Validatar Cloud Terms of Service 2024-04-15

This is an archived version of our Validatar Cloud Terms of Service from April 15, 2024. View the current version here.

BY INDICATING YOUR ACCEPTANCE OF THIS AGREEMENT OR ACCESSING OR USING ANY VALIDATAR OFFERINGS, YOU ARE ACCEPTING ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO THESE TERMS AND CONDITIONS, YOU MAY NOT USE ANY VALIDATAR OFFERINGS. YOU AGREE THAT THIS AGREEMENT IS ENFORCEABLE LIKE ANY WRITTEN AGREEMENT SIGNED BY YOU.

IF YOU ARE USING ANY VALIDATAR OFFERINGS AS AN EMPLOYEE, CONTRACTOR, OR AGENT OF A CORPORATION, PARTNERSHIP OR SIMILAR ENTITY, THEN YOU MUST BE AUTHORIZED TO SIGN FOR AND BIND SUCH ENTITY IN ORDER TO ACCEPT THE TERMS OF THIS AGREEMENT, AND YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO DO SO. THE RIGHTS GRANTED UNDER THIS AGREEMENT ARE EXPRESSLY CONDITIONED UPON ACCEPTANCE BY SUCH AUTHORIZED PERSONNEL.

AGREEMENT

These Validatar Cloud Terms of Service (“Agreement”) are entered into by and between Validatar (see Section 14 for this and other capitalized defined terms) and the entity or person (other than a Reseller) placing an order for, or accessing, any Validatar Offerings (“Customer” or “you”). This Agreement consists of the terms and conditions set forth below and any ancillary documents (e.g., attachments, addenda, exhibits) expressly referenced as part of the Agreement, and any Order Forms that reference this Agreement.

The “Effective Date” of this Agreement is the date which is the earlier of (a) Customer’s initial access to any Validatar Offering (as defined below) through any online provisioning, registration or order process or (b) the effective date of the first Order Form referencing this Agreement.

Modifications to this Agreement: From time to time, Validatar may modify this Agreement. Unless otherwise specified by Validatar, changes become effective for Customer upon renewal of the then-current Subscription Term or upon the effective date of a new Order Form after the updated version of this Agreement goes into effect. Validatar will use reasonable efforts to notify Customer of the changes through communications via Customer’s Account, email or other means. Customer may be required to click to accept or otherwise agree to the modified Agreement before renewing a Subscription Term or upon the effective date of a new Order Form, and in any event continued use of any Validatar Offering after the updated version of this Agreement goes into effect will constitute Customer’s acceptance of such updated version.

1. Use of Service

1.1. Service Provision and Access; Client Software. Validatar will make the Service available to Customer for the Subscription Term solely for use by Customer and its Users in accordance with the terms and conditions of this Agreement, the Documentation, and the Order Form. Customer may permit its Contractors and Affiliates to serve as Users provided that any use of the Service by each such Contractor or Affiliate is solely for the benefit of Customer or such Affiliate. Customer shall be responsible for each User’s compliance with this Agreement, and acts or omissions by any User shall be deemed acts or omissions by Customer. To the extent Customer installs Client Software in connection with its use of the Service, Validatar grants to Customer and its Users a limited, non-transferable, non-sublicensable, non-exclusive license during the Subscription Term to use the object code form of the Client Software internally in connection with Customer’s and its Affiliates’ use of the Service, subject to the terms and conditions of this Agreement and the Documentation.

1.2. Affiliates. Customer Affiliates may purchase Validatar Offerings from Validatar by executing an Order Form which is governed by the terms of this Agreement. This will establish a new and separate agreement between the Customer Affiliate and the Validatar entity signing such Order Form. If the Customer Affiliate resides in a different country than Customer, then the Order Form may include modifications to terms applicable to the transaction(s) (including, but not limited to, tax terms and governing law).

1.3. Compliance with Applicable Laws. Validatar will provide the Validatar Offerings in accordance with its obligations under laws and government regulations applicable to Validatar’s provision of such Validatar Offerings to its customers generally, including, without limitation, those related to data privacy and data transfer, international communications, and the exportation of Validatar Offerings, without regard to Customer’s particular use of the Validatar Offerings and subject to Customer’s use of the Validatar Offerings in accordance with this Agreement.

1.4. Sample Data; Third-Party Applications. Validatar may make Sample Data available for Customer. Customer acknowledges that Sample Data is example data only, which may not be complete, current, or accurate. Customer will not (and will not permit any third party to) copy or export any Sample Data and agrees that Validatar may delete or require Customer to cease using Sample Data at any time upon advance notice. Validatar may also provide URL links or interconnectivity within the Service to facilitate Customer’s use of Third-Party Applications, at Customer’s sole discretion. Notwithstanding the foregoing, any procurement or use of Third-Party Applications is solely between Customer and the applicable party, and Validatar will have no liability for such Third-Party Applications under this Agreement.

1.5. General Restrictions. Customer will not (and will not permit any third party to): (a) sell, rent, lease, license, distribute, provide access to, sublicense, or otherwise make available the Service (or any Deliverables, if applicable) to a third party (except as set forth in an SOW, as applicable) or in a service bureau or outsourcing offering; (b) use the Service to provide, or incorporate the Service into, any substantially similar cloud-based service for the benefit of a third party; (c) reverse engineer, decompile, disassemble, or otherwise seek to obtain the source code or non-public APIs to the Service, except to the extent expressly permitted by applicable law (and then only upon advance written notice to Validatar); (d) remove or obscure any proprietary or other notices contained in the Service; or (e) use any Validatar Offerings in violation of the Acceptable Use Policy.

