Service User Agreement

BYTE25 MASTER CLOUD SERVICES AGREEMENT (Standard Terms and Conditions) THIS BYTE25 MASTER CLOUD SERVICES AGREEMENT INCLUDES THE TERMS AND CONDITIONS SET FORTH BELOW, (THIS “AGREEMENT”), WHICH IS A BINDING LEGAL AGREEMENT ENTERED INTO BY AND BETWEEN BYTE25 (AS DEFINED BELOW), ON BEHALF OF BYTE25 OR ITS AFFILIATES, AND THE ENTITY YOU REPRESENT IN AGREEING TO THIS AGREEMENT (“CUSTOMER”). THIS AGREEMENT GOVERNS CUSTOMER’S USE OF AND ACCESS TO THE BYTE25 CLOUD SERVICES, HARDWARE AND SOFTWARE (COLLECTIVELY, THE “CLOUD SERVICES”), WHETHER SUCH SUBSCRIPTION IS PURCHASED DIRECTLY FROM BYTE25 OR FROM AN AUTHORISED BYTE25 RESELLER (“RESELLER”). BYTE25 AND CUSTOMER MAY ALSO BE REFERRED TO INDIVIDUALLY AS A “PARTY” OR COLLECTIVELY, AS THE “PARTIES” THROUGHOUT THIS AGREEMENT. BY CLICKING “ACCEPT” OR BY USING THE CLOUD SERVICES, YOU REPRESENT THAT YOU HAVE SIGNATURE AUTHORITY TO BIND CUSTOMER AND HEREBY AGREE TO BE BOUND BY, THIS AGREEMENT.

1. DEFINITIONS “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control,” for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity. “Agreement” means this Master Cloud Services Agreement. “Assets” means the IP addresses, domain names, web applications and other assets to which Customer directs the Cloud Services. “Authorised Representative” means a Receiving Party’s or a Receiving Party’s Affiliate’s employees, professional advisors (e.g., lawyers and accountants), consultants, agents, and/or contractors who have signed confidentiality agreements with the Receiving Party, or are similarly bound, containing protections not materially less protective of the Confidential Information than those protections afforded herein. “Beta Services” means BYTE25 services or functionality that may be made available to Customer to try at its option at no additional charge which is clearly designated as beta, pilot, limited release, developer preview, non-production, evaluation, or by a similar description. “Cloud Services” means the products and services, including any data, that are ordered by Customer under an Order Form and made available online by BYTE25, including any offline components. Cloud Services shall not include any Beta Services “Customer” means the customer named above and its Affiliates that have signed Order Forms. “Customer Data” means electronic data and information regarding Customer’s Assets that BYTE25 obtains solely as a result of its provision, and the Customer’s use, of the Cloud Services. Reports shall be deemed to be Customer Data. “Documentation” means the usage guides and policies made available by BYTE25 to Customer, as updated from time to time. “Hardware” means the servers that are included with certain subscriptions to Cloud Services. “No Charge Services” means Cloud Services provides to Customer at no cost. In no event shall support or ancillary services that BYTE25 provides as part of, or related to, Cloud Services where the pricing is bundled within the pricing for Cloud Services be deemed to be No Charge Services. Please note that the No Charge Services have modified terms as indicated within this Agreement. “Order Form” means an ordering document or online order, including but not limited to BYTE25 quote or a Customer purchase order, work order or similar document, specifying the Cloud Services to be provided by BYTE25 that is provided by Customer to BYTE25 based on a BYTE25 quote and that is accepted by BYTE25. “Personal Data” are any information which are related to an identified or identifiable natural person. “BYTE25” means the entity from which services are purchased by Customer pursuant to an Order Form. “Reports” means the reports made available to Customer that summarise the findings regarding the Assets. “Reseller” means an entity that has entered into an agreement with BYTE25 that permits such entity to resell the Cloud Services to Customers. “Software” means the software loaded onto Hardware provided herein and/or software that is loaded onto Customer’s servers to allow virtual scanning or connection to the Cloud Services “Subscription Term” means term of each subscription as specified in the applicable Order Form. “User” means an individual who is authorised by Customer to use a Cloud Services and to whom Customer has supplied a user identification and password. Users may include, for example, employees, Affiliates, consultants, contractors and agents of Customer, and third parties with which Customer transacts business.

