SOLVER’S TERMS OF SERVICE

Solver Inc. (“Solver”, “we”, “us”) makes this Cloud Service and related websites, software, and services (collectively, “Services”) available to you (“User”, or “you”) under these Terms of Service (“Terms” or “Agreement”). By accessing and using our Services, you agree to all of the terms outlined herein. If you are entering into this Agreement on behalf of a company or other legal entity, you represent that you have the authority to bind such entity and its affiliates to these Terms. These Terms are effective as of the date you click “Accepted and Agreed To” (the “Effective Date”). If at any time you do not accept all of these Terms, you must stop using the Services immediately.

1. Our Responsibilities. Solver will make the Services available to you pursuant to this Agreement and the terms of any service plan by and between you and Solver, and will use reasonable efforts to make the Services available in accordance with Solver’s Availability and Support SLA, attached hereto as Exhibit 2 (“SLA”).
2. Payment.
   
   1. You are responsible for paying the fees associated with using the Services, and you are responsible for such monthly or annual service fees as are required to use your account. If you are on an annual service plan, you will be informed within a reasonable period of time, before the renewal date via email that your plan is about to renew. You can renew your service at any time, including prior to being informed that your service will end, provided that payment must be received prior to the end of the current service period to avoid any disruption of your access to the Services. We may modify the fees for Services from time to time, but we will give you adequate notice that such a modification will occur. The modification in fees will only be effective for the following service period. Upon payment for the Services, Solver grants you a nonexclusive, nontransferable, nonsublicensable, worldwide, limited, license to use the Services during the term of the service.
   2. Payment for the Services may be collected on Solver’s behalf by a third party authorized to resell the Services (“Partner”). For purposes of Section 2(a), a payment owed for the Services are deemed to have been received by Solver when such Partner receives payment.
   3. Customer shall be responsible for all sales taxes and other similar taxes (e.g., gross receipts, etc.) imposed on the transactions contemplated by this Agreement by any federal, state or local governmental entity in which Customer operates, excluding taxes on the Company’s net income (“Customer Taxes”).  If the Company becomes responsible for paying or collecting Customer taxes, the appropriate amount shall be invoiced to and paid by Customer.
3. Security and Integrity of User Content. Customer acknowledges that it retains administrative control over to whom it grants access to the User Content (defined below) hosted in the Services. Nonetheless, during the term of a service plan, Solver shall maintain industry standard or better administrative and technical safeguards designed for the physical protection, confidentiality, and integrity of User Content. Solver will not use User Content except to provide the Services, or to prevent or address service or technical problems, as permitted in this Agreement or as instructed by Customer.
4. Materials, Software, & IP.
   1. You recognize and agree that: (i) the content, and materials provided through the Services (collectively, the “Materials”) are the property of Solver or its licensors and are or may be protected by copyright, trademark, and other intellectual property laws; and (ii) you do not acquire any right, title, or interest in or to the Materials except the limited and temporary right to use them as necessary for your use of the Services.
   2. IP in General. Solver retains all right, title, and interest in and to the Services, including without limitation all software used to provide the Services and all logos and trademarks reproduced through the Services, with the exception of any third party plugins used in the Services that remain owned by the respective third party organizations. These Terms do not grant you any intellectual property rights in or to the Services, or any of its components.
5. Online Policies.
   1. Acceptable Use Policy (“AUP”). As a User of the Services, you may not: (1) reproduce or publish any portion of the Services in any manner other than as expressly permitted in these Terms, (2) use the Services to create any derivative products, (3) resell, relicense, or redistribute the Services in whole or in part, (4) use the Services to infringe any third party’s copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy, (5) use the Services for any purpose that is defamatory, obscene, libelous, unlawfully threatening or unlawfully harassing. In the event of your material breach of the AUP, including without limitation any copyright infringement, Solver may suspend or terminate your access to the Services, in addition to such other remedies as Solver may have at law or pursuant to these Terms. Solver reserves the right to take any other remedial action it sees fit.
   2. Privacy Policy: The Privacy Policy applies only to the Services and does not apply to any third party site or unrelated service, whether or not that service is linked to or used by the Services.
   3. Azure Terms of Service: As a User of the Services, you agree to be bound by any applicable Terms of Service published by Microsoft governing usage of Azure Services. If Azure modifies any of its policies, you are responsible for abiding by the revised terms. If you do not approve of the revised terms, then you must stop using the Services immediately. The Azure terms of service may be found here: https://azure.microsoft.com/en-us/support/legal/
   4. Usage Limits: Use of the Services are subject to the usage limits and policies identified in a service plan, which may include limitations on features and functionality. If a party detects or becomes aware that Customer exceeds a limit, that party shall promptly notify the other, and Customer shall work with solver to promptly change its usage to comply with the limit. If Customer fails to change its usage or to comply with the limit within thirty (30) days, or if Customer notifies Solver of its intent to continue with the excess usage, Customer shall execute a revised service plan and pay invoices issued by Solver for that excess usage. As may be reasonably requested by Solver from time to time, Customer agrees to verify, certify, or provide evidence that its use of the Services are within the applicable usage limits.
   5. Artificial Intelligence (AI) Usage and Data Handling:
      1. Feature Opt-In: Use of Solver Copilot’s AI features, including the Analysis Agent, is optional and requires explicit enablement within the Solver platform. By opting in, Customer agrees to this Section. Only Customer Administrators can opt-in. The Help Agent is enabled by default as it only uses public documentation
      2. Nature of AI Features: AI Features assist Users with data analysis, forecasting, scenario modeling, content generation, and similar tasks. AI-generated outputs may be inaccurate, incomplete, biased, or unsuitable for specific use cases.
      All AI features are provided “as-is” without warranty of accuracy, reliability, or fitness for a particular purpose. Solver shall not be liable for any decisions or actions taken based on AI outputs.
      
