Platform Guidelines

Effective Date: September 1, 2026

(1) Unless otherwise specified in an Order Form, (i) each User will be assigned a unique user identification name and password (“User ID”) for access to and use of the Subscription Services; and (ii) User IDs are intended for use by the designated Users only and cannot be shared (for the avoidance of doubt, Third Party Product automated systems or AI agents authorized by Customer to access the Subscription Services on Customer's behalf using an MCP server provided by Productboard do not constitute a sharing of User IDs in violation of this Section). Customer agrees to provide accurate, current and complete account and User information. Customer is responsible for ensuring the security and confidentiality of all User IDs assigned to Customer and its Users. As a part of the Subscription Services, Users are given the ability to add other Users to their accounts and/or projects and, as a creator or administrator of such account and/or project, enable other Users or End-Users to access or modify Customer Property included in such account or project (including by embedding Customer Property in an iframe or creating a shareable link to such Customer Property). Customer is solely responsible for managing which Users and End-Users have access to such Customer Property and for any actions taken by such Users and End-Users with respect to such account and/or project and Customer Property.

(2) Except for uses that are expressly permitted (for example, in the Documentation or in an Order Form), Customer will not, and will ensure that Users and End-Users do not: (i) sell, resell, rent, lease, or otherwise distribute any portion of the Subscription Services; (ii) use the Subscription Services other than in accordance with the Documentation or in a manner that interferes with, unduly burdens, or disrupts the integrity, performance, or availability of the Subscription Services (for example, by conducting load tests or penetration tests without Productboard’s prior written consent); (iii) attempt to gain unauthorized access to the Subscription Services or to Productboard’s or its third party suppliers’ related systems or networks; (iv) access any portion of the Subscription Services for the purpose of building a similar or competitive product or service, or monitor the Subscription Services for any benchmarking or competitive purpose; (v) introduce, disseminate, or otherwise enable any viruses, Trojan horses, spyware, worms, malware, spam, or malicious code using the Subscription Services; (vi) copy, modify, translate, or create a derivative work of any Productboard Property; (vii) reverse engineer, disassemble, or decompile any software included in the Productboard Property, except as required under applicable law; (viii) except for contact information consisting of first name, last name, IP address and email address for which Customer has obtained necessary rights of access and use from the individual, Customer agrees not to submit other Personal Data or any sensitive personal information (including government issued identification numbers, financial account information, payment card information, and personal health information) to the Subscription Services; (ix) alter, remove or violate any copyright or other intellectual property notice appearing in connection with the Subscription Services; or (x) provide, process or distribute false, inaccurate, misleading, defamatory, obscene, discriminatory, hateful, libelous or illegal information or content. Customer shall comply with applicable laws related to Customer’s business, operations and customer offerings, including, without limitation, that Customer’s use of the Subscription Services in connection with Customer’s business, operations and customer offerings, complies with all applicable laws.

(3) Customer shall use the Authorized APIs in accordance with the Documentation, and will promptly correct any usage of Authorized APIs that does not comply with the Documentation. Authentication Keys must be restricted to use by authorized personnel of Customer, or Third Party Product automated systems or AI agents operating under the direction and control of Customer, who or which have a need to use such keys for purposes of integrating the Subscription Services with other web applications or systems, including via any MCP server made available by Productboard. Customer is solely responsible for (a) maintaining the security of all Authentication Keys; (b) ensuring that any AI agent or automated system to which Customer provides an Authentication Key or is otherwise connected to a Productboard MCP server is appropriately configured and controlled; and (c) all activities that occur using any Authentication Key issued to or MCP server made available to Customer, whether carried out by personnel or by any Third Party Product automated system or AI agent, and must promptly notify Productboard of any unauthorized use. The Authentication Keys are the property of Productboard and may be revoked by Productboard in connection with any permitted suspension of Customer’s right to use an Authorized API.

(4) A high-speed Internet connection is required for proper transmission of the Subscription Services. Customer is responsible for procuring and maintaining the network connections that connect Customer’s network to the Subscription Services, including, but not limited to, “browser” software that supports protocols used by Productboard, including Secure Socket Layer (SSL) protocol or other protocols accepted by Productboard, and to follow procedures for accessing services that support such protocols. Productboard is not responsible for notifying Customer or its Users of any upgrades, fixes or enhancements to any such software or for any compromise of data, including Customer Property, transmitted across computer networks or telecommunications facilities (including but not limited to the Internet) which are not owned, operated or controlled by Productboard. Productboard assumes no responsibility for the reliability or performance of any connections as described in this section.