2. BYTE25 RESPONSIBILITIES 2.1 Provision of Cloud Services. BYTE25 will (a) make the Cloud Services available to Customer for the applicable Subscription Term, in accordance with this Agreement and the applicable Order Forms, (b) provide Customer with BYTE25 standard support for the Cloud Services, (c) make the Cloud Services available pursuant to the standard BYTE25 Service Level Agreement and (d) provide the Cloud Services in accordance with laws and government regulations applicable to BYTE25’s provision of the Cloud Services. 2.2 Protection of Customer Data. BYTE25 will maintain appropriate administrative, physical, and technical safeguards for protection of the security, confidentiality and integrity of Customer Data.

3. ORDERING, USE OF CLOUD SERVICES, HARDWARE, AND SOFTWARE 3.1 Ordering. The BYTE25 ordering process shall be as follows: 3.1.1. Customer may place Orders for the Cloud Services by confirming an Order Form to BYTE25 or to a Reseller. The subscriptions ordered by Customer may be used by Customer’s Affiliates solely for the Customer Affiliates’ internal use provided that Customer shall ensure that such Customer Affiliates comply with all applicable terms in this Agreement including, without limitation, Section 3.3. 3.1.2. Customer’s Affiliates may also confirm Order Forms either directly to BYTE25 or to a Reseller. Upon confirmation of an Order Form by a Customer Affiliate, such Customer’s Affiliate’s rights and obligations relating to the Cloud Services shall be governed by the terms of this Agreement as if such Affiliate were “Customer”. 3.1.3. Customer hereby agrees that Customer shall be liable for any breach of this Agreement by a Customer Affiliate as if the breach were committed by Customer itself. Only Customer and not Customer Affiliates shall have a claim against BYTE25 for any breach of this Agreement. 3.2 Rights. Subject to Customer’s compliance with the terms and conditions of this Agreement, BYTE25 grants Customer a limited, non-exclusive, non-transferable right during the applicable Subscription Term to: (i) access the user interface of the Cloud Services with an industry standard web browser (like MS IE, Firefox, Chrome, Safari, etc.) and to use the Cloud Services, solely for Customer’s own internal business purposes; (ii) access, use, and internally distribute the Documentation; and (iii) grants Users the right to access the Cloud Services solely for Customer’s (or the Affiliate’s, if applicable) own internal business purposes. 3.3 Restrictions. Customer shall not (i) modify, adapt, alter, translate or create derivative works of the Cloud Services or Documentation; (ii) reverse engineer, reverse assemble, disassemble, decompile or otherwise attempt to decipher any code used in connection with the Cloud Services and/or any aspect of BYTE25’s technology; (iii) access and/or engage in any use of the Cloud Services in a manner that abuses or materially disrupts the Assets, networks, security systems, of any third party; (iv) interfere with, overburden, or disrupt the integrity or performance of the Cloud Services (v) rent, lease or loan the Cloud Services to, or allow the use of the Cloud Services by, a third party via timesharing or as a service bureau; (vi) market, offer to sell, sell, and/or otherwise resell the Cloud Services to any third party; (vi) use the Cloud Services other than in accordance with the Documentation and this Agreement; (vii) use the Cloud Services to scan an Asset for which Customer does not have the right or consent to scan; (viii) remove, alter or obscure any proprietary notices on the Cloud Services or the Documentation (ix) introduce software or agents or other related materials to the BYTE25 Cloud Services which may create multiple accounts, generate automated searches, requests, and queries, or to strip, scrape, deep link, or mine content or material from the BYTE25 Cloud Services or (x) use the Cloud Services in violation of applicable law (xi) allow any unauthorised use or disclosure of User credentials. 3.4 Information Provided to BYTE25. Customer hereby acknowledges and agrees that as it relates to any Personal Data shared by or for Customer with BYTE25 either directly or through the use of the Cloud Services, Customer is the controller of Personal Data and BYTE25 is the processor of Personal Data under this Agreement. Customer bears the sole responsibility and liability for obtaining the required consents from the data subjects of such Personal Data to be used as anticipated by this Agreement. Customer agrees that Customer shall not provide any Personal Data outside of what is strictly needed for the provisioning or use of the Cloud Services, including but not limited to protected health information or sensitive Personal Data. 3.5 Usage Limits. Use of the Cloud Services are subject to limits on the number of Subnets as specified in an Order Form. If Customer exceeds a usage limit, then BYTE25 will work with Customer to seek to reduce Customer’s usage to conform to the applicable limit. If, notwithstanding BYTE25’s efforts, Customer is unable or unwilling to abide by a usage limit, then Customer shall be liable for the fees for such excess usage in accordance with the “Invoicing and Payment” section below. 