docx-redline v1.0.2
25

Every CLI subcommand and flag, run for real

docx-redline {full,pipeline,compare,apply,accept,reject,summary,validate,doctor} Four spellings run the same command: uv run docx_redline ... uv run docx-redline ... python -m docx_redline ... python docx_redline/__main__.py ... Exit codes: 0 success, 1 a stage or check failed, 2 bad input.

examples/25_cli.py — ran in 6.15s · exit 0

Console output

============================================================================
25 · CLI
============================================================================

--- --version and --help ---
  ok exit=0  docx-redline --version
       docx-redline 1.0.2

--- pipeline — clause-aware run ---
  !! exit=1  docx-redline pipeline examples/data/Sample_Software_License_Agreement.docx -o /tmp/25_cli-wm2k_ysq/
       [ok ] extract    12 sections, 54 clauses, 92 paragraphs, 2 tables
         [ok ] propose    loaded 29 action items from action_items.json
         [ok ] validate   schema clean
         [ok ] plan       29/29 actions applied
  !! exit=1  docx-redline pipeline examples/data/Sample_Software_License_Agreement.docx -o /tmp/25_cli-wm2k_ysq/
       [ok ] extract    12 sections, 54 clauses, 92 paragraphs, 2 tables
         [ok ] propose    loaded 29 action items from action_items.json
         [ok ] validate   schema clean
         [ok ] plan       29/29 actions applied
  ok exit=0  docx-redline pipeline examples/data/Sample_Software_License_Agreement.docx -o /tmp/25_cli-wm2k_ysq/
       [ok ] extract    12 sections, 54 clauses, 92 paragraphs, 2 tables
         [ok ] propose    rule-based produced 15 action items
         [ok ] validate   schema clean
         [ok ] plan       15/15 actions applied
       (--actions is read if it exists, written if it does not)

--- full — compare + action items + comments, in one pass ---
  ok exit=0  docx-redline full examples/data/Sample_Software_License_Agreement.docx -o /tmp/25_cli-wm2k_ysq/25_f
       [ok ] extract    12 sections, 54 clauses, 92 paragraphs, 2 tables
         [ok ] propose    loaded 29 action items from action_items.json
         [ok ] validate   schema clean
         [ok ] plan       31/31 actions applied
  ok exit=0  docx-redline full examples/data/Sample_Software_License_Agreement.docx -o /tmp/25_cli-wm2k_ysq/25_f
       [ok ] extract    12 sections, 54 clauses, 92 paragraphs, 2 tables
         [ok ] propose    2 action items supplied inline
         [ok ] validate   schema clean
         [ok ] plan       2/2 actions applied
  ok exit=0  docx-redline full examples/data/Sample_Software_License_Agreement.docx -o /tmp/25_cli-wm2k_ysq/25_f
       [ok ] extract    12 sections, 54 clauses, 92 paragraphs, 2 tables
         [ok ] propose    loaded 29 action items from action_items.json
         [ok ] validate   schema clean
         [ok ] plan       29/29 actions applied
       chunked flags (need an API key, shown for reference):
         --reviewer chunked --provider claude --segment-tokens 25000
         --concurrency 6 --no-triage --min-coverage 0.35 --max-actions 40
         --cache-dir .cache --no-cache --refresh --merge-report merge.json
         --model M --effort high --timeout 300 --no-stream

--- compare — Word Compare, two files in ---
  ok exit=0  docx-redline compare examples/data/Sample_Software_License_Agreement.docx /tmp/25_cli-wm2k_ysq/25_r
       paragraphs: 4 changed, 0 inserted, 0 deleted; rows: 0 inserted, 0 deleted; cells: 0 change
       wrote /tmp/25_cli-wm2k_ysq/25_compare.docx

--- apply — a declarative op plan ---
  ok exit=0  docx-redline apply examples/data/Sample_Software_License_Agreement.docx /tmp/25_cli-wm2k_ysq/25_ops
       replace_text         x1  'thirty (30) days' -> 'forty-five (45) days'
       comment              x1  10.2  Liability Cap
       wrote /tmp/25_cli-wm2k_ysq/25_apply.docx
  ok exit=0  docx-redline apply examples/data/Sample_Software_License_Agreement.docx /tmp/25_cli-wm2k_ysq/25_ops
       replace_text         x0  'nope' -> 'x'
       wrote /tmp/25_cli-wm2k_ysq/25_apply_lenient.docx

--- accept / reject ---
  ok exit=0  docx-redline accept /tmp/25_cli-wm2k_ysq/25_full.docx -o /tmp/25_cli-wm2k_ysq/25_accepted.docx
       wrote /tmp/25_cli-wm2k_ysq/25_accepted.docx
  ok exit=0  docx-redline reject /tmp/25_cli-wm2k_ysq/25_full.docx -o /tmp/25_cli-wm2k_ysq/25_rejected.docx
       wrote /tmp/25_cli-wm2k_ysq/25_rejected.docx

