Implentio Cloud Services Agreement
This Implentio Cloud Services Agreement (this “Agreement”), effective as of the date of the executed Sales Order (the “Effective Date” is by and between Implentio, Inc., a Delaware corporation with offices located at 11150 W Olympic Blvd Suite 1050 #508 Los Angeles, CA 90064 (the “Provider”) and the customer who executes the Sales Order (“Customer”).
- Cloud Services. Subject to this Agreement, Customer may use the Cloud Services for its own business purposes during each Subscription Term (“Permitted Use”). This includes the right to use the Provider Software and Documentation as part of Customer’s Permitted Use. Customer will comply with the Documentation in using the Cloud Services.
- Users. Customer may permit Users to use the Cloud Services on its behalf. Customer is responsible for provisioning and managing its User accounts, for its Users’ actions through the Cloud Services and for their compliance with this Agreement. Customer will ensure that Users keep their login credentials confidential and will promptly notify Provider upon learning of any compromise of User accounts or credentials.
- Affiliates. Customer’s Affiliates must enter into their own Orders as mutually agreed with Provider, which creates a separate agreement between each such Affiliate and Provider incorporating this Agreement, with the Affiliate treated as “Customer.” Neither Customer nor any Customer Affiliate has any rights under each other’s separate agreement with Provider, and breach or termination of any such separate agreements affects only that agreement.
- Data.
- Use of Customer Data. Subject to this Agreement, Provider will access and use Customer Data solely to provide and maintain the Cloud Services, Support and Professional Services under this Agreement (“Use of Customer Data”). Use of Customer Data includes sharing Customer Data as Customer directs through the Cloud Services, but Provider will not otherwise disclose Customer Data to third parties except as permitted in this Agreement.
- Security. Provider will use appropriate technical and organizational measures designed to prevent unauthorized access, use, alteration or disclosure of Customer Data.
- Usage Data. Provider may collect Usage Data and use it to operate, improve and support the Cloud Services and for other lawful business purposes, including benchmarking and reports. However, Provider will not disclose Usage Data externally unless it is (i) de-identified so that it does not identify Customer, its Users or any other person, and (ii) aggregated with data across other customers.
- Mutual Compliance with Laws. Each party will comply with all Laws that apply to its performance under this Agreement.
- Support and SLA.
- Support. Provider provides support during standard business hours, with extended hours for critical issues. Support requests are prioritized by severity, each with defined response and resolution targets. Provider will use commercially reasonable efforts to meet these targets and provide updates. If resolution times are not met on a recurring basis, limited service credits may apply, capped at a percentage of applicable fees. Service credits are the sole and exclusive remedy for downtime or delays, and any termination for cause is subject to conditions set forth in the Agreement.
- SLA. Provider will make the Cloud Services available at least 99% of the time each calendar month, excluding scheduled and emergency maintenance. Scheduled Downtime will be limited, pre-notified, and occur during designated off-peak hours. Emergency maintenance may be conducted without prior notice when required to protect service integrity, and such downtime will not count against availability unless it exceeds three hours. Performance degradations — categorized by impact — will be addressed per support protocols but do not constitute unavailability unless materially affecting core system functionality.
- Warranties.
- Mutual Warranties. Each party represents and warrants that:
- It has the legal power and authority to enter into this Agreement;
- It will use industry-standard measures to avoid introducing Viruses into the Cloud Services.
- Additional Provider Warranties. Provider warrants that:
- The Cloud Services will perform materially as described in the Documentation and Provider will not materially decrease the overall functionality of the Cloud Services during a Subscription Term (the “Performance Warranty”);
- Any Professional Services will be provided in a professional and workman like manner (the “Professional Services Warranty”).
- Warranty Remedy. Provider will use reasonable efforts to correct a verified breach of the Performance Warranty or Professional Services Warranty reported by Customer. If Provider fails to do so within 30 days after Customer’s warranty report (“Fix Period”), then either party may terminate the Order as relates to the non-conforming Cloud Services or Professional Services, in which case Provider will refund to Customer any pre-paid, unused fees for the terminated portion of the Subscription Term (for the Performance Warranty) or for the non-conforming Professional Services (for the Professional Services Warranty). To receive these remedies, Customer must report a breach of warranty in reasonable detail within 30 days after discovering the issue in the Cloud Services or 30 days after delivery of the relevant Professional Services (“Claim Period”). These procedures are Customer’s exclusive remedies and Provider’s sole liability for breach of the Performance Warranty or Professional Services Warranty.
