← Back to Board Box

Terms of Service

Last updated: February 4, 2026

Provider-Specific Terms for Board Box Inc.

These Provider-Specific Terms (the "Provider Terms") are issued by Board Box Inc, a Delaware corporation ("Provider," "we," "us," or "our"). They supplement and form part of the Bonterms Standard Online Cloud Terms (Version 1.0) (the "Standard Terms"). By creating an account, clicking "I agree," or using the Service, Customer agrees to be bound by the Standard Terms and these Provider Terms.

Standard Terms: https://www.bonterms.com/online-terms/cloud/standard

If there is a conflict between these Provider Terms and the Standard Terms, these Provider Terms control to the extent permitted by the Standard Terms.


1) Parties; Notices; Service

Provider: Board Box Inc

Legal notices: legal@boardbox.ai

Security/incident contact: security@boardbox.ai

Privacy/DSAR contact: privacy@boardbox.ai

Service: Provider's hosted software platform and APIs designed to assist HOA/COA/community-association management workflows, including document storage, document search, document sharing features, and AI-assisted analysis and Q&A (the "Service").

Effective Date: For each Customer, the earlier of (a) the date Customer clicks to accept; or (b) the date Customer first uses the Service with notice of these Provider Terms.


2) Attachments Incorporated by Reference; Notices

2.1 Attachments incorporated

The following documents are incorporated into the Agreement and available at the linked URLs. Capitalized terms not defined here have the meanings in the Standard Terms.

2.2 Privacy Policy notice

The Privacy Policy at /privacy is provided as a notice describing Provider's privacy practices. It does not modify the Agreement. If there is a conflict between the Privacy Policy and the Agreement, the Agreement controls.


3) Orders; Subscription Term; Renewal; Fees

Orders. Customer's subscription and commercial terms are set forth in an Order. Orders may be entered into through an online flow or a separate written agreement referencing the Agreement.

Subscription Term. Unless an Order states otherwise, each Subscription Term is twelve (12) months.

Renewal. Subscriptions auto-renew for successive twelve (12) month terms unless a party provides non-renewal notice in accordance with the applicable Order.

Billing and payment. Monthly or annual payment options are as specified in the Order. Late payments are subject to the late charge allowed under the Standard Terms.


4) Permitted Use; HOA/Manager Use; Sharing Features

4.1 Permitted Use in the HOA ecosystem

Customer may use the Service for Customer's business purposes, including (where applicable) providing community-association management services to Customer's clients (each, an "Association Client"), provided that:

For clarity, using the Service to manage documents and workflows on behalf of Association Clients is permitted and is not prohibited solely because Customer performs services for third parties.

4.2 Users; authentication

"Users" are those individuals Customer authorizes to access the Service under Customer's account. Customer is responsible for its Users' actions and for maintaining appropriate access controls. If the Service uses third-party identity and access management (such as single sign-on), Customer is responsible for administering those credentials and promptly notifying Provider of any compromise.

4.3 Controlled sharing and "Authorized Recipients"

The Service may allow Customer or its Users to share specific Customer Data (e.g., a document or a workspace item) with third parties via Provider's sharing features (including share links) ("Shared Content").

A third party who receives Shared Content is an "Authorized Recipient" if the Customer or its Users intentionally provided access to that third party through the Service's sharing features.

Permission to share. Customer is permitted to grant Authorized Recipients access to Shared Content through the Service, and such access will be treated as "sharing Customer Data as Customer directs through the Cloud Service."

Customer responsibility for sharing. Customer is solely responsible for:

Confidentiality of share links. If Shared Content is accessible via a link, that link must be treated as confidential. Customer must promptly disable/revoke sharing if it believes a link has been misdirected or compromised.

Provider controls. Provider may impose reasonable technical limitations on sharing (e.g., expirations, access gating, rate limits) and may suspend or disable sharing features or access to Shared Content to address security, abuse, legal compliance, or a Suspension Event.


5) AI Features; Output; Customer Responsibilities

5.1 Human review; no legal advice

The Service may generate recommendations, classifications, summaries, comparisons, or drafted communications (collectively, "Output"). Output may be inaccurate or incomplete. Customer is responsible for reviewing Output and for all decisions and actions taken using or in reliance on the Service or Output.

No legal advice. Provider does not practice law and does not provide legal advice. The Service does not provide legal, compliance, or fair-housing determinations.

