END USER SUBSCRIPTION AGREEMENT CYREN INBOX SECURITY (CIS) THE SERVICE REFERENCED HEREIN IS PROVIDED ONLY ON THE CONDITION THAT THE SUBSCRIBER AGREES TO THE TERMS AND CONDITIONS IN THIS SUBSCRIPTION AGREEMENT AND THE MATERIALS REFERENCED HEREIN (TOGETHER THE “AGREEMENT”) BETWEEN SUBSCRIBER AND CYREN. BY ACCEPTING THIS AGREEMENT OR BY USING THE SERVICE, SUBSCRIBER ACKNOWLEDGES IT HAS READ, UNDERSTANDS, AND HAS THE AUTHORITY TO ENTER INTO AND AGREES TO BE BOUND BY THIS AGREEMENT. OTHER THAN AS SET FORTH HEREIN, IN ORDER TO USE OR RECEIVE THE BENEFITS OF THE SERVICE, YOU MUST PURCHASE THE SERVICE THROUGH AN ORDER WITH CYREN OR VIA A CYREN AUTHORIZED DISTRIBUTOR OR RESELLER. IF YOU HAVE ARRIVED AT THIS PAGE DURING THE PROCESS OF INSTALLING, DOWNLOADING, ACCESSING, OR DEPLOYING THE SERVICE, YOU ACKNOWLEDGE AND AGREE THAT BY PROCEEDING WITH THE INSTALLATION, DOWNLOAD, ACCESS, DEPLOYMENT, OR USE OF THE SERVICE, YOU SHALL BE BOUND BY THE TERMS AND CONDITIONS IN THIS AGREEMENT. IF YOU PROCEED WITH INSTALLATION, DOWNLOAD, ACCESS, DEPLOYMENT, OR USE, YOU ARE REPRESENTING AND WARRANTING THAT YOU ARE AUTHORIZED TO BIND THE SUBSCRIBER. 1. Definitions “Affiliate” means, an entity controlling, controlled by, or under common control with Cyren or Subscriber, as applicable, where control is established by a majority ownership (greater than 50%) in or over an entity). “CIS” means the Cyren Inbox Security service set forth in the Order, including Databases, Database Updates, Software and Software Upgrades together with applicable documentation and media. “CIS Incident Response” means the Cyren Inbox SecurityIncident Response service set forth in the Order including Databases, Database Updates, Software and Software Upgrades together with applicable documentation and media. “CIS Reports” means any findings or feedback regarding security threats detected by the Service. “Database Updates” means changes to the content of the Databases. “Malware” means computer software or program code that is designed to damage or reduce the performance or security of a computer program or data. “Online Management Console” or “OMC” means a web- based facility that is used by Subscriber to configure and manage the Service. “Order” means a purchase commitment mutually agreed upon between (1) Cyren and Subscriber, or (2) a Cyren authorized distributor or reseller and Subscriber. “Permitted Capacity” means the maximum number of permitted Users and any other license metrics set forth in the Order. “Service(s)” means the CIS service offering and, if applicable, the supplemental CIS Incident Response service, each as further described at www.cyren.com/cyren-inbox-security. “Software” means Cyren’s proprietary software applications. “Software Upgrades” means certain modifications or revisions to the Software. “Documentation” means the Service-related installation instructions, manuals, release notes, operating instructions, etc., in any format, as may be periodically updated and made generally available to Subscriber. “Cyren” means (i) for Subscribers in North America, Cyren Inc., a Delaware corporation with its principal place of business at 1430 Spring Hill Road, Suite 330 McLean, VA 22102, USA, (ii) for Subscribers in the European Union or United Kingdom, Cyren GmbH, a German company with its principal place of business at Heidestraße 10, 10557 Berlin, Germany or (iii) if an Order has been placed with Cyren, the Cyren entity with whom an Order has been placed referencing this Agreement (as listed on such Order). “Databases” means proprietary database(s) of URL addresses, email addresses, Malware, applications and other valuable information. “Spam” means a large number of unsolicited email messages (typically over 500 per month) with similar content sent or received in a single operation or a series of related operations. “Subscriber” means the company, Affiliates, and/or other legal entity that has (i) placed an Order and registered its details on the Cyren OMC at https://us.cpsserv.com or https://eu.cpsserv.com in order to receive the Service or (ii) that has registered for an evaluation period per section 13.2 herein. “Subscription” means a personal, non-exclusive, nontransferable right to use the Service, in accordance with the terms of this Agreement and the Order. “Subscription Fees” means the agreed upon fees in the Order. “Subscription Term” means the agreed upon time period in the Order. “Support Services” means the support services provided by Cyren with respect to the Service, including Support Services provided through a TAM, as further described in the Cyren Support Services datasheet posted at www.cyren.com/legal. 