--- summary — --limit and --json ---
  ok exit=0  docx-redline summary /tmp/25_cli-wm2k_ysq/25_full.docx --limit 3
       168 tracked change(s)
         delete                 64
         format:pPrChange       2
         format:rPrChange       3
  ok exit=0  docx-redline summary /tmp/25_cli-wm2k_ysq/25_full.docx --json
       168 revisions, each with keys ['kind', 'author', 'date', 'text', 'location']
       first: {'kind': 'paragraph-mark-insert', 'author': 'Redline', 'date': '2026-09-16T09:19:03Z', 'text': '', 'location': 'body'}

--- validate — schema-check a plan without opening a document ---
  ok exit=0  docx-redline validate /tmp/25_cli-wm2k_ysq/25_ops.json
       plan is valid
  ok exit=0  docx-redline validate /tmp/25_cli-wm2k_ysq/25_ops_bad.json
       plan is valid

--- doctor — one tiny call to check credentials, model and latency ---
       docx-redline doctor --provider claude --model M --effort low --timeout 30
       (skipped here: it makes a real API call)

--- exit codes ---
  ok exit=1  docx-redline validate /tmp/25_cli-wm2k_ysq/25_broken.json
       [0] unknown op 'replace_txt'; expected one of ['comment', 'delete_paragraph', 'delete_row'
  ok exit=2  docx-redline apply examples/data/Sample_Software_License_Agreement.docx /tmp/25_cli-wm2k_ysq/25_bro
       error: invalid operation plan:
         [0] unknown op 'replace_txt'; expected one of ['comment', 'delete_paragraph', 'delete_ro
  0 = success, 1 = a stage or check failed, 2 = bad input
  a schema-invalid plan aborts before the document is opened: True

Source

"""25 · Every CLI subcommand and flag, run for real.

    docx-redline {full,pipeline,compare,apply,accept,reject,summary,validate,doctor}

Four spellings run the same command:
    uv run docx_redline ...      uv run docx-redline ...
    python -m docx_redline ...   python docx_redline/__main__.py ...

Exit codes: 0 success, 1 a stage or check failed, 2 bad input.
"""

import json
import subprocess
import sys

from _shared import CHILD_ENV, OUT, PLAN, ROOT, SOURCE, banner, section

banner("25 · CLI")
PY = sys.executable


def short(arg):
    text = str(arg)
    return text.replace(str(ROOT) + "/", "") if text.startswith(str(ROOT)) else text


def run(*args, expect=0, show=4):
    proc = subprocess.run(
        [PY, "-m", "docx_redline", *map(str, args)],
        cwd=ROOT,
        capture_output=True,
        text=True,
        encoding="utf-8",
        env=CHILD_ENV,
    )
    tag = "ok " if proc.returncode == expect else "!! "
    print(f"  {tag}exit={proc.returncode}  docx-redline {' '.join(short(a) for a in args)[:86]}")
    for line in (proc.stdout or proc.stderr).strip().splitlines()[:show]:
        print(f"       {short(line)[:90]}")
    return proc


section("--version and --help")
run("--version")

section("pipeline — clause-aware run")
run(
    "pipeline",
    SOURCE,
    "-o",
    OUT / "25_pipeline.docx",
    "--actions",
    PLAN,
    "--author",
    "AI Contract Reviewer",
    "--date",
    "2026-01-01T00:00:00Z",
    "--report",
    OUT / "25_pipeline.json",
)
run(
    "pipeline",
    SOURCE,
    "-o",
    OUT / "25_pipeline_plain.docx",
    "--actions",
    PLAN,
    "--no-renumber",
    "--no-explain",
)
run(
    "pipeline",
    SOURCE,
    "-o",
    OUT / "25_pipeline_rules.docx",
    "--reviewer",
    "rules",
    "--brief",
    "Review for the Customer.",
    "--actions",
    OUT / "25_written_plan.json",
)
print("       (--actions is read if it exists, written if it does not)")

section("full — compare + action items + comments, in one pass")
run(
    "full",
    SOURCE,
    "-o",
    OUT / "25_full.docx",
    "--actions",
    PLAN,
    "--comment",
    "10.2=Confirm the cap with finance.",
    "--comment",
    "find=quarterly in arrears=Flag to revenue ops.",
    "--report",
    OUT / "25_full.json",
    "--similarity",
    "0.45",
)
run(
    "full",
    SOURCE,
    "-o",
    OUT / "25_full_inline.docx",
    "--action",
    json.dumps({"type": "move_clause", "clause": "12.1", "after_clause": "4.1"}),
    "--action",
    json.dumps({"type": "reorder_clauses", "section": "8", "order": ["8.1", "8.3", "8.2"]}),
)
run(
    "full", SOURCE, "-o", OUT / "25_full_strict.docx", "--actions", PLAN, "--strict", "--no-explain"
)
print("       chunked flags (need an API key, shown for reference):")
print("         --reviewer chunked --provider claude --segment-tokens 25000")
print("         --concurrency 6 --no-triage --min-coverage 0.35 --max-actions 40")
print("         --cache-dir .cache --no-cache --refresh --merge-report merge.json")
print("         --model M --effort high --timeout 300 --no-stream")

