Legal

Hangar Acceptable Use Policy

What your organisation may run on Hangar, and how TALOS Defence enforces the policy.

Version 1.0. Effective date: 27 October 2026.

This policy is part of the Hangar Terms of Service. It applies to you, your Authorised Users, and every Workload and item of Customer Content on Hangar. Words defined in the Terms of Service have the same meaning here.

Hangar runs on Amazon Web Services. This policy includes what Amazon Web Services requires of the people who use services built on it.

1. The rule#

1.1 Use Hangar only for lawful work, on data, models and code that you have the right to use.

1.2 You must not use Hangar, and must not help or allow anyone else to use Hangar, in any way that this policy prohibits. A Workload that does a prohibited thing breaches this policy, whether or not you intended it.

2. Illegal and harmful activity#

You must not use Hangar:

for any illegal or fraudulent activity, under the law of Australia or of any place where you operate or where the activity has effect;
to violate the rights of others, including privacy, intellectual property and confidentiality rights;
to threaten, incite, promote or actively encourage violence, terrorism or other serious harm;
to harass, harm or encourage harm to individuals or groups;
to create or spread intentional disinformation or deception;
to depict a real person's voice or likeness without their consent or other appropriate rights;
for unlawful tracking, monitoring, surveillance or identification of people;
to send, or help send, unsolicited mass email or other messages, promotions, advertising or solicitations (spam).

3. Child sexual abuse material#

3.1 You must not upload, store, generate, process, distribute or seek child sexual abuse material or child exploitation material on Hangar, or use Hangar for any content or activity that promotes child sexual exploitation or abuse, or that harms or abuses a minor, including grooming.

3.2 When we become aware that Hangar may hold or be used to access such material, we will:

suspend the Account at once;
preserve the relevant records and material as the law requires;
refer the matter to the Australian Federal Police, and to other authorities as the law requires;
end the agreement.

We do not tell you before we refer the matter.

4. Security, attacks and scanning#

You must not use Hangar to violate the security, integrity or availability of any user, network, computer, communications system, software application, or network or computing device. This includes:

accessing, probing, scanning or testing any system without the express authorisation of its owner;
denial of service attacks, flooding, or traffic that degrades any service;
intercepting or monitoring data that is not yours;
falsifying the origin of packets, email headers or other identifying information;
using credentials, keys or tokens that you are not authorised to use;
operating open proxies, relays, or anonymising services for third parties.

Authorised security testing. You may test a system from Hangar only if you hold the written authorisation of the system's owner, the test is within that authorisation, and you have written to security@gethangar.au before the run with the target and the time. Testing of Hangar itself is not permitted without our separate written agreement.

5. Malware#

You must not create, store, run, test against third parties, or distribute viruses, worms, ransomware, trojans, botnet software, spyware, or any other code designed to harm, disable or gain unauthorised access to a system. Malware research is permitted only on samples you are entitled to hold, inside your own run, with no egress to systems you do not own.

6. Cryptocurrency#

You must not mine, mint or validate any cryptocurrency or digital token, or run proof-of-work or similar computation, on Hangar.

7. Weapons and controlled technology#

You must not use Hangar to:

design, develop, produce, acquire or use chemical, biological, radiological or nuclear weapons, or their means of delivery;
perform a lethal function in a weapon without human authorisation or control;
process, develop, supply or publish any goods, technology or software controlled under the Defence Trade Controls Act 2012 (Cth), the Defence and Strategic Goods List, or any other export control law, unless you hold and comply with every permit, approval or exemption the activity needs (Terms of Service clause 17).

8. Sanctions#

You must not use Hangar:

if you, a person who owns or controls you, or an Authorised User is a designated person or entity under Australian sanctions law, or acts for one;
for the benefit of a designated person or entity;
in any other way that breaches an Australian sanctions measure.

9. Data, models and training rights#

9.1 You must hold every right, licence and consent needed to use each dataset, model, weight and image in your Workloads, including to train or tune on them.

9.2 You must not train, tune or evaluate a model on data that you collected or obtained unlawfully, or in breach of the terms under which it was made available, or on personal information without a lawful basis.

9.3 You must not use Hangar to extract or reproduce the weights or training data of a third party's model without the right to do so.

9.4 You must not use Hangar to circumvent the safety filters or functions of any AI model or service in breach of the terms under which you use it.

10. Resale and transfer#

10.1 You may use Hangar to build, test and run your own products and services, including services you provide to your own customers.

10.2 You must not, without our written agreement:

resell, sublet, lease, broker, assign or transfer Accelerator Time, bookings, Credit or access to your Account, as such, to any other person;
give any other organisation access to your Account;
act as an agent for another person in buying Hangar capacity.

10.3 Hangar never gives you an instance, an Infrastructure Provider reservation, or access to the Infrastructure Provider's console. You must not describe what you buy as a lease or reservation of any instance or capacity block.

11. The host, the platform and other customers#

You must not, and must not attempt to:

escape your run's container or sandbox, or gain access to the host, the hypervisor, the instance operating system or the instance metadata service;
access, read, infer or interfere with another customer's Workload, data, memory or network traffic, including through side channels;
reach a destination that is not on your Account's egress allowlist by any means other than the allowlist;
interfere with or forge a reset, an attestation, a Certificate, a signed record or the published log;
bypass, disable or overload any limit, meter, monitor or security control of Hangar;
probe, scan or test the Hangar control plane, API or website for vulnerabilities, except under our separate written agreement;
use Hangar in a way that breaches the Infrastructure Provider's acceptable use policy or service terms.

Report a vulnerability in Hangar to security@gethangar.au.

12. Fair use of the Service#

You must not:

open more than one Account, or use false details, to avoid a limit, a free allowance, a suspension or a sanctions check;
send requests at a rate that degrades the Service for others, or ignore rate limits;
store secrets in images, logs or uploads; use the Hangar secrets store instead.

13. Your responsibility for your users#

You are responsible for your Authorised Users' compliance with this policy, and for the conduct of anyone who uses your Account or your keys. If you offer a service built on Hangar to your own customers, you must bind them to terms at least as protective as this policy, and you are responsible for their use.

14. Monitoring and enforcement#

14.1 We monitor account activity, payments, usage and instance metadata to protect Hangar, the Infrastructure Provider and other customers. TALOS Defence staff have no access to Customer Content (Terms of Service clause 6.7).

14.2 If we reasonably believe that this policy has been breached, we may do any of the following, in proportion to the breach:

stop a run or session;
remove or disable access to Customer Content;
suspend or close the Account (Terms of Service clauses 11 and 12);
report the matter to a law enforcement agency, regulator, or the Infrastructure Provider;
give information about the breach to those bodies, as the law permits or requires.

14.3 You must cooperate with us, and with the Infrastructure Provider, to investigate and remedy a breach.

14.4 We may act at once where the Infrastructure Provider instructs us, where the law requires, or where a breach involves serious harm.

15. Reporting a breach#

Report a suspected breach of this policy, including by another customer, to security@gethangar.au.

16. Changes#

We may change this policy under clause 18 of the Terms of Service. We may change it with shorter notice when the Infrastructure Provider changes its own policies or the law changes.