      3. Model Hosting & Data Residency: Solver Copilot uses Microsoft Azure OpenAI services hosted in an Azure region that supports Azure OpenAI and aligns with the Customer’s selected data residency requirements.
      
      If the Customer’s primary Solver tenant region does not support Azure OpenAI, Solver will use the nearest available Azure region that maintains applicable compliance standards.
      
      In all cases, Customer Data remains within Microsoft Azure.
      
      4. Data Usage & Privacy: Solver does not use Customer Data to train or fine-tune third-party AI foundation models.
      Azure OpenAI services operate in inference-only mode, meaning:
      • Customer Data is not used to improve or retrain the underlying AI models.
      • Customer Data is not shared with OpenAI or other external organizations.
      • Customer Data is not retained by Azure OpenAI beyond what is necessary to provide the service.
      
      Solver may store prompts, and User feedback for the purpose of improving Solver Copilot’s performance, reliability, and security. Such data is associated with the Customer’s organization and may be deleted upon request, subject to operational or legal requirements.
      
      5.    Customer Responsibilities: Customer is solely responsible for: 
      • Ensuring the accuracy, legality, and appropriateness of data and prompts submitted to AI Features.
      • Independently reviewing and validating all AI-generated outputs prior to making business, financial, operational, or strategic decisions.
      • Ensuring compliance with applicable laws, regulations, policies, and internal controls when using AI Features.
        
        
      6.  Misuse, Abuse, and Enforcement: Solver may suspend, limit, or revoke access to AI Features if Customer engages i
      
      • Misuse or manipulation of AI models
      • Abuse of system resources
      • Security violations
      • Activities inconsistent with Solver’s Acceptable Use Policy or applicable law
      
      Solver may update or modify AI Features at any time to maintain performance, compliance, or safety standards.