section("compare — Word Compare, two files in")
revised = OUT / "25_revised.docx"
from docx_redline import Redliner

cp = Redliner(SOURCE, track_changes=False)
cp.replace_text("thirty (30) days", "sixty (60) days", count=None)
cp.accept_all()
cp.save(revised)
run(
    "compare",
    SOURCE,
    revised,
    "-o",
    OUT / "25_compare.docx",
    "--author",
    "Compare Bot",
    "--date",
    "2026-01-01T00:00:00Z",
    "--similarity",
    "0.45",
)

section("apply — a declarative op plan")
ops_plan = OUT / "25_ops.json"
ops_plan.write_text(
    json.dumps(
        {
            "operations": [
                {"op": "replace_text", "old": "thirty (30) days", "new": "forty-five (45) days"},
                {"op": "comment", "match": "10.2  Liability Cap", "text": "Check with finance."},
            ]
        },
        indent=2,
    ),
    encoding="utf-8",
)
run("apply", SOURCE, ops_plan, "-o", OUT / "25_apply.docx", "--author", "Ops")
bad_ops = OUT / "25_ops_bad.json"
bad_ops.write_text(
    json.dumps([{"op": "replace_text", "old": "nope", "new": "x"}]), encoding="utf-8"
)
run("apply", SOURCE, bad_ops, "-o", OUT / "25_apply_lenient.docx", "--lenient")

section("accept / reject")
run("accept", OUT / "25_full.docx", "-o", OUT / "25_accepted.docx")
run("reject", OUT / "25_full.docx", "-o", OUT / "25_rejected.docx")

section("summary — --limit and --json")
run("summary", OUT / "25_full.docx", "--limit", "3")
proc = run("summary", OUT / "25_full.docx", "--json", show=0)
revisions = json.loads(proc.stdout)
print(f"       {len(revisions)} revisions, each with keys {list(revisions[0])}")
print(f"       first: {revisions[0]}")

section("validate — schema-check a plan without opening a document")
run("validate", ops_plan)
run("validate", bad_ops)

section("doctor — one tiny call to check credentials, model and latency")
print("       docx-redline doctor --provider claude --model M --effort low --timeout 30")
print("       (skipped here: it makes a real API call)")

section("exit codes")
broken = OUT / "25_broken.json"
broken.write_text(json.dumps([{"op": "replace_txt", "old": "a", "new": "b"}]), encoding="utf-8")
run("validate", broken, expect=1)  # validate reports problems -> 1
run("apply", SOURCE, broken, "-o", OUT / "25_never.docx", expect=2)  # bad input -> 2
print("  0 = success, 1 = a stage or check failed, 2 = bad input")
print(
    "  a schema-invalid plan aborts before the document is opened:",
    not (OUT / "25_never.docx").exists(),
)

What it wrote

25_accepted.docx 0 tracked changes Download .docx

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 Affiliate. “Affiliate” means any entity that controls, is controlled by, or is under common control with a Party.21

1.2 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.18

1.3 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.4 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.5 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.6 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; or (e) remove or obscure any proprietary notices.10

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider will invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within forty-five (45) days of the invoice date, without setoff or deduction.568

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.0% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.7

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

3.5 Currency. All amounts are stated and payable in U.S. dollars unless the Order Form says otherwise.22

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.24

4.3 Auto-Renewal. Each Subscription Term shall renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.9

4.4 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.5 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider will make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Data Protection and Security

5.1 Security Measures. Provider will maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

5.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

5.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.1

5.4 Breach Notification. Provider will notify Customer without undue delay, and in no event later than forty-eight (48) hours, after becoming aware of a confirmed security breach affecting Customer Data, and will provide a written root-cause analysis within ten (10) business days.1117

6. Intellectual Property

6.1 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.26

6.2 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7. Confidentiality

7.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

7.2 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

7.3 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.27

8. Warranties and Disclaimers

8.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

8.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

8.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 8, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.16

9. Indemnification28

9.1 By Provider. Provider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

9.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

10. Limitation of Liability

10.1 Excluded Claims. The limitations in Section 10.3 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 7 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.25

10.2 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.3 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.1, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.03

11. General Provisions

11.1 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

11.2 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

11.3 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

11.4 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

11.5 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

12. Insurance30

12.1 Provider will maintain cyber-liability and professional-indemnity insurance of not less than $5,000,000 per occurrence throughout the Subscription Term, and will name Customer as an additional insured on request.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (please print)13

Title

Countersigned by12

Date

CLIENT CO., INC.