2. Customer Data

2.1. Rights in Customer Data. As between the parties, Customer or its licensors retain all right, title and interest (including any and all intellectual property rights) in and to the Customer Data and any modifications made thereto in the course of operation of the Service. Subject to the terms of this Agreement, Customer hereby grants to Validatar a non-exclusive, worldwide, royalty-free right to process the Customer Data solely to the extent necessary to provide the Validatar Offerings to Customer, to prevent or address service or technical problems therein, or as may be required by law.

2.2. Use Obligations.
a) In General. Customer’s use of the Validatar Offerings and all Customer Data will comply with applicable laws, government regulations, and any other legal requirements, including but not limited to, any data localization or data sovereignty laws, regulations, and any other third-party legal requirements applicable to Customer. Customer is solely responsible for the accuracy, content and legality of all Customer Data. Customer warrants that Customer has and will have sufficient rights in the Customer Data to grant the rights to Validatar under this Agreement and that the processing of Customer Data by Validatar in accordance with this Agreement will not violate any laws or the rights of any third party.
b) HIPAA Data. Customer agrees not to process any HIPAA Data in the Service unless Customer has entered into a BAA with Validatar. Unless a BAA is in place, Validatar will have no liability under this Agreement for HIPAA Data, notwithstanding anything to the contrary in this Agreement or in HIPAA or any similar federal or state laws, rules or regulations. If Customer is permitted to process HIPAA Data in the Service, then Customer may process HIPAA Data in the Service only by providing it as Customer Data. Upon mutual execution of the BAA, the BAA is incorporated by reference into this Agreement and is subject to its terms.

2.3. Data Privacy. The parties shall comply with the DPA found at https://www.validatar.com/legal/data-processing-addendum

3. Security. The parties shall comply with the Security Addendum found at https://www.validatar.com/legal/security-addendum

4. Intellectual Property

4.1. Validatar Technology. Customer agrees that Validatar or its suppliers retain all right, title and interest (including all patent, copyright, trademark, trade secret and other intellectual property rights) in and to the Validatar Technology. Except for the express limited rights set forth in this Agreement, no right, title or interest in any Validatar Technology is granted to Customer. Further, Customer acknowledges that the Service is offered as an online, hosted solution, and that Customer has no right to obtain a copy of the underlying computer code for the Service, except (if applicable) for the Client Software in object code format. Validatar may freely use and incorporate any suggestions, comments or other feedback about the Validatar Offerings voluntarily provided by Customer or Users into the Validatar Technology.

4.2. Usage Data. Notwithstanding anything to the contrary in this Agreement, Validatar may collect and use Usage Data to develop, improve, support, and operate its products and services. Validatar may not share any Usage Data that includes Customer’s Confidential Information with a third party except (a) in accordance with Section 5 (Confidentiality) of this Agreement, or (b) to the extent the Usage Data is aggregated and anonymized such that Customer and Customer’s Users cannot be identified.

4.3. Customer Reference. Validatar may identify Customer as its customer to other Validatar customers or prospective customers, including for purposes of facilitating Customer-controlled data sharing hereunder. Without limiting the foregoing, Validatar may use and display Customer’s name, logo, trademarks, and service marks on Validatar’s website and in Validatar’s marketing materials in connection with identifying Customer as a customer of Validatar. Upon Customer’s written request, Validatar will promptly remove any such marks from Validatar’s website and, to the extent commercially feasible, Validatar’s marketing materials.

5. Confidentiality. Each party (as “Receiving Party”) will use the same degree of care that it uses to protect the confidentiality of its own confidential information of like kind (but not less than reasonable care) to: (a) not use any Confidential Information of the other party (the “Disclosing Party”) for any purpose outside the scope of this Agreement; and (b) except as otherwise authorized by the Disclosing Party in writing, limit access to Confidential Information of the Disclosing Party to those of its and its Affiliates’ employees and contractors who need that access for purposes consistent with this Agreement and who are bound by obligations of confidentiality to the Receiving Party containing protections not materially less protective of the Confidential Information than those herein. If Receiving Party is required by law, regulation or court order to disclose Confidential Information, then Receiving Party shall, to the extent legally permitted, provide Disclosing Party with advance written notice and cooperate in any effort to obtain confidential treatment of the Confidential Information including, without limitation, the opportunity to seek appropriate administrative or judicial relief. The Receiving Party acknowledges that disclosure of Confidential Information would cause substantial harm for which damages alone would not be a sufficient remedy, and therefore that upon any such disclosure by the Receiving Party, the Disclosing Party will be entitled to seek appropriate equitable relief in addition to whatever other remedies it might have at law.

6. Fees and Payment; Taxes; Payment Disputes

6.1. Fees and Payment. All Fees and payment terms are as set forth in the applicable Order Form. Except as expressly set forth in this Agreement and to the extent permitted by law, all payment obligations are non-cancelable and Fees are non-refundable. If Customer issues a purchase order upon entering into an Order Form, then: (i) any such purchase order submitted by Customer is for its internal purposes only, and Validatar rejects, and in the future is deemed to have rejected, any purchase order terms to the extent they add to or conflict in any way with this Agreement or the applicable Order Form and such additional or conflicting terms will have no effect; (ii) it shall be without limitation to Validatar’s right to collect Fees owing hereunder; (iii) it shall be for the total Fees owing under the applicable Order Form; and (iv) on request, Validatar will reference the purchase order number on its invoices (solely for administrative convenience), so long as Customer provides the purchase order reasonably in advance of the invoice date. Validatar will invoice Customer using the billing contact information set forth in the applicable Order Form or as updated by Customer in the Service.

