Power Up Boston Penetration Testing Service Agreement & Terms of Service

Power Up Boston Penetration Testing Service Agreement & Terms of Service

THIS SERVICE AGREEMENT (the “Agreement”), is made and entered into by and between Power Up Boston  (“Power Up Boston”), a Massachusetts corporation, and You, as defined in Your executed Power Up Boston Penetration Testing Service Agreement, Your executed Power Up Boston Penetration Testing Services Order Form and Purchase Agreement (“Order Form”) with Power Up Boston, Your executed Network Administrative/Management Service Agreement or any agreement encompassing a Network Administrative/Management Service Agreement (the appropriate agreement of the aforementioned agreements herein known as “Your Defining Reference Agreement”), or as addressed in any invoice delivered to You by Power Up Boston pertaining to the services and/or software described herein. By using and/or accessing the services and/or software described herein, or upon Your payment of any invoice pertaining to the services and/or software described herein, You hereby agree to all terms and conditions contained herein. If You are entering this agreement on behalf of a company or other legal entity, You represent that You have authority to bind such entity to this agreement, in which case You shall refer to such entity.

  1. Penetration Testing Service

Subject to the terms and conditions of this Agreement, Power Up Boston, shall provide You with a partially automated test that will attempt to remotely identify security vulnerabilities and/or software configuration errors on one or more computer systems and/or internet perimeter devices (“Target Systems”) owned and/or operated by You (the “Penetration Testing Service” or “Service”) during the term of this Agreement. Power Up Boston reserves the right to provide You a report regarding the Service performed and Power Up Boston’s opinion of the findings as a result of the Service (“Service Reports”).

  1. Fees, Billing, and Payment

2.1 General

You will pay monthly fees and other fees for the Service (the “Fees”) to Power Up Boston or to Power Up Boston’s authorized reseller in the amount and in the manner set forth in Your Defining Reference Agreement or as specified in any invoice delivered to You by Power Up Boston pertaining to the Service, or as otherwise arranged between You and Power Up Boston.

2.2 Payments

All payments to Power Up Boston must be made in U.S. dollars by credit card, check, eCheck at https://powerupboston.com, bank draft/ACH, or by wire transfer. The Fees exclude all applicable sales, use, withholding and other taxes, and You will be responsible for payment of all taxes (other than taxes based on Power Up Boston’s income), fees, duties and charges, and any related penalties and interest, arising from the payment of the Fees. You will make all payments of the Fees to Power Up Boston free and clear of, and without reduction for, any taxes, fees or duties; any such taxes imposed on payments of the Fees to Power Up Boston will be Your sole responsibility, and You will provide Power Up Boston with official receipts issued by the appropriate taxing authority, or such other evidence as Power Up Boston may reasonably request, to establish that such taxes have been paid. You will indemnify and hold Power Up Boston harmless from any such taxes or claims relating to the payment, non-payment or underpayment of such taxes. Any portion of the Fees that is not paid when due will accrue interest at two and a half percent (2.5%) per month or the maximum rate permitted by applicable law, whichever is less, from the due date until paid. In the event Your Fees (as outlined in Section 2.1) have been increased from a previous month, You hereby agree to the new Fee arrangement or price schedule upon Your payment of Your increased Fees.

2.3 Refunds

All payments and payments owed are final and there are no refunds.

  1. Power Up Boston Responsibilities

3.1 Data Security

Power Up Boston will provide the Service to You on a “commercially reasonable efforts” basis. Power Up Boston will implement reasonable security and environmental precautions to ensure a high level of system availability and data protection and recovery.

3.2 Data Privacy and Confidentiality

Power Up Boston agrees to hold confidential all Your data in its possession exercising the same degree of care that a reasonable and careful company would exercise with similar data of its own. Power Up Boston will limit access to Your data only to employees, contract labor, and subcontractors of Power Up Boston, or to any affiliate or successor to the business or assets of Power Up Boston; provided that in the event that Power Up Boston is made aware of a potential violation of the terms of any law, any regulation, or this or any end user Agreement, Power Up Boston may take, but is under no obligation to take, such investigative and remedial measures as each deems in its sole discretion to be appropriate, including copying and sharing data with appropriate legal authorities, providing access to data and activity information with legal authorities, removal of violating data without notice, denial or suspension of access and services, or any such other remedies or actions as may be otherwise requested by legal authorities or allegedly aggrieved parties, even in the absence of subpoena or compulsion by government authority.

