Master Subscription Agreement

This master subscription agreement (the “Agreement”) is effective on the earlier of: the date of (i) the execution of an Order referencing this Agreement; or (ii) Customer’s use of the Services (the “Effective Date”), by and between Herd Security Inc., a company incorporated under the laws of the State of Delaware having its principal place of business at 310 Washington Blvd, Unit 307, Marina Del Rey, CA 90292 ( “Herd”) and the entity referenced in the Order (the “Customer”) (each, a “Party” and collectively, the “Parties”). Customer may use the Platform (as defined below) subject to the terms below.

If Customer has purchased the subscription granted hereunder from a partner, reseller or distributor authorized by Herd (“Partner”), to the extent there is any conflict between this Agreement and the agreement entered between you and the respective Partner, including any purchase order (“Partner Order Form”), then, as between Customer and Herd, this Agreement shall prevail. Any rights granted to you in such Partner Order Form which are not contained in this Agreement, apply only in connection with such Partner. In that case, you must seek redress or realization or enforcement of such rights solely with such Partner and not Herd.

1. Subscription.

1.1 Subject to the terms and conditions of this Agreement (including payment obligations), Herd hereby grants Customer, in connection with each Order, a limited, non-exclusive, non-sublicensable, non-transferable and revocable right to remotely access (i.e. on a SaaS basis) and/or use the Herd security platform (“Platform”) in object code form, during the corresponding Subscription Term (as defined in an Order), solely for Customer’s internal purposes and in accordance with the subscriptions specified in the applicable Order.

1.2 Unless otherwise indicated, the term “Platform” also includes all revisions, improvements and/or updates and any appliance, user manuals and documentation including Herd’s SLA (“Documentation”) provided to Customer in connection with the operation of the Platform. Customer may only use the Platform in accordance with the Documentation, subject to any use limitations indicated in an order document issued by Herd and agreed to by Customer for the provision of the applicable Platform and Services granted under this Agreement or Partner Order Form (if purchased via Partner) (collectively, “Order”), and applicable laws and regulations. Each Order is hereby incorporated into this Agreement by reference. To the extent of any conflict or inconsistency between the terms and conditions of this Agreement and an Order or a Partner Order, the former shall prevail (unless an Order specifically states otherwise). The Platform and any related services provided to Customer and detailed in an Order shall be referred to as the “Services”.

2. Fees.

If Customer has purchased the Services directly from Herd this Section 2 shall apply. Unless otherwise specified in the respective Order or this Agreement: (i) the Services are conditioned on Customer’s payment in full of the applicable fees set forth in each Order and Herd reserves the right to suspend Customer’s access to the Services for non or late payment, (ii) Customer will pay all amounts due under this Agreement in U.S. Dollars currency, (iii) all subscription fees are due at the commencement of the Subscription Term set out in the applicable Order and payable as described in the Order. If no payment terms are specified in the Order, all amounts invoiced hereunder are due and payable within thirty (30) days of the date of the invoice, and (iv) all fees and other amounts paid hereunder are non-refundable and without right of set off. Any amount not paid when required to be paid hereunder shall accrue interest on a daily basis until paid in full at the lesser of: (i) the rate of one and a half percent (1.5%) per month; or (ii) the highest amount permitted by applicable law. All amounts payable under each Order are exclusive of all sales, use, value- added, withholding, and other direct or indirect taxes, charges, levies and duties. Customer shall bear all value added, state, local, withholding, and other taxes or other charges applicable to the Services. If Customer purchased the subscription via a Partner, the Services are subject to the full payment of the applicable fees as set forth in the Partner Order Form.

3. Permitted Users. The Platform may be accessed solely by Customer or its Affiliates’ employees or service providers who are explicitly authorized by Customer to use the Platform (each, a “Permitted User”). Customer will ensure that the Permitted Users comply with the terms of this Agreement at all times; and shall be fully responsible for any breach of this Agreement by a Permitted User. Customer must promptly notify Herd upon becoming aware of any unauthorized access to or use of the Platform. “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.

