FLOW SECURITY SUBSCRIPTION AGREEMENT

This Subscription Agreement constitute binding terms by and between Flow Security Ltd. (the “Company”) and the entity executing the corresponding Order Form (the “Customer”) (each, a “Party” and collectively, the “Parties”). By signing the Order Form, Customer acknowledges these terms and represents that it has fully read and understood, and agrees to be bound by this Subscription Agreement (the date of such occurrence being the “Effective Date”). This Subscription Agreement and the Order Form shall be collectively referred to as the “Agreement”.

1. Subscription.

   1. Solution. Subject to the terms and conditions of this Agreement, and Customer’s payment of the applicable Fees (defined below), Company hereby grants Customer a limited, worldwide, non-exclusive, non-sublicensable, non-transferable and revocable right to: (a) remotely access (i.e. on a SaaS basis) the Company security software solution (the “Solution”) during the Subscription Term (as defined below), solely for Customer’s internal purposes, as ordered by the Customer under the Order Form; and (b) install and use Company Solution (“Local Solution”) for internal installation purposes, as ordered by the Customer under the Order Form. Unless otherwise indicated, the term “Solution” also includes the Local Solution and any appliance and any manual or documentation (“Documentation”) provided or made available to Customer in connection with the operation of the Solution.

      Customer may only use the Solution in accordance with the Documentation, subject to the use limitations indicated in the Order Form (as defined below) and applicable laws and regulations. Customer shall be solely responsible for providing all equipment, systems, assets, access, and ancillary goods and services needed to access and use the Solution, for ensuring their compatibility with the Solution.

      “Order Form” means a written or electronic order form, to which this Agreement is attached or incorporated, and which is executed by the Parties. The Order Form shall include the relevant usage and volume parameters, as well as the commercial terms, agreed between the Parties.

2. Services.

   1. Support and Maintenance. Company shall provide support and maintenance services in accordance with Company’s Service Level Agreement attached hereto as Exhibit A (“SLA”), as may be amended from time to time by Company. The support and maintenance services may be performed by Company and/or Company’s third party providers. The Solution and the support and maintenance services provided under the SLA shall be referred collectively as the “Services”.
   2. Access to the Solution. The Solution may be accessed solely by Customer’s employees who are explicitly authorized by Customer to access and use the Solution (each, a “User”). Customer shall immediately report any unauthorized access or use of the Solution to Company. Customer warrants and represents that all information submitted during the registration process is, and will thereafter remain, complete and accurate. Customer shall be responsible and liable for all activities of its Users.

3. Subscription Fees.

   1. Fees. Customer shall pay Company the subscription fees specified in the Order Form (the “Fees”).
   2. General. Unless otherwise specified in the Order Form: (i) Customer will pay all amounts due under this Agreement in U.S. Dollars; (ii) all amounts invoiced hereunder are due and payable within thirty (30) days of the date of the invoice; and (iii) all fees and other amounts paid hereunder are non-refundable. Any amount not paid when required to be paid hereunder shall accrue interest on a daily basis until paid in full at the lesser of: (a) the rate of one and a half percent (1.5%) per month; or (b) the highest amount permitted by applicable law. All amounts payable under this Agreement are exclusive of all sales, use, value-added, withholding, and other direct or indirect taxes, charges, levies, duties and/or governmental charges, except for taxes based upon Company’ net income.
   3. Suspension. Company reserves right to temporarily suspend provision of Services: (a) if Customer is seven (7) days or more overdue on a payment; (b) if Company deems such suspension necessary as a result of Customer’s breach under Section 4 (Prohibited Uses); or (c) as required by law or at the request of governmental entities.

4. Prohibited Uses.

   Except as specifically permitted herein, without the prior written consent of Company, Customer must not, and shall not allow any User or any third party to, directly or indirectly: (i) copy, modify, create derivative works of, make available or distribute, publically perform, or display any part of the Solution (including by incorporation into its products), or use the Solution to develop any service or product that is the same as (or substantially similar to) it; (ii) sell, license, lease, assign, transfer, pledge, rent, sublicense, or share Customer’s rights under this Agreement with any third party (including but not limited to offering the Solution as part of a time-sharing, outsourcing or service bureau environment); (iii) use any “open source” or “copyleft software” in a manner that would require Company to disclose the source code of the Solution to any third party; (iv) disclose the results of any testing or benchmarking of the Solution to any third party; (v) disassemble, decompile, decrypt, reverse engineer, extract, or otherwise attempt to discover the Solution’s source code or non-literal aspects (such as the underlying structure, sequence, organization, file formats, non-public APIs, ideas, or algorithms); (vi) remove or alter any trademarks or other proprietary right notices displayed on or in the Solution; (vii) circumvent, disable or otherwise interfere with security-related features of the Solution or features that enforce use limitations; (viii) export, make available or use the Solution in any manner prohibited by applicable laws; and/or (ix) store or transmit any malicious code (i.e., software viruses, Trojan horses, worms, robots, malware, spyware or other computer instructions, devices, or techniques that erase data or programming, infect, disrupt, damage, disable, or shut down a computer system or any component of such computer system) or other unlawful material in connection with the Company’s Solution.