3.6 Hardware. If the Cloud Services on an Order Form include Hardware, then BYTE25 will provide the Hardware to Customer on a subscription basis and only for the limited use as permitted herein and in accordance with the Documentation and the applicable Order. Customer acknowledges that not all Cloud Services subscriptions include Hardware. BYTE25 will select the carrier and bear the cost of shipment, insurance and duties for delivery of such Hardware to the location Customer designates. In order to provide the Cloud Services and to support the Hardware, BYTE25 may access the Hardware remotely at any time, or, with Customer’s agreement on Customer’s premises during the Subscription Term and solely as necessary to provide the Cloud Services and related support. BYTE25 shall not be liable for any failure to maintain or update Hardware that is caused by Customer’s delay or refusal to allow BYTE25 access to the Hardware. At the end of any Subscription Term that is not renewed, Customer will select the carrier and bear the cost of shipment, insurance and duties for return of such Hardware to the location BYTE25 designates. Hardware must be returned to BYTE25 within thirty (30) days after the end of the Subscription Term. In the event that Customer does not return the Hardware within thirty (30) days after the end of the Subscription Term, then BYTE25 shall invoice Customer, and Customer shall pay such invoice in accordance with Section 5, for a non-return fee of One thousand five hundred US dollars (USD1,500) per piece of Hardware. 3.7 Rights and Possession of Hardware. If the Cloud Services listed on an Order Form include Hardware, BYTE25 retains title, ownership and all rights and interests to such Hardware. Customer shall be liable for any misuse, abuse, neglect, or failure to use or protect such Hardware in accordance with the Documentation provided to Customer. Customer has no right to relocate Hardware without BYTE25’s consent and only in accordance with BYTE25’s instructions. 3.8 Software. Any Software provided hereunder is provided as part of the Cloud Services on a subscription basis and only for the limited use as permitted herein and in accordance with the related Cloud Services. At the end of any Subscription Term that is not renewed, Software must be uninstalled within thirty (30) days of the end of the Subscription Term 3.9 Open Source. BYTE25 provides some of its services with the help of open source software code. BYTE25 will provide a list of the then-current list of Open Source used by BYTE25 to provide the Cloud Services within thirty (30) days after Customer’s written request. 3.10 Future Functionality. Customer agrees that its purchases are not contingent on any oral or written public comments made by BYTE25 regarding future functionality or features not present in the Cloud Services as of the Effective Date.

4. FEES AND PAYMENT [This Section 4 is applicable to Customers that purchase direct from BYTE25. For Customers that purchase through an authorised Reseller or third party, the fees, invoicing and payment rights and obligations shall be as set forth between Reseller or third party and Customer] 4.1 Fees. Customer will pay all fees as specified in Order Forms. Except as otherwise specified herein or in an Order Form, (i) fees are based on Cloud Services subscriptions purchased and not actual usage, (ii) payment obligations are non-cancellable and fees paid are non-refundable, and (iii) quantities purchased cannot be decreased during the relevant Subscription Term. If Customer is purchasing the Cloud Services through a Reseller, then the fees shall be as set forth between Customer and Reseller; and, the applicable fees shall be paid directly to the Reseller. 