to access another tenant’s data, workspaces, partner records, proposals, settings, logs, credentials, or administrative functions. Suspected cross-tenant exposure must be reported promptly and must not be exploited.

ARTICLE 22. SECURITY TESTING, VULNERABILITY RESEARCH, AND RESPONSIBLE DISCLOSURE

22.1 Authorization Required.

No vulnerability scanning, penetration testing, red-team activity, fuzzing, load testing, exploit testing, model extraction, prompt-injection testing, or similar security research may be conducted against PrimeMatch AI production systems without prior written authorization, except to the extent an express published vulnerability-disclosure program permits specified activity.

If PrimeMatch AI publishes a vulnerability-disclosure or bug-bounty program, researchers must comply strictly with its scope, safe-harbor terms, prohibited techniques, rate limits, reporting requirements, and data-handling rules.

22.2 Responsible Disclosure.

A user who discovers a suspected vulnerability, exposed credential, cross-tenant issue, or security defect shall avoid further exploitation, minimize access to data, preserve relevant technical details, and report the issue to [INSERT SECURITY CONTACT]. Public disclosure before reasonable remediation may violate this AUP or applicable law depending on the circumstances.

ARTICLE 23. EXCESSIVE RESOURCE CONSUMPTION AND SERVICE INTERFERENCE

23.1 Fair Use of Infrastructure.

Users shall not intentionally consume disproportionate compute, storage, bandwidth, API capacity, model capacity, queue capacity, or other resources in a manner that degrades the Platform for others or materially exceeds contracted usage limits.

PrimeMatch AI may implement technical limits, throttling, concurrency controls, quotas, file-size limits, model-use limits, or other measures to protect availability, security, cost integrity, and multi-tenant fairness.

23.2 Denial-of-Service Conduct.

Distributed denial-of-service activity, request flooding, recursive automation, runaway agents, intentionally expensive prompt loops, abusive retries, or other conduct designed or reasonably likely to impair service availability is prohibited.

ARTICLE 24. SANCTIONS, EXPORT CONTROLS, RESTRICTED PARTIES, AND HIGH-RISK USE

24.1 Sanctions and Export Controls.

Users may not access or use PrimeMatch AI in violation of applicable economic sanctions, export controls, trade restrictions, embargoes, or denied-party restrictions. Customers are responsible for determining whether their data, users, counterparties, technical information, and contemplated use require licenses or restrictions.

Users shall not route access through intermediaries, VPNs, affiliates, shell entities, or false identities for the purpose of evading applicable restrictions.

24.2 High-Risk Uses.

PrimeMatch AI may restrict particular use cases, data categories, jurisdictions, counterparties, or automation patterns where it reasonably determines that legal, safety, security, sanctions, procurement, privacy, fraud, or reputational risk is disproportionate to the ordinary intended use of the Platform.

ARTICLE 25. CONTENT MODERATION, DETECTION, AND PLATFORM INTEGRITY MEASURES

25.1 Integrity Controls.

PrimeMatch AI may use automated and manual methods to detect spam, fraud, credential abuse, malicious activity, prohibited content, marketplace manipulation, anomalous usage, policy violations, data exfiltration indicators, or threats to Platform integrity, subject to the Privacy Policy and applicable agreements.

Such controls may generate false positives or false negatives. PrimeMatch AI does not guarantee that every violation will be detected or prevented.

25.2 Protective Measures.

PrimeMatch AI may block prompts, limit outputs, remove or quarantine content, restrict accounts, disable integrations, require reauthentication, rotate credentials, impose additional verification, delay transactions, or implement other proportionate safeguards when reasonably necessary.

ARTICLE 26. INVESTIGATIONS, EVIDENCE PRESERVATION, AND COOPERATION

26.1 Investigations.

PrimeMatch AI may investigate suspected AUP violations using account information, audit logs, system events, content reasonably necessary to investigate the issue, security telemetry, marketplace records, integration activity, and other relevant information consistent with the Privacy Policy and law.

