🛑 Free Acceptable Use Policy (AUP) Generator

Create a comprehensive Acceptable Use Policy to protect your app, network, or community from abuse, spam, and destructive users.

Why Your Platform Needs an AUP

When you open your software or platform to the public, you invite both good users and bad actors. Without a formalized Acceptable Use Policy, you lack the clear legal criteria required to evict malicious users who damage your brand or infrastructure.

  • Legal Enforcement of Bans: If you ban a paying user without a referenced AUP violation, they can file a chargeback or lawsuit. An AUP gives you an airtight reason to terminate an account.
  • Protect Infrastructure from Abuse: Stop users from mining cryptocurrency on your servers, DDoS-ing targets using your IP addresses, or sending massive volumes of spam emails.
  • Maintain Brand Safety: For online communities, an AUP forbids hate speech, harassment, doxxing, and illegal content, ensuring your platform remains safe for advertisers and the majority of users.
  • B2B Tier Protections: If you are a B2B service (like an email API), major providers (like AWS or Stripe) demand that *you* have an AUP in place to pass their compliance audits.

Frequently Asked Questions

An AUP is a set of rules restricting how users may use your network, website, or platform — explicitly forbidding spam, hacking, harassment, or posting illegal content.
A ToS covers the broad legal relationship (payment, liability). An AUP isolates prohibited user behavior, making it far easier to enforce rules and ban abusive users without navigating complex ToS clauses.
Yes. An AUP serves as your contractual justification for terminating an account immediately. If a user violates an explicitly listed rule, you have the right to revoke access without notice or refund.
SaaS platforms, web hosting companies, ISPs, online communities, and corporate networks. B2B providers like AWS and Stripe also often require that you have an AUP in place to pass their compliance audits.
Your AUP explicitly grants you the right to suspend or terminate their account indefinitely and without a refund for prepaid services.

What the generator asks you

The form asks for your company name, website URL, contact email and country. The policy names your company as the service provider, refers to the website URL as the covered service and gives the contact email as the address for reporting violations. Everything else in the document is fixed text.

What the finished document covers

  • Prohibited Use
  • System and Network Security
  • Spam
  • Suspension and Termination
  • Reporting Violations

What it does not do

The rules are generic to any online service: there is no section for user-generated content, age limits, API or rate limits, or an appeals process after a suspension. The country field is printed but does not change the wording, and there is no governing-law or severability clause. It is a template, not legal advice, and it should be read together with your terms of service, which it refers to but does not replace.

Documents you may need next

Guides on this topic