End User License Agreement

The following definitions shall be used for purposes of this Agreement.

1.1.  “Affiliate” means, in relation to a party, any other entity which directly or indirectly Controls, is Controlled by, or is under direct or indirect common Control with that party from time to time.

1.2.  “Control” means, in relation to a corporate entity, the power, by operation of law or as a matter of fact, to exercise, whether directly or indirectly, a decisive influence on the orientation of such entity’s management or the appointment of the majority of its directors; “Controls” and “Controlled” will be interpreted accordingly.

1.3.  “Documentation” means the program guides, manuals, release notes, reference guides, specifications or other documents relating to the Hosted Services provided or made available by Mastercard or its Affiliates to the Subscriber, from time to time.

1.4.  “Effective Date” means (i) in the case of Reseller Subscription, the effective date set forth in the Purchase Order; (ii) in the case of a Direct Enrollment Subscription, the effective date set forth in the Enrollment Form; and (iii) in the case of a Free Trial or Other Direct Subscription, the date that Mastercard first makes the Hosted Services available to Subscriber.

1.5.  “Error” means a material failure of the Hosted Services to conform to its functional specifications, excluding failures resulting from Subscriber’s or its Users’ negligence or improper use of the Hosted Services.

1.6.  “Government Subscriber” means a government, whether at supranational, federal, state, provincial or municipal, an agency, body, authority or instrumentality of a government and includes any entity, including a commercial entity, where any government or combination of governments hold the controlling equity interest or other means of control.

1.7.  “Hosted Service(s)” means software, data, and services and updates thereto developed and owned by RiskRecon that are either (i) purchased by Subscriber from Reseller, as reflected in a Purchase Order, and made available by Mastercard or its Affiliates to Subscriber over a network; or (ii) made available by Mastercard or its Affiliates to Subscriber over a network in connection with a Free Trial, Direct Enrollment Subscription or Other Direct Subscription.

1.8.  “Intellectual Property Rights” means any and all now or hereafter known tangible and intangible: (a) rights associated with works of authorship throughout the world, including copyrights or works of copyright, moral rights, and mask-works; (b) Marks and similar rights; (c) trade secret rights; (d) patents, designs, algorithms, and other industrial property rights; (e) all other intellectual and industrial property rights of every kind and nature throughout the world and however designated (including domain names, logos, “rental” rights, and rights to remuneration), whether arising by operation of law, contract, license, or otherwise; and (f) all registrations, initial applications, renewals, extensions, continuations, divisions, or reissues thereof currently or hereafter in force (including any derivative rights in any of the foregoing).

1.9.  “Marks” means trademarks and service marks (whether registered or at common law), trade names, business names, logos, symbols, and Internet domain names, or any abbreviation or contraction thereof.

1.10. “Mastercard” means (i) in the case of a Direct Enrollment Subscription, the Mastercard entity that signs the Enrollment Form; and (ii) in all other cases, Mastercard International Incorporated, a Delaware corporation with offices at 2000 Purchase Street, Purchase, New York, 10577, or if the Subscriber is located outside of North America, the Affiliate of Mastercard International Incorporated that is the Mastercard contracting party for the jurisdiction in which Subscriber is located (“Mastercard”).

1.11. “Mastercard Binding Corporate Rules” means the Mastercard Binding Corporate Rules as approved by the EEA data protection authorities and available at https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

1.12. “Mastercard Group” means Mastercard and its Affiliates.

1.13.  “Personal Data” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly, or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

1.14.  “Processing of Personal Data” (or “Processing/Process”) means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.15.  “Purchase Order” means in the case of a Reseller Subscription, a purchase order, invoice, quote, agreement or other documentation between Subscriber and Reseller setting forth the Hosted Services and Subscription Quantities purchased by Subscriber from Reseller, the Territory within which Subscriber may use the Hosted Services and the fees to be paid by Subscriber for the Hosted Services.

1.16.  “Report” means any output resulting from the Hosted Services data which is available online for viewing via the Hosted Services and downloadable, including in electronic format such as .pdf.

1.17.  “Subscription Quantity” means (i) in the case of a Reseller Subscription, the quantity of subscriptions purchased as described in a Purchase Order; (ii) in the case of a Direct Enrollment Subscription, the quantity of subscriptions purchased as described in the Enrollment Form; and (iii) in the case of a Free Trial or Other Direct Subscription, the quantity of subscriptions that Mastercard or its Affiliates make available to Subscriber.

1.18.  “Term” means (i) in the case of a Reseller Subscription, the term applicable to any Hosted Service as set forth in the applicable Purchase Order; (ii) in the case of a Direct Enrollment Subscription, the Initial Term together with any Renewal Term, as described in Section 2.1.3; and (iii) in the case of a Free Trial or Other Direct Subscription, the length of the Free Trial or Other Direct Subscription, as determined by Mastercard, in its sole discretion.

1.19.  “Territory” means, unless otherwise specifically provided for in writing by Mastercard, the jurisdiction where the principal place of business of Subscriber is located.

1.20.  “User” means an individual who is authorized by Subscriber to use the Hosted Services, for whom subscriptions to the Hosted Services have been purchased, and who have been supplied user identifications and passwords by Subscriber (or by Mastercard or its Affiliates, at Subscriber's request). Users may include but are not limited to employees, consultants, contractors and agents of Subscriber. Without limiting the foregoing, Users may also include Vendors authorized by Subscriber and permitted to access the Hosted Services to view Reports on a limited basis via an invitation-only process managed by Mastercard or its Affiliates for the purposes of understanding such Vendor’s own cybersecurity risk profile in order to mitigate Subscriber’s cybersecurity risk management concerns in relation to such Vendor.

1.21.  “Vendor” means a third-party technology provider or service provider Subscriber monitors or intends to monitor via the Hosted Services.

2.1.   Term

2.1.1.  Reseller Subscriptions. In the case of a Reseller Subscription, the term of this Agreement shall commence on the Effective Date and shall expire upon the expiration of the last term for Hosted Services set forth in the Purchase Orders, unless the parties mutually agree in writing to extend it. Notwithstanding the foregoing, in the event that Mastercard provides written notice to the Subscriber that Reseller’s authorization to act a reseller of Mastercard has been terminated (a “Reseller Change Notice”), the Subscriber’s Reseller Subscription shall be automatically converted into a Direct Enrollment Subscription hereunder upon the same pricing terms previously agreed to in the applicable Purchase Order for the remainder of the term indicated therein. Following receipt of a Reseller Change Notice, Section 4 hereof shall apply and Subscriber shall make all payments thereafter in respect to the Hosted Services directly to Mastercard. To the extent requested by Mastercard, Subscriber shall execute an Enrollment Form evidencing the new Direct Enrollment Subscription.