4.2 Invoicing and Payment. Fees will be invoiced in advance in accordance with the relevant Order Form and this Agreement. Unless otherwise stated in the Order Form, fees are due net thirty (30) days from the invoice date. Customer is responsible for providing complete and accurate billing and contact information to BYTE25 and notifying BYTE25 of any changes to such information. If Customer is purchasing the Cloud Services through a Reseller, then the payment terms shall be as set forth between Customer and Reseller; and, the applicable fees shall be paid directly to the Reseller. Payment from Reseller to BYTE25 is not dependent upon collection of payments from any of Reseller’s customers and is due and payable regardless of Reseller’s receipt of payment from the same. Notwithstanding the foregoing, until such time as BYTE25 can establish an appropriate credit history with Reseller, BYTE25 may require that all fees payable under this Agreement be paid in advance (“Pre-Payment”). No orders will be accepted until such Pre-Payment has been received by BYTE25. 4.3 Overdue Charges. If any invoiced amount is not received by BYTE25 by the due date, then without limiting BYTE25’ rights or remedies, those charges may accrue late interest at the rate of one and one-half percent (1.5%) of the outstanding balance per month, or the maximum rate permitted by law, whichever is lower, provided that BYTE25 has given Customer at least ten (10) days’ prior notice that its account is overdue. Such notice may be in the form of an email. 4.4 Suspension of Service. If any charge owing by Customer is thirty (30) days or more overdue, BYTE25 may, without limiting its other rights and remedies, suspend Cloud Services until such amounts are paid in full provided that BYTE25 has given Customer at least ten (10) days’ prior notice that its account is overdue. Such notice may be in the form of an email. 4.5 Payment Disputes. BYTE25 will not exercise its rights under the “Overdue Charges” or “Suspension of Service” section above if Customer is disputing the applicable charges reasonably and in good faith and is cooperating diligently to resolve the dispute. 4.6 Taxes. 4.6.1 Customer’s payment is considered a payment for the use of BYTE25’s Cloud Services and software and should generally be characterised as an automated service payment for tax purposes frequently referred to as ‘business profits’ under the applicable income tax treaty. Customer acknowledges that Customer’s payment does not represent a license or royalty payment and should not be subject to local country withholding tax. Customer is granted a right to access BYTE25’s Cloud Services and Software and BYTE25 is not transferring any right, title or interest in or to the Cloud Services and/or Software. To the extent that any amounts payable by Customer are subject to withholding Taxes as required by the applicable local country tax law, and that cannot otherwise be mitigated, the amount payable by Customer shall be automatically grossed up such that the amount paid net of withholding Taxes equals the amount invoiced by BYTE25. Customer shall provide BYTE25 with any applicable withholding tax certificate(s) to substantiate the withholding Taxes paid. 4.6.2. Either party is entitled to contest the amount or validity of the imposition of any Taxes at its own expense or as mutually agreed upon, and each party agrees to furnish reasonable cooperation to the contesting party in any proceeding contesting the amount or validity of imposition of such Taxes. Both parties shall mutually cooperate to minimise the Taxes by availing any exemptions or treaty benefits, as applicable under the relevant laws of each jurisdiction.

5. PROPRIETARY RIGHTS 5.1 Reservation of Rights. Subject to the limited rights expressly granted hereunder, BYTE25, its licensors reserve all of their right, title and interest in and to the Cloud Services including all of their related intellectual property rights. No rights are granted to Customer hereunder other than as expressly set forth herein. 5.2 Consent by Customer to Host Customer Data and Applications. Customer grants BYTE25 a Customer’s consent to BYTE25 hosting, copying, transmitting and displaying Customer Data as necessary for BYTE25 to provide the Cloud Services, including without limitation, the provision of the standard support and the use of worldwide BYTE25 Affiliates to provide the Cloud Services. Subject to consent herein, BYTE25 acquires no right, title or interest from Customer or its licensors under this Agreement in or to any Customer Data. Customer shall be solely responsible for the statements, comments text, data, materials, or other information including but not limited to provided on or through the Cloud Services by Customer or the Users. 5.3 License by Customer to Use Feedback. Customer grants to BYTE25 and its Affiliates a worldwide, perpetual, irrevocable, royalty-free license to use and incorporate into its services any suggestion, enhancement request, recommendation, correction or other feedback provided by Customer or Users relating to the operation of BYTE25’ or its Affiliates’ services (“Feedback”), provided such feedback is on an anonymised basis and does not include Customer’s Confidential Information.