5.2 Fair housing and anti-discrimination

Customer will not use the Service in a manner that violates the Fair Housing Act or other applicable anti-discrimination laws. Customer will implement appropriate human review before issuing notices, fines, approvals/denials, or other housing-related decisions.

5.3 Prohibited uses (AI and otherwise)

In addition to the AUP, Customer will not use the Service for:

5.4 Vendor bid comparisons and decision support

If the Service provides bid matrices, comparisons, or scoring, those features are decision-support tools only. Customer remains responsible for verifying inputs, evaluating vendors, and making procurement decisions.


6) Data; Privacy; Security; AI Processing; Training

6.1 Roles; service provider/processor

For Customer Personal Data, Provider acts as a service provider/processor under applicable data-protection laws. Provider does not "sell" or "share" Customer Personal Data as those terms are defined under the CCPA/CPRA.

6.2 DPA and subprocessors

The DPA governs processing of Customer Personal Data, including security measures, subprocessors, and (if applicable) international transfers. Provider may use subprocessors consistent with the DPA and remains responsible for their compliance.

6.3 Security and incident notification

Provider will maintain the Security Measures posted at /security and will notify Customer of a Security Incident consistent with the DPA.

6.4 AI service providers

To provide AI-assisted features, Provider may transmit relevant portions of Customer Data (e.g., document excerpts and user prompts) to third-party AI service providers listed as subprocessors ("AI Providers"), solely to provide and maintain the Service.

No training on Customer Data (Provider). Provider does not train foundation models on Customer Data.

AI Provider training restrictions (as configured). Provider will use commercially reasonable measures (including contractual and configuration controls where available) to prevent AI Providers from using Customer Data to train their generally available foundation models.

6.5 Usage data, de-identification, and improvements

Provider may collect and use Usage Data as described in the Standard Terms and may use de-identified and/or aggregated data to operate, maintain, and improve the Service, consistent with the Agreement and applicable law.


7) Sensitive Data

No Sensitive Data by default. Customer will not submit "Sensitive Data" (as defined in the Standard Terms) to the Service.

Optional exception by written agreement. If an Order or Amendment expressly authorizes limited categories of Sensitive Data, then Customer may submit only those authorized categories and only in accordance with any additional safeguards described in that Order/Amendment, the DPA, and the Security Measures.


8) Third-Party Services and Integrations

Certain features may depend on third-party services or integrations (e.g., identity providers, email, payments). Customer's use of third-party services is governed by those providers' terms, and Provider is not responsible for third-party services except as stated in the Agreement.


9) Warranties; Disclaimers; Trials/Beta

Output disclaimer. Output is provided "as is." Customer must review and validate Output and is solely responsible for its use of Output.

Trials and Betas. Any feature labeled alpha, beta, early access, or preview is provided "as is," may be discontinued, and may be excluded from SLA/support commitments to the extent permitted by the Standard Terms.


10) Indemnities and Liability

Indemnities. Indemnities are as stated in the Standard Terms. Without limiting the Standard Terms, Customer's indemnity includes third-party claims arising from Customer's use of the Service or Output in violation of the AUP, applicable law (including fair-housing laws), or the Agreement.

Limitations of liability. Limitations of liability are as stated in the Standard Terms (including any General Cap, Enhanced Cap, and Uncapped Claims structure). Nothing in these Provider Terms is intended to reduce any non-excludable liability that cannot be limited by law.


11) Governing Law; Venue; Notices

Governing law and venue. The Governing Law is the State of California, and the Courts are the state and federal courts located in San Francisco, California.

Notices to Provider. Legal notices to Provider must be sent to: legal@boardbox.ai.


12) Changes to Attachments; Changes to These Provider Terms

Operational Changes (Attachments). With notice to Customer, Provider may modify the AUP, Security Measures, SLA (if any), or Support Policy to reflect new features or changing practices, provided such modifications are not retroactive and do not materially decrease Provider's overall obligations during a Subscription Term.

Other changes. Any other changes to these Provider Terms or the Standard Terms will be made only by a written Amendment signed by authorized representatives, or will apply at renewal of a Subscription Term (as applicable).


13) Order of Precedence; Order Modification Rule

Precedence. The order of precedence for the Agreement is: (i) any signed Amendment, (ii) these Provider Terms and Attachments, and (iii) the Standard Terms.

Orders. An Order may not modify any other part of the Agreement unless the Order specifically identifies the provisions that it supersedes.