2.1.2.  Free Trial. In the case of a Free Trial, the term of this Agreement shall commence on the Effective Date and shall expire on the earlier of (i) the date access to the Hosted Services is terminated by Mastercard, in its sole discretion, at any time and for any reason; and (ii) the start date of any paid subscription for Hosted Services purchased by Subscriber. Sections 2.2 through 2.5 shall not apply in the case of a Free Trial.

2.1.3.  Direct Enrollment Subscription In the case of a Direct Enrollment Subscription, the term of this Agreement shall commence on the Effective Date and continue in effect for a period equal to the “Initial Term” designated in the Enrollment Form. Unless otherwise agreed to in the Enrollment Form, at the end of the Initial Term, the term of this Agreement will automatically renew for successive one (1) year periods (each a “Renewal Term”) unless either party provides written notice of non-renewal of this Agreement to the other party at least sixty (60) days prior to the end of the then current Term.

2.1.4.  Other Direct Subscriptions. In the case of an Other Direct Subscription, the term of this Agreement shall commence on the Effective Date and shall expire on the earlier of (x) the date access to the Hosted Services is terminated by Mastercard, in its sole discretion, at any time and for any reason; or (y) the expiration of the term specified by Mastercard in writing to Subscriber as the term for the Other Direct Subscription. In the case of a Free Trial or Other Direct Subscription, Subscriber agrees that this Agreement and its access to the Hosted Services may be terminated by Mastercard, in its sole discretion, at any time and for any reason.

2.2.  Either party may terminate this Agreement in the event the other party materially breaches the terms of this Agreement and fails to cure such breach within thirty (30) days after receiving written notice of such breach. Additionally, Mastercard may terminate this Agreement immediately if Subscriber: (a) terminates its business operations; (b) commences any proceedings for the winding up of its business or the dissolution or liquidation of its business operations; (c) becomes insolvent; (d) suffers the appointment of a receiver or makes an assignment for the benefit of creditors; or (e) enters into voluntary or involuntary bankruptcy; (f) ceases to pay its debts as they become due. Subscriber agrees that its failure to pay any amounts due to Reseller or Mastercard, as applicable, in respect to the Hosted Services or its failure to otherwise comply with any other obligation under a Purchase Order, Enrollment Form or any other agreement with Reseller or Mastercard, as applicable, with respect to the Hosted Services shall constitute a material breach of this Agreement.

2.3  In the event a change in law or regulation prohibits or impairs the Mastercard Group’s ability to provide the Hosted Services, or any portion thereof (“Adverse Change”), Mastercard may suspend the provision of, and Subscriber’s right to access and use, the Hosted Services, or such affected portion thereof, for the duration of the Adverse Change, as may be necessary for the Mastercard Group to address the Adverse Change. If Mastercard, in its sole discretion, reasonably determines that it is unable to modify the Hosted Services to address the Adverse Change, Mastercard may terminate such Hosted Services or this Agreement upon written notice to Subscriber with no further liability to Subscriber.

2.4.  At any time, the Mastercard Group may terminate any Hosted Service or this Agreement: (a) upon ninety (90) days’ notice, if the Mastercard Group discontinues such Hosted Service in one or more of the jurisdictions in which such Hosted Service is provided under this Agreement; (b) upon thirty (30) days’ notice or earlier, if required by applicable law or the relevant authority, if the Mastercard Group is required by such law or governing authority to cease providing such Hosted Service in one or more of the countries in which such Hosted Service is provided under this Agreement; (c) immediately, if the Mastercard Group receives a claim or notice alleging that such Hosted Service infringes or violates a third party’s Intellectual Property Rights; or (d) immediately, if Subscriber breaches any of Sections 5.5 or 5.6 hereof.

2.5.  In the case of Reseller Subscription, each Purchase Order will terminate upon the termination of this Agreement. Upon termination of (x) in the case of a Reseller Subscription, a Purchase Order, or (y) in the case of a Direct Enrollment Subscription or Other Direct Subscription, Subscriber’s right to access and use the Hosted Services made available pursuant to such Reseller Subscription, Direct Enrollment Subscription or Other Direct Subscription, as applicable, shall terminate and, except to the extent agreed to in writing by the parties: (a) Subscriber shall cease all use of the Hosted Services and, if applicable, delete all copies in its possession or control, provided, that Subscriber shall be entitled to retain copies of any Reports generated prior to the effective date of the termination; (b) in the case of a Reseller Subscription, Subscriber shall promptly pay any amounts due or owed under the Purchase Order in accordance with its terms; (c) in the case of a Direct Enrollment Subscription or Other Direct Subscription, Subscriber shall promptly pay any amounts due or owed or that would be due or owed under this Agreement under the existing Term, which, for the avoidance of doubt, shall be equal to any amounts due and owed as of the effective date of termination plus an early termination fee equal to any subscription fees that would have been due and payable over the Term assuming that this Agreement had not been terminated prior to the expiration thereof (the “Early Termination Fee”); and (d) all of Subscriber’s rights to any deliverables pursuant to this Agreement shall be revoked, provided, that Subscriber shall be entitled to retain copies of any Reports generated prior to the effective date of termination. Termination of the Hosted Services, this Agreement, or in the case of a Reseller Subscription, a Purchase Order, shall not relieve either party of any obligation accrued through the date of termination. In the case of a Direct Enrollment Subscription or Other Direct Subscription, if Mastercard terminates this Agreement pursuant to Section 2.3 or Section 2.4, or Subscriber terminates this Agreement pursuant to Section 2.2, (i) the Termination Fee noted above shall not apply; and (ii) Mastercard shall refund to Subscriber the pro-rata amount of Subscription Fees prepaid by Subscriber to Mastercard in respect each terminated Hosted Service for the remainder of each such Term.

2.6.  Sections 1, 2.4, 2.5, 4.2, 4.4, 5.5, 6, 7, 8, 9, 10 and 13 shall survive expiration or termination of this Agreement according to their terms.