- Disclaimers. Except as expressly set out in this Agreement, each party disclaims all warranties, whether express, implied, statutory or otherwise, including warranties of merchantability, fitness for a particular purpose, title and non-infringement. Provider’s warranties in this Section 7 do not apply to issues arising from Third-Party Platforms or misuse or unauthorized modifications of the Cloud Services. These disclaimers apply to the full extent permitted by Law.
- Usage Rules.
- Compliance. Customer (a) will comply with the Acceptable Use Policy (AUP) provided to Customer by Provider; and (b) represents and warrants that it has all rights necessary to use Customer Data with the Cloud Services and grants Provider the rights to Customer Data specified in this Agreement, without violating third-party intellectual property, privacy or other rights. Between the parties, Customer is responsible for the content and accuracy of Customer Data.
- High Risk Activities & Sensitive Data. Customer:
- Will not use the Cloud Services for High Risk Activities;
- Will not submit Sensitive Data to the Cloud Services;
- Acknowledges that the Cloud Services is not designed for (and Provider has no liability for) use prohibited in this Section 8.
- Restrictions. Customer will not, and will not permit anyone else, to: (a) sell, sublicense, distribute or rent the Cloud Services (in whole or part), grant non-Users access to the Cloud Services, or use the Cloud Services to provide a hosted or managed service to others; (b) reverse engineer, decompile or seek to access the source code of the Cloud Services, except to the extent these restrictions are prohibited by Laws and then only upon advance notice to Provider; (c) copy, modify, create derivative works or remove proprietary notices from the Cloud Services; (d) conduct security or vulnerability tests of the Cloud Services, interfere with its operation or circumvent its access restrictions; or (e) use the Cloud Services to develop a product that competes with the Cloud Services.
- Third Party Platforms. Customer may choose to enable integrations or exchange Customer Data with Third-Party Platforms. Customer’s use of a Third-Party Platform is governed by its agreement with the relevant provider, not this Agreement, and Provider is not responsible for Third-Party Platforms or how their providers use Customer Data.
- Professional Services. Provider will perform Professional Services as described in an Order or Statement of Work, which may identify additional terms or milestones for the Professional Services. Customer will give Provider timely access to Customer Materials reasonably needed for Professional Services, and Provider will use the Customer Materials only for purposes of providing Professional Services. Subject to any limits in an Order or Statement of Work, Customer will reimburse Provider’s reasonable travel and lodging expenses incurred in providing Professional Services. Customer may use code or other deliverables that Provider furnishes as part of Professional Services only in connection with Customer’s authorized use of the Cloud Services under this Agreement.
- Fees.
- Payment. Customer will pay the fees described in the Order. Unless the Order states otherwise, all amounts are due within 15 days after the invoice date (the “Payment Period”). Late payments are subject to a charge of 1.5% per month or the maximum amount allowed by Law, whichever is less. All fees and expenses are non-refundable except as expressly set out in this Agreement.
- Taxes. Customer is responsible for any sales, use, GST, value-added, withholding or similar taxes or levies that apply to its Orders, whether domestic or foreign (“Taxes”), other than Provider’s income tax. Fees and expenses are exclusive of Taxes.
- Payment Disputes. If Customer disputes an invoice in good faith, it will notify Provider within the Payment Period, and the parties will seek to resolve the dispute over a 15-day discussion period. Customer is not required to pay disputed amounts during the discussion period but will timely pay all undisputed amounts. After the discussion period, either party may pursue any available remedies.
- Suspension. Provider may suspend Customer’s access to the Cloud Services and related services due to a Suspension Event, but where practicable, will give Customer prior notice so that Customer may seek to resolve the issue and avoid suspension. Provider is not required to give prior notice in exigent circumstances or for a suspension made to avoid material harm or violation of Law. Once the Suspension Event is resolved, Provider will promptly restore Customer’s access to the Cloud Services in accordance with this Agreement. “Suspension Event” means (a) Customer’s account is 30 days or more overdue, (b) Customer is in breach of Section 8 (Usage Rules) or (c) Customer’s use of the Cloud Services risks material harm to the Cloud Services or others.