6. CONFIDENTIALITY 6.1 Definition of Confidential Information. “Confidential Information” means all information disclosed by a party (“Disclosing Party”) to the other party (“Receiving Party”), whether orally or in writing, that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Confidential Information of Customer includes Customer Data; Confidential Information of BYTE25 includes the Cloud Services; and Confidential Information of each party includes the terms and conditions of this Agreement and all Order Forms (including pricing), as well as business and marketing plans, technology and technical information, product plans and designs, and business processes disclosed by such party. However, Confidential Information does not include any information that (i) is or becomes generally known to the public without breach of any obligation owed to the Disclosing Party, (ii) was known to the Receiving Party prior to its disclosure by the Disclosing Party without breach of any obligation owed to the Disclosing Party, (iii) is received from a third party in a non-confidential manner without breach of any obligation owed to the Disclosing Party, or (iv) was independently developed by the Receiving Party without use of Disclosing Party’s Confidential Information. 6.2 Protection of Confidential Information. The Receiving Party will use the same degree of care that it uses to protect the confidentiality of its own confidential information of like kind (but not less than reasonable care) to (i) not use any Confidential Information of the Disclosing Party for any purpose outside the scope of this Agreement and (ii) except as otherwise authorised by the Disclosing Party in writing, limit access to Confidential Information of the Disclosing Party to those of its Authorised Representatives who are not competitors of the Disclosing Party and who need that access in their professional duties for purposes consistent with this Agreement. Neither party will disclose the terms of this Agreement or any Order Form to any third party other than its Authorised Representatives without the other party’s prior written consent, provided that a party that makes any such disclosure to its Authorised Representative will remain responsible for such Authorised Representative’s compliance with this “Confidentiality” section. If Receiving Party becomes aware of a loss or unauthorised disclosure of Confidential Information, whether intentional, by inadvertence, or by theft, Receiving Party shall notify Disclosing Party immediately and provide commercially reasonable efforts assistance to Disclosing Party in the retrieval of the lost or improperly disclosed Confidential Information. 6.3 Compelled Disclosure. The Receiving Party may disclose Confidential Information of the Disclosing Party to the extent compelled by law, statute, rule or regulation of any governmental authority or pursuant to any order of any court of competent jurisdiction to do so, provided the Receiving Party gives the Disclosing Party prior notice of the compelled disclosure (to the extent legally permitted), a reasonable opportunity to obtain a protective order or other form of protection, and reasonable assistance, at the Disclosing Party’s cost, if the Disclosing Party wishes to contest the disclosure. 6.4 Injunctive Relief. A breach of Section 7 of this Agreement may result in irreparable and continuing damage to the Disclosing Party for which there may be no adequate remedy at law. The Disclosing Party is therefore entitled to seek injunctive relief without posting bond for any breach or threatened breach of those sections, as well as such other and further relief as may be appropriate. 6.5 Return or Destruction of BYTE25 Confidential Information. Subject to Section 10.4, at the end of the Subscription Term or upon the termination of the Agreement, each Receiving Party will promptly, and without undue delay, delete or return to the Disclosing Party all Confidential Information in its possession or control, and if requested by the Disclosing Party, deliver to the Disclosing Party a confirmation of compliance with the return or destruction obligation under this Section 6. For the avoidance of doubt, upon termination of subscription, Customer shall destroy all BYTE25 security findings and documents provided to Customer, including but not limited to, SOC Reports, assessments, questionnaires, audit findings, security reports, security findings and any non-public information provided by BYTE25 to Customer. Notwithstanding the foregoing and with the exception of any SOC Reports, security assessments, and any security analysis or documentation resulting from third party security assessments, the Receiving Party may retain an archival copy of the Confidential Information to the extent necessary to comply with applicable law or archival policies, provided that such retained Confidential Information shall remain subject to all confidentiality obligations under this Agreement and shall not be used for any commercial purposes. 6.6 Ownership and Retention of Rights. Each party has reserved all rights to its respective Confidential Information not expressly granted herein. No intellectual property rights in the Confidential Information are granted to Receiving Party. For the avoidance of doubt, except as required for provision or use of the Cloud Services, the Receiving Party acquires and retains no rights in or to any Confidential Information of Disclosing Party, including any license implied or otherwise suggested. Copying of any Confidential Information is permitted only to the extent that such copies are recorded and necessary for the purposes of provision or use of the Cloud Services to Disclosing Party. Receiving Party also agrees not to apply for any patents or other intellectual property rights based on any Confidential Information of Disclosing Party without the prior written consent of Disclosing Party.

7. REPRESENTATIONS, WARRANTIES, EXCLUSIVE REMEDIES AND DISCLAIMERS 7.1 Representations. Each party represents that it has validly entered into this Agreement and has the legal power to do so. 7.2 BYTE25 Warranties. BYTE25 warrants that during each applicable Subscription Term (a) the Cloud Services will perform materially in accordance with the applicable Documentation, (b) BYTE25 will not materially decrease the functionality of the Cloud Services, (c) this Agreement and the Documentation will accurately describe the applicable administrative, physical, and technical safeguards for protection of the security, confidentiality and integrity of Customer Data. These warranties shall not apply to No Charge Services which are provided “As Is”. 7.3 Hardware and Software Warranty. BYTE25 warrants that the Hardware and Software provided hereunder, when operated by Customer in accordance with this Agreement and the Documentation, will operate in substantial conformity with the applicable Documentation. Customer’s sole and exclusive remedy for breach of this warranty is to notify BYTE25 of the non-conformity in writing, whereupon BYTE25, as its sole obligation and liability, will at its election, either: (i) correct the affected Hardware or Software to render it conforming to the applicable Documentation within a reasonable period of time or replace such Hardware, or Software or in the event that (i) is not commercially reasonable, (ii) allow Customer to terminate the applicable Order and refund Customer a pro-rata portion of the fees paid for such item. This section sets forth Customer’s sole and exclusive remedy and BYTE25’s entire liability to Customer for any Software or Hardware non-conformity. These warranties shall not apply to No Charge Services which are provided “As Is”. 7.4 Disclaimers. EXCEPT AS EXPRESSLY PROVIDED HEREIN, NEITHER PARTY MAKES ANY WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, AND EACH PARTY SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW.

