Anchr
Anchr, Inc.

Master Subscription Agreement

Version
Effective July 22, 2026
Preamble

This Master Subscription Agreement (“Agreement”) is entered into and made effective as of the effective date identified in the applicable Order Form (the “Effective Date”), by and between Anchr, Inc., a Delaware corporation with its notice address set forth in the applicable Order Form ("Anchr"), and the subscriber identified in the applicable Order Form ("Subscriber"), with its notice address set forth in the applicable Order Form.

Anchr has developed certain tools that automate various administrative workflows for food distributors, including logistics, inventory management, procurement, order processing, and customer support functions. Subscriber desires to subscribe to the Anchr Service and Anchr desires to provide access to the Anchr Platform and provide the Anchr Service to Subscriber.

This Agreement sets forth the terms and conditions under which Anchr will provide the Anchr Service (as defined below). Subscriber’s access to and use of the Anchr Service is governed solely by the terms of this Agreement which supersedes the terms of any other prior writing or understanding between the parties.

THE PARTIES HAVE READ AND AGREE TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS AGREEMENT, INCLUDING THOSE TERMS CONTAINED ON THE FOLLOWING PAGES.

The parties have caused this Agreement to be effective as of the Effective Date set forth above.

Terms and Conditions

1.Definitions

As used in this Agreement:

1.1

“Anchr Platform” means the technology, including but not limited to APIs, web applications, microservices, databases, and third party platforms or tools used by Anchr to deliver the Anchr Service to Subscriber.

1.2

“Anchr Service” means the service(s) delivered by Anchr to Subscriber as more fully described in the Order Form.

1.3

“AI Input” means any prompts, instructions, queries, data, content, materials, or other information submitted to the Anchr Service by or on behalf of Subscriber or any User for processing by AI Technology.

1.4

“AI Output” means any response, prediction, recommendation, classification, generated content, automation, analysis, or other output generated by AI Technology through the Anchr Service based on AI Input or Subscriber’s use of the Anchr Service.

1.5

“AI Technology” means any machine learning, artificial intelligence, large language model, generative AI, predictive, algorithmic, automation, or similar technology, models, systems, tools, features, and related software, infrastructure, workflows, prompts, configurations, and know-how used by or on behalf of Anchr to provide, support, improve, or secure the Anchr Service.

1.6

“Confidential Information” has the meaning set forth in Section 5.1 (Confidentiality). Subscriber Data is the Confidential Information of Subscriber. Confidential Information of Anchr includes non-public information derived from or concerning the Anchr Service, the Anchr Platform or the Documentation, provided it is not Subscriber Data or provided to Anchr by or on behalf of Subscriber.

1.7

“Connected Account” means any third-party platform connected to, or integrated with, the Anchr Platform by or on behalf of Subscriber.

1.8

“Connected System Data” means any data collected from, or provided by, any Connected Account. Connected System Data is considered Subscriber Data.

1.9

“Documentation” means any user manuals, handbooks, and online materials provided by Anchr to Subscriber that describe the features, functionality, or operation of the Anchr Platform.

1.10

“Order Form” means any order form for Anchr Service executed by both parties that references this Agreement. The initial Order Form is attached hereto as Exhibit A.

1.11

“Performance Data” means any log files, metadata, telemetry data and other technical performance data automatically generated by the Anchr Platform relating to the use, performance, efficacy, reliability and/or accuracy of the Anchr Platform, which does not contain any personally identifiable information or Subscriber Data. To the extent any Performance Data is later determined to contain Subscriber Data, such data shall be treated as Subscriber Data and subject to the terms governing Subscriber Data under this Agreement.

1.12

“Subscriber Data” means any data uploaded or transmitted to the Anchr Service by or on behalf of Subscriber, including any order information, customer information, text prompts, or other inputs provided by Subscriber to the Anchr Platform.

1.13

“Users” means Subscriber’s employees, representatives, consultants, contractors, or agents authorized by Subscriber to access the Anchr Platform.

2.Anchr Service

2.1

Subscription to the Anchr Platform

Subject to the terms and conditions of this Agreement, Anchr hereby grants to Subscriber, a non-sublicensable, non-transferable (except as provided in Section 11.6 (No Assignment)), non-exclusive subscription to access and use the Anchr Platform solely for Subscriber’s internal business purposes, including by Users, during the subscription period set forth in the applicable Order Form.

2.2

Connected Accounts

In order to access many of the features and functions of the Anchr Service, Subscriber will need to link its Connected Accounts to the Anchr Platform. Subscriber is solely responsible for complying with all Documentation related to the proper setup and integration of Connected Accounts, and Anchr shall not be responsible for any failure of Subscriber to comply with Anchr’s Documentation. By granting Anchr access to any Connected Account, (i) Subscriber represents and warrants that it is entitled to disclose any log-in information provided by Subscriber in connection therewith (if applicable) and/or to grant Anchr access to such Connected Accounts, (ii) Subscriber represents and warrants that it is in good standing with respect to such Connected Accounts, and (iii) Subscriber acknowledges that Anchr may access Connected System Data so that it may be used in accordance with the terms of this Agreement. Subscriber further acknowledges and agrees that each Connected Account, including access to and use thereof and uptimes related thereto, is solely determined by the applicable provider of the relevant Connected Account. Anchr will have no liability for any unavailability of any Connected Account, or any third-party provider’s decision to discontinue, suspend or terminate any Connected Account.

2.3

Restrictions

Subscriber's access to and use of the Anchr Platform and the Anchr Service is subject to the use restrictions set forth in Section 3.2 (Restrictions).

2.4

Changes to the Anchr Service

Anchr may modify, enhance, replace, or discontinue features of the Anchr Service from time to time; provided that Anchr will not materially reduce the core functionality of the Anchr Service purchased by Subscriber during the then-current subscription term, except where required for security, legal compliance, or third-party dependency changes.

3.Subscriber’s Use of the Anchr Platform

3.1

Access and Security Guidelines

Each User will be provided access to and use of the Anchr Platform through confidential account credentials. Subscriber will be responsible for all uses of its account, except to the extent caused by Anchr’s negligence or attributable to Anchr. Subscriber will promptly notify Anchr upon becoming aware of any unauthorized use or access to its account. User seats may not be shared amongst other Users.

3.2

Restrictions

Subscriber will not, and will not permit any User or other party to: (i) reverse engineer, disassemble or decompile any component of the Anchr Platform; (ii) interfere in any manner with the operation of the Anchr Service, or the Anchr Platform or the hardware and network used to operate the Anchr Service; (iii) sublicense any of Subscriber’s rights under this Agreement, or otherwise use the Anchr Platform for the benefit of a third party or to operate a service bureau; (iv) modify, copy or make derivative works based on any part of the Anchr Platform; (v) use AI Output as the sole basis for any legally significant, safety-critical, financial, employment, or other material decision without appropriate human review and independent verification; or (vi) otherwise use the Anchr Service in any manner that exceeds the scope of use permitted under Section 2.1 (Subscription to the Anchr Platform).

