More of an anecdote, but our software allows users to upload files, documents, images and such. This in turn means, technically speaking, our platform could be

More of an anecdote, but our software allows users to upload files, documents, images and such. This in turn means, technically speaking, our platform could be used to distribute malware or other illegal content. I've asked: Well what happens if that occurs and we as a company becomes aware? Overall, we're advised to take about these steps there. First off, report it. Second, remove all access for the customer, terminate the accounts, lock them out asap. Third, prevent access to the content without touching it. For example, if it sits on a file system and a web server could serve it, blacklist URLs on a loadbalancer. Fourth, if necessary, begin archiving and securing evidence. But if possible in any way, disable content deletion mechanisms and wait for legal advice, or the law enforcement to tell you how to gather the data. But overall, you're not immediately guilty for someone abusing your service, and no one is instantly guilty for detecting someone is abusing your service.