3.1.  Subscriber agrees that Mastercard’s Affiliates, including but not limited to RiskRecon, may perform any Hosted Services under this Agreement and any services in support of the Hosted Services.

3.2.  Mastercard or its Affiliates shall make the applicable Hosted Services available to Subscriber and its Users pursuant to this Agreement during the Term. Subscriber agrees that its purchase of subscriptions for Hosted Services is neither contingent upon the delivery of any future functionality or features nor dependent upon any oral or written public comments made by the Mastercard Group with respect to future functionality or features.

The provisions of this Section 4 shall only apply in the case of Direct Enrollment Subscriptions and Other Direct Subscriptions.

4.1.  Subscriber shall pay Mastercard the fees (“Subscription Fees”) for access to the Hosted Services as set forth (i) in the case of a Direct Enrollment Subscription, in the Enrollment Form; and (ii) in the case of an Other Direct Subscription, in any documentation provided to Subscriber in connection with the Other Direct Subscription (the “ODS Documentation”). Subscriber shall be invoiced for the Subscription Fees for each Hosted Service annually in advance, and each invoice will be due and payable 30 days from the date of such invoice.  Except as expressly set forth in this Agreement, upon payment, Subscription Fees are non-refundable.

4.2.  To the extent applicable, where Subscriber is set up on the Mastercard Consolidated Billing System (“MCBS”), Subscriber’s MCBS account may be directly debited for all costs incurred by the Mastercard Group. Where MCBS is used, Subscriber shall be responsible for maintaining sufficient funds in its MCBS account, failing which penalties shall be assessed against the Subscriber in accordance with Mastercard’s standard policy. Mastercard reserves the right to designate an Affiliate including, but not limited to, RiskRecon, as billing agent for purposes of invoicing and collecting Subscription Fees. Any requests by Subscriber for further information to substantiate the Subscription Fees contained in an invoice shall be made by Subscriber to Mastercard and any such information shall be only be used internally by Subscriber and its professional advisers for purposes related to invoicing.

4.3.  In the case of a Direct Enrollment Subscription, for a multi-year Initial Term or any Renewal Term, the fees set forth in the Enrollment Form shall be adjusted on an annual basis on or around the anniversary of the Effective Date in accordance with the Renewals and True-Ups section of the Enrollment Form.

4.4.  Prices indicated in the Enrollment Form or ODS Documentation, as applicable, and all amounts billed under this Agreement are exclusive of all taxes. Other than taxes based on Mastercard’s net income, Subscriber shall pay (and Mastercard shall have no liability for), any taxes, tariffs, duties and other charges or assessments imposed or levied by any government or governmental agency in connection with this Agreement, including, without limitation, any federal, provincial, state and local sales, use, goods and services, value-added, withholding, personal property and applicable import and export duties or fees taxes on any payments due in connection with this Agreement. All sums payable by Subscriber to Mastercard under this Agreement shall be paid in full, free of any deductions and/or withholdings of any kind, except where any deduction or withholding is required by law. If any payment by Subscriber is subject to a deduction or withholding required by law, (i) Subscriber shall submit the amount required to be deducted or withheld to the applicable governmental agency and provide Mastercard with such evidence as Mastercard may reasonably request, to establish that such deduction or withholding has been paid as required by law; and (ii) Mastercard shall be entitled to receive from Subscriber (and Subscriber agrees to pay) such additional amount to ensure that the net sum received by Mastercard is the same as it would have received if that payment had not been subject to that deduction or withholding.

5.1.  Subscriber agrees that it will use the Hosted Services solely as contemplated by and in accordance with the terms of this Agreement and the Documentation.

5.2.  In the case of a Reseller Subscription, Direct Enrollment Subscription or Other Direct Subscription, during the Term, Mastercard grants to Subscriber a limited, non-exclusive, non-transferable, non-sublicensable, revocable right to access and use the Hosted Services made available pursuant to such subscription in the Territory for Subscriber’s legitimate internal business purpose of understanding vendor cybersecurity risk profiles in order to mitigate Subscriber’s Vendor cybersecurity risk management concerns only (“Legitimate Internal Business Purpose”), subject to the terms of this Agreement. Mastercard and Subscriber agree and acknowledge that Subscriber may invite a Vendor to be a User of the Hosted Services for the purpose of accessing the Reports, so long as such access by Vendor is for Subscriber’s Legitimate Internal Business Purpose.

5.3.  In the case of a Reseller Subscription, Direct Enrollment Subscription or Other Direct Subscription, during the Term, Mastercard hereby grants to Subscriber a limited, non-exclusive, non-transferable, non-sublicensable, revocable right to use the Reports in the Territory solely for Subscriber’s Legitimate Internal Business Purpose, which may include sharing such Reports with Vendors for Subscriber’s Legitimate Internal Business Purpose, subject to the terms of this Agreement.

5.4.  In the case of a Free Trial, Subscriber shall access the Hosted Services and use the Reports solely for purposes of evaluating a potential purchase of the Hosted Services. Subscriber acknowledges and agrees that any data, Reports, customizations made to the Hosted Services during a Free Trial may be permanently lost or deleted at the end of the Free Trial unless Subscriber purchases a subscription to such Hosted Services before the end of the Term of the Free Trial.

5.5.  Except to the extent such restriction is expressly prohibited by applicable law, and other than as expressly set forth in this Agreement, Subscriber and its Users shall not, and will not assist or permit any third party to: (a) disassemble, reverse engineer, decompile or otherwise attempt to derive source code of the Hosted Services or any component thereof, (b) copy, reproduce, modify, alter or otherwise create any derivative works of, the Hosted Services or any Reports, (c) license, sublicense, sell, resell, rent, lease, transfer, assign, distribute, time share or otherwise commercially exploit or make the Hosted Services or any Reports available to any third party, other than to Users or as otherwise contemplated by this Agreement, (d) use the Hosted Services or Reports to violate, misappropriate, or infringe the rights of any third party, (e) interfere with, disrupt or circumvent the integrity or performance of, or any feature of the Hosted Services or the data contained therein, including any security or access control mechanism, (f) attempt to gain unauthorized access to the Hosted Services or its related systems or networks, or (g) attempt to do any of the foregoing.