PrimeMatch AI may preserve information when reasonably necessary for security, fraud prevention, legal claims, enforcement, government requests, contractual rights, or protection of users and third parties.

26.2 Cooperation.

Customers shall reasonably cooperate with investigations involving their users, accounts, credentials, data, integrations, or marketplace activity. Cooperation may include identifying responsible users, disabling compromised credentials, preserving relevant records, correcting false listings, or implementing remediation.

PrimeMatch AI’s investigation does not replace any mandatory government, regulatory, contractual, cyber-incident, ethics, law-enforcement, or insurance notification obligation of the customer.

ARTICLE 27. SUSPENSION, THROTTLING, QUARANTINE, AND TERMINATION

27.1 Enforcement Rights.

Subject to the governing agreement, PrimeMatch AI may warn, require remediation, restrict features, throttle traffic, block content, quarantine files, suspend users, disable AI Agents™, revoke tokens, suspend marketplace functionality, suspend an organization, or terminate access where PrimeMatch AI reasonably determines that conduct violates this AUP or presents material legal, security, fraud, procurement, integrity, or operational risk.

PrimeMatch AI may act immediately without prior notice where delay could reasonably expose PrimeMatch AI, users, government interests, counterparties, or third parties to material harm, or where notice is prohibited by law.

27.2 No Waiver.

Failure to enforce a provision in one instance does not waive PrimeMatch AI’s right to enforce the same or another provision later. PrimeMatch AI may consider severity, intent, recurrence, impact, cooperation, remediation, contractual commitments, and legal obligations in determining an enforcement response.

ARTICLE 28. REPORTING VIOLATIONS AND APPEALS

28.1 Reporting.

Suspected AUP violations, security abuse, marketplace fraud, impersonation, improper procurement conduct, or prohibited data should be reported to [INSERT ABUSE / SECURITY / LEGAL CONTACT]. Reports should include sufficient information to permit reasonable investigation without unnecessarily disclosing sensitive data.

PrimeMatch AI may request additional information and may decline to disclose investigation details where disclosure could compromise security, privacy, legal obligations, fraud controls, or the rights of another party.

28.2 Appeals.

Where appropriate and not prohibited by law or security considerations, a customer may request review of a suspension or enforcement decision through [INSERT APPEAL PROCESS / CONTACT]. PrimeMatch AI may require corrective action, identity verification, contractual assurances, security remediation, or revised configuration before restoring access.

ARTICLE 29. DISCLAIMERS, INDEMNIFICATION, AND LIABILITY ALLOCATION

29.1 No Monitoring Guarantee.

PrimeMatch AI is not obligated to proactively monitor every user action, communication, marketplace transaction, AI Output, or external integration and does not guarantee prevention of prohibited conduct. Users remain responsible for their own activities and counterparties.

PrimeMatch AI does not guarantee contract awards, proposal success, business growth, profitability, successful partnerships, legal compliance, licensing, insurance, financial stability, vendor performance, marketplace quality, partner honesty, compatibility, or future outcomes.

29.2 Indemnification and Liability.

The indemnification, limitation-of-liability, warranty-disclaimer, exclusion-of-damages, claim-limitation, and risk-allocation provisions of the Master Terms of Service or applicable negotiated agreement apply to this AUP. To the maximum extent permitted by law, customers remain responsible for claims arising from their users’ prohibited content, unlawful use, fraud, procurement misconduct, data violations, infringement, marketplace conduct, or misuse of automation.

Public-sector customers are subject to any lawful modifications expressly set forth in a signed government addendum.

ARTICLE 30. GOVERNING LAW, CHANGES, SEVERABILITY, AND SURVIVAL

30.1 Governing Law and Disputes.

The governing law, venue, arbitration, jury-trial waiver, class-action waiver, and dispute provisions in the applicable Master Terms, Order Form, enterprise agreement, public-sector addendum, or other signed agreement are incorporated into this AUP. If no such provision applies, governing law shall be Georgia.

