Elnora Logo

Acceptable Use Policy

Effective December 27, 2025

Previous Versions

1. Introduction

1.1 Purpose

This Acceptable Use Policy ("AUP" or "Policy") establishes the rules governing your use of the Elnora platform and services. This Policy is designed to ensure that Elnora's AI-powered protocol generation capabilities are used responsibly, ethically, and in accordance with applicable laws and regulations.

1.2 Scope

This Policy applies to:

  • All users of Elnora AI's platform and services
  • All content processed, generated, or analyzed through Elnora
  • All use cases, whether in research, development, or operational contexts
  • All Authorized Users granted access under a Customer account

1.3 Incorporation

This Policy is incorporated by reference into the Elnora Terms of Service. Violation of this Policy constitutes a breach of the Terms of Service and may result in suspension or termination of access.

1.4 Enforcement

Elnora reserves the right to investigate suspected violations of this Policy and to take appropriate action, including suspension or termination of access, removal of content, and reporting to relevant authorities where required or appropriate.

2. Intended Use

2.1 Therapeutic and Beneficial Purposes

Elnora is designed and intended exclusively for:

  • Therapeutic medicine discovery and development - Supporting the creation of treatments that benefit patients
  • Biomedical research for patient benefit - Advancing scientific understanding to improve human health
  • Protocol optimization for legitimate research - Improving experimental efficiency and reproducibility
  • Supporting qualified scientists and researchers - Augmenting human expertise with AI capabilities

2.2 Core Principle

Elnora exists to accelerate drug discovery and improve patient outcomes. All use of the platform must align with this mission of using AI for good—to develop better medicines faster and bring hope to patients who need them.

3. Permitted Uses

You may use Elnora to:

3.1 Protocol Generation and Optimization

  • Generate new laboratory protocols for biomedical research
  • Optimize existing protocols for efficiency and reproducibility
  • Receive AI-powered recommendations for experimental design
  • Analyze and improve media formulations and cell culture processes

3.2 Data Integration and Analysis

  • Integrate with your authorized data sources (ELN, LIMS, databases)
  • Upload and process proprietary research data
  • Connect to approved Third-Party Services
  • Pull data from internal and external repositories via authorized integrations

3.3 Collaboration

  • Enable team members to access shared protocols and recommendations
  • Communicate with Elnora and other authorized AI agents
  • Export protocols for laboratory implementation
  • Share outputs with authorized collaborators within your organization

3.4 Platform Improvement

  • Provide feedback and suggestions to improve Elnora
  • Report bugs, errors, or issues
  • Participate in beta testing programs (if offered)

4. Prohibited Uses - General

You may not use Elnora to:

4.1 Illegal Activities

  • Conduct or facilitate any activity that violates applicable law, regulation, or governmental order
  • Violate export controls, trade sanctions, or regulatory restrictions (including EAR, ITAR)
  • Infringe intellectual property rights, patents, trade secrets, or proprietary information of any third party
  • Enable or facilitate human trafficking, forced labor, or exploitation

4.2 Fraud and Deception

  • Fabricate credentials, qualifications, or expertise
  • Misrepresent your identity or organizational affiliation
  • Create false or misleading regulatory submissions or safety documentation
  • Engage in phishing, financial fraud, or identity theft
  • Misrepresent AI-generated content as solely human-created work

4.3 Harmful Content

  • Generate content that promotes violence, hatred, or discrimination
  • Create content that harasses, bullies, or threatens individuals
  • Produce sexually explicit content or content exploiting minors
  • Generate content that glorifies terrorism or extremism

4.4 Privacy Violations

  • Process personal data in violation of applicable privacy laws (GDPR, CCPA, HIPAA)
  • Collect, store, or disclose personal information without proper authorization
  • Upload genetic or genomic data of identifiable individuals without informed consent
  • Violate data sharing agreements or confidentiality obligations