5.6.  Subscriber and its Users shall access and/or use the Hosted Services and Reports solely for Subscriber’s Legitimate Internal Business Purpose as contemplated by this Agreement and shall not use the Hosted Services or Reports in any way not expressly permitted in this Agreement. Subscriber is responsible for all activities that occur in User accounts and for Users’ compliance with this Agreement and the Documentation. Subscriber shall also be responsible for maintaining an accurate list of active Users with Mastercard. Subscriber shall access, use and accept provision of the Hosted Services solely in the Territory. Subscriber shall also use commercially reasonable efforts to prevent unauthorized access to, or use of, the Hosted Services, and shall notify Mastercard promptly of any such unauthorized access or use. Subscriber further warrants that its use of the Hosted Services, including without limitation, the search and/or monitoring of Subscriber’s designated Vendors in connection with the performance of this Agreement complies with all applicable local, state, federal and foreign laws and does not violate or breach any agreements between Subscriber and its Vendors. To the extent that Subscriber becomes aware that the provision by Mastercard or Mastercard’s Affiliate(s) of the Hosted Services, or Subscriber’s use of the Hosted Services, does not comply with applicable law, Subscriber shall immediately communicate the same to Mastercard, and the parties agree to cooperate in good faith to resolve the matter. The foregoing does not relieve Mastercard of any liability under this Agreement.

6.1.  The Mastercard Group is, and shall remain the sole owner of, and shall retain all right, title and interest in and to the Hosted Services and any related documentation, and any modifications, or improvements thereto or derivative works thereof, whether or not made by the Mastercard Group. The Mastercard Group reserves all rights in and to the foregoing, and Subscriber gains no rights or licenses hereunder, except as expressly granted in this Agreement.

6.2.  Subscriber recognizes and agrees that the Mastercard Group owns the Reports created for specific Vendors identified by Subscriber and may use such Reports for its own purposes and for other Subscribers.

7.1.  Each party will regard any information (in writing, orally, or in any other form) provided to it by the other party and designated in writing, or if orally provided, indicated verbally by the disclosing party, as proprietary or confidential, to be confidential (“Confidential Information”). Confidential Information shall also include (i) information which, to a reasonable person familiar with the disclosing party’s business and the industry in which it operates, is of a confidential or proprietary nature, regardless of whether designated as such in writing (including, without limitation, trade secrets, and, for Mastercard, Mastercard’s Intellectual Property Rights or any data and information contained therein); and (ii) any documents prepared by the receiving party that contain, otherwise reflect, or, in whole or in part, are generated from disclosed Confidential Information. The parties expressly agree that the Hosted Services, Reports and the terms and pricing in this Agreement are the Confidential Information of the Mastercard Group. Subscriber will not remove or destroy any proprietary markings or restrictive legends placed upon or contained in the Hosted Services or Reports. Information will not be deemed Confidential Information hereunder if such information: (i) is known by the receiving party prior to receipt from the disclosing party, without any obligation of confidentiality, as evidenced by receiving party’s tangible records; (ii) becomes known to the receiving party directly or indirectly from a source other than one having an obligation of confidentiality to the disclosing party; (iii) becomes publicly known or otherwise publicly available, except through the acts or failure to act by the receiving party in breach of this Agreement; or (iv) is independently developed by the receiving party without reference to the Confidential Information as evidenced by receiving party’s tangible records.

7.2.  Each party shall protect the other party’s Confidential Information in the same manner as it protects its own valuable confidential information, but in no event shall less than reasonable care be used. A party will not disclose the other party’s Confidential Information to any third party, except (i) as permitted in writing by the disclosing party prior to any such disclosure, (ii) to employees, consultants, agents and subcontractors that have a need to know such information, provided that the receiving party shall advise each such third party of their obligations to keep such information confidential, and (iii) to the extent receiving party is legally compelled to disclose such Confidential Information pursuant to subpoena or the order of any governmental authority, provided that where possible and permitted by applicable law, the receiving party shall give advance notice of such compelled disclosure to the disclosing party, and shall cooperate with the disclosing party in connection with efforts to prevent or limit the scope of such disclosure and/or use of the Confidential Information. Each party accepts responsibility for the actions of its agents, subcontractors, consultants or employees.

7.3.  Neither party shall make use of any of the other party’s Confidential Information except in its performance under this Agreement. Except as otherwise provided in this Agreement, at the end of the Term, or such earlier time as the disclosing party requests, the receiving party shall return to the disclosing party, or, at the disclosing party’s request, securely destroy all Confidential Information of the disclosing party in the possession of the receiving party. Notwithstanding the foregoing, the receiving party is not obligated to destroy Confidential Information (i) commingled with other information of the receiving party if it would be a substantial administrative burden to excise such Confidential Information; (ii) contained in an archived computer system backup made in accordance with the receiving party's security or disaster recovery procedures; or (iii) required to be retained pursuant to applicable law, regulatory requirements, or post-termination obligations as stated in this Agreement, provided in each case that such Confidential Information remains subject to the obligations of confidentiality in this Section 7 until the eventual destruction.

7.4.  Notwithstanding anything to the contrary in the foregoing, the Mastercard Group may share Confidential Information contained in the Reports with governmental bodies and other public authorities as permitted or required under applicable law.

8.1.  Subscriber will, at its own expense, defend, indemnify and hold harmless the Mastercard Group and each of their employees, officers, directors, agents, representatives and contractors (“Mastercard Indemnitees”) from and against:

8.1.1.  any third-party claim against the Mastercard Indemnitees arising out of or related to: (1) Subscriber’s or its Users’ access to or use of the Hosted Services or a Report not in accordance with the terms of this Agreement, or (2) Subscriber’s or its Users’ (i) breach of this Agreement, or (ii) gross negligence or willful misconduct in the performance of its obligations under this Agreement, provided that Mastercard: (x) promptly notifies Subscriber of such claim (provided that failure to do so shall not waive Subscriber’s obligations hereunder unless such failure materially hinders Subscriber’s defense of such claim), (y) reasonably cooperates with Subscriber in defense of the claim as reasonably requested by Subscriber and at Subscriber’s cost, and (z) gives full control and sole authority over the defense and settlement of such proceeding, provided that Subscriber may not settle any such claim or action without Mastercard’s prior written consent. Mastercard may participate in the defense and settlement of such claim or action with legal counsel of its own choosing and at its own cost; and

 8.1.2.  all liability, costs, expenses, losses (including but not limited to reasonable attorneys’ fees and all other professional costs and expenses) suffered or incurred by the Mastercard Indemnitees arising out of or in connection with a breach of Section 5.5 or 5.6 by Subscriber or Subscriber’s Users.