4. Prohibited Uses. Except as specifically permitted herein, without the prior written consent of Herd, Customer shall not, and shall not allow any Permitted User or any third party to, directly or indirectly: (i) copy, modify, create derivative works of or distribute any part of the Platform (including by incorporation into its products); (ii) sell, license (or sub-license), lease, assign, transfer, pledge, or share Customer’s rights under this Agreement with any third party; (iii) use any “open source” or “copyleft software” in a manner that would require Herd to disclose the source code of the Platform to any third party; (iv) disclose the results of any testing or benchmarking of the Platform to any third party; (v) disassemble, decompile, reverse engineer or attempt to discover the Platform’s

source code or underlying algorithms; (vi) use the Platform for any competitive use or in a manner that violates or infringes any rights of any third party; (vii) remove or alter any trademarks or other proprietary notices related to the Platform; (viii) circumvent, disable or otherwise interfere with security-related features of the Platform or features that enforce use limitations; (ix) export, make available or use the Platform in any manner prohibited by applicable laws (including without limitation export control laws); and/or (x) transmit anymalicious code (i.e., software viruses, Trojan horses, worms, malware or other computer instructions, devices, or techniques that erase data or programming, infect, disrupt, damage, disable, or shut down a computer system or any component of such computer system) or other unlawful material in connection with the Platform.

5. Customer Data and Account Data.

5.1 As between the parties, Customer owns and retains all right, title and interest (including all intellectual property rights) in and to any data or information that originates, resides on, is otherwise processed through or derived from Customer’s systems and processed by Herd in the provision of the Services (“Customer Data”). Customer shall be solely responsible for the legality, reliability, integrity, accuracy and quality of all Customer Data. Customer hereby grants to Herd a non-exclusive, worldwide, royalty- free right to use Customer Data solely to the extent necessary to perform its obligations under this Agreement.

5.2 To the extent Customer Data contains any personally identifiable information, Customer warrants and represents that it has provided all appropriate notices, received the required consents or permits and/or have any and all ongoing legal bases, and has acted in compliance with applicable privacy laws and regulations, as to allow Herd to use the Customer Data to perform the Services in accordance with this Agreement. To the extent applicable, the Parties shall comply with Herd’s Data Processing Agreement (“DPA”), forms an integral part of this Agreement.

5.3 Customer acknowledges and agrees that Herd may collect and process information regarding the configuration, performance, security, access to and use of the Services (“Account Data”) for its internal business purposes including for identity verification, billing, providing support, investigation and prevention of system abuse, maintaining or improving the Services, communicating with Permitted Users and to fulfill legal obligations. To the extent such Account Data contains any personal data, such as name and business contact details of Permitted Users, Herd shall process such data in accordance with its then current privacy policy, available at https://herdsecurity.io/legal/privacy-policy (“Privacy Policy”). Notwithstanding the foregoing, nothing in this Agreement shall restrict Herd’s use of Account Data that has been anonymized and/or aggregated, provided that such Account Data does not in any way identify and cannot be reasonably associated with Customer, its Affiliates, Permitted Users or any individuals connected to Customer or Customer Confidential Information (“Anonymized Account Data”).

6. Herd Preview Features. From time to time, upon Customer’s request, Herd may make available to Customer or its Permitted Users one or more proprietary, non-commercially available, hosted software applications, application platform interfaces, services, products, features and/or functionalities on a beta testing basis (“Herd Preview Feature(s)”) to try at no charge. 

7. Third Party sites. Customer acknowledges that the Services may link to third party websites, applications or services that are integrated, connected or relevant to the Services (“Third Party Services”). Customer’s use of such Third Party Services is optional. To use such features, Customer must either obtain access to the Third Party Service via the third party provider or permit Herd to obtain access on Customer’s behalf. If Customer uses such Third Party Services, it acknowledges and agrees that: (a) any link from the Service does not imply any Herd endorsement, approval or recommendation of, or responsibility for, those Third Party Services or their content

or operators and the use of such Third Party Services are subject to the terms and conditions of the Third Party Service provider; (b) Customer may be required to grant Herd access to its Third Party Services account and/or to grant the Third Party Service provider access to its Herd account; and (c) Customer Data may be transferred between Herd and the Third Party Service provider as required for the interoperation with the Services. To the maximum extent permitted by law, Herd shall not bear and expressly disclaims all responsibility or liability of any kind relating to such Third Party Services, including, without limitation, for any disclosure of, access to or other

processing of Customer Data by Third Party Service providers.

8. Warranties. Each Party represents and warrants that it is duly organized, validly existing and in good standing under the laws of its jurisdiction of incorporation or organization; and that the execution and performance of this Agreement will not conflict with other agreements to which it is bound or violate applicable law.