6. Term and Termination.
   1. This agreement commences on the Effective Date, and continues until all subscriptions or service plans hereunder have expired or terminate.
   2. Terms of Service Plans. The term of each service plan shall be as specified when you order the plan. Service plans will automatically renew for additional periods equal to the expiring subscription term or one year (whichever is shorter), unless either party gives the other notice of non-renewal at least 30 days before the end of the relevant subscription term.
   3. Solver may terminate this agreement for cause (i) upon 30 days written notice to the other party of a material breach if such breach remains uncured at the expiration of such period, or (ii) if the other party becomes the subject of a lawsuit or any other proceeding relating to insolvency, liquidation or assignment for the benefit of creditors. You may terminate this agreement for any reason with 30 days written notice.
   4. Payment upon Termination. If you terminate your service before the service period is over, then you are not entitled to a refund or credit for any balance of the pre-paid subscription remaining. You are responsible for any unpaid fees for the Service for the entirety of the Term. You are also responsible for any fees incurred prior to the date of termination.
   5. Your Data Upon Termination. Your User Content (defined in Section 7) will remain available for the duration of the service period and for thirty (30) days thereafter. For thirty (30) days after the service period ends, Customer may request a copy of its User Content and Solver will provide such copy to Customer. Customer agrees that after termination or expiration of these Terms, or termination or expiration of any service plan, Solver may immediately deactivate Customer’s account(s) associated with the service plans, and Customer will no longer have access to Customer’s account(s) after the service period has ended.
7. User Content.
   1. As a part of your use of the Services, you may be permitted to input comments, images, hyperlinks, questions, ideas, data, information, materials and other, similar content (“User Content”). The User Content does not include any financial information such as account information that is identifiable as related to you or any information covered under section 10. User agrees that User Content will abide by the Acceptable Use Policy set forth above.  Furthermore, User grants Solver and its affiliates a nonexclusive, royalty free, perpetual, irrevocable, universal, worldwide, and fully sublicensable right to use, modify, adapt, publish, translate, create derivative works from, distribute, and display any such content in any media solely to provide the Service to you and to perform the functions requested by you in connection with the Services.
   2. You represent and warrant that you own or otherwise control all of the rights to the User Content that you post; that the content is accurate; that use of the User Content you supply does not violate this Agreement and will not cause injury to any person or entity; and that you will indemnify Solver or its affiliates for all claims resulting from User Content you supply. Solver has the right but not the obligation to monitor and edit or remove any activity or data that may be generated in connection with User Content; provided, however, for clarity, Solver only monitors telemetry information, such as logins, feature usage, etc. Solver does not monitor the actual User Content entered into the Service by you. Solver takes no responsibility and assumes no liability for any User Content posted by you or any third party.
   3. Solver respects the intellectual property rights of others. If you believe that your work has been copied in any way that constitutes copyright infringement, please contact Solver at legal@solverglobal.com in accordance with the requirements of the DMCA takedown notice under 15 U.S.C. § 512(c)(3).
   4. Customer acknowledges that Solver collects, logs, and aggregates usage data, including anonymized User Content, as part of the normal operation of the Services (“Aggregated Data”). Solver may use Aggregated Data for purposes of operating Solver’s business, monitoring performance of the Services, and improving the Services as long at the Aggregated Data is anonymized and Solver’s use does not reveal or disclose any User Content, Customer Confidential Information, or personally identifiable information or personal data of other users.
8. Each Party’s Warranties.
   1. Your Identity. You warrant: (i) that you have accurately identified yourself through your account and will maintain the accuracy of such identification; and (ii) that it is a corporation or other business entity authorized to do business pursuant to applicable law or an individual 18 years or older.
   2. Right to Do Business. Each party warrants that it has the full right and authority to enter into, execute, and perform its obligations under this agreement and that no pending or threatened claim or litigation known to it would have a material adverse impact on its ability to perform as required by this agreement.