8.2.  In the case of a Reseller Subscription, Direct Enrollment Subscription or Other Direct Subscription, Mastercard, at its own expense, will defend, indemnify or, at its sole option, settle any claim or action brought by a third party against Subscriber or its officers, directors, employees or agents (“Subscriber Indemnitees”) to the extent alleging that the Hosted Services, when used within the scope of this Agreement, infringe any patent, trademark or copyright of a third party (“Claim”).

8.2.1.  Mastercard’s obligations to indemnification are subject to Subscriber: (a) notifying Mastercard of any such Claim promptly after it obtains knowledge of such Claim (provided that failure to do so shall not waive Mastercard’s obligations hereunder unless such failure materially hinders Mastercard’s defense of such Claim), (b) providing Mastercard with reasonable assistance, information and cooperation in defending the lawsuit or proceeding, and (c) giving Mastercard full control and sole authority over the defense and settlement of such claim, provided that such settlement fully releases Subscriber and is solely for monetary damages and does not admit any liability on behalf of Subscriber.

8.2.2.  Mastercard shall have no obligation to indemnify, defend or hold harmless hereunder to the extent that a Claim arises from or is based on any use of the Hosted Services: (a) not in accordance with this Agreement or the Documentation or for purposes not intended by Mastercard and not specifically authorized under this Agreement; or (b) in combination with any other product or service that is not supplied or expressly approved by the Mastercard Group for use with the Hosted Services.

8.2.3.  Following notice of a Claim or upon any facts which in Mastercard’s sole opinion are likely to give rise to such Claim, Mastercard shall in its sole discretion and at its sole option, elect to: (a) procure for Subscriber the right to continue to use the Hosted Services, at no additional cost to Subscriber; (b) replace or modify the Hosted Services so that it becomes non-infringing, but remains functionally equivalent; (c) terminate the affected Hosted Service and provide a refund to Subscriber for the pro-rata amount of prepaid Subscription Fees paid by Subscriber to Mastercard for the remainder of the Term for such affected Hosted Service.  

8.2.4.  This Section 8.2 sets forth the sole and exclusive liability of the Mastercard Group, and Subscriber’s sole and exclusive remedy, for the actual or alleged infringement or misappropriation of any third-party Intellectual Property Rights by the Hosted Services or use thereof.

9.1.  Subscriber and Mastercard shall comply and shall have any subcontractor comply with all Privacy and Information Security Requirements to the extent applicable to the Hosted Services. As used herein, “Privacy and Information Security Requirements” means all applicable international, federal, state, provincial and local laws, rules, regulations, directives and governmental requirements relating in any way to the privacy, data protection, confidentiality, or security of Personal Data, including, without limitation, the EU General Data Protection Regulation 2016/679 (“GDPR”); the e-Privacy Directive 2002/58/EC (as amended by Directive 2009/136/EC, and as amended and replaced from time to time) and their national implementing legislations; the Gramm-Leach-Bliley Act; laws regulating unsolicited email, telephone, and text message communications; security breach notification laws; laws imposing minimum security requirements; laws requiring the secure disposal of records containing certain Personal Data; laws regulating banking secrecy and outsourcing requirements; laws regulating international data transfers and/or on-soil requirements; laws regulating incident reporting and data breach notification requirements, including guidelines and recommendations from the competent regulators; all other similar international, federal, state, provincial, and local requirements; and all applicable provisions of the parties’ written information security policies, procedures and guidelines. Capitalized terms not defined herein have the meaning set forth in the relevant Privacy and Information Security Requirements.

9.2.  To the extent that Hosted Services under this Agreement involve the Processing of Personal Data, the following provisions will apply.

9.2.1.  Subscriber shall be solely responsible for ensuring that it provides notice and relies on a valid legal ground to enable the Mastercard Group to provide the Hosted Services, including for data transfers, as required under Privacy and Information Security Requirements. Subscriber shall be solely responsible for handling individuals’ requests in connection with withdrawing their consent or their rights to access, rectify, restrict or erase their Personal Data or exercise their right to data portability, if applicable, with regard to any Personal Data, object to the Processing of any Personal Data, or exercise their rights related to automated decision-making and profiling, if applicable, in connection with the Hosted Services.

9.2.2.  Both parties shall develop, maintain and implement a comprehensive written information security program that complies with all applicable Privacy and Information Security Requirements. Without limitation, each party’s information security program shall include technical, physical, and administrative/organizational safeguards designed to: (a) ensure the security and confidentiality of Personal Data; (b) protect against any anticipated threats or hazards to the security and integrity of Personal Data; and (c) protect against any actual or suspected unauthorized Processing, loss, use, disclosure or acquisition of or access to any Personal Data (hereinafter “Information Security Incident”). Each party’s information security program shall, among other things, include regular testing or otherwise monitoring of the effectiveness of each party’s information safeguards.

9.2.3.  To the extent required by applicable legal, regulatory or law enforcement requirements, each party shall inform the other in writing of any Information Security Incident involving a party’s Personal Data. Such notice shall summarize in reasonable detail the effect on the other party, if known, of the Information Security Incident and the corrective action taken or to be taken. The applicable party shall promptly take all necessary corrective actions and shall cooperate fully with the other in all reasonable and lawful efforts to mitigate the effects such Information Security Incident. Except to the extent prohibited by applicable legal, regulatory or law enforcement requirements, Subscriber must obtain the approval of Mastercard prior to the publication or communication of any filings, communications, notices, press releases or reports related to any Information Security Incident that expressly mention Mastercard or any of its Affiliates.

9.2.4.  All data including Personal Data Processed in connection with this Agreement shall be transferred to and stored by RiskRecon and Mastercard in the United States, in accordance with the Mastercard Binding Corporate Rules, the APEC Cross-Border Privacy Rules System, and applicable Privacy and Information Security Requirements.

9.3.  Mastercard will complete an annual SSAE 18 (or its then current equivalent) review and will provide to Subscriber a copy of any reports that Mastercard receives related to compliance with the SSAE 18, upon written request from the Customer, once per year. The SSAE 18 report shall be a "Type 11" report (as specified in the SSAE 18). Any information provided by Mastercard in connection with the SSAE 18 shall be deemed to be Confidential Information under this Agreement.

