Acceptable use.
NordBastion is built to stay out of your way. This policy is short because our list of rules is short — and honest about exactly where the one real line is.
We do not monitor what runs on your servers. We do not act as a content police, and we do not enforce other people’s copyright claims for them. There is exactly one category of use we will not host under any circumstances — child sexual abuse material — plus a small set of technical limits that exist only to keep the shared network working for everyone.
That is the whole policy. Everything below just says it more carefully.
What we do not do
Most hosts spend a lot of words on everything they might come after you for. We would rather be clear about what we will not do.
- — We do not proactively monitor, scan or inspect the content of your servers.
- — We do not action copyright or DMCA-style takedown notices. We are infrastructure, not a court — a copyright dispute is between the claimant and you. We will not suspend a server, forward a notice as leverage, or hand over customer details on the strength of one.
- — We do not suspend servers over vague “abuse” reports, competitor complaints, or pressure that is not backed by specific, credible evidence.
- — We do not hand over customer data on request. How we handle genuine legal process is documented in the Transparency report.
None of this removes your own responsibility to follow the law that applies to you. It just means we are not the ones policing it for you.
The one line: child sexual abuse material
There is exactly one thing NordBastion will not host, will not look away from, and will not make excuses for: child sexual abuse material — any content that sexually exploits or depicts the abuse of a minor, in any form, including its production, storage or distribution.
If we receive specific, credible evidence that a server is being used for this, that server is terminated immediately — no notice period, no refund of the remaining balance, no appeal. This is the single case where termination is automatic and absolute.
It is also the single case in which, faced with a valid legal order directed at that server, we will comply with a seizure rather than contest it. Everywhere else, the privacy of the network holds. Here it does not — and we are not sorry about that.
Keeping the network usable
Separately from the line above — and this is not about your content — a server cannot be used to break the platform for everyone else on it. That means no using a NordBastion server to launch outbound attacks, floods or large-scale abuse against other systems or against our own network, and nothing that gets an entire address range blocklisted or null-routed.
When something here goes wrong, our goal is to keep your server online, not to kill it: we rate-limit, isolate or filter the problem traffic and contact you to sort it out. This is operational housekeeping, not a morality clause — termination here is a last resort, never the reflex.
How we actually enforce this
We do not go looking. We have no content scanners pointed at your disks, and no interest in building any.
We act on specific, credible evidence — not rumour, not a broad sweep, not a competitor’s complaint. Anything that reaches us is reviewed by counsel before a server is touched, exactly as described in the Transparency report.
If we ever have to act, the affected customer is told what happened and why — unless a valid legal order forbids it, and the Warrant canary covers the case where we are gagged.
If you are not sure
If you are planning something unusual and want to know whether it is fine here, ask before you build it — raise it from your control panel. The answer is almost always yes, and you will have it in writing.
This is the whole list.
One hard line, a handful of technical limits, and otherwise we leave you alone. The pages below explain why the company is built to keep it that way.