3.3 Support

If You purchased support with the Service, then Power Up Boston will provide support to you during normal business hours, which are defined as 8:00 a.m. – 5:00 p.m., Monday through Friday, United States central time, excluding federal holidays in the United States and observed Power Up Boston holidays. You may request support both during and outside normal business hours by opening a support ticket via the Power Up Boston website at https://Power Up Bostoncorp.com/support or by calling a Power Up Boston authorized support agent.

You agree to and accept Power Up Boston’s incident response time expectations, Your remedies, and the method for obtaining SLA credits as outlined in the Power Up Boston Service Level Agreement (SLA) and listed on the Power Up Boston website at https://Power Up Bostoncorp.com/terms.

You acknowledge that in the event You experience trouble with the Service, You are responsible for on-site cooperative testing with Power Up Boston’s authorized support agent(s) to assist in the diagnosis of the trouble. Power Up Boston is not responsible for end-user support of issues not directly related to the Service. This includes (but is not limited to) Your operating systems, Your equipment, or Your application support. Power Up Boston reserves the right to bill You at current hourly rates for configuration requests that are not required to provide the Service outlined herein. Additionally, Power Up Boston is not liable for any data errors, and is not liable for any disruption of the Service no matter what the root cause.

 

  1. Your Responsibilities

4.1 Requirements

You warrant that You have legal right to subject Target Systems to the Service and that if You are not the owner of the Target Systems that You have obtained such right from the legal owner of the Target Systems.

You warrant that You have sole responsibility for all adequate protection and backup of data and/or equipment used in connection with or having any connection to the Target Systems (the “Affected Systems”) and that You have protected and backed up all Affected Systems. You warrant that You will not make any claim against Power Up Boston for lost data, re-run time, inaccurate output, work delays or lost profits resulting from the Service.

You warrant that while the results of the Service will provide a reasonably accurate view of the current security level of Target Systems, You acknowledge that Power Up Boston cannot be held responsible and You will not hold Power Up Boston responsible if the Service fails to discover certain security or configuration issues on the Target Systems.

In order not to distort the results of the Service, You will respond in a normal fashion if or when You detect traces of activity from the Service in any logs of the Target Systems or any alert systems monitoring the Target Systems, etc. as would occur in the event of a real security penetration. Additionally, You agree not to notify legal or public authorities of such activity created by the Service.

Provision of the Service requires that You maintain compatible devices, Internet access, and compatible software; may require periodic updates; and may be affected by the performance of these factors. High-speed Internet access is strongly recommended for use. You will arrange for and maintain Internet communication services for the use of the Service. You are responsible for any communication costs associated with Your Internet connection You agree that meeting these requirements, which may change from time to time, is Your responsibility.

As part of the Service, You may from time to time receive updates or notifications from Power Up Boston which may be automatically or manually delivered to You, Your devices or computers or servers. These updates may include Service Reports, additional reports, bug fixes, feature enhancements or improvements, or entirely new approaches of the Service. You agree that Power Up Boston may deliver such updates or notifications to You as part of the Service and You shall receive and install them as required.

4.2 Restrictions

You agree that You shall not place any data on the Target Systems or Affected Systems that the failure to use or access such data: (a) infringes on the intellectual property rights of any third party or any rights of publicity or privacy; (b) violates any law, statue, ordinance or regulation (including without limitation the laws and regulations governing export control, unfair competition, antidiscrimination or false advertising); (c) becomes defamatory, trade libelous, unlawfully threatening or unlawfully harassing; (d) becomes obscene, child pornographic or indecent; (e) creates or causes any viruses, Trojan horses, worms, time bombs, cancelbots or other computer programming routines that are intended to damage, detrimentally interfere with, surreptitiously intercept or expropriate any system, data or personal information; (f) creates or causes situations or environments where any failure or time delays of, or errors or inaccuracies in, the content, data or information on the Target Systems or Affected Systems or any systems of any third party could lead to death, personal injury, or severe physical or environmental damage; (g) creates or causes any damages, corruption, loss, interferences, security intrusions or any failure of any systems in Your control, possession, or business operations, or any systems of any third-party.