5. Mutual Warranties.

   Each Party represents and warrants that it is duly organized, validly existing and in good standing under the laws of its jurisdiction of incorporation or organization; and that the execution and performance of this Agreement will not conflict with other agreements to which it is bound or violate applicable law.

6. Intellectual Property Rights.

   1. Ownership. As between the Parties, Company is, and shall be, the sole and exclusive owner of all intellectual property rights in and to: (a) the Solution and all related software and intellectual property; (b) any and all improvements, derivative works, and/or modifications of/to the foregoing, regardless of inventorship or authorship; and (c) any other deliverables and/or services which may be provided by Company hereunder. Customer shall make, and hereby irrevocably makes, all assignments necessary or reasonably requested by Company to ensure and/or provide Company the ownership rights set forth in this Section. Nothing herein constitutes a waiver of Company’s intellectual property rights under any law. .
   2. Feedback. If Company receives any feedback (which may consist of questions, comments, suggestions or the like) regarding any of the Services (collectively, “Feedback”), all rights, including intellectual property rights in such Feedback shall belong to Company and such shall be considered Company’s Confidential Information. Customer hereby irrevocably and unconditionally transfers and assigns to Company all intellectual property rights it has in such Feedback and waives any and all moral rights that Customer may have in respect thereto.
   3. Anonymous Information. Any anonymous information, which is derived from the use of the Solution (i.e., metadata, aggregated and/or analytics information) which is not personally identifiable information (“Analytics Information”) may be used for providing the Services, for development, and/or for statistical purposes. Such Analytics Information is Company’s exclusive property.

7. Third Party Components.

   The Solution may use or include third party open source software, files, libraries or components that may be distributed to Customer and are subject to third party open source license terms. A list of such components shall be provided to Customer upon its request and may be updated from time to time by Company. Company makes no warranty or indemnity hereunder with respect to any third party open source software.

8. Confidentiality.

   Each Party may have access to certain non-public information and materials of the other Party, in any form or media, including without limitation trade secrets and other information related to the products, software, technology, data, know-how, or business of the other Party, and any other information that a reasonable person should have reason to believe is proprietary, confidential, or competitively sensitive (the “Confidential Information”). Each Party shall take reasonable measures, at least as protective as those taken to protect its own confidential information, but in no event less than reasonable care, to protect the other Party’s Confidential Information from disclosure to a third party. The receiving party’s obligations under this Section, with respect to any Confidential Information of the disclosing party, shall not apply to and/or shall terminate if such information: (a) was already lawfully known to the receiving party at the time of disclosure by the disclosing party; (b) was disclosed to the receiving party by a third party who had the right to make such disclosure without any confidentiality restrictions; (c) is, or through no fault of the receiving party has become, generally available to the public; or (d) was independently developed by the receiving party without access to, use of, or reliance on, the disclosing party’s Confidential Information. Neither Party shall use or disclose the Confidential Information of the other Party except for performance of its obligations under this Agreement (“Permitted Use”). The receiving party shall only permit access to the disclosing party’s Confidential Information to its respective employees, consultants, affiliates, agents and subcontractors having a need to know such information in connection with the Permitted Use, who either (i) have signed a non-disclosure agreement with the receiving party containing terms at least as restrictive as those contained herein or (ii) are otherwise bound by a duty of confidentiality to the receiving party at least as restrictive as the terms set forth herein; in any event, the receiving party shall remain liable for any acts or omissions of such persons. The receiving party will be allowed to disclose Confidential Information to the extent that such disclosure is required by law or by the order of a court or similar judicial or administrative body, provided that it promptly notifies the disclosing Party in writing of such required disclosure to enable disclosing party to seek a protective order or otherwise prevent or restrict such disclosure and cooperates reasonably with disclosing party in connection therewith. All right, title and interest in and to Confidential Information is and shall remain the sole and exclusive property of the disclosing Party.