3.3

AI Use and Human Oversight

Subscriber's access to and use of AI Technology, AI Input, and AI Output is subject to the AI Addendum attached as Exhibit E, which is incorporated into this Agreement by reference. In the event of a conflict between Exhibit E and the body of this Agreement with respect to AI Technology, Exhibit E controls. Without limiting the foregoing, Subscriber will implement and maintain reasonable human review procedures appropriate to the relevant workflow and risk level, and will not rely on AI Output as the sole basis for any legally significant, safety-critical, financial, employment, or other material decision without appropriate human review and independent verification.

4.Fees, Payment and Suspension of Services

Subscriber will pay Anchr the fees for the Anchr Service as set forth on the applicable Order Form (“Fees”). Unless otherwise stated in the applicable Order Form, all Fees shall be invoiced on a monthly basis and shall be due within thirty (30) days after receipt of invoice. All Fees owed by Subscriber in connection with this Agreement are exclusive of, and Subscriber shall pay, all sales, use, excise and other taxes and applicable export and import fees, customs duties and similar charges that may be levied upon Subscriber in connection with this Agreement, except for employment taxes and taxes based on Anchr’s income. The Fees for the initial renewal term, including any transition to Anchr’s then-current standard pricing, will be stated in the applicable Order Form. If the applicable Order Form does not state such Fees, Anchr may set the Fees for the initial renewal term by providing no less than thirty (30) days prior written notice. Unless otherwise stated in the applicable Order Form, any Fee increase for a subsequent renewal term will not exceed the greater of five percent (5%) or the amount of inflation during the previous year as measured by the Consumer Price Index. Notwithstanding the foregoing, Anchr may adjust the Fees to reflect any material increase in scope, usage, seats, transaction volume, or services. Anchr reserves the right (in addition to any other rights or remedies Anchr may have) to discontinue the Anchr Service and suspend Subscriber’s access to the Anchr Service if, upon thirty (30) days’ prior written notice of late payment, any undisputed Fees set forth in the applicable Order Form remain more than thirty (30) days overdue until such amounts are paid in full. Subscriber shall maintain complete, accurate and up-to-date Subscriber billing and contact information.

4.1

Suspension for Security or Legal Risk

In addition to Anchr's suspension rights for non-payment, Anchr may suspend access to the Anchr Service immediately, in whole or in part, if Anchr reasonably determines that Subscriber's or any User's use poses a security risk to the Anchr Service or any third party, may violate applicable law, may expose Anchr or others to liability, or materially interferes with the operation of the Anchr Service. Anchr will use commercially reasonable efforts to limit any such suspension to the affected portion of the Anchr Service and to restore access promptly after the underlying issue is resolved.

5.Confidential Information

5.1

Confidentiality

In connection with this Agreement, each party (as the “Disclosing Party”) may disclose or make available Confidential Information to the other party (as the “Receiving Party”). Subject to 5.2 (Exclusions), “Confidential Information” means information in any form or medium (whether oral, written, electronic, or other) that the Disclosing Party considers confidential or proprietary, including information consisting of or relating to the Disclosing Party’s technology, trade secrets, know-how, business operations, plans, strategies, customers, pricing, and information with respect to which the Disclosing Party has contractual or other confidentiality obligations, in each case whether or not marked, designated, or otherwise identified as “confidential”. Without limiting the foregoing, (i) all Subscriber Data (including all personal information) is and will remain the Confidential Information of Subscriber; and (ii) the terms of this Agreement are the Confidential Information of both parties.

5.2

Exclusions

Subject to 5.3 (Subscriber Data Exception), Confidential Information does not include information that: (i) was rightfully known to the Receiving Party without restriction on use or disclosure prior to such information’s being disclosed or made available to the Receiving Party in connection with this Agreement; (ii) was or becomes generally known by the public other than by the Receiving Party’s or any of its representatives’ noncompliance with this Agreement; (iii) was or is received by the Receiving Party on a non-confidential basis from a third party that was not or is not, at the time of such receipt, under any obligation to maintain its confidentiality; or (iv) was or is independently developed by the Receiving Party without reference to or use of any Confidential Information.

5.3

Subscriber Data Exception

Notwithstanding the provisions of 5.2 (Exclusions) or any other provisions of this Agreement, none of the exclusions set forth in Section 5.2 apply to any Subscriber Data, regardless of whether such Subscriber Data may be publicly available or otherwise qualify for exclusion under any of the other provisions of Section 5.2.

5.4

Confidentiality and Use

Each Receiving Party recognizes and agrees that the Confidential Information of the Disclosing Party is critical to the Disclosing Party’s business and that neither party would enter into this Agreement without assurance that such information and its value will be protected as provided in this Section 5 (Confidential Information) and elsewhere in this Agreement.

5.5

Compelled Disclosures

If the Receiving Party or any of its representatives is compelled by applicable law to disclose any Confidential Information, then, to the extent permitted by applicable law, the Receiving Party shall: (i) promptly, and prior to such disclosure, notify the Disclosing Party in writing of such requirement so that the Disclosing Party can seek a protective order or other remedy, or waive its rights under 5.4 (Confidentiality and Use); and (ii) provide reasonable assistance to the Disclosing Party, at the Disclosing Party’s sole cost and expense, in opposing such disclosure or seeking a protective order or other limitations on disclosure. If the Disclosing Party waives compliance or, after providing the notice and assistance required under this section, the Receiving Party remains required by law to disclose any Confidential Information, the Receiving Party shall disclose only that portion of the Confidential Information that, on the advice of the Receiving Party’s legal counsel, the Receiving Party is legally required to disclose and, shall use commercially reasonable efforts to obtain assurances from the applicable court or other presiding authority that such Confidential Information will be afforded confidential treatment. No such compelled disclosure by the Receiving Party will otherwise affect the Receiving Party’s obligations hereunder with respect to the Confidential Information so disclosed.

5.6

Return or Destruction of Confidential Information

Upon the Disclosing Party’s written request and subject to any contrary obligations under applicable law, the Receiving Party shall, within thirty (30) days of such request, at the Disclosing Party’s direction promptly return or destroy and erase from all systems it directly or indirectly uses or controls (i) all originals and copies of all documents, materials, and other embodiments and expressions in any form or medium that contain, reflect, incorporate, or are based on the Disclosing Party’s Confidential Information, in whole or in part; or (ii) solely such specific data, databases, or other collections or articles of the Disclosing Party’s Confidential Information as the Disclosing Party may request. Notwithstanding the foregoing, the Receiving Party is not required to erase Confidential Information residing in routine, secure backup or archival systems that are not readily accessible in the ordinary course; such Confidential Information will instead be rendered inaccessible through cryptographic erasure or comparable controls and will be deleted in the ordinary course upon expiration of the Receiving Party's standard backup retention cycle, and it will remain subject to the confidentiality obligations of this Agreement until so deleted. Subscriber Data will be deleted, returned, or exported in accordance with Section 7.2 (Termination), the Data Processing Addendum, and any applicable Order Form or addendum. Each Receiving Party shall maintain the confidentiality of all Confidential Information of the Disclosing Party for a period of five (5) years from the date of termination of this Agreement and shall protect all trade secrets for as long as such information qualifies as a trade secret under applicable law.