You shall defend, indemnify and hold Power Up Boston harmless against any third party claim, action, suit or proceeding alleging any breach of the covenants contained herein.

You acknowledge that Power Up Boston is not responsible or liable in any way for any data provided by You and has no duty to pre-screen such data. However, Power Up Boston reserves the right at all times to determine whether data is appropriate and in compliance with this Agreement, and may pre-screen, move, refuse, modify and/or remove data at any time, without prior notice and in its sole discretion, if such data is found to be in violation of this Agreement or any known laws, or is otherwise objectionable.

  1. Security and Data Encryption

In the event the Service includes Service Reports or data delivered to you, the delivery may involve encrypted technologies and/or a username and password for access of such Service Reports or data. Power Up Boston is under no obligation to maintain records of Your password(s) giving access to the Service and/or Your encryption key(s), and it is Your sole responsibility to choose Your encryption methods and to maintain records of Your password(s) and encryption key(s). Power Up Boston will not be responsible and will not incur any liability arising from the loss of Your passwords(s) and/or encryption key(s). Power Up Boston will not be responsible to You for unauthorized access to Your data or the unauthorized use of the Services unless the unauthorized access or use results from Power Up Boston’s failure to meet its security obligations stated in the Agreement. You are responsible for the use of the Services by any employee of Yours, any person to whom You have given access to the Services, and any person who gains access to Your data or the Services as a result of Your failure to use reasonable security precautions, even if such use was not authorized by You.

  1. Data Deletion Requests

You may request that Service Reports be deleted from the Service. You must provide authorization from an authorized representative as designated in Your Defining Reference Agreement, and once such Service Reports are deleted, a confirmation that such deletion has taken place will be delivered to the representative.

  1. Term and Termination

7.1 Term

This Agreement shall have the initial term as set forth in Your Defining Reference Agreement unless otherwise specified herein. In the event You have previously used or paid Fees for, or are currently using or paying Fees for, the Service, and it has also been determined that Your initial term has not been defined herein, in Your Defining Reference Agreement, or in any other arrangement or agreement between You and Power Up Boston, Your initial term will be defined as one (1) year following the date of either Your most recent payment of the Fees or Your most recent access or use of the Service or any associated Service Reports, whichever is later. The term shall automatically renew on a yearly basis at the end of the initial term and thereafter, unless You notify Power Up Boston, in writing at least ninety (90) days prior to the end of the then current term of Your intention to not to renew this Agreement. Power Up Boston or any Power Up Boston certified reseller reserve the right to modify the price schedule for the Service at any time. Pricing for any renewal term shall be at the price as set forth on the most current price schedule in effect upon the renewal date.

7.2 Termination

A party may terminate this Agreement if the other party breaches any material provision of this Agreement and does not cure the breach within ninety (90) days after receiving written notice thereof. Power Up Boston may also terminate this Agreement, effective immediately upon written notice to You, if: (a) You breach any provision in Section 9.2; or (b) You fail to pay any portion of the Fees when due within ten (10) days after receiving written notice from Power Up Boston that payment is past due. You may also terminate this Agreement at any time during the term by providing ninety (90) days advance notice to Power Up Boston, in writing, of Your intention to terminate this Agreement, and by immediately paying all amounts due under this Agreement for the remainder of the term.

7.3 Effects of Termination

Upon termination or expiration of this Agreement for any reason, any amounts owed to Power Up Boston under this Agreement before such termination or expiration will be immediately due and payable, all licensed rights granted in this Agreement will immediately cease to exist, and You must promptly discontinue all use of the Service, erase all copies of any Service Reports from Your systems and certify in writing to Power Up Boston that You have fully complied with these requirements. Additionally, upon termination or expiration of this Agreement, all Your data and Service Reports may be permanently deleted from Power Up Boston’s systems, without any obligatory notice by Power Up Boston to You.

