Network & Acceptable Use Policy

This Network & Acceptable Use Policy (the “Policy”) governs access to and use of Ridge Net and all other information systems, networks, devices, accounts, and technology resources owned, managed, or provided by Blue Ridge Transportation LLC (the “Company”), including systems accessed through Ridge Net.

Ridge Net is the internal team network of Blue Ridge Transportation LLC. It is provided for authorized business purposes to authorized team members and approved users. Use of Ridge Net or any Company system constitutes acceptance of this Policy and of the Company's information security requirements and other applicable company policies.

This Policy applies to all team members, contractors, temporary staff, and any other person granted access to Company systems, whether those systems are accessed on Company premises, from the road, or remotely.

Company systems and resources, including Ridge Net, are provided for authorized business purposes only. Limited, reasonable personal use of Company systems may be permitted where it does not interfere with business operations, violate Company policies, or consume significant resources.

Access credentials, including the Ridge Net password and any individual system passwords, are confidential Company assets. Credentials must never be shared with unauthorized persons, and each user is personally responsible for all activity conducted under their credentials.

Users must access only the systems, data, and resources they are authorized to use, and must not attempt to access, use, or probe any system, account, or data for which they do not have authorization.

The following uses of Company systems and resources are prohibited:

Unauthorized access to, or use of, any Company system, account, network, or data, or any system or network not owned by the Company except as permitted in the course of authorized business.

Sharing the Ridge Net password or any other Company credential with unauthorized persons, or disclosing internal company information to persons not authorized to receive it.

Activity that is unlawful, fraudulent, harassing, threatening, discriminatory, defamatory, or obscene, or that violates any Company policy or applicable law.

Attempting to bypass, disable, or test the security of any Company system, including password protection, authentication, monitoring, or logging mechanisms.

Installing, distributing, or running malicious software, or engaging in activity that degrades, disrupts, or endangers Company systems, networks, or data.

Storing highly sensitive personal records in Ridge Net or on Company systems outside their appropriate secure business systems, including Social Security numbers, banking information, payroll records, medical records, background-check documents, driver qualification records containing sensitive personal information, or individual system passwords and API credentials.

Using Company systems to operate a personal business, solicit, advertise, or distribute mass communications unrelated to Company business.

Company information is a valuable asset. Users must protect Company information from improper access, disclosure, alteration, destruction, or use, and must handle it in accordance with the Company's confidentiality and information security requirements.

Users must not store, transmit, or process Company information through unapproved systems, personal accounts, personal devices, or unapproved cloud services when Company-provided systems are available.

Suspicious activity, suspected security incidents, lost or stolen devices, and any suspected unauthorized access to Company systems must be reported promptly to Blue Ridge Transportation Operations or management.

Users should have no expectation of privacy when using Company-owned or Company-managed systems, accounts, devices, networks, or other technology resources, except where privacy is required by applicable law.

The Company may monitor, access, review, retain, or audit activity on Company systems and resources for legitimate business, security, safety, compliance, and administrative purposes, subject to applicable law.

Monitoring and logging activity does not create any right of continued access, and the Company may restrict, suspend, or revoke access at any time for legitimate business reasons.

Company devices and systems must be maintained in accordance with Company security requirements, including operating-system updates, screen locks, and approved software only.

Users must not connect unauthorized hardware or software to Company networks, alter Company device configurations to bypass security controls, or use Company systems to access unlawful or unauthorized content.

Approved business applications and resources are listed within Ridge Net. Questions about whether a system, device, or service is approved should be directed to Company management or Operations before use.

Any suspected violation of this Policy, security concern, or unusual system behavior should be reported promptly to Blue Ridge Transportation Operations. Good-faith reporting of a security concern will not be treated as a violation of this Policy.

When necessary to protect Company systems and information, the Company may suspend accounts, reset credentials, disconnect devices, or take other protective measures while a concern is investigated.

Violations of this Policy may result in revocation or restriction of system access, disciplinary action up to and including termination of employment or engagement, and, where applicable, referral to law enforcement or pursuit of other legal remedies.

The Company reserves the right to amend, supplement, or discontinue this Policy, and any system or resource provided under it, in accordance with applicable law. Continued use of Ridge Net or Company systems after an amendment constitutes acceptance of the amended Policy.

This Policy is maintained by the management of Blue Ridge Transportation LLC. Questions about this Policy, its application, or the appropriate handling of company information should be directed to Blue Ridge Transportation Operations.

Ridge Net is intended for internal business purposes and does not constitute an employment contract. Policies, programs, benefits, and procedures may be amended or discontinued in accordance with applicable law.