diff --git a/policies/acceptable-use.md b/policies/acceptable-use.md
new file mode 100644
index 0000000..fc4acaf
--- /dev/null
+++ b/policies/acceptable-use.md
@@ -0,0 +1,28 @@
+# Acceptable Use Policy
+
+**Version:** 3.0  |  **Owner:** HR / Legal  |  **Classification:** Internal
+
+## Scope
+
+Applies to all employees, contractors, and third parties with access to Nexus systems.
+
+## Permitted use
+
+Company systems are for legitimate business purposes.
+Limited personal use is acceptable provided it does not:
+- Violate any law or regulation
+- Compromise system security
+- Consume excessive resources
+
+## Prohibited activities
+
+- Accessing systems without authorisation
+- Installing unlicensed software
+- Sharing credentials
+- Circumventing security controls (including MFA bypass)
+- Storing or transmitting offensive, illegal, or discriminatory content
+
+## Monitoring
+
+Nexus reserves the right to monitor all activity on company systems.
+Users should have no expectation of privacy on company devices or networks.