Acceptable use policy

This AUP applies to every customer of VCloud (Pvt.) Ltd. and to their end-users. It is incorporated into our MSAs by reference and is updated alongside them.

1. Lawful use

You and your end-users must comply with Pakistani law and with the law of any other jurisdiction where the traffic terminates. That includes — non-exhaustively — anti-spam, anti-fraud, child protection, intellectual-property and lawful-intercept rules.

2. Network abuse

You must not originate or knowingly relay traffic that is designed to harm the integrity, availability or confidentiality of other networks. Examples we will action on:

• Volumetric, reflective or amplification DDoS attacks.
• Port-scan campaigns and credential-stuffing botnets.
• Outbound spam at volumes that trigger upstream blocklisting.
• BGP hijacks, prefix squatting, or knowingly announcing space you do not control.
• Operating open recursive resolvers, open NTP / SSDP / Memcached without rate-limiting.

3. Routing hygiene

Customers running BGP with us must register their AS-SET and ROAs accurately. Repeated propagation of RPKI-invalid or IRR-mismatched prefixes will trigger session suspension after notice.

4. Content compliance

You may not host, knowingly transit, or serve content that is unlawful in Pakistan, including content directed for blocking by PTA. We will action directed take-down at the network edge for the customers and traffic in scope; see our compliance page for the procedural detail.

5. Reporting abuse

Reports go to abuse@vcloud.com.pk with full headers / log lines / timestamps. We acknowledge inside one business day and triage to the responsible customer where applicable.

6. Enforcement

For a first incident we contact you, give you a window to remediate, and escalate from there. For severe or repeated incidents we may suspend or terminate the affected service. Where there is an active attack causing harm to third parties we will block first and notify second.

7. Changes

We update this AUP from time to time. Material changes will be communicated with at least 30 days' notice through the customer portal and to the technical contact on file.