(5) Productboard will process and investigate proper notices of alleged copyright or other intellectual property infringement related to material submitted through Customer’s account, and will respond appropriately, following the guidelines of the Online Copyright Infringement Liability Limitation Act and other applicable intellectual property laws.

(6) Customer acknowledges that as between Customer and Productboard, Customer has exclusive control and responsibility for determining the particular Customer Property that Customer, and Customer’s Users and End-Users submit to the Subscription Services, and for obtaining all necessary consents and permissions for all Customer Property submitted by Customer, Users and End-Users to Productboard. Additionally, Customer acknowledges that as between Customer and Productboard, Customer has exclusive control and responsibility for determining what data Customer, Users and End-Users submit to the Subscription Services; for obtaining all necessary consents and permissions for all Personal Data submitted by Customer, Users and End-Users to Productboard; and for all Processing activities of such Personal Data conducted by Productboard in accordance with Customer’s instructions.

(7) Productboard reserves the right to monitor the use of the Subscription Services for security and operational purposes and make modifications to the features and functionality of the Subscription Services during the Subscription Term. Productboard may immediately suspend or throttle access to the Subscription Services if (i) Productboard reasonably believes that a User or Customer is in breach of this Agreement; (ii) a User or Customer engages in excessive utilization of the Subscription Services which affects, or could reasonably likely (in Productboard’s opinion) affect, system availability or performance, or (iii) if Productboard in good faith suspects that any third party has gained unauthorized access to the Subscription Services using a credential issued by Productboard to Customer or its Users. In addition, Productboard may temporarily suspend access to the Subscription Services during planned downtime for upgrades and maintenance (of which Productboard will use commercially reasonable efforts to provide Users notice in accordance with paragraph 9 below). Productboard shall not be liable to Customer, its Users, End-Users or any other third party for any such modification, suspension or discontinuation of Customer’s rights to access and use the Subscription Services.

(8) Productboard may use data concerning Customer’s, its Users’ or End Users’ use of the Subscription Services in an aggregated and anonymous manner (“Usage Information”), including but not limited to compiling statistical and performance information related to the operation of the Subscription Services. Productboard shall have the right to use Usage Information to improve the Subscription Services and to develop additional offerings. The foregoing shall not limit, in any way, Productboard’s confidentiality obligations as set forth in Section 6 of the Agreement. Customer agrees that Productboard may make such information publicly available, provided that (i) such information does not incorporate any Customer Property and (ii) such use does not identify Customer or any Users or End Users either directly or indirectly. Productboard retains all intellectual property rights in Usage Information.

(9) Except for legal notices of termination, material breach, force majeure or indemnification claims, Productboard may provide all business and product-related communications (e.g., release notes for product updates, privacy policy updates, critical security updates, and information on critical bugs and outages) to Customer by email, posting on the Subscription Services and/or other electronic means. Productboard may rely and act on all information and instructions provided by Customer’s Users.

(10) Customer is solely responsible for obtaining and maintaining all rights, licenses, and credentials necessary to use Third Party Products. In addition, Customer is solely responsible for installing, operating, updating, or otherwise maintaining the operation of such Third Party Products. To the maximum extent permitted by applicable law, Productboard does not provide any warranties, guaranties or indemnification regarding any Third Party Products, whether or not such products or services are designated by Productboard as “certified,” “validated” or otherwise. Productboard does not have any responsibility or liability for any exchange of data or other interaction occurring directly between Customer or its Users and any provider of a Third Party Product. If the availability of all or a portion of the Subscription Services depends on the corresponding availability of Third Party Products, Productboard will not be liable to Customer if changes in Third Party Products cause the unavailability of all or a portion of the Subscription Services. However, Productboard will use commercially reasonable efforts to update the Subscription Services to ensure continued interoperation with Third Party Products. Further, Customer acknowledges and agrees that if it gives a Third Party Product access to its Productboard account, Customer shall serve as the controller of such information and the Third Party Service Provider serves as the Processor for purposes of those data laws and regulations that apply to Customer. In no case are such Third Party Service Providers Productboard’s Subprocessors.

(11) Productboard may add, modify or discontinue any feature, functionality or any other tool, within the Services, at Productboard's sole discretion and without further notice; however, if Productboard makes any material adverse change in the core functionality of the Service, then Productboard will notify Customer by posting an announcement on its website, via the Service or by sending Customer an email. Customer agrees that its purchases hereunder are neither contingent on the delivery of any future functionality or features nor dependent upon any oral or written public or private comments made by Productboard regarding the future functionality or features.

