Upcoming Webinar: The New Framework for Modern Data Privacy and Security·Sign Up

CYRAL SERVICE TERMS

PLEASE READ THESE TERMS AND CONDITIONS CAREFULLY BEFORE USING THE SERVICE OFFERED BY CYRAL INC. (“CYRAL”). BY MUTUALLY EXECUTING ONE OR MORE ORDER FORMS WITH COMPANY WHICH REFERENCE THESE TERMS (EACH, AN “ORDER FORM”) OR BY ACCESSING OR USING THE SERVICE IN ANY MANNER, YOU OR THE ENTITY THAT YOU REPRESENT (“YOU” OR “CUSTOMER”) ARE UNCONDITIONALLY CONSENTING TO BE BOUND BY AND ARE BECOMING A PARTY TO THE SERVICE TERMS CONSISTING OF THIS PARAGRAPH AND THE FOLLOWING TERMS (THE “AGREEMENT”) WITH RESPECT TO THE SERVICE, TO THE EXCLUSION OF ALL OTHER TERMS. YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO ENTER INTO THIS AGREEMENT; IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF AN ORGANIZATION OR ENTITY, REFERENCES TO “CUSTOMER” AND “YOU” IN THIS AGREEMENT, EXCEPT THIS SENTENCE, REFER TO THAT ORGANIZATION OR ENTITY. PROVISION OF THE SERVICE IS CONDITIONED ON, AND CUSTOMER’S INSTALLATION OR USE OF THE SERVICE SHALL CONSTITUTE, CUSTOMER’S ASSENT TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE FOLLOWING, YOU MAY NOT USE OR ACCESS THE SERVICES IN ANY MANNER. IF THE TERMS OF THIS AGREEMENT ARE CONSIDERED AN OFFER, ACCEPTANCE IS EXPRESSLY LIMITED TO SUCH TERMS.