9. LIMITED WARRANTIES.

   Company represents and warrants that, under normal authorized use, the Solution shall substantially perform in conformance with its Documentation. As Customer’s sole and exclusive remedy and Company’s sole liability for breach of this warranty, Company shall use commercially reasonable efforts to repair the Solution. The warranty set forth herein shall not apply if the failure of the Solution results from or is otherwise attributable to: (i) repair, maintenance or modification of the Solution by persons other than Company; (ii) accident, negligence, abuse or misuse of the Solution; (iii) use of the Solution other than in accordance with the Documentation; or (iv) the combination of the Solution with equipment or software not authorized or provided by Company. OTHER THAN AS EXPLICITLY STATED IN THIS AGREEMENT, TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE SOLUTION, SERVICES AND ANY OUTPUT WHICH MAY BE PROVIDED BY COMPANY HEREUNDER ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. COMPANY DOES NOT WARRANT THAT: (i) THE SOLUTION AND/OR THE SERVICES WILL MEET CUSTOMER’S REQUIREMENTS, OR (ii) THE SOLUTION WILL OPERATE ERROR-FREE. EXCEPT AS SET FORTH IN SECTION 5 AND THIS SECTION 9, THE COMPANY EXPRESSLY DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, SATISFACTORY QUALITY TITLE, NON- INFRINGEMENT, NON-INTERFERENCE, FITNESS FOR A PARTICULAR PURPOSE. COMPANY WILL NOT BE LIABLE FOR DELAYS, INTERRUPTIONS, SERVICE FAILURES OR OTHER PROBLEMS INHERENT IN USE OF THE INTERNET AND ELECTRONIC COMMUNICATIONS OR FOR ISSUES RELATED TO PUBLIC NETWORKS OR CUSTOMER’S HOSTING SERVICES. COMPANY SHALL NOT BE RESPONSIBLE FOR ANY WARRANTIES AND REPRESENTATIONS MADE BY ANY PARTNER TO THE CUSTOMER, AND SUCH WARRANTIES AND REPRESENTATIONS ARE THE SOLE RESPONSIBILITY OF SUCH PARTNER.

10. LIMITATION OF LIABILITY.

    WITHOUT DEROGATING FROM COMPANY’S INDEMNIFICATION OBLIGATION UNDER SECTION ‎11 AND EXCEPT FOR ANY DAMAGES RESULTING FROM WILLFUL MISCONDUCT, AND/OR CUSTOMER’S MISAPPROPRIATION OR OTHERWISE VIOLATION OF COMPANY’S INTELLECTUAL PROPERTY RIGHTS (INCLUDING MISUSE OF THE SUBSCRIPTION BY CUSTOMER); (I) NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, PROFITS, DATA, OR DATA USE, OR THE COST OF PROCURING ANY SUBSTITUTE GOODS OR SERVICES; (II) EITHER PARTY’S MAXIMUM LIABILITY FOR ANY DAMAGES ARISING OUT OF OR RELATED TO THIS AGREEMENT, WHETHER IN CONTRACT OR TORT, OR OTHERWISE, SHALL IN NO EVENT EXCEED, IN THE AGGREGATE, THE TOTAL AMOUNTS ACTUALLY PAID OR PAYABLE TO COMPANY BY CUSTOMER IN THE TWELVE (12) MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO SUCH CLAIM. THIS LIMITATION OF LIABILITY IS CUMULATIVE AND NOT PER INCIDENT. FOR CLARITY, THE LIMITATIONS IN THIS SECTION DO NOT APPLY TO PAYMENTS DUE TO COMPANY UNDER THIS AGREEMENT.

11. Indemnification.

    1. Company agrees to defend, at its expense, any third party action or suit brought against Customer alleging that the Solution, when used as permitted under this Agreement, infringes intellectual property rights of a third party (“IP Infringement Claim”); and Company will pay any damages awarded in a final judgment against Customer that are attributable to any such IP Infringement Claim, provided that (i) Customer promptly notifies Company in writing of such claim; and (ii) Customer grants Company the sole authority to handle the defense or settlement of any such claim and provides Company with all reasonable information and assistance in connection therewith, at Company’s expense. Company will not be bound by any settlement that Customer enters into without Company’s prior written consent.
    2.  If the Solution becomes, or in Company’s opinion is likely to become, the subject of an IP Infringement Claim, then Company may, at its sole discretion: (a) procure for Customer the right to continue using the Solution; (b) replace or modify the Solution to avoid the IP Infringement Claim; or (c) if options (a) and (b) cannot be accomplished despite Company’s reasonable efforts, then Company may terminate this Agreement and Company shall also provide a refund for any amount pre-paid by Customer for such returned Solution for the remaining unused period of the subscription.
    3.  Notwithstanding the foregoing, Company shall have no responsibility for IP Infringement Claims resulting from or based on: (i) modifications to the Solution made by a party other than Company or its designee; (ii) Customer’s failure to implement software updates provided by Company specifically to avoid infringement; or (iii) combination or use of the Solution with equipment, devices or software not supplied by Company or not in accordance with the Documentation.
    4.  This Section 11 states Company’s entire liability, and Customer’s exclusive remedy, for any IP Infringement Claim.