8. MUTUAL INDEMNIFICATION 8.1 Indemnification by BYTE25. BYTE25 will defend Customer against any claim, demand, suit or proceeding made or brought against Customer by a third party alleging that any Cloud Services or Software infringes or misappropriates such third party’s intellectual property rights (a “Claim Against Customer”), and will indemnify Customer from any damages, attorney fees and costs finally awarded against Customer as a result of, or for amounts paid by Customer under a settlement approved by BYTE25 in writing of, a Claim Against Customer, provided Customer (a) promptly gives BYTE25 written notice of the Claim Against Customer, (b) gives BYTE25 sole control of the defence and settlement of the Claim Against Customer (except that BYTE25 may not settle any Claim Against Customer unless it unconditionally releases Customer of all liability), and (c) gives BYTE25 all reasonable assistance, at BYTE25’s expense. If BYTE25 receives information about an infringement or misappropriation claim related to the Cloud Services or Software and in addition to the defence and indemnification obligations set forth herein, BYTE25 may in its discretion and at no cost to Customer (i) modify the Cloud Services or Software so that it is no longer claimed to infringe or misappropriate, without breaching BYTE25’s warranties under “BYTE25 Warranties” above, (ii) obtain a license for Customer’s continued use of the Cloud Services or Software in accordance with this Agreement, or (iii) terminate Customer’s subscriptions for that Cloud Services or Software immediately upon written notice and refund Customer any prepaid fees covering the remainder of the term of the terminated subscriptions. The above defence and indemnification obligations do not apply to the extent a Claim Against Customer arises from Customer’s breach of this Agreement, the Documentation or applicable Order Forms. This Section 8.1 states Customer’s sole and exclusive remedy for intellectual property claims relating to the Cloud Services or Software. 8.2 Indemnification by Customer. Customer will defend BYTE25 against any claim, demand, suit or proceeding made or brought against BYTE25 by a third party alleging or arising from Customer’s use of the Cloud Services in breach of Section 3.3(vii) and/or 3.3(xi), or not in accordance with applicable law, (a “Claim Against BYTE25”), and will indemnify BYTE25 from any damages, attorney fees and costs finally awarded against BYTE25 as a result of, or for any amounts paid by BYTE25 under a settlement approved by Customer in writing of, a Claim Against BYTE25, provided BYTE25 (a) promptly gives Customer written notice of the Claim Against BYTE25, (b) gives Customer sole control of the defence and settlement of the Claim Against BYTE25 (except that Customer may not settle any Claim Against BYTE25 unless it unconditionally releases BYTE25 of all liability), and (c) gives Customer all reasonable assistance, at Customer’s expense.