14) Supplemental Definitions

"Authorized Recipient" has the meaning in Section 4.3.

"Output" has the meaning in Section 5.1.

"Shared Content" has the meaning in Section 4.3.

"AI Providers" has the meaning in Section 6.4.


Bonterms NDA

Bonterms Standard Online Cloud Terms
(Version 1.0)


These Standard Online Cloud Terms are implemented by Provider by reference from its Website.



Role of Bonterms: Bonterms publishes these Standard Terms but is not a party to the Agreement created between Provider and Customer and has no responsibility to either for their use.

  1. Entering into this Agreement.
    1. The Agreement. Customer and Provider agree to the terms of these Bonterms Standard Online Cloud Terms (Version 1.0) ("Standard Terms") and enter into this Agreement effective upon the earlier to occur of Customer's first access to the Cloud Service or entry into an Order ("Effective Date"). "Agreement" means, collectively, these Standard Terms, the Provider-Specific Terms and any Amendments. Capitalized terms are defined in context or in Section 20 (Definitions).
    2. Provider-Specific Terms. Provider may, by stating as such when it incorporates these Standard Terms into the Agreement on its Website, (i) add introductory language ("Introductory Language"), (ii) make additions to or modifications of these Standard Terms ("Additional Terms") or (iii) add Attachments. Any Introductory Language, Additional Terms and Attachments are collectively referred to as "Provider-Specific Terms".
    3. Order of Precedence. In the event of a conflict between the elements of the terms and conditions making up this Agreement, the order of precedence is: (i) any Amendment, (ii) Provider-Specific Terms and (iii) these Standard Terms.
  2. Using the Cloud Service.
    1. Permitted Use. Subject to this Agreement, Customer may use the Cloud Service for its own business purposes in accordance with its Subscription ("Permitted Use"). This includes the right to copy and use the Provider Software (if any) and Documentation as part of Customer's Permitted Use. Customer will comply with the Documentation in using the Cloud Service.
    2. Users. Customer may permit Users to use the Cloud Service on its behalf. Customer is responsible for provisioning and managing its User accounts, for its Users' actions through the Cloud Service and for their compliance with this Agreement. Customer will ensure that Users keep their login credentials confidential and will promptly notify Provider upon learning of any compromise of User accounts or credentials.
    3. Affiliates. Customer's Affiliates may serve as Users under this Agreement. Alternatively, Customer's Affiliates may enter into their own Orders as mutually agreed with Provider, which creates a separate agreement between each such Affiliate and Provider incorporating this Agreement with the Affiliate treated as "Customer". Neither Customer nor any Customer Affiliate has any rights under each other's separate agreement with Provider, and breach or termination of any such separate agreement affects only that agreement.
  3. Customer Data.
    1. Use of Customer Data. Subject to this Agreement, Provider will access and use Customer Data solely to provide and maintain the Cloud Service, Support and Professional Services under this Agreement ("Use of Customer Data"). Use of Customer Data includes sharing Customer Data as Customer directs through the Cloud Service, but Provider will not otherwise disclose Customer Data to third parties except as permitted in this Agreement.
    2. Security. Provider will implement and maintain the Security Measures, if any, identified in the Provider-Specific Terms. If no Security Measures are identified, Provider will use appropriate technical and organizational measures designed to prevent unauthorized access, use, alteration or disclosure of Customer Data.
    3. DPA. The parties will adhere to the Data Protection Addendum (DPA), if any, identified in the Provider-Specific Terms.
    4. Usage Data. Provider may collect Usage Data and use it to operate, improve and support the Cloud Service and for other lawful business purposes, including benchmarking and reports. However, Provider will not disclose Usage Data externally unless it is (a) de-identified so that it does not identify Customer, its Users or any other person and (b) aggregated with data across other customers.
  4. Mutual Compliance with Laws. Each party will comply with all Laws that apply to its performance under this Agreement.
  5. Support and SLA.
    1. Support. Provider will provide Support for the Cloud Service as described in any Support Policy identified in the Provider-Specific Terms.
    2. SLA. Provider will adhere to any Service Level Agreement (SLA) identified in the Provider-Specific Terms.
  6. Warranties.
    1. Mutual Warranties. Each party represents and warrants that:
      1. it has the legal power and authority to enter into this Agreement, and
      2. it will use industry-standard measures to avoid introducing Viruses into the Cloud Service.
    2. Performance Warranty.
      1. Scope. Provider warrants that the Cloud Service will perform materially as described in the Documentation and Provider will not materially decrease the overall functionality of the Cloud Service during the Subscription Term (the "Performance Warranty").