1. SCOPE OF SERVICE AND RESTRICTIONS

1.1 Access to and Scope of Service. Subject to Cyral’s receipt of the applicable Fees with respect to the service(s) specified in the corresponding Order Form (the “Service”), Cyral will use commercially reasonable efforts to make the Service available to Customer as set forth in this Agreement and the Order Form. Subject to Customer’s compliance with the terms and conditions of the Agreement and the Order Form, Customer may access and use the Service during the period specified in the Order Form and solely in accordance with the Entitlement. Any such use of the Service by Customer is authorized solely for Customer’s internal business and is subject to Customer’s compliance with the Entitlement and any additional limitations and restrictions specified in the Order Form.1.2 Entitlement. Customer’s use of the Service shall at all times be limited and subject to the use limitation and authorizations specified in the corresponding order confirmation email from Cyral (the “Order Confirmation”) or each Order Form (each, the “Entitlement”). The Entitlement shall include use limitations such as, but not limited to: a specific unit of measure such as data processed or number of requests (the “Authorized Units”); the number of authorized users of the Service (the “Authorized Identities”)); and the duration of the Service (the “Authorized Period”).1.3 Trial or No-fee Access. If Customer is accessing or making use of the Service on a no-fee basis (the “Limited Use”), Customer may use the Service provided that such use does not to exceed the use period or Service levels specified on the Cyral website or the corresponding Order Confirmation. Customer acknowledges and agrees that the Limited Use is provided on an “as-is” basis, and notwithstanding anything to the contrary in this Agreement, the Limited Use is provided without any indemnification, support, or warranties or representation of any kind. Additionally, Customer acknowledges and agrees that Cyral may terminate the Limited Use at any time and for any reason or modify the applicable terms by publishing a notice on the Cyral website.1.4 Restrictions. Customer will use the Service only in accordance with all applicable laws, including, but not limited to, laws related to data (whether applicable within the United States, the European Union, or otherwise). Customer agrees not to (and will not allow any third party to): (i) reverse engineer, decompile, disassemble, or otherwise attempt to discover the underlying structure, ideas, or algorithms of the Service or any software used to provide or make the Service available; (ii) remove or otherwise alter any proprietary notices or labels from the Service or any portion thereof; or (iii) rent, resell or otherwise allow any third party access to or use of the Service.1.5 Ownership Cyral retains all right, title, and interest in and to the Service, and any software, products, works or other intellectual property created, used, provided or made available by Cyral under or in connection with the Service. Customer may from time to time provide suggestions, comments or other feedback to Cyral with respect to the Service (“Feedback”). Customer shall, and hereby does, grant to Cyral a nonexclusive, worldwide, perpetual, irrevocable, transferable, sublicensable, royalty-free, fully paid up license to use, modify, copy and distribute the Feedback in connection with Cyral’s products and services. Nothing in this Agreement will impair Cyral’s right to develop, acquire, license, market, promote or distribute products, software or technologies that perform the same or similar functions as, or otherwise compete with any products, software or technologies that Customer may develop, produce, market, or distribute.1.6 Software Subject to the terms and conditions of this Agreement, including but not limited to receipt of all applicable Fees, to the extent Cyral makes Cyral proprietary software available to Customer, Cyral hereby grants to Customer, and Customer hereby accepts from Cyral, a limited, non-exclusive, non-transferable, non- assignable and non-sublicenseable license to: run such software solely as necessary to make use of the Service. Customer agrees that, it shall not: (a) exceed the scope of the licenses granted in this Agreement; (b) make copies of the software; (c) distribute, sublicense, assign, delegate, rent, lease, sell, time-share or otherwise transfer the benefits of, use under, or rights to, the license granted in Section 1; (d) reverse engineer, decompile, disassemble or otherwise attempt to learn the source code, structure or algorithms underlying the software, except to the extent required to be permitted under applicable law; (e) modify, translate or create derivative works of the software; (f) remove any copyright, trademark, patent or other proprietary notice that appears on the software or copies thereof.1.7 Customer Data and Personal Data. Customer is solely responsible for Customer Data including, but not limited to: (a) compliance with all applicable laws and this Agreement; (b) any claims relating to Customer Data; (c) any claims that Customer Data infringes, misappropriates, or otherwise violates the rights of any third party; and (d) backing up and maintaining Customer Data. Notwithstanding anything to the contrary, Customer acknowledges and agrees that Cyral may (i) internally use and modify Customer Data to provide the Services and any support or consultation services to Customer, and generating Aggregated Data (as defined below), and (ii) freely use and make available Aggregated Data for Cyral’s business purposes (including without limitation, for purposes of improving, operating, and marketing Cyral’s products and services). “Aggregated Data” means data submitted to, collected by, or generated by Cyral in connection with Customer’s use of the Service, but only in aggregate, de-identified form which is not linked specifically to Customer or any individual. For purposes of this Agreement, “Customer Data” shall mean any data, information or other material provided, uploaded, or submitted by Customer to the Service in the course of using the Service. Customer, not Cyral, shall have sole responsibility for the accuracy, quality, integrity, legality, reliability, appropriateness, and intellectual property ownership or right to use of all Customer Data. Customer hereby represents and warrants that it will not provide or make available to Cyral any Customer Data subject to the EU General Data Protection Regulation (the “GDPR”) or other applicable law or regulation with respect to data privacy. Cyral may retain Customer Data for up to thirty (30) days following the termination or expiration of the corresponding Order Form; thereafter, Customer acknowledges that Customer Data may be irretrievably deleted.1.8 Support. Subject to Customer’s payment of the corresponding fees, Cyral will use commercially reasonable efforts to provide Customer the Cyral support service specified in the Order Form or Order Confirmation.1.9 Service Suspension. Cyral may suspend Customer’s access to or use of the Service as follows: (a) immediately if Cyral reasonably believes Customer’s use of the Service may pose a security risk to or may adversely impact the Service; (b) following thirty (30) days written notice if Customer is in breach of this Agreement ; or (d) Customer has failed to pay Cyral the Fees with respect to the Service.1.10 Embedded Reporting, Compliance Routine; Data Access and Use. Customer acknowledges that the Service and/or software may contain automated reporting routines that will automatically identify and analyze certain aspects of use and performance of Service and/or the systems on which they are installed, as well as the operator and operating environment (including problems and issues that arise in connection therewith), and provide e-mail and other reports to Cyral; this includes, without limitation, information on usage that Cyral uses for billing purposes. Cyral will be entitled to inspect the installation and configuration of the Service and systems from time to time on reasonable notice. Cyral will be free to use for development, improvement, diagnostic and corrective purposes any data and information it so collects relating to diagnosis, problems, systems, performance, use or functionality, and may allow others to do so.

