Acceptable use policy

You must not:

send unsolicited bulk messages or host the infrastructure for it;

attack, scan, probe or test the security of any network or system without its owner's permission, including 3NV's and the data centre's;

run denial-of-service attacks, or let your servers be used in them;

forge packet headers, spoof IP addresses or announce address space you don't have the right to use;

run open mail relays, open DNS resolvers, open proxies or other services that strangers can use to send traffic;

use more network capacity than your order allows in a way that harms other customers;

use IP addresses we haven't assigned to you, unless you've shown us you have the right to use them;

crawl or scrape websites in a way that overloads them, gets around their access controls or ignores their machine-readable opt-outs.

Tor, VPN and proxy services. You may run Tor relays or exit nodes, VPN services or proxy services if you tell us first and set reverse DNS (PTR) records that name the service. Abuse that comes through it is still your responsibility, and you handle the reports for that traffic.

To scan the internet for research, or to test the security of your own systems on our network, ask us first at support@3nv.io.

You must not interfere with the facility, other customers' equipment, or our management network.

Colocate customers follow the data centre's site rules, which we give you before move-in. Visits are by appointment, with photo ID.

You must not change hardware or firmware on a Reserve or Own server without our agreement.

You may not mine cryptocurrency (proof-of-work) on Reserve servers. We own that hardware.

Proof-of-stake validators and blockchain nodes that don't mine are allowed on Reserve.

On Own and Colocate the hardware is yours, so you may mine. Power is billed as usual. Stay within the power and cooling limits in your order.

You must follow the export and sanctions rules in section 9 of the Terms of Service. You must not give access to the services to anyone subject to sanctions, or use them for a purpose that export rules forbid.

Anyone can report illegal content or abuse by email to abuse@3nv.io. Please write in English or Estonian.

Include:

• the IP address or URL;
• what you saw, with the date, time and time zone;
• for spam, scans or attacks: logs or email headers;
• for illegal content: why you think it's illegal, and which law, if you know;
• your name and email;
• a sentence saying your report is accurate and complete, as far as you know.

You don't have to give your name when reporting child sexual abuse material.

We forward your report to our customer, who runs the server. Leave out anything you don't want them to see.

We confirm receipt of every report. For reports about illegal content, we also tell you what we decided, why, and how to challenge it. Automated reports, such as blocklist or log alerts, get a receipt only.

If a report concerns your server, we send it to your abuse contact with a deadline. You have 24 hours for spam, scans and attacks, and 48 hours for content. For child sexual abuse material or an attack in progress, act at once. Tell us what you did, or why you think the report is wrong.

A person reviews every action we take. We don't look inside your server.

We may ignore reports that are abusive, or that repeat one we've already handled.

If someone's life is in danger, call 112 first.

Report security problems in 3NV's own systems to security@3nv.io.

We contact you and ask you to fix it within a reasonable time, set by how serious the issue is.

If there's an urgent risk to people, the network or the facility, or the law requires it, we may restrict network access to the affected server at once. We do this by isolating or null-routing its IP addresses. We tell you straight away, unless the law forbids it.

Whenever we restrict a server, we tell you in writing:

• what we restricted, and for how long;
• what we found, and whether a report started it;
• the law or the rule in this policy that it breaks;
• how to challenge our decision.

To challenge a decision, reply to our email. Someone who wasn't involved in the first decision reviews it within 2 business days, where our team size allows. You can also take it to an Estonian court.

We lift the restriction once you've fixed the problem and told us how.

When we act on abuse, we only restrict the network. We never power off a server or access, copy or delete your data, with two exceptions:

• a court or authority orders it;
• there's physical danger in the data centre, such as fire or an electrical fault.

If either happens, we tell you, unless the law forbids it.

We act on valid orders from Estonian and EU authorities. We tell you about an order and what we did, unless the law or the order forbids it. Authorities can reach us at legal@3nv.io.

If we learn something that suggests a threat to someone's life or safety, the law requires us to tell the police. We do.

If you don't fix a serious breach, or it keeps happening, we may suspend the service or end the contract under the Terms of Service.