Wiz Trial License Terms & Conditions
This End User License Agreement (the “Agreement”), effective as of the date of the last signature below (the “Effective Date”), is made by and between Singing Bridge Holdings, Inc. DBA: NephoSec (“NephoSec”) and the Customer acknowledging this Agreement (“Customer”). The parties agree to be bound by the following terms and conditions in connection with the subscription to and use of NephoSec Software as defined herein.
-
DEFINITIONS
- Documentation means the documentation for the Software or Services generally supplied by NephoSec to assist its customers in their use of the Software, including user and system administrator guides, manuals, and the functionality specifications.
- Maintenance and Support Term means the period in which Customer is entitled to receive support services from NephoSec, including all updates, bug fixes and new releases thereto that NephoSec makes generally available to its customers at no additional cost. The length of the Maintenance and Support Term shall be listed on the applicable Order Form and shall commence on the date of delivery of the Software. Application Extensions or new functional modules are not included in maintenance and support and may be subject to additional fees.
- Services means NephoSec’s professional services (as described in Section 10.2) herein.
- Software means the NephoSec Wiz Email Integration Trial Version.
- Software Term means the period in which the Customer is authorized to utilize the Software. The initial Software Term shall be not less than two weeks.
- Volume Limitations, if any, means the capacity indicated to the end customer, including, as applicable, number of connected systems, assets, applications, data, and named individual users of the Software.
-
SOFTWARE LICENSES
- License to Products.
- On Premises Deployment. If Customer deploys the Software in its environment (also referred to as “self-hosted”) NephoSec hereby grants to Customer, during the applicable Software Term only, a non-exclusive, non-transferable license to use the Documentation and Software (in object code only) listed on the Order Form within the Volume Limitations, in connection with Customer’s provision of managed services as well as Customer’s internal business purpose, and solely in accordance with the applicable Documentation. The Software shall not be used on or for any third party unless otherwise stated below.
- SaaS Deployment. If Customer accesses the Software via the SaaS offering, NephoSec hereby grants to Customer, during the applicable Software Term only, a non-exclusive, non-transferable, non-sublicensable right to use and access the Software: (i) solely for Customer’s internal business purposes; (ii) within the Volume Limitations; and (iii) as described in this Agreement. Customer also agrees to be bound by any further restrictions set forth on the Order Form.
- Evaluation Licenses. If Customer’s license is for a trial or evaluation only, then the Software Term shall be thirty days, or the trial or evaluation term specified to the customer. Customer may not utilize the same software for more than one trial or evaluation term in any twelve month period, unless otherwise agreed to by NehoSec. NephoSec may revoke Customer’s evaluation or trial license at any time and for any reason. Sections 3 (Limited Warranty) and 9.1 (Indemnification) shall not be applicable to any evaluation or trial license.
- Use by Affiliates. Subject to the Volume Limitations, Customer may make the Software available to its Affiliates under these terms, provided that Customer is liable for any breach of this Agreement by any of its Affiliates. “Affiliate(s)” means any entity now existing that is directly or indirectly controlled by Customer. For purposes of this definition “control” means the direct possession of a majority of the outstanding voting securities of an entity.
- Delivery and Copies. Delivery shall be deemed to have been made upon NephoSec providing instructions to download or activate the Software, as applicable. Notwithstanding anything to the contrary herein, Customer may make a reasonable number of copies of the Software for the sole purpose of staging, testing, backing-up and archiving the Software. Each copy of the Software is subject to this Agreement and must contain the same titles, trademarks, and copyright notices as the original.
- Open Source Libraries. Customer understands that its ability to use the Software may require use of open source code libraries, (“OSS Libraries”). Current open source components made available by NephoSec can be found at: https://www.nephosec.com/oss), however Customer may elect to use such OSS Libraries or procure alternatives. Customer acknowledges that its use of the third party software in connection with the Software and access to and use of OSS Libraries (whether or not access to such OSS Library is provided by NephoSec) may be subject to separate third party license terms and conditions (“Third Party Terms”). Notwithstanding anything set forth in this Agreement, Customer agrees that (a) all such third party software and access to and use of OSS Libraries is governed exclusively by the applicable Third Party Terms, and Customer shall comply with all Third Party Terms, and (b) Licensor shall have no obligation to provide any OSS Libraries (or rights to use the same).