- Term and Termination.
- Subscription Terms. Each Subscription Term will last for an initial 12-month period unless the Order Form states otherwise. Each Subscription Term will renew for successive periods unless (a) the parties agree on a different renewal Order or (b) either party notifies the other of non-renewal at least 30 days prior to the end of the current Subscription Term.
- Term of Agreement. The Agreement starts on the Effective Date and continues until five years from the Effective Date, unless sooner terminated in accordance with its terms. If no Subscription Term is in effect, either party may terminate this Agreement for any or no reason with notice to the other party.
- Termination. Either party may terminate this Agreement (including all Subscription Terms) if the other party (a) fails to cure a material breach of this Agreement within 30 days after notice, (b) ceases operation without a successor or (c) seeks protection under a bankruptcy, receivership, trust deed, creditors’ arrangement, composition or comparable proceeding, or if such a proceeding is instituted against that party and not dismissed within 60 days.
- Data Export & Deletion.
- During a Subscription Term, Customer may export Customer Data from the Cloud Services (or Provider will otherwise make the Customer Data available to Customer) as described in the Documentation.
- After termination or expiration of this Agreement, within 60 days of request, Provider will delete Customer Data, and each party will delete any Confidential Information of the other in its possession or control.
- Nonetheless, the recipient may retain Customer Data or Confidential Information in accordance with its standard backup or record retention policies as required by Law, subject to Section 4(b) (Security) and Section 17 (Confidentiality).
- Effect of Termination.
- Customer’s right to use the Cloud Services, Support and Professional Services will cease upon any termination or expiration of this Agreement, subject to this Section 13.
- The following Sections will survive expiration or termination of this Agreement: 4(d) (Usage Data), 7(d) (Disclaimers), 8 (Usage Rules), 11(a) (Payment) (for amounts then due), 11(b) (Taxes), 13(d) (Data Export & Deletion), 13(e) (Effect of Termination), 14 (Intellectual Property), 15 (Limitations of Liability), 16 (Indemnification), 17 (Confidentiality), 18 (Required Disclosures), 21 (General Terms) and 22 (Definitions).
- Except where an exclusive remedy is provided, exercising a remedy under this Agreement, including termination, does not limit other remedies a party may have.
- Intellectual Property
- Reserved Rights. Neither party grants the other any rights or licenses not expressly set out in this Agreement. Except for Provider’s express rights in this Agreement, as between the parties, Customer retains all intellectual property and other rights in Customer Data and Customer Materials provided to Provider. Except for Customer’s express rights in this Agreement, as between the parties, Provider and its licensors retain all intellectual property and other rights in the Cloud Services, Professional Services deliverables and related Provider technology.
- Feedback. If Customer gives Provider feedback regarding improvement or operation of the Cloud Services, Support or Professional Services, Provider may use the feedback without restriction or obligation. All feedback is provided “AS IS,” and Provider will not publicly identify Customer as the source of feedback without Customer’s permission.
- Limitation of Liability.
- General Cap. Each party’s entire liability arising out of or related to this Agreement will not exceed the General Cap.
- Consequential Damages Waiver. Neither party will have any liability arising out of or related to this Agreement for indirect, special, incidental, reliance or consequential damages, or damages for loss of use, lost profits or interruption of business, even if informed of their possibility in advance.
- Exceptions and Enhanced Cap. Sections 15(a) (General Cap) and 15(b) (Consequential Damages Waiver) will not apply to Enhanced Claims or Uncapped Claims. For all Enhanced Claims, each party’s entire liability will not exceed the Enhanced Cap.
- Nature of Claims. The waivers and limitations in this Section 15 apply regardless of the form of action, whether in contract, tort (including negligence), strict liability or otherwise, and will survive and apply even if any limited remedy in this Agreement fails of its essential purpose.
- Liability Definitions. The following definitions apply:
- “Enhanced Cap” means three times (3x) the General Cap.
- “Enhanced Claims” means Provider’s breach of Section 4(b) (Security), either party’s breach of Section 4(c), or Provider’s liability for indemnification under Section 16(a).
- “General Cap” means amounts paid or payable by Customer to Provider under this Agreement in the 12 months immediately preceding the first incident giving rise to liability.