   3. By Solver. Solver warrants that, during the term of the service plan, the Services will perform in a manner materially consistent with the applicable documentation (made available by Solver under or in connection with a service plan), and Solver shall not materially decrease the functionality of the Services. If a breach of the foregoing warranty occurs, Customer shall provide Solver with written notification of the specific way(s) in which the Services do not comply with the warranty and with reasonable information for Solver to create a reproducible test case. If Solver, in its sole discretion, confirms noncompliance, it shall use commercially reasonable efforts to correct that noncompliance promptly. If Solver cannot correct the noncompliance timely (but in no case less than thirty (30) business days), Customer may give Solver a thirty (30) day notice of intent to terminate. At the end of the notice period, if the Services still do not comply with this warranty, Customer may elect to terminate this Agreement and receive a prorated refund of prepaid fees applicable to the remaining period in the then-current services plan term. Notwithstanding the foregoing, this warranty shall not apply to any non-conformity due to a modification of or defect in the Services that is made or caused by or on behalf of anyone other than Solver. THE FOREGOING RIGHTS ARE THE SOLE AND EXCLUSIVE REMEDY OF CUSTOMER (AND SOLVER’S SOLE LIABILITY) FOR A BREACH OF THE WARRANTY DESCRIBED IN THIS SECTION 8. Solver further warrants that, to the best of its knowledge, the Services are free from, and Solver shall not knowingly or intentionally introduce, software viruses, worms, Trojan horses or other code, files, scripts, or agents intended to do harm (“Malicious Code”), provided however, that Solver shall not be in breach of this warranty if Customer or any third party introduces Malicious Code.
   4. Disclaimers: EXCEPT AS PROVIDED IN THIS SECTION 8, SOLVER MAKES NO WARRANTIES OR REPRESENTATIONS ABOUT THE METHODOLOGIES USED OR THE ACCURACY, TIMELINESS, RELIABILITY OR COMPLETENESS OF ANY OF THE SERVICES. THE SERVICES ARE PROVIDED ON AN ”AS IS” BASIS, WITHOUT WARRANTIES OF ANY KIND WHATSOEVER, INCLUDING ANY IMPLIED OR EXPRESS WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. ANY RELIANCE ON OR USE BY USER OF THE SERVICES SHALL BE ENTIRELY AT USER’S OWN RISK. SOLVER MAKES NO REPRESENTATIONS OR WARRANTIES ABOUT THE LEGALITY OR PROPRIETY OF THE USE OF THE SERVICES IN ANY JURISDICTION, STATE OR REGION. USER SHALL BE SOLELY RESPONSIBLE FOR OBTAINING ANY AND ALL NECESSARY LICENSES, CERTIFICATES, PERMITS, APPROVALS OR OTHER AUTHORIZATIONS REQUIRED BY FEDERAL, STATE OR LOCAL STATUTE, LAW OR REGULATION APPLICABLE TO USER’S USE OF THE SERVICES.
9. Limitation of Liability. SOLVER’S TOTAL LIABILITY AND USER’S EXCLUSIVE REMEDY UNDER OR RELATED TO THIS AGREEMENT, WHETHER BASED ON BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE), PRODUCT LIABILITY, OR OTHERWISE, SHALL BE LIMITED TO DIRECT MONEY DAMAGES NOT EXCEEDING THE TOTAL VALUE RECEIVED BY SOLVER FROM YOU FOR THE APPLICABLE SERVICE CONTRACT. THIS LIMIT IS CUMULATIVE AND ANY PAYMENTS UNDER THIS AGREEMENT WILL BE AGGREGATED TO CALCULATE SATISFACTION OF THE LIMIT. THE EXISTENCE OF MULTIPLE CLAIMS WILL NOT ENLARGE THE LIMIT. SOLVER SHALL HAVE NO LIABILITY UNDER OR IN ANY WAY RELATED TO THIS AGREEMENT FOR ANY LOSS OF PROFIT OR REVENUE OR FOR ANY CONSEQUENTIAL, INDIRECT, INCIDENTAL, SPECIAL OR EXEMPLARY DAMAGES, EVEN IF SOLVER IS AWARE OF THE POSSIBILITY OF SUCH LOSS OR DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR EXCLUSION MAY NOT APPLY. USER AGREES THAT THE LIMITATIONS SET FORTH ABOVE ARE FUNDAMENTAL ELEMENTS OF THIS AGREEMENT, AND THAT THE SERVICES WOULD NOT BE PROVIDED TO USER ABSENT SUCH LIMITATIONS.
10. Data Management.
    1. Access, Use, & Legal Compulsion. Unless we receive your prior written consent, Solver: (i) will not access or use your data other than as necessary to facilitate the Services; and (ii) will not give any third party access to your data. Notwithstanding the foregoing, Solver may disclose your data as required by applicable law or by proper legal or governmental authority. Solver will give you prompt notice, if legally allowed to do so, of any such legal or governmental demand and reasonably cooperate with you in any effort to seek a protective order or otherwise to contest such required disclosure, at your expense.
    2. Your Rights. You possess and retain all right, title, and interest in and to your data, and Solver’s use and possession thereof is solely as your agent or licensee.
    3. Retention & Deletion. Solver will retain all of your Data until deleted pursuant to a termination of the agreement, or pursuant to your written request in accordance with the Data Processing Terms in Exhibit 1.