- Restrictions. The Services may only be used for the purposes as outlined in the documentation. Except as may be expressly permitted by applicable law, Customer will not, and will not permit or authorize third parties to: (i) reproduce, modify, translate, enhance, decompile, disassemble, reverse engineer, create derivative works of the Software, or merge the Software into another program; (ii) resell, rent, lease, or sublicense the Software or access to it, including use of the Software for timesharing or service bureau purposes; (iii) circumvent or disable any security or technological features or measures in the Software; nor (iv) use the Software in order to build a competitive product or service, for competitive analysis, or to copy any ideas, features, functions, or graphics of the Software. If Customer identifies a vulnerability in the Software, all information and analysis regarding the vulnerability must be disclosed through the NephoSec contact form, found at: https://nephosec.com/vulnerability-disclosure-policy/.
- Ownership of Software. NephoSec retains all right, title, and interest in and to the Documentation, Software, Content Updates and in all copies, modifications and derivative works thereto including, without limitation, all rights to patent, copyright, trade secret, trademark, and other proprietary or intellectual property rights.
- Customer Systems. Customer represents and warrants that it has the appropriate authorizations from the owner of the networks, systems, IP addresses, assets, and/or hardware on which it deploys the Software, or which it targets, or tests with the Software.
- License to Products.
- LIMITED WARRANTY
Software Warranty. NephoSec warrants that for a period of ninety days following the initial delivery of any Software to Customer the Software will conform, in all material respects, with the applicable Documentation. For a breach of the above warranty, NephoSec will, at no additional cost to Customer, use commercially reasonable efforts to provide remedial services necessary to enable the Software to conform to the warranty. If NephoSec is unable to restore such functionality, Customer shall be entitled to terminate the applicable Order Form and receive a pro rata refund of the fees paid. Customer will provide NephoSec with a reasonable opportunity to remedy any breach and reasonable assistance in remedying any defects. The remedies set out in this subsection are Customer’s sole remedies for breach of the above warranty. Headings or titles in the Documentation are for information only and do not imply any warranties.
-
- Disclaimer. NEPHOSEC DOES NOT REPRESENT THAT THE SOFTWARE WILL BE UNINTERRUPTED, ERROR-FREE, OR WILL MEET CUSTOMER’S REQUIREMENTS. EXCEPT FOR THE WARRANTY ABOVE, NEPHOSEC MAKES NO OTHER WARRANTIES OR REPRESENTATIONS, EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT OF THIRD PARTY RIGHTS. NephoSec disclaims all warranties and liability as to Add-Ons and third party hardware, networks, and software, including OSS Libraries, whether or not provided by or accessed through NephoSec.
-
LIMITATION OF LIABILITY
- Limitation on Indirect Liability. NEITHER PARTY WILL BE LIABLE UNDER THIS AGREEMENT FOR LOST REVENUES OR INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, EVEN IF THE PARTY KNEW OR SHOULD HAVE KNOWN THAT SUCH DAMAGES WERE POSSIBLE.
- Limitation on Amount of Liability. NEITHER PARTY MAY BE HELD LIABLE UNDER THIS AGREEMENT FOR MORE THAN THE AMOUNT PAID OR PAYABLE BY CUSTOMER TO NEPHOSEC HEREUNDER DURING THE TWELVE MONTHS PRIOR TO THE EVENT GIVING RISE TO LIABILITY.
- Exceptions to Limitations. The limitations of liability in Section 5.2 apply to the fullest extent permitted by applicable law, except that there is no limitation on loss, claims, or damages directly arising out of violations of: (i) a party’s intellectual property rights by the other party; (ii) use of the Software in excess of the Volume Limitations; or (iii) a party’s indemnification obligations.