9.4.  Mastercard will maintain a formal business continuity program ("Business Continuity Program" or "BCP") that will include plans for emergency response and management, business recovery, and disaster recovery. These plans will be made available for review to Subscriber upon request at a mutually agreeable time and location. BCP documentation will not be available for distribution, as it contains Mastercard’s Confidential Information. Mastercard agrees to annually test its BCP and provide confirmation of exercises, upon written request. Mastercard will also provide information to the Subscriber required for the Subscriber's development of BCP plans that work in concert with the Mastercard BCP, if requested.

10.1.  During any applicable Term, Mastercard warrants that the applicable Hosted Services will function in material accordance with the specifications for such Hosted Services, as solely determined by Mastercard and as may be updated by the Mastercard Group from time to time. The Mastercard Group provides no warranty regarding any use of the Hosted Services not in accordance with this Agreement and not specifically licensed pursuant to this Agreement.

10.2.  EXCEPT AS EXPRESSLY PROVIDED IN SECTION 9.1, AND TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE MASTERCARD GROUP DISCLAIMS ALL REPRESENTATIONS, WARRANTIES, TERMS AND CONDITIONS, WHETHER EXPRESS OR IMPLIED, REGARDING THE HOSTED SERVICES, RELATED DOCUMENTATION OR INFORMATION, AND OTHER MATERIALS AND SERVICES, AND SPECIFICALLY DISCLAIM THE IMPLIED WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE, SATISFACTORY QUALITY, MERCHANTABLE QUALITY, NONINFRINGEMENT AND THOSE ARISING FROM COURSE OF PERFORMANCE, DEALING, USAGE OR TRADE. THE HOSTED SERVICES ARE PROVIDED “AS IS” AND ON AN “AS AVAILABLE” BASIS AND THE MASTERCARD GROUP DOES NOT WARRANT THAT THE FUNCTIONS OR INFORMATION CONTAINED IN THE HOSTED SERVICES OR IN ANY UPDATE WILL MEET THE REQUIREMENTS OF SUBSCRIBER OR THAT THE OPERATION OF THE HOSTED SERVICES WILL BE UNINTERRUPTED OR FREE FROM ERRORS OR OTHER PROGRAM LIMITATIONS. THE INFORMATION PROVIDED BY THE HOSTED SERVICES AND/OR CONTAINED IN THE REPORTS MAY CONTAIN TECHNICAL OR TYPOGRAPHICAL ERRORS. THE MASTERCARD GROUP DOES NOT GUARANTEE ITS ACCURACY OR COMPLETENESS. ALL INFORMATION PROVIDED BY THE MASTERCARD GROUP IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY, AND SUBSCRIBER ACKNOWLEDGES THAT SUBSCRIBER USES ANY SUCH INFORMATION AT ITS OWN RISK.

10.3.  To the maximum extent permitted by applicable law, Mastercard’s sole and exclusive obligation and Subscriber’s sole and exclusive remedy for any failure of the Hosted Services, including the Hosted Services’ failure to meet the warranty in Section 10.1, is limited to the correction, adjustment or replacement of the failed Hosted Service which examination indicates, to Mastercard’s satisfaction, to be defective or, at Mastercard’s sole option, termination of subscription and access rights to the failed Hosted Service and a refund of the pro-rata amount of any pre-paid Subscription Fees paid by Subscriber to Mastercard for the failed Hosted Service for the remainder of the Term of the affected Hosted Service.

10.4.  THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL EITHER SUBSCRIBER OR THE MASTERCARD GROUP BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES, OR ANY PENALTIES, CLAIMS FOR LOST DATA, REVENUE, PROFITS, COSTS OF PROCUREMENT OR SUBSTITUTE GOODS OR SERVICES OR BUSINESS OPPORTUNITIES, ARISING OUT OF OR RELATED TO THE SUBJECT MATTER OF THIS AGREEMENT, UNDER ANY CAUSE OF ACTION OR THEORY OF LIABILITY, WHETHER IN CONTRACT OR IN TORT INCLUDING NEGLIGENCE, EVEN IF A PARTY HAS BEEN ADVISED OF SUCH DAMAGES.

10.5.  TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AND EXCLUDING LIABILITY FOR NON-PAYMENT BY SUBSCRIBER OF AMOUNTS DUE UNDER THE AGREEMENT, IN NO EVENT SHALL THE AGGREGATE LIABILITY OF EACH PARTY AND ITS AFFILIATES HEREUNDER ARISING OUT OF OR RELATED TO THE SUBJECT MATTER OF THIS AGREEMENT, REGARDLESS OF THE FORUM, AND REGARDLESS WHETHER ANY CAUSE OF ACTION OR CLAIM IS BASED ON CONTRACT, TORT, OR OTHERWISE, EXCEED THE SUBSCRIPTION FEES PAID OR PAYABLE BY SUBSCRIBER TO RESELLER OR MASTERCARD, AS APPLICABLE, FOR THE HOSTED SERVICES DURING THE TWELVE (12) MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT(S) GIVING RISE TO LIABILITY; PROVIDED, HOWEVER, THAT (I) MASTERCARD’S AGGREGATE LIABILITY HEREUNDER ARISING OUT OF OR RELATED TO A THIRD PARTY INFRINGEMENT CLAIM DESCRIBED IN SECTION 8.2, AND (II) SUBSCRIBER’S AGGREGATE LIABILITY HEREUNDER ARISING OUT OF OR RELATED TO ITS BREACH OF SECTION 5.5 OR 5.6 SHALL BE SUBJECT TO A SEPARATE DAMAGES CAP NOT TO EXCEED THE GREATER OF (A) TWO HUNDRED FIFTY THOUSAND DOLLARS ($250,000) AND (B) THE SUBSCRIPTION FEES PAID OR PAYABLE BY SUBSCRIBER TO RESELLER OR MASTERCARD, AS APPLICABLE, FOR THE HOSTED SERVICES DURING THE TWENTY-FOUR (24) MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT(S) GIVING RISE TO LIABILITY. FOR CLARITY, THESE LIMITS ALSO APPLY TO MASTERCARD’S AFFILIATES. IT IS THE MAXIMUM FOR WHICH MASTERCARD AND ITS AFFILIATES ARE COLLECTIVELY RESPONSIBLE.