6.2. Taxes. Fees do not include Taxes. Customer is responsible for paying all Taxes associated with its purchases hereunder, including without limitation all use or access of the Validatar Offerings by its Users. If Validatar has the legal obligation to pay or collect Taxes for which Customer is responsible under this section, Validatar will invoice Customer and Customer will pay that amount unless Customer provides Validatar with a valid tax exemption certificate authorized by the appropriate taxing authority. Taxes will not be deducted from payments to Validatar, except as required by applicable law, in which case Customer will increase the amount payable as necessary so that, after making all required deductions and withholdings, Validatar receives and retains (free from any liability for Taxes) an amount equal to the amount it would have received had no such deductions or withholdings been made. Upon Validatar’s request, Customer will provide to Validatar its proof of withholding tax remittance to the respective tax authority. Where applicable, Customer will provide its VAT/GST Registration Number(s) on the Order Form to confirm the business use of the purchased services.

6.3. Payment Disputes. Validatar will not exercise its rights under Section 7.2 (Termination for Cause) or Section 7.5(a) (Suspension of the Validatar Offerings) with respect to non-payment by Customer if Customer is disputing the applicable charges reasonably and in good faith and is cooperating diligently to resolve the dispute. If the parties are unable to resolve such a dispute within thirty (30) days, each party shall have the right to seek any remedies it may have under this Agreement, at law or in equity, irrespective of any terms that would limit remedies on account of a dispute. For clarity, any undisputed amounts must be paid in full.

6.4. Reseller Orders. Customer may procure certain Validatar Offerings through a Reseller pursuant to a Reseller Arrangement. Validatar will only be obligated to provide the Validatar Offerings to Customer in connection with a Reseller Arrangement if Validatar and Reseller have executed an Order Form for such purchase. Customer acknowledges and agrees that, solely in connection with the purchase by Customer through a Reseller Arrangement: (a) Validatar may share information with Reseller related to Customer’s use and consumption of the Validatar Offerings; (b) notwithstanding anything to contrary in this Agreement, references to “Customer” in each of the defined terms “Fees” and “Order Form” in this Agreement shall be replaced with “Reseller,” and all payments of fees, refunds and credits, if any, are payable by or to the Reseller; (c) this Agreement governs Customer’s use of the Validatar Offerings, notwithstanding anything to the contrary in the Reseller Arrangement; and (d) Reseller is not authorized to make any changes to this Agreement or otherwise authorized to make any warranties, representations, promises or commitments on behalf of Validatar or in any way concerning the Validatar Offerings.

7. Term and Termination

7.1. Term. This Agreement is effective as of the Effective Date and will remain in effect until terminated in accordance with its terms. If there is no Order Form currently in effect, either party may terminate this Agreement upon written notice to the other party. Each Order Form will terminate upon expiration of the applicable Subscription Term, unless expressly stated otherwise therein or in this Agreement.

7.2. Termination for Cause. Either party may terminate this Agreement (including all related Order Forms) if the other party: (a) fails to cure any material breach of this Agreement (including a failure to pay Fees) within thirty (30) days after written notice (without limiting Section 6.3 (Payment Disputes)); (b) ceases operation without a successor; or (c) seeks protection under any bankruptcy, receivership, trust deed, creditors’ arrangement, composition, or comparable proceeding, or if any such proceeding is instituted against that party and is not dismissed within sixty (60) days (to the extent such termination is not prohibited by law). Except where an exclusive remedy is specified, the exercise by either party of any remedy under this Agreement, including termination, will be without prejudice to any other remedies it may have under this Agreement, by law or otherwise. For any termination of this Agreement by Customer for cause in accordance with Section 7.2(a), Customer shall be entitled to a refund of any prepaid unused Fees for the Service purchased hereunder.

7.3. Effect of Termination; Customer Data Retrieval. Upon written notice to Validatar, Customer will have up to thirty (30) calendar days from termination or expiration of this Agreement to access the Service solely to the extent necessary to retrieve Customer Data (“Retrieval Right”). If Customer exercises its Retrieval Right, this Agreement and the applicable Order Form shall continue in full force and effect for the duration of the Retrieval Right. Validatar shall have no further obligation to make Customer Data available after the latter of (a) the effective date of termination of this Agreement, or (b) the Retrieval Right period, if applicable, and thereafter Validatar shall promptly delete the Customer Data. After the Retrieval Right period, Customer will have no further access to Customer Data and shall cease use of and access to the Validatar Offerings (including any related Validatar Technology) and delete all copies of Client Software, Documentation, any associated passwords or access codes, and any other Validatar Confidential Information in its possession. Notwithstanding any termination or anything to the contrary in this Agreement or any Order Form, Customer shall pay for all of its use of the Validatar

7.4. Survival. The following sections will survive any expiration or termination of this Agreement: 1.4 (General Restrictions), 4 (Intellectual Property), 5 (Confidentiality), 6.1 (Fees and Payment), 6.2 (Taxes), 7 (Term and Termination), 8.3 (Warranty Disclaimer), 11 (Indemnification), 12 (Limitation of Remedies and Damages), 13 (General Terms), and 14 (Definitions).