4.5 System Interference

  • Interfere with or disrupt the platform, servers, or networks
  • Conduct denial-of-service attacks or similar disruptive activities
  • Introduce malware, viruses, or other harmful code
  • Attempt unauthorized access to any portion of the platform or other users' accounts
  • Circumvent security measures, access controls, or usage limits

5. Prohibited Uses - AI and Platform Specific

You may not use Elnora to:

5.1 Reverse Engineering and Model Extraction

  • Reverse engineer, decompile, disassemble, or attempt to derive the source code, model weights, or underlying algorithms of Elnora
  • Subject Elnora to jailbreaking, prompt injection, or other adversarial attacks
  • Extract training data, model parameters, or proprietary information from the platform
  • Attempt to replicate or recreate Elnora's AI capabilities or methodology

5.2 Competitive Use

  • Build products or services that compete with Elnora
  • Use Elnora outputs to train, fine-tune, or develop competing AI models
  • Access the platform to copy features, functions, or user interface elements
  • Conduct competitive intelligence gathering through unauthorized data extraction

5.3 Unauthorized Distribution

  • Resell, redistribute, or sublicense access to Elnora without authorization
  • Share access credentials with unauthorized individuals
  • Provide access to Elnora as part of a service to third parties without explicit written agreement

5.4 Circumvention

  • Bypass safety filters, guardrails, or content moderation systems
  • Evade usage limits, rate limiting, or access restrictions
  • Remove watermarks, metadata, or other identifying information from outputs
  • Manipulate the platform to generate content that would otherwise be blocked

6. Prohibited Uses - Biosafety and Ethics

This section is critical. Elnora is built to advance therapeutic medicine and help patients. The following uses are strictly prohibited:

6.1 Weapons and Harmful Agents

You may not use Elnora to:

  • Design, develop, synthesize, or optimize biological weapons or agents
  • Create or enhance pathogens, toxins, or dangerous biological materials intended to harm humans, animals, or the environment
  • Develop chemical, nuclear, or radiological weapons or materials
  • Generate content intended to provide instructions for weaponizing any materials
  • Support or enable any military application intended to cause harm to human life

6.2 Controlled Substances

  • Design or synthesize controlled substances for illicit purposes
  • Develop manufacturing processes for illegal drugs
  • Circumvent regulatory controls on scheduled or controlled materials

6.3 Dual-Use Research of Concern

You may not use Elnora for dual-use research of concern without appropriate oversight:

  • Gain-of-function research without documented institutional review and approval
  • Research on Select Agents and Toxins (BSAT) without proper registration and oversight
  • Any research that could be directly misapplied to pose a significant threat to public health, safety, or security

Note: Legitimate biosafety research, published research on pathogens, and educational use are recognized as important. Use of Elnora for such purposes requires documented institutional approval (IRB/IBC review, biosafety level certification) and compliance with applicable regulations.

6.4 Circumventing Safety Oversight

  • Bypass or falsify institutional review board (IRB) documentation
  • Circumvent institutional biosafety committee (IBC) oversight
  • Evade biosafety regulations or ethics review requirements
  • Falsify regulatory submissions or safety documentation

6.5 Harm to Public Health or Safety

  • Any use contrary to public health, safety, or the environment
  • Activities that could reasonably be expected to cause widespread harm
  • Uses that undermine the integrity of scientific research or drug development

7. Human Oversight Requirements

7.1 Mandatory Human Review

Elnora is designed to augment and assist qualified scientists—not replace human judgment. You must:

  • Validate all outputs before implementation: All protocols and recommendations generated by Elnora must be reviewed and validated by qualified scientific personnel before laboratory use
  • Exercise professional judgment: AI-generated recommendations are not a substitute for professional scientific judgment
  • Conduct appropriate safety assessments: You are responsible for all safety evaluations of protocols before implementation
  • Maintain human authority: Humans must retain decision-making authority over all research activities

