Acceptable Use Policy
Last updated June 2026.
CustodyLinx is compliance infrastructure for a controlled substance. Using it to undermine compliance defeats its entire purpose and is strictly prohibited.
Lawful, licensed use
CustodyLinx may be used only by licensed operators and their authorized users to move and account for controlled cannabis and hemp product in compliance with applicable international, federal, state, and local law. You are responsible for holding and maintaining the licenses, permits, and registrations required for the product and movements you record.
No circumventing compliance
You may not use the platform to falsify a manifest, defeat or spoof a compliance hold, fabricate or alter a custody event, misrepresent a regulator filing, suppress a diversion or incident report, or otherwise evade the recordkeeping and reporting obligations the system exists to satisfy. The custody log is append-only and tamper-evident by design; attempting to defeat that integrity is a serious violation.
Accurate data
Operators must enter accurate package identifiers, weights, units, licenses, and counterparties. The evidentiary value of the chain of custody depends on the honesty of what is recorded. Knowingly entering false compliance data is prohibited.
Security
Do not attempt to access another operator's data, probe or bypass tenant isolation and access controls, scrape the service, reverse engineer it, or interfere with its availability. Keep credentials confidential and report any suspected compromise promptly. Access is least-privilege; do not share accounts or escalate your own role.
Prohibited conduct
No use that is unlawful, that infringes others' rights, that introduces malware, that overloads or disrupts the infrastructure, or that uses the platform to facilitate diversion of controlled product into an illegal channel.
Enforcement
We may suspend or limit access to protect the platform, other operators, or the integrity of the compliance record, and we cooperate with lawful regulatory and law-enforcement processes. Where safety or a regulator deadline is implicated, we act to preserve the evidentiary record first.