- “Uncapped Claims” means (a) the indemnifying party’s obligations under Section 16 (Indemnification), (b) either party’s infringement or misappropriation of the other party’s intellectual property rights, (c) any breach of Section 17 (Confidentiality), excluding breaches related to Customer Data, and (d) liabilities that cannot be limited by Law.
- Indemnification.
- Indemnification by Provider. Provider, at its own cost, will defend Customer from and against any Provider-Covered Claims and will indemnify and hold harmless Customer from and against any damages or costs awarded against Customer (including reasonable attorneys’ fees) or agreed in settlement by Provider resulting from the Provider-Covered Claims.
- Indemnification by Customer. Customer, at its own cost, will defend Provider from and against any Customer-Covered Claims and will indemnify and hold harmless Provider from and against any damages or costs awarded against Provider (including reasonable attorneys’ fees) or agreed in settlement by Customer resulting from the Customer-Covered Claims.
- Indemnification Definitions. The following definitions apply:
- “Customer-Covered Claim” means a third-party claim arising from Customer’s breach or alleged breach of Section 8(a) (Compliance) or Section 8(b) (High-Risk Activities & Sensitive Data).
- “Provider-Covered Claim” means a third-party claim that the Cloud Services, when used by Customer as authorized in this Agreement, infringe or misappropriate a third party’s intellectual property rights.
- Procedures. The indemnifying party’s obligations in this Section 16 are subject to receiving from the indemnified party: (a) prompt notice of the claim (but delayed notice will only reduce the indemnifying party’s obligations to the extent it is prejudiced by the delay), (b) the exclusive right to control the claim’s investigation, defense and settlement, and (c) reasonable cooperation at the indemnifying party’s expense. The indemnifying party may not settle a claim without the indemnified party’s prior approval if settlement would require the indemnified party to admit fault or take or refrain from taking any action (except regarding use of the Cloud Services when Provider is the indemnifying party). The indemnified party may participate in a claim with its own counsel at its own expense.
- Mitigation. In response to an infringement or misappropriation claim, if required by settlement or injunction or as Provider determines necessary to avoid material liability, Provider may (a) procure rights for Customer’s continued use of the Cloud Services, (b) replace or modify the allegedly infringing portion of the Cloud Services to avoid infringement, without reducing the Cloud Services’ overall functionality, or (c) terminate the affected Order and refund to Customer any pre-paid, unused fees for the terminated portion of the Subscription Term.
- Exceptions. Provider’s obligations in this Section 16 do not apply to claims resulting from (a) modification or unauthorized use of the Cloud Services, (b) use of the Cloud Services in combination with items not provided by Provider, including Third-Party Platforms, or (c) Provider Software other than the most recent release, if Provider made available (at no additional charge) a newer release that would avoid infringement.
- Exclusive Remedy. This Section 16 sets out the indemnified party’s exclusive remedy and the indemnifying party’s sole liability regarding third-party claims of intellectual property infringement or misappropriation covered by this Section.
- Confidentiality.
- Use and Protection. As recipient, each party will (a) use Confidential Information only to fulfill its obligations and exercise its rights under this Agreement, (b) not disclose Confidential Information to third parties without the discloser’s prior approval, except as permitted in this Agreement, and (c) protect Confidential Information using at least the same precautions the recipient uses for its own similar information and no less than a reasonable standard of care.
- Permitted Disclosures. The recipient may disclose Confidential Information to its employees, agents, contractors and other representatives having a legitimate need to know (including, for Provider, the subcontractors referenced in Section 21(j)), provided it remains responsible for their compliance with this Section 17 and they are bound to confidentiality obligations no less protective than this Section 17.
- Exclusions. These confidentiality obligations do not apply to information that the recipient can document (a) is or becomes public knowledge through no fault of the recipient, (b) it rightfully knew or possessed, without confidentiality restrictions, prior to receipt from the discloser, (c) it rightfully received from a third party without confidentiality restrictions, or (d) it independently developed without using or referencing Confidential Information.
- Remedies. Breach of this Section 17 may cause substantial harm for which monetary damages are an insufficient remedy. Upon a breach of this Section, the discloser is entitled to seek appropriate equitable relief, including an injunction, in addition to other remedies.