9. LIMITATION OF LIABILITY 9.1 Limitation of Liability. IN NO EVENT SHALL THE AGGREGATE LIABILITY OF EACH PARTY ARISING OUT OF OR RELATED TO THIS AGREEMENT EXCEED THE GREATER OF THE TOTAL AMOUNT PAID OR PAYABLE BY CUSTOMER HEREUNDER FOR THE CLOUD SERVICES IN THE TWELVE MONTHS PRECEDING THE APPLICABLE INCIDENT OUT OF WHICH THE LIABILITY AROSE OR ONE THOUSAND DOLLARS ($1000), PROVIDED THAT FOR CUSTOMER RECEIVING NO CHARGE SERVICES, IN NO EVENT SHALL THE AGGREGATE LIABILITY OF BYTE25 ARISING OUT OF OR RELATED TO THIS AGREEMENT EXCEED THE GREATER OF THE TOTAL AMOUNT PAID OR PAYABLE BY CUSTOMER HEREUNDER FOR THE CLOUD SERVICES IN THE TWELVE MONTHS PRECEDING THE APPLICABLE INCIDENT OUT OF WHICH THE LIABILITY AROSE OR ONE HUNDRED DOLLARS ($100). THE FOREGOING LIMITATION WILL APPLY WHETHER AN ACTION IS IN CONTRACT OR TORT AND REGARDLESS OF THE THEORY OF LIABILITY, BUT WILL NOT LIMIT CUSTOMER’S PAYMENT OBLIGATIONS UNDER THE “FEES AND PAYMENT” SECTION ABOVE. 9.2 Exclusion of Consequential and Related Damages. IN NO EVENT WILL EITHER PARTY OR ITS AFFILIATES HAVE ANY LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT FOR ANY LOST PROFITS, REVENUES, GOODWILL, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, COVER, BUSINESS INTERRUPTION OR PUNITIVE DAMAGES, WHETHER AN ACTION IS IN CONTRACT OR TORT AND REGARDLESS OF THE THEORY OF LIABILITY, EVEN IF A PARTY OR ITS AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR IF A PARTY’S OR ITS AFFILIATES’ REMEDY OTHERWISE FAILS OF ITS ESSENTIAL PURPOSE. THE FOREGOING DISCLAIMER WILL NOT APPLY TO THE EXTENT PROHIBITED BY LAW. 9.3 Exclusions. The limitation set forth above shall not apply to (i) either Party’s indemnification obligation, (ii) damages for a breach of a party’s confidential obligations hereunder that result in an actual unauthorised use or unauthorised disclosure of Confidential Information, (iii) damages related to either party’s unauthorised use, disclosure, or distribution of the other party’s intellectual property provided however that these exclusions shall not apply to BYTE25’s liability related to No Charge Services which shall be governed by Sections 9.1 and 9.2.

10. TERM AND TERMINATION 10.1 Term of Agreement. This Agreement shall be binding once signed by both parties and effective on the date of the last signature below (“Effective Date”). This Agreement commences on the Effective Date and continues until sixty (60) days after all subscriptions hereunder have expired or have been terminated. 10.2 Term of Subscriptions. Each Order will automatically renew for an additional one (1) year terms unless Customer or BYTE25 provides written notice that it does not intend to renew the Order not later than sixty (60) days prior to the end of the then-current Subscription Term. For each auto-renew Subscription Term, the per-unit pricing during such Subscription Term will not increase more than the greater of five percent (5%) or Consumer Price Index (CPI) above the applicable pricing other than Special Pricing (as defined below) in the immediately preceding Subscription Term. “Special Pricing” shall mean any of promotional or one-time pricing. Any change in the renewal to the type of Services or reduction in volume will result in re-pricing at renewal. For purposes of clarity, a Subscription Term shall auto-renew at the expiration of the applicable period specified as the Subscription Term. 10.3 Termination. A party may terminate this Agreement for cause (i) upon thirty (30) days written notice to the other party of a material breach if such breach remains uncured at the expiration of such period, or (ii) if the other party becomes the subject of a petition in bankruptcy or any other proceeding relating to insolvency, receivership, liquidation or assignment for the benefit of creditors. 10.4 Customer Data Portability and Deletion. Upon request by Customer made within sixty (60) days after the effective date of termination or expiration of this Agreement, BYTE25 will make Customer Data available to Customer for export or download as provided in the Documentation. After such sixty (60)-day period, BYTE25 will have no obligation to maintain or provide any Customer Data, and as provided in the Documentation will thereafter delete or destroy all copies of Customer Data in its systems or otherwise in its possession or control, unless legally prohibited. 10.5 Effect of Termination or Expiration. Upon termination or expiration of this Agreement, Customer will: (i) cease all use of the Cloud Services; (ii) promptly and fully destroy, delete, or uninstall any Software provided herein or certify such destruction; and (iii) promptly return all Hardware provided herein in accordance with Section 3.6. For purposes of clarity and notwithstanding the foregoing, Customer may retain and use Reports after termination, subject to the terms and conditions of this Agreement. 10.6 Surviving Provisions. The sections titled “Fees and Payment,” “Proprietary Rights,” “Confidentiality,” “Disclaimers,” “Mutual Indemnification,” “Limitation of Liability,” “Customer Data Portability and Deletion,” “Effect of Termination or Expiration”, “Surviving Provisions” and “General Provisions” will survive any termination or expiration of this Agreement.