7.2 No Autonomous Execution Without Approval

  • No AI-generated protocol may be executed in the laboratory without human review and approval
  • Automated execution systems (robotic platforms) must include human authorization checkpoints
  • Critical decisions regarding patient safety, regulatory submissions, or resource allocation require qualified human oversight

7.3 Institutional Compliance

  • All use of Elnora must comply with your organization's research governance policies
  • Protocols must be reviewed by appropriate institutional committees where required (IRB, IBC, IACUC)
  • Documentation of human review must be maintained for compliance and audit purposes

7.4 Disclosure Requirements

When communicating results or recommendations derived from Elnora:

  • Disclose that AI was used in protocol development or analysis where appropriate
  • Do not represent AI-generated predictions as validated experimental results
  • Maintain clear documentation distinguishing AI recommendations from experimentally confirmed outcomes

8. Data and Content Requirements

8.1 Data Ownership and Rights

You must:

  • Only upload data that you own or have the legal right to use
  • Ensure that providing data to Elnora does not violate any third-party rights or agreements
  • Comply with all applicable data protection laws and regulations
  • Maintain appropriate consent documentation for any personal data

8.2 Accuracy and Integrity

  • Provide accurate data and information to the best of your knowledge
  • Do not upload fabricated, falsified, or manipulated data
  • Report any errors or inaccuracies in outputs promptly

8.3 Prohibited Content

Do not upload or process through Elnora:

  • Protected health information (PHI) without appropriate HIPAA authorization and business associate agreement
  • Personal data in violation of applicable privacy laws
  • Classified or export-controlled information without proper authorization
  • Malware, viruses, or harmful code
  • Content that violates third-party intellectual property rights

9. Regulatory and Compliance Obligations

9.1 Your Responsibility

You are solely responsible for ensuring that your use of Elnora complies with:

  • All applicable pharmaceutical and life sciences regulations in your jurisdiction
  • FDA regulations (21 CFR) if working with drug development or biomedical devices
  • ICH Guidelines for pharmaceutical research
  • Good Laboratory Practice (GLP), Good Clinical Practice (GCP), and Good Manufacturing Practice (GMP) requirements
  • GDPR, CCPA, HIPAA, and other data privacy regulations
  • Export control regulations relevant to life sciences
  • Institutional policies for research ethics, biosafety, and data governance

9.2 No Regulatory Qualification

Elnora and its outputs are not qualified for direct regulatory submission without independent validation. You acknowledge that:

  • Outputs are not GxP-validated
  • Outputs do not meet 21 CFR Part 11 requirements without additional controls
  • You must independently validate outputs before inclusion in regulatory filings
  • Elnora makes no warranty regarding regulatory acceptance of outputs

9.3 AI Risk Classification

Use of Elnora for certain applications may constitute "high-risk" AI deployment under the EU AI Act or equivalent regulations. You are responsible for:

  • Independently assessing the risk classification of your use case
  • Implementing appropriate risk mitigation measures
  • Maintaining documentation of risk assessment and compliance procedures
  • Complying with any registration or reporting requirements

10. Enforcement

10.1 Monitoring

Elnora employs a combination of:

  • Automated detection systems for prohibited content and activities
  • User reports and flagging mechanisms
  • Human review of suspected violations
  • Investigation of reported concerns with user cooperation

10.2 Consequences of Violation

Violations of this Policy may result in:

(a) Warning: For minor or first-time violations, we may issue a warning and request remediation.

(b) Content Removal: We may remove content that violates this Policy.

(c) Suspension: We may temporarily suspend access to the platform while investigating suspected violations.

(d) Termination: We may permanently terminate access for serious or repeated violations.

(e) Reporting: For violations involving illegal activity, biosafety threats, or harm to public safety, we may report to relevant law enforcement or regulatory authorities.

(f) Legal Action: We reserve the right to pursue legal action for violations that cause harm to Elnora, its users, or third parties.