2. Subscription and Grant of Right to Use 2.1 Subject to the terms and conditions of this Agreement, and timely payment of the applicable fees in accordance with the Order, Cyren hereby provides to Subscriber the Subscription at the Permitted Capacity for the duration of the Subscription Term. Subscriber may use the Service solely for Subscriber’s own internal business operations (not for the benefit of any other person or entity) during the Subscription Term, provided Subscriber has paid and continues to pay the Subscription Fees. Subscription Fees are nonrefundable. Subscriber may not rent, lease or timeshare the Service or provide subscription services for the Service or permit others to do so. Subject to the terms of this Agreement, Subscriber may allow its employees and independent contractors to use the Service solely for the benefit of Subscriber; provided, however, Subscriber remains responsible for the compliance of all such employees and independent contractor with the terms and conditions of this Agreement, and for the actions, omissions or breach by such employees and independent contractors. Any other use of the Service by any other entity is forbidden and a violation of this Agreement. Subscriber understands that its right to use the Service is limited by the Permitted Capacity purchased, and Subscriber (together with its Affiliates) may in no event exceed the Permitted Capacity authorized in the applicable Order. If Subscriber’s use (together with its Affiliates) exceeds the Permitted Capacity, Subscriber must purchase additional Permitted Capacity sufficient for the balance of the then-current Subscription Term to cover the excess use. 2.2 All Orders shall be governed by the terms and conditions in this Agreement. For clarity, Cyren will not be obligated to provide the Service to Subscriber until a valid Order for the Service has been received and accepted by Cyren. Subscriber agrees that its subscription for the Service is not based upon expectations of any future functionality or features. 3. Provision of Service 3.1 Cyren will use commercially reasonable efforts to provide the Service for the Subscription Term. Service status for the Service may be found at: https://www.cyren.com/service- status.html. Technical Support for the Service may be found under the Help tab in the Cyren OMC. 3.2 Cyren reserves the right to suspend Subscriber’s access to, or use of, the Service, if (i) required by law or so directed by a court or competent authority, (ii) you are, or are suspected of, using the Service for fraudulent or illegal activities or (iii) Cyren determines that its network, or the security or proper function of the Service, would be threatened or compromised due to, hacking, denial of service attacks or other activities originating from or directed at Subscriber’s network (each, a “Service Suspension”). Cyren will make commercially reasonable efforts, circumstances permitting, to provide written notice of any Service Suspension to Subscriber and Cyren will work with Subscriber to resolve the issues. Cyren will have no liability for any damage, liabilities, losses (including any loss of data or profits) or any other consequences that you may incur as a result of any Service Suspension. 3.3 Cyren may modify, enhance, replace, or make additions to the Service. Cyren may collect information concerning Malware, Spam and other data concerning malicious or harmful programs passing through the Service. Cyren may use such information for the purposes of developing, analyzing, maintaining, reporting on, and enhancing Cyren’s services and products. Cyren may share Malware signatures with third parties. Cyren may disclose such information as required by law or to cooperate with a bona fide law enforcement investigation. 3.4 Subscriber assumes sole and exclusive responsibility for (i) all acts or omissions performed by Subscriber in response to the CIS Reports; (ii) to thoroughly review the CIS Reports frequently, check for any alerts or warnings issued by the Service, address the findings specified in the CIS Reports and determine what actions are appropriate in light thereof; and (iii) to carry out the actions which Subscriber deems appropriate as a result of the CIS Reports. 