11.  Indemnification. USER AGREES TO INDEMNIFY AND HOLD SOLVER HARMLESS FROM AND AGAINST ALL CLAIMS OF THIRD PARTIES ARISING OUT OF OR RELATED TO THE USE OF THE SERVICES BY THE USER, OR ATTRIBUTABLE TO USER’S BREACH OF THIS AGREEMENT; PROVIDED THAT SOLVER GIVES USER PROMPT WRITTEN NOTICE OF ANY SUCH CLAIM. SOLVER SHALL CONTROL THE DEFENSE AND ANY SETTLEMENT OF SUCH CLAIM, AND USER SHALL COOPERATE WITH SOLVER IN DEFENDING AGAINST SUCH CLAIM. SOLVER AGREES TO INDEMNIFY, DEFEND, AND HOLD USER HARMLESS FROM AND AGAINST ALL CLAIMS OF THIRD PARTIES ARISING OUT OF OR RELATED TO AN ALLEGATION THAT USER’S AUTHORIZED USE OF THE SERVICES INFRINGES THE PATENT, TRADEMARK, OR COPYRIGHT OF A THIRD PARTY (“INFRINGEMENT CLAIM”). IN THE EVENT USER NOTIFIES SOLVER OF AN INFRINGEMENT CLAIM, SOLVER SHALL, IN ITS SOLE DISCRETION, EITHER PROCURE FOR USER THE RIGHT TO CONTINUE USING THE INFRINGING PORTION OF THE SERVICE OR MODIFY THE INFRINGING PORTION OF THE SERVICE SO THAT IT IS NO LONGER SUBJECT TO THE INFRINGEMENT CLAIM. IF NEITHER OF THE FOREGOING OPTIONS IS AVAILABLE, SOLVER SHALL IN ITS SOLE DISCRETION, HAVE THE RIGHT TO TERMINATE THIS AGREEMENT AND WILL REFUND USER THE PRO RATA PORTION OF ANY PRE-PAID BUT UNUSED FEES PAID BY USER FOR THE SERVICE. THE FOREGOING REMEDIES REPRESENT THE EXCLUSIVE REMEDIES OF USER IN THE EVENT OF AN INFRINGEMENT CLAIM.
12. California Residents.User understands that he or she is waiving rights with respect to claims that are at this time unknown or unsuspected, and in accordance with such waiver, User acknowledges that he or she has read and understand, and User hereby expressly waive, the benefits of section 1542 of the civil code of California, and any similar law of any state, country or territory, which provides as follows: “A general release does not extend to claims which the creditor does not know or suspect to exist in his or her favor at the time of executing the release, which if known by him or her must have materially affected his or her settlement with the debtor.”
13. Export Controls. The Services offered herein may not be exported, in violation of any Laws, (1) into any U.S. embargoed country or (2) to anyone on the U.S. Treasury Department’s list of Specially Designated Nationals or the U.S. Commerce Department’s Table of Deny Order. You represent and warrant that you are not located in, under the control of, or a national or resident of any such country, or on any such list.
14. General Terms.
    1. Solver may send notices pursuant to this agreement to the email address associated with a User’s account, and such notices will be deemed received one day after they are sent. You may send notices pursuant to this agreement to Solver, and such notices will be deemed received one day after they are sent.
    2. Solver may amend this Agreement (including any applicable SLA and the Privacy Policy) from time to time by posting an amended version at its website and sending you written notice thereof. Such amendment will be deemed accepted and become effective 30 days after such notice. Your continued use of the Service following the effective date of an amendment will confirm your consent thereto. If you do not agree to the revised terms, then you must stop using the Service immediately. You will not be entitled to a refund for the early termination.
    3. Force Majeure. Solver is not liable for loss of use of the Services caused by a condition outside of Solver’s control (such as a natural disaster, or Internet downtime) that was beyond Solver’s reasonable control.
    4. No Waiver. Neither party will be deemed to have waived any of its rights under this Agreement by lapse of time or by any statement or representation other than (i) by an Authorized Representative and (ii) in an explicit written waiver. No waiver of a breach of this Agreement will constitute a waiver of any prior or subsequent breach of this Agreement.
    5. Assignment & Successors. Neither party may assign this Agreement or any of its rights or obligations here under without the other’s express written consent, except that either party may assign this Agreement to the surviving party in a merger of that party into another entity. Except to the extent forbidden in the previous sentence, this Agreement will be binding upon and inure to the benefit of the respective successors and assigns of the parties.
    6. Choice of Law & Jurisdiction. This Agreement will be governed solely by the internal laws of the State of California, applicable to agreements executed and to be performed solely within California. The parties hereby submit to the jurisdiction of, and waive any venue objections against, the United States District Court for the Central District of California, Western Division and the Superior and Municipal Courts of the State of California, Los Angeles County in any litigation arising out of or relating to this Agreement or its subject matter.
    7. To the extent permitted by applicable law, the parties hereby waive any provision of law that would render any clause of this Agreement invalid or otherwise unenforceable in any respect. In the event that a provision of this Agreement is held to be invalid or otherwise unenforceable, such provision will be interpreted to fulfill its intended purpose to the maximum extent permitted by applicable law, and the remaining provisions of this Agreement will continue in full force and effect.
    8. Entire Agreement. This Agreement, including Exhibit 1 attached hereto, sets forth the entire agreement of the parties and supersedes all prior or contemporaneous writings, negotiations, and discussions with respect to the subject matter hereof. Neither party has relied upon any such prior or contemporaneous communications.