11. GENERAL PROVISIONS 11.1 Export Compliance. The Cloud Services and other BYTE25 technology, and derivatives thereof may be subject to export laws and regulations of the United States and other jurisdictions. BYTE25 and Customer each represents that it is not named on any U.S. government denied-party list. In the event that Customer or any of Customer’s Users is added to any such list during the term of this Agreement, then Customer shall provide BYTE25 with legal written notice in accordance with Section 11.6 below within ten (10) days of being named on such list. Customer will not permit any foreign national who is, or allow any User to access or use the Cloud Services, from a U.S.-embargoed country or region (currently Cuba, Iran, North Korea, Syria or Crimea), by persons or entities prohibited from receiving U.S. exports, or in violation of any U.S. export law or regulation. 11.2 Anti-Corruption. Neither party has received or been offered any illegal or improper bribe, kickback, payment, gift, or thing of value from an employee or agent of the other party in connection with this Agreement. Reasonable gifts and entertainment provided in the ordinary course of business do not violate the above restriction. 11.3 Entire Agreement. This Agreement and any applicable Order Form(s) are the entire agreement between BYTE25 and Customer regarding Customer’s use of Cloud Services and supersedes all prior and contemporaneous agreements, proposals or representations, written or oral, concerning its subject matter. The parties hereby agree that any term other than the Cloud Services ordered and applicable pricing that differ from or are additional to those set forth in this Agreement are hereby rejected. The terms in any Customer purchase order or business form are solely for Customer’s internal administrative purposes and shall not amend the legal terms and conditions agreed to herein. 11.4 Relationship of the Parties. The parties are independent contractors. This Agreement does not create a partnership, franchise, joint venture, agency, fiduciary or employment relationship between the parties. 11.5 Third-Party Beneficiaries. There are no third-party beneficiaries under this Agreement. 11.6 Notices. Except as otherwise specified in this Agreement and in this Section 11.6, all notices related to this Agreement (“Legal Notices”) will be in writing and will be effective upon (a) personal delivery, or (b) the second business day after mailing via two-day mail. Legal Notices to Customer will be addressed to Customer and be clearly identifiable as Legal Notices. Billing-related notices to Customer will be addressed to the relevant billing contact designated by Customer and may be sent via email. System-related notices may be sent via email or made available in release notes. 11.7 Waiver. No failure or delay by either party in exercising any right under this Agreement will constitute a waiver of that right. 11.8 Severability. If any provision of this Agreement is held by a court of competent jurisdiction to be contrary to law, the provision will be deemed null and void, and the remaining provisions of this Agreement will remain in effect. 11.9 Assignment. Neither party may assign any of its rights or obligations hereunder, whether by operation of law or otherwise, without the other party’s prior written consent (not to be unreasonably withheld); provided, however, either party may assign this Agreement in its entirety (including all Order Forms), without the other party’s consent, but with notice to the other Party, to its Affiliate or in connection with a merger, acquisition, corporate reorganisation, or sale of all or substantially all of its assets. Notwithstanding the foregoing, if a party is acquired by, sells substantially all of its assets to, or undergoes a change of control in favour of, a direct competitor of the other party or to a party that cannot meet the terms, conditions and obligations herein, including the Order Forms, then such other party may terminate this Agreement upon written notice. Subject to the foregoing, this Agreement will bind and inure to the benefit of the parties, their respective successors and permitted assigns. 11.10 Governing Law. This Agreement, and any disputes arising out of or related hereto, will be governed exclusively by the laws of the State of New South Wales, without regard to its conflicts of laws rules or the United Nations Convention on the International Sale of Goods. 11.11 Venue. The state and federal courts located in New South Wales will have exclusive jurisdiction over any dispute relating to this Agreement, and each party consents to the exclusive jurisdiction of those courts. 11.12 Counterparts. This Agreement may be executed electronically and in counterparts, each of which shall be deemed to be an original and all such counterparts shall together constitute one and the same instrument. 11.13 Force Majeure. For purposes of this Agreement, “Force Majeure Event” shall mean an event beyond the reasonable control of the affected party and which the effects of which could not have been avoided by a party’s compliance with its obligations under this Agreement. No Party shall be liable for any failure to perform its obligations where such failure is because of a Force Majeure Event, provided that Customer’s payment obligations shall remain. 11.14 Updated Terms. BYTE25 reserves the right to update these terms. Such terms shall apply to Customer upon posting of the updated terms.