4. Support Services 4.1 During the Subscription Term, and subject to the terms herein, Cyren, or a Cyren authorized distributor or reseller if applicable, shall provide Subscriber with the Support Services listed in the Order. Cyren warrants that the Support Services will be performed in a professional manner in accordance with industry standards for similar services, but does not guarantee that every issue will be resolved. Support Services, Database Updates and Software Upgrades will be provided to Subscriber subject to Subscriber’s payment of all applicable Subscription Fees. Cyren’s provision of Support Services, through a TAM or otherwise, does not include services requested as a result of causes or errors which are not attributable to Cyren and/or its authorized agents. Subscriber agrees to provide reasonable support information necessary to understand and resolve the incident, which may include log files, configuration files and/or error messages. “TAM” means a Technical Account Manager “User” means a separate email address or account that receives electronic messages or data within Subscriber’s or an Affiliate’s email system or network. 60 days' written notice or as otherwise stated in the Order. Unless otherwise noted in the Order, payment of all fees is due 30 days after the invoice date. Interest accrues on past due balances at the lesser of 1.5% per month or the highest rate allowed by law. Failure to make timely payments is a material breach of the Agreement and Cyren will be entitled to suspend any or all of its performance obligations hereunder in accordance with the provisions of Section 13 and to modify the payment terms, including requiring full payment before Cyren performs any obligations in this Agreement. Subscriber will be liable for, and shall reimburse Cyren for, any expenses incurred, including interest and reasonable attorney fees, in collecting amounts due to Cyren. 4.2 Support Services (including via a TAM, if applicable) will continue for the same length of time as the Subscription Term. Support Services (including a TAM) will automatically terminate upon the termination or expiration of the Subscription Term. 5. Subscriber Obligations 5.1 Subscriber will comply with all applicable laws, statutes, regulations and ordinances and only use the Service for legitimate business purposes 5.2 If Cyren, in its discretion, determines that Subscriber is using the Service in connection with an illegitimate purpose, Cyren may suspend the Service until the problem is resolved or terminate the Service. A suspension or termination in such case will not result in any refund to Subscriber. 5.3 Subscriber represents and warrants that it is authorized to receive the Service and that the receipt of the Service by Subscriber does not violate any applicable law or any statute or violate any contractual obligations that Subscriber has to any third party. Subscriber shall obtain all necessary consents from users of its systems (including all employees and independent contractors) in order to employ the Service. 5.4 Subscriber will take all reasonable steps to safeguard the Service to ensure that no unauthorized person has access and that no unauthorized copy, publication, disclosure or distribution, in any form is made. The Service contains valuable, confidential information and trade secrets and unauthorized use or copying is harmful to Cyren. Except to the limited extent applicable laws specifically prohibit such restriction, Subscriber may not directly or indirectly transfer, assign, publish, display, disclose, rent, lease, modify, loan, distribute, or create derivative works based on the Service or any part thereof. Subscriber may not, in whole or in part, reverse engineer, decompile, translate, adapt, disassemble or seek the source code of the Service. Subscriber may not, and shall not allow third parties to, publish, distribute or disclose the results of any benchmark tests performed on the Service without Cyren’s prior written approval or allow access to, provide, divulge or make available the Service to any user other than Subscriber’s employees and individual contractors who have a need to such access and who shall be bound by nondisclosure obligations that are at least as restrictive as the terms contained herein. Subscriber may also not, directly or indirectly, write or develop any derivative works based upon the Service, modify, adapt, translate or otherwise make any changes to the Service or any part thereof, use the Service to provide processing services to third parties, or use any third-party software included in the Service, if applicable, independently from the Service. 