7.4 Disposition upon Termination

You acknowledge that upon the expiration or termination of this Agreement, any attempt to access the servers of the Service in connection with any of Your data or Service Reports for whom You have not paid all fees, or for whom the Agreement has expired or terminated, is prohibited and unauthorized.

7.5. Failure to Comply & Unauthorized Activity

Power Up Boston may pursue criminal investigation and/or legal action, including the pursuit of punitive damages, against You if it is determined that, but not limited to: (a) prohibited or unauthorized activity is attempted by You as described herein; (b) unlicensed use or access of the Service or Service Reports is attempted by You as described herein; (c) restricted use is violated by You as described in Section 9.2; or (d) You fail to comply with Your written notification obligations in Section 7.3 immediately, as determined by Power Up Boston.

7.6 Survival

Sections 7.3 (“Effects of Termination”), 7.4 (“Disposition upon Termination”), 7.5 (“Failure to Comply & Unauthorized Activity”), 7.6 (“Survival”), 8 (“Warranty and Disclaimer”), 9.2 (“Use Restrictions”), 10 (“Liability Limitation”), and 11 (“General”) will survive termination or expiration of this Agreement for any reason.

  1. Warranty and Disclaimer

8.1 Services Warranty

Power Up Boston’s sole and exclusive warranty is that the Service provided under this Agreement shall be performed in conformity with the standard practices in the industry. Notwithstanding the foregoing, the security mechanisms implemented by Power Up Boston have inherent limitations and You are solely responsible for determining that this mechanism sufficiently meets Your security and operational needs. TO THE GREATEST EXTENT PERMISSIBLE BY APPLICABLE LAW, POWER UP BOSTON DOES NOT GUARANTEE OR WARRANT THAT ANY CONTENT OR TARGET SYSTEMS OR ASSOCIATED SYSTEMS AFFECTED BY THE SERVICE WILL NOT BE SUBJECT TO INADVERTENT DAMAGE, CORRUPTION, LOSS, OR REMOVAL IN ACCORDANCE WITH THE TERMS OF THIS AGREEMENT, AND POWER UP BOSTON SHALL NOT BE RESPONSIBLE SHOULD SUCH DAMAGE, CORRUPTION, LOSS, OR REMOVAL OCCUR. It is Your responsibility to maintain appropriate alternate backup of Your content, information, data, business operations, and Target Systems, as well as protect any associated systems that may be affected by the Service.

8.2 Disclaimer

THE EXPRESS WARRANTIES IN THIS SECTION 8 ARE IN LIEU OF ALL OTHER WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, REGARDING THE SERVICE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT OF THIRD PARTY RIGHTS. YOU ACKNOWLEDGE THAT YOU HAVE RELIED ON NO WARRANTIES OTHER THAN THE EXPRESS WARRANTIES IN THIS SECTION 8.

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES, AS SUCH, TO THE EXTENT SUCH EXCLUSIONS ARE SPECIFICALLY PROHIBITED BY APPLICABLE LAW, SOME OF THE EXCLUSIONS SET FORTH BELOW MAY NOT APPLY TO YOU.

POWER UP BOSTON SHALL USE REASONABLE SKILL AND DUE CARE IN PROVIDING THE SERVICE. THE FOLLOWING DISCLAIMERS ARE SUBJECT TO THIS EXPRESS WARRANTY.

POWER UP BOSTON DOES NOT GUARANTEE, REPRESENT, OR WARRANT THAT YOUR USE OF THE SERVICE WILL BE UNINTERRUPTED OR ERROR-FREE, AND YOU AGREE THAT FROM TIME TO TIME POWER UP BOSTON MAY REMOVE THE SERVICE FOR INDEFINITE PERIODS OF TIME, OR CANCEL THE SERVICE IN ACCORDANCE WITH THE TERMS OF THIS AGREEMENT.

