Forge Responsible Use Policy
Effective Date: July 2026
This Responsible Use Policy ("Policy") supplements the Forge Terms of Service and applies to your use of Forge ("Forge" or the "Service"), operated by Blecher LLC ("Blecher LLC," "we," "us," or "our"). Forge screens Bills of Materials against export-control, sanctions, and defense-procurement regimes, and the nature of that work carries specific responsibilities. By using the Service, you agree to the practices set out below. Capitalized terms not defined here have the meanings given in the Terms of Service.
1. Purpose and Spirit
Forge is a powerful screening tool used in a sensitive regulatory domain. Used well, it accelerates and strengthens a compliance program; used carelessly, it can create a false sense of assurance or, worse, place controlled information in an inappropriate environment. This Policy sets the ground rules for using Forge responsibly. It is not exhaustive, and it does not displace any obligation imposed on you by law, regulation, or contract.
2. Do Not Upload Classified or Controlled Data to the Cloud-Hosted Service Without Authorization
You must not upload classified information, controlled unclassified information (CUI) that your authorization does not permit to be processed in a commercial cloud environment, or technical data whose export or transfer to the cloud-hosted Service or to any foundation-model provider would itself constitute a controlled export, re-export, or unauthorized disclosure, unless you have confirmed that you hold the appropriate authorization to do so.
In particular, be aware that:
- Uploading ITAR-controlled technical data or EAR-controlled technology to a cloud environment, or exposing it to a foundation-model provider, may constitute a controlled export or a deemed export to foreign persons. You are responsible for confirming that any such handling is authorized under an applicable license, exemption, or exception before you upload.
- A BOM may itself reveal controlled technical data (for example, through part numbers, specifications, or system context) even where individual components are commercial. You must assess the sensitivity of the BOM as a whole, not only its components.
- The default (non-BYOK) inference mode routes certain data to a third-party foundation-model provider. If that routing is inconsistent with your authorization, do not use the default mode for that data.
3. On-Premise Deployment for Classified and Restricted Environments
For classified environments and other settings where cloud processing is not appropriate, an on-premise deployment of Forge is available. If your work requires that controlled or classified data never leave your accredited environment, contact Blecher LLC to arrange an on-premise deployment rather than using the cloud-hosted Service. Do not attempt to force sensitive workloads through the cloud-hosted Service as a substitute for a properly accredited deployment.
4. Screening Results Are Not Formal Classifications
Forge's compliance determinations are screening results, not formal classifications or government determinations. A verdict from Forge — whether it flags a concern or reports a clear result — is the output of automated screening against the data and regimes available at the time. It does not constitute a commodity jurisdiction determination, an official ECCN or USML classification, an OFAC licensing determination, a counterfeit-authentication result, or any other formal or authoritative decision. Treat Forge output as an input to your compliance process, subject to review and validation by qualified personnel, and never represent it to a customer, counterparty, auditor, or government agency as a formal or government-sanctioned determination.
5. You Remain Responsible for All Decisions
You remain solely responsible for all export, re-export, transfer, procurement, and sourcing decisions, whether or not those decisions are informed by Forge output. Use of the Service does not shift responsibility for compliance from you to Blecher LLC and does not relieve you of any independent duty of due diligence. Where a matter requires formal classification, licensing, physical inspection, destructive testing, or legal determination, obtain that analysis from qualified professionals; Forge does not provide it.
6. Handle Custom Regimes and Evidence with Care
If you configure custom or imported regulatory regimes, you are responsible for the accuracy, currency, and appropriateness of those regimes and for validating the results they produce. Treat evidence chains and certificates as sensitive business records, and control access to them consistent with your own information-security obligations.
7. Prohibited Uses
You must not use the Service to facilitate any transaction, export, or transfer that is prohibited by applicable export-control or sanctions law; to launder the provenance of controlled or counterfeit components; to evade screening obligations; or in any manner that violates the Acceptable Use Policy in the Terms of Service.
8. Reporting and Enforcement
If you believe the Service has produced a materially incorrect result, or if you discover a security or handling concern, notify Blecher LLC promptly. We may suspend or terminate access for violations of this Policy consistent with the Terms of Service.
9. Governing Law
This Policy is governed by and construed in accordance with the laws of the Dubai International Financial Centre (DIFC), notwithstanding any conflict of law provisions, consistent with the Forge Terms of Service.
By using Forge, you acknowledge that you have read and agree to this Responsible Use Policy.