6. Fees and Payment Terms 7. Intellectual Property Rights 7.1 The Service and all related intellectual property rights are the exclusive property of Cyren or its licensors. All right, title and interest in and to the Service, any modifications, translations, or derivatives thereof, even if unauthorized, and all applicable rights in patents, copyrights, trade secrets, trademarks and all intellectual property rights in the Service remain exclusively with Cyren or its licensors. The Service is valuable, proprietary, and unique, and Subscriber agrees to be bound by and observe the proprietary nature of the Service. The Service contains material that is protected by patent, copyright and trade secret law, and by international treaty provisions. Subscriber may not remove any proprietary notice of Cyren or any third party. All rights not granted to Subscriber in this Agreement are reserved to Cyren. No ownership of the Service passes to Subscriber. Cyren may make changes to the Service at any time without notice. Except as expressly provided for herein, Cyren grants no express or implied right under Cyren patents, copyrights, trademarks, or other intellectual property. No rights are granted hereunder by estoppel or by implication. 7.2 If you send or transmit any communications, comments, questions, suggestions, or related materials to Cyren, whether by letter, e-mail, telephone, or otherwise (“Feedback”), suggesting or recommending changes to Cyren’s Software or Service, including, without limitation, new features or functionality relating thereto, you grant to Cyren an exclusive, transferable, sub-licensable, unlimited, perpetual, and worldwide license to use, copy, and otherwise utilize or commercialize such Feedback in any manner known or conceived in the future. 8. Privacy Policy and Processing of Personal Data. 8.1. Personal information will be processed by Cyren in accordance with Cyren’s Privacy Policy (located at www.cyren.com/privacy), as may be updated periodically and applicable data privacy laws. 8.2 Subscriber warrants that it complies with its obligations under applicable data protection laws in respect of its processing of personal data created or provided by Subscriber to Cyren and in any processing instructions that Subscriber issues to Cyren as a data processor, including any obligations specific to Subscriber’s role as a data controller. 8.3 FOR SUBSCRIBERS BASED IN THE EUROPEAN ECONOMIC AREA OR THE UK: THE PARTIES HEREBY ENTER INTO THE DATA This section applies if Subscriber has placed an Order directly with Cyren. 6.1 Fees and payment terms are specified in the applicable Order. ExceptasotherwiseexpresslyspecifiedintheOrder,all recurring payment obligations start from the execution of the Order. Cyren may increase recurring fees applicable for a Renewal Term (in accordance with Section 13.1) upon at least the Service will (i) be free of defects, (ii) satisfy Subscriber’s requirements, (iii) operate without interruption or error, or (iv) identify every transmission or file that should potentially be located, identified or blocked. 10.2 Cyren will use reasonable efforts to remedy any significant non-conformance in the Service which is reported to Cyren and that Cyren can reasonably identify and confirm. Cyren at its discretion will repair or replace any such non-conforming or defective Service, or refund a pro-rata portion of the prepaid and unused Subscription Fees paid for the remainder of the then current term. Subject to Section 12, this Section 10 sets forth Subscriber’s sole and exclusive remedy and Cyren’s entire liability for any breach of warranty or other duty related to the Service. Any unauthorized modification of the Service, tampering with the Service, use of the Service inconsistent with the accompanying Documentation, or related breach of this Agreement voids the warranty. EXCEPT AS EXPLICITLY STATED AND TO THE EXTENT ALLOWED BY LAW, CYREN PROVIDES NO OTHER W ARRANTIES, EXPRESS, OR IMPLIED OR STATUTORY, AND EXPRESSLY DISCLAIMS THE IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, TITLE OR FITNESS FOR A PARTICULAR PURPOSE, ACCURACY OF THE CIS REPORTS AND FREEDOM FROM PROGRAM ERRORS, VIRUSES OR ANY OTHER MALICIOUS CODE WITH RESPECT TO THE SERVICE. 11. Indemnification PROCESSING AGREEMENT LOCATED AT HTTPS://WWW.CYREN.COM/LEGAL (THE “DPA”) WHICH SHALL APPLY TO THE PROCESSING OF PERSONAL DATA BY OR ON BEHALF OF CYREN UNDER THIS AGREEMENT. 9. Protection and Restrictions 9.1 Each party (the “Disclosing Party”) may disclose to the other (the “Receiving Party”) certain confidential technical and business information which the Disclosing Party desires the Receiving Party to treat as confidential. “Confidential Information” means any information disclosed by either party to the other party, either directly or indirectly, in writing, orally, electronically or by inspection of tangible objects (including without limitation documents, prototypes, equipment, technical data, trade secrets and know-how, product plans, Services, services, suppliers, customer lists and customer information, prices and costs, markets, software, databases, developments, inventions, processes, formulas, technology, employee information, designs, drawings, engineering, hardware