Acceptable Use Policy

DepthSignal is designed for legitimate use cases including algorithmic trading, dashboards and visualisation, research and analysis, analytics platforms, alerts and notifications, and education.

• Algorithmic trading: Using DepthSignal features as inputs to your trading algorithms, bots, or execution systems.
• Dashboards and visualization: Displaying DepthSignal data in internal or customer-facing dashboards, charts, and monitoring tools.
• Research and analysis: Using DepthSignal data for quantitative research, academic study, market microstructure analysis, or financial journalism.
• Analytics platforms: Integrating DepthSignal features into broader analytics, risk management, or portfolio management platforms.
• Alerts and notifications: Building alert systems that trigger on DepthSignal market-context thresholds (for example, cascade-risk levels, large-order-activity context, or pressure-regime changes).
• Education: Using DepthSignal data for teaching or demonstration purposes related to market microstructure concepts.

The following activities are strictly prohibited. You must not:

2.1 Market Manipulation

• Use DepthSignal data to engage in, facilitate, or plan market manipulation, spoofing, layering, wash trading, front-running, or any activity prohibited by applicable securities or commodities law, exchange rules, or regulatory guidance.

2.2 Unauthorized Redistribution

• Redistribute, resell, sublicense, or repackage DepthSignal API responses or derived datasets as a standalone competing data product or service. (Database rights under EU Directive 96/9/EC: unauthorised extraction or re-utilisation of substantial parts of a database is prohibited)
• Systematically cache API responses and provide them to third parties to circumvent subscription requirements.
• Present DepthSignal data as your own proprietary data, or otherwise imply that you created the underlying proprietary dataset or analytics yourself.

2.3 Service Abuse

• Conduct DDoS attacks, load testing, stress testing, or any activity intended to degrade or disrupt the DepthSignal API. (EU Directive 2013/40/EU on attacks against information systems, Articles 3-7)
• Scrape or crawl the API beyond your subscribed rate limits, including by using multiple accounts or API keys to circumvent rate limits for the same person or entity.
• Exploit security vulnerabilities, bugs, or misconfigurations to gain unauthorized access or elevated privileges.

2.4 API Key Misuse

• Share your API key with unauthorized third parties.
• Expose your API key in client-side code, public repositories, or unsecured environments.
• Sell, transfer, or sublicense your API key to another person or entity.

2.5 Illegal Activity

• Use the DepthSignal API for any purpose that is illegal in your jurisdiction or the jurisdiction of the Republic of Estonia.
• Use the service to facilitate money laundering, terrorist financing, sanctions evasion, or other financial crimes.

Violations of this AUP are handled through a graduated enforcement process. The specific response depends on the severity and nature of the violation:

We reserve the right to skip directly to any enforcement level depending on the severity of the violation. For severe violations such as DDoS, exploitation, or illegal activity, we may take immediate action without prior warning.

We value the security community and encourage responsible disclosure of vulnerabilities. If you discover a security issue in the DepthSignal API or infrastructure:

• Report vulnerabilities to security@depthsignal.io with a detailed description, reproduction steps, and any proof-of-concept code.
• Do not exploit a vulnerability beyond the minimum necessary to demonstrate it, and do not access, modify, or delete data belonging to other users.
• Coordinated disclosure timing follows the active disclosure workflow after receipt and validation.

We intend to treat good-faith security research that stays within these guidelines as responsible disclosure rather than abusive use under this policy, while reserving the right to take proportionate action to protect users, systems, and legal obligations.