ATLAS Acceptable Use and AI Safety Policy

Effective date: August 15, 2026 Provider: On Spot Solutions LLC Product: ATLAS Version: 2026-08-11.1

1. Purpose

ATLAS provides diagnostic decision support, equipment context, and operational recordkeeping. It does not control equipment, certify repairs, replace manufacturer instructions, or substitute for trained and legally qualified personnel.

2. Authorized use

Customers may use ATLAS only for their internal lawful operations, through authorized users and facilities covered by their order form or pilot agreement. Users must supply accurate account information, protect access credentials, and work only on equipment and data they are authorized to access.

3. Safety-critical restrictions

Users must not rely on an ATLAS response as the sole basis to:

• energize, de-energize, bypass, disable, or override equipment or a safety control;
• perform electrical, mechanical, fire/life-safety, structural, or other regulated

work without required qualifications and procedures;

• override manufacturer documentation, site policies, permits, codes, or law;
• defeat lockout/tagout, machine guarding, interlocks, emergency stops, access

controls, payment controls, alarms, or cybersecurity controls;

• continue work where conditions are uncertain, hazardous, or outside the user's

training and authorization.

Before servicing equipment, the customer and user remain responsible for applicable energy-control procedures, including shutdown, isolation, control of stored energy, verification, training, and inspection. OSHA identifies employer-controlled energy programs and trained workers as required safeguards; ATLAS is not such a program.

4. AI-output limitations

ATLAS responses may be incomplete, outdated, inaccurate, or inappropriate for a specific model, configuration, facility, jurisdiction, or condition. Users must:

• inspect the actual equipment and conditions;
• verify model/serial/configuration and consult current manufacturer documentation;
• use qualified human judgment before acting;
• stop, isolate the hazard, and escalate when a safe conclusion cannot be verified;
• record corrections and actual outcomes accurately.

Customers must not represent ATLAS output as a professional certification, warranty, manufacturer authorization, engineering determination, or legally required inspection.

5. Prohibited platform activity

Users may not:

• access or attempt to access another customer, facility, user, or record;
• probe, scan, disrupt, overload, reverse engineer, or circumvent authentication,

authorization, rate limits, subscription gates, or security controls;

• upload malware, unlawful content, secrets they are not authorized to disclose, or

regulated/sensitive data unnecessary for the supported use;

• use ATLAS to facilitate physical harm, unlawful surveillance, credential theft,

fraud, discrimination, or infringement;

• scrape, resell, sublicense, or use the service to build a competing model or dataset

except as expressly agreed in writing;

• misstate identity, authority, equipment status, repair outcome, or safety completion.

6. Customer administration

The Organization Administrator is responsible for approving users, assigning roles and facilities, removing access promptly, and reviewing organization activity. Customers must notify support@onspot-solutions.com promptly of suspected compromised credentials, unauthorized access, tenant leakage, unsafe output, or other security or safety events.

7. Enforcement

On Spot Solutions LLC may investigate suspected violations and may limit or suspend access to protect people, customers, the platform, or legal compliance. Where practicable, On Spot will limit suspension to the affected account or organization and preserve customer data under the applicable agreement. Serious or repeated violations may result in termination and referral to appropriate authorities.

8. Reporting

• Product/security/safety reports: support@onspot-solutions.com
• Billing questions: accounting@onspot-solutions.com

Do not send passwords, one-time codes, private invitation tokens, payment-card data, or unnecessary sensitive facility information by email.

Counsel notes and sources

Counsel should align this policy with the SaaS Terms, DPA, insurance, supported equipment scope, and actual incident process. Safety framing is informed by OSHA's current Control of Hazardous Energy overview, which assigns energy-control and training duties to employers and trained workers. This draft does not attempt to restate or replace 29 CFR 1910.147 or any other law.