Skip to content

Legal

Acceptable use policy

What you may and may not build, run, or deploy on Codexa. The sandbox is shared infrastructure; these rules keep it safe for everyone.

Last revised

Prohibited uses

  • Malware, credential harvesting, phishing pages, or anything designed to deceive users or compromise devices.
  • Attacks on Codexa, other tenants, or third parties: scanning, denial of service, sandbox escape attempts, resource exhaustion, or probing the runner or preview proxy.
  • Cryptocurrency mining or other compute abuse unrelated to developing your application.
  • Content that is illegal where you or we operate, including child sexual abuse material, incitement to violence, or infringement of others' intellectual property.
  • Scraping or collecting personal data without a lawful basis.
  • Reselling the service or sharing one account between many people outside a team workspace.
  • Using AI features to generate content that violates the configured provider's usage policies.

Sandbox limits

Each runtime has memory, process, and time limits set by your plan and the operator. Repeatedly hitting those limits, or trying to circumvent them, may result in suspension. Outbound network access from sandboxes may be restricted by the operator.

Enforcement

We may stop a runtime, take down a deployment, or suspend an account to protect the service, and will tell you why unless legally prevented. To report abuse of a Codexa deployment, use the support form or email support@codexa.app.

Security research

Good-faith research within the scope of the responsible disclosure policy is not a violation of this policy.