Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The agreement prohibits posting information that is unlawful or that facilitates illegal activities, applying this restriction broadly across all content types and user contexts on the platform.
This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a broad prohibition on unlawful content that supplements the specific categorical prohibitions elsewhere in the AUP, and its broad framing means that the scope of prohibited content depends on applicable law in the user's jurisdiction, which may vary significantly across geographies.
Interpretive note: The scope of 'unlawful' content is entirely dependent on the applicable law of the relevant jurisdiction, which varies significantly across geographies and creates interpretive uncertainty that cannot be resolved from the document text alone.
Under this clause, content that is unlawful under any applicable jurisdiction or that facilitates illegal activities is prohibited on GitHub. The breadth of this prohibition means that compliance depends partly on the laws of the jurisdiction in which the user operates, which may differ across countries.
How other platforms handle this
Customer may not indicate that a product or service developed with the Software is sponsored or endorsed by NVIDIA unless expressly authorized in writing by NVIDIA.
Send messages in violation of the USA CAN-SPAM Act or any other applicable anti-spam law.
You may not...engage in any other conduct that restricts any person from using our Services, or that we reasonably believe exposes us...to any liability, damages, or harm, including reputational harm.
Monitoring
GitHub has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"You may not post any information that is unlawful or that facilitates illegal activities.Excerpt from GitHub's Acceptable Use Policies
1) REGULATORY LANDSCAPE: The scope of this provision is determined by applicable law in each jurisdiction, potentially engaging a wide range of regulatory frameworks depending on the content category involved. In the US, relevant frameworks may include federal criminal statutes, state laws, export controls (EAR/ITAR), and sanctions regulations administered by OFAC. In the EU, relevant frameworks include the Digital Services Act, national criminal codes, and sector-specific regulations. 2) GOVERNANCE EXPOSURE: Medium. The open-ended nature of 'unlawful' content creates compliance uncertainty for globally distributed organizations, where content that is lawful in one jurisdiction may be restricted in another. Export-controlled technical data and encryption code hosted on GitHub warrant particular attention under US export control law. 3) JURISDICTION FLAGS: US export control laws (EAR and ITAR) are particularly relevant for repositories containing dual-use technology, encryption algorithms, or defense-related code. EU member state laws vary significantly regarding lawful versus unlawful content categories. Organizations operating in heavily regulated sectors (financial services, healthcare, defense) face heightened exposure. 4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise users with global operations should assess their repository content against applicable export control, sanctions, and jurisdiction-specific content regulations. Procurement teams should confirm that GitHub's terms align with their own legal and regulatory compliance obligations. 5) COMPLIANCE CONSIDERATIONS: Legal teams should assess whether any repositories contain export-controlled technical data, content subject to sanctions restrictions, or material that could constitute facilitation of illegal activity under applicable law. Documentation of content review procedures may support a defense in enforcement contexts.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes a broad prohibition on unlawful content that supplements the specific categorical prohibitions elsewhere in the AUP, and its broad framing means that the scope of prohibited content depends on applicable law in the user's jurisdiction, which may vary significantly across geographies.
Under this clause, content that is unlawful under any applicable jurisdiction or that facilitates illegal activities is prohibited on GitHub. The breadth of this prohibition means that compliance depends partly on the laws of the jurisdiction in which the user operates, which may differ across countries.
ConductAtlas has identified this type of provision across 287 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.