YOU EXPRESSLY UNDERSTAND AND AGREE THAT THE SERVICE IS PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. POWER UP BOSTON AND ITS AFFILIATES, SUBSIDIARIES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, PARTNERS AND LICENSORS EXPRESSLY DISCLAIM ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. IN PARTICULAR, POWER UP BOSTON AND ITS AFFILIATES, SUBSIDIARIES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, PARTNERS AND LICENSORS MAKE NO WARRANTY THAT (I) THE SERVICE WILL MEET YOUR REQUIREMENTS; (II) YOUR USE OF THE SERVICE WILL BE TIMELY, UNINTERRUPTED, SECURE OR ERROR-FREE; (III) ANY INFORMATION OBTAINED BY YOU AS A RESULT OF THE SERVICE WILL BE ACCURATE OR RELIABLE; AND (IV) ANY DEFECTS OR ERRORS THAT MAY OCCUR AS A RESULT OF THE SERVICE WILL BE CORRECTED.

POWER UP BOSTON DOES NOT REPRESENT OR GUARANTEE THAT THE SERVICE WILL BE FREE FROM LOSS, CORRUPTION, ATTACK, VIRUSES, INTERFERENCE, HACKING, OR OTHER SECURITY INTRUSION, AND POWER UP BOSTON DISCLAIMS ANY LIABILITY RELATING THERETO.

ANY MATERIAL DOWNLOADED OR OTHERWISE OBTAINED THROUGH THE USE OF THE SERVICE OR SERVICE REPORTS IS ACCESSED AT YOUR OWN DISCRETION AND RISK, AND YOU WILL BE SOLELY RESPONSIBLE FOR ANY DAMAGE TO YOUR DEVICES AND/OR COMPUTER SYSTEMS OR LOSS OF DATA THAT RESULTS FROM THE DOWNLOAD OF ANY SUCH MATERIAL. YOU FURTHER ACKNOWLEDGE THAT THE SERVICE IS NOT INTENDED OR SUITABLE FOR USE IN SITUATIONS OR ENVIRONMENTS WHERE THE FAILURE OR TIME DELAYS OF, OR ERRORS OR INACCURACIES IN, THE CONTENT, DATA OR INFORMATION PROVIDED BY THE SERVICE COULD LEAD TO DEATH, PERSONAL INJURY, OR SEVERE PHYSICAL OR ENVIRONMENTAL DAMAGE.

  1. Software and Data Reports

9.1 License

As part of the provision of the Service, certain software such as a web browser and PDF reader or other office applications may need to be installed on Your system, and you may be required to have a username and password to a website to access Service Reports. Subject to the terms and conditions of this Agreement, Power Up Boston grants to You a limited, non-exclusive, non-transferable license under Power Up Boston’s copyrights to use the Service Reports delivery system as specifically allowed by Power Up Boston solely in connections with Power Up Boston’s provision of the Service. All rights not specifically granted to You herein are expressly reserved by Power Up Boston.

9.2 Use Restrictions

You agree not to: (a) modify, adapt, alter, translate, or create derivative works from the Service, the Service Reports, or the Service Reports delivery system; (b) merge the Service Reports with other information; (c) sublicense, lease, rent, loan, or otherwise transfer the Service or Service Reports to any third party; (d) reverse engineer, decompile, disassemble, or otherwise attempt to derive or copy or share the source code or copyrighted information contained in the Service Reports; (e) use the Service or Service Reports to process data or provide any service bureau activity for any third party; or (f) otherwise use the Service, or use or copy the Service Reports, except as expressly allowed under Section 9.

  1. Liability Limitation

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY BY SERVICE PROVIDERS. TO THE EXTENT SUCH EXCLUSIONS OR LIMITATIONS ARE SPECIFICALLY PROHIBITED BY APPLICABLE LAW, SOME OF THE EXCLUSIONS OR LIMITATIONS SET FORTH BELOW MAY NOT APPLY TO YOU.