      2. Claim Report. Customer must report a breach of warranty in reasonable detail ("Claim") within 30 days after discovering the issue in the Cloud Service ("Claim Period").
      3. Remedy. Within 30 days of receiving a verified Claim during the Claim Period ("Fix Period"), Provider will use reasonable efforts to correct or provide a reasonable workaround ("Fix") for the Claim. If Provider fails to provide a Fix during the Fix Period, either party may on notice to the other terminate the Order as it relates to the nonconforming Cloud Service and Provider will refund to Customer any prepaid, unused fees for the terminated portion of the Subscription Term.
      4. The procedures set forth in this Section 6.2 are Customer's exclusive remedies and Provider's sole liability for breach of the Performance Warranty.
    3. Disclaimers. Except as expressly set out in this Agreement, each party disclaims all warranties, whether express, implied, statutory or otherwise, including warranties of merchantability, fitness for a particular purpose, title and noninfringement. Provider's warranties in this Section 6 do not apply to issues arising from Third-Party Platforms or misuse or unauthorized modifications of the Cloud Service. These disclaimers apply to the full extent permitted by Law.
  7. Usage Rules.
    1. Compliance. Customer (a) will comply with any Acceptable Use Policy (AUP) identified in the Provider-Specific Terms and (b) represents and warrants that it has all rights necessary to use Customer Data with the Cloud Service and grant Provider the rights to Customer Data specified in this Agreement, without violating third-party intellectual property, privacy or other rights. Between the parties, Customer is responsible for the content and accuracy of Customer Data.
    2. High-Risk Activities and Sensitive Data. Customer:
      1. will not use the Cloud Service for High-Risk Activities,
      2. will not submit Sensitive Data to the Cloud Service, and
      3. acknowledges that the Cloud Service is not designed for (and Provider has no liability for) use prohibited in this Section 7.2.
    3. Restrictions. Customer will not and will not permit anyone else to: (a) sell, sublicense, distribute or rent the Cloud Service (in whole or part), grant non-Users access to the Cloud Service or use the Cloud Service to provide a hosted or managed service to others, (b) reverse engineer, decompile or seek to access the source code of the Cloud Service, except to the extent these restrictions are prohibited by Laws and then only upon advance notice to Provider, (c) copy, modify, create derivative works of or remove proprietary notices from the Cloud Service, (d) conduct security or vulnerability tests of the Cloud Service, interfere with its operation or circumvent its access restrictions or (e) use the Cloud Service to develop a product that competes with the Cloud Service.
  8. Third-Party Platforms. To the extent offered by Provider, Customer may choose to enable integrations or exchange Customer Data with Third-Party Platforms. Customer's use of a Third-Party Platform is governed by its agreement with the relevant provider, not this Agreement, and Provider is not responsible for Third-Party Platforms or how their providers use Customer Data.
  9. Professional Services. Provider will perform Professional Services as described in an Order or Statement of Work, which may identify additional terms or milestones for the Professional Services. Customer will give Provider timely access to Customer Materials reasonably needed for Professional Services, and Provider will use the Customer Materials only for purposes of providing Professional Services. Subject to any limits in an Order or Statement of Work, Customer will reimburse Provider's reasonable travel and lodging expenses incurred in providing Professional Services. Customer may use code or other deliverables that Provider furnishes as part of Professional Services only in connection with Customer's authorized use of the Cloud Service under this Agreement.
  10. Fees.
    1. Payment. Customer will pay the fees described in the Order. Unless the Order states otherwise, all amounts are due within 30 days after the invoice date (the "Payment Period"). Late payments are subject to a charge of 1.5% per month or the maximum amount allowed by Law, whichever is less. All fees and expenses are nonrefundable except as expressly set out in this Agreement.
    2. Taxes. Customer is responsible for any sales, use, GST, value-added, withholding or similar taxes or levies that apply to its Orders, whether domestic or foreign ("Taxes"), other than Provider's income tax. Fees and expenses are exclusive of Taxes.
    3. Payment Disputes. If Customer disputes an invoice in good faith, it will notify Provider within the Payment Period and the parties will seek to resolve the dispute over a 15-day discussion period. Customer is not required to pay disputed amounts during the discussion period, but will timely pay all undisputed amounts. After the discussion period, either party may pursue any available remedies.
