Scope
Review draft — updated 20 October 2026. This policy describes acceptable use of Waaimo by organisations, staff, candidates and other authorised users. It should be adopted together with the final service terms.
Use accounts responsibly
Use only accounts and assessment invitations you are authorised to access. Do not share credentials, impersonate candidates or staff, bypass permissions, guess invitation tokens or attempt to access another organisation’s records.
Protect assessments
Candidates must follow the organiser’s rules on external tools, collaboration and AI assistance. Do not distribute confidential questions, hire a proxy to complete an attempt, manipulate monitoring or submit another person’s work as your own. Organisers must explain permitted assistance clearly.
Respect people and their information
Do not upload unlawful, discriminatory, threatening or harassing material. Do not collect unnecessary sensitive information, disclose private candidate records or use results to make unlawful discriminatory decisions. Provide a reasonable route for candidates to raise errors and accommodation needs.
Protect service availability
Do not introduce malware, overload the service, probe private endpoints without authorisation, evade rate limits or use automated access outside agreed interfaces. Security testing requires prior written agreement covering its scope and handling of data.
Report concerns
Report suspected misuse or a security issue to support@waaimo.com with a minimal description and the affected page. Do not send passwords, full candidate datasets or exploit the issue further to demonstrate impact. Use a safe test account where possible.
Response to misuse
Reports should be assessed proportionately. Access restrictions may be necessary to contain an incident or protect others. Suspected misconduct and automated flags require contextual review; this policy does not make every alert proof of a violation. Contractual remedies and mandatory rights are governed by the applicable agreement and law.