-
USAGE LIMITATIONS
- Volume Limitations. Customer understands and acknowledges that the Software may track its Volume Limitations. Customer will be responsible for any overages in accordance with the agreed upon true-up method listed in the Order Form.
- Compliance with Terms. At NephoSec’s written request, Customer will permit NephoSec to review and verify Customer’s records, deployment, and use of the Software for compliance with the terms and conditions of this Agreement, at NephoSec’s expense. Any such review shall be scheduled at least ten days in advance, shall be conducted during normal business hours at Customer’s facilities, and shall not unreasonably interfere with Customer’s business activities.
-
CONFIDENTIALITY
-
Confidential Information. During the term of this Agreement, each party will regard any information provided to it by the other party and designated in writing as proprietary or confidential as confidential (“Confidential Information”). Confidential Information shall also include information which a reasonable person familiar with the disclosing party’s business and the industry in which it operates would know is of a confidential or proprietary nature. A party will not disclose the other party’s Confidential Information to any third party without the prior written consent of the other party, nor make use of any of the other party’s Confidential Information except in its performance under this Agreement. Each party accepts responsibility for the actions of its agents or employees and shall protect the other party’s Confidential Information in the same manner as it protects its own Confidential Information, but in no event with less than reasonable care. The parties expressly agree that the terms and pricing of this Agreement are Confidential Information. A receiving party shall promptly notify the disclosing party upon becoming aware of a breach or threatened breach hereunder and shall cooperate with any reasonable request of the disclosing party in enforcing its rights.
- Exclusions. Information will not be deemed Confidential Information if such information: (i) is known prior to receipt from the disclosing party, without any obligation of confidentiality; (ii) becomes known to the receiving party directly or indirectly from a source other than one having an obligation of confidentiality to the disclosing party; (iii) becomes publicly known or otherwise publicly available, except through a breach of this Agreement; or (iv) is independently developed by the receiving party without use of the disclosing party’s Confidential Information. The receiving party may disclose Confidential Information pursuant to the requirements of applicable law, legal process or government regulation, provided that, unless prohibited from doing so by law enforcement or court order, the receiving party gives the disclosing party reasonable prior written notice, and such disclosure is otherwise limited to the required disclosure.
-
-
TERM & TERMINATION
The purchased Software Term will automatically renew for an additional one year term unless (i) otherwise indicated on the Order Form or (ii) either party provides the other with written notice of its election not to renew at least 30 days prior to the anniversary date. Any renewal will be invoiced at the prevailing list price rate for the level applicable at the time of renewal unless otherwise indicated on the Order Form. NephoSec reserves the right to change the rates, applicable charges and usage policies and to introduce new charges, listed on such Order Form, upon providing Customer written notice thereof (which may be provided by e-mail) at least 60 days prior to the end of the applicable term.
This Agreement or an Order Form may be terminated: (i) by either party if the other party is adjudicated as bankrupt, or if a petition in bankruptcy is filed against the other party and such petition is not discharged within sixty days of such filing; or (ii) by either party if the other party materially breaches this Agreement or the Order Form and fails to cure such breach to such party’s reasonable satisfaction within thirty days following receipt of written notice thereof. Customer’s license to use the Software shall also terminate upon the expiration of the applicable Software Term. Upon any termination of this Agreement or an Order Form by NephoSec, all applicable licenses are revoked and Customer shall immediately cease use of the applicable Software and certify in writing to NephoSec within thirty days that Customer has destroyed or returned to NephoSec such Software and all copies thereof. Termination of this Agreement or a license granted hereunder shall not relieve Customer of its obligation to pay all fees that have accrued, have been paid, or have become payable by Customer hereunder. All provisions of this Agreement which by their nature are intended to survive the termination of this Agreement shall survive such termination.