  11. Suspension. Provider may suspend Customer's access to the Cloud Service and related services due to a Suspension Event, but where practicable will give Customer prior notice so that Customer may seek to resolve the issue and avoid suspension. Provider is not required to give prior notice in exigent circumstances or for a suspension made to avoid material harm or violation of Law. Once the Suspension Event is resolved, Provider will promptly restore Customer's access to the Cloud Service in accordance with this Agreement. "Suspension Event" means (a) Customer's account is 30 days or more overdue, (b) Customer is in breach of Section 7 (Usage Rules) or (c) Customer's use of the Cloud Service risks material harm to the Cloud Service or others.
  12. Term and Termination.
    1. Subscription Terms. Each Subscription Term will last for an initial 12-month period unless the Order states otherwise.
    2. Term of Agreement. This Agreement starts on the Effective Date and continues until the end of all Subscription Terms, unless sooner terminated in accordance with its terms. If no Subscription is in effect, either party may terminate this Agreement for any or no reason with notice to the other party.
    3. Termination. Either party may terminate this Agreement (including all Subscriptions) if the other party (a) fails to cure a material breach of this Agreement within 30 days after notice, (b) ceases operation without a successor or (c) seeks protection under a bankruptcy, receivership, trust deed, creditors' arrangement, composition or comparable proceeding, or if such a proceeding is instituted against that party and not dismissed within 60 days.
    4. Data Export and Deletion.
      1. During a Subscription Term, Customer may export Customer Data from the Cloud Service (or Provider will otherwise make the Customer Data available to Customer) as described in the Documentation.
      2. After termination or expiration of this Agreement, within 60 days of request, Provider will delete Customer Data and each party will delete any Confidential Information of the other in its possession or control.
      3. Provider will not delete Customer Data where prohibited by Law or as required for a legal claim or proceeding, and Section 16 will continue to apply to retained Customer Data until deletion.
    5. Effect of Termination. Upon termination of this Agreement, each party will (a) promptly return or delete the other's Confidential Information (subject to Section 12.4.3), (b) if Customer, cease using the Cloud Service and Documentation and (c) if Provider, cease using Customer Data. Termination of this Agreement will not affect any claims or liabilities arising prior to termination.
  13. Liability.
    1. Liability Caps.
      1. Excluding the Uncapped Claims, each party's total cumulative liability arising out of or relating to this Agreement will not exceed the General Cap.
      2. The "General Cap" is the amount paid or payable by Customer to Provider under this Agreement in the 12 months before the first event giving rise to liability.
    2. Damages Exclusions. Excluding the Uncapped Claims, neither party is liable for any (a) loss of use, data, goodwill, revenues, profits, investments or other economic advantage or (b) special, incidental, indirect, consequential or punitive damages, regardless of whether the party was advised of the possibility of the damages and regardless of the legal theory on which the claim is made.
    3. Uncapped Claims. "Uncapped Claims" means (a) the indemnifying party's obligations under Section 15 (Indemnification), (b) either party's infringement or misappropriation of the other party's intellectual property rights, (c) any breach of Section 16 (Confidentiality) or (d) liabilities that cannot be limited by Law.
    4. Limitations Applicability. The limitations in this Section 13 apply to the full extent permitted by Law and regardless of whether a party was advised of the possibility of the damages.
  14. Intellectual Property. Provider retains all intellectual property rights in the Cloud Service, Professional Services deliverables, Documentation and Provider's Confidential Information. Customer retains all intellectual property rights in Customer Data, Customer Materials and Customer's Confidential Information. Customer grants Provider a nonexclusive license to use Customer Data and Customer Materials for the purposes of performing under this Agreement.
  15. Indemnification.
    1. IP Indemnity by Provider. Provider will defend Customer against any third-party claim to the extent alleging that the Cloud Service, when used by Customer as authorized in this Agreement, infringes or misappropriates a third party's intellectual property rights, and Provider will indemnify and hold harmless Customer against any damages finally awarded against Customer (or any settlement agreed by Provider) resulting from the claim.
    2. IP Indemnity by Customer. Customer will defend Provider against any third-party claim to the extent arising from Customer Data or Customer Materials or alleging that Customer's use of the Cloud Service in breach of this Agreement infringes or misappropriates a third party's intellectual property rights, and Customer will indemnify and hold harmless Provider against any damages finally awarded against Provider (or any settlement agreed by Customer) resulting from the claim.