(12) MCP Server and AI Agent Access. Productboard may make available a Model Context Protocol (MCP) server or similar agentic integration interface as part of or alongside the Subscription Services, enabling Customer to connect Third Party Product AI agents, automated workflows, or other automated systems to Customer's Productboard account ("MCP Connections").

(a) Customer Responsibility. Customer is solely responsible for all actions taken via MCP Connections, including all actions taken by Third Party Product automated systems or AI agents. All such actions shall be treated as direct actions of Customer under this Agreement. Customer shall ensure that any automated systems or AI agents it connects via MCP are appropriately configured, operates within the scope of permitted use under this Agreement, and does not take actions that Customer would not itself be permitted to take.

(b) Scope of Permitted Access. MCP Connections must be used in accordance with the Documentation and any applicable Order Form. Third Party Product automated systems or AI agents must not use MCP Connections to access the Subscription Services in a manner that interferes with, unduly burdens, or disrupts the integrity, performance, or availability of the Subscription Services (including by making excessive automated requests). The restrictions set out in Section (2) of these Platform Guidelines apply equally to all access made via MCP Connections.

(c) Write Operations. If write access is permitted via an MCP Connection, Customer bears full responsibility for all actions and data modifications made by Third Party Product automated systems or AI agents via the MCP Connection.

(d) Suspension. Productboard's rights to suspend or throttle access under Section (7) of these Platform Guidelines apply equally to MCP Connections, including where a Third Party Product automated system or AI agent connected by Customer engages in excessive utilization of the Subscription Services.

(e) Data Protection. Customer's obligations under Section (6) of these Platform Guidelines with respect to Personal Data, and Customer's obligations under Section (10) with respect to Third Party Products, apply fully to MCP Connections.

Previous Versions

Platform Guidelines - Sept 2025

Platform Guidelines – Nov 2023

All terms capitalized are defined in the Master Subscription Agreement

(1) Unless otherwise specified in an Order Form, (i) each User will be assigned a unique user identification name and password (“User ID”) for access to and use of the Subscription Services; and (ii) User IDs are intended for use by the designated Users only and cannot be shared. Customer agrees to provide accurate, current and complete account and User information. Customer is responsible for ensuring the security and confidentiality of all User IDs assigned to Customer and its Users. As a part of the Subscription Service, Users are given the ability to add other Users to their accounts and/or projects and, as a creator or administrator of such account and/or project, enable other Users or End-Users to access or modify Customer Property included in such account or project (including by embedding Customer Property in an iframe or creating a shareable link to such Customer Property). Customer is solely responsible for managing which Users and End-Users have access to such Customer Property and for any actions taken by such Users and End-Users with respect to such account and/or project and Customer Property.

(2) Except for uses that are expressly permitted (for example, in the Documentation or in an Order Form), Customer will not, and will ensure that Users and End-Users do not: (i) sell, resell, rent, lease, or otherwise distribute any portion of the Subscription Service; (ii) use the Subscription Services other than in accordance with the Documentation or in a manner that interferes with, unduly burdens, or disrupts the integrity, performance, or availability of the Subscription Service (for example, by conducting load tests or penetration tests without Productboard’s prior written consent); (iii) attempt to gain unauthorized access to the Subscription Services or to Productboard’s or its third party suppliers’ related systems or networks; (iv) access any portion of the Subscription Services for the purpose of building a similar or competitive product or service, or monitor the Subscription Services for any benchmarking or competitive purpose; (v) introduce, disseminate, or otherwise enable any viruses, Trojan horses, spyware, worms, malware, spam, or malicious code using the Subscription Service; (vi) copy, modify, translate, or create a derivative work of any Productboard Property; (vii) reverse engineer, disassemble, or decompile any software included in the Productboard Property, except as required under applicable law; (viii) except for contact information consisting of first name, last name, IP address and email address for which Customer has obtained necessary rights of access and use from the individual, Customer agrees not to submit other Personal Data or any sensitive personal information (including government issued identification numbers, financial account information, payment card information, and personal health information) to the Subscription Services; or (ix) alter, remove or violate any copyright or other intellectual property notice appearing in connection with the Subscription Services.  Customer may not access the Subscription Services if it is a direct competitor of Productboard, except with Productboard’s prior written consent.

 (3) Customer shall use the Authorized APIs in accordance with the Documentation, and will promptly correct any usage of Authorized APIs that does not comply with the  Documentation. Authentication Keys must be restricted to use by authorized personnel of Customer who have a need to use it for purposes of integrating the Subscription Services with other web applications. Customer is solely responsible for maintaining the security of all Authentication Keys and for all activities that occur using any Authentication Key issued to Customer and must promptly notify Productboard of any unauthorized use. The Authentication Keys are the property of Productboard and may be revoked by Productboard in connection with any permitted suspension of Customer’s right to use an Authorized API.