YOU EXPRESSLY UNDERSTAND AND AGREE THAT IN NO EVENT WILL POWER UP BOSTON AND ITS AFFILIATES, SUBSIDIARIES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, PARTNERS AND LICENSORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR EXEMPLARY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, COST OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, OR OTHER INTANGIBLE LOSSES (EVEN IF POWER UP BOSTON HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES), RESULTING FROM: (I) THE USE OR INABILITY TO USE THE SERVICE; (II) ANY CHANGES MADE TO THE SERVICE OR ANY TEMPORARY OR PERMANENT CESSATION OF THE SERVICE OR ANY PART THEREOF; (III) THE UNAUTHORIZED ACCESS TO OR ALTERATION OF YOUR TRANSMISSIONS OR DATA; (IV) THE DELETION OF, CORRUPTION OF, OR FAILURE TO STORE AND/OR SEND OR RECEIVE YOUR TRANSMISSIONS OR DATA ON OR THROUGH THE SERVICE; (V) STATEMENTS OR CONDUCT OF ANY THIRD PARTY ON THE SERVICE; AND (VI) ANY OTHER MATTER RELATING TO THE SERVICE, SERVICE REPORTS, OR THIS AGREEMENT. POWER UP BOSTON AND ITS AFFILIATES, SUBSIDIARIES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, PARTNERS AND LICENSORS ALSO SHALL NOT HAVE ANY LIABILITY FOR ANY PROGRAMS OR DATA USED WITH THE SERVICE, INCLUDING WITHOUT LIMITATION ANY LOSS OF PROGRAMS OR DATA OF ANY KIND OR THE COSTS OF RECOVERING SUCH DATA. POWER UP BOSTON’S TOTAL CUMULATIVE LIABILITY IN CONNECTION WITH THIS AGREEMENT AND THE SERVICE AND SERVICE REPORTS, WHETHER IN CONTRACT OR TORT OR OTHERWISE, WILL NOT EXCEED ONE (1) DOLLAR. YOU ACKNOWLEDGE THAT THE FEES REFLECT THE ALLOCATION OF RISK SET FORTH IN THIS AGREEMENT AND THAT POWER UP BOSTON WOULD NOT ENTER INTO THIS AGREEMENT WITHOUT THESE LIMITATIONS ON ITS LIABILITY.

  1. General

11.1 Proprietary Rights

The Service and Service Reports and all worldwide Intellectual Property Rights therein, are the exclusive property of Power Up Boston. All rights in and to the Service and Servcie Reports not expressly granted to You in this Agreement are reserved by Power Up Boston. You will not remove, alter, or obscure any proprietary notices (including copyright notices) of Power Up Boston on any Service Reports or on any aspect of the Service.

11.2 Assignment

You may not assign or transfer, by operation of law or otherwise, any of Your rights under this Agreement (including Your licenses with respect to the Service or Service Reports) to any third party without Power Up Boston’s prior written consent. Any attempted assignment or transfer in violation of the foregoing will be null and void. Power Up Boston may assign the Agreement in whole or in part as part of a corporate reorganization or a sale of business, and Power Up Boston may transfer Your Confidential Information as part of any such transaction. Power Up Boston may use third party service providers to perform all or any part of the Service.

11.3 Notices

All notices, consents and approvals under this Agreement must be delivered in writing by courier, by electronic facsimile (fax), by certified or registered mail, (postage prepaid and return receipt requested), or by email (read receipt confirmed and documented or with email response from recipient that indicates acknowledgement of receipt) to the other party at the address(es) set forth beneath such party’s signature or as indicated in Your Defining Reference Agreement or other corresponding address as determined by Power Up Boston, and will be effective upon receipt or, in the case of mail, three (3) business days after being deposited in the mail as required above, whichever occurs sooner. Either party may change its address by giving notice of the new address to the other party.

11.4 Governing Law and Venue

This Agreement will be governed by the laws of the State of Massachusetts, without reference to its conflicts of law principles. Any action or proceeding arising out of a breach by You of Section 9.2 may be brought in a federal court in Massachusetts, USA or in state court in Plymouth County, Massachusetts, USA and each party irrevocably submits to the jurisdiction and venue of those courts.