    3. Procedures. The indemnifying party's obligations in this Section 15 are subject to receiving from the indemnified party: (a) prompt notice of the claim, (b) sole control over the defense and settlement of the claim and (c) reasonable cooperation in the defense. The indemnifying party may not settle a claim without the indemnified party's prior approval if settlement would require the indemnified party to admit fault or take or refrain from taking any action (except regarding use of the Cloud Service when Provider is the indemnifying party). The indemnified party may participate in a claim with its own counsel at its own expense.
    4. Mitigation. In response to an infringement or misappropriation claim, if required by settlement or injunction or as Provider determines necessary to avoid material liability, Provider may: (a) procure rights for Customer's continued use of the Cloud Service, (b) replace or modify the allegedly infringing portion of the Cloud Service to avoid infringement, without reducing the Cloud Service's overall functionality or (c) terminate the affected Order and refund to Customer any prepaid, unused fees for the terminated portion of the Subscription Term.
    5. Exceptions. Provider's obligations in this Section 15 do not apply to claims resulting from (a) modification or unauthorized use of the Cloud Service, (b) use of the Cloud Service in combination with items not provided by Provider, including Third-Party Platforms or (c) Provider Software other than the most recent release, if Provider made available (at no additional charge) a newer release that would avoid infringement.
    6. Exclusive Remedy. This Section 15 sets out the indemnified party's exclusive remedy and the indemnifying party's sole liability regarding third-party claims of intellectual property infringement or misappropriation covered by this Section 15.
  16. Confidentiality.
    1. Use and Protection. As recipient, each party will (a) use Confidential Information only to fulfill its obligations and exercise its rights under this Agreement, (b) not disclose Confidential Information to third parties without the discloser's prior approval, except as permitted in this Agreement and (c) protect Confidential Information using at least the same precautions recipient uses for its own similar information and no less than a reasonable standard of care.
    2. Permitted Disclosures.
      1. Personnel. The recipient may disclose Confidential Information to its employees, agents, contractors and other representatives having a legitimate need to know (including, for Provider, the subcontractors referenced in Section 19.9), provided it remains responsible for their compliance with this Section 16 and they are bound to confidentiality obligations no less protective than this Section 16.
      2. Required by Law. The recipient may disclose Confidential Information (including Customer Data) to the extent required by Law. If permitted by Law, the recipient will give the discloser reasonable advance notice of the required disclosure and reasonably cooperate, at the discloser's expense, to obtain confidential treatment for the Confidential Information.
    3. Exclusions. These confidentiality obligations do not apply to information that the recipient can document (a) is or becomes public knowledge through no fault of the recipient, (b) it rightfully knew or possessed, without confidentiality restrictions, prior to receipt from the discloser, (c) it rightfully received from a third party without confidentiality restrictions or (d) it independently developed without using or referencing Confidential Information.
    4. Remedies. Breach of this Section 16 may cause substantial harm for which monetary damages are an insufficient remedy. Upon a breach of this Section 16, the discloser is entitled to seek appropriate equitable relief, including an injunction, in addition to other remedies.
  17. Publicity. Neither party may publicly announce this Agreement without the other party's prior approval or except as required by Laws.
  18. Trials and Betas. Use of Trials and Betas is permitted only for Customer's internal evaluation during the period designated by Provider on the Order (or if not designated, 30 days). Either party may terminate Customer's use of Trials and Betas at any time for any reason. Trials and Betas may be inoperable, incomplete or include features never released. Notwithstanding anything else in this Agreement, Provider offers no warranty, indemnity, SLA or Support for Trials and Betas and its liability for Trials and Betas will not exceed US$1,000.
  19. General Terms.
    1. Assignment. Neither party may assign this Agreement without the prior consent of the other party, except that either party may assign this Agreement, with notice to the other party, in connection with the assigning party's merger, reorganization, acquisition or other transfer of all or substantially all of its assets or voting securities. Any non-permitted assignment is void. This Agreement will bind and inure to the benefit of each party's permitted successors and assigns.
    2. Governing Law and Courts.
      1. The Governing Law governs this Agreement and any action arising out of or relating to this Agreement, without reference to conflict of law rules. The parties will adjudicate any such action in the Courts and each party consents to the exclusive jurisdiction and venue of the Courts for these purposes.
      2. Unless otherwise specified in the Provider-Specific Terms, the Governing Law is the laws of the State of California and the Courts are the federal and state courts located in San Francisco, California.