10.3 No Refunds

If your access is terminated due to violation of this Policy, you are not entitled to any refund of fees paid.

10.4 Cooperation

You agree to:

  • Immediately report any violation of this Policy to security@elnora.ai
  • Provide full cooperation with any investigation of suspected violations
  • Remediate violations promptly and document corrective actions taken

10.5 Mandatory Security Incident Reporting

You must immediately report to security@elnora.ai any of the following:

  • Suspected or confirmed unauthorized access to your account or Customer Data
  • Security breaches, malware infections, or data exfiltration affecting your use of the platform
  • Lost or stolen credentials or devices with access to the platform
  • Any activity you believe may compromise the security of the platform or other users' data
  • Discovery of vulnerabilities in the platform (responsible disclosure)

Failure to report known security incidents is a violation of this Policy and may result in suspension or termination of access. Prompt reporting enables Elnora to protect you, other customers, and the integrity of the platform.

11. Reporting Violations

11.1 How to Report

If you become aware of any violation of this Policy, please report it immediately:

Email: security@elnora.ai

Include:

  • Description of the suspected violation
  • Any relevant evidence or documentation
  • Your contact information (if you wish to be contacted)

11.2 Good Faith Reporting

Good faith reports of violations are protected. We will not retaliate against anyone who reports a suspected violation in good faith.

11.3 Confidentiality

Reports will be handled confidentially to the extent possible, though we may need to disclose information to investigate violations or comply with legal requirements.

11.4 Response Commitment

Elnora commits to the following response timeframes for security violation reports:

  • Acknowledgment: Within 24 hours of report receipt
  • Initial Assessment: Within 72 hours of acknowledgment
  • Resolution Communication: Upon completion of investigation, you will be notified of the outcome and any actions taken

Critical security issues affecting data confidentiality, system availability, or public safety will be prioritized for immediate investigation. For complete service level commitments, please refer to our Service Level Agreement.

12. Appeals

12.1 Right to Appeal

If you believe your account has been incorrectly suspended or terminated, or your content has been incorrectly removed, you may appeal by contacting:

Email: legal@elnora.ai

Include:

  • Your account information
  • Description of the action you are appealing
  • Explanation of why you believe the action was incorrect
  • Any supporting evidence

12.2 Review Process

We will review appeals in good faith and respond within a reasonable timeframe. Our decision on appeal is final.

13. Exceptions

13.1 Requests for Exceptions

Elnora may grant exceptions to specific provisions of this Policy for:

  • Published research on pathogens (with documented institutional approval)
  • Educational use in biosafety, regulatory, or research ethics contexts
  • Legitimate pre-competitive research collaboration
  • Uses where scientific, public health, or regulatory benefits clearly outweigh risks

13.2 How to Request

Requests for exceptions must be submitted in writing to legal@elnora.ai and include:

  • Detailed description of the proposed use
  • Explanation of why an exception is necessary
  • Documentation of institutional oversight and approval
  • Assessment of risks and mitigation measures

13.3 Approval Required

Exceptions require written approval from Elnora's Chief Compliance Officer. Approval may be subject to additional conditions or monitoring requirements.

14. Updates to This Policy

14.1 Changes

Elnora may update this Policy at any time to reflect changes in our services, legal requirements, or best practices. We will provide notice of material changes through:

  • Email notification to the address associated with your account
  • Prominent notice on the platform
  • At least thirty (30) days' advance notice for material changes

14.2 Continued Use

Your continued use of Elnora after the effective date of any changes constitutes your acceptance of the updated Policy.

14.3 Review

We encourage you to review this Policy periodically to stay informed about acceptable use requirements.

15. Contact Information

If you have questions about this Acceptable Use Policy, please contact:

General Questions: contact@elnora.ai

Security and Violations: security@elnora.ai

Legal and Compliance: legal@elnora.ai

Data Protection Officer: Carmen Kivisild carmen.kivisild@elnora.ai