Exhibit 1 – Data Processing Addendum

1. Purpose

This Exhibit supplements the terms and conditions in the Agreement as they relate to Solver’s Processing of Personal Data and compliance with Data Protection Law. In the event of a conflict between the terms of the Agreement and this Exhibit, the terms of this Exhibit will control. In the event of a conflict between the terms of this Exhibit and the Standard Contractual Clauses, the Standard Contractual Clauses will prevail.

2. Definitions

Capitalized terms used but not defined in this Exhibit have the meaning given in the Agreement.  Other terms in this Exhibit, which are not defined in the Agreement or this Exhibit, shall have meanings consistent with any corresponding terms in Data Protection Law.

• “Customer” means the company or other legal entity on whose behalf you have entered into the Agreement, or if you are an individual entering into the Agreement on your own behalf, you.
• “Customer Personal Data” means Personal Data received from, or on behalf of, Customer by Solver in its performance of the Services.
• “Data Protection Law” means any law, rule, regulation, decree, statute, or other enactment, order, mandate or resolution, applicable to Customer or Solver, relating to data security, data protection and/or privacy, including The General Data Protection Regulation (EU) 2016/679 (“GDPR”), The Data Protection Act 2018 in the UK, and any implementing, derivative or related legislation, rule, regulation, and regulatory guidance, as amended, extended, repealed and replaced, or re-enacted.
• “Personal Data” means any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by referencing an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
• “Personal Data Breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Personal Data, whether transmitted, stored, or otherwise Processed.
• “Processing” means any operation or set of operations that is performed on Customer Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction. “Process” and “Processed” will have a corresponding meaning.

3. Obligations of Solver
   • Without limiting Solver’s obligation to comply with the Data Protection Law, Solver, in its capacity as a data processor or sub-processor of Customer Personal Data will:
     • Process Customer Personal Data only on documented instructions from Customer, including with regard to transfers of Customer Personal Data to a third country or an international organization, unless required to do so by applicable Data Protection Law to which Customer is subject. In such case, Customer will inform Solver of that legal requirement before Processing, unless that law prohibits such information on important grounds of public interest;
     • Ensure that persons authorized to Process the Customer Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
     • Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of the Processing, including measures required pursuant to applicable Data Protection Law ;
     • Taking into account the nature of the Processing, assist Customer by appropriate technical and organizational measures, insofar as this is possible, for the fulfillment of Customer’s obligation to respond to requests for exercising the Data Subject’s rights laid down in Data Protection Law (including Chapter III of the GDPR and corresponding legal requirements in the U.K.,);
     • Reasonably assist Customer in ensuring compliance with data security, Personal Data Breach, data protection impact assessments, and engaging in legally required consultations with a competent supervisory authority, pursuant to applicable Data Protection Law (including Articles 32 to 36 of the GDPR and corresponding legal requirements in the U.K., taking into account the nature of processing and the information available to Solver);
     • At the choice of Customer, promptly delete or return all the Customer Personal Data to Customer after the end of the provision of services relating to the Processing, and delete existing copies unless applicable law requires storage of the Customer Personal Data;
     • Without limiting any of Customer’s existing audit rights under the Agreement (if any), make available to Customer all information reasonably necessary to demonstrate compliance with Data Protection Law (including the obligations laid down in Article 28 of the GDPR and corresponding legal requirements in the U.K.,) and allow for and contribute to reasonably frequent audits, including inspections, conducted by Customer or another auditor mandated by Customer, provided that (i) each party shall bear its own costs in connection with an audit up to one (1) audit per contractual year and (ii) for any further audits during the same contractual year, Customer shall bear the costs and (iii) each party shall always bear its own costs in relation to audits initiated by a competent supervisory authority; and
     • Immediately inform Customer if, in its opinion, an instruction infringes Data Protection Law.
   • The subject matter of the Processing is described in Exhibit A of this Exhibit. Customer’s instructions relating to the Processing will be documented in the Agreement or another written agreement signed by the parties’ authorized representatives.
   • Customer agrees that Solver may engage third party sub-processors to process Personal Data in accordance with this Section.
     • Customer hereby authorizes Solver to appoint the sub-processors that Solver has engaged as of the Effective Date. A list of current sub-processors is available upon written request.
     • Solver shall provide Customer prior notice of any additional or replacement sub-processors. After being notified, Customer must notify Solver within ten (10) business days of any reasonable objection related to such sub-processors’ Processing of Personal Data it has to such sub-processors.  Failure to notify Solver within this time frame will constitute approval of such sub-processors.
     • In the event Customer provides reasonable objection pursuant to Section 3(c)(ii) of this Exhibit, Solver will use commercially reasonable efforts to make a change in the service or Customer’s configuration available to avoid Processing of Personal Data by such sub-processor. If Solver is unable to make available such change within a reasonable period of time or to otherwise address the grounds for Customer’s objections, which shall not exceed one hundred eighty (180) days, Customer may terminate the Agreement or purchase orders under the Agreement in respect only to those services which cannot be provided by Solver without the use of the objected-to sub-processor, by providing written notice to Solver. Customer shall receive a refund of any prepaid fees for the period following the effective date of termination in respect of such terminated services.
     • In the event Solver engages sub-processors under the Agreement, Solver shall place the same or similar obligations as those in this Exhibit on such sub-processors or other obligations required by Data Protection Law. Solver shall remain fully liable to Customer for such sub-processors’ performance of their obligations arising out of the Agreement.
   • Solver will notify Customer without undue delay and, where feasible, no later than 72 hours after becoming aware of a Personal Data Breach.
   • Where Customer faces an actual or potential claim arising out of or related to violation of any Data Protection Law (e.g., Article 82 of the GDPR or corresponding legal requirements in the U.K.,) concerning the Services, Solver will promptly provide all materials and information reasonably requested by Customer that are available to Solver and relevant to the defense of such claim and the underlying circumstances concerning the claim.
   • Solver will comply with Data Protection Law.

