Acceptable Use of Technology Policy

Company technology resources — computers, networks, email, phone, software, internet access — are provided for legitimate business purposes. Limited personal use is acceptable when it does not interfere with productivity, security, or other policies.

Prohibited: accessing illegal content, harassing material, conducting personal businesses, downloading unauthorized software, attempting to bypass security controls, sharing credentials, mining cryptocurrency, or using resources for outside employment.

[Company] may monitor use of its technology resources to ensure security, protect intellectual property, and enforce policy. Employees should have no expectation of privacy on company systems. Monitoring is conducted in compliance with applicable law and is not used for arbitrary or discriminatory purposes.

Personal devices used to access company resources must be enrolled in the company's mobile device management (MDM) system. Enrollment installs a work profile that segregates company data from personal data. The company can wipe the work profile (not personal data) if the device is lost or you separate from the company.

All company information created, accessed, or stored on company or personal devices remains the property of the company. Upon separation, employees must return or delete all company data. The company has the right to inspect personal devices used for work.

Use strong passwords (managed via the company password manager), enable multi-factor authentication on all work accounts, do not click suspicious links, lock devices when stepping away. Report any suspected security incident within 4 hours.