    3. Notices.
      1. Except as set out in this Agreement, notices, requests and approvals under this Agreement must be in writing to the addresses specified by Provider and Customer and will be deemed given: (1) upon receipt if by personal delivery, (2) upon receipt if by certified or registered U.S. mail (return receipt requested), (3) one day after dispatch if by a commercial overnight delivery service or (4) upon delivery if by email.
      2. Provider and Customer will each initially specify their notice address through the Order process (or, in the case of Provider, in the Provider-Specific Terms) and either party may update its address with notice to the other. Provider may also send operational notices through the Cloud Service.
    4. Entire Agreement.
      1. This Agreement is the parties' entire agreement regarding its subject matter and supersedes any prior or contemporaneous agreements regarding its subject matter. In this Agreement, headings are for convenience only and "including" and similar terms are to be construed without limitation. Excluding Orders, terms in business forms, purchase orders or quotes used by either party will not amend or modify this Agreement; any such documents are for administrative purposes only. This Agreement may be executed in counterparts (including electronic copies and PDFs), each of which is deemed an original and which together form one and the same agreement. An Order may not modify any other part of this Agreement unless the Order specifically identifies the provisions that it supersedes.
      2. Bonterms, the publisher of these Standard Terms, is not a party to this Agreement and will have no liability or responsibility to either Provider or Customer for use of these Standard Terms.
    5. Amendments. Any amendments to this Agreement must be in writing and signed by each party's authorized representatives (an "Amendment").
    6. Operational Changes. With notice to Customer, Provider may modify the AUP, Security Measures, SLA or Support Policy to reflect new features or changing practices, but the modifications may not be retroactive or materially decrease Provider's overall obligations during a Subscription Term.
    7. Waivers and Severability. Waivers must be signed by the waiving party's authorized representative and cannot be implied from conduct. If any provision of this Agreement is held invalid, illegal or unenforceable, it will be limited to the minimum extent necessary so the rest of this Agreement remains in effect.
    8. Force Majeure. Neither party is liable for a delay or failure to perform this Agreement due to a Force Majeure. If a Force Majeure materially adversely affects the Cloud Service for 15 or more consecutive days, either party may terminate the affected Order(s) upon notice to the other and Provider will refund to Customer any prepaid, unused fees for the terminated portion of the Subscription Term. However, this Section does not limit Customer's obligations to pay fees owed.
    9. Subcontractors. Provider may use subcontractors and permit them to exercise its rights and fulfill its obligations, but Provider remains responsible for each subcontractor's compliance with this Agreement and for Provider's overall performance under this Agreement. This does not limit any additional terms for subprocessors under a DPA.
    10. Independent Contractors. The parties are independent contractors, not agents, partners or joint venturers.
    11. No Third-Party Beneficiaries. There are no third-party beneficiaries to this Agreement.
    12. Open Source. Provider Software distributed to Customer (if any) may include third-party open source software ("Open Source") as listed in the Documentation or by Provider upon request. Customer acknowledges that its license to use any Open Source will be the Open Source license applicable to such code and not the license to Provider Software set forth in Section 2.1 (Permitted Use) above to the extent required by such Open Source license.
    13. Export. Each party (a) will comply with all export and import Laws in performing this Agreement and (b) represents and warrants that it is not listed on any U.S. government list of prohibited or restricted parties or located in (or a national of) a country subject to a U.S. government embargo or designated by the U.S. government as a "terrorist supporting" country. Customer will not submit to the Cloud Service any data controlled under the U.S. International Traffic in Arms Regulations.
    14. Government Rights. To the extent applicable, the Cloud Service is "commercial computer software" or a "commercial item" for purposes of FAR 12.212 and DFARS 227.7202. Use, reproduction, release, modification, disclosure or transfer of the Cloud Service is governed solely by the terms of this Agreement, and all other use is prohibited.
  20. Definitions.
    • "Acceptable Use Policy" or "AUP" is defined in Section 7.1 (Compliance).
    • "Affiliate" means an entity controlled, controlling or under common control with a party, where control means at least 50% ownership or power to direct an entity's management.
    • "Agreement" is defined in Section 1.1 (The Agreement).
    • "Amendment" is defined in Section 19.5 (Amendments).