30.2 Changes.

PrimeMatch AI may update this AUP prospectively to address new functionality, AI capabilities, marketplace risks, security threats, legal requirements, abuse patterns, or operational practices, subject to applicable notice and amendment provisions.

30.3 Severability and Survival.

If any provision is unenforceable, it shall be enforced to the maximum lawful extent and the remainder shall remain effective. Provisions relating to intellectual property, confidentiality, investigations, evidence preservation, indemnification, liability, dispute resolution, and other provisions that by their nature should survive shall survive suspension, expiration, or termination.

APPENDIX A. PROHIBITED AND RESTRICTED USE MATRIX

APPENDIX B. AI AGENT™ HUMAN-APPROVAL CONTROLS

Customers deploying AI Agents™ should apply approval controls proportionate to consequence. At a minimum, PrimeMatch AI recommends that the following categories remain subject to authorized human review unless a signed agreement and applicable law expressly permit a different control model:

• Government proposal, bid, quote, grant-related procurement, or contract submission.

• Representations, certifications, attestations, signatures, SAM-related changes, cybersecurity statements, and formal government filings.

• Pricing commitments, purchase commitments, payments, refunds, contractual acceptance, workshare commitments, and changes to legally binding terms.

• Teaming agreements, subcontracts, joint-venture commitments, exclusivity commitments, nondisclosure commitments, and disclosure of confidential information.

• External communications that purport to speak for a corporate officer, certifying official, attorney, contracting professional, or other person with formal authority.

• Creation or deletion of administrator accounts, material changes to role-based permissions, export of sensitive data, and modification of security settings.

• Actions involving Restricted Government Information, export-controlled information, significant personal data, sanctions-sensitive activity, or legal holds.

APPENDIX C. GOVERNMENT CONTRACTING PROHIBITED CONDUCT EXAMPLES

• Using Proposal Intelligence™ to invent past performance or personnel qualifications and knowingly submitting the fabricated material.

• Uploading nonpublic source selection information obtained from a government employee or competitor and asking Opportunity Intelligence™ to optimize a proposal around it.

• Using Partner Intelligence™ to coordinate with competitors on prices, bid/no-bid decisions, geographic allocation, or other anticompetitive arrangements.

• Configuring an AI Agent™ to certify small-business status, SAM representations, CMMC status, or compliance with solicitation requirements without authorized human verification.

• Creating false socioeconomic, licensing, insurance, bonding, clearance, or certification data to improve Organization DNA™, Trust Score™, or match results.

• Using a white-label portal to imply that PrimeMatch AI or a government agency has certified, approved, or guaranteed a contractor that has not been so certified, approved, or guaranteed.

• Uploading classified, CUI, covered defense, or export-controlled material into an environment that has not been expressly authorized for that information category.

APPENDIX D. MARKETPLACE INTEGRITY RULES

• Listings must materially and accurately describe the provider, services, credentials, availability, pricing assumptions, and required qualifications.

• Users must independently verify counterparties. Trust Score™, PrimeMatch Confidence™, ratings, reviews, and marketplace badges are informational signals, not guarantees.

• No fake accounts, self-dealing review networks, reciprocal false reviews, fabricated transactions, manipulation of engagement signals, or intentional data poisoning.

• No marketplace transaction for unlawful services, stolen data, unauthorized government information, malware, deceptive certifications, or other prohibited content.

• No harassment, phishing, impersonation, misleading outreach, or unauthorized mass solicitation through marketplace communications.

• No intentional evasion of marketplace fees or transaction obligations where the applicable agreement prohibits off-platform circumvention.

• Parties remain responsible for their contracts, deliverables, payment obligations, taxes, licenses, insurance, confidentiality, intellectual property, cybersecurity, flow-downs, and dispute resolution.

ATTORNEY REVIEW NOTICE: Before publication, qualified counsel should confirm the PrimeMatch AI legal entity, governing law, enforcement contacts, appeals process, actual security and data-handling capabilities, public-sector exceptions, sanctions/export-control posture, marketplace payment model, API terms, and jurisdiction-specific consumer, privacy, employment, competition, and communications requirements.