7.5. Suspension of the Validatar Offerings. In addition to any of its other rights or remedies (including, without limitation, any termination rights) set forth in this Agreement, Validatar reserves the right to suspend provision of the Validatar Offerings: (a) if any Fees are thirty (30) days or more overdue (and are not otherwise subject to Section 6.3 (Payment Disputes)); (b) if Validatar deems such suspension necessary as a result of Customer’s breach of Sections 1.4 (General Restrictions) or 2.2 (Use Obligations); (c) if Validatar reasonably determines suspension is necessary to avoid material harm to Validatar or its customers, including if the Service is experiencing denial of service attacks, mail flooding, or other attacks or disruptions outside of Validatar’s control; or (d) as required by law or at the request of governmental entities.

8. Warranty

8.1. Service Warranty. Validatar warrants that: (a) the Service will operate in substantial conformity with the applicable Documentation; and (b) Technical Services and Deliverables will be provided in a professional and workmanlike manner and substantially in accordance with the specifications in the applicable SOW. If Validatar is not able to correct any reported non-conformity with this warranty, either party may terminate the applicable Order Form or SOW (as applicable), and Customer, as its sole remedy, will be entitled to receive a refund of any prepaid unused Fees for the applicable Service or Technical Services purchased thereunder. This warranty will not apply if the error or non-conformance was caused by: (i) Customer’s misuse of the Service or Deliverables; (ii) modifications to the Service or Deliverables by Customer or any third party; (iii) External Offerings; or (iv) any services or hardware of Customer or any of its third parties used by Customer in connection with the Service or Deliverables. For Technical Services and Deliverables, this warranty will not apply unless Customer provides written notice of a claim within thirty (30) days after expiration of the applicable SOW.

8.2. Mutual Warranty. Each party warrants that it has validly entered into this Agreement and has the legal power to do so.

8.3. Warranty Disclaimer. TO THE EXTENT PERMITTED BY LAW AND EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, EACH VALIDATAR OFFERING, THE CLIENT SOFTWARE AND SAMPLE DATA ARE PROVIDED “AS IS,” AND VALIDATAR MAKES NO OTHER WARRANTIES, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY, TITLE, OR FITNESS FOR A PARTICULAR PURPOSE. VALIDATAR DOES NOT WARRANT THAT THE USE OF ANY VALIDATAR OFFERING WILL BE UNINTERRUPTED OR ERROR-FREE, NOR DOES VALIDATAR WARRANT THAT IT WILL REVIEW THE CUSTOMER DATA FOR ACCURACY.

9. Support and Availability. During a Subscription Term, Validatar will provide Customer the level of support for the Service set forth in the applicable Order Form, in accordance with the Support Policy.

10. Technical Services

10.1. Provision of Technical Services. Validatar will perform the Technical Services for Customer as set forth in each applicable SOW, subject to the terms and conditions of this Agreement.

10.2. Assistance. Customer acknowledges that timely access to applicable Customer Materials, resources, personnel, equipment or facilities is necessary for the provision of Technical Services. Customer agrees to provide such access and to reasonably cooperate with Validatar during a Technical Services project. Validatar will have no liability for any delay or deficiency to the extent resulting from Customer’s breach of its obligations under Section 10.

10.3. Customer Materials. Customer hereby grants Validatar a limited right to use any Customer Materials solely for the purpose of providing Technical Services to Customer. Customer will retain any of its rights (including all intellectual property rights) in and to the Customer Materials. Customer Materials comprising Confidential Information will be subject to Section 5 (Confidentiality). Customer warrants that Customer has and will have sufficient rights in the Customer Materials to grant the rights to Validatar under this Agreement and that the Customer Materials will not violate any third-party rights.

10.4. Access to Customer Data under an SOW. With respect to access to any Customer Data under an SOW, Customer is solely responsible for ensuring that both the duration and scope of access is strictly limited to the access required under the specific SOW. Customer agrees that it will not grant Validatar access to Customer Data unless specifically required and noted in an SOW, and that Customer will grant any such access only during the term of the applicable Technical Services project. Unless otherwise specified in an SOW, Customer must ensure that: (a) any access to Customer Data that it grants is limited to read-only access in Customer’s development environment for the Service (and Customer will not grant access to any other environment, such as its test, production or disaster recovery); and (b) Customer will not grant access to any Customer Data that is unencrypted or contains sensitive data, including without limitation, any personal data, credit card or other financial account information, or protected health information. To the extent access to Customer Data is granted, unless otherwise specified in an SOW, Customer will provide Validatar with: (i) secure Customer workstations and networks for accessing Customer Data that are monitored, managed, configured, supported and maintained by Customer; and (ii) unique user ID/passwords to each Validatar resource that requires access to Customer Data, and these credentials will be solely managed by Customer.

10.5. License to Deliverables. The Technical Services Validatar performs (e.g., providing guidance on configuring the Service) and the resulting Deliverables are generally applicable to Validatar’s business and are part of Validatar Technology. Subject to the terms and conditions of this Agreement (including the restrictions in Section 1.4 (General Restrictions)), Validatar hereby grants Customer a limited, non-exclusive, royalty-free, non-transferable worldwide license to use the Deliverables internally solely in connection with such Customer’s use of the Service during the period in which such Customer has valid access to the Service. The parties may mutually agree to SOWs with additional terms and restrictions related to the use of Deliverables provided as part of that project, in which case those terms and restrictions will also apply for purposes of those Deliverables only.