configuration information, marketing, licenses, finances, budgets and other business information), which is designated as “Confidential,” “Proprietary” or some similar designation at or prior to the time of disclosure, or which should otherwise reasonably be considered confidential by the Receiving Party. Confidential Information may also include information disclosed to a Disclosing Party by third parties. Confidential Information shall not, however, include any information which the Receiving Party can document (i) was publicly known and made generally available prior to the time of disclosure by the Disclosing Party or an authorized third party; (ii) becomes publicly known and made generally available after disclosure through no action or inaction of the Receiving Party in violation of any obligation of confidentiality; (iii) is already in the possession of the Receiving Party at the time of disclosure; (iv) is lawfully obtained by the Receiving Party from a third party without a breach of such third party’s obligations of confidentiality; or (v) is independently developed by the Receiving Party without use of or reference to the Disclosing Party’s Confidential Information. 11.1 Cyren shall indemnify and hold harmless Subscriber and its Affiliates from and against loss, damages or costs incurred by Subscriber pursuant to any third party claims, actions, or demands alleging that the use of the Service as permitted in this Agreement infringes a third-party’s valid US or EU patent, copyright, or trademark right. Subscriber shall permit Cyren to replace or modify the Service in order to avoid infringement, or to procure the right for Subscriber to continue use and remarketing of Service. If neither of such alternatives is reasonably possible, Cyren may terminate the affected Order and provide Subscriber with a pro-rata refund of any unused pre-paid fees paid for the period following termination as calculated on a monthly basis. Cyren, at its sole option, may control the defense of any such claim and Subscriber will reasonably cooperate with Cyren in such defense. Cyren shall have no obligation hereunder for or with respect to claims, actions, or demands alleging infringement that arise by reason of combination of the Service with any items not supplied by Cyren or due to the Service being corrected or modified without Cyren’s authorization, or Cyren’s compliance with specifications, requirements or requests of the Subscriber, or due to a failure by Subscriber to promptly install a non-infringing update provided by Cyren. In the event that the Service is held to, or the Company believes is likely to, be held to infringe any intellectual property right of a third party, Cyren may, at its own expense, (x) modify or substitute the Service so that it is no longer infringing but retains substantially similar features and functionality; (y) obtain for Subscriber a license to continue using the Service as contemplated herein; or (z) if (x) and (y) are not reasonably practicable, terminate this Agreement as to the infringing Service. 9.2 Each party agrees that all Confidential Information of the other party will be treated by the Receiving Party as non-public confidential information and will not be disclosed to any person other than Disclosing Party and employees and contractors of Receiving Party on a need-to-know basis and that Receiving Party will protect the confidentiality of such Confidential Information in the same manner that it protects the confidentiality of its own proprietary and confidential information, but in no event with less than a reasonable standard of care.Furthermore, each party agrees to only use the Confidential Information of the other party for purposes of carrying out its rights and obligations under this Agreement. 10. Limited Warranty 10.1 For the Subscription Term, Cyren warrants that the Service, when used in accordance with the Documentation, will operate in substantial conformance with the then current Cyren published Documentation under normal use. Subject to the liability provided for in Section 12, Cyren does not warrant that THE ONE YEAR PERIOD IMMEDIATELY PRECEEDING THE EVENT GIVING RISE TO CYREN’S LIABILITY. CYREN DOES NOT LIMIT OR EXCLUDE ITS LIABILITY FOR (i) DEATH OR PERSONAL INJURY, (ii) FRAUDULENT MISREPRESENTATION, OR (iii) ANY OTHER LIABILITY TO THE EXTENT THAT SUCH LIABILITY CANNOT BE EXCLUDED OR LIMITED BY APPLICABLE LAW. 13. Term and Termination 13.1 This Agreement is effective until the end of the Subscription Term, unless (i) earlier terminated by either party pursuant to the terms and conditions hereof or (ii) the parties have agreed in the Order that the subscription term will automatically