NexJen IT Solutions← Back to Home

ACCEPTABLE USE POLICY

NexJen IT Solutions, LLC

Effective: August 31, 2026 · Last updated: September 27, 2026

1. What This Policy Covers

This Acceptable Use Policy (the “AUP”) sets the rules for using systems and services that NexJen IT Solutions, LLC (“NexJen,” “we,” “us”) manages, hosts, supports, or provides access to. It applies to:

  • Clients under a Master Services Agreement with NexJen, and everyone who uses a system NexJen manages for that client — employees, contractors, and anyone else the client permits to use it; and
  • Visitors and users of nexjenit.com and any other website or online service NexJen operates.

If you are a NexJen client, this AUP is part of your Master Services Agreement (MSA), and capitalized terms have the meanings given in Section 2 of the MSA. Clients are responsible for their Users’ compliance with this AUP (MSA § 4.6).

We have kept this policy short. The rules below are the ones that matter.

2. The Basic Rule

Use the systems we manage for legitimate business purposes, lawfully, and in a way that does not harm others, does not compromise security, and does not put NexJen or other clients at risk.

3. What You Must Not Do

3.1 Illegal and harmful activity

  • Violate any applicable law or regulation.
  • Infringe anyone’s intellectual property rights, including by storing or distributing pirated software, media, or content.
  • Store, transmit, or distribute child sexual abuse material. We report this to law enforcement immediately and suspend access without notice.
  • Harass, threaten, stalk, defame, or incite violence against anyone.
  • Engage in fraud, including business email compromise, invoice fraud, or impersonation.
  • Distribute malware, ransomware, or other malicious code.

3.2 Security violations

  • Attempt to gain unauthorized access to any system, account, network, or data — whether it belongs to us, to your organization, to another client, or to a third party.
  • Probe, scan, or test the vulnerability of any system without written authorization from its owner.
  • Circumvent, disable, or tamper with authentication, logging, monitoring, or security controls, including those we deploy.
  • Share account credentials, or use someone else’s credentials.
  • Intercept or monitor data or communications you are not authorized to access.
  • Interfere with service to any user, host, or network, including by denial-of-service attacks or by flooding.

3.3 Misuse of the service

  • Send unsolicited bulk email, spam, or chain messages, or violate the CAN-SPAM Act or similar law.
  • Use a system we manage to send email on behalf of a domain you do not control or are not authorized to use.
  • Resell, sublicense, or provide the managed services to a third party as your own service, unless your Order Form says you may.
  • Mine cryptocurrency, run distributed computing workloads, or otherwise consume resources in a way unrelated to your ordinary business use.
  • Store or process data that requires a regulatory framework we do not support — including protected health information under HIPAA and cardholder data under PCI DSS — without first agreeing separate written terms with us (MSA § 3.4(f); Exhibit D § D2.6).
  • Attempt to reverse engineer, decompile, or extract the source of NexJen Materials or our vendors’ software, except to the extent applicable law permits despite this restriction.

3.4 Content

  • Do not store or transmit content that is unlawful, defamatory, obscene, or that violates a third party’s privacy or publicity rights.

4. Your Responsibilities

  • Keep credentials secure. Use the multi-factor authentication we deploy. Do not share passwords. Do not write them down where others can find them.
  • Report problems. Tell us promptly if you suspect a compromised account, a phishing message that someone acted on, a lost or stolen device, or any other security concern. Fast reporting is the single most effective thing you can do to limit damage.
  • Keep your user list current. Clients must tell us within one Business Day when a User joins, changes roles, or leaves (MSA § 4.4).
  • Do not disable what we deploy. If a security control is causing a business problem, tell us and we will work on it. Do not turn it off, and do not instruct your people to (MSA § 4.8).
  • Use company systems for company business. Reasonable incidental personal use is fine unless your own organization’s policy says otherwise. Your organization sets that rule, not us.

5. Monitoring and Privacy

We monitor the systems we manage for security and operational purposes — endpoint health, threat detection, patch compliance, configuration drift, and similar signals. Our tools may incidentally surface file names, application names, and metadata. By using a system we manage, you acknowledge that it is monitored for these purposes.

We do not read your email, review your documents, or monitor employee productivity. We access content only when it is necessary to deliver a service you have asked for — for example, restoring a mailbox from backup, troubleshooting a specific message, or investigating a confirmed security incident.

Our handling of your data is governed by Exhibit D (Data Protection and Security Addendum) to the MSA and, for our website, by our Privacy Policy.

Your organization may have its own monitoring policies covering its employees. Those are your organization’s decisions and its responsibility to communicate.

6. Enforcement

6.1 What we may do. If we determine, reasonably and in good faith, that this AUP has been violated, we may:

  1. contact you and ask you to fix it;
  2. block, quarantine, or remove the specific activity, account, device, message, or content involved;
  3. suspend the affected account, device, or service; or
  4. suspend the Services, or terminate them under Section 6.4 of the MSA.

6.2 Notice first, usually. We will normally contact you and give you a reasonable opportunity to fix the problem before suspending anything. We may act immediately and without prior notice where the activity presents an active security threat, is causing ongoing harm, or involves illegal content — but we will tell you as soon as practicable afterward, explaining what we did and why.

6.3 Proportionality. We will use the least disruptive measure that addresses the problem. Suspending an entire environment because one account is compromised is a last resort, not a first response.

6.4 Cooperation with law enforcement. We will cooperate with law enforcement where legally required, and will notify you unless the law prohibits it.

6.5 No obligation to monitor. We are not obligated to monitor for AUP violations and do not review Client Data content for compliance. Our enforcement rights are rights, not duties, and choosing not to act in one instance does not waive our right to act in another.

7. Reporting a Violation

If you believe someone is violating this AUP, tell us at support@nexjenit.com with the details. We will investigate and respond.

8. Changes to This Policy

We may update this AUP. We will post the updated version at nexjenit.com/acceptable-use and, for clients, give at least thirty (30) days’ written notice of a material change. We will not make a change that materially and adversely affects a client’s rights during that client’s then-current Term without the client’s written consent, except where a change is required by law or is necessary to address a security or legal risk, in which case it takes effect immediately and we will explain why.

Continued use of the services after a change takes effect means you accept the updated policy.

NexJen IT Solutions, LLC · nexjenit.com · support@nexjenit.com · (817) 781-3021