Acceptable use

Who this applies to

Everyone calling the SP Cambo gateway, whether directly, through a CLI tool, or through an application you have built. If you give someone else access using your key, their use is your responsibility.

Not permitted

Illegal activity

Anything unlawful where you are, or where SP Cambo operates. This includes fraud, and it includes using the service to plan or facilitate an offence.

Sexual content involving minors

Absolutely prohibited, in any form, including fictional or generated depictions. There is no warning step for this: access is terminated.

Targeted harm

Harassment campaigns, stalking, doxxing, threats, or generating content intended to intimidate a specific person or group.

Weapons and mass harm

Guidance for producing weapons capable of mass casualties — biological, chemical, radiological, nuclear — or for attacks on critical infrastructure.

Malware and unauthorised access

Building or distributing malware, ransomware, credential stealers or botnets, or attacking systems you are not authorised to test. Security work on systems you own or have written permission to test is fine; the distinction is authorisation.

Deception at scale

Impersonating a real person or organisation, generating fake reviews or fake identity documents, or running coordinated influence or spam operations.

Abuse of the service itself

• circumventing metering, entitlement expiry, key scoping or rate limits;
• sharing or reselling access outside an approved reseller arrangement;
• probing for other customers' data or attempting to escape your own tenant;
• embedding a key in client-side code or a public repository — a key you have published is a key you have given away.

Uses that need a human in the loop

Model output is generated text and can be confidently wrong. Do not use it as the sole basis for decisions in these areas:

• medical, psychiatric or therapeutic advice;
• legal advice;
• financial, credit, insurance or employment decisions about an individual;
• safety-critical or life-critical systems.

These are not prohibited. They require review by a qualified person before the output affects anyone, and they require you to tell the affected person they are dealing with generated content.

Upstream policies also apply

Requests are served by upstream model providers, each with its own usage policy. Where an upstream policy is stricter than this page, the stricter rule is the one that governs — SP Cambo cannot grant permission a provider withholds.

How this is enforced

SP Cambo does not read your prompts. Enforcement works from metadata, from upstream provider signals, and from reports.

Proportionate responses in ascending order: a warning; revoking a specific key; suspending the account; terminating access. Severe cases — the child-safety category above, or activity that endangers people — skip straight to termination.

Revoking a key stops future requests. It does not retroactively refund quota already spent.

Reporting abuse

If you believe SP Cambo access is being used to cause harm, report it. A dedicated abuse contact has not been published yet; until it is, this page will not print an address that does not exist. Use whichever channel the operator has given you, and include the timestamps and any identifiers you have.

If you are not sure

Ask before you build. A short question about an intended use case is cheaper than discovering the answer after you have shipped and had a key revoked.

The commercial rules that sit alongside this page are in terms of service .