10.6.  NOTWITHSTANDING ANYTHING CONTAINED HEREIN, (I) DURING THE TERM OF THE FREE TRIAL THE HOSTED SERVICES ARE PROVIDED “AS-IS” WITHOUT ANY WARRANTY; AND (II) THE MASTERCARD GROUP WILL HAVE NO LIABILITY FOR ANY HARM OR DAMAGE ARISING OR IN CONNECTION WITH A FREE TRIAL.

To the extent that the Subscriber is a Government Subscriber, the following additional terms shall apply.

11.1.  The parties acknowledge as follows: (a) Mastercard or one of its Affiliates is providing the Hosted Services as contemplated herein at the request of Subscriber, and (b) Subscriber is a Government Subscriber, which is bound to follow mandates of procurement policies or laws in its sourcing of services, and the parties acknowledge that (i) procurement of Hosted Services herein is in compliance with such laws and policies, (ii) provision of Hosted Services is not a gift and is not intended to personally benefit any individual nor is it transferrable in any way, and (iii) by providing the Hosted Services, the Mastercard Group has no expectations of future favorable treatment by Subscriber, (c) Subscriber may use the Reports for its Legitimate Internal Business Purpose only, and the same shall not be disseminated to third parties or published in a public domain medium, except with the written permission of Mastercard, (d) the Hosted Services will be provided during the Term or as permitted under this Agreement, and (e) for the avoidance of doubt, Subscriber hereby agrees that provision of Hosted Services shall not preclude, hinder, waive, advantage or restrict in any way the Mastercard Group’s eligibility or fitness to qualify, compete for or be awarded future procurement, investment or grant opportunities.

12.1.  Each Party shall fulfill its obligations as stated in this Agreement in accordance with all applicable laws and regulations, including, without limitation, the Foreign Corrupt Practices Act, the U.K. Bribery Act, and all other applicable anti-corruption and anti-bribery laws. In connection with Subscriber’s use of the Hosted Services and cross-border transfer of all reports, data, materials, documents, or other deliverables provided by the Mastercard Group to Subscriber in connection with the Hosted Services (“Deliverables”), the Customer shall comply with all applicable export, re-export, and import control laws and regulations of all applicable jurisdictions, and Subscriber shall not export or re-export the Hosted Services or Deliverables. Subscriber shall not engage in any activities related to these this Agreement with a Person who is identified on the lists of specially designated nationals or blocked parties maintained by the U.S. Treasury Department’s Office of Foreign Assets Control, or other relevant jurisdiction. Such list is currently accessible at: http://www.treasury.gov/ofac.

12.2.  Each Party hereby guarantees that it is neither on any sanctions list of the European Union, the United States, or the United Nations, nor are they subject to a corresponding embargo, and that the execution of this Agreement does not otherwise violate export control regulations during the term of this Agreement. The Parties shall not engage in dealings, directly or indirectly, with any entity or person or in any jurisdiction subject to European Union, the United States, or the United Nations sanctions regulations.

12.3.  The Parties represent, warrant and covenant that each of it and its Staff, subcontractors, agents and other third parties acting on its behalf: (a) is not named on any U.S. Department of Treasury Office of Foreign Asset Control Sanctions lists or any applicable foreign sanctions lists; (b) shall not, directly or indirectly, access, use, sell, export, reexport, transfer, divert, or otherwise dispose of all or any part of the Services or Documentation to any country (or national thereof) that is subject to antiterrorism controls or U.S. embargo, or to any other person or entity or destination prohibited by the laws of the U.S. or the laws of the Territory or any other applicable jurisdiction, without obtaining, at its own expense, prior authorization from the competent government authorities as required by those laws.

12.4.  The Parties shall not engage in dealings, directly or indirectly, with any entity or person or in any jurisdiction subject to U.S. OFAC sanctions regulations. Each Party represents and warrants that it is currently not on any OFAC List, nor on any similar restricted party listings, including those maintained by other governments pursuant to applicable United Nations, regional or national trade or financial sanctions.

12.5.  The Parties shall comply with all trade and economic sanctions programs relevant to where they do business, including trade and economic sanctions maintained by the Office of Foreign Assets Control (“OFAC”) and similar laws of the countries where the Parties are located. The Parties shall not engage in any conduct that would cause the other Party to violate applicable sanctions programs. The Parties shall notify the other party immediately if it becomes aware that it, its subcontractors, or related parties engage in activity prohibited by applicable sanctions. To the extent applicable, the Parties shall comply and shall ensure that each of its subcontractors and personnel complies, with all applicable laws (e.g., anti-bribery, corruption, export controls, sanctions) in connection with this Agreement. Each Party agrees to comply with all applicable laws and regulations in connection with this Agreement.

12.6.  Subscriber acknowledges that the Hosted Services, or a portion thereof, are subject to the Export Administration Regulations, 15 C.F.R. Parts 730-774, of the United States and may be subject to other applicable country export control and trade sanctions laws (“Export Control and Sanctions Laws”). Subscriber shall not, and shall not permit any of its end users, to access, use, export, re-export, divert, transfer, or disclose any part of the Hosted Services or any related technical information or materials, directly or indirectly, in violation of any applicable export control or trade sanctions law or regulation. Subscriber represents and warrants that: (i) Subscriber and Subscriber’s end users (a) are not citizens of, or located within, a country or territory that is subject to U.S. trade sanctions or other significant trade restrictions (including without limitation Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk and Luhansk regions of Ukraine) and that Subscriber and Subscriber’s end users will not access or use the Hosted Services, or export, re-export, divert, or transfer the Hosted Services, in or to such countries or territories; (b) are not persons, or owned 50% or more, individually or in the aggregate by persons, identified on the U.S. Department of the Treasury’s Specially Designated Nationals and Blocked Persons List or Foreign Sanctions Evaders Lists; and (c) are not persons on the U.S. Department of Commerce’s Denied Persons List, Entity List, or Unverified List, or U.S. Department of State proliferation-related lists; and (ii) Subscriber and Subscriber’s end users located in China, Russia, or Venezuela are not Military end users and will not put the Hosted Services to a Military end user, as defined in 15 C.F.R. 744.21. Subscriber is solely responsible for complying with the Export Control and Sanctions Laws and monitoring them for any modifications.