6.Ownership and Data

6.1

Anchr Platform and Technology

Subscriber acknowledges that Anchr retains all right, title and interest in and to the Anchr Platform, AI Technology, and all software and all Anchr proprietary information and technology used by Anchr or provided to Subscriber in connection with the Anchr Service (the “Anchr Technology”), and that the Anchr Technology and AI Technology are protected by intellectual property rights owned by or licensed to Anchr. Other than as expressly set forth in this Agreement, no license or other rights in the Anchr Technology or AI Technology are granted to Subscriber. Subscriber hereby grants Anchr a royalty-free, worldwide, sublicensable (solely to Anchr's service providers), irrevocable, perpetual license to use or incorporate into the Anchr Service any suggestions, enhancement requests, recommendations or other feedback provided by Subscriber, including Users, relating to the Anchr Service. Anchr shall not identify Subscriber as the source of any such feedback.

6.2

Subscriber Data

Subscriber retains all right, title and interest in and to the Subscriber Data. As between the parties and subject to Anchr’s ownership of the Anchr Technology and AI Technology, Subscriber owns AI Output generated from Subscriber’s AI Input through the Anchr Service; provided that Subscriber acknowledges that AI Technology may generate similar or identical output for different users based on similar or identical input, and nothing in this Agreement grants Subscriber exclusive rights in any AI Output or prevents Anchr from generating similar output for other subscribers. Subscriber hereby grants to Anchr a limited, non-exclusive, worldwide, royalty-free and fully paid-up license during the Term to access and use Subscriber Data, AI Input, and AI Output solely as necessary to provide, maintain, secure, support, and troubleshoot the Anchr Service for Subscriber. Anchr may use only properly aggregated or de-identified data that does not identify and cannot reasonably be used to identify Subscriber, any of its customers, or any User for limited internal improvement of the performance, reliability, and safety of the Anchr Service. Anchr shall not sell, license, commercialize, or otherwise disclose Subscriber Data, AI Input, or AI Output, including aggregated or de-identified forms thereof, except to service providers as necessary to provide the Anchr Service and subject to this Agreement and the Data Processing Addendum. The license in this Section 6.2 does not survive termination, except with respect to data irreversibly aggregated or de-identified before termination. Anchr will not use Subscriber Data, AI Input, AI Output, or aggregated or de-identified data derived from any of them to train, fine-tune, validate, improve, or modify any machine-learning or AI model unless Subscriber expressly opts in by prior written authorization. For the avoidance of doubt, the foregoing does not restrict Anchr's use of Performance Data in accordance with Section 6.6. Subscriber represents and warrants that it has all necessary rights to grant Anchr the foregoing licenses.

6.3

Data Security

Anchr currently utilizes Google Cloud Platform (GCP) and Supabase, reputable hosting services providers, to store all Subscriber Data; provided, that, Anchr may utilize other hosting service providers of similar repute and with materially equivalent data security standards, such as Microsoft Azure; provided that Anchr must provide Subscriber written notice at least thirty (30) days prior to using any such other hosting service providers (or such shorter period as is reasonably necessary to address urgent security or operational concerns). Notwithstanding the use of hosting service providers, Anchr must: implement code, access controls, encryption, and other protocols designed to secure the Anchr Platform; manage and protect Subscriber Data within the Anchr Platform; and configure, operate, and secure the Anchr Platform in such a manner designed to prevent Security Breaches (defined below), unauthorized access, or misuse of the Anchr Platform. Anchr shall maintain commercially reasonable administrative, technical, and organizational security measures consistent with industry standards. Anchr is currently undergoing a SOC 2 audit process for the Anchr Service and, upon completion and subject to customary confidentiality restrictions, will make available to Subscriber a summary of its then-current SOC 2 report or equivalent third-party security assessment upon written request no more than once per twelve (12) months. Until such report is available, Anchr will provide commercially reasonable security information, including completion of a written security questionnaire, sufficient to demonstrate its security controls.

6.4

Security Breach

In the event Anchr becomes aware of any loss or unauthorized access, disclosure or use of any Subscriber Data (“Security Breach”), Anchr will (i) notify Subscriber in writing within seventy-two (72) hours of becoming aware of such Security Breach, and (ii) at Anchr’s cost and expense, take reasonable steps to identify the cause of such Security Breach, minimize the harm associated therewith and prevent reoccurrence thereof. Any notification of any Security Breach will describe, to the extent known, details of the Security Breach, including steps taken to mitigate the potential risks.

6.5

Data Processing Addendum

To the extent Anchr processes personal data on behalf of Subscriber in providing the Anchr Service, the parties will comply with the Data Processing Addendum attached as Exhibit D and incorporated by reference. Exhibit D will address, as applicable, the parties’ data protection roles, processing instructions, assistance obligations, subprocessors, cross-border transfer mechanisms, and Standard Contractual Clauses or other transfer safeguards required by applicable data protection laws.

6.6

Performance Data

Anchr retains all right, title and interest in and to the Performance Data, and may use Performance Data for its internal business purposes, including product improvement, benchmarking, and analytics; provided that Anchr shall not sell or license Performance Data to any third party in a manner that identifies or is reasonably likely to identify Subscriber.

6.7

Anchr Internal-Use License

Notwithstanding Anchr's assignment of AI Output under Exhibit E and Subscriber's ownership of Subscriber Data and AI Output, Subscriber grants Anchr a limited, non-exclusive, worldwide, royalty-free license during the Term to retain and use Subscriber Data, AI Input, and AI Output solely as necessary to provide, secure, support, and troubleshoot the Anchr Service. Anchr may use only properly aggregated or de-identified data that does not identify and cannot reasonably be used to identify Subscriber, any of its customers, or any User for limited internal improvement of the performance, reliability, and safety of the Anchr Service. For the avoidance of doubt, this license does not override Anchr’s deletion obligations under Section 7.2 or the Data Processing Addendum, does not authorize sale, licensing, commercialization, or other disclosure of Subscriber Data, AI Input, or AI Output, and does not survive termination except for data irreversibly aggregated or de-identified before termination. Anchr will exercise this license in accordance with the confidentiality obligations in Section 5 and will not use Subscriber Data, AI Input, or AI Output, including aggregated or de-identified forms thereof, to train, fine-tune, validate, improve, or modify any machine-learning or AI model unless Subscriber expressly opts in by prior written authorization.

7.Term and Termination

7.1

Term

The term of this Agreement will commence on the Effective Date and continue until all Order Forms have expired, unless terminated earlier in accordance with the terms of this Agreement (the "Term"). Unless otherwise set forth in an Order Form or otherwise in this Agreement, each Order Form will have an initial term of one (1) year (the "Initial Order Term"), and will automatically renew for successive one (1) year terms (each, a "Renewal Order Term" and collectively with the Initial Order Term, the "Order Term"), unless either party provides no less than thirty (30) days written notice of its intent to terminate the Order prior to the end of the then-current term.