11.5 Dispute Resolution

Subject to Section 11.4, any action or proceeding arising from or relating to this Agreement shall be finally settled by arbitration before American Arbitration Associate (the “AAA”) pursuant to its Commercial Arbitration Rules (the “Rules”). The arbitration shall be before one (1) arbitrator appointed by the AAA pursuant to the Rules. The parties agree that arbitration must be initiated within three (3) months after the claimed breach occurred and that the failure to initiate the arbitration within the three-month period constitutes an absolute bar to the institution of any new proceedings. The aggrieved party may initiate arbitration by sending written notice of an intention to arbitrate by registered or certified mail, return receipt requested, to all parties and to AAA. The notice must contain a description of the dispute, the amount involved, and the remedy sought. If and when a demand for arbitration is made by either party, the parties agree to execute a submission agreement, in a form provided by AAA, setting forth the rights of the parties if the case is arbitrated and the rules and procedures to be followed at the arbitration hearing. Any arbitration instituted under this subsection shall take place in Plymouth, Massachusetts, USA.

11.6 Indemnity

You agree to defend, indemnify and hold Power Up Boston, its affiliates, subsidiaries, directors, officers, employees, agents, partners, contractors, and licensors (the “Power Up Boston Indemnitees”) harmless from any claim or demand, including reasonable attorneys’ fees, made by a third party, relating to or arising from: (a) any data You store, submit, post, transmit, or otherwise make available that may be affected by the Service; (b) Your use of the Service; (c) any violation by You of this Agreement; (d) any action taken by Power Up Boston as part of its investigation of a suspected violation of this Agreement or as a result of its finding or decision that a violation of this Agreement has occurred; (e) Your violation of any rights of another; (f) Your actual or alleged gross negligence, willful misconduct, violation of law, failure to meet the security obligations required by the Agreement, violation of the Power Up Boston Acceptable Usage Policy, or violation of Section 11.11 (Export Control) of this Agreement; or (g) any usage of Your account for accessing the Service Reports or Your account for administration of Your Target Devices, whether or not such usage is expressly authorized by You.

This means that You will pay the cost of defending the claim (including reasonable attorney fees) and any damages, awards, fines, or other amount that are imposed on the Power Up Boston Indemnitees as a result of the claim. This also means that You cannot sue the Power Up Boston Indemnitees as a result of Power Up Boston’s decision to remove or refuse to process any information or data, to warn You, to suspend or terminate Your access to the Service, or to take any other action during the investigation of a suspected violation or as a result of Power Up Boston’s conclusion that a violation of this Agreement has occurred. This waiver and indemnity provision applies to all violations described in or contemplated by this Agreement.

You acknowledge that You are responsible for all use of the Service involving Your account for accessing the Service Reports or Your account for administration of Your Target Devices, that this Agreement applies to any and all usage of Your aforementioned account(s), and that Your obligations under this subsection include claims arising out of the acts or omissions of Your employees, any other person to whom You have given access to the Service Reports or your Target Devices, and any person who gains access to the Service Reports as a result of Your failure to use reasonable security precautions, even if the acts or omissions of such persons were not authorized by You. If You resell the Service or Service Reports, the grounds for indemnification stated above also include any claim brought by Your customers or end users arising out of Your resale of the Service or Service Reports.

We will choose legal counsel to defend the claim, provided that these decisions must be reasonable and must be promptly communicated to You. You must comply with our reasonable requests for assistance and cooperation in the defense of the claim. We may not settle the claim without Your consent, although such consent may not be unreasonably withheld. You must pay expenses due under this subsection as we incur them.

11.7 Remedies

The parties’ rights and remedies under this Agreement are cumulative. You acknowledge that the Service and Service Reports contain valuable trade secrets and proprietary information of Power Up Boston, that any actual or threatened breach of Section 9.2 will constitute immediate, irreparable harm to Power Up Boston for which monetary damages would be an inadequate remedy, and that injunctive relief is an appropriate remedy for such breach and Power Up Boston is entitled to such relief without the need to post a bond.

11.8 Waivers

All waivers must be in writing. Any waiver or failure to enforce any provision of this Agreement on one occasion will not be deemed a waiver or any other provision or of such provision on any other occasion.

11.9 Severability

If any provision of this Agreement is unenforceable, such provision will be changed and interpreted to accomplish the objectives of such provision to the greatest extent possible under applicable law and the remaining provisions will continue in full force and effect. Without limiting the generality of the foregoing, You agree that Section 10 will remain in effect notwithstanding the unenforceability of any provision in Section 8.