(4) A high-speed Internet connection is required for proper transmission of the Subscription Services. Customer responsible for procuring and maintaining the network connections that connect Customer’s network to the Subscription Services, including, but not limited to, “browser” software that supports protocols used by Productboard, including Secure Socket Layer (SSL) protocol or other protocols accepted by Productboard, and to follow procedures for accessing services that support such protocols. Productboard is not responsible for notifying Customer or its Users of any upgrades, fixes or enhancements to any such software or for any compromise of data, including Customer Property, transmitted across computer networks or telecommunications facilities (including but not limited to the Internet) which are not owned, operated or controlled by Productboard. Productboard assumes no responsibility for the reliability or performance of any connections as described in this section.

(5) Productboard will process and investigate proper notices of alleged copyright or other intellectual property infringement related to material submitted through Customer’s account, and will respond appropriately, following the guidelines of the Online Copyright Infringement Liability Limitation Act and other applicable intellectual property laws.

(6) Customer acknowledges that as between Customer and Productboard, Customer has exclusive control and responsibility for determining what data Customer, Users and End-Users submit to the Subscription Services; for obtaining all necessary consents and permissions for all Personal Data submitted by Customer, Users and End-Users to Productboard; and for all Processing activities of such Personal Data conducted by Productboard in accordance with Customer’s instructions. 

(7) Productboard reserves the right to monitor the use of the Subscription Services for security and operational purposes and make modifications to the features and functionality of the Subscription Services during the Subscription Term. Productboard may immediately suspend or throttle access to the Subscriptions Services if (i) Productboard reasonably believes that a User or Customer is in breach of this Agreement; (ii) a User or Customer engages in excessive utilization of the Subscription Services which affects, or could reasonably likely (in Productboard’s opinion) affect, system availability or performance, or (iii) if Productboard in good faith suspects that any third party has gained unauthorized access to the Subscription Services using a credential issued by Productboard to Customer or its Users.  In addition, Productboard may temporarily suspend access to the Subscription Services during planned downtime for upgrades and maintenance (of which Productboard will use commercially reasonable efforts to provide Users notice in accordance with paragraph 9 below).  Productboard shall not be liable to Customer, its Users, End-Users or any other third party for any such modification, suspension or discontinuation of Customer’s rights to access and use the Subscription Services. 

(8)  Productboard may use data concerning Customer’s, its Users’ or End Users’ use of the Subscription Services in an aggregated and anonymous manner (“Usage Information”), including but not limited to compiling statistical and performance information related to the operation of the Subscription Services. Productboard shall have the right to use Usage Information to improve the Subscription Service and to develop additional offerings. The foregoing shall not limit, in any way, Productboard’s confidentiality obligations as set forth in Section 6 of the Agreement. Customer agrees that Productboard may make such information publicly available, provided that (i) such information does not incorporate any Customer Property and (ii) such use does not identify Customer or any Users or End Users either directly or indirectly. Productboard retains all intellectual property rights in Usage Information.

(9) Except for legal notices of termination, material breach, force majeure or indemnification claims, Productboard may provide all business and product-related communications (e.g., release notes for product updates, privacy policy updates, critical security updates, and information on critical bugs and outages) to Customer by email, posting on the Subscription Services and/or other electronic means. Productboard may rely and act on all information and instructions provided by Customer’s Users. 

(10) Customer is solely responsible for obtaining and maintaining all rights, licenses, and credentials necessary to use Third Party Products. In addition, Customer is solely responsible for installing, operating, updating, or otherwise maintaining the operation of such Third Party Products. To the maximum extent permitted by applicable law, Productboard does not provide any warranties, guaranties or indemnification regarding any Third Party Products, whether or not such products or services are designated by Productboard as “certified,” “validated” or otherwise. Productboard does not have any responsibility or liability for any exchange of data or other interaction occurring directly between Customer or its Users and any provider of a Third Party Product. If the availability of all or a portion of the Subscription Services depends on the corresponding availability of Third Party Products, Productboard will not be liable to Customer if changes in Third Party Products cause the unavailability of all or a portion of the Subscription Services. However, Productboard will use commercially reasonable efforts to update the Subscription Services to ensure continued interoperation with Third Party Products.  Further, Customer acknowledges and agrees that if it gives a Third Party Product access to its Productboard account, Customer shall serve as the controller of such information and the Third Party Service Provider serves as the processor for purposes of those data laws and regulations that apply to Customer.  In no case are such Third Party Service Providers Productboard’s Subprocessors.