8 Total
0 High severity
7 Medium severity
1 Low severity
Summary

GitHub's Acceptable Use Policies define the conduct rules all GitHub users must follow when using any GitHub product or service, covering prohibited content types, restricted activities, and platform behavior standards. The agreement prohibits users from posting content that violates laws, infringes intellectual property, transmits malicious code, conducts phishing, generates spam, or facilitates unauthorized cryptomining, and reserves to GitHub the right to remove content or suspend accounts for violations. The policy operates as a parent document to a suite of subsidiary acceptable use sub-policies, each addressing a specific prohibited conduct category in detail.

Technical / Legal Breakdown

The GitHub Acceptable Use Policies (AUP) govern permissible conduct on GitHub's platforms and services, operating as a binding supplement to GitHub's Terms of Service and Corporate Terms of Service. The agreement states that users must not post content or engage in activity that violates applicable laws, infringes intellectual property rights, transmits malware, conducts phishing, generates unsolicited bulk communications, or uses GitHub infrastructure for cryptomining without permission; the terms also prohibit content that is sexually obscene, unlawfully discriminatory, or constitutes threats of violence. The policy asserts broad content moderation authority, including the right to remove content, restrict access, and suspend accounts for violations, with GitHub retaining sole discretion over enforcement determinations, which is a standard but operationally significant reservation of rights for developer-dependent users. The document engages frameworks including the Digital Millennium Copyright Act, the Computer Fraud and Abuse Act, and, where applicable to EU-based users, the Digital Services Act and GDPR; the FTC Act is also potentially relevant to deceptive or unfair practices claims. Compliance teams should note that the AUP's broad prohibition categories are implemented through sub-policies linked within the document, meaning full compliance assessment requires review of each subsidiary policy document alongside the master AUP.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial
Medium — 7 provisions
Low — 1 provision

Monitoring

GitHub has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle Age Restriction and Minor Protection and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
CFAA
United States Federal
View official text ↗
DMCA
United States Federal
View official text ↗
DSA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 12, 2026 05:30 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000790
Version ID CA-V-002478
SHA-256 53c31545af933ab935d8357cc53705f684beb00cddaa10f42ca28c1a074af2db
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans