Master Subscription Services Agreement
MASTER SUBSCRIPTION SERVICES AGREEMENT
Revised March 5, 2026
This Master Subscription Services Agreement, including all documents referenced herein (this “Agreement”) is between Nowsta, Inc., (“Nowsta”) (“Nowsta” “we,” “us,” or “our”) and you or the entity on behalf of whom you are purchasing or using the Services as specified in an Order (“you” or “your” or “Subscriber”). This Agreement sets forth the terms and conditions that govern all Orders placed by you. Your use of the Marketplace is subject to additional terms and conditions found at www.nowsta.com/marketplace-terms-of-use/ (“Marketplace TOU”) and any Integration Services ordered by you are subject to additional terms set forth in our Integration Services Addendum found at www.nowsta.com/integration-addendum/ (“Integration Addendum”). YOUR USE OF ANY PART OF THE SERVICES OR RECEIPT OF ANY SERVICES INDICATES THAT YOU ACCEPT THE TERMS OF THIS AGREEMENT. YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY TO THIS AGREEMENT AND THAT “YOU” AND “YOUR” WILL REFER TO THAT COMPANY OR ORGANIZATION. IF YOU DO NOT AGREE TO THIS AGREEMENT OR DO NOT HAVE THE AUTHORITY SPECIFIED ABOVE, DO NOT USE SERVICES OR RECEIVE THE SERVICES. NOTE THAT ALL REFERENCES TO THE WORD “PURCHASE” OR “SELL” IN THESE TERMS MEANS “LICENSE” WITH RESPECT TO THE PLATFORM SERVICES AND MARKETPLACE.
NOW THEREFORE, the parties agree as follows:
1. DEFINITIONS. For purposes of this Agreement, the following terms have the following meanings:
1.1. “Affiliate” means any entity which directly or indirectly, through one or more intermediaries, controls, or is controlled by, or is under common control with a party to this Agreement, by way of majority voting stock ownership or the ability to otherwise direct or cause the direction of the management and policies of such party, for as long as such control exists.
1.2. “Anonymized Data” means Subscriber Data that is de-identified in such a fashion that it cannot be re-identified with any known or reasonably anticipated technology. Without limiting the foregoing, “Anonymized Data” shall meet the definitions of “Aggregated consumer information” and “de-identified” under the California Consumer Protection Act (substituting “data subject” for “consumer” where applicable”).
1.3. “Confidential Information” means non-public information which one party (“Discloser”) may disclose to the other party (“Recipient”) in connection with this Agreement including: (a) Subscriber Data, (b) all software and technical information used to provide the Platform Services, Marketplace, and/or Integration Services; (c) the terms of this Agreement, (d) any commercial, financial, marketing, business, technical or other data, security measures and procedures, know-how, trade secrets or other information that: (i) in the case of information in tangible form, is marked “confidential” or “proprietary;” (ii) in the case of information disclosed orally, visually or any other intangible form, is designated confidential or proprietary at the time of disclosure, and if disclosed orally, is summarized in reasonable detail in a writing delivered to the Recipient within ten (10) days following disclosure; or (iii) under the circumstances, a person exercising reasonable business judgment would understand to be confidential or proprietary; and (e) any reproduction of such information in any form or medium, or any part of such information.
1.4. “Documentation” means the online documentation describing the Services features which may be updated from time to time at our sole discretion (subject to Section 2.2).
1.5. “Integration Services” means the integration services to be provided to you pursuant to an Order and the additional provisions of the Integration Addendum.
1.6. “Marks” means Nowsta’s and its Affiliates’ logos, trademarks, trade names, slogans, designs, service marks and other identifying symbols that are or have been used by us or our Affiliates anywhere in the world.
1.7. “Marketplace” means the Nowsta Talent Marketplace where Subscribers can interact in order to provide or receive staffing services as further described in the Marketplace TOU.
1.8. “Order(s)” means (a) an order which specifies the Services to be provided by us and (b) any renewal thereof.
1.9. “Platform Services” means the Nowsta Workforce Management Platform, our cloud-based, workforce management SaaS platform that helps Subscribers streamline and automate the management of their shift-based or seasonal employees, third-party staffing agencies, 1099 contractors, and general contingent labor as described in the Documentation, excluding all Third-Party Applications. Platform Services includes the portions of the Platform Services made available to your Users.
1.10. “Portal Addendum” means the addendum found at https://nowsta.com/portal-addendum/, pursuant to which Subscriber may request that certain of their customers/vendors, be provided access to a subset of the Platform Services for use solely in connection with such customers’/vendors’ relationship with Subscriber.
1.11. “Services” means (a) the Platform Services and Integration Services specified in an Order and (b) the Marketplace.
1.12. “Service Term” means the time period that the Platform Services and Marketplace are authorized for use as set forth in the applicable Order.
1.13. “Setup Services” means basic provisioning of the Platform Services for Subscriber.
1.14. “Statistical Data” means statistical and other information related to the operation, provision, use, and performance of the Services and related systems and technologies (including, without limitation, information extrapolated, concerning or derived from Subscriber Data).
1.15. “Subscriber Data” means all electronic data or information submitted to and stored in the Platform Services and Marketplace by you and/or you Users or that we collect from you or from any other person on your behalf and process via the Services (excluding Anonymized Data and Statistical Data).
1.16. “Third-Party Applications” means other products and services which are licensed or manufactured by a party other than us that are made available via the Platform Services or Marketplace, but which do not form a part of the Platform Services or Marketplace.
1.17. “Users” means individuals who are authorized by you to use the Platform Services and Marketplace pursuant to this Agreement. Users may include you and your employees, consultants, contractors, and agents. Subscriber’s Users who will be providing staffing services are able to access certain portions of the Platform Services (such as time-keeping and scheduling) subject to the Nowsta Terms of Service for Workers found at nowsta.com/worker-terms-of-service/ (“Terms”).
2. ACCESS TO THE SERVICES.
2.1. General. During the applicable Service Term, we will use commercially reasonable efforts to make the Services available to you consistent with the terms of this Agreement. We will also provide you with technical support services in accordance with our standard practices. Subject to your compliance with this Agreement and your User’s compliance with the Terms, you are granted a nonexclusive, worldwide, limited right to have your Users use the Platform Services and, as applicable, the Marketplace, during the applicable Service Term (unless earlier terminated in accordance with this Agreement) solely for your internal business operations. You are responsible for your Users’ compliance with this Agreement, the Terms, and your Order. Orders are non-cancellable once placed and sums paid are nonrefundable except as provided in this Agreement. To initiate the registration process, you will identify an administrative username and password for your Nowsta account. You will provide us with information that is reasonably necessary for us to provide the Services to you. We reserve the right to refuse registration of any User or cancel passwords we deem inappropriate. You are responsible for: (a) obtaining and maintaining any equipment and ancillary services needed to connect to, access or otherwise use the Services, including, without limitation, modems, hardware, servers, software, operating systems, networking, web servers and the like (“Equipment”); and (b) maintaining the security of the Equipment, your account, passwords (including but not limited to administrative and User passwords) and files, and for all uses of your account. If an Affiliate or yours wishes to use the Services, it must submit a separate Order to us for such use unless otherwise expressly specified in the Order. The Platform is controlled and operated from facilities in the United States. We make no representations that the Platform is appropriate or available for use in other locations. Subscribers and Users who access or use the Platform from other jurisdictions do so at their own volition and are entirely responsible for compliance with all applicable United States and local laws and regulations, including export and import regulations.
2.2. Modifications. During the Service Term, we or our hosting providers may update the Platform Services, Marketplace and Documentation to reflect changes in, among other things, laws, regulations, rules, technology, industry practices, patterns of system use, and availability of Third-Party Applications. Updates to the Platform Services or Documentation will not materially reduce the level of performance, functionality, security or availability of the Platform Services during the applicable Service Term. We may also change this Agreement (including all documents referenced herein) provided that such changes to not adversely affect your use of the Services. We will notify the Subscriber point of contact contained in your Orders via email or in the Platform Services of any such changes and your continued use of the Services reflects your acceptance of such changes.
2.3. Use Restrictions. You will use the Platform Services and Marketplace consistent with the terms of this Agreement, our Privacy Policy found at nowsta.com/privacy-policy/ (“Privacy Policy”), and all applicable laws and regulations. If you allow Users who provide staffing services for you to also access the Platform Services, they must agree to the Terms. You may authorize your customers/vendors to be Users pursuant to this Agreement solely in order to allow them to manage and track staffing services provided by or for you subject to the provisions of the Portal Addendum. You remain responsible for all acts or omissions of your Users as if performed by you. Additionally, you and your Users may not, and may not cause or permit others to: (a) use the Services to harass or stalk any person; cause damage or injury to any person or property; publish any material that is false, defamatory, harassing or obscene; violate privacy rights; promote bigotry, racism, hatred or harm; send unsolicited bulk e-mail, junk mail, spam or chain letters; infringe intellectual or other property rights; sell, manufacture, market and/or distribute any product or service in violation of applicable laws; or otherwise violate applicable laws, ordinances or regulations; (b) perform or disclose any benchmarking or availability testing of the Services; (c) perform or disclose any performance or vulnerability testing of the Services, or perform or disclose network discovery, port and service identification, vulnerability scanning, password cracking or remote access testing of the Services; (d) reverse engineer, decompile, disassemble or otherwise attempt to discover the source code, object code or underlying structure, ideas, know how or algorithms relevant to the Services or any software, documentation or data related thereto; (e) access or use the Services to build or support, directly or indirectly, products or services competitive to the Services; (f) introduce viruses, malware, trojan horses, etc. into the Platform Services and Marketplace; (g) modify, translate, or create derivative works based on the Services; (h) license, sell, transfer, assign, distribute, outsource, permit timesharing or service bureau use of, commercially exploit, or make available the Services to any third party other than your Users; (i) access or use the Services to circumvent or exceed service account limitations or requirements or attempt to bypass measures we use to prevent or restrict access to the Services; (j) remove any proprietary notices or labels found in the Platform Services, Marketplace or Documentation; (k) copy, distribute, or disclose any part of the Platform Services or Marketplace in any medium, including by any automated or non-automated “scraping”; (l) use any automated system, including “robots,” “spiders,” “offline readers,” etc., to access the Platform Services or Marketplace in a manner that sends more request messages to our servers than a human can reasonably produce in the same period of time by using a conventional on-line web browser; (m) collect or harvest any personally identifiable information, including account names, from the Platform Services and Marketplace; (n) use the Platform Services or Marketplace for any commercial solicitation purposes other than as permitted pursuant to this Agreement; (o) impersonate another person or otherwise misrepresent your affiliation with a person or entity, conduct fraud, hide or attempt to hide your identity or (p) otherwise use the Services in violation of our Terms or Policies. In addition to other rights that we have in this Agreement and your Order, we have the right to take remedial action which may include removing or disabling access to the Services. Although we have no obligation to monitor your use of the Services, we may do so and may prohibit any use of the Services we reasonably believe may be in violation of the foregoing.
2.4. Government Rights. The Platform Services and Marketplace are “Commercial Cloud Services” and the Documentation is “Commercial Computer Software Documentation”. Consistent with 48 C.F.R. §12.211, §12.212 or §227-7202-1 through 227.7202-4 and DFAR Subpart 239.76 and DFAR §227.7202, §227.7203 and §252.227-7015, as applicable, the Commercial Cloud Services and Commercial Computer Software Documentation are being licensed to U.S. Government end users (a) only as commercial Items and (b) with only those rights as are granted to all other end users as described in this Agreement.
2.5. Anonymized and Statistical Data. Notwithstanding anything to the contrary in this Agreement or any related agreement, Nowsta shall have the right to collect, analyze and use Anonymized Data and Statistical Data. Anonymized Data and Statistical Data are not Subscriber Data irrespective of the means by which Anonymized Data or Statistical Data is generated. Nowsta will be free (during and after the term of this Agreement) to (a) use such Anonymized Data and Statistical Data to operate, improve and enhance the Services and for other development, diagnostic and corrective purposes in connection with the Services and other Nowsta offerings, (b) disclose such Anonymized Data and Statistical Data in connection with its business, (c) use Subscriber Data, Anonymized Data and Statistical Data to train, test, or otherwise enhance our machine learning algorithms, for the purposes of operating, providing, and improving the Services, and, (d) use Anonymized Data and Statistical Data for security and operations management, to create statistical analyses for research and development, and other lawful purposes We may make services analyses publicly available or commercialize such analysis; however, services analyses will not incorporate Subscriber Data, personal information or Confidential Information in a form that could serve to identify you or any individual. We retain all intellectual property rights in such services analyses, Statistical Data and Anonymized Data .
2.6. Monitoring Tools. We continuously monitor the Platform Services and Marketplace to facilitate our operation of the Platform Services and Marketplace; to help resolve Subscriber service requests; to detect and address threats to the functionality, security, integrity, and availability of the Platform Services and Marketplace as well as any content, data, or applications in the Platform Services and Marketplace; and to detect and address illegal acts or violations of this Agreement. Our monitoring tools do not collect or store any Subscriber Data residing in the Platform Services or Marketplace, except as needed for the above purposes. Information collected by our monitoring tools (excluding Subscriber Data) may also be used to assist in managing the Services, to help us address deficiencies in our product and service offerings, and for license management purposes.
2.7. Discontinuation of Services. We reserve the right to discontinue offering Services (or portions of the Services) at the conclusion of your then current Service Term for such Service on thirty (30) days prior written notice. We shall not be liable to you nor to any third party for any discontinuation of the Services as described in this Section.
3. OWNERSHIP RIGHTS AND RESTRICTIONS.
3.1. Ownership of Subscriber Data. You or your licensors and Users retain all ownership and intellectual property rights in and to your Subscriber Data and nothing in this Agreement gives us any right, title, or interest in such Subscriber Data other than the limited license to use the Subscriber Data to provide the Services or to create Anonymized Data or Statistical Data.
3.2. Our Ownership. We and our licensors retain all ownership and intellectual property rights in and to the Services, Documentation, technology used to provide the Services, derivative works thereof, and anything developed or delivered by or on behalf of us under this Agreement (including under an Integration Addendum), and nothing contained in this Agreement gives you any right, title or interest in any of them, except for the limited license to use them during the Service Term consistent with the terms of this Agreement and the Order. Any rights not expressly granted herein by us are reserved by us.
3.3. Feedback. You grant us a royalty free, worldwide, perpetual, irrevocable, transferable right to use, modify, distribute, and incorporate into the Services (without attribution of any kind) any suggestions, enhancement requests, recommendations, proposals, corrections or other feedback or information provided by you or any Users related to the operation or functionality of the Services.
3.4. Limited License to Subscriber Data. You have the authority to and do grant us the right to host, use, process, display and transmit Subscriber Data (including to our subprocessors) to provide the Services pursuant to and in accordance with this Agreement (which incorporates our Privacy Policy) and your Order, and to train, test, or otherwise enhance our machine learning algorithms, for the purposes of operating, providing, and improving the Service. Our current subprocessors are listed at https://www.nowsta.com/subprocessor/ and may be updated from time to time. We maintain agreements with our subprocessors sufficient to ensure our compliance with our obligations hereunder. You have sole responsibility for the accuracy, quality, integrity, legality, reliability, and appropriateness of the Subscriber Data, and for obtaining all rights and consents related to Subscriber Data required by us to perform the Services. We are not responsible for any electronic communications and/or Subscriber Data which are delayed, lost, altered, intercepted, or stored during the transmission of any data whatsoever across networks not owned and/or operated by us or our subprocessors, including, but not limited to, the internet and your local network. We may store and maintain Subscriber Data for a period consistent with our standard business processes for the Service subject to our continued compliance with our obligations related to confidentiality hereunder.
4. DATA SECURITY.
4.1. Security. We shall maintain reasonable and appropriate security measures to protect Subscriber Data in accordance with commercially reasonable industry standards which shall not be less protective of Subscriber Data than those set forth in Exhibit 1 (“Security Requirements”). We shall promptly notify Subscriber of any security incidents involving Subscriber Data. We will use Subscriber Data only as specified in this Agreement (including our Privacy Policy).
5. FEES AND PAYMENT.
5.1. Fees and Taxes. All fees are specified in your Order and are exclusive of any taxes, duties or similar fees which may be collectable or withheld pursuant to law. You will pay any sales, value-added or other similar taxes imposed by applicable law that we must pay based on the Services you ordered, except for taxes based on our income (“Taxes”). All fees are in U.S. Dollars. Fees for any renewal of the Service Term shall be based on our then-current rates for the Services or as otherwise specified in the Order. If we have the legal obligation to pay or collect Taxes for which you are responsible, the appropriate amount shall be invoiced to and paid by you unless you provide us with a valid tax exemption certificate authorized by the appropriate taxing authority. If applicable law requires you to withhold any Taxes levied by any country on payments to be made pursuant to this Agreement, you shall (a) effect such withholding, remit such amounts to the appropriate taxing authorities and promptly furnish us with tax receipts evidencing the payments of such amounts, and (b) ensure that the sum payable by you upon which the deduction or withholding is based is increased to the extent necessary to ensure that, after such deduction or withholding, we receive and retain, free from liability for such deduction or withholding, a net amount equal to the amount we would have received and retained in the absence of such required deduction or withholding.
5.2. Payment Terms. All fees are due and payable at the time of Order unless otherwise specified in the Order. If you have chosen a monthly billing frequency, payment will be made in advance, you must be enrolled in our automatic payment program and agree to submit and maintain an active credit card on file with us at all times during this Agreement. Your credit card on file will be automatically charged for all billing intervals. If you choose an annual billing frequency, you may elect to be invoiced by us and may pay via ACH or with the credit card you have on file. If Fees are to be invoiced to Subscriber, such invoice will be provided electronically and will be due upon receipt unless otherwise specified in the Payment Terms portion of each Order. A 3% fee will be applied to any credit card payments. In the event your form of payment is denied, you agree to pay a fixed late penalty of $120 and further agree that interest will immediately begin to accrue monthly on all unpaid amounts at a rate of 1.0% per month or the maximum amount permitted by law, plus all expenses of collection (including attorney fees). In addition, late payment may result in immediate termination or suspension of the Services.
5.3. Additional Fees. The fees for additional Services and other items procured during an existing Service Term will co-terminate with and be prorated through the end date of the Service Term for the original Service so that all Services end on the same date. Fees for use of the Marketplace are specified in the Marketplace TOU. Fees may be charged for excessive data consumption upon 30 days’ prior notice to you. If the fees for a feature or functionality of the Service are based on usage of the Service or any other pricing metric, then we may access and use Subscriber Data as reasonably necessary to determine the fees for the applicable feature, functionality or consumption, and you will be charged for any such fees at our then current rates or the rates set forth in the Order (if specified).
6. NONDISCLOSURE
6.1. General. By virtue of this Agreement, Discloser may disclose to Recipient Confidential Information of Discloser. Recipient agrees not to disclose the Discloser’s Confidential Information to any third party other than as set forth in the following sentence for a period of five (5) years from the date of termination or expiration of this Agreement, provided, (a) that trade secret information will be held in confidence until such information no longer qualifies as a trade secret under applicable law, (b) personally identifiable information will be held in confidence as required by applicable laws, and (c) we will protect the confidentiality of Subscriber Data residing in the Services for as long as such information resides in the Services. Each party may disclose Confidential Information only to those employees, agents or subcontractors (including our subprocessors) with a need to know such information to comply with its obligations under this Agreement and who are required to protect it against unauthorized disclosure in a manner no less protective than required under this Agreement. In addition, Recipient may disclose Discloser’s Confidential Information in any legal proceeding or to a governmental entity as required by law provided that Recipient provides prompt written notice thereof to Discloser (to the extent legally permitted) and assistance (at Discloser’s expense) to enable Discloser to seek a protective order or otherwise prevent or restrict such disclosure.
6.2. Exceptions. Notwithstanding Section 6.1, the following shall not be deemed Confidential Information: (a) information that was in the public domain at the time of its disclosure, or which becomes public domain property through no fault of Recipient; (b) information that was rightfully in Recipient’s possession without restriction prior to disclosure; (c) information that was rightfully disclosed to Recipient by a third party without restriction; (d) information that was independently developed by employees and/or contractors of Recipient without access to, use of, or reference to Discloser’s Confidential Information; and (e) Anonymized Data or Statistical Data collected or generated by us or on behalf of us regarding the Services.
6.3. Injunctive Relief. It is understood and agreed that notwithstanding any other provision of this Agreement, a breach by either party of this Section 6 may cause the other party irreparable damage for which recovery of money damages might be inadequate, and that the other party shall therefore be entitled to seek timely injunctive relief, without posting bond, to protect such party’s rights under this Agreement, in addition to all remedies available at law or equity.
6.4. Return of Confidential Information. On Discloser’s written request or upon expiration or termination of this Agreement for any reason, Recipient will promptly return or securely destroy, at Discloser’s option, all of Discloser’s Confidential Information in any form or media and provide a written statement to Discloser certifying the return or destruction of such Confidential Information. Subscriber Data will be made available to you or returned and/or destroyed as described in Section 10.4.
7. WARRANTIES AND DISCLAIMERS.
7.1. Services Warranty. Each party represents that it has validly entered into this Agreement and that it has the power and authority to do so. We warrant that during the Service Term, we will provide the Services using commercially reasonable care and skill and in all material respects as described in the Documentation (the “Services Warranty”). If the Services provided to you fail to conform to the Services Warranty, you must promptly provide us with a written notice that describes the deficiency in the Services (including, as applicable, the service request number notifying us of the deficiency in the Services). These warranties shall not apply, and we shall not be responsible for our inability to provide the Services to the extent such failure is due to: (a) third party software, hardware, or network infrastructure, including but not limited to any Third-Party Applications; (b) failure of the external internet beyond our network; (c) electrical or internet access disruptions not due to us or our systems; (d) any actions or inactions of you and/or your Users in violation of this Agreement; (e) caused by your Equipment; (f) attacks (i.e. hacks, malicious introduction of viruses and disabling devices) caused by third parties or (g) any other Force Majeure event as described in Section 12 of this Agreement.
7.2. Disclaimer. WE DO NOT WARRANT THAT THE SERVICES WILL BE ERROR-FREE OR UNINTERRUPTED, THAT WE WILL CORRECT ALL ERRORS, OR THAT THE SERVICES WILL MEET YOUR REQUIREMENTS OR EXPECTATIONS. WE ARE NOT RESPONSIBLE FOR ANY ISSUES RELATED TO THE PERFORMANCE, OPERATION OR SECURITY OF THE SERVICES THAT ARISE FROM SUBSCRIBER DATA OR THIRD-PARTY APPLICATIONS.
7.3. Remedies. FOR ANY BREACH OF THE SERVICES WARRANTY AS DEFINED IN SECTION 7.1, YOUR EXCLUSIVE REMEDY AND OUR ENTIRE LIABILITY SHALL BE TO CORRECT THE DEFICIENT SERVICES AT OUR COST SO THAT THE SERVICE CONFORMS TO THE SERVICES WARRANTY, OR, IF WE CANNOT SUBSTANTIALLY CORRECT THE DEFICIENCY IN A COMMERCIALLY REASONABLE MANNER, YOU MAY END THE DEFICIENT SERVICES AND WE WILL REFUND TO YOU THE FEES FOR THE TERMINATED SERVICES THAT YOU PRE-PAID TO US FOR THE PERIOD FOLLOWING THE EFFECTIVE DATE OF TERMINATION.
7.4. EXCLUSIVE WARRANTIES. TO THE EXTENT NOT PROHIBITED BY LAW, THESE WARRANTIES AND SUCH WARRANTIES AS ELSEWHERE EXPRESSED IN THIS AGREEMENT ARE EXCLUSIVE AND THERE ARE NO OTHER WARRANTIES, TERMS OR CONDITIONS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY WARRANTIES, TERMS, OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY QUALITY, NON-INFRINGEMENT, OR FITNESS FOR A PARTICULAR PURPOSE.
8. INDEMNIFICATION
8.1. Infringement. Subject to the terms and conditions set forth in this Section 8, we shall, at our own expense, defend you from and against any and all allegations, threats, claims, suits, and proceedings brought by third parties (collectively “Claims”) alleging that the Services, as used in accordance with this Agreement, infringes such third party’s copyrights or trademarks, or misappropriates such third party’s trade secrets and we shall indemnify you from and against liability, damages, and costs finally awarded or entered into in settlement (including, without limitation, reasonable attorneys’ fees) (collectively, “Losses”) to the extent based upon such Claim(s).
8.2. Exclusions. We will have no liability for Claims or Losses to the extent arising from: (a) use of the Services in violation of this Agreement or applicable law; (b) use of the Services after we notify you to discontinue use because of an infringement claim; (c) modifications to the Services not made by us or made by us based on your specifications or requirements; (d) use of the Services in combination with any non-Nowsta software, application or service, including Third-Party Applications; or (e) arising out of our use of Subscriber Data consistent with the provisions of this Agreement.
8.3. Remedies. If a Claim of infringement as set forth above is brought or threatened, we shall, at our sole option and expense, use commercially reasonable efforts either: (a) to procure a license that will protect you against such Claim without cost; (b) to modify or replace all or portions of the Services as needed to avoid infringement, such update or replacement having substantially similar or better capabilities; or (c) if (a) and (b) are not commercially feasible, terminate the Agreement or your Order and refund to you a pro-rata refund of the prepaid, unused subscription fees for the terminated portion of the Service Term. The rights and remedies granted to you under this Section 8.3 state our entire liability, and your exclusive remedy, with respect to any claim of infringement of the intellectual property rights of a third party.
8.4. Subscriber’s Indemnity. Subject to the terms and conditions set forth in this Section 8.4 you shall, at you own expense, defend us and our Affiliates, officers, directors, employees, attorneys and agents (“Nowsta Parties”) from and against any and all Claims alleging that: (a) our use of the Subscriber Data as permitted by this Agreement infringes the intellectual property, proprietary rights, or privacy rights of any third party; (b) your use of Third-Party Applications is outside the scope of the licenses granted with respect to such Third-Party Applications; (c) you failed to obtain proper consents for your collection of Subscriber Data or for our processing of Subscriber Data as provided herein; or (d) your use of the Services or your action violates any applicable laws or the provisions of Section 2.3 of this Agreement. In addition, You shall indemnify, defend and hold harmless all Nowsta Parties for any claim arising out of any relationship established between you and another person or entity via the Marketplace, and you shall indemnify us from and against liability for any Losses to the extent based upon such Claims. In addition, you agree that your workers, employees, contractors, and other personnel shall neither be considered employees or personnel of Nowsta nor shall we be deemed to be a supervisor of, or responsible for, any such personnel. You shall indemnify, defend and hold harmless all Nowsta Parties for any action that may be raised against Nowsta Parties alleging violation of any federal or state wage and hour, tax, workplace safety laws or other federal or state law, or for property damage, bodily injury, or death caused by you or your workers, employees, contractors and personnel or for any other action in which a claim is made that Nowsta is a co-employer or joint employer. You will have no liability under this Section 8.4 to the extent such Losses result from our gross negligence, willful misconduct or fraud.
8.5. Indemnification Procedures and Survival. In the event of a potential indemnity obligation under this Section 8, the indemnified party shall: (a) promptly notify the indemnifying party in writing of such Claim; (b) allow the indemnifying party to have sole control of its defense and settlement; and (c) upon request of the indemnifying party, cooperate in all reasonable respects, at the indemnifying party’s cost and expense, with the indemnifying party in the investigation, trial, and defense of such Claim and any appeal arising therefrom. The indemnification obligations under this Section 8 are expressly conditioned upon the indemnified party’s compliance with this Section 8.5 except that failure to notify the indemnifying party of such Claim shall not relieve that party of its obligations under this Section 8 but such obligations shall be reduced to the extent of any damages attributable to such failure. The indemnification obligations contained in this Section 8 shall survive termination or expiration of this Agreement for one year.
9. LIMITATION OF LIABILITY.
9.1. EXCLUSION OF CERTAIN DAMAGES. IN NO EVENT WILL EITHER PARTY OR ITS AFFILIATES BE LIABLE FOR ANY INDIRECT, CONSEQUENTIAL, INCIDENTAL, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES, OR ANY LOSS OF REVENUE, PROFITS (EXCLUDING FEES UNDER THIS AGREEMENT), SALES, DATA, DATA USE, GOODWILL, OR REPUTATION. CERTAIN STATES AND/OR JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, IN WHICH CASE SUCH DAMAGES SHALL BE SUBJECT TO THE LIMITATIONS SET FORTH IN SECTION 9.2 BELOW.
9.2. LIMITATION OF LIABILITY. THE MAXIMUM AGGREGATE LIABILITY OF NOWSTA AND ITS AFFILIATES ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT, WHETHER SUCH LIABILITY ARISES FROM ANY CLAIM BASED ON BREACH OR REPUDIATION OF CONTRACT, BREACH OF WARRANTY, NEGLIGENCE, OR OTHERWISE, SHALL NOT EXCEED THE TOTAL FEES PAID OR PAYABLE BY SUBSCRIBER UNDER THIS AGREEMENT FOR THE APPLICABLE SERVICE DURING THE TWELVE (12) MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT OUT OF WHICH THE LIABILITY AROSE. NOTWITHSTANDING THE FOREGOING, IN THE EVENT OF LIABILITY ARISING IN CONNECTION WITH AN INDEMNIFICATION OBLIGATION PURSUANT TO SECTION 8, THE CAP SET FORTH IN THIS SECTION 9.2 SHALL NOT APPLY.
9.3. Acknowledgement. BOTH PARTIES ACKNOWLEDGE THAT THE FEES REFLECT THE ALLOCATION OF RISK SET FORTH IN THIS AGREEMENT AND THAT THE PARTIES WOULD NOT ENTER INTO THIS AGREEMENT WITHOUT THESE LIMITATIONS ON THEIR LIABILITY. NOTWITHSTANDING ANYTHING TO THE CONTRARY IN THIS SECTION 9, NEITHER PARTY SHALL BE LIABLE TO THE OTHER PARTY TO THE EXTENT SUCH LIABILITY WOULD NOT HAVE OCCURRED BUT FOR THE OTHER PARTY’S FAILURE TO COMPLY WITH THE TERMS OF THIS AGREEMENT.
10. TERM AND TERMINATION
10.1. Term. This Agreement is valid for the Service Term (and any renewals thereof) of the Order which references this Agreement unless terminated as specified in this Agreement. The initial Service Term for a Service shall be as specified in the Order. Thereafter, except as specified in Section 2.7, the Service Term of the applicable Service shall be automatically renewed for additional twelve (12) month terms at our then-current prices unless you notify us of your intention not to renew at least thirty (30) days prior to the expiration of your then-current Service Term.
10.2. Suspension. We may suspend your and/or your Users’ access to, or use of, the Platform Services, Marketplace and/or performance of Integration Services if we believe that: (a) such use presents a significant threat to the functionality, security, integrity, or availability of the Services or any content, data, or applications in the Services; (b) you or your Users are accessing or using the Services to commit an illegal act; (c) there is a violation of the Terms; (d) you provided false account or payment information or your payment method is refused or (e) in connection with a Payment Failure (as defined in Section 10.3). When reasonably practicable and lawfully permitted, we will provide you with advance notice of any such suspension. We will use reasonable efforts to limit any suspension only to the portion of the Services related to the issue causing suspension. We will use reasonable efforts to re-establish the Services promptly after we determine that the issue causing the suspension has been resolved. Any suspension under this Section shall not excuse you from your payment obligations.
10.3. Termination for Breach. This Agreement and any or all Orders may be terminated at any time: (a) by us, effective on written notice to you if you fail to pay the fees specified in your Order, any Integration Addendum, or the Agency Addendum in connection with the Marketplace when due, (“Payment Failure”); (b) by either party, effective on written notice to the other party, if the other party materially breaches this Agreement and the breach remains uncured thirty (30) days after the non-breaching party provides the breaching party with written notice of such breach; or (c) by either party, effective immediately, if the other party: (i) is dissolved or liquidated or takes any corporate action for such purpose; (ii) becomes insolvent or is generally unable to pay its debts as they become due; (iii) becomes the subject of any voluntary or involuntary bankruptcy proceeding under any domestic or foreign bankruptcy or insolvency Law which remains undismissed after sixty (60) days; (iv) makes or seeks to make a general assignment for the benefit of its creditors; or (v) applies for, or consents to, the appointment of a trustee, receiver or custodian for a substantial part of its property. If we terminate your Orders or this Agreement pursuant to this Section 10.3, you must pay within 10 days all amounts that have accrued prior to such termination, as well as all sums remaining unpaid for the terminated Order(s) plus related Taxes and expenses. If you terminate this Agreement or your Orders pursuant to this Section 10.3, then you shall be entitled to a refund of the pro-rata portion of any prepaid, unused fees for the termination portion of the Service Term or Integration Services not rendered. Except for nonpayment of fees, the non-breaching party may agree in its sole discretion to extend the 30 day period for so long as the breaching party continues reasonable efforts to cure the breach. You agree that if you are in default under this Agreement and/or your Order, you may not use those Services ordered.
10.4. Effect of Termination. At the end of the Service Term (including any renewals thereof) or upon termination of this Agreement, you shall have no further right to use or access the applicable Services, and we will make your Subscriber Data (as it existed at the end of the Service Term) available for retrieval by you for thirty (30) days. Following the retrieval period, and except as may be required by law, we will deactivate your accounts and securely delete all Subscriber Data that remains in the Services except to the extent, and only for so long as, retention is mandated under applicable Law (e.g., a litigation hold). It is Subscriber’s responsibility to export all Subscriber Data from the Services and Nowsta shall have no liability to Subscriber or any third party for Subscriber’s failure to do so or Nowsta’s inability to provide Subscriber Data to Subscriber after such thirty (30) day period.
10.5. Survival. Provisions that survive termination or expiration of this Agreement are those relating to limitation of liability, confidentiality, indemnification, payment, ownership of data, and others which by their nature are intended to survive.
11. COMPLIANCE WITH LAWS.
11.1. Export. Export control and economic sanctions laws and regulations (“export laws”) of the United States and any other relevant local export laws apply to the Services. Such export laws govern use of the Services (including technical data) and deliverables provided under this Agreement, and you and we each agree to comply with all such export laws (including “deemed export” and “deemed re-export” regulations). We each agree that no data, information, software programs and/or materials resulting from the Services (or direct product thereof) will be exported, directly or indirectly, in violation of these laws, or will be used for any purpose prohibited by these laws. You are solely responsible for the authorization and management of User accounts across geographic locations, as well as export control and geographic transfer of Subscriber Data.
11.2. Laws. The parties shall both comply with all applicable local, state, provincial, national and foreign laws, treaties and regulations in connection with the use and performance of the Services.
12. FORCE MAJEURE. Neither you nor we shall be responsible for failure or delay of performance to the extent caused by: an act of war, hostility, or sabotage; act of God; pandemic; electrical, internet, or telecommunication outage that is not caused by the obligated party; government restrictions (including, without limitation, an embargo, economic sanction or the denial or cancellation of any export, import or other license); or other event outside the reasonable control of the obligated party. Both you and we will use reasonable efforts to mitigate the effect of a force majeure event. If such event continues for more than 30 days, either party may cancel unperformed Services and the applicable Order upon written notice. If you terminate the Service under such circumstances, we will refund the unused portion of any pre-paid Fees. This Section does not excuse either party’s obligation to take reasonable steps to follow its normal disaster recovery procedures or your obligation to pay for the Services previously incurred.
13. DISPUTE RESOLUTION AND ARBITRATION. The parties agree that in the event any dispute arises between us, we agree to first attempt to resolve any dispute or disagreement collegially and in good faith. If that is not successful, then either party may choose to engage in voluntary mediation. The parties agree that if any dispute cannot be resolved informally or through mediation, any controversy or claim arising out of or relating to this Agreement, shall be mandatorily settled by arbitration administered by the Judicial Arbitration and Mediation Service, Inc. (“JAMS”), under the Streamlined Arbitration Rules and Procedures. This arbitration agreement and these provisions shall be governed by, and construed and interpreted, in accordance with the Federal Arbitration Act. The arbitrator may not award consequential, special, punitive or exemplary damages. Judgment on the award rendered by the arbitrator may be entered in any court having jurisdiction thereof. Regardless of the amount of money at issue in any arbitration, and notwithstanding JAMS Rules to the contrary, the arbitration shall be decided by a single arbitrator who is a neutral, retired state or federal judge. The costs of any arbitration shall be equally divided, with no shifting of attorneys’ fees to the non-prevailing Party. No class action or collective claims may be submitted for arbitration or considered by the Arbitrator. Arbitration proceedings shall be conducted in New York, New York. The arbitration proceedings and results therein shall be kept confidential, unless it becomes necessary for a party to seek court action and assistance to enforce any award. The arbitrator and not a court shall be authorized to determine arbitrability. In the event any dispute is determined not arbitrable by the arbitrator, each Party agrees that any proceeding (in contract, tort or otherwise) arising out of or relating to this Agreement, involves complicated and difficult issues. Therefore, each party irrevocably and unconditionally waives any right it may have to a trial by jury in respect of any such proceeding. Notwithstanding the foregoing, each party reserves the right to file suit or action in any court of competent jurisdiction as such party deems necessary to protect its intellectual property rights and to recoup any payments due.
14. GOVERNING LAW AND JURISDICTION. This Agreement is governed by the substantive and procedural laws of the State of New York excluding its conflict of laws rules, and the parties both agree to submit to the exclusive jurisdiction of, and venue in, the courts located in New York, New York in connection with any dispute arising out of or relating to this Agreement other than as specified in Section 13. The Uniform Computer Information Transactions Act does not apply to this Agreement or to Orders placed under it.
15. NOTICE. Any notice required under this Agreement shall be provided to the other party in writing. If you have a legal dispute with us or if you wish to provide a notice under the Indemnification Section of this Agreement, or if you become subject to insolvency or other similar legal proceedings, you will promptly send written notice to us at: Nowsta, Inc.,228 Park Ave South, PMB 62909, New York, NY 10003-1502, Attention: Legal Department with a copy to legal2@nowsta.com. Notices to you will go to the point of contact specified in your Order. Notices shall be deemed delivered as follows: (a) by personal delivery when delivered by hand, (b) by registered or certified mail, postage prepaid, return receipt requested, five (5) days after deposit in the mail, (c) by overnight courier upon written verification of receipt, or (d) by confirmed fax or email upon receipt. In addition, we may give general notices applicable to our Subscribers by means of a general notice on our Subscriber portal for the Services or via email to Subscriber’s point of contact on the Order.
16. ASSIGNMENT. This Agreement shall inure to benefit and bind the parties hereto, their successors and assigns, but neither party may assign this Agreement without written consent of the other, except that we may assign without consent to an Affiliate or the successor of all or substantially all of our business or assets to which this Agreement relates.
17. GENERAL PROVISIONS.
17.1. Independent Contractors. We are an independent contractor, and each party agrees that no partnership, joint venture, or agency relationship exists between the parties, and no party has the ability to contractually bind the other.
17.2. Third Parties. Our business partners and other third parties, including any third parties with which the Services have integrations, that are provided via the Marketplace or that are retained by you to provide consulting services, implementation services or applications that interact with the Services, are independent of us and are not our agents. Even if recommended by us, we are not liable for, bound by, or responsible for any problems with the Services or Subscriber Data arising due to any acts or omissions of any business partner or third party, unless the business partner or third party is providing Services as our subcontractor or is otherwise engaged by us in connection with performance of our obligations under this Agreement, and, if so, then only to the same extent as we would be responsible for our resources under this Agreement.
17.3. Severability. If any term of this Agreement is found to be invalid or unenforceable, the remaining provisions will remain effective and such term shall be replaced with another term consistent with the purpose and intent of this Agreement.
17.4. Amendment and Waiver. This Agreement shall not be modified or amended, except as expressly set forth herein, or in writing and signed or accepted electronically by the party against whom the modification, amendment or waiver is to be asserted, however, we may update the Documentation and policies referenced in this Agreement, including by posting updated documents on our website, provided that such updated Documentation and policies shall apply only to Orders placed after such updates are provided.
17.5. Use of Name. You grant us the right to use your name and logo on our website, in our marketing materials, and as part of our Subscriber list, consistent with usage instructions provided by you, during the Service Term.
18. ENTIRE AGREEMENT
18.1. Entire Agreement. You agree that this Agreement and the information which is incorporated into this Agreement by written reference (including reference to information contained in a URL or referenced policy), together with the Order, is the complete agreement for Services ordered by you and supersedes all prior or contemporaneous agreements, proposals, negotiations, demonstrations or representations, written or oral, regarding such Service.
18.2. Order of Precedence. It is expressly agreed that the terms of this Agreement and the Order shall supersede the terms in any purchase order or non-Nowsta document, and no terms included in any such purchase order or other non-Nowsta document shall apply to your Order. In the event of any inconsistencies between the terms of the Order and the Agreement, the non-preprinted terms of the Order shall take precedence, unless expressly stated otherwise in the Order. The Marketplace TOU and Integration Addendum supersede any provisions of this Agreement in the event of any conflict with respect to the Marketplace Services and Integration Services. No third party beneficiary relationships are created by this Agreement.
Exhibit 1 – SECURITY REQUIREMENTS
These Security Requirements describe how Nowsta works to protect the security of its customer’s data in connection with their use of the Services. For purposes of these Security Requirements: the word “including” means “including, without limitation”; “Malicious Code” means any harmful, malicious, or hidden code, programs, procedures, routines, or mechanisms, including malware, Trojan horses, viruses, worms, time bombs, time locks, devices, traps, access codes, or drop dead, or trap door devices; “Subscriber Systems” means any Subscriber or third-party infrastructure, systems, or applications that access, process, or store Subscriber Data; “Nowsta Personnel” means the employees and contractors providing Nowsta Services or accessing or using Nowsta Systems; and “Nowsta Systems” means the infrastructure, systems and applications that access or support Nowsta Services or that access, process, or store Subscriber Data. Capitalized terms not otherwise defined herein shall have the meanings ascribed to them in the Agreement.
1. Endpoint Controls
1.1. Nowsta Personnel shall only use endpoints that comply with these Security Requirements to:
1.1.1. access, process, or store Subscriber Data;
1.1.2. access any Subscriber Systems; or
1.1.3. access any Nowsta Systems.
1.2. Nowsta shall not transmit Subscriber Data from such endpoints to any infrastructure, systems, or applications other than Subscriber Systems or other infrastructure, systems or applications authorized by Subscriber. Notwithstanding the foregoing, Subscriber acknowledges that Nowsta is permitted to transmit such Subscriber Data to its subprocessors as described in the Agreement and that by using certain features and functionality in the Nowsta Services, that it will permit Nowsta to transmit Subscriber Data as required to provide those services.
1.3. Nowsta Personnel shall only (a) access Subscriber Systems, Subscriber Data or Nowsta Systems or (b) process or store Subscriber Data, using endpoints that: (1) utilize security controls that include (i) disk encryption, (ii) endpoint detection and response (EDR) tools to monitor and alert for suspicious activities and Malicious Code, and (iii) vulnerability scanning and management in accordance with Section 1.4, and (2) are configured to automatically activate a password protected screensaver after 15 minutes of inactivity and run up-to-date host-based firewall software.
1.4. Nowsta shall ensure that vulnerabilities meeting defined risk criteria set forth below will trigger alerts and that such vulnerabilities are prioritized for remediation based on their potential impact to Subscriber Data, Subscriber Systems, and Nowsta System. Upon becoming aware of such vulnerabilities, Nowsta shall remediate private and public “critical” and “high”’ vulnerabilities within thirty (30) calendar days, and “medium” vulnerabilities within ninety (90) calendar days To assess whether a vulnerability is “critical”, “high”, or “medium”, Nowsta shall use the National Vulnerability Database’s (NVD) Common Vulnerability Scoring System (CVSS) (NVD Site).
1.5. Nowsta Personnel may permanently delete in a secure fashion all Subscriber Data on all endpoints and Nowsta Systems within thirty (30) days after the expiration or termination of the Agreement except as may be required by law. Anonymized Data and Statistical Data may be retained and used by Nowsta as specified in the Agreement.
2. Encryption
2.1. Encryption of Subscriber Data. Nowsta must encrypt all Subscriber Data containing PII (as defined NIST (NIST Site)) or PCI (as defined by Payment Card Industry Security Standards Council (PCI SSC Site)) at-rest using AES 256-bit (or better) encryption. Nowsta shall use Transport Layer Security (TLS) 1.2 (or better) for all Subscriber Data in-transit over untrusted networks.
3. Administrative Controls
3.1. Personnel Security. Nowsta shall conduct the following background screening on its employee and contractor candidates that Nowsta proposes assigning as Nowsta Personnel, to the extent permitted by applicable law, and Nowsta shall not assign any employee or contractor as Nowsta Personnel if such individual has any unfavorable or non-standard results:
– Identity Verification
– Criminal Search
– Education Verification
– Employment Verification
– Global Watchlist
3.2. Personnel Training. Nowsta shall maintain a documented security awareness and training program for Nowsta Personnel, including onboarding and on-going training.
3.3. Personnel Agreements. Nowsta shall require Nowsta Personnel to sign confidentiality agreements and a policy that includes acknowledging responsibility for reporting Security Incidents (as defined below).
3.4. Personnel Access Reviews & Separation. Nowsta shall review the access privileges of Nowsta Personnel to the endpoints and Nowsta Systems at least quarterly, and promptly remove access privileges for Nowsta Personnel who no longer need such access privileges. Nowsta shall promptly remove access privileges for all separated Nowsta Personnel. If Subscriber has granted any Nowsta Personnel access privileges to Subscriber Systems or Subscriber Data, Nowsta shall notify Subscriber promptly if any such Nowsta Personnel are separated or no longer need such access privileges.
3.5. Change Management. Nowsta shall maintain a documented change management program for Nowsta Systems.
3.6. Third Party Risk Management. For Nowsta’s vendors that (a) access Subscriber Systems or Nowsta Systems, or (b) access, process, or store Subscriber Data, Nowsta shall maintain a Nowsta risk management program designed to ensure each such Nowsta vendor maintains security measures consistent with, and complies with, Nowsta’s obligations described in these Security Requirements.
4. Incident Detection & Response
4.1. Security Incident Reporting. If Nowsta becomes aware of any (a) accidental, unauthorized, or unlawful destruction, loss, alteration, or disclosure of, or access to Subscriber Data, or (b) any accidental, unauthorized or unlawful access to or alteration of Subscriber Systems or Nowsta Systems (“Security Incident”), then, in each such case Nowsta shall notify Subscriber thereof without undue delay, and in any case within 72 hours, after becoming aware of the Security Incident.
4.2. Investigation. If a Security Incident occurs, Nowsta shall promptly take reasonable steps to contain, mitigate, and investigate the Security Incident. Any logs determined to be relevant to the Security Incident, shall be preserved for at least one year, and made available to Subscriber upon its request.
4.3. Communication and Cooperation. If a Security Incident occurs, Nowsta shall provide Subscriber timely information about the Security Incident, including the nature and consequences of the Security Incident, the measures taken or proposed by Nowsta to contain and mitigate the Security Incident, the status of Nowsta’s investigation, a contact person from which additional information may be obtained, and the categories and approximate number of data records concerned.
5. Subscriber Rights
5.1. Audit Rights. At no additional cost to Subscriber, Nowsta shall provide Subscriber, or its appropriately qualified third-party representative, access to appropriate Nowsta Personnel and reasonably requested documentation, logs, and data evidencing Nowsta’s compliance with its obligations under these Security Requirements.