9. Intellectual Property Rights. All right, title, and interest, including any intellectual property rights evidenced by or embodied in, attached, connected, and/or related to the Platform (and any and all improvements enhancements, corrections, modifications, alterations, revisions, extensions and updates and derivative works thereof) and any other products, deliverables or services provided by Herd; are and shall remain owned solely by Herd or its licensors. This Agreement does not convey to Customer any interest in or to the Platform other than a limited right to use the Platform in accordance with Section 1. Nothing herein constitutes a waiver of Herd’s intellectual property rights under any law. Herd reserves all rights not expressly granted herein to the Platform.

If Herd receives any feedback (whether orally or in writing) (e.g., questions, comments, suggestions or the like) regarding any of the Services (collectively, “Feedback”), all rights, including intellectual property rights in such Feedback shall belong exclusively to Herd and that such shall be considered Herd’s Confidential Information and Customer hereby irrevocably and unconditionally transfers and assigns to Herd all intellectual property rights it has in such Feedback and waives any and all moral rights that Customer may have in respect thereto. It is further understood that use of Feedback, if any, may be made by Herd at its sole discretion, and that Herd in no way

shall be obliged to make use of any kind of the Feedback or part thereof.

10. Confidentiality. Each Party may have access to certain non-public information of the other Party, in any form or media, including without limitation trade secrets and other information related to the products, software, technology, data, know-how, or business of the other Party, and any other information that a reasonable person should have reason to believe is proprietary, confidential, or competitively sensitive (the “Confidential Information”). The receiving Party will use the same standard of care to protect thedisclosing Party’s Confidential Information as it uses to protect its own Confidential Information, but no less than reasonable care’. The receiving Party’s obligations under this Section, with respect to any Confidential Information of the disclosing party, shall not apply to

and/or shall terminate if such information: (a) was already lawfully known to the receiving Party at the time of disclosure by the disclosing party; (b) was disclosed to the receiving Party by a third party who had the right to make such disclosure without any confidentiality restrictions; (c) is, or through no fault of the receiving Party has become, generally available to the public; or (d) was independently developed by the receiving Party without access to, or use of, the disclosing Party’s Confidential Information. Neither Party shall use or disclose the Confidential Information of the other Party except for performance of its obligations under this Agreement. The receiving Party shall only permit access to the disclosing Party's Confidential Information to its and/or its Affiliates’ respective

employees, consultants, affiliates, service providers, agents and subcontractors having a need to know such information, and who are bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement (such recipients being “Authorized Recipients”). The receiving Party is responsible for the compliance of its Authorized Recipients with the confidentiality and non-disclosure obligations of this Agreement. The receiving Party will be allowed to disclose Confidential Information to the extent that such disclosure is required by law or by the order or a court of similar judicial or administrative body, provided that, to the extent permitted by applicable law, it notifies the disclosing Party of such required disclosure to enable disclosing party to seek a protective order or otherwise prevent or restrict such disclosure. Notwithstanding the foregoing, each Party can disclose the terms and existence of this Agreement to third parties in connection with a due diligence subject to such third parties being bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement. All right, title and interest in and to Confidential Information are and shall remain the sole and exclusive property of the disclosing Party.

11. LIMITED WARRANTIES. Herd represents and warrants that, under normal authorized use, the Platform shall substantially perform in conformance with its Documentation. As the Customer's sole and exclusive remedy and Herd's sole liability for breach of this warranty, Herd shall use commercially reasonable efforts to repair the Platform and, if Herd cannot do so within a reasonable time, not to exceed 30 days, Customer may terminate this Agreement and receive a pro-rata refund of any amounts pre-paid by Customer for the remaining unused period of the Term. The warranty set forth shall not apply if the failure of the Platform results from or is otherwise attributable to: (i) repair, maintenance or modification of the Platform by persons other than Herd or its authorized contractors; (ii)

accident, negligence, abuse or misuse of the Platform by Customer or its Permitted Users; (iii) use of the Platform other than in accordance with the Documentation; and/or (iv) the combination of the Platform with equipment or software not authorized or provided by Herd. Herd shall not be liable for any inaccuracy in the Service's output and/or delay and/or unavailability of the Services, caused due to (a) failure of Customer's Internet access or any public telecommunications network, shortage of adequate power or transportation facilities, (b) any incompatibility between the Customer's systems and the Platform appliance and/or (c) maintenance within the

Customer's systems affecting the operation of the Platform. 

OTHER THAN AS EXPLICITLY STATED IN THIS AGREEMENT, TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE PLATFORM, ITS RELATED SERVICES AND ANY OUTPUT RESULTED FROM THE USE OF THE PLATFORM ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. HERD

DOES NOT WARRANT THAT: (i) THE PLATFORM AND/OR THE SERVICES WILL MEET CUSTOMER'S REQUIREMENTS, OR (ii) THE PLATFORM WILL OPERATE ERROR-FREE. EXCEPT AS SET FORTH IN THIS AGREEMENT, HERD EXPRESSLY DISCLAIMS ALL EXPRESS WARRANTIES AND ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, TITLE, NON- INFRINGEMENT, NON-INTERFERENCE, FITNESS FOR A PARTICULAR PURPOSE. HERD SHALL NOT BE RESPONSIBLE FOR ANY WARRANTIES AND REPRESENTATIONS MADE BY ANY PARTNER TOCUSTOMER, AND SUCH WARRANTIES AND REPRESENTATIONS ARE THE SOLE RESPONSIBILITY OF SUCH PARTNER.

12. LIMITATION OF LIABILITY. TO THE MAXIMUM EXTENT PERMITTED BY LAW:

(A) EXCEPT FOR ANY DAMAGES RESULTING FROM CUSTOMER'S MISAPPROPRIATION OR OTHERWISE VIOLATION OF HERD’S INTELLECTUAL PROPERTY RIGHTS (INCLUDING MISUSE OF THE SUBSCRIPTION BY CUSTOMER); NEITHER PARTY OR ITS AFFILIATES SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE.

(B) EXCEPT FOR HERD'S INDEMNIFICATION OBLIGATION UNDER SECTION 13, AND/OR DAMAGES RESULTING FROM CUSTOMER'S MISAPPROPRIATION OR OTHERWISE VIOLATION OF Herd’S INTELLECTUAL PROPERTY RIGHTS (INCLUDING MISUSE OF THE SUBSCRIPTION BY CUSTOMER); EITHER PARTY’S INCLUDING ITS AFFILIATES’ MAXIMUM LIABILITY FOR ANY DAMAGES ARISING OUT OF OR RELATED TO THIS AGREEMENT, INCLUDING ITS EXHIBITS, WHETHER IN CONTRACT OR TORT, OR OTHERWISE, SHALL IN NO EVENT EXCEED, IN THE AGGREGATE, THE TOTAL AMOUNTS ACTUALLY PAID TO Herd BY CUSTOMER IN THE TWELVE (12) MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO SUCH CLAIM. FOR CLARITY LIMITATIONS IN THIS SECTION DO NOT APPLY TO PAYMENTS DUE TO HERD UNDER THIS AGREEMENT.

13. Indemnification. Herd agrees to defend, at its expense, any third party action or suit brought against the Customer alleging that the Platform, when used as permitted under this Agreement and each respective Order or Partner Order (as the case may be), infringes intellectual property rights of a third party (“IP Infringement Claim”); and Herd will pay any damages awarded in a final judgment against the Customer that are attributable to any such claim, or that are otherwise agreed in a settlement with the prior written consent of Herd, provided that (i) the Customer promptly notifies Herd in writing of such claim; (ii) the Customer grants Herd the sole authority

to handle the defense or settlement of any such claim and provides Herd with all reasonable information and assistance, at Herd’s expense; and (iii) Customer refrains from admitting any liability or otherwise compromising the defense in whole or in part, without the express prior written consent of Herd. If the Platform becomes, or in Herd's opinion is likely to become, the subject of an IP Infringement Claim, then Herd may, at its sole discretion: (a) procure for the Customer the right to continue using the Platform; (b) replace or modify the Platform to avoid the IP

Infringement Claim; or (c) if options (a) and (b) cannot be accomplished despite Herd's reasonable efforts, then Herd or Customer may terminate all affected Orders and Herd shall provide a pro-rata refund for any amount pre-paid by Customer for the remaining unused period of the Term. Notwithstanding the foregoing, Herd shall have no responsibility for IP Infringement Claims resulting from or based on: (i) modifications to the Platform made by a party other than Herd or its designee; (ii) the Customer's failure to implement software updates provided by Herd specifically to avoid infringement; or (iii) combination or use of the Platform with equipment, devices or software not supplied by Herd or not in accordance with the Documentation. This Section states Herd’s entire liability, and Customer's exclusive remedy, for claims or alleged or actual infringement.

14. Term. This Agreement shall enter into force and effect on the Effective Date and, unless earlier terminated in accordance with Section 15, shall remain in full force and effect until all Orders or Partner Order Form (as the case may be) expire or are terminated (the “Term”). Unless stated otherwise in the applicable Order, the Subscription Term specified in the applicable Order will automatically renew for successive one year terms at Herd’s then current pricing and packaging or as otherwise mutually agreed by the Parties, unless terminated earlier in accordance with this Agreement and/or unless either Party provides the other Party with written notice of non- renewal at least sixty (30) days prior to the expiration of the then-current Subscription Term. For the avoidance of doubt, if Customer has purchased the Services through a cloud marketplace, then the Subscription Term commences on the Effective Date of this Agreement and not the date determined by the marketplace.