11.10 Force Majeure

Power Up Boston will not be responsible for any delays or failures caused by events, occurrences, or causes beyond the control of Power Up Boston, as determined by Power Up Boston, including without limitation, acts of God, natural disasters, fires, explosions, terrorist attacks, acts of utility providers, or any other possible hindrance which impairs Power Up Boston’s provision of the Service or Service Reports. Additionally, Power Up Boston will not incur any liability on the account of any loss or damage resulting from any delay or failure to perform all or any part of the Agreement if such delay or failure is caused by such aforementioned events, occurrences, or causes, or as otherwise determined by Power Up Boston. You acknowledge that Your inability to meet financial obligations from any claim of force majeure will be not be accepted, and all fees payable to Power Up Boston will remain outstanding until paid by You to Power Up Boston in full.

11.11 Export Control

Use of the Service and Service Reports, including transferring, posting, or uploading data, software or other content, may be subject to the export and import laws of the United States and other countries. You agree to comply with all applicable export and import laws and regulations. In particular, but without limitation, the Service Reports may not be exported or re-exported (a) into any U.S. embargoed countries or (b) to any entity on the U.S. Treasury Department’s list of Specially Designated Nationals or the U.S. Department of Commerce Denied Person’s List or Entity List. By using the Service and Service Reports, You represent and warrant that You are not located in any such country or on any such list. You also agree that You will not use the Service or Service Reports for any purposes prohibited by United States law, including, without limitation, the development, design, manufacture or production of missiles, nuclear, chemical or biological weapons. You further agree not to use the Service or Service Reports to facilitate the process of uploading or storing any data or software that cannot be exported without prior written government authorization, including, but not limited to, certain types of encryption software.

11.12 No High Risk Use

You may not use the Service in any situation where failure or fault of the Service could lead to death or serious bodily injury of any person, or to physical or environmental damage. For example, you may not use, or permit any other person to use, the Service in connection with aircraft or other modes of human mass transportation, nuclear or chemical facilities, or Class III medical devices under the Federal Food, Drug and Cosmetic Act.

11.13 Electronic Contracting

Your use of the Service includes the ability to enter into agreements and/or to make transactions electronically. YOU ACKNOWLEDGE THAT YOUR ELECTRONIC SUBMISSIONS CONSTITUTE YOUR AGREEMENT AND INTENT TO BE BOUND BY AND TO PAY FOR SUCH AGREEMENTS AND TRANSACTIONS. YOUR AGREEMENT AND INTENT TO BE BOUND BY ELECTRONIC SUBMISSIONS APPLIES TO ALL RECORDS RELATING TO ALL TRANSACTIONS YOU ENTER INTO ON THIS SERVICE, INCLUDING NOTICES OF CANCELLATION, POLICIES, CONTRACTS, AND APPLICATIONS. In order to access and retain Your electronic records, You may be required to have certain hardware and software, which are Your sole responsibility.

11.14 Headings

The section headings used herein are for convenience of reference only and do not form a part of this Agreement, and no construction or inference shall be derived therefrom.

11.15 Amendments

This Agreement may be amended by Power Up Boston, and such amendments shall be immediately in effect upon Power Up Boston’s publication of the new Agreement on its website at https://powerupboston.com/pentest (“the Online Agreement”). Any version of the Online Agreement shall assume that the terms “You” and “Your” as contained herein shall carry the same definitions as “Subscriber” and “Subscriber’s”, respectively, as defined in Your Defining Reference Agreement or as determined by Power Up Boston. Additionally, the Online Agreement may not enlist specifics as outlined in Your Defining Reference Agreement; however, the Online Agreement shall carry the same effect as having Your Defining Reference Agreement incorporated. It is Your responsibility to regularly review the Online Agreement, and Your continued use of or payment for the Service described herein indicates that You agree to all amendments and are fully bound to the Agreement, including any and all amendments therein.

11.16 Entire Agreement

This Agreement, and any exhibits attached to Your Defining Reference Agreement constitutes the final, complete and exclusive statement of the terms of the agreement between the parties regarding the subject hereof and supersedes all prior or contemporaneous agreements, understandings, and communication, whether written or oral. The terms on any purchase order or similar document submitted by You to Power Up Boston will have no effect.