Skip to content
Vercel April 2026 security incident
Read the bulletin

Acceptable Use Policy

Last Updated

Acceptable Use Policy
    1. Scope
    2. Prohibited Activities
    3. Artificial Intelligence Services
    4. US Digital Millennium Copyright Act or Similar Statutory Obligations
    5. Violations
    6. Changes to Policy

1. Scope

This Acceptable Use Policy (“Policy”) applies to all customers’ and their users’ use of services provided by Vercel Inc. or its affiliates (“Vercel” or “we”). Undefined capitalized terms have the meaning given in the agreement between you (“Customer” or “you”) and Vercel governing the Services (“Agreement”). By using our Services, you agree to this Policy.

To report a violation of this Policy, please visit https://vercel.com/abuse.

2. Prohibited Activities

In accessing and using the Services and Vercel’s systems, Customers may not, and must not allow their users or third parties, to do the following:

  • Carry out any unlawful purpose, including, but not limited to:

    • Fraud, deceptive practices, or other scams;

    • Impersonation, phishing, or misrepresenting authorization to act on behalf of others or Vercel;

    • Sale, promotion or facilitation of illegal goods and services;

    • Hate speech; or

    • Share or threaten to share nonconsensual intimate imagery, including the use of synthetic media or deepfakes;

  • Violate the rights of others, including, but not limited to harassment, or infringing or misappropriating intellectual property;

  • Threaten, promote, or enable violence, terrorism, or other serious harm;

  • Promote, publish, store, share content, or enable conduct that is offensive, obscene, graphic or violent, promoting hate speech, sexually exploitative, abusive, discriminatory, or otherwise illegal, including any child sexual exploitation or abuse;

  • Send or create unsolicited mass messages (“spam”), including spammy, ‘clickbait,’ or ‘clickfraud’ content or schemes;

  • Create an undue burden on Vercel’s or third party’s websites, infrastructure, or the networks or services;

  • Scrape, proxy, act as a VPN, or host media for hot-linking;

  • Engage in name-squatting behavior within Vercel-related namespaces, including attempting to resell, barter, trade, or inactively hold namespace entities for future use;

  • Rent, lease, loan, or sell access to, or otherwise attempt to transfer or make the Services available to any third party;

  • Develop a similar or competing product or service using the Services or Vercel’s confidential information;

  • Circumvent Vercel’s Fair Use Guidelines, rate limits, or security measures, including by using automation to interact with Vercel’s website, create multiple accounts, extract data, submit requests or queries, or search requests;

  • Undermine the security or integrity of computing systems or networks of Vercel, its partners, or any other person, or attempt to gain unauthorized access to the Services, or related systems or network; or

  • Remove, obscure, or modify any proprietary or other notices or attributions in the Services or Documentation.

Further, customers on a non-Enterprise subscription may not:

  • Use a service for an objectionable purpose.

You may conduct benchmark tests of a service (other than AI Services (as defined below)). Any publicly disclosed results must include all necessary information for others to replicate the tests.

3. Artificial Intelligence Services

The following additional restrictions apply to customers’ and their users’ use of Services that utilize artificial intelligence (“AI Services”).

Customers may not use AI Services, nor allow their users or any third party to use AI Services for the following:

  • Build substantially similar functionality, competing products, or training competing AI models (e.g., create synthetic training);

  • Model extraction or stealing attacks;

  • Buy, sell or transfer Vercel’s third-party AI providers’ API keys from, to or with a third party;

  • Circumvent any protective measures or safety mitigations within or related to the AI Services;

  • Remove any metadata, digital signatures, or watermarks to identify AI-generated content;

  • Extract data through any method, such as web scraping or web harvesting, from the AI Services or any underlying third-party AI providers’ models, algorithms or systems, unless permitted by us;

  • Create, send, upload, display, store, process, or transmit content that is, or is intended to be, disseminated in electoral campaigns;

  • Represent that output is human-generated without reliance on AI;

  • Any “high risk” areas under the EU AI Act;

  • Develop or advance facial recognition databases;

  • Make inferences about personal characteristics of a real person based on biometric data;

  • Create, receive, maintain, transmit or otherwise process any information that includes or constitutes:

    • "Protected Health Information," as defined under the HIPAA Privacy Rule (45 C.F.R. Section 160.103);

    • Personal information of children under age 13 or the applicable age of digital consent; or

    • Data subject to the International Traffic in Arms Regulations maintained by the U.S. Department of State;

  • Online services directed at children;

  • Clinical practice, or as a substitute for regulated advice;

  • Develop bioweapons, chemical weapons, or weapons of mass destruction;

  • Property destruction.

5. Violations

Violation of this Policy constitutes a material breach of the Agreement. If we reasonably believe you or your users are violating this Policy, we may restrict, suspend, or terminate your access to Services immediately upon notice to you, unless otherwise agreed in the Agreement.

6. Changes to Policy

Vercel may update this Policy by posting a revised version at vercel.com/legal, effective upon posting.