How we handle reports

COMMANDAGI INC. ("we") runs commandagi.com, the sites hosted on the CommandAGI platform, and its brands (Section 1A of our Terms of Service). This page says how we handle a report about content or an account: who reads it, how fast, what happens next, and where it goes when we are not fast enough. The same policy applies on every site we run. Where a step below is not in place yet, this page says so.

1. Where to report

• On any site we host: the Report link, or the report form at /.well-known/report on that site's own address. It works without an account.
• In the CommandAGI app: Report, on a listing, a thread, a shared file or folder, an invitation, or a file of another account's home (the ⋯ menu).
• On the web, for anything: the report form.
• By email: abuse@commandagi.com. Each of our brands also has abuse@ at its own domain. Mail to any of them opens a case.
• Copyright: a notice under the U.S. Digital Millennium Copyright Act, as our copyright policy describes, or through the copyright form.
• If someone is in danger now, call your local emergency number first.

Anyone may report, with or without an account. A report says what, where (a link) and why. We confirm that we received it, with a case number, when you give us an address to answer.

2. How fast

Every report gets a severity when it arrives. The clock starts then.

"First response" means a person or our trust and safety agent has read the report and acted or asked for what is missing. "Resolved" means a decision is made and the people involved are told. A business day is Monday to Friday, counted in UTC.

A report starts at a severity from the reason you choose, and a report by email starts at P1. Triage then sets its severity, and the clock keeps its start.

3. Who handles it, and escalation

1. Responders (tier 1). Our trust and safety agent triages every report as it arrives: its severity, its kind, whether it repeats an open report, and what evidence to keep. It decides a case only when the case is P2 or P3, the facts are clear, and the decision suspends no account. A person on the responder rota decides every other case: P0 and P1, a case the agent is unsure of, and any decision that would suspend an account.
2. The trust and safety lead (tier 2). A case moves here by itself when it passes its "resolved by" time, when a responder asks, and always for P0. Our founder is the lead until another person is named here.
3. Outside counsel (tier 3). A case still open at twice its "resolved by" time goes to the company's outside counsel, with the full case record, and the lead is told again. Not in place yet: outside counsel is not named. Until it is, such a case stays with the lead, and its record says that counsel was not named.

Escalation is automatic: every case carries its clock, and the system moves it. Nobody has to remember.

4. Outside the company

Some reports must leave the company, whatever our own process says:

• Child sexual abuse material: we remove it at once and keep the evidence, with access restricted, for one year after we report it, as U.S. law requires (18 U.S.C. § 2258A). A person on our team reports it to the National Center for Missing & Exploited Children (the CyberTipline) the same day. We do not tell the account holder first. Not in place yet: our electronic reporting account with NCMEC is still being registered. Until it is, the report is prepared in our system, with its evidence, for a person to file.
• An imminent threat to life: we tell the police where the person is, when we can tell where that is.
• Intimate images shared without consent: we remove the image, and the copies we know of, within 48 hours of a valid request (the U.S. TAKE IT DOWN Act). If we fail, you can complain to the U.S. Federal Trade Commission.
• Copyright: our copyright policy names our designated agent under 17 U.S.C. § 512(c). A counter-notice puts the material back after 10 business days unless the sender of the notice tells us it filed suit. A notice we act on counts against the account (repeat infringers lose their accounts); one a counter-notice answers does not. Not in place yet: the agent's registration in the U.S. Copyright Office's directory.
• Orders from courts and authorities: we act on a valid order within its deadline and keep a record of it.

5. What the people involved see

• The reporter hears that we received the report, and what we decided: in the app, or at the address they gave.
• The person whose content or account we act on gets a statement of reasons: what we did (removed, limited, suspended), which rule it broke, what the report said (without the reporter's identity), whether a person or our agent decided, and how to appeal. We skip the statement only where the law forbids it (for example, child sexual abuse material) or where it would put someone in danger, and the case's record says why.
• Appeal. The person acted on, or the reporter, can appeal a decision once, within six months, in the app or by writing to abuse@ with the case number (a suspended account appeals by email). A different person from the one who decided reviews it within 7 days; an appeal past 7 days goes to the lead. A person in the EU may also take the dispute to an out-of-court dispute settlement body certified under the EU Digital Services Act (the European Commission lists them); we take part in good faith.

6. What we can do

• remove an item: delist a listing, revoke a share link, make a file or folder private;
• suspend an account, for serious or repeated breaches;
• keep a record for the time the law requires.

A published site is its owner's folder: for a site, we ask its owner to take the content down, and a person on our team archives the site when that is needed. We act on what was shared through our servers. We cannot reach what stays on a person's own computer, and we do not look at it.

7. Records and openness

Every report, decision, escalation and appeal is logged with its time and who acted, a person or our agent. The log is append-only: a line is never changed or deleted, and each line carries the hash of the one before it. Once a year we will publish the counts: reports by severity and kind, decisions, time to resolve, appeals and their outcomes. The first count will cover 2026.

8. For our brands and for the sites we host

A brand of CommandAGI and a site hosted on CommandAGI may link to this page as its reports policy, and to its own /.well-known/report as its report form. An organisation that keeps its own report queue can send its reports to ours with its organisation key, and read each case's state back by its case number.

9. Contact

abuse@commandagi.com, or abuse@ at the brand's domain.