Legal Cyber Application

Legal Cyber Application

Date of Application:

Applicant Name:    Applicant Entity Type: Individual Corporation LLC Other

Provider Name:

RECITALS

WHEREAS, Applicant seeks authorization to obtain and use cybersecurity services, tools, and related legal and technical assessments offered by Provider with respect to the information systems and data described in this application; and

WHEREAS, Provider performs cybersecurity services under terms that include controls for data protection, privileged access, and incident handling and requires the Applicant to supply accurate information and consent to specified background checks and security controls; and

WHEREAS, the parties intend to set forth the application, representations, security obligations, and certification required for Provider to grant access, perform testing, or deploy protective measures.

NOW, THEREFORE, in consideration of the mutual covenants and representations contained herein, the parties agree as follows:

1. DEFINITIONS

For the purposes of this Application, the following terms have the following meanings: "Application" means this document and all attachments; "Confidential Information" means nonpublic information exchanged between the parties; "Protected Data" means personally identifiable information, regulated data, or information designated as sensitive by either party.

2. SCOPE OF APPLICATION

Applicant requests Provider to perform the specific cybersecurity activities described below. Applicant certifies that the information provided is true, accurate, and complete and authorizes Provider to take reasonable steps to verify such information.

3. AUTHORIZATIONS AND CONSENTS

By submitting this Application, Applicant authorizes Provider to: (a) perform vulnerability assessments, penetration testing, configuration reviews, and other agreed services; (b) access systems as necessary to perform services; and (c) collect, store, and process Protected Data only to the extent necessary to provide services and in accordance with Section 5. Applicant further consents to personnel background screening for individuals who will receive privileged access.

Background checks required: Yes No

4. DATA SECURITY AND HANDLING

Provider will implement and maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the Protected Data and consistent with industry standards. Provider shall encrypt Protected Data at rest and in transit, restrict access to authorized personnel on a need-to-know basis, and maintain audit logs of privileged access. Any subcontractor engaged to process Protected Data must be bound by written obligations at least as protective as those in this Application.

Applicant obligations: Applicant shall (a) provide accurate contact and network information; (b) implement recommended mitigations in a timely manner; and (c) notify Provider promptly of any incidents or known breaches affecting the systems in scope.

5. CONFIDENTIALITY

Each party shall keep Confidential Information confidential and shall not disclose it except as necessary to perform obligations under this Application or as required by law. Confidential Information shall not include information that is or becomes generally known to the public through no breach by the receiving party or was rightfully known to the receiving party prior to disclosure.

6. REPRESENTATIONS AND WARRANTIES

Applicant represents and warrants that it has the authority to provide access to the systems described, that the performance of the services will not violate third-party rights, and that Applicant will obtain any required consents from third parties. Provider represents and warrants that it will perform services in a professional manner consistent with reasonable industry standards.

7. INDEMNIFICATION

Each party shall defend, indemnify, and hold harmless the other party from claims, losses, and liabilities arising from its breach of this Application, its gross negligence, or willful misconduct. Where an incident results from both parties' acts, liability will be apportioned according to each party's proven degree of fault.

8. LIMITATION OF LIABILITY

Except for liabilities arising from willful misconduct, gross negligence, or breach of confidentiality, neither party shall be liable for consequential, indirect, punitive, or special damages. The parties' aggregate liability arising from or related to this Application shall not exceed the amounts paid by Applicant to Provider for the services giving rise to the claim during the six (6) months immediately preceding the claim.

9. TERM AND TERMINATION

This Application is effective upon Provider's acceptance in writing and remains in effect until the completion of the services or until terminated by either party for material breach after thirty (30) days' written notice with opportunity to cure. Termination shall not relieve either party of obligations accrued prior to termination.

10. NOTICES

All notices required under this Application shall be in writing and delivered to the primary contacts provided above by certified mail, overnight courier, or hand delivery, or electronically with confirmation of receipt. Notices will be deemed given on the date of receipt.

11. GOVERNING LAW; VENUE

This Application shall be governed by and construed in accordance with the substantive laws of the state specified below, without regard to its conflict of law provisions. The parties submit to the exclusive jurisdiction and venue of the state and federal courts located in the specified jurisdiction.

12. ENTIRE AGREEMENT; SEVERABILITY; AMENDMENTS

This Application, together with any exhibits and attachments expressly incorporated herein, constitutes the entire agreement between the parties with respect to its subject matter and supersedes all prior agreements and understandings. If any provision of this Application is held invalid or unenforceable, the remaining provisions shall remain in full force and effect. Any amendment to this Application must be in writing and signed by authorized representatives of both parties.

13. WAIVER; COUNTERPARTS

Failure to enforce any provision does not constitute a waiver of that provision. This Application may be executed in counterparts, each of which shall be deemed an original and all of which together shall constitute one instrument. Signatures transmitted by electronic means that reasonably establish the signer's identity shall be valid and binding.

CERTIFICATIONS

By signing below, Applicant certifies that the information provided in this Application is true and complete, that Applicant has the right to authorize Provider access to the systems identified, and that Applicant agrees to the terms and obligations set forth in this Application. Provider certifies that it will adhere to the security controls and confidentiality obligations set forth herein.

Sign Now