Draft for HR, Nigerian legal and DPCO review. Version DRAFT-0.1-2026-09-29. Issue through the approved employee-policy process before enforcement.

Aboveboard HOME Acceptable Use Rules

Authorised work only

Use HOME only for approved Aboveboard work and only within the permissions assigned to you. Do not browse, export or alter a record merely because the interface allows it.

Protect access

Use your own account and a unique password; never share credentials.
Complete MFA when enabled and protect recovery methods.
Lock unattended devices and sign out of shared devices.
Report suspected compromise, unusual access or lost devices immediately.

Handle data carefully

Enter only necessary, accurate and authorised information.
Do not copy payroll, identity, health, disciplinary or applicant data into personal email, messaging, cloud drives or unapproved AI tools.
Use approved exports only for a defined business need and protect or delete them when finished.
Do not use staff data for unrelated marketing, personal decisions or discrimination.

Respect role boundaries

Managers may access only the staff and business-unit data needed for their duties. HR and Finance permissions do not authorise curiosity browsing. Privileged administrators must use their access only for approved support, security and oversight.

Audit and monitoring

HOME records sign-ins and changes to protect staff, investigate incidents and maintain accountability. Monitoring must follow the approved Privacy Notice and must not be used for unrelated surveillance.

Prohibited activity

Do not evade controls, probe security without authorisation, falsify records, delete evidence, install unapproved integrations, create shared accounts, or use HOME to harass, retaliate or unlawfully discriminate.

Report and cooperate

Immediately report data sent to the wrong person, suspicious messages, malware, unauthorised changes or other incidents. Preserve evidence and follow incident-response instructions. Good-faith reporting must not be suppressed.

Consequences

Access may be restricted while a security, privacy or employment concern is investigated. Any disciplinary action must follow applicable law and approved HR procedure.