Signature

Date

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.3

Annual Fees: $186,000, payable quarterly in arrears194

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 50% service credit of monthly Fees, and Customer may terminate for convenience20

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)2

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider will: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 Redline (R)
Confirm the cap multiple with finance before signature.
1 Redline (R)
Ask whether ISO 27001 is also in scope for the current audit period.
2 Redline (R)
This is a summary only. Ask for the executable DPA before signature.
3 Redline (R)
Confirm the cap with finance.
4 Redline (R)
Flag to revenue ops.
5 Redline (R)
[AI-001 · high] Align payment terms with our standard 45-day cycle.
6 Redline (R)
[AI-002 · low] House style: plain 'will' over 'shall' for Provider obligations. `all` hits every occurrence.
7 Redline (R)
[AI-003 · high] Reduce default interest. `regex` lets the pattern escape the decimal point.
8 Redline (R)
[AI-004 · medium] Payment must not be netted against disputed amounts.
9 Redline (R)
[AI-005 · high] Renewal should be affirmative, not automatic.
10 Redline (R)
[AI-006 · critical] Over-broad non-compete restriction; strike the whole limb.
11 Redline (R)
[AI-007 · critical] Tighten the notification window and add a root-cause obligation. Word-level diff marks only the changed phrases.
12 Redline (R)
[AI-018 · low] Signature block needs a countersignature line.
13 Redline (R)
[AI-019 · low] Ambiguous instruction in the signature block.
14 Redline (R)
[AI-020 · low] Customer's block does not need a printed-name row; the signature line carries it.
15 Redline (R)
[AI-021 · low] Flag the governing-law jurisdiction for the deal team. Recorded as a w:rPrChange.
16 Redline (R)
[AI-022 · medium] Make the disclaimer's operative words impossible to skim past.
17 Redline (R)
[AI-023 · low] Give the breach-notification clause room to breathe. Recorded as a w:pPrChange.
18 Redline (R)
[AI-024 · low] Promote the lead definition so it shows up in the navigation pane.
19 Redline (R)
[AI-027 · high] Exhibit A: align the payment cadence with clause 3.2. Unnumbered content is targeted by a unique quote, not a clause number.
20 Redline (R)
[AI-028 · critical] Exhibit B: the tail-risk credit is too weak to change behaviour.
21 Redline (R)
[AI-008 · medium] Affiliate is used but never defined. Inserting before 1.1 pushes every later definition down one.
22 Redline (R)
[AI-009 · low] `into_section` appends to the end of a section when no anchor clause is given.
23 Redline (R)
[AI-010 · low] Reservation of Rights is redundant with the licence grant; deleting it closes the numbering gap.
24 Redline (R)
[AI-011 · medium] Governing law belongs with the term provisions. Both clause groups renumber and every cross-reference follows.
25 Redline (R)
[AI-012 · medium] The excluded claims frame the whole liability section, so they should lead it.
26 Redline (R)
[AI-013 · low] Customer Data before Provider IP.
27 Redline (R)
[AI-014 · low] Put the exclusions next to the definition they qualify. Only the clauses that must move are moved.
28 Redline (R)
[AI-015 · medium] Indemnification should precede the limitation of liability that carves it out.
29 Redline (R)
[AI-016 · high] The service levels are already set out in Exhibit B; one source of truth. The whole section and its sub-clauses go.
30 Redline (R)
[AI-017 · medium] Standard insurance covenant is missing from the agreement.
25_apply.docx 2 tracked changes Download .docx
delete × 1 insert × 1 Ops (2)

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.2 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.3 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.4 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.5 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shall invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) daysforty-five (45) days of the invoice date.

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.

4.3 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.4 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shall make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement

5.1 Uptime Commitment. Provider shall use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shall provide technical support in accordance with the support tier purchased under the applicable Order Form.

6. Data Protection and Security

6.1 Security Measures. Provider shall maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.

6.4 Breach Notification. Provider shall notify Customer without undue delay, and in no event later than seventy-two (72) hours, after becoming aware of a confirmed security breach affecting Customer Data.

7. Intellectual Property

7.1 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

8. Confidentiality

8.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.3 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

9. Warranties and Disclaimers

9.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 9, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

10.1 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.2 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.3, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.0

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shall defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

12. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

12.2 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.3 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.4 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.5 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.6 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (print)

Title

CLIENT CO., INC.

Signature

Date

Name (print)

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.2

Annual Fees: $186,000, payable annually in advance

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly Fees

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shall: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 Ops (O)
Check with finance.
25_apply_lenient.docx 0 tracked changes Download .docx

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.2 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.3 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.4 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.5 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shall invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) days of the invoice date.

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.

4.3 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.4 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shall make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement

5.1 Uptime Commitment. Provider shall use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shall provide technical support in accordance with the support tier purchased under the applicable Order Form.

6. Data Protection and Security

6.1 Security Measures. Provider shall maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.

6.4 Breach Notification. Provider shall notify Customer without undue delay, and in no event later than seventy-two (72) hours, after becoming aware of a confirmed security breach affecting Customer Data.

7. Intellectual Property

7.1 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

8. Confidentiality

8.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.3 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

9. Warranties and Disclaimers

9.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 9, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

10.1 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.2 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.3, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shall defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

12. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

12.2 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.3 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.4 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.5 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.6 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (print)

Title

CLIENT CO., INC.

Signature

Date

Name (print)

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.2

Annual Fees: $186,000, payable annually in advance

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly Fees

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shall: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

25_compare.docx 16 tracked changes Download .docx
delete × 8 insert × 8 Compare Bot (16)

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.2 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.3 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.4 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.5 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shall invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirtysixty (3060) days of the invoice date.

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.

4.3 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirtysixty (3060) days of written notice.

4.4 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shall make Customer Data available for export for thirtysixty (3060) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement

5.1 Uptime Commitment. Provider shall use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shall provide technical support in accordance with the support tier purchased under the applicable Order Form.

6. Data Protection and Security

6.1 Security Measures. Provider shall maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.

6.4 Breach Notification. Provider shall notify Customer without undue delay, and in no event later than seventy-two (72) hours, after becoming aware of a confirmed security breach affecting Customer Data.

7. Intellectual Property

7.1 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

8. Confidentiality

8.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.3 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

9. Warranties and Disclaimers

9.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 9, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

10.1 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.2 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.3, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shall defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

12. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

12.2 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.3 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.4 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.5 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.6 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (print)

Title

CLIENT CO., INC.

Signature

Date

Name (print)

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.2

Annual Fees: $186,000, payable annually in advance

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly Fees

Service credits must be requested in writing within thirtysixty (3060) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shall: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

25_full.docx 168 tracked changes Download .docx
delete × 64 format:pPrChange × 2 format:rPrChange × 3 insert × 58 move-from × 12 move-to × 12 paragraph-mark-delete × 8 paragraph-mark-insert × 7 row-delete × 1 row-insert × 1 Redline (168)

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 Affiliate. “Affiliate” means any entity that controls, is controlled by, or is under common control with a Party.21

1.11.2 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.18

1.21.3 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.31.4 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.41.5 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.51.6 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.10

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.23

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shallProvider will invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) daysforty-five (45) days of the invoice date, without setoff or deduction.568

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month1.0% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.7

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

3.5 Currency. All amounts are stated and payable in U.S. dollars unless the Order Form says otherwise.22

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.24

4.24.3 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.9

4.34.4 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.44.5 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shallProvider will make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement29

5.1 Uptime Commitment. Provider shallProvider will use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shallProvider will provide technical support in accordance with the support tier purchased under the applicable Order Form.

65. Data Protection and Security

6.15.1 Security Measures. Provider shallProvider will maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.25.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.35.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.1

6.45.4 Breach Notification. Provider shallProvider will notify Customer without undue delay, and in no event later than seventyforty-twoeight (7248) hours, after becoming aware of a confirmed security breach affecting Customer Data, and will provide a written root-cause analysis within ten (10) business days.1117

76. Intellectual Property

6.1 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.26

7.16.2 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

87. Confidentiality

8.17.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.37.2 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

7.3 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.27

98. Warranties and Disclaimers

9.18.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.28.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.38.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 98, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.16

9. Indemnification28

9.1 By Provider. Provider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

9.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

10. Limitation of Liability

10.1 Excluded Claims. The limitations in Section 10.3 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 7 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.25

10.110.2 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.210.3 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.310.1, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.03

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shallProvider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

1211. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.15

12.211.1 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.311.2 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.411.3 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.511.4 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.611.5 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

12. Insurance30

12.1 Provider will maintain cyber-liability and professional-indemnity insurance of not less than $5,000,000 per occurrence throughout the Subscription Term, and will name Customer as an additional insured on request.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (please print)13

Title

Countersigned by12

Date

CLIENT CO., INC.

Signature

Date

Name (print)14

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.24.3

Annual Fees: $186,000, payable annually in advanceAnnual Fees: $186,000, payable quarterly in arrears194

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly FeesBelow 95.0% uptime: 50% service credit of monthly Fees, and Customer may terminate for convenience20