7.2

Termination

Either party may terminate this Agreement upon written notice if the other party materially breaches the Agreement and does not cure such breach (if curable) within thirty (30) days after written notice of such breach. Upon the expiration or termination of this Agreement for any reason, (i) any amounts owed to Anchr under this Agreement will become immediately due and payable; and (ii) each party will return to the other all property (including any Confidential Information) of the other party. Anchr will delete Subscriber Data from production systems within thirty (30) days after expiration or termination, subject to applicable legal holds and retention obligations, routine backup retention, the Data Processing Addendum, and any export period expressly granted in an applicable Order Form or addendum. No post-termination data-export period or export right applies unless expressly granted in an applicable Order Form or addendum. If such an export period is expressly granted, Anchr will make Subscriber Data then available in the Anchr Platform available for export during that period in Anchr’s then-current standard export format, subject to Subscriber’s payment of all undisputed Fees then due. Upon Subscriber’s reasonable written request, Anchr may provide transition assistance, including negotiated enterprise export assistance, at Anchr’s then-current professional services rates or as otherwise agreed in writing; provided that Anchr will have no obligation to provide transition assistance to a Subscriber whose account is suspended, terminated for uncured payment default, or delinquent in payment of undisputed Fees unless Subscriber first pays all undisputed amounts then due. Anchr is not required to create, maintain, or provide a customer-facing export API or custom export functionality unless expressly agreed in an Order Form, addendum, or SOW. Subscriber Data retained under a legal hold or retention obligation or in routine backups will remain protected under this Agreement and the Data Processing Addendum and will be deleted when the applicable hold, obligation, or standard backup retention cycle ends. To the extent Anchr uses third-party or AI model providers to process Subscriber Data, AI Input, or AI Output, Anchr will configure such providers for zero data retention or equivalent non-retention settings only to the extent such settings are made available by and supported by the applicable provider for the relevant service. Anchr shall use commercially reasonable efforts to select providers that support zero-retention or equivalent settings, and shall disclose to Subscriber upon request any AI model providers that do not support such settings. Sections 1 (Definitions), 5 (Confidential Information), 6 (Ownership and Data), 7.2 (Termination), 8.3 (Disclaimer), 9 (Indemnity), 10 (Limitation of Liability), and 11 (General Provisions) will survive the termination of this Agreement.

7.3

Termination for Insolvency

Either party may terminate this Agreement upon written notice if the other party (i) becomes insolvent; (ii) makes a general assignment for the benefit of creditors; (iii) files or has filed against it a petition in bankruptcy or similar proceeding that is not dismissed within sixty (60) days; or (iv) ceases to conduct business in the ordinary course.

8.Warranty; Disclaimer

8.1

Mutual Warranty

Each party represents and warrants that (i) it has the legal power and authority to enter into this Agreement; (ii) it will comply with any and all applicable laws, rules and regulations with respect to its performance of its obligations, and exercise of rights granted to it, hereunder; and (iii) it is not bound by any agreement with any third party that would prohibit or interfere with its ability to perform its obligations hereunder.

8.2

Anchr Limited Warranty

Anchr warrants that during the applicable subscription term (i) the Anchr Service will perform in all material respects in accordance with the Documentation; and (ii) Anchr will provide the Anchr Service in a professional and workmanlike manner. Subscriber's exclusive remedy, and Anchr's sole liability, for breach of this Section 8.2 will be for Anchr to use commercially reasonable efforts to correct the non-conformity or, if Anchr is unable to do so within a reasonable period, to terminate the affected Order Form and refund the prepaid Fees attributable to the remaining terminated portion of the applicable subscription term.

8.3

Disclaimer

Except as expressly provided in Section 8 (WARRANTY; DISCLAIMER), and to the maximum extent permitted by applicable law: (i) the Anchr Service, Anchr Platform, Documentation, AI Technology, and AI Output are provided “as is” and “as available”; (ii) Anchr and its suppliers make no other warranties, express or implied, by operation of law or otherwise, including, without limitation, any implied warranties of merchantability or fitness for a particular purpose; and (iii) Anchr does not warrant that any AI Output will be accurate, complete, reliable, current, non-infringing, or fit for Subscriber’s intended purpose. Subscriber acknowledges that AI Technology may generate probabilistic, incomplete, inaccurate, or unexpected AI Output and that Subscriber is solely responsible for reviewing, validating, and determining the suitability of AI Output before using or relying on it.

9.Indemnity

9.1

By Anchr

Anchr shall defend Subscriber, from and against any and all third party claims, demands, actions arising out of or relating to any claim that the Anchr Service or Anchr Platform technology, when used in accordance with this Agreement, infringes, misappropriates, or otherwise violates any intellectual property rights or proprietary rights of any third party and shall pay all damages attributable to such claim which are finally awarded against Subscriber or paid in settlement of such claim. Notwithstanding the foregoing, Anchr will not have any obligation under this Section 9.1 to the extent such claim is based on or arises from: (a) Subscriber Data, AI Input, AI Output, or other data, content, or materials provided by or on behalf of Subscriber; (b) Subscriber’s use of, reliance on, publication of, or other exploitation of AI Output, including where Subscriber acts without the human review or validation required by this Agreement; (c) any modification of the Anchr Service or Anchr Platform by Subscriber or any third party, except as authorized or performed by Anchr; (d) Subscriber’s combination of the Anchr Service or Anchr Platform with any third-party products, services, data, or materials not provided by Anchr; (e) Subscriber’s continued use of the Anchr Service after Anchr has provided a non-infringing modified or replacement version that would have avoided the claim; (f) Subscriber’s unauthorized use of the Anchr Service or use in violation of this Agreement or the Documentation; or (g) open-source software or third-party components not supplied or controlled by Anchr. If the Anchr Service or Anchr Platform is enjoined or, in Anchr’s determination is likely to be enjoined, Anchr shall, at its option and expense (i) procure for Subscriber the right to continue using the Anchr Service, (ii) modify, replace, or re-license the Anchr Platform or Anchr Service so that it is no longer infringing but continues to provide comparable functionality, or (iii) terminate this Agreement and Subscriber’s access to the Anchr Service and refund any prepaid Fees attributable to the unused remainder of the then-current term. This Section sets forth the sole and exclusive remedies of Subscriber and the entire obligation of Anchr for any claim that the Anchr Service infringes a third party’s intellectual property rights.

9.2

By Subscriber

If any action is instituted by a third party against Anchr relating to (a) any claim that the Subscriber Data, AI Input, AI Output, or other data, content, or materials provided by or on behalf of Subscriber infringes upon, or misappropriates, any third party’s rights, including intellectual property rights, (b) Subscriber’s use of, reliance on, publication of, or other exploitation of AI Output, including where Subscriber acts without the human review or validation required by this Agreement, or (c) Subscriber’s use of the Anchr Service in violation of this Agreement, Subscriber will defend such action at its own expense on behalf of Anchr and shall pay all damages attributable to such claim which are finally awarded against Anchr or paid in settlement of such claim. This subsection states the sole and exclusive remedy of Anchr and the entire liability of Subscriber for the claims and actions described herein.

9.3

Procedure

Any party that is seeking to be indemnified under the provision of this Section 9 (Indemnity) must (i) promptly notify the other party (the “Indemnifying Party”) of any third-party claim, suit, or action for which it is seeking an indemnity hereunder (a “Claim”), (ii) give the Indemnifying Party the sole control over the defense of the Claim, and (iii) provide reasonable cooperation to the Indemnifying Party in the defense and settlement of such Claim at the Indemnifying Party's expense. The Indemnifying Party shall not settle any Claim in a manner that imposes any liability, admission of fault, or obligation on the indemnified party without such party's prior written consent (not to be unreasonably withheld). Failure to promptly notify the Indemnifying Party shall not relieve the Indemnifying Party of its obligations except to the extent it is materially prejudiced by such failure.

10.Limitation of Liability

To the extent permitted by law, in no event shall Anchr or Subscriber be liable for special, incidental, consequential or punitive damages or lost profits in any way relating to this Agreement, including with respect to a party's breach of Section 5 (Confidential Information) or Anchr’s obligations under Section 6.4 (Security Breach), except to the extent a limitation of such liability is prohibited by applicable law. In no event shall Anchr’s or Subscriber’s aggregate, cumulative liability under this Agreement exceed the amount of fees actually received by Anchr from Subscriber pursuant to the applicable Order Form or Statement of Work during the twelve (12) months preceding the claim (the “general cap”). For clarity, the general cap applies to all claims arising from a breach of Section 5 (Confidential Information) and Anchr’s obligations under Section 6.4 (Security Breach). Each party’s aggregate, cumulative liability for its third-party indemnity obligations under Section 9 (Indemnity) shall not exceed two (2) times the amount of fees actually received by Anchr from Subscriber pursuant to the applicable Order Form or Statement of Work during the twelve (12) months preceding the claim (the “indemnity cap”). For claims arising from gross negligence, willful misconduct, or fraud, the cap otherwise applicable to the underlying claim under this Section 10 will apply, except to the extent a limitation of such liability is prohibited by applicable law. For clarity, Section 9 applies only to third-party claims and does not create an uncapped first-party indemnity or reimbursement obligation. The parties acknowledge that the limitations of liability set forth in this Section 10 (Limitation of Liability) are a fundamental basis of the bargain between the parties, and that neither party would have entered into this Agreement without such limitations. The general cap and indemnity cap are not cumulative, and the applicable cap is an aggregate ceiling for all claims and liabilities to which it applies. In no event shall either party’s aggregate, cumulative liability under this Agreement exceed the indemnity cap, except to the extent a limitation is prohibited by applicable law.

11.General Provisions

11.1

Governing Law and Venue

This Agreement and any action related thereto will be governed and interpreted by and under the laws of the State of Delaware, without giving effect to any conflicts of laws principles that require the application of the law of a different jurisdiction. Subscriber hereby expressly consents to the exclusive personal jurisdiction and venue in the state and federal courts located in Wilmington, Delaware. The United Nations Convention on Contracts for the International Sale of Goods does not apply to this Agreement. EACH PARTY HEREBY IRREVOCABLY WAIVES ALL RIGHT TO TRIAL BY JURY IN ANY ACTION, PROCEEDING, OR COUNTERCLAIM ARISING OUT OF OR RELATING TO THIS AGREEMENT.

11.2

Export

Subscriber agrees not to export, reexport, or transfer, directly or indirectly, any U.S. technical data acquired from Anchr, or any products utilizing such data, in violation of the United States export laws or regulations.

11.3

Severability

If any provision of this Agreement is, for any reason, held to be invalid or unenforceable, the other provisions of this Agreement will remain enforceable and the invalid or unenforceable provision will be deemed modified so that it is valid and enforceable to the maximum extent permitted by law. Without limiting the generality of the foregoing, the parties agree that Section 10 (Limitation of Liability) will remain in effect notwithstanding the unenforceability of any provision in Section 8.2 (Anchr Limited Warranty).

11.4

Waiver

Any waiver or failure to enforce any provision of this Agreement on one occasion will not be deemed a waiver of any other provision or of such provision on any other occasion.

11.5

Remedies

Except as provided in Section 8.2 (Anchr Limited Warranty) and Section 9 (Indemnity), the parties’ rights and remedies under this Agreement are cumulative. Subscriber acknowledges that the Anchr Service and Anchr Technology contain valuable trade secrets and proprietary information of Anchr, that any actual or threatened breach of Section 3.2 (Restrictions) or Section 5 (Confidential Information) or any other breach by Subscriber of its obligations with respect to intellectual property rights of Anchr will constitute immediate, irreparable harm to Anchr for which monetary damages would be an inadequate remedy. In such case, Anchr will be entitled to immediate injunctive relief without the requirement of posting bond. If any legal action is brought by Anchr to enforce this Agreement, Anchr will be entitled to receive its attorneys’ fees, court costs, and other collection expenses, in addition to any other relief it may receive.

11.6

No Assignment

Neither party shall assign, subcontract, delegate, or otherwise transfer this Agreement, or its rights and obligations herein, without obtaining the prior written consent of the other party, and any attempted assignment, subcontract, delegation, or transfer in violation of the foregoing will be null and void; provided, further, that either party may assign this Agreement in connection with a merger, acquisition, reorganization or sale of all or substantially all of its assets, or other operation of law, without the consent of the other party; provided, however, that Subscriber may not assign this Agreement to a direct competitor of Anchr without Anchr's prior written consent. The terms of this Agreement shall be binding upon the parties and their respective successors and permitted assigns.

11.7

Force Majeure

Any delay in the performance of any duties or obligations of either party will not be considered a breach of this Agreement if such delay is caused by a labor dispute, shortage of materials, fire, earthquake, flood, or any other event beyond the control of such party, provided that such party uses reasonable efforts, under the circumstances, to notify the other party of the cause of such delay and to resume performance as soon as possible. For the avoidance of doubt, this Section 11.7 shall not excuse or delay either party's obligation to make payments due under this Agreement. If a Force Majeure event continues for a period of more than one hundred twenty (120) consecutive days, either party may terminate this Agreement upon thirty (30) days' prior written notice to the other party, without liability to either party for such termination (other than for payment obligations accrued prior to the effective date of termination).

11.8

Independent Contractors

Subscriber’s relationship to Anchr is that of an independent contractor, and neither party is an agent or partner of the other. Subscriber will not have, and will not represent to any third party that it has, any authority to act on behalf of Anchr.

11.9

Notices

Other than notices of non-renewal of the Agreement or any Order Form, which may be delivered via email, each party must deliver all notices or other communications required or permitted under this Agreement in writing to the other party at the address listed on the first page of the Agreement by courier, by certified or registered mail (postage prepaid and return receipt requested), or by a nationally-recognized express mail service. Notice will be effective upon receipt or refusal of delivery. If delivered by certified or registered mail, any such notice will be considered to have been given five (5) business days after it was mailed, as evidenced by the postmark. If delivered by courier or express mail service, any such notice shall be considered to have been given on the delivery date reflected by the courier or express mail service receipt. Each party may change its address for receipt of notice by giving notice of such change to the other party.

11.10

Counterparts

This Agreement may be executed in one or more counterparts, each of which shall be deemed an original and all of which shall be taken together and deemed to be one instrument.

11.11

Order of Precedence

In the event of any conflict among the documents forming part of this Agreement, the following order of precedence shall apply: (a) Order Forms (solely with respect to such Order Form's subject matter); (b) exhibits, schedules, or addenda (excluding Order Forms); (c) this Agreement; and (d) Documentation. Provisions in lower-priority documents addressing matters not covered by higher-priority documents remain in effect.

11.12

Custom Products

From time to time during the Term, Subscriber may request that Anchr develop custom deliverables that are not part of the standard Anchr Service (each, a "Custom Product"). Each Custom Product engagement shall be documented in a mutually executed statement of work ("SOW") setting forth the specifications, fees, timeline, and acceptance criteria, and shall be subject to the additional terms set forth in Exhibit C (Custom Products). Ownership of any Custom Products shall be as set forth in any Exhibit C. Notwithstanding the foregoing, Anchr shall retain all right, title, and interest in and to any pre-existing intellectual property, tools, libraries, frameworks, methodologies, or know-how owned or developed by Anchr prior to or independently of the applicable SOW.

