Internet AUP

This page describes the acceptable terms under which Puratos allows employees to access the internet from their work devices. This type of document is often referred to as an AUP (Acceptable Use Policy).

You probably followed the link from one of our monthly reminders regarding internet use at Puratos or you followed the link from a warning or block screen.

To ensure internet use is limited to activities acceptable to Puratos and to protect Puratos ICT systems against malicious software (malware, virus, botnets, etc.).

Puratos collects the following information about internet use:

• Website visited (URL)
• Type of website visited (category)
• Puratos username
• User’s Location
• Time website was accessed

This information is retained for audit purposes for a period of 180 days and no specific content of any transactions will be monitored unless there is a suspicion of improper use.

A number of different content categories are blocked outright because Puratos does not wish to have this content accessed from a Puratos owned device. This list includes but is not limited to the following categories:

• AI
• Abused drugs
• Adult
• Command and control
• Compromised website
• Copyright-infringement
• Cryptocurrency
• Cating
• Cynamic DNS
• Encrypted DNS
• Extremism
• Gambling
• Games
• Grayware
• Hacking
• High risk
• Malware
• Newly registered domain
• Nudity
• Parked
• Peer to peer
• Phishing
• Proxy avoidance and anonymizers
• Questionable
• Ransomware
• Real time detection
• Remote access
• Scanning activity
• Sex education
• Unknown
• Weapons

In particular the following is deemed unacceptable use or behaviour by employees:

• visiting internet sites that contain obscene, hateful, pornographic or otherwise illegal material
• using the computer to perpetrate any form of fraud, or software, film or music piracy
• using the internet to send offensive or harassing material to other users
• downloading commercial software or any copyrighted materials belonging to third parties, unless this download is covered or permitted under a commercial agreement or other such licence
• hacking into unauthorised areas
• publishing defamatory and/or knowingly false material about Puratos, your colleagues and/or our customers on social networking sites, 'blogs' (online journals), 'wikis' and any online publishing format
• revealing confidential information about Puratos in a personal online posting, upload or transmission - including financial information and information relating to our customers, business plans, policies, staff and/or internal discussions
• undertaking deliberate activities that waste staff effort or networked resources
• introducing any form of malicious software into the corporate network

Puratos allows access to web based mail services such as Gmail and Hotmail as a courtesy to its employees.  This access is a privilege and not a right and this policy can be reviewed at any time.

Use of non-Puratos e-mail services is strictly limited to personal private use. Under no circumstances can any Puratos data or professional email be sent or received using these services.

Access to these services is monitored and logged for audit purposes.

Puratos provides Microsoft OneDrive as the official and supported file-sharing and online storage platform.

• OneDrive must be used for business-related file sharing and storage.
• Other online file-sharing or cloud storage services are not recommended.
• Use of non-approved file-sharing platforms is at the user’s own risk and may expose Puratos to security and compliance issues.
• All file-sharing activities are subject to monitoring and security controls.

Sensitive or confidential information must only be shared using approved tools and in accordance with Puratos data protection policies.

Puratos regulates the use of Artificial Intelligence tools through its Group Generative Artificial Intelligence Rule (Generative Artificial Intelligence .pdf).

Summary for internet usage

• Microsoft Copilot is the primary and approved AI tool for all employees.
• Copilot is permitted for business use in accordance with Puratos policies.
• All other AI tools and AI-powered online services are denied by default.
• Use of any other AI tool is only allowed after explicit approval by the Group ICT Department.

Unauthorized use of AI tools or feeding data into unapproved AI services is strictly prohibited.