• To the extent applicable in connection with Solver’s processing activities, transfers of Personal Data out of the EEA shall be governed by the EU Standard Contractual Clauses (“SCCs”), the terms of which are hereby incorporated herein. In furtherance of the foregoing., Customer and Solver agree that:
  • Customer will act as the data exporter and Solver will act as the data importer under the SCCs.
  • For purposes of Annex I to the SCCs, the categories of data subjects, data, special categories of data (if appropriate), and the processing operations shall be as set out in Exhibit A, part A.
  • For purposes of Annex II to the SCCs, the technical and organizational measures shall be as set out in Exhibit A, Part C.
  • The optional docking clause in Clause 7 of the SCCs shall be included.
  • The audits described in Clause 8.9 of the SCCs shall be performed in accordance with Section 3 of this Agreement.
  • Section 3 of this Agreement shall include the procedures for Solver’s general authorization to appoint Subprocessors under Clause 9(a)(Option 1) of the SCCs,
  • The optional language in Section 11(a) of the SCCs shall not be included.
  • For Clause 14 of the SCCs, the following language shall apply: The supervisory authority with responsibility for ensuring compliance by the data exporter with the GDPR shall act as competent supervisory authority;
  • Option 1 of Clause 17 of the SCCs shall apply, and the SCCs will be governed by the law of the Member State of the supervisory authority with responsibility for ensuring compliance by the data exporter with the GDPR; and
  • Any dispute arising from the Standard Contractual Clauses shall be resolved by the courts of the Member State of the supervisory authority with responsibility for ensuring compliance by the data exporter with the GDPR.
• To the extent applicable in connection with Solver’s processing activities, transfers of Personal Data out of the United Kingdom shall be governed by the UK Addendum to the SCCs (“UK Addendum”), the terms of which are hereby incorporated herein. In furtherance of the foregoing., Customer and Solver agree that Tables 1 through 4 of the UK Addendum shall be satisfied by the following information:
  • Table 1: Reference to Table 1 shall be satisfied by the information in Exhibit A, part A.
  • Table 2: For Table 2, the version of the SCCs shall be the Controller to Processor module.
  • Table 3: Reference to Table 3 shall be satisfied by the information in Exhibit A.
  • Table 4: For Table 4, the Exporter and Importer shall have the rights outlined in Section 19 of the UK Addendum.

4. California Specific Provisions
   • This Section 4 is applicable to California businesses only and is intended to provide guidance on Solver’s compliance with Cal. Civ. Code § 1798.100 et. seq., otherwise known as the “California Consumer Privacy Act of 2018” or “CCPA” in the performance of Services. Capitalized terms used throughout this Section but undefined elsewhere shall have their respect meanings under CCPA. In performing the Services, Solver operates as Customer’s service provider under the CCPA. As Customer’s service provider, Solver processes certain personal information, in accordance with Customer’s instructions, to fulfill a legitimate business purpose for Customer. The business purpose(s) for which Customer has retained Solver for include any one or more of the following activities: maintaining or servicing Solver accounts, providing customer service in connection with the Service, processing or fulfilling orders and transaction, providing training and consulting services, providing cloud and SaaS services, or providing similar services on Customer’s behalf. The parties acknowledge that Solver has not and will not receive any monetary or other valuable consideration in exchange for its receipt of personal information, and that any consideration paid by Customer to Solver under the Agreement relates only to Solver’s provision of the Services. Solver shall not (a) sell or share (as such terms are defined under the CCPA) personal information; (b) retain, use, or disclose personal information for any purpose other than for the specific purpose of performing the Services, including retaining, using, or disclosing personal information for a commercial purpose other than providing the Services; (c) retain, use, or disclose personal information outside of the direct business relationship between Customer and Solver; or (d) combine the personal information with any other personal information, except as permitted under the CCPA. The CCPA provides California Consumers (“Consumers”) the right to request that Solver delete the Consumer’s personal information under certain conditions. When Solver receives a request to delete personal information from a Consumer, Solver will verify the identity of the Consumer and then, as applicable, direct its service providers to delete the Consumer’s personal information approved for deletion. Accordingly, in the event that Customer receives a verifiable Consumer request to delete personal information held by Solver (as determined in Customer’s sole discretion), Solver shall fulfill such request without delay. Solver shall not respond to any other request made in any other manner by Customer so as to ensure the confidentiality, integrity, and security of the personal information it processes.

Exhibit A

1. List of Parties

Data exporter(s):

Data importer(s):

Solver will implement and maintain the security measures set out in this Appendix 2. Solver reserves the right to revise these security measures at any time, without notice, so long as such revisions do not materially reduce the protection provided for Personal Data that Solver processes in the course of providing the Services.