11.13

Publicity

With Subscriber’s prior written consent, Anchr may identify Subscriber by name and logo as a customer of Anchr, and reference Subscriber as a customer, in Anchr’s marketing materials, website, and customer lists. Subscriber may revoke such consent upon written notice, after which Anchr will cease further use of Subscriber’s name and logo within a commercially reasonable period. Neither party will issue any press release regarding this Agreement or the parties’ relationship without the other party’s prior written consent.

11.14

Entire Agreement

This Agreement is the final, complete and exclusive agreement of the parties with respect to the subject matters hereof and supersedes and merges all prior discussions between the parties with respect to such subject matters. No modification of or amendment to this Agreement, or any waiver of any rights under this Agreement, will be effective unless in writing and signed by an authorized signatory of Subscriber and Anchr.

11.15

Insurance

During the Term, Anchr shall maintain, at its own expense: (a) commercial general liability insurance; (b) technology errors and omissions / cyber liability insurance; and (c) such other insurance as required by applicable law, in each case with coverage and limits commercially reasonable for Anchr’s business and the risks associated with providing the Anchr Service. Upon Subscriber's written request, Anchr shall provide certificates of insurance evidencing the foregoing coverages.

Exhibit B

Service Level Agreement

1.Definitions

The following capitalized terms will have the definitions set forth below:

1.1

“Force Majeure” means any act, event, or occurrence beyond Anchr’s reasonable control, including, without limitation, outages or issues with upstream providers or network carriers, acts of God, fires, floods, storms, landslides, epidemics, lightning, earthquakes, drought, blight, famine, quarantine, blockade, governmental acts or inaction, war, insurrection or civil strife, sabotage, explosions, labor strikes and work stoppages not specific to Anchr, and acts of terror.

1.2

“Normal Business Hours” means 9:00 a.m. to 5:00 p.m. Eastern Time Monday through Friday, excluding holidays.

1.3

“Scheduled Downtime” means the total amount of time during any calendar month, measured in minutes, during which Subscriber is not able to access the Service due to planned system maintenance performed by Anchr. Anchr will exercise reasonable efforts to perform scheduled system maintenance between the hours of 8:00 p.m. and 3:00 a.m. Eastern Time. Anchr will provide Subscriber with reasonable prior notice of such Scheduled Downtime.

1.4

"Service" means the Anchr Service as defined in Section 1.2 of this Agreement.

1.5

“Total Monthly Time” means the total minutes in the relevant calendar month less Scheduled Downtime. For any partial calendar month during which Subscriber subscribes to the Service, availability will be calculated based only on the portion of the calendar month during which Subscriber was subscribed to the Service.

1.6

“Unscheduled Downtime” means the total amount of time during any calendar month, measured in minutes, during which the Subscriber is not able to access the features and functions of the Service, other than Scheduled Downtime, as defined above. Unscheduled Downtime shall not include any period during which the Service is unavailable as a result of (i) non-compliance by Subscriber with any provision of this Service Level Agreement; (ii) incompatibility of Subscriber’s equipment or software with the Service; (iii) actions or inactions of Subscriber or third parties; (iv) Subscriber’s use of the Service after Anchr has advised Subscriber to modify its use of the Service, if Subscriber did not modify its use as advised; (v) acts or omissions of Subscriber or Subscriber’s employees, agents, contractors, or vendors, or anyone gaining access to the Service by means of Subscriber’s passwords or equipment; (vi) performance of Subscriber’s systems or the Internet; (vii) any systemic Internet failures; (viii) network unavailability or Subscriber’s bandwidth limitations; (ix) Scheduled Downtime; or (x) any Force Majeure event (as defined above).

1.7

“System Availability” means, with respect to any particular calendar month, the ratio obtained by subtracting Unscheduled Downtime during such month from the Total Monthly Time, and thereafter dividing the difference so obtained by the Total Monthly Time. Represented algebraically, System Availability for any particular calendar month is determined as follows:

System Availability = (Total Monthly Time − Unscheduled Downtime) ÷ Total Monthly Time

2.System Performance

2.1

System Availability

Anchr will undertake commercially reasonable measures to ensure that System Availability equals or exceeds ninety-nine point five percent (99.5%) during each calendar month (the “Service Standard”).

2.2

Access to Support; Response Times

Subscriber may report Unscheduled Downtime at any time (“24x7x365”) by sending Anchr an e-mail to support@anchr.tech. During Normal Business Hours, Anchr will exercise commercially reasonable efforts to respond to reports of Unscheduled Downtime within thirty (30) minutes of each such report.

2.3

System Monitoring and Measurement

Anchr uses a third party service provider (“Monitoring Service Provider”) to monitor System Availability on an ongoing basis. All measurements of System Availability will be calculated on a monthly basis for each calendar month during the Term based on the records of such Monitoring Service Provider. The Monitoring Service Provider’s records regarding System Availability will be final and each party agrees not to dispute such records, except in the case of manifest error. As of the effective date of the Agreement, Anchr uses UptimeKuma as its Monitoring Service Provider; provided, however that Anchr reserves the right to switch to a different Monitoring Service Provider upon reasonable prior written notice to Subscriber.

3.Subscriber Requirements

Subscriber is responsible for maintenance and management of its computer network(s), servers, and software, and any equipment or services related to maintenance and management of the foregoing. Subscriber is responsible for correctly configuring its systems in accordance with any instructions provided by Anchr, as may be necessary for provision of access to the features and functions of the Service.

4.Remedy

4.1

Credits Against Fees

In the event Unscheduled Downtime occurs, Subscriber will be entitled to credits against its subsequent payment obligations (as set forth in the Agreement) (“Service Credits”) according to the following table:

Subscriber’s rights under this Section 4.1 are Subscriber’s sole and exclusive remedy with respect to any Unscheduled Downtime or any failure by Anchr to meet the Service Standard required by Section 2.1.

Service AvailabilityCredit as a Percentage of Monthly Billing
Less than 99.5% and equal or higher than 99.0%5%
Less than 99.0% and equal or higher than 95.0%10%
Less than 95.0%25%
4.2

Maximum Service Credits

The maximum amount of Service Credits that Anchr will issue to Subscriber for Unscheduled Downtime in a single calendar month will not exceed twenty five percent (25%) of the monthly billing for such month.

4.3

Requesting Service Credits

As a condition to Anchr’s obligation to provide Service Credits to Subscriber, Subscriber must request such Service Credits by sending an e-mail identifying the date and time of the Unscheduled Downtime for which Subscriber is requesting Service Credits, with sufficient evidence (including description of the incident and duration of the incident) to support@anchr.tech within thirty (30) days following such Unscheduled Downtime. If Subscriber fails to request any Service Credits to which Subscriber is entitled in accordance with this Section 4.3, Anchr will have no obligation to issue such Service Credits to Subscriber.

Exhibit C

Custom Products

1.Definitions

"Specifications" means the requirements for a Custom Product as set forth in the applicable SOW.