10.6. Change Orders; Other Terms. Customer may submit written requests to Validatar to change the scope of Technical Services under an existing SOW. Validatar will promptly notify Customer if it believes that the requested change requires an adjustment to the fees, schedule, assumptions or scope for the performance of the Technical Services. Neither party is bound by changes to an SOW unless the parties have entered into a Change Order with respect thereto. Validatar may use subcontractors to deliver Technical Services but will remain responsible for their performance of those Technical Services under the applicable terms and conditions of this Agreement. For clarity, Customer will be responsible for any fees for the Service that are generated as part of the Technical Services.

11. Indemnification

11.1. Indemnification by Validatar. Validatar will defend Customer against any claim by a third party alleging that the Service or any Deliverable, when used in accordance with this Agreement, infringes any intellectual property right of such third party and will indemnify and hold harmless Customer from and against any damages and costs awarded against Customer or agreed in settlement by Validatar (including reasonable attorneys’ fees) resulting from such claim. If Customer’s use of the Service or Deliverable results (or in Validatar’s opinion is likely to result) in an infringement claim, Validatar may either: (a) substitute functionally similar products or services; (b) procure for Customer the right to continue using the Service or Deliverable; or if (a) and (b) are not commercially reasonable, (c) terminate this Agreement, or the applicable Order Form or SOW, and refund to Customer any prepaid unused Fees for the applicable Service or Deliverable. The foregoing indemnification obligation of Validatar will not apply to the extent the applicable claim is attributable to: (1) the modification of the Service or Deliverable by any party other than Validatar or based on Customer’s specifications or requirements; (2) the combination of the Service or Deliverable with products or processes not provided by Validatar; (3) any use of the Service or Deliverables in non-conformity with this Agreement; or (4) any action arising as a result of Customer Data, or any deliverables or components not provided by Validatar. This section sets forth Customer’s sole remedy with respect to any claim of intellectual property infringement.

11.2. Indemnification by Customer. Customer will defend Validatar against any claim by a third party arising from or relating to any Customer Data, Customer Materials or any Customer-offered product or service used in connection with the Service and will indemnify and hold harmless Validatar from and against any damages and costs awarded against Validatar or agreed in settlement by Customer (including reasonable attorneys’ fees) resulting from such claim.

11.3. Indemnification Procedures.In the event of a potential indemnity obligation under Section 11, the indemnified party will: (a) promptly notify the indemnifying party in writing of the claim, (b) allow the indemnifying party the right to control the investigation, defense and settlement (if applicable) of such claim at the indemnifying party’s sole cost and expense, and (c) upon request of the indemnifying party, provide all necessary cooperation at the indemnifying party’s expense. Failure by the indemnified party to notify the indemnifying party of a claim under Section 11 shall not relieve the indemnifying party of its obligations under Section 11. However, the indemnifying party shall not be liable for any litigation expenses the indemnified party incurred before such notice was given, or for any damages and/or costs resulting from any material prejudice caused by the delay or failure to provide notice to the indemnifying party in accordance with this section. The indemnifying party may not settle any claim that would bind the indemnified party to any obligation (other than payment covered by the indemnifying party or ceasing to use infringing materials) or require any admission of fault by the indemnified party, without the indemnified party’s prior written consent, such consent not to be unreasonably withheld, conditioned or delayed. Any indemnification obligation under Section 11 will not apply if the indemnified party settles or makes any admission with respect to a claim without the indemnifying party’s prior written consent.

12. Limitation of Remedies and Damages. EXCEPT AS TO “EXCLUDED CLAIMS,” TO THE MAXIMUM EXTENT PERMITTED BY LAW, AND NOTWITHSTANDING ANY OTHER PROVISION OF THIS AGREEMENT:

NEITHER PARTY NOR ITS AFFILIATES SHALL BE LIABLE TO THE OTHER PARTY OR ITS AFFILIATES FOR ANY LOSS OF USE, LOST OR INACCURATE DATA, INTERRUPTION OF BUSINESS, COSTS OF DELAY, COVER COSTS, LOST PROFITS, OR ANY INDIRECT, SPECIAL, INCIDENTAL, RELIANCE, PUNITIVE, EXEMPLARY OR CONSEQUENTIAL DAMAGES OF ANY KIND, EVEN IF INFORMED OF THE POSSIBILITY OF SUCH DAMAGES IN ADVANCE;
Except for (i) CUSTOMER’S INDEMNIFICATION OBLIGATIONS UNDER SECTION 11.1, AND (ii) EITHER PARTY’S OBLIGATIONS UNDER SECTION 5 (CONFIDENTIALITY) AND SUBJECT TO SUBSECTION (C) BELOW, EACH PARTY’S AND ITS AFFILIATES’ TOTAL LIABILITY TO THE OTHER PARTY AND ITS AFFILIATES FOR ALL CLAIMS IN THE AGGREGATE (FOR DAMAGES OR LIABILITY OF ANY TYPE) SHALL NOT EXCEED THE AMOUNT ACTUALLY PAID OR PAYABLE TO VALIDATAR IN THE PRIOR 12 MONTHS UNDER THE APPLICABLE ORDER FORM(S) OR SOW TO WHICH SUCH LIABILITY RELATES (“GENERAL LIABILITY CAP”);
IN THE CASE OF “DATA PROTECTION CLAIMS,” EACH PARTY’S AND ITS AFFILIATES’ TOTAL LIABILITY TO THE OTHER PARTY AND ITS AFFILIATES FOR ALL CLAIMS IN THE AGGREGATE (FOR DAMAGES OR LIABILITY OF ANY TYPE) SHALL NOT EXCEED TWO TIMES (2X) THE AMOUNT ACTUALLY PAID OR PAYABLE TO VALIDATAR IN THE PRIOR TWELVE (12) MONTHS UNDER THE APPLICABLE ORDER FORM(S) OR SOW TO WHICH SUCH LIABILITY RELATES (“DATA PROTECTION CLAIMS CAP”);
IN NO EVENT SHALL EITHER PARTY (OR ITS RESPECTIVE AFFILIATES) BE LIABLE FOR THE SAME EVENT UNDER BOTH THE GENERAL LIABILITY CAP AND THE DATA PROTECTION CLAIMS CAP. SIMILARLY, THOSE CAPS SHALL NOT BE CUMULATIVE; IF A PARTY (AND/OR ITS AFFILIATES) HAS ONE OR MORE CLAIMS SUBJECT TO THE “GENERAL LIABILITY CAP” AND THE “DATA PROTECTION CLAIMS CAP,” THE MAXIMUM TOTAL LIABILITY FOR ALL CLAIMS IN THE AGGREGATE SHALL NOT EXCEED THE “DATA PROTECTION CLAIMS CAP”;
THE PARTIES AGREE THAT SECTION 12 WILL APPLY REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE AND WILL APPLY EVEN IF ANY LIMITED REMEDY SPECIFIED IN THIS AGREEMENT IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE; AND
THE APPLICABLE MONETARY CAPS SET FORTH IN SECTION 12 SHALL APPLY, ON AN AGGREGATED BASIS, ACROSS THIS AGREEMENT AND ANY AND ALL SEPARATE AGREEMENT(S) GOVERNING CUSTOMER’S USE OF THE “VALIDATAR OFFERINGS” ENTERED INTO BETWEEN VALIDATAR AND ANY CUSTOMER “AFFILIATES,” INCLUDING WITHOUT LIMITATION, AS CONTEMPLATED BY SECTION 1.2 (AFFILIATES).

