Acceptable Use

1. Authorised access

Use only your own account and only for legitimate work connected with your organisation or SBS duties. Do not share passwords or MFA codes, allow another person to use your session, attempt to bypass access controls, or access another organisation’s information.

2. Protect information

Upload only information needed for the relevant service and which you are authorised to share. Check recipients, organisation scope and document contents before uploading. Do not place credentials, payment-card data or unnecessary sensitive personal information in comments or filenames.

3. Safe use

• Keep devices, browsers and security software supported and up to date.
• Sign out on shared devices and report lost or compromised devices promptly.
• Do not upload malware, executable code, unlawful material or content that infringes another person’s rights.
• Do not probe, scan, disrupt, overload, scrape or reverse engineer the portal.
• Do not use information obtained through the portal for unrelated purposes.

4. Monitoring and records

For security, accountability and service delivery, the portal records sign-ins, device/browser details, approximate IP address, page activity, changes, uploads and administrative actions. Authorised SBS staff may review these records to investigate incidents, support users and meet legal or contractual duties.

5. Account action

SBS may suspend access, end sessions, require a password or MFA reset, remove unsafe content, or preserve relevant records where reasonably necessary to protect the service, investigate suspected misuse or comply with an obligation. Serious misuse may be reported to the user’s organisation or an appropriate authority.

6. Help and reporting

Report suspected unauthorised access, an incorrect organisation assignment, accidental disclosure or other security concern immediately to [email protected] or your usual SBS contact. Do not include passwords or MFA codes in support messages.