2.Intellectual Property

Anchr retains all right, title, and interest in the Anchr Platform, Anchr Technology, and any pre-existing IP, tools, or know-how owned or developed by Anchr independently of any Custom Product ("Anchr Pre-Existing Technology"). Unless otherwise specified in the applicable SOW, Anchr shall retain all right, title, and interest in and to each Custom Product, and hereby grants Subscriber a non-exclusive, perpetual, irrevocable, royalty-free, worldwide license to use each Custom Product solely for Subscriber's internal business purposes. Anchr grants Subscriber a non-exclusive, perpetual, irrevocable, royalty-free, worldwide license to use Anchr Pre-Existing Technology solely as embedded in the applicable Custom Product.

3.Development

No obligations arise until an SOW is executed. Anchr shall develop each Custom Product in accordance with the Specifications using commercially reasonable efforts; all timelines are estimates unless the SOW expressly states otherwise. Subscriber shall provide reasonably necessary information, access, and cooperation; Subscriber-caused delays extend milestones day-for-day and may result in additional fees. Changes require a mutually executed written change order.

4.Testing and Acceptance

Subscriber has ten (10) business days after delivery to evaluate the Custom Product. Failure to deliver written acceptance or detailed rejection within such period constitutes deemed acceptance. If rejected, Anchr shall correct nonconformities within fifteen (15) business days. If, after two (2) correction rounds, the Custom Product still does not materially conform, Anchr's liability shall not exceed a refund of fees paid under the applicable SOW for the nonconforming deliverable.

5.Fees

Subscriber shall pay Anchr the fees set forth in each SOW ("Custom Product Fees"). All invoiced amounts are due within thirty (30) days of invoice, are non-refundable except as provided in Section 4 (Fees, Payment and Suspension of Services) of the MSA, and are exclusive of taxes governed by Section 4 (Fees, Payment and Suspension of Services) of the MSA.

6.Warranty

Anchr warrants that each accepted Custom Product shall materially conform to the Specifications for sixty (60) days following acceptance. Anchr's sole obligation is correction of the nonconformity within thirty (30) business days of receiving written notice thereof. This warranty excludes nonconformities caused by unauthorized modifications, use inconsistent with the Specifications, or failure to implement Anchr-provided updates. Sections 8.1 (Mutual Warranty) and 8.3 (Disclaimer) of the MSA otherwise apply.

7.Termination

Either party may terminate an SOW for convenience on thirty (30) days' notice. Upon Subscriber’s termination for convenience, Subscriber shall pay all earned fees and non-cancellable costs through termination, plus a termination fee equal to: (a) twenty-five percent (25%) of the remaining unpaid Custom Product Fees for a Custom Product that is less than fifty percent (50%) complete; (b) fifty percent (50%) of the remaining unpaid Custom Product Fees for a Custom Product that is at least fifty percent (50%) complete but has not been delivered for acceptance; or (c) one hundred percent (100%) of the remaining unpaid Custom Product Fees for any completed and accepted or deemed accepted deliverable. Either party may terminate for uncured material breach after thirty (30) days' notice. Upon termination, Anchr shall deliver completed deliverables for which Subscriber has paid in full.

8.Limitation of Liability

Section 10 (Limitation of Liability) of the MSA applies to all claims under this Exhibit C, except that Anchr's aggregate liability under any SOW shall not exceed the Custom Product Fees paid under such SOW in the twelve (12) months preceding the claim.

9.General

In the event of conflict with respect to any Custom Products, the order of precedence is: (a) the applicable SOW, (b) this Exhibit C, and (c) the MSA (subject to the general order of precedence set forth in Section 11.11 of the MSA). All other MSA terms remain in full force and effect.

Exhibit D

Data Processing Addendum

1.Scope

This Data Processing Addendum applies only to the extent Anchr processes personal data on behalf of Subscriber in providing the Anchr Service. The parties will complete this Exhibit D as needed to reflect applicable data protection laws and the processing activities under the relevant Order Form.

2.Processing Details

The subject matter, duration, nature and purpose of processing, categories of personal data, categories of data subjects, and any sensitive personal data or special categories of data are described in the applicable Order Form or in a schedule attached to this Exhibit D. If not yet documented, the parties shall complete such schedule prior to or contemporaneously with the commencement of processing. At a minimum, the processing described shall include: (a) subject matter: provision of the Anchr Service; (b) duration: the Term of the applicable Order Form; (c) nature and purpose: processing Subscriber Data as necessary to provide, maintain, and support the Anchr Service; (d) categories of data subjects: Subscriber's employees, customers, vendors, and other individuals whose personal data is submitted to the Anchr Service; and (e) categories of personal data: contact information, transaction data, order information, and such other categories as described in the applicable Order Form.

3.Instructions and Assistance

Anchr will process personal data only as reasonably necessary to provide the Anchr Service and in accordance with Subscriber’s documented instructions, unless applicable law requires otherwise. If Anchr reasonably believes that any instruction from Subscriber infringes applicable data protection laws, Anchr will promptly notify Subscriber. Anchr will ensure that all personnel authorized to process personal data are subject to appropriate confidentiality obligations. Anchr will provide commercially reasonable assistance with data subject requests, security obligations, data protection impact assessments, and regulatory consultations to the extent required by applicable data protection laws and taking into account the nature of the processing and information available to Anchr.

4.Subprocessors

Subscriber authorizes Anchr to use subprocessors to provide, secure, support, and troubleshoot the Anchr Service. Anchr will maintain a current list of subprocessors and provide Subscriber with at least thirty (30) days' prior written notice before engaging any new subprocessor or materially changing an existing subprocessor's scope of processing. If Subscriber reasonably objects to any new or changed subprocessor on legitimate data protection grounds within fifteen (15) days of receiving such notice, the parties will work in good faith to resolve Subscriber's objection. If the parties cannot resolve the objection within thirty (30) days, Subscriber may terminate the affected Order Form(s) upon written notice and receive a pro rata refund of any prepaid, unused Fees. Anchr will remain responsible for subprocessors' performance of their data processing obligations and will impose data protection obligations on each subprocessor that are no less protective than those set forth in this Exhibit D.

5.Cross-Border Transfers

To the extent required by applicable data protection laws, the parties will implement appropriate transfer safeguards for cross-border transfers of personal data. To the extent the EU Standard Contractual Clauses are required, the parties hereby incorporate the Standard Contractual Clauses adopted by the European Commission (as may be amended or replaced from time to time) by reference, with Module 2 (Controller to Processor) applying where Subscriber is the data controller and Anchr is the data processor, and the parties will complete the applicable annexes as set forth in the relevant Order Form or a supplemental schedule. To the extent the UK International Data Transfer Addendum is required, it is incorporated by reference with the applicable mandatory clauses. The parties may also use other lawful transfer mechanisms applicable to the relevant transfer.