13. General Terms

13.1. Assignment. This Agreement will bind and inure to the benefit of each party’s permitted successors and assigns. Neither party may assign this Agreement without the advance written consent of the other party, except that either party may assign this Agreement in its entirety in connection with a merger, reorganization, acquisition, or other transfer of all or substantially all of such party’s assets or voting securities to such party’s successor . Each party shall promptly provide notice of any such assignment. Any attempt to transfer or assign this Agreement except as expressly authorized under this section will be null and void.

13.2. Severability; Interpretation; Conflicts. If a court of competent jurisdiction holds any provision of this Agreement to be unenforceable or invalid, that provision will be limited to the minimum extent necessary so that this Agreement will otherwise remain in effect. Section headings are inserted for convenience only and shall not affect interpretation of this Agreement. Except for the Acceptable Use Policy, the DPA, the Security Addendum and the Support Policy, each of which shall govern solely with respect to the subject matter therein, this Agreement governs and controls in the event of a conflict with any other ancillary documents or provisions applicable to the Validatar Offerings unless otherwise expressly agreed in writing by the parties.

13.3. Dispute Resolution. Each party agrees that before it seeks any form of legal relief (except for a provisional remedy as explicitly set forth below) it shall provide written notice to the other party of the specific issue(s) in dispute (and reference the relevant provisions of the contract between the parties which are allegedly being breached). Within thirty (30) days after such notice, knowledgeable executives of the parties shall hold at least one meeting (in person or by video- or tele-conference) for the purpose of attempting in good faith, to resolve the dispute. The parties agree to maintain the confidential nature of all disputes and disagreements between them, including, but not limited to, informal negotiations, mediation or arbitration, except as may be necessary to prepare for or conduct these dispute resolution procedures or unless otherwise required by law or judicial decision. The dispute resolution procedures in this section shall not apply to claims subject to indemnification under Section 11 (Indemnification) or prior to a party seeking a provisional remedy related to claims of misappropriation or ownership of intellectual property, trade secrets or Confidential Information.

13.4. Governing Law; Jurisdiction and Venue . This Agreement will be governed by the laws of the State of Texas and the United States without regard to conflicts of law provisions thereof, and without regard to the United Nations Convention on Contracts for the International Sale of Goods; and the jurisdiction and venue for actions related to the subject matter hereof will be the state and federal courts located in Dallas County, Texas, and both parties hereby submit to the personal jurisdiction of such courts.

13.5. Notice. Any notice or communication required or permitted under this Agreement will be in writing to the parties at the addresses set forth in this Agreement or at such other address as may be given in writing by either party to the other in accordance with this section and will be deemed to have been received by the addressee upon: (a) personal delivery; (b) the second business day after being mailed or couriered; or (c) the day of sending by email, except for notices of breach (other than for non-payment) or an indemnifiable claim, which for clarity must be made by mail or courier. Email notifications to Validatar shall be to legal@validatar.com.

13.6. Amendments; Waivers.No supplement, modification, or amendment of this Agreement will be binding, unless executed in writing by a duly authorized representative of each party to this Agreement, except as expressly set forth herein. No waiver will be implied from conduct or failure to enforce or exercise rights under this Agreement, nor will any waiver be effective unless in a writing signed by a duly authorized representative on behalf of the party claimed to have waived. No terms or conditions stated in a Customer purchase order, vendor onboarding process or web portal, or any other Customer order documentation (excluding Order Forms) shall be incorporated into or form any part of this Agreement, and all such terms or conditions shall be null and void, notwithstanding any language to the contrary therein, whether signed before or after this Agreement.

