Acceptable Use Policy

Effective 18 October 2026

Turm gives you, and the agents you run, real computers on a shared network. This policy keeps them useful for everyone. It is part of the Terms of Service, and it applies to everything your VMs do, whether you typed the command or an agent did.

1. Not allowed

• Illegal activity and content. Anything unlawful in Germany or where you are, including child sexual abuse material, content inciting terrorism or violence, infringement of others' intellectual property, and breaches of sanctions or export controls.
• Attacks. Unauthorised access to systems, port or vulnerability scanning of networks you do not own or have permission to test, denial-of-service attacks, credential stuffing, and running botnets or command-and-control servers.
• Malware and phishing. Distributing malware, hosting phishing pages, and impersonating others to deceive people.
• Spam. Sending unsolicited bulk messages by any channel. Outbound mail ports (25, 465 and 587) are blocked for all VMs; use an email provider's API instead, and only for mail people asked for.
• Crypto-mining. Mining cryptocurrency, or running proof-of-work or proof-of-space workloads.
• Abusive automation. Scraping that ignores a site's terms or overloads it, mass account creation, and evading other services' rate limits or bans.
• Circumventing the service. Getting around plan limits, metering or billing; attacking or probing Turm itself, other customers' VMs or the host; creating accounts to evade a suspension; and reselling access without our written agreement.
• Harmful AI use. Using AI agents or models on Turm for practices prohibited by the EU AI Act, or to break the usage policies of the model provider you call.

2. Security research

You may test the security of your own VMs and software. To test Turm itself, follow the responsible disclosure process in the trust center and do not access other customers' data or degrade the service.

3. Fair use of shared resources

CPU, memory and network capacity are shared between VMs on a server. Plan allowances describe what you can expect. A VM that uses far more than its share for long periods can be slowed down so other customers are not affected. Traffic past the monthly allowance is slowed, not cut off.

4. Enforcement

Some protections are automatic: blocked mail ports, crypto-mining detection that throttles the CPU of the whole pool, and traffic shaping. For other breaches a person reviews what happened and may stop VMs, suspend the account or end the Terms. We act in proportion to the harm, and where it is reasonable we contact you first and give you a chance to fix the problem. We may preserve information and report illegal content to the authorities where the law requires it.

5. Reporting abuse

To report abuse coming from a Turm VM, or illegal content hosted on one, email hi@turm.dev with the address or VM name, the time, and what you observed. We review every report and reply to the reporter.