15. Termination. Either Party may terminate an Order and/or this Agreement for cause with immediate effect if (a) the other Party breaches any material term or condition of an Order and/or this Agreement, and (b) such breach remains uncured thirty (30) days after the breaching Party receives written notice thereof. Upon termination or expiration of this Agreement and/or an Order: (i) Platform subscriptions granted to Customer shall expire, and Customer shall discontinue any further use and access thereof; (ii) Customer shall immediately delete and dispose of all copies of the Documentation in Customer’s or any of its representatives’ possession or control; and (iii) Herd may delete all Customer Data in accordance with its customer data retention policy without affecting any of Herd's rights to the Account Data. Section 4 (Prohibited Uses), Section 5 (Customer Data and Account Data), Section 6 (Herd Preview Features), Section 7 (Third Party sites), Section 9 (Intellectual Property), Section 10 (Confidentiality), Section 11 (Limited Warranties), Section 12 (Limitation of Liability), Section 15 (Termination) and Section 17 (Miscellaneous) shall survive termination or expiration of this Agreement for any reason. Customer shall be responsible for downloading its Customer Data prior to termination of this Agreement. Each Partner Order Form may be terminated in accordance with any termination rights specified therein.

16. Customer Reference. Unless stated otherwise in an Order, Customer hereby grants Herd a revocable right and license to: (a) use Customer’s name to identify Customer as a customer of Herd on Herd’s websites, presentations, marketing materials or otherwise (collectively, “Marketing Materials”); and/or (b) Customer’s logo to identify Customer as customer of Herd, in Herd's Marketing Materials. Without derogating from the foregoing, following the deployment of the Services, Customer hereby agrees to participate in a case study about Herd and its Services which may be published by Herd in its Marketing Materials.

17. Miscellaneous. This Agreement, including any Order(s) and any exhibits attached or referred hereto, represents the complete agreement concerning the subject matter hereof and may be amended only by a written agreement executed by both Parties. The failure of either Party to enforce any rights granted hereunder or to take action against the other Party in the event of any breach hereunder shall not be deemed a waiver by that Party as to subsequent enforcement of rights or subsequent actions in the event of future breaches. If any provision of this Agreement is held to be unenforceable, such provision shall be reformed only to the extent necessary to make it enforceable. This Agreement represents the entire agreement of the Parties with respect to the subject matter hereof, and supersedes and replaces all prior and contemporaneous oral or written understandings, agreements and statements by the Parties with respect to such subject matter, including prior non-disclosure agreements or evaluation agreements. Without limiting the generality of the foregoing, this Agreement supersedes any terms or conditions (whether printed, hyperlinked, or otherwise) in any Customer's purchase order or other standardized business forms, which purport to supersede, modify or supplement this Agreement. Neither Party may assign its rights or obligations under this Agreement without the prior written consent of the other Party, which consent may not be unreasonably withheld or delayed. Notwithstanding the foregoing, this Agreement may be assigned by either Party to its affiliate or in connection with a merger, consolidation, sale of all of the equity interests of the Party, or a sale of all or substantially all of the assets of the Party to which this Agreement relates. Subject to the foregoing, this Agreement will be binding on the parties and their permitted successors and assigns. This Agreement shall be governed by and construed under the laws of the state of New York, without reference to principles and laws relating to the conflict of laws. The competent courts of New York City, New York shall have the exclusive jurisdiction with respect to any dispute and action arising under or in relation to this Agreement. Notwithstanding the foregoing, Herd may seek injunctive or other equitable relief in any court of competent jurisdiction worldwide. This Agreement does not, and shall not be construed to create any relationship, partnership, joint venture, employer-employee, agency, or franchisor-franchisee relationship between the Parties. Herd will not be liable for any delay or failure to provide the Services resulting from circumstances or causes beyond the reasonable control of Herd including, but not limited to on account of strikes, shortages, riots, insurrection, fires, flood, storms, explosions, acts of God, war, government or quasi-governmental authorities actions, acts of terrorism, earthquakes, power outages, pandemic or epidemic (or

similar regional health crisis), or any other cause that is beyond the reasonable control of Herd. These terms may be amended by Herd from time to time in its sole discretion.