13.7. Entire Agreement.This Agreement is the complete and exclusive statement of the mutual understanding of the parties and supersedes and cancels all previous written and oral agreements and communications relating to the subject matter of this Agreement. Notwithstanding the foregoing, Optional Offerings may be made available for Customer’s use in its sole discretion. Validatar may change and update the Service (in which case Validatar may update the applicable Documentation accordingly), subject to the warranty in Section 8.1 (Service Warranty). For clarity, all URL terms expressly referenced herein include any updates made thereto, as posted to https://www.validatar .com/legal or a successor website designated by Validatar.

13.8. Third-Party Beneficiaries.There are no third-party beneficiaries under this Agreement, except to the extent expressly stated in this Agreement.

13.9. Force Majeure.Neither party will be liable to the other for any delay or failure to perform any obligation under this Agreement (except for a failure to pay Fees) if the delay or failure results from any cause beyond such party’s reasonable control, including but not limited to acts of God, labor disputes or other industrial disturbances, systemic electrical, telecommunications, or other utility failures, earthquake, storms or other elements of nature, blockages, embargoes, riots, public health emergencies (including pandemics and epidemics), acts or orders of government, acts of terrorism, or war.

13.10. Independent Contractors.The parties to this Agreement are independent contractors. There is no relationship of partnership, joint venture, employment, franchise or agency created hereby between the parties. Neither party will have the power to bind the other or incur obligations on the other party’s behalf without the other party’s prior written consent and neither party’s employees are eligible for any form or type of benefits, including, but not limited to, health, life or disability insurance, offered by the other party to its employees.

13.11. Export Control.Each party agrees to comply with all export and import laws and regulations, including without limitation, those of the United States, applicable to such party in connection with its respective provision or use of the Service under this Agreement. Without limiting the foregoing, Customer represents and warrants that it: (a) is not listed on, or majority-owned by any entity listed on, any U.S. government list of prohibited or restricted parties; (b) is not located in (or a national of) a country that either is subject to a U.S. government embargo or has been designated by the U.S. government as a “state sponsor of terrorism”; (c) will not (and will not permit any third parties to) access or use the Service in violation of any U.S. export embargo, prohibition or restriction; and (d) will not submit to the Service any information that is controlled under the U.S. International Traffic in Arms Regulations.

13.12. U.S. Government Terms.

Federal Government End Use Provisions. To the extent Customer is an agency of or otherwise represents the United States federal government, (i) it hereby agrees that the Service qualifies as a “commercial product” as defined by FAR Part 2.101 or the state law corollary, and (ii) Validatar provides the Validatar Offerings, including all related software and, to the extent applicable, the Validatar Technology, for ultimate federal government end use solely in accordance with the following: Government technical data and software rights related to the Validatar Offerings include only those rights customarily provided to the public as defined in this Agreement. This customary commercial license is provided in accordance with the United States Federal Acquisition Regulation (“FAR”) section 12.211 (Technical Data) and FAR section 12.212 (Software) and, for Department of Defense transactions, the United States Defense Federal Acquisition Regulation Supplement (“DFARS”) section 252.227-7015 (Technical Data Commercial Items) and DFARS section 227.7202-3 (Rights in Commercial Computer Software or Computer Software Documentation). If a government agency has a need for rights not granted under these terms, it must negotiate with Validatar to determine if there are acceptable terms for granting those rights, and a mutually acceptable written addendum specifically granting those rights must be included in any applicable agreement.

13.13. Execution. The parties may execute any documents hereunder in counterparts, each of which will be deemed an original and all of which together will be considered one and the same agreement. The parties will be bound by signatures made by hand or electronic means, which may be transmitted to the other party by mail, hand delivery, email and/or any electronic method and will have the same binding effect as any original ink signature.

14. Definitions

“Acceptable Use Policy” or “AUP” means Validatar’s acceptable use policy, made available at.

“Account” means Customer’s account in the applicable Service in which Customer stores and processes Customer Data.

“Affiliate” means an entity that, directly or indirectly, owns or controls, is owned or is controlled by, or is under common ownership or control with a party. As used in this definition, “control” means the power to direct the management or affairs of an entity and “ownership” means the beneficial ownership of more than fifty percent (50%) of the voting equity securities or other equivalent voting interests of an entity.

“BAA” means a business associate agreement governing the parties’ respective obligations with respect to any HIPAA Data processed by Customer in the Service in accordance with the terms of this Agreement.

“Change Order” means a change order or amendment to an SOW that is agreed to and signed in writing by both parties with respect to any Technical Services to be performed hereunder.

“Client Software” is any desktop client software that is made available to Customer by Validatar for installation on Users’ computers to be used in connection with the applicable Service.

“Confidential Information” means all information that is identified as confidential at the time of disclosure by the Disclosing Party or reasonably should be known by the Receiving Party to be confidential or proprietary due to the nature of the information disclosed and the circumstances surrounding the disclosure. All Customer Data will be deemed Confidential Information of Customer without any marking or further designation. All Validatar Technology and the terms and conditions of this Agreement will be deemed Confidential Information of Validatar without any marking or further designation. Confidential Information shall not, however, include information that the Receiving Party can demonstrate: (a) was rightfully in its possession or known to it prior to receipt of the Confidential Information; (b) is or has become public knowledge through no fault of the Receiving Party; (c) is rightfully obtained by the Receiving Party from a third party without breach of any confidentiality obligation; or (d) is independently developed by employees of the Receiving Party.

“Contractor” means Customer’s and its Affiliates’ independent contractors and consultants.

“Customer Data” means any data or data files of any type that are uploaded by or on behalf of Customer for storage or processing in the Service.