-
INDEMNIFICATION
-
By NephoSec. NephoSec will indemnify, defend, and hold harmless Customer from and against all liabilities, damages, and costs (including settlement costs and reasonable attorneys’ fees) arising out of a third party claim that the Software infringes or misappropriates any intellectual property right of such third party. Notwithstanding the foregoing, in no event shall NephoSec have any obligations or liability under this Section arising from: (i) use of any Software in a manner not anticipated by this Agreement or in combination with materials not furnished by NephoSec; or (ii) any content, information or data provided by Customer or other third parties. If the Software is or is likely to become subject to a claim of infringement or misappropriation, then NephoSec will, at its sole option and expense, either: (i) obtain for the Customer the right to continue using the Software; (ii) replace or modify the Software to be non-infringing and substantially equivalent to the infringing Software; or (iii) if options (i) and (ii) above cannot be accomplished despite the reasonable efforts of NephoSec, then NephoSec may terminate Customer’s rights to use the infringing Software and will refund pro-rata any prepaid fees for the infringing portion of the Software. THE RIGHTS GRANTED TO CUSTOMER UNDER THIS SECTION 9.1 SHALL BE CUSTOMER’S SOLE AND EXCLUSIVE REMEDY FOR ANY ALLEGED INFRINGEMENT BY THE SOFTWARE OF ANY PATENT, COPYRIGHT, OR OTHER PROPRIETARY RIGHT.
- By Customer. Customer will indemnify, defend, and hold harmless NephoSec from and against all liabilities, damages, and costs (including settlement costs and reasonable attorneys’ fees) arising out of a third party claim regarding Customer’s: (i) use of the Software in violation of applicable law; or (ii) breach of the representation and warranty made in Section 2.9 of this Agreement.
-
-
TECHNICAL SUPPORT AND PROFESSIONAL SERVICES
- Maintenance and Support Services. Support Services are provided for only the current major release and the prior two major releases. Notwithstanding the provisions of Exhibit A, NephoSec shall not be obligated to provide any Support Services to the extent resulting from: (i) failure by Customer or its Users to use the Software in accordance with this Agreement, including the Documentation; (ii) Customer’s failure to use corrections or Updates previously provided to Customer by NephoSec; (iii) malfunction, defect or failure of hardware, software or any other item not developed, provided by or approved by NephoSec under this Agreement; (iv) incorrect data or incorrect procedures used or provided by Customer, any User, or a third party; or (v) any cause (including any accident, abuse, misapplication, abnormal use or a virus) that is outside the reasonable control of NephoSec.
- Product-Related Professional Services. Unless otherwise provided on an Order Form or statement of work (“SOW”), Customer is responsible for installing and configuring all Software. NephoSec may provide Customer certain professional services, such as installation, configuration, consulting, and training, if and as specified on an Order Form or a separate SOW executed by the parties. Such Services will be invoiced upon execution of the Order Form or SOW. All changes to an SOW must be approved by both parties in writing. NephoSec shall have sole discretion in staffing the Services and may assign the performance of any portion of the Services to any subcontractor, provided that NephoSec shall be responsible for the performance of any such subcontractor. Customer will have a non-exclusive, non-transferable license to use any deliverables or other work product developed by NephoSec in the performance of the Services which are delivered to Customer, upon Customer’s payment in full of all amounts due for such deliverables or work product. NephoSec retains ownership of all information, software, and other property owned by it prior to this Agreement or which it develops independently of this Agreement and all deliverables and work product compiled or developed by NephoSec in the performance of the Services.
- Professional Services Rescheduling. To the extent Customer purchases Services, Customer may reschedule the Services up to ten business days’ prior to the start of the Services at no cost. If Customer reschedules the Services with less than ten business days’ notice, Customer will forfeit the portion (in days) of the Services that were rescheduled without the required notice. If Customer reschedules the Services after they have begun, Customer will forfeit five business days of Services, or the number of days remaining on the Services, whichever is fewer. Customer will also be responsible for any expenses incurred by NephoSec due to such rescheduling. If performance of the Services is delayed by Customer’s acts or omissions, including Customer’s failure to meet the requirements set forth in an SOW, Customer will forfeit the duration of such delay from its Services time.