    • "Attachments" means any AUP, Security Measures, SLA, Support Policy or other policies specified in the Provider-Specific Terms.
    • "Cloud Service" means Provider's proprietary software as a service (SaaS) or cloud service as identified in the applicable Order. The Cloud Service includes the Provider Software and Documentation but not Professional Services deliverables or Third-Party Platforms.
    • "Confidential Information" means information disclosed by or on behalf of one party (as discloser) to the other party (as recipient) under this Agreement, in any form, which (a) the discloser identifies to recipient as "confidential" or "proprietary" or (b) should be reasonably understood as confidential or proprietary due to its nature and the circumstances of its disclosure. Provider's Confidential Information includes technical or performance information about the Cloud Service, and Customer's Confidential Information includes Customer Data.
    • "Courts" is defined in Section 19.2 (Governing Law and Courts).
    • "Customer" means the party identified as "Customer" in the applicable Order.
    • "Customer Data" means any data, content or materials that Customer (including its Users) submits to its Cloud Service accounts, including from Third-Party Platforms.
    • "Customer Materials" means materials and resources that Customer makes available to Provider in connection with Professional Services.
    • "Data Protection Addendum" or "DPA" is defined in Section 3.3 (DPA).
    • "Documentation" means Provider's standard usage documentation for the Cloud Service.
    • "Force Majeure" means an unforeseen event beyond a party's reasonable control, such as a strike, blockade, war, pandemic, act of terrorism, riot, third-party Internet or utility failure, refusal of government license or natural disaster, where the affected party takes reasonable and customary measures to avoid or mitigate such event's effects.
    • "Governing Law" is defined in Section 19.2 (Governing Law and Courts).
    • "High-Risk Activities" means activities where use or failure of the Cloud Service could lead to death, personal injury or environmental damage, including life support systems, emergency services, nuclear facilities, autonomous vehicles or air traffic control.
    • "Laws" means all laws, regulations, rules, court orders or other binding requirements of a government authority that apply to a party.
    • "Open Source" is defined in Section 19.12.
    • "Order" means an order by Customer for a Subscription that is entered into by the parties through the Website (including through an online flow) or separate written agreement referencing this Agreement.
    • "Professional Services" means training, migration or other professional services that Provider furnishes to Customer related to the Cloud Service.
    • "Provider" means the party providing the Cloud Service.
    • "Provider Software" means any proprietary apps or software that Provider distributes to Customer as part of the Cloud Service.
    • "Security Measures" is defined in Section 3.2 (Security).
    • "Sensitive Data" means (a) patient, medical or other protected health information regulated by the Health Insurance Portability and Accountability Act (as amended and supplemented) ("HIPAA"), (b) credit, debit, bank account or other financial account numbers, (c) social security numbers, driver's license numbers, passport numbers or other government-issued identification numbers, (d) information about a natural person's race, color, religion, ethnicity, age, sex, sexual orientation or gender identity (other than for purposes of demographic analysis), criminal history or trade union membership, (e) biometric information, (f) information regarding children under the age of 13 or (g) any information subject to the Payment Card Industry Data Security Standards ("PCI DSS").
    • "Statement of Work" or "SOW" means an ordering document for Professional Services that is signed by the parties and references this Agreement.
    • "Subscription" means the right for Customer to access the Cloud Service and any related Support as described in the applicable Order.
    • "Subscription Term" means the term for a Subscription as identified in the Order.
    • "Support" means support for the Cloud Service as described in Section 5.1 (Support).
    • "Support Policy" is defined in Section 5.1 (Support).
    • "Suspension Event" is defined in Section 11 (Suspension).
    • "Third-Party Platform" means any product, add-on or platform not provided by Provider that Customer uses with the Cloud Service.
    • "Trials and Betas" mean access to the Cloud Service on a free or trial basis or to particular features designated by Provider as "beta" or "early access".
    • "Usage Data" means Provider's technical logs, data and learnings about Customer's use of the Cloud Service, but excluding Customer Data.
    • "User" means anyone that Customer allows to use its accounts for the Cloud Service, who may include (a) employees, advisors and contractors of Customer and its Affiliates and (b) others if permitted in this Agreement, the Documentation or an Order.
    • "Virus" means viruses, malicious code or similar harmful materials.
    • "Website" means the Internet site, domain, application or other online mechanism through which Provider makes available Subscriptions to its Cloud Service.