“Customer Materials” means any materials provided to Validatar in connection with Technical Services.

“Data Protection Claims” means any claims arising from a party’s breach of Section 2.3 (Data Privacy), Section 3 (Security), Section 5 (Confidentiality) and/or the BAA (if any), where such breach results in the unauthorized disclosure of Customer Data, or breach of Section 2.2 (Use Obligations).

“Data Protection Claims Cap” is defined in Section 12 (Limitation of Remedies and Damages).

“Deliverables” means the guides, code (including SQL queries) or other deliverables that Validatar provides to Customer in connection with Technical Services, but excludes any compilers, assemblers, interpreters or similar tools Validatar may use to develop Deliverables.

“Disclosing Party” is defined in Section 5 (Confidentiality).

“Documentation” means Validatar’s technical documentation and usage guides expressly designated by Validatar as applicable to the Service at https://docs.validatar .com/.

“DPA” means the Customer Data Processing Addendum, made available at https://www.validatar .com/legal.

“Excluded Claims” means obligations and claims based on: (a) a party’s breach of its obligations in Section 5 (Confidentiality) (but excluding obligations and claims relating to Customer Data); (b) either party’s express obligations under Section 11 (Indemnification); and/or (c) liability which, by law, cannot be limited (e.g., tort claims for gross negligence and intentional misconduct).

“External Offerings” means separate or third-party data, databases, services, offerings or applications that are independent from, but interoperate with the Service, and may be procured or used by Customer. For clarity, External Offerings are subject to separate terms, and Validatar has no liability with respect thereto under this Agreement.

“FAR” and “DFARS” are respectively as defined in Section 13.12 (U.S. Government Terms).

“Fees” means the fees payable by Customer to Validatar for the applicable Validatar Offerings. For Technical Services, the applicable Fees are as set forth in the relevant Order Form or SOW, and “Fees” also includes travel, lodging, meal and other expenses incurred in the course of providing Technical Services, but only if the applicable SOW specifies that expenses are reimbursable.

“General Liability Cap” is defined in Section 12 (Limitation of Remedies and Damages).

“HIPAA” means the Health Insurance Portability and Accountability Act, as amended and supplemented.

“HIPAA Data” means any patient, medical or other protected health information regulated by HIPAA or any similar federal or state laws, rules or regulations.

“Optional Offerings” means optional features, functionality or other offerings that Customer may use in connection with or as part of the Service.

“Order Form” means the Validatar ordering document (and/or SOW, if applicable) governed by this Agreement that is signed by Validatar and Customer and specifies the Validatar Offerings procured by Customer.

“Preview(s)” means products, features, services, software, regions or cloud providers that Validatar does not yet make generally available, e.g., those that are labeled as “private preview,” “public preview,” “pre-release” or “beta.”

“Receiving Party” is defined in Section 5 (Confidentiality).

“Reseller” means a Validatar-authorized distributor, referral partner or reseller selling Validatar Offerings to Customer.

“Reseller Arrangement” means a separate agreement between Customer and Reseller, which may specify different terms than this Agreement regarding invoicing, taxes and payments.

“Retrieval Right” is defined in Section 7.3 (Effect of Termination; Customer Data Retrieval).

“Sample Data” means any data (including from third-party sources) provided or made available to Customer by Validatar solely for Customer’s internal testing, evaluation, and other non-production use of the Service during the Subscription Term, which Validatar may delete or require Customer to cease using at any time upon advance notice.

“Security Addendum” means the Validatar Security Addendum, made available at https://www.validatar .com/legal.

“Service” means the generally available software-as-a-service offering hosted by or on behalf of Validatar and ordered by or for Customer as set forth in an Order Form.

“Validatar” means Validatar, LLC .

“Validatar Offering(s)” means the Service, Technical Services (including any Deliverables), and any support and other ancillary services (including, without limitation, services to prevent or address service or technical problems) provided by Validatar.

“Validatar Technology” means the Service, Documentation, Client Software, Deliverables, and any and all related and underlying technology and documentation in any Validatar Offerings; and any derivative works, modifications, or improvements of any of the foregoing.

“SOW” or “Statement of Work” means a statement of work mutually agreed by Customer and Validatar for the provision of Technical Services and that is governed by this Agreement.

“Subscription Term” means the period of time during which Customer is authorized to access the relevant Validatar Offering(s), as specified in the applicable Order Form.

“Support Policy” means the Validatar Support Policy and Service Level Agreement made available at https://www.validatar .com/legal.

“Taxes” means taxes, levies, duties or similar governmental assessments of any nature, including, for example, any sales, use, GST, value-added, withholding, or similar taxes, whether domestic or foreign, or assessed by any jurisdiction, but excluding any taxes based on net income, property, or employees of Validatar.

“Technical Services” means the training, consulting, configuration or other professional services provided by Validatar to Customer under an Order Form or SOW.

“Third-Party Applications” means separate or third-party data, services, offerings, storage, software, networks, or applications (and other consulting services related thereto) made available by or on behalf of Customer or to Customer that interoperate with the Service and are subject to an independent agreement or supplemental terms to this Agreement.

“Usage Data” means usage and operations data in connection with the Customer’s use of the Service, including query logs and metadata (e.g., object definitions and properties).

“User” means the persons designated and granted access to the Service by or on behalf of Customer, including, as applicable, any of its and its Affiliates’ Contractors.

“VAT/GST Registration Number” means the value added tax/GST registration number of the business location(s) where Customer is legally registered and the ordered services are used for business use.