13.1.  This Agreement shall be governed solely by the governing law listed in the chart below for the Mastercard Affiliate that is a party to (i) in the case of a Direct Enrollment Agreement, the Subscriber’s Enrollment Form, (ii) in the case of a Reseller Subscription, the Reseller Agreement with the applicable Reseller (or for Reseller Agreements previously entered into by RiskRecon, the Mastercard Contracting Party shall be deemed solely for purposes of this paragraph to be Mastercard International Inc.), (iii) in the case of an Other Direct Subscription, the ODS Documentation, or (iv) in the case of a Free Trial, the Free Trial documentation or the non-disclosure agreement executed in connection therewith, (the “Mastercard Contracting Party”), without regard to such jurisdiction’s principles of conflicts of law. The application of the United Nations Convention of Contracts for the International Sale of Goods or other international laws is expressly excluded. Each party consents to the personal and exclusive jurisdiction of the courts located in the jurisdiction listed in the chart below for the Mastercard Contracting Party, in connection with all proceedings related to the Hosted Services or this Agreement.

13.2.  This Agreement shall bind and inure to the benefit of each party’s permitted successors and assigns. Neither party may assign or transfer its rights or obligations granted under this Agreement, by operation of law, contract, or otherwise, without the other party’s prior written consent, such consent not to be unreasonably withheld; provided, however, that Mastercard may, without the consent of Subscriber, delegate or assign any obligations under this Agreement, in whole or in part, to an Affiliate capable of performing Mastercard’s obligations hereunder. Notwithstanding the foregoing, Mastercard and its Affiliates may assign any of its or their rights or obligations under this Agreement without the prior written consent of Subscriber to any successor entity, including by way of a merger, acquisition, consolidation, asset or stock sale, or similar transaction. Mastercard may assign its rights to payments under this Agreement without obtaining Subscriber’s consent. Any attempted assignment of this Agreement in violation of this Section will be null and void. In the event of an assignment by Subscriber, Subscriber shall pay Mastercard any additional agreed professional services fees, one-time deployment fees, or other reasonable costs incurred by the Mastercard Group in connection with the migration of the Hosted Services to the assignee. The parties will negotiate in good faith the scope and the payment terms of any such additional fees.

13.3.  Except for Subscriber’s payment obligations, neither party shall be liable for loss or damage, or for any delay, or failure to perform its obligations under this Agreement, to the extent such loss, damage, delay, or failure is caused by any act of God, natural disaster, fire, strike, embargo, war, threat of terrorism, insurrection, riot, denial of service attack, or other cause or circumstance beyond the reasonable control of the party; provided, however, that the foregoing shall not excuse any failure by such party to take reasonable action to minimize the scope, extent, duration, and adverse effect of any such event.

13.4.  The Mastercard Group shall have the right to mention that Subscriber is a user of the Hosted Services in the Mastercard Group’s press releases, descriptions and communications, and all related promotional and marketing materials at any time, in each case relating to the Hosted Services. Subscriber hereby grants to the Mastercard Group a nonexclusive, worldwide, fully paid-up, nontransferable license, without right of sublicense, to copy, distribute, display, and use any Marks owned or used by Subscriber for the purposes described in this section. All proprietary rights and goodwill associated with the Mastercard Group’s use of the Subscriber’s Marks will inure to the benefit of Subscriber.

13.5.   Nothing in this Agreement is intended to confer any rights or remedies to any persons other than the parties, their permitted successors and assigns, the Mastercard Indemnitees and Subscriber Indemnitees.

13.6.  In the event that any provision of this Agreement conflicts with the law under which this Agreement is to be construed, or is held invalid by a court with jurisdiction over the parties to this Agreement, (a) such provision will be deemed restated to reflect as nearly as possible the original intentions of the parties in accordance with applicable law; and (b) the remaining provisions of this Agreement will remain in full force and effect.

13.7.  The failure of either party to insist upon or enforce strict performance by the other party any provision of this Agreement, or to exercise any right under this Agreement, shall not be construed as a waiver or relinquishment to any extent of such party’s right to assert or rely upon any such provision or right in that or any other instance; rather, the same will be and remain in full force and effect. Neither party will be deemed to have waived any of its rights under this Agreement by lapse of time or by any statement or representation other than by an explicit written waiver. No waiver of a breach of this Agreement will constitute a waiver of any prior or subsequent breach of this Agreement.

13.8.  This Agreement will not be construed in favor of or against either party by reason of authorship. This Agreement, including all attachments, exhibits, constitutes the entire agreement between the parties, and supersedes and replaces all prior or contemporaneous understandings or agreements, written or oral, regarding such subject matter.

13.9.  All notices delivered under this Agreement shall be in writing and deemed to be given (a) when actually received if delivered personally; (b) two (2) days after the date deposited with the U.S. Postal Service if sent by certified or registered mail; and (c) one (1) day after the date delivered to a reputable next-day courier service for overnight delivery. Notices shall be addressed to a party at (1) in the case of Mastercard, c/o Mastercard International Incorporated, 2000 Purchase Street, Purchase New York, 10577 USA, Attention: General Counsel, with a copy to (which shall not constitute notice) c/o Mastercard International Incorporated, 2000 Purchase Street, Purchase New York, 10577 USA, Attention: Rigo Van den Broeck; and (2) in the case of Subscriber, (x) for a Direct Enrollment Subscription, the address set forth in the Enrollment Form, and (y) in all other cases, the most recent address that Mastercard has for such Subscriber in its books and records related to the Hosted Services. Either party may change such address by giving notice in accordance with this Section.

13.10.  Each Party shall maintain adequate insurance or shall self-insure at an appropriate level with respect to the business activities carried out by such Party in the ordinary course. Each Party shall furnish certificates of insurance to the other Party upon reasonable request.

13.11.  References in this Agreement to Purchase Orders are made for reference purposes only in the case of a Reseller Subscription and no terms or conditions contained in any Purchase Order shall be binding upon the Mastercard Group or otherwise apply to the relationship between Subscriber and Mastercard or the transactions contemplated by this Agreement.

13.12.  Except where otherwise specified, the rights and remedies granted to a party subject to this Agreement are cumulative and in addition to, and not in lieu of, any other rights or remedies which a Party may possess at law or in equity.

13.13.  In the event of an inconsistency or conflict between a term in this Agreement and a term contained in an Enrollment Form or ODS Documentation, as applicable in the case of a Direct Enrollment Subscription or Other Direct Subscription, the term in the Enrollment Form or ODS Documentation, as applicable, shall govern.