Your workflows run on shared infrastructure and send requests to other people's services. This policy is part of the Terms of Service. Last updated 21 October 2026.
Every outbound request carries your workspace's reference, so the receiving service can tell us about it.
Don't use workflows to flood, overload, or deny service to any host, or to keep hammering one that is failing.
Don't scan hosts or ports, guess credentials, or test for vulnerabilities on systems you don't own or have written permission to test.
Call only the APIs and accounts you are entitled to use, within their terms and rate limits.
Don't send unsolicited bulk messages, or messages that impersonate others or try to trick people into giving up credentials or money.
Use shiftlabs for automation, not as raw compute or a way around its limits.
No cryptocurrency mining or other compute resale. Deploys that contain mining code are refused.
Don't create extra workspaces or accounts to get around plan limits, hide code from the deploy scan, or spread requests to get around the per-host rate limit.
Don't try to reach other customers' data, the platform's internals or its own hosts from a workflow, or to disrupt the service for anyone else.
Tell us at legal@shiftlabs.org before telling anyone else, and don't access or change data that isn't yours while you investigate.
What you store and send through shiftlabs.
Nothing illegal, and nothing that infringes someone else's intellectual property or privacy.
Don't host or distribute malware, or use workflows to control compromised machines.
Handle personal information in your workflows lawfully, with the notices and permissions it needs.
How we find abuse and what we do about it.
Deploys are scanned, the gateway refuses requests to IP addresses, unusual ports and our own hosts, and automated checks every hour look for floods, scanning, failing targets and heavy compute.
Depending on how serious it is: warn you, lower your limits, suspend the workspace (which stops its runs), or end the account. For serious harm we act first and tell you after.
Email abuse@shiftlabs.org with the X-Shiftlabs-Tenant header value from the requests you received, and what happened.
We cooperate with law enforcement where the law requires it.