• Organizational management and staff responsible for the development, implementation and maintenance of Solver’s information security controls. Executive leadership is involved in reviewing and approving all security policies.
• Audit and risk assessment procedures for the purposes of periodic review and assessment of security risks to Solver’s organization, monitoring compliance with Solver’s policies and procedures, and reporting the condition of its information security and compliance to internal senior management.
• Logical separation of data, restricted (e.g., role-based) access and monitoring, and utilization of commercially available and industry standard encryption technologies for Personal Data.
• Personal Data is encrypted in transit using Transport Layer Security. TLS is active on all accounts by default and cannot be disabled by end users. Personal Data (including backups) is encrypted at rest with Advanced Encryption Standard (AES).
• Logical access controls designed to manage electronic access to data and system functionality based on authority levels and job functions.
• User IDs and password configuration requirements have been established that are designed to prevent unauthorized access to production systems.
• Solver’s production resources are hosted in Microsoft Azure. Physical and environmental security is handled entirely by Microsoft and its vendors. Microsoft has provided a list of compliance and regulatory security assurances, including representations of SOC 2 and HIPAA compliance.
• Operational procedures and controls to provide for application deployment and change management, capacity management, and separation of development, testing and production.
• Incidents are handled in accordance with Solver’s incident response plan. Designated personnel are responsible for managing the response process in accordance with the incident response plan, completing investigations, mitigation, and coordinating any external communications that may be necessary.
• Solver implements vulnerability assessment and threat protection technologies and scheduled monitoring procedures to identify, assess, mitigate and protect against identified security threats, viruses and other malicious code.
• Business continuity and disaster recovery procedures designed to maintain service and/or recovery from foreseeable emergency situations or disasters.

Exhibit 2 - Solver Availability and Support SLA

This Service Level Agreement (“SLA”) describes Solver’s availability and support service level policies for use of the Services under the terms of the Agreement. The SLA is effective during the term of a service plan between Solver and the Customer. Capitalized terms in this SLA shall have the meaning assigned to them in the Agreement unless otherwise defined in this Exhibit.

Service Availability. During the Subscription Term, Solver shall maintain a Service Availability Percentage at or above 99% for a given calendar month (“Uptime Target”). Service Availability means the ability to login and make beneficial use of the Services in accordance with the documentation. Customer’s sole and exclusive remedy for Solver’s failure to meet the Uptime Target in a month (each an “Availability Failure”) is as follows: (a) for the second month of an Availability Failure in a rolling six (6) month period, Customer will be eligible for a credit of five percent (5%) of Customer’s monthly fees for the applicable month (calculated based on the monthly prorated amount for the then-applicable annual term); and (b) for the third or more months of an Availability Failure in a rolling six month period, Customer will be eligible for a credit of ten percent (10%) of Customer’s monthly fees for the applicable month (calculated based on the monthly prorated amount for the then-applicable annual term). Customer may claim a credit by providing notice of the Availability Failure to Solver and requesting the credit in writing within fourteen (14) days after the Availability Failure occurs. Solver shall apply credited amounts only to future fees due, if any, under the applicable service plan upon Solver’s verification of the Availability Failure and Customer’s eligibility for a credit.

The Service Availability Percentage is calculated monthly as follows: Service Availability Percentage = (Actual Service Availability / Planned Service Availability) * 100

Actual Service Availability means total minutes of Planned Service Availability in a calendar month minus minutes of unavailability for any reason other than Permitted Outages.

Planned Service Availability means total minutes in a calendar month minus minutes of Permitted Outages.

Permitted Outages means unavailability due to:

1. Scheduled Maintenance, which will not exceed 10 hours per week and will occur on weekends beginning Friday evening in the local Azure region, or at another time with at least two (2) days’ prior written notice.
2. Emergency Maintenance, required to address events outside Solver’s reasonable control that could not have been anticipated and require prompt action to protect the integrity or security of Customer Data, Confidential Information, or the Services.
3. General Internet Failures or disruptions in third-party infrastructure or hosting environments outside of Solver’s reasonable control.

Support. Subject to Customer’s compliance with the terms of the Agreement and the Support Technical and maintenance policy found here: https://support.solverglobal.com/hc/en-us/articles/360051250311-FAQ-All-Info-Solver-Technical-Support-and-Maintenance-Policy, Solver shall respond to support requests and shall use commercially reasonable efforts to promptly resolve each request. Customer may submit support cases to Solver through the following channels:

• https://support.solverglobal.com/

Last Revised:  November 20, 2025 
Solver reserves the right to update support policies from time to time.