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)2

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shallProvider will: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 Redline (R)
Confirm the cap multiple with finance before signature.
1 Redline (R)
Ask whether ISO 27001 is also in scope for the current audit period.
2 Redline (R)
This is a summary only. Ask for the executable DPA before signature.
3 Redline (R)
Confirm the cap with finance.
4 Redline (R)
Flag to revenue ops.
5 Redline (R)
[AI-001 · high] Align payment terms with our standard 45-day cycle.
6 Redline (R)
[AI-002 · low] House style: plain 'will' over 'shall' for Provider obligations. `all` hits every occurrence.
7 Redline (R)
[AI-003 · high] Reduce default interest. `regex` lets the pattern escape the decimal point.
8 Redline (R)
[AI-004 · medium] Payment must not be netted against disputed amounts.
9 Redline (R)
[AI-005 · high] Renewal should be affirmative, not automatic.
10 Redline (R)
[AI-006 · critical] Over-broad non-compete restriction; strike the whole limb.
11 Redline (R)
[AI-007 · critical] Tighten the notification window and add a root-cause obligation. Word-level diff marks only the changed phrases.
12 Redline (R)
[AI-018 · low] Signature block needs a countersignature line.
13 Redline (R)
[AI-019 · low] Ambiguous instruction in the signature block.
14 Redline (R)
[AI-020 · low] Customer's block does not need a printed-name row; the signature line carries it.
15 Redline (R)
[AI-021 · low] Flag the governing-law jurisdiction for the deal team. Recorded as a w:rPrChange.
16 Redline (R)
[AI-022 · medium] Make the disclaimer's operative words impossible to skim past.
17 Redline (R)
[AI-023 · low] Give the breach-notification clause room to breathe. Recorded as a w:pPrChange.
18 Redline (R)
[AI-024 · low] Promote the lead definition so it shows up in the navigation pane.
19 Redline (R)
[AI-027 · high] Exhibit A: align the payment cadence with clause 3.2. Unnumbered content is targeted by a unique quote, not a clause number.
20 Redline (R)
[AI-028 · critical] Exhibit B: the tail-risk credit is too weak to change behaviour.
21 Redline (R)
[AI-008 · medium] Affiliate is used but never defined. Inserting before 1.1 pushes every later definition down one.
22 Redline (R)
[AI-009 · low] `into_section` appends to the end of a section when no anchor clause is given.
23 Redline (R)
[AI-010 · low] Reservation of Rights is redundant with the licence grant; deleting it closes the numbering gap.
24 Redline (R)
[AI-011 · medium] Governing law belongs with the term provisions. Both clause groups renumber and every cross-reference follows.
25 Redline (R)
[AI-012 · medium] The excluded claims frame the whole liability section, so they should lead it.
26 Redline (R)
[AI-013 · low] Customer Data before Provider IP.
27 Redline (R)
[AI-014 · low] Put the exclusions next to the definition they qualify. Only the clauses that must move are moved.
28 Redline (R)
[AI-015 · medium] Indemnification should precede the limitation of liability that carves it out.
29 Redline (R)
[AI-016 · high] The service levels are already set out in Exhibit B; one source of truth. The whole section and its sub-clauses go.
30 Redline (R)
[AI-017 · medium] Standard insurance covenant is missing from the agreement.
25_full_inline.docx 28 tracked changes Download .docx
delete × 10 insert × 10 move-from × 4 move-to × 4 Redline (28)

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.2 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.3 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.4 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.5 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shall invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) days of the invoice date.

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.0

4.24.3 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.

4.34.4 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.44.5 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shall make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement

5.1 Uptime Commitment. Provider shall use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shall provide technical support in accordance with the support tier purchased under the applicable Order Form.

6. Data Protection and Security

6.1 Security Measures. Provider shall maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.

6.4 Breach Notification. Provider shall notify Customer without undue delay, and in no event later than seventy-two (72) hours, after becoming aware of a confirmed security breach affecting Customer Data.

7. Intellectual Property

7.1 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

8. Confidentiality

8.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.38.2 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

8.3 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.1

9. Warranties and Disclaimers

9.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 9, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

10.1 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.2 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.3, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shall defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

12. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

12.212.1 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.312.2 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.412.3 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.512.4 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.612.5 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (print)

Title

CLIENT CO., INC.

Signature

Date

Name (print)

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.24.3

Annual Fees: $186,000, payable annually in advance

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly Fees

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shall: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 Redline (R)
[CLI-001 · medium] supplied on the command line
1 Redline (R)
[CLI-002 · medium] supplied on the command line
25_full_strict.docx 168 tracked changes Download .docx
delete × 64 format:pPrChange × 2 format:rPrChange × 3 insert × 58 move-from × 12 move-to × 12 paragraph-mark-delete × 8 paragraph-mark-insert × 7 row-delete × 1 row-insert × 1 Redline (168)

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 Affiliate. “Affiliate” means any entity that controls, is controlled by, or is under common control with a Party.

1.11.2 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.21.3 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.31.4 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.41.5 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.51.6 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shallProvider will invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) daysforty-five (45) days of the invoice date, without setoff or deduction.

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month1.0% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

3.5 Currency. All amounts are stated and payable in U.S. dollars unless the Order Form says otherwise.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

4.24.3 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.

4.34.4 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.44.5 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shallProvider will make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement

5.1 Uptime Commitment. Provider shallProvider will use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shallProvider will provide technical support in accordance with the support tier purchased under the applicable Order Form.

65. Data Protection and Security

6.15.1 Security Measures. Provider shallProvider will maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.25.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.35.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.1

6.45.4 Breach Notification. Provider shallProvider will notify Customer without undue delay, and in no event later than seventyforty-twoeight (7248) hours, after becoming aware of a confirmed security breach affecting Customer Data, and will provide a written root-cause analysis within ten (10) business days.

