Acceptable Use Policy

1. Purpose

Parable provides simulated social engineering tools for authorized security awareness training. This Acceptable Use Policy ("AUP") defines the boundaries of permitted use to ensure our platform is used responsibly, ethically, and legally.

2. Authorized Use

The Service may only be used to:

• • Conduct simulated phishing campaigns targeting your own organization's employees with proper management authorization
• • Deliver security awareness training through simulated email, SMS, and voice scenarios
• • Measure and report on organizational security posture and training effectiveness
• • Provide managed security training services to clients with documented written authorization

3. Prohibited Use

The following activities are strictly prohibited:

Unauthorized Targeting

• • Sending simulated phishing to individuals outside your organization without written consent
• • Targeting personal email addresses, phone numbers, or accounts not provided by the organization
• • Conducting campaigns without proper authorization from organizational leadership

Malicious Activity

• • Using the platform to deliver actual malware, ransomware, or malicious payloads
• • Collecting real credentials, financial data, or sensitive personal information
• • Using simulation results to harass, discriminate against, or take punitive action against employees
• • Impersonating law enforcement, government agencies, or emergency services in simulations

Platform Abuse

• • Sending unsolicited bulk messages (spam) through the platform
• • Attempting to bypass rate limits, security controls, or account restrictions
• • Using the platform for commercial marketing or non-security purposes

4. Customer Responsibilities

• • Obtain and maintain proper internal authorization before launching campaigns
• • Ensure compliance with applicable laws including CAN-SPAM, TCPA, GDPR, and local regulations
• • Use simulation results constructively for training, not for punitive employee actions
• • Maintain accurate and up-to-date recipient lists
• • Promptly honor opt-out requests from campaign recipients

6. Reporting Violations

If you believe someone is using Parable in violation of this policy, or if you received a simulated phishing message and believe it was unauthorized, please contact us at contact@parablesecurity.ai