renew in which case the Subscription Term shall renew for additional one year terms (each, a “Renewal Term”) unless prior written notice is provided by either party to the other party within the timeframe noted in the Order. Renewal Terms shall be considered part of the Subscription Term. Cyren may increase recurring fees applicable for a Renewal Term upon (i) at least 60 days' written notice or (ii) as otherwise stated in the Order. Orders may not be cancelled, and there shall be no fee adjustments or refunds for any reason, including decreases in usage, or otherwise during the Subscription Term. Upon termination or expiration of the Subscription Term, Subscriber’s right to use the Service terminates. 13.2 Evaluation Use. Notwithstanding anything to the contrary in this Agreement, if the Service is provided to you for evaluation purposes, whether via online registration, an Order or otherwise, then you may use the Service only for internal evaluation purposes for a maximum of 30 days (or such other period specified by Cyren in writing at its sole discretion (the “Evaluation Period”)). Prior to the end of the Evaluation Period, you may contact Cyren to subscribe to the Service to continue using the Service pursuant to the terms of this Agreement. During the Evaluation Period, use of the Service are subject to the terms and conditions of this Agreement except that the Service is provided on an AS IS basis without any warranties of any kind and no use of the Service for penetration testing is permissible. Cyren may terminate the Evaluation Period at any time, and without notice, if it determines in its sole discretion that the Service is being misused. If you elect not to subscribe for the Service prior to the end of the Evaluation Period, the Service will terminate on the last day of the Evaluation Period. Any data Subscriber enters into the Service during the Evaluation Period and any configurations made to the Service by or for Subscriber during the Evaluation Period may be permanently lost unless Subscriber purchases a subscription to the Service. 13.3 Either party may terminate this Agreement and any Order if (i) if the other party breaches any terms and conditions of this Agreement or the applicable Order and does not cure such breach within thirty (30) days of receiving notice of such breach (the “Cure Period”); (ii) if the other party cease business operations or (iii) the other party becomes the subject of a petition in bankruptcy or any proceeding relating to insolvency, receivership, liquidation or assignment for the benefit of creditors. Notwithstanding the foregoing, Cyren may terminate this Agreement and any Order immediately in the event that 11.2 Subscriber will defend, indemnify and hold Cyren harmless against any loss, damage or costs (including reasonable attorneys’ fees) incurred in connection with any claims, demands, suits, or proceedings (“Claims”) made or brought against Cyren or its Affiliates by a third party alleging or arising out of or related to Subscriber’s or its Affiliates’ or personnel’s (i) violation of its obligations under Section 5; (ii) infringement of intellectual property rights; (iii) civil or criminal offenses; or (iv) breach of Subscriber’s undertakings or covenants hereunder. 11.3. The foregoing indemnification obligations are dependent upon the party seeking indemnification (“Indemnitee”) providing the indemnifying party (“Indemnitor”) with (i) prompt written notice of any indemnifiable claim (but in any event, no longer than 20 days following its first receipt of the third party claim, action or demand); (ii) all reasonable assistance and cooperation in the defense of such indemnifiable claim and any related settlement negotiations, at the Indemnitor’s expense; and (iii) exclusive control over the defense of such indemnifiable claim and any related settlement negotiations. Indemnitee will not settle or compromise any such claim without the Indemnitor’s prior written consent, which will not be unreasonably withheld or delayed. The Indemnitee will have the right, at its own expense, to participate in the defense (and related settlement negotiations) of any indemnifiable claim with counsel of its own selection. 11.4 Subject to Section 12, the rights and remedies set forth in this Section 11 state a party’s sole and exclusive liability and obligation and the other party’s sole and exclusive rights and remedies with regard to any claims relating to infringement or claims of infringement. 