-
SAAS DEPLOYMENT
The following provisions are applicable to SaaS deployments only, as indicated on the Order Form:
-
- Data Security. NephoSec shall implement appropriate technical and organizational measures to protect Customer Data from accidental or unlawful destruction, loss, or alteration, unauthorized disclosure of or access to Customer Data. Such measures may include, as appropriate (a) the encryption of Customer Data; (b) the ability to ensure the ongoing confidentiality, integrity, availability and resilience of systems and services; (c) a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of Customer Data.
- Uptime. NephoSec shall use commercially reasonable efforts to provide access to the Software twenty-four hours a day, seven days a week throughout the Subscription Term. Customer agrees that from time to time the Software may be inaccessible or inoperable for various reasons, including: (i) equipment malfunctions; (ii) periodic maintenance procedures or repairs which NephoSec may undertake from time to time; or (iii) causes beyond the control of NephoSec or which are not reasonably foreseeable by NephoSec, including interruption or failure of telecommunication or digital transmission links, hostile network attacks or network congestion, or other failures (collectively “Downtime”). Customer’s failure to follow configuration requirements as documented, or abusive behavior, or faulty input is excluded from Downtime. NephoSec shall use commercially reasonable efforts to provide twenty-four hour advance notice to Customer in the event of any scheduled Downtime. NephoSec shall have no obligation during performance of such operations to mirror Customer Data or to transfer Customer Data. NephoSec shall use commercially reasonable efforts to minimize any disruption, inaccessibility, and/or inoperability of the hosted software in connection with Downtime, whether scheduled or not.
-
GENERAL PROVISIONS
- Miscellaneous. (a) This Agreement shall be construed in accordance with and governed for all purposes by the laws of the State of Ohio, each excluding its respective choice of law provisions and each party consents and submits to the jurisdiction and forum of the state and federal courts in the State of Ohio for all questions and controversies arising out of this Agreement and waives all objections to venue and personal jurisdiction in these forums for such disputes; (b) this Agreement, along with the accompanying Order Form(s) constitute the entire agreement and understanding of the parties hereto with respect to the subject matter hereof and supersedes all prior agreements and undertakings, both written and oral; (c) this Agreement and each Order Form may not be modified except by a writing signed by each of the parties; (d) in case any one or more of the provisions contained in this Agreement shall for any reason be held to be invalid, illegal, or unenforceable in any respect, such invalidity, illegality, or unenforceability shall not affect any other provisions of this Agreement, but rather this Agreement shall be construed as if such invalid, illegal, or other unenforceable provision had never been contained herein; (e) Customer shall not assign its rights or obligations hereunder without NephoSec’s advance written consent; (f) subject to the foregoing subsection (e), this Agreement shall be binding upon and shall inure to the benefit of the parties hereto and their successors and permitted assigns; (g) no waiver of any right or remedy hereunder with respect to any occurrence or event on one occasion shall be deemed a waiver of such right or remedy with respect to such occurrence or event on any other occasion; (h) nothing in this Agreement, express or implied, is intended to or shall confer upon any other person any right, benefit, or remedy of any nature whatsoever under or by reason of this Agreement, including but not limited to any of Customer’s own clients, customers, or employees; (i) the headings to the sections of this Agreement are for ease of reference only and shall not affect the interpretation or construction of this Agreement; and (j) in the event of a conflict between the terms of this Agreement and the terms of an Order Form, the terms in the Order Form shall take precedence.
- Export. Each party acknowledges that the export, re-export, deemed export, and import of the Software and Documentation by Customer and NephoSec is subject to certain laws, rules, executive orders, directives, arrangements, and regulations of the United States and of other countries. Each party agrees to comply with all applicable laws with respect to the exportation, importation, and use of the Software and Documentation.
- Personal Data. To the extent that NephoSec processes personal data about any individual in the course of providing the Software or Service, Customer agrees to NephoSec’s Data Processing Addendum. (Document in process as of 12/20/21.)
- Data Privacy. Customer represents and warrants that Customer has obtained all necessary rights to permit NephoSec to process Customer Data from and about Customer, including, without limitation, data from endpoints, servers, cloud applications, metrics, events, and logs as required by the Software.