- Required Disclosures. The recipient may disclose Confidential Information (including Customer Data) to the extent required by Laws. If permitted by Law, the recipient will give the discloser reasonable advance notice of the required disclosure and reasonably cooperate, at the discloser’s expense, to obtain confidential treatment for the Confidential Information.
- Publicity. Neither party may publicly announce this Agreement without the other party’s prior approval or except as required by Laws; provided, however, that Provider may use Customer’s name and logo to identify Customer as a customer of Provider in its marketing materials and on its website.
- General Terms.
- Assignment. Neither party may assign this Agreement without the prior consent of the other party, except that either party may assign this Agreement, with notice to the other party, in connection with the assigning party’s merger, reorganization, acquisition or other transfer of all or substantially all of its assets or voting securities. Any non-permitted assignment is void. This Agreement will bind and inure to the benefit of each party’s permitted successors and assigns.
- Governing Law and Courts. This Agreement is governed by and construed in accordance with the internal laws of the State of California, without reference to conflict of law rules. Any legal suit, action, or proceeding arising out of or related to this Agreement or the licenses granted hereunder will be instituted in the federal courts of the United States or the courts of the State of California, in each case located in the City of Los Angeles and County of Los Angeles, and each party irrevocably submits to the jurisdiction of such courts in any such suit, action, or proceeding. Service of process, summons, notice, or other document by mail to such party’s address set forth herein shall be effective service of process for any suit, action, or other proceeding brought in any such court.
- Notices.
- Except as set out in this Agreement, notices, requests and approvals under this Agreement must be in writing to the addresses set forth in the preamble to this Agreement and will be deemed given: (1) upon receipt if by personal delivery, (2) upon receipt if by certified or registered U.S. mail (return receipt requested), (3) one day after dispatch if by a commercial overnight delivery, or (4) upon delivery if by email. Either party may update its address with notice to the other.
- Provider may also send operational notices through the Cloud Services.
- Entire Agreement. This Agreement is the parties’ entire agreement regarding its subject matter and supersedes any prior or contemporaneous agreements regarding its subject matter. In this Agreement, headings are for convenience only, and “including” and similar terms are to be construed without limitation. Excluding Orders, terms in business forms, purchase orders or quotes used by either party will not amend or modify this Agreement; any such documents are for administrative purposes only. This Agreement may be executed in counterparts (including electronic copies and PDFs), each of which is deemed an original and which together form one and the same agreement.
- Order of Precedence. An Order may not modify any other part of the Agreement unless the Order specifically identifies the provisions that it supersedes.
- Amendments. Any amendments to this Agreement must be in writing and signed by each party’s authorized representatives.
- Operational Changes. With notice to Customer, Provider may modify the SLA or Security Measures to reflect new features or changing practices, but the modifications may not be retroactive or materially decrease Provider’s overall obligations during a Subscription Term.
- Waivers and Severability. Waivers must be signed by the waiving party’s authorized representative and cannot be implied from conduct. If any provision of this Agreement is held invalid, illegal or unenforceable, it will be limited to the minimum extent necessary so the rest of this Agreement remains in effect.
- Force Majeure. Neither party is liable for a delay or failure to perform this Agreement due to a Force Majeure. If a Force Majeure materially adversely affects the Cloud Services for 15 or more consecutive days, either party may terminate the affected Order(s) upon notice to the other, and Provider will refund to Customer any pre-paid, unused fees for the terminated portion of the Subscription Term. However, this Section does not limit Customer’s obligations to pay fees owed.
- Subcontractors. Provider may use subcontractors and permit them to exercise its rights and fulfill its obligations, but Provider remains responsible for their compliance with this Agreement and for its overall performance under this Agreement. This does not limit any additional terms for subprocessors under a DPA.
- Independent Contractors. The parties are independent contractors, not agents, partners or joint venturers.
- No Third-Party Beneficiaries. There are no third-party beneficiaries to this Agreement.
- Open Source. Provider Software distributed to Customer (if any) may include third-party open source software (“Open Source”) as listed in the Documentation or by Provider upon request. If Customer elects to use the Open Source on a stand-alone basis, that use is subject to the applicable Open Source license and not this Agreement.
