An acceptable use policy (or AUP) is a security policy that outlines what actions can be done on data and computing resources such as storing, accessing, deleting, dissemination, and the sharing of data. The Acceptable Use Policy should cover the company computers, phones, printers, and even the network. The AUP defines what actions employees can or can’t do on company equipment, and is usually signed by all employees.