2. FEES, ORDER FORMS

2.1 Fees. Customer shall pay to Cyral the fees as set forth in each applicable Order Form(s) (collectively, the “Fees”). Customer acknowledges that it shall have no right to return or cancel the Service and that all Fees shall be non-refundable. All amounts payable to Cyral under this Agreement shall be paid in United States dollars and shall be due thirty (30) days from the date of invoice. Notwithstanding any other rights of Cyral, in the event of late payment by Customer, Cyral shall be entitled to interest on the amount owing at a rate of 1% per month or the highest rate allowed by applicable law, whichever is less. If Cyral is required to initiate legal action due to nonpayment of fees, Customer shall bear all costs resulting from the collection of such fees.2.2 Order Forms. Customer may place Order Forms for additional Services or to extend the term of the existing Service by specifying such order details in an Order Form agreed to in writing by the parties referencing the terms and conditions of this Agreement.2.3 Taxes. Any and all payments made by Cyral in accordance with this Agreement are exclusive of any taxes that might be assessed against Customer by any jurisdiction. Customer shall pay or reimburse Cyral for all value- added, sales, use, property and similar taxes; all customs duties, import fees, stamp duties, license fees and similar charges; and all other mandatory payments to government agencies of whatever kind, except taxes imposed on the net or gross income of Cyral. All amounts payable to Cyral under this Agreement shall be without set-off and without deduction of any taxes, levies, imposts, charges, withholdings and/or duties of any nature which may be levied or imposed, including without limitation, value added tax, customs duty and withholding tax.

3. TERM AND TERMINATION

3.1 Term. The term of this Agreement shall commence on the Effective and unless terminated earlier according to this Section 3, will end on the last day of the term specified in a last Order Form (the “Term”). Each Order Form will renew automatically at the end of the applicable term unless either party provides to the other advance written notice with respect to non-renewal at least ninety (90) days prior to the end of the then current term.3.2 Termination for Breach. This Agreement, including all Order Forms hereunder may be terminated: (a) by either party if the other has materially breached this Agreement, within thirty (30) calendar days after written notice of such breach to the other party; or (b) by Cyral upon written notice to Customer if Customer has made or attempted to make any assignment for the benefit of its creditors or any compositions with creditors, or has any action or proceedings under any bankruptcy or insolvency laws taken by or against it which have not been dismissed within sixty (60) days.3.3 Effect of Termination. Upon any expiration or termination of this Agreement, Customer shall (i) immediately cease use of the Service, and (ii) return all Cyral Confidential Information and Cyral provided software. Any termination or expiration shall not relieve Customer of its obligation to pay all Fees accruing prior to termination. If the Agreement is terminated by Cyral pursuant to Section 3.2 (a), Customer shall pay to Cyral all of the Fees for the entire term set forth in the corresponding Order Form(s).3.4 Survival. The following provisions will survive termination of this Agreement: Sections 1.5 (Ownership), 3.3 (Effect of Termination), Section 3.4 (Survival), Section 4 (Confidentiality), Section 5.1 (Indemnification by Customer), Section 7 (Limitation of Liability), Section 8 (Miscellaneous).

4. MISCELLANEOUS

4.1 Export Control. Customer hereby certifies that Customer will comply with all current US Export Control laws. Customer agrees to defend, indemnify and hold Cyral harmless from any liability for Customer’s violation of U.S. Export Control laws.4.2 Compliance with Laws. Customer shall comply with all applicable laws and regulations in its use of any Service, including without limitation the unlawful gathering or collecting, or assisting in the gathering or collecting of information in violation of any privacy laws or regulations. Customer shall, at its own expense, defend, indemnify and hold harmless Cyral from and against any and all claims, losses, liabilities, damages, judgments, government or federal sanctions, costs and expenses (including attorneys’ fees) incurred by Cyral arising from any claim or assertion by any third party of violation of privacy laws or regulations by Customer or any of its agents, officers, directors or employees.4.3 Assignment. Neither party may transfer and assign its rights and obligations under this Agreement without the prior written consent of the other party. Notwithstanding the foregoing, Cyral may transfer and assign its rights under this Agreement without consent from the other party in connection with a change in control, acquisition or sale of all or substantially all of its assets.4.4 Notice. All notices between the parties shall be in writing and shall be deemed to have been given if personally delivered or sent by registered or certified mail (return receipt), or by recognized courier service.4.5 Independent Contractor. Cyral is an independent Contractor and both parties agree that no agency, partnership, joint venture, or employment is created as a result of this Agreement. Customer does not have any authority of any kind to bind Cyral.4.6 Governing Law. This Agreement shall be governed exclusively by, and construed exclusively in accordance with, the laws of the United States and the State of California, without regard to its conflict of laws provisions. The federal courts of the United States in the Northern District of California and the state courts of the State of California shall have exclusive jurisdiction to adjudicate any dispute arising out of or relating to this Agreement. Each party hereby consents to the jurisdiction of such courts and waives any right it may otherwise have to challenge the appropriateness of such forums, whether on the basis of the doctrine of forum non conveniens or otherwise. The United Nations Convention on Contracts for the International Sale of Goods shall not apply to this Agreement or any Purchase Order Form issued under this Agreement.