- Export. Each party (a) will comply with all export and import Laws in performing this Agreement and (b) represents and warrants that it is not listed on any U.S. government list of prohibited or restricted parties or located in (or a national of) a country subject to a U.S. government embargo or designated by the U.S. government as a “terrorist supporting” country. Customer will not submit to the Cloud Services any data controlled under the U.S. International Traffic in Arms Regulations.
- Government Rights. To the extent applicable, the Cloud Services are “commercial computer software” or a “commercial item” for purposes of FAR 12.212 and DFARS 227.7202. Use, reproduction, release, modification, disclosure or transfer of the Cloud Services is governed solely by the terms of this Agreement, and all other use is prohibited.
- Definitions.
- “Acceptable Use Policy” or “AUP” is defined in Section 8(a) (Compliance).
- “Affiliate” means an entity controlled, controlling or under common control with a party, where control means at least 50% ownership or power to direct an entity’s management.
- “Cloud Services” means Provider’s proprietary cloud services, as identified in the relevant Order and as modified from time to time. The Cloud Services include the Provider Software and Documentation but not Professional Services deliverables or Third-Party Platforms.
- “Confidential Information” means information disclosed by or on behalf of one party (as discloser) to the other party (as recipient) under this Agreement, in any form, which (a) the discloser identifies to the recipient as “confidential” or “proprietary,” or (b) should be reasonably understood as confidential or proprietary due to its nature and the circumstances of its disclosure. Provider’s Confidential Information includes technical or performance information about the Cloud Services, and Customer’s Confidential Information includes Customer Data.
- “Customer Data” means any data, content or materials that Customer (including its Users) submits to its Cloud Services accounts, including from Third-Party Platforms.
- “Customer Materials” means materials and resources that Customer makes available to Provider in connection with Professional Services.
- “Documentation” means Provider’s standard usage documentation for the Cloud Services.
- “Force Majeure” means an unforeseen event beyond a party’s reasonable control, such as a strike, blockade, war, pandemic, act of terrorism, riot, third-party internet or utility failure, refusal of a government license or natural disaster, where the affected party takes reasonable and customary measures to avoid or mitigate such event’s effects.
- “High Risk Activities” means activities where use or failure of the Cloud Services could lead to death, personal injury or environmental damage, including life support systems, emergency services, nuclear facilities, autonomous vehicles or air traffic control.
- “Kick-Off Call” (or “Welcome Call”) means the initial, introductory meeting between Provider and Customer. It serves to introduce key stakeholders, provide high-level orientation, and outline the onboarding process at a strategic level.
- “Laws” means all laws, regulations, rules, court orders or other binding requirements of a government authority that apply to a party.
- “Onboarding Start Date” means the date on which the Kick-Off Call takes place.
- “Order” means an order for Customer’s access to the Cloud Services, Support, Professional Services or related services that is executed by the parties and references this Agreement.
- “Professional Services” means training, migration or other professional services that Provider furnishes to Customer related to the Cloud Services.
- “Provider Software” means any proprietary apps or software that Provider distributes to Customer as part of the Cloud Services.
- “Sensitive Data” means (a) patient, medical or other protected health information regulated by the Health Insurance Portability and Accountability Act (as amended and supplemented) (“HIPAA”), (b) credit, debit, bank account or other financial account numbers, (c) social security numbers, driver’s license numbers or other government ID numbers, and (d) special categories of data enumerated in European Union Regulation 2016/679, Article 9(1), or any successor legislation.
- “Statement of Work” means a statement of work for Professional Services that is executed by the parties and references this Agreement.
- “Subscription Term” means the term for Customer’s use of the Cloud Services as identified in an Order.
- “Support” means support for the Cloud Services as described in Section 6.1 (Support).
- “Third-Party Platform” means any product, add-on or platform not provided by Provider that Customer uses with the Cloud Services.
- “Usage Data” means data generated from the usage, configuration, deployment, access and performance of the Cloud Services and Provider’s technical logs, data and learnings about Customer’s use of the Cloud Services, but excluding Customer Data.
- “User” means anyone that Customer allows to use its accounts for the Cloud Services, who may include (a) employees, advisors and contractors of Customer and its Affiliates, and (b) others if permitted in this Agreement, the Documentation or an Order.
- “Virus” means viruses, malicious code or similar harmful materials.