Hosting Security & Acceptable Use Policy

Our minimum security standard

Every hosted platform is continuously security-scanned. To stay on our infrastructure, a platform must not have:

• unresolved critical or high severity security issues,
• end-of-life or unsupported software, or
• known-compromised components.

Critical and high severity issues must be fixed — this isn’t optional, on any plan.

Every care plan — Essential Care and above — covers this: we remediate critical and high severity issues for you as part of the plan, so you don’t have to do anything except let us proceed. Declining to let us fix a critical or high severity issue is what puts a platform out of standard.

End-of-life software must be upgraded to a supported version — handled for you on Complete Care, or quoted and agreed on other plans.

What happens if a platform falls below standard

We don’t suspend without warning. The sequence is always:

1. We notify you that the platform is below standard, with the specific issue and what’s needed to fix it.
2. We work with you on remediation — through your care plan, or with a clear quote for the work.
3. If the platform cannot be brought back to standard within a reasonable time, it can’t remain on our infrastructure. We’ll give advance notice and a full data handover (database export, files, and codebase) before any suspension takes effect, exactly as described under No lock-in.

Suspension is a last resort to protect the rest of the estate — not a penalty, and never a way to hold your data.

Acceptable use

You (and anyone you allow to use your platform) must not use Smaoin hosting to store, send, or serve:

• illegal content, or content that infringes someone else’s intellectual property or other rights;
• malware, phishing pages, or anything designed to harm or deceive;
• spam or bulk unsolicited email, or run an open mail relay;
• anything that endangers the shared infrastructure or other clients — for example deliberately insecure configurations, or attempts to access resources that aren’t yours;
• resource use materially beyond what your plan is scoped for (see the scope details in our Terms).

If we become aware of any of these, we’ll contact you to put it right; serious or repeated breaches may lead to suspension as described above.

Your responsibilities

• Keep your account credentials secure.
• Respond to us in reasonable time when we flag a security issue that needs your input or approval.
• Make sure anything you connect or manage yourself (third-party services, integrations, plugins) stays supported and complies with that provider’s terms — self-managed components are still subject to the minimum security standard.

Reporting a problem

If you spot abuse, a vulnerability, or content that breaches this policy on a platform we host, contact us and we’ll act on it.