12. Limitation of Liability CYREN, ITS AFFILIATES, ITS LICENSORS OR DISTRIBUTORS/RESELLERS WILL NOT BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, EXEMPLARY SPECIAL, PUNITIVE OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION AND THE LIKE), WHETHER FORESEEABLE OR UNFORESEEABLE, ARISING OUT OF OR RELATED TO THIS AGREEMENT INCLUDING, BUT NOT LIMITED TO CLAIMS FOR LOSS OF DATA, LOSS OF GOODWILL, LOSS OF OPPORTUNITY, REVENUE, PROFITS, OR USE OF THE SERVICE, INTERRUPTION IN USE OR AVAILABILITY OF DATA, STOPPAGE OF OTHER WORK OR IMPAIRMENT OF OTHER ASSETS, ACCURACY OF THE CIS REPORTS, PRIVACY, ACCESS TO OR USE OF ANY ADDRESSES, EXECUTABLES OR FILES THAT SHOULD HAVE BEEN LOCATED OR BLOCKED, NEGLIGENCE, BREACH OF CONTRACT, TORT OR OTHERWISE AND THIRD PARTY CLAIMS, EVEN IF CYREN HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT WILL CYREN’S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT EXCEED THE TOTAL AMOUNT ACTUALLY PAID BY YOU TO CYREN FOR THE SERVICE WITH RESPECT TO Subscriber has breached any restriction set forth in Section 5.1 or 5.4, and in Cyren’s determination, such breach cannot be adequately cured within the Cure Period. 13.4 Subscriber may terminate this Agreement at any time upon written notice to Cyren, provided however, that Subscriber shall remain liable for all amounts in respect of the full Subscription Term, as set forth in the Order, and shall not be entitled to a refund of any prepaid or other fees. 13.5 Upon termination or expiration of this Agreement for any reason, Subscriber must uninstall any Software, cease using and destroy or return all copies of the Service to Cyren, and certify in writing that all known copies thereof, including backup copies, have been destroyed. Sections 1, 5-12 and 17 shall survive the termination of this Agreement. 14. US Government Restricted Rights. The Service and Documentation are “commercial items”, “commercial computer software” and “commercial computer software documentation,” pursuant to DFAR section 227.7202 and FAR section 12.212, as applicable. The Service and all Documentation are and were developed solely at private expense. Any use, modification, reproduction, release, performance, display or disclosure of the Service or Documentation by the US Government shall be governed solely by this Agreement and shall be prohibited except to the extent expressly permitted by this Agreement. Use of the Service by the U.S. Government constitutes acknowledgment of Cyren’s proprietary rights therein. 15. Export. Certain Services are subject to export controls of the United States and European Union (EU) (“Export Controls”). Export or diversion contrary to such Export Controls is prohibited. U.S. and EU laws prohibit export or re- export of the software or technology to specified countries or to a resident or national of those countries (“Prohibited Country” or “Prohibited Countries”). Such laws also prohibit export or re-export of the software or technology to any person or entity on the U.S. Department of Commerce Denied Persons List, Entities List or Unverified List; the U.S. Department of State Debarred List; or any of the lists administered by the U.S. Department of Treasury, including lists of Specially Designated Nationals, Specially Designated Terrorists or Specially Designated Narcotics Traffickers or listed in any restrictive measures (sanctions) lists administered by the EU (collectively, the “Lists”). Subscriber represents and warrants that it is not located in, or a resident or national, of any Prohibited Country; that it is not on any Lists and that it will comply with all applicable Export Controls. Subscriber agrees to indemnify Cyren for any breach of this provision. 16. Publicity. Subscriber agrees that Cyren is entitled to disclose and publicize, in the form of customer lists and on its web site, marketing materials and otherwise, the identity of Subscriber as a client of Cyren and display Subscriber’s name and/or logo on its web site or other marketing materials. Subscriber may revoke this consent by providing written notice to Cyren in accordance with Section 17 below. 17. General. For the purposes of customer service, technical support, and as a means of facilitating interactions with its end- users, Cyren may periodically send Subscriber messages of an informational nature via email, and provide account information to related third-parties (i.e. a Cyren authorized distributor or reseller). Information will be processed by Cyren in accordance with itsthen current privacy policy and applicable data privacy laws. Subscriber may choose to “opt- out” of receiving these messages or information sharing by sending an email to optout@cyren.com requesting the opt-out. Subscriber acknowledges and agrees that by sending such email and “opting out” it will not receive emails containing messages concerning upgrades and enhancements to the Service. However, Cyren