Robotech CAD Solutions: Acceptable Use Policy (AUP) – 2025 Update

Purpose
This Acceptable Use Policy (AUP) outlines the acceptable use of information technology resources at Robotech CAD Solutions. The policy aims to protect the company’s data, maintain operational security, and ensure compliance with regulatory standards.

Scope
This policy applies to all employees, contractors, consultants, temporary and other workers at Robotech CAD Solutions, including all personnel affiliated with third parties who access company IT systems.

1. General Use and Ownership

• • Company-provided systems and networks are the property of Robotech CAD Solutions.
  • Users should have no expectation of privacy in their use of company systems. Activities may be monitored.
  • Users are responsible for exercising good judgment regarding the reasonableness of personal use.

2. Prohibited Activities
The following activities are strictly prohibited:

• • Unauthorized sharing or disclosure of confidential or proprietary information.
  • Installation of unauthorized software or hardware.
  • Use of company resources to engage in illegal, harassing, or offensive conduct.
  • Circumventing user authentication or security controls.
  • Use of pirated or unlicensed software.

3. AI Tool Usage

• • Use of AI tools (e.g., ChatGPT, Bard) with company data must be pre-approved.
  • Confidential or proprietary data must not be submitted to AI tools without authorization.

4. Bring Your Own Device (BYOD)

• • Personal devices must be approved by IT prior to accessing company systems.
  • Approved devices must run up-to-date security software.

5. Cloud Storage and Services

• • Use of personal cloud services (e.g., personal Dropbox, Google Drive) for company data is prohibited.
  • Only company-approved cloud platforms may be used to store or share company information.

6. Social Media and Public Communication

• • Employees may not post or discuss company-related matters on personal social media without approval.
  • Confidential or internal information must never be disclosed publicly.

7. Remote Work and VPN Usage

• • Remote access must be via company-approved Virtual Private Networks (VPNs).
  • Users must ensure secure internet connections and protect company data during remote sessions.

8. Password Management

• • Passwords must be a minimum of 12 characters and include letters, numbers, and symbols.
  • Passwords must be changed every 90 days.
  • Use of password managers is encouraged and supported.

9. Data Privacy and Compliance

• • All data handling must comply with GDPR, CCPA, and other relevant regulations.
  • Personal data must only be collected and stored when necessary and with proper consent.

10. Monitoring and Enforcement

• • All system activity may be monitored for security and compliance purposes.
  • Violations of this policy may lead to disciplinary action, including termination.

Acknowledgment
All employees must read, understand, and sign the Acceptable Use Policy upon onboarding and whenever it is updated.

Review Cycle
This policy will be reviewed and updated annually, or as needed due to technological or regulatory changes.

Effective Date: June 15, 2025