76. Intellectual Property

6.1 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

7.16.2 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

87. Confidentiality

8.17.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.37.2 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

7.3 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

98. Warranties and Disclaimers

9.18.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.28.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.38.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 98, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

9. Indemnification

9.1 By Provider. Provider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

9.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

10. Limitation of Liability

10.1 Excluded Claims. The limitations in Section 10.3 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 7 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

10.110.2 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.210.3 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.310.1, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.0

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shallProvider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

1211. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

12.211.1 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.311.2 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.411.3 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.511.4 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.611.5 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

12. Insurance

12.1 Provider will maintain cyber-liability and professional-indemnity insurance of not less than $5,000,000 per occurrence throughout the Subscription Term, and will name Customer as an additional insured on request.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (please print)

Title

Countersigned by

Date

CLIENT CO., INC.

Signature

Date

Name (print)

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.24.3

Annual Fees: $186,000, payable annually in advanceAnnual Fees: $186,000, payable quarterly in arrears

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly FeesBelow 95.0% uptime: 50% service credit of monthly Fees, and Customer may terminate for convenience

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)2

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shallProvider will: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 Redline (R)
Confirm the cap multiple with finance before signature.
1 Redline (R)
Ask whether ISO 27001 is also in scope for the current audit period.
2 Redline (R)
This is a summary only. Ask for the executable DPA before signature.
25_pipeline.docx 168 tracked changes Download .docx
delete × 64 format:pPrChange × 2 format:rPrChange × 3 insert × 58 move-from × 12 move-to × 12 paragraph-mark-delete × 8 paragraph-mark-insert × 7 row-delete × 1 row-insert × 1 AI Contract Reviewer (168)

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 Affiliate. “Affiliate” means any entity that controls, is controlled by, or is under common control with a Party.19

1.11.2 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.16

1.21.3 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.31.4 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.41.5 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.51.6 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.8

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.21

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shallProvider will invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) daysforty-five (45) days of the invoice date, without setoff or deduction.346

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month1.0% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.5

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

3.5 Currency. All amounts are stated and payable in U.S. dollars unless the Order Form says otherwise.20

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.22

4.24.3 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.7

4.34.4 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.44.5 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shallProvider will make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement27

5.1 Uptime Commitment. Provider shallProvider will use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shallProvider will provide technical support in accordance with the support tier purchased under the applicable Order Form.

65. Data Protection and Security

6.15.1 Security Measures. Provider shallProvider will maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.25.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.35.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.1

6.45.4 Breach Notification. Provider shallProvider will notify Customer without undue delay, and in no event later than seventyforty-twoeight (7248) hours, after becoming aware of a confirmed security breach affecting Customer Data, and will provide a written root-cause analysis within ten (10) business days.915

76. Intellectual Property

6.1 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.24

7.16.2 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

87. Confidentiality

8.17.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.37.2 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

7.3 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.25

98. Warranties and Disclaimers

9.18.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.28.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.38.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 98, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.14

9. Indemnification26

9.1 By Provider. Provider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

9.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

10. Limitation of Liability

10.1 Excluded Claims. The limitations in Section 10.3 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 7 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.23

10.110.2 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.210.3 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.310.1, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.0

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shallProvider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

1211. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.13

12.211.1 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.311.2 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.411.3 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.511.4 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.611.5 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

12. Insurance28

12.1 Provider will maintain cyber-liability and professional-indemnity insurance of not less than $5,000,000 per occurrence throughout the Subscription Term, and will name Customer as an additional insured on request.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (please print)11

Title

Countersigned by10

Date

CLIENT CO., INC.

Signature

Date

Name (print)12

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.24.3

Annual Fees: $186,000, payable annually in advanceAnnual Fees: $186,000, payable quarterly in arrears17

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly FeesBelow 95.0% uptime: 50% service credit of monthly Fees, and Customer may terminate for convenience18