may still send emails of a technical nature. Subscriber may not transfer any of Subscriber’s rights to use the Service or assign this Agreement to another person or entity, without first obtaining prior written approval from Cyren. Cyren may assign all of its rights and obligations (by operation of law or otherwise) under this Agreement without Subscriber’s consent to a third party in connection with a change of control transaction or to a successor in interest (or its equivalent) of all or substantially all of its relevant assets, whether by sale, merger, or otherwise. The failure of Cyren to comply with any provision of this Agreement due to an act of God, hurricane, war, fire, riot, earthquake, terrorism, pandemic or actions of governmental authorities (excepting compliance with applicable codes and regulations) or other force majeure event will not be considered a breach of this Agreement. Notices sent to Cyren shall be sent by registered mail or courier to the attention of the General Counsel at 10 Ha-Menofim St. 5th Floor, Herzliya 4672561. Notices to Subscriber shall be sent by registered mail or courier to the billing address listed in the Order and addressed to Subscriber’s Chief Financial Officer. Notices are considered to have been given at the time of actual delivery in person, two (2) business days after deposit in the mail as set forth above, or one (1) day after delivery to an overnight air courier service. Either party may change its contact person for notices and/or address for notice by means of written notice to the other party given in accordance with this paragraph. Each party agrees to the applicable governing law without regard to or application of choice of laws, rules or principles and the applicable jurisdiction, in accordance with the following terms: (i) if you are located in the United States, Canada, Mexico or South America, this Agreement will be governed by the federal laws of the United States and the laws of the State of Delaware, USA, with the exclusive jurisdiction of the competent state and federal courts in Delaware, USA; (ii) if you are located in one of the DACH region countries, then this Agreement will be governed by the laws of Germany, with the exclusive jurisdiction of the competent courts in Berlin, Germany; (iii) if you are located in the European Union (EU) (excluding the DACH region countries and the UK) Africa, Middle East and Asia, then this Agreement will be governed by the laws of the State of Israel, with the exclusive jurisdiction of the competent courts in Tel Aviv, Israel; and (iv) if you are located in the United Kingdom, then this Agreement will be governed by the laws of England, with the exclusive jurisdiction of the competent courts in London, England. Both parties expressly waive any objections or defense based upon lack of personal jurisdiction or venue. This Agreement describes certain legal rights. Subscriber may have other rights under the laws of its state or country. This Agreement does not change Subscriber’s rights or obligations under the laws of its state or country if the laws of Subscriber’s state or country do not permit it to do so via this Agreement. This Agreement, the DPA (if applicable) and each Order constitute the entire agreement between the parties regarding the subject matter herein and the parties have not relied on any promise, representation, or warranty, express or implied, that is not in this Agreement. Any waiver or modification of this Agreement is only effective if it is in writing and signed by both parties. If any part of this Agreement is found invalid or unenforceable by a court of competent jurisdiction, such part shall be interpreted as necessary to give maximum effect to its provisions as possible under applicable law, and the remainder of this Agreement shall not be affected. Cyren is not obligated under any other agreements unless they are in writing and signed by an authorized representative of Cyren. THIS AGREEMENT MAY BE PERIODICALLY UPDATED AND THE CURRENT VERSION WILL BE POSTED AT WWW.CYREN.COM/LEGAL. YOUR CONTINUED USE OF THE SERVICE, OR A RENEWAL OF A SUBSCRIPTION TERM, AFTER A REVISED AGREEMENT HAS BEEN POSTED CONSTITUTES YOUR ACCEPTANCE OF THE THEN CURRENT TERMS. HOWEVER, SHOULD ANY SUCH CHANGES OR UPDATES WHICH OCCUR DURING THE THEN- CURRENT SUBSCRIPTION TERM OR RENEWAL TERM DIMINISH THE BENEFIT OF THIS AGREEMENT TO YOU, SUCH CHANGES WILL NOT TAKE EFFECT FOR YOU UNTIL THE START OF THE NEXT RENEWAL TERM. BY CONTINUING TO USE THE SERVICE, YOU WILL HAVE ACCEPTED THOSE CHANGES. IT IS YOUR RESPONSIBILITY TO CHECK THE THEN CURRENT VERSION OF THIS AGREEMENT ON THE CYREN WEBSITE FOR CHANGES. Date Published: August 1, 2020