12. Term and Termination.

    1.  Term. This Agreement commences on the Effective Date and, unless terminated in accordance herewith, shall continue in full force and effect for the duration of the subscription term specified in the Order Form (the “Subscription Term”). Any renewal of the Subscription Term must be mutually agreed by the Parties in a signed writing.
    2.  Termination for Breach. Each Party may terminate this Agreement immediately upon written notice to the other Party if the other Party commits a material breach under this Agreement and, if curable, fails to cure that breach within sixty (60) days after receipt of written notice specifying the material breach (except that for payment defaults, such cure period will be seven (7) days).
    3.  Termination for Bankruptcy. Each Party may terminate this Agreement upon written notice to the other Party upon the occurrence of any of the following events in respect of such other Party: (a) a receiver is appointed for the other Party or its property, which appointment is not dismissed within sixty (60) days; (b) the other Party makes a general assignment for the benefit of its creditors; (c) the other Party commences, or has commenced against it, proceedings under any bankruptcy, insolvency or debtor’s relief Law, which proceedings are not dismissed within sixty (60) days; or (d) the other Party is liquidating, dissolving or ceasing normal business operations.
    4.  Effect of Termination; Survival. Upon termination or expiration of this Agreement: (i) the Solution subscription granted to Customer under this Agreement shall expire, and Customer shall discontinue any further use thereof; (ii) Customer shall immediately delete and dispose of all copies of the Local Solution and Documentation in Customer’s or any of its representatives’ possession or control; and (iii) Company may delete all Customer Data. The provisions of this Agreement that, by their nature and content, must survive the termination of this Agreement in order to achieve the fundamental purposes of this Agreement shall so survive. The termination of this Agreement shall not limit either Party from pursuing any other remedies available to it under applicable law.

13. Miscellaneous.

    1.  Entire Agreement and Amendments. This Agreement, and any exhibits attached or referred hereto, represents the entire agreement between the Parties concerning the subject matter hereof, replaces all prior and contemporaneous oral or written understandings and statements, and may be amended only by a written agreement executed by both Parties.
    2.  Waiver and Remedies. The failure of either Party to enforce any rights granted hereunder or to take action against the other Party in the event of any breach shall not be deemed a waiver by that Party as to subsequent enforcement or actions in the event of future breaches. Any waiver granted hereunder must be in writing.
    3.  Severability. If any provision of this Agreement is held by a court of competent jurisdiction to be illegal, invalid or unenforceable, the remaining provisions of this Agreement shall remain in full force and effect and such provision shall be reformed only to the extent necessary to make it enforceable.
    4.  Assignment. Any use of the Solution by an agency, department, or other entity of the United States government shall be governed solely by the terms of this Agreement. Neither Party may assign its rights or obligations under this Agreement without the prior written consent of the other Party, which consent may not be unreasonably withheld or delayed. Notwithstanding the foregoing, this Agreement may be assigned by either Party in connection with a merger, consolidation, sale of all of the equity interests of such Party, or a sale of all or substantially all of the assets of the Party to which this Agreement relates. Without derogating from and subject to the above mentioned, this Agreement will bind and benefit each Party and its respective successors and assigns.
    5.  Governing Law; Jurisdiction. This Agreement shall be governed by and construed under the laws of the State of Israel, without reference to principles and laws relating to the conflict of laws. The competent courts of the city of Tel Aviv-Jaffa shall have the exclusive jurisdiction with respect to any dispute and action arising under or in relation to this Agreement. Notwithstanding the foregoing, each Party may seek equitable relief in any court of competent jurisdiction in order to protect its proprietary rights. Each Party irrevocably waives its right to trial of any issue by jury.
    6.  Relationship. This Agreement does not, and shall not be construed to create any relationship, partnership, joint venture, employer-employee, agency, or franchisor-franchisee relationship between the Parties. Neither Party has any authority to enter into agreements of any kind on behalf of the other Party.
    7.  Force Majeure. Company will not be liable for any delay or failure to provide the Services resulting from circumstances or causes beyond the reasonable control of Company including, but not limited to on account of strikes, shortages, riots, insurrection, fires, flood, storms, explosions, acts of God, war, government or quasi-governmental authorities actions, riot, acts of terrorism, earthquakes, explosions, power outages, pandemic or epidemic (or similar regional health crisis), or any other cause that is beyond the reasonable control of Company.
    8.  Notices. All notices to either Party shall be deemed given (a) four (4) business days after being mailed by airmail, postage prepaid, (b) the same business day, if dispatched by facsimile or electronic mail before 13:00 hour (Israel time) and sender receives acknowledgment of receipt, or (c) the next business day, if dispatched by facsimile or electronic mail after the hour 13:00 (Israel time) and sender receives acknowledgment of receipt. This Agreement may be executed in electronic counterparts, each of which counterpart, when so executed and delivered, shall be deemed to be an original and all of which counterparts, taken together, shall constitute but one and the same agreement.