- Injunctive Relief. Notwithstanding any other provision of this Agreement, both parties acknowledge that any breach of this Agreement may cause the other party irreparable and immediate damage for which remedies other than injunctive relief may be inadequate. Therefore, the parties agree that, in addition to any other remedy to which the non-breaching party may be entitled hereunder, at law or equity, the disclosing party shall be entitled to seek an injunction to restrain such use in addition to other appropriate remedies available under applicable law.
- Relationship of the Parties. NephoSec and Customer are independent contractors, and nothing in this Agreement shall be construed as making them partners or creating the relationships of principal and agent between them, for any purpose whatsoever. Neither party shall make any contracts, warranties or representations or assume or create any obligations, express or implied, in the other party’s name or on its behalf.
- US Government Restricted Rights. This Section applies to all acquisitions of the Service by or for the US federal government, or by any prime contractor or subcontractor (at any tier) under any contract, grant, cooperative agreement, or other activity with the federal government for the Government’s end use. The Software and Services are “commercial items” as that term is defined at FAR 2.101. If Customer is an Executive Agency (as defined in FAR 2.101) of the U.S. Federal Government (“Government”), NephoSec provides the Software and Services, including any related technical data and/or professional services in accordance with the following: If a right to access the Software and Services is procured by or on behalf of any Executive Agency (other than an Executive Agency within the Department of Defense (DoD)), the Government is granted, in accordance with FAR 12.211 (Technical Data) and FAR 12.212 (Computer Software), only those rights in technical data and software customarily provided to NephoSec’s customers as such rights are described in this Agreement. If a right to access the Software and Services is procured by or on behalf of any Executive Agency within the DoD, the Government is granted, in accordance with DFARS 227.7202-3 (Rights in commercial computer software or commercial computer software documentation), only those rights in technical data and software that are customarily provided to NephoSec’s customers as such rights are described in this Agreement. In addition, DFARS 252.227-7015 (Technical Data – Commercial Items) applies to technical data provided by NephoSec to an Executive Agency within the DoD. Note, however, that Subpart 227.72 does not apply to computer software or computer Service documentation acquired under GSA schedule contracts. Except as expressly permitted under this Agreement, no other rights or licenses are granted to the Government. Any rights requested by the Government and not granted under this Agreement must be separately agreed in writing with NephoSec. This Section 11.6 of the Agreement is in lieu of, and supersedes, any other FAR, DFARS, or other clause, provision, or supplemental regulation that addresses Government rights in the Software and Services.
- Force Majeure. Other than payment obligations hereunder, neither party will be liable for any inadequate performance to the extent caused by a condition that was beyond the party’s reasonable control (including, but not limited to, natural disaster, act of war or terrorism, riot, global health crisis, acts of God, or government intervention), except for mere economic hardship, so long as the party continues to use commercially reasonable efforts to resume performance.
- No Reliance. Customer represents that it has not relied on the availability of any future version of the Software or any future product or service in executing this Agreement or purchasing any Software hereunder.
- Notices. Unless specified otherwise herein, (i) all notices must be in writing and addressed to the attention of the other party’s legal department and primary point of contact, and (ii) notice will be deemed given: (a) when verified by written receipt if sent by personal courier, overnight courier, or when received if sent by mail without verification of receipt; or (b) when verified by automated receipt or electronic logs if sent by email. When sent by email, notices must be sent to NephoSec at legal@nephosec.com.
- Publicity. Customer acknowledges that NephoSec may use Customer’s name and logo for the purpose of identifying Customer as a customer of NephoSec products and/or services. NephoSec will cease using the customer’s name and logo upon written request.
- Compliance with Law. Each party agrees to comply with all federal, state and local laws and regulations including but not limited to export law, and those governing the use of network scanners, vulnerability assessment software products, encryption devices, user monitoring, and related software in all jurisdictions in which systems are scanned, scanning is controlled, or users are monitored.
NephoSec and Customer have caused this Agreement to be executed by their duly authorized representatives as of the Effective Date.