6.Security; Security Breach Notification; Audit; Deletion

Anchr will maintain commercially reasonable technical and organizational measures designed to protect personal data processed on behalf of Subscriber. Anchr will notify Subscriber in writing of a Security Breach without undue delay and in no event later than seventy-two (72) hours after becoming aware of it, and will provide the information and cooperation described in Section 6.4 of the MSA. Anchr is currently undergoing its SOC 2 audit. Until an issued SOC 2 report is available, upon Subscriber's reasonable written request (no more than once per twelve (12) month period, unless a Security Breach has occurred), Anchr will provide commercially reasonable security evidence reasonably necessary to demonstrate compliance with this Exhibit D, including completion of a written security questionnaire and available summaries of relevant security controls. Once issued, and subject to customary confidentiality restrictions, Anchr will make available a summary of its then-current SOC 2 report or equivalent third-party audit report. If an issued third-party audit report is not available or does not reasonably address Subscriber's concerns, Subscriber may, at its own cost, conduct or commission a reasonable remote audit of Anchr's processing activities, subject to reasonable advance notice, scope limitations, and confidentiality obligations; an on-site audit will be available only where required by applicable data protection law or a competent supervisory authority. Following expiration or termination, Anchr will delete personal data from production systems within thirty (30) days, subject to applicable legal holds and retention obligations and routine backup retention. Personal data retained under those exceptions will remain protected by this Exhibit D and will be deleted when the applicable hold, obligation, or standard backup retention cycle ends. No post-termination export period or export right applies unless expressly granted in an applicable Order Form or addendum. Any expressly granted export, and all deletion, return, backup, and retention of personal data, will be handled in accordance with the MSA, this Exhibit D, and applicable law.

Appendix 1 to Exhibit D — Processing Details

Subject Matter
Processing Subscriber Data to provide the Anchr Service.
Duration
The Term of the applicable Order Form, plus any limited retention period required by applicable law or the Agreement.
Nature and Purpose
Collection, hosting, storage, organization, retrieval, transmission, analysis, support, security, deletion, and other processing necessary to provide, maintain, secure, and support the Anchr Service in accordance with Subscriber’s documented instructions.
Categories of Data Subjects
Subscriber’s employees, contractors, representatives, customers, prospective customers, vendors, suppliers, and other individuals whose personal data is submitted to the Anchr Service.
Categories of Personal Data
Business contact details, account and authentication data, customer and vendor records, transaction and order information, communications, usage and device data, and other personal data submitted by or on behalf of Subscriber.
Sensitive Data / Special Categories
None intended. Subscriber will not submit sensitive personal data or special-category data unless expressly agreed in writing and subject to appropriate additional safeguards.

Appendix 2 to Exhibit D — Technical and Organizational Measures

Access Control
Role-based access, least-privilege permissions, unique user credentials, multi-factor authentication where supported, periodic access review, and prompt revocation of access when no longer required.
Encryption
Industry-standard encryption for personal data in transit over public networks and at rest where supported by the applicable hosting environment, with appropriate key and secret management.
Logging / Monitoring
Security-relevant activity logging, service and availability monitoring, alerting, and reasonable retention and review of logs to detect and investigate anomalous activity.
Vulnerability Management
Secure development practices, dependency and vulnerability scanning, risk-based remediation, change review, and timely application of security updates.
Incident Response
Documented incident-response procedures for identification, containment, investigation, remediation, recovery, and notification, including Subscriber notice within seventy-two (72) hours after Anchr becomes aware of a Security Breach.
Backup / Recovery
Periodic backups or equivalent recovery mechanisms, access controls for backup data, recovery testing appropriate to service risk, and deletion under Anchr’s retention practices and applicable law.
Personnel Security
Confidentiality obligations, security and privacy awareness training, access limited to personnel with a business need, and appropriate disciplinary and offboarding controls.

Appendix 3 to Exhibit D — Approved Subprocessors

SubprocessorServiceLocationProcessing Role
Google Cloud PlatformCloud infrastructure and hostingUnited States and other locations described in the provider’s data-processing termsHosting and infrastructure services
SupabaseManaged database and backend servicesUnited States and other locations described in the provider’s data-processing termsDatabase hosting and related backend services
OpenAIAI model and inference services configured for zero data retention or equivalent non-retention settings only to the extent available from and supported by the provider for the applicable serviceUnited States and other locations described in the provider’s data-processing termsAI model processing and inference
AnthropicAI model and inference services configured for zero data retention or equivalent non-retention settings only to the extent available from and supported by the provider for the applicable serviceUnited States and other locations described in the provider’s data-processing termsAI model processing and inference
Exhibit E

AI Addendum

This AI Addendum applies to Subscriber's access to and use of AI Technology through the Anchr Service. In the event of a conflict between this Exhibit E and the body of the Agreement with respect to AI Technology, this Exhibit E controls.

1.Ownership of AI Input and AI Output

As between the parties, Subscriber owns all right, title, and interest in and to AI Input (which is Subscriber Data) and to AI Output generated for Subscriber through Subscriber's authorized use of the Anchr Service. To the extent any such rights do not automatically vest in Subscriber, Anchr hereby assigns them to Subscriber. Nothing in this Exhibit E transfers to Subscriber any ownership in the Anchr Service, the Anchr Platform, the Anchr Technology, the AI Technology, or any model architectures, weights, parameters, prompts, orchestration layers, pipelines, or tuning artifacts, or in any aggregated or de-identified data permitted under the Agreement.

2.Non-Uniqueness; Probabilistic Generation

Subscriber acknowledges that AI Output is generated probabilistically; may contain hallucinations or other errors; may be inaccurate, incomplete, outdated, misleading, or unexpected; may be identical or similar to output generated for other customers or users; and may not be protectable by copyright or other intellectual property laws. Anchr does not represent or warrant that AI Output is unique, original, accurate, complete, reliable, non-infringing, or fit for Subscriber's intended use. Subscriber will not rely on AI Output without appropriate human review and independent verification and is responsible for determining whether, and how, to use AI Output and for the consequences of its use, publication, or reliance on AI Output.

3.No Training on Customer Data Default

Anchr will not, and will not knowingly permit any third party to, use Subscriber Data, AI Input, AI Output, or aggregated or de-identified data derived from any of them to train, fine-tune, validate, improve, or modify any machine-learning or AI model unless Subscriber expressly opts in by prior written authorization. Any such authorization must identify the permitted data, model-training purpose, and duration and may be revoked prospectively by Subscriber in writing. This restriction does not prohibit Anchr from using Performance Data that does not contain Subscriber Data, AI Input, or AI Output for non-model product analytics and service improvement as permitted by the Agreement.

4.Third-Party AI Model Providers

Anchr may use third-party AI model providers in delivering the Anchr Service and will configure zero-retention or equivalent non-retention settings only to the extent such settings are available from and supported by the applicable provider.

5.Human Oversight

Subscriber will implement and maintain reasonable human review procedures appropriate to the relevant workflow and risk level, and will review and validate AI Output before using it in connection with: purchasing or procurement decisions; order placement, amendment, or cancellation; inventory or replenishment decisions; pricing; invoicing, payments, collections, or ledger entries; external communications to customers, vendors, or suppliers; or any decision that may produce a legal or similarly significant effect on an individual.

6.AI Restrictions

Subscriber will not, and will not permit any User or third party to: (i) use the Anchr Service or AI Output to develop, train, benchmark, or improve competing AI products or services; (ii) attempt to discover model weights, parameters, hidden prompts, training data, or system architecture; (iii) submit AI Input that Subscriber is not permitted to submit; or (iv) use AI Technology in a manner prohibited by applicable law or applicable third-party provider terms.

7.Relationship to Indemnity and Liability

For the avoidance of doubt, Anchr's indemnity obligations do not extend to AI Output or Subscriber's use of or reliance on AI Output, and all limitations of liability in the Agreement apply to this Exhibit E.