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)2

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shallProvider will: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 AI Contract Reviewer (ACR)
Confirm the cap multiple with finance before signature.
1 AI Contract Reviewer (ACR)
Ask whether ISO 27001 is also in scope for the current audit period.
2 AI Contract Reviewer (ACR)
This is a summary only. Ask for the executable DPA before signature.
3 AI Contract Reviewer (ACR)
[AI-001 · high] Align payment terms with our standard 45-day cycle.
4 AI Contract Reviewer (ACR)
[AI-002 · low] House style: plain 'will' over 'shall' for Provider obligations. `all` hits every occurrence.
5 AI Contract Reviewer (ACR)
[AI-003 · high] Reduce default interest. `regex` lets the pattern escape the decimal point.
6 AI Contract Reviewer (ACR)
[AI-004 · medium] Payment must not be netted against disputed amounts.
7 AI Contract Reviewer (ACR)
[AI-005 · high] Renewal should be affirmative, not automatic.
8 AI Contract Reviewer (ACR)
[AI-006 · critical] Over-broad non-compete restriction; strike the whole limb.
9 AI Contract Reviewer (ACR)
[AI-007 · critical] Tighten the notification window and add a root-cause obligation. Word-level diff marks only the changed phrases.
10 AI Contract Reviewer (ACR)
[AI-018 · low] Signature block needs a countersignature line.
11 AI Contract Reviewer (ACR)
[AI-019 · low] Ambiguous instruction in the signature block.
12 AI Contract Reviewer (ACR)
[AI-020 · low] Customer's block does not need a printed-name row; the signature line carries it.
13 AI Contract Reviewer (ACR)
[AI-021 · low] Flag the governing-law jurisdiction for the deal team. Recorded as a w:rPrChange.
14 AI Contract Reviewer (ACR)
[AI-022 · medium] Make the disclaimer's operative words impossible to skim past.
15 AI Contract Reviewer (ACR)
[AI-023 · low] Give the breach-notification clause room to breathe. Recorded as a w:pPrChange.
16 AI Contract Reviewer (ACR)
[AI-024 · low] Promote the lead definition so it shows up in the navigation pane.
17 AI Contract Reviewer (ACR)
[AI-027 · high] Exhibit A: align the payment cadence with clause 3.2. Unnumbered content is targeted by a unique quote, not a clause number.
18 AI Contract Reviewer (ACR)
[AI-028 · critical] Exhibit B: the tail-risk credit is too weak to change behaviour.
19 AI Contract Reviewer (ACR)
[AI-008 · medium] Affiliate is used but never defined. Inserting before 1.1 pushes every later definition down one.
20 AI Contract Reviewer (ACR)
[AI-009 · low] `into_section` appends to the end of a section when no anchor clause is given.
21 AI Contract Reviewer (ACR)
[AI-010 · low] Reservation of Rights is redundant with the licence grant; deleting it closes the numbering gap.
22 AI Contract Reviewer (ACR)
[AI-011 · medium] Governing law belongs with the term provisions. Both clause groups renumber and every cross-reference follows.
23 AI Contract Reviewer (ACR)
[AI-012 · medium] The excluded claims frame the whole liability section, so they should lead it.
24 AI Contract Reviewer (ACR)
[AI-013 · low] Customer Data before Provider IP.
25 AI Contract Reviewer (ACR)
[AI-014 · low] Put the exclusions next to the definition they qualify. Only the clauses that must move are moved.
26 AI Contract Reviewer (ACR)
[AI-015 · medium] Indemnification should precede the limitation of liability that carves it out.
27 AI Contract Reviewer (ACR)
[AI-016 · high] The service levels are already set out in Exhibit B; one source of truth. The whole section and its sub-clauses go.
28 AI Contract Reviewer (ACR)
[AI-017 · medium] Standard insurance covenant is missing from the agreement.
25_pipeline_plain.docx 102 tracked changes Download .docx
delete × 31 format:pPrChange × 2 format:rPrChange × 3 insert × 25 move-from × 12 move-to × 12 paragraph-mark-delete × 8 paragraph-mark-insert × 7 row-delete × 1 row-insert × 1 Redline (102)

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 Affiliate. “Affiliate” means any entity that controls, is controlled by, or is under common control with a Party.

1.1 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.2 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.3 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.4 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.5 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shallProvider will invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) daysforty-five (45) days of the invoice date, without setoff or deduction.

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month1.0% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

3.5 Currency. All amounts are stated and payable in U.S. dollars unless the Order Form says otherwise.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

4.2 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.

4.3 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.4 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shallProvider will make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement

5.1 Uptime Commitment. Provider shallProvider will use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shallProvider will provide technical support in accordance with the support tier purchased under the applicable Order Form.

6. Data Protection and Security

6.1 Security Measures. Provider shallProvider will maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.1

6.4 Breach Notification. Provider shallProvider will notify Customer without undue delay, and in no event later than seventyforty-twoeight (7248) hours, after becoming aware of a confirmed security breach affecting Customer Data, and will provide a written root-cause analysis within ten (10) business days.

7. Intellectual Property

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

7.1 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

8. Confidentiality

8.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.3 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

9. Warranties and Disclaimers

9.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 9, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

11. Indemnification

11.1 By Provider. Provider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

10. Limitation of Liability

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

10.1 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.2 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.3, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.0

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shallProvider will defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

12. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

12.2 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.3 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.4 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.5 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.6 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

13. Insurance

13.1 Provider will maintain cyber-liability and professional-indemnity insurance of not less than $5,000,000 per occurrence throughout the Subscription Term, and will name Customer as an additional insured on request.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (please print)

Title

Countersigned by

Date

CLIENT CO., INC.

Signature

Date

Name (print)

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.2

Annual Fees: $186,000, payable annually in advanceAnnual Fees: $186,000, payable quarterly in arrears

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly FeesBelow 95.0% uptime: 50% service credit of monthly Fees, and Customer may terminate for convenience

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)2

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shallProvider will: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 Redline (R)
Confirm the cap multiple with finance before signature.
1 Redline (R)
Ask whether ISO 27001 is also in scope for the current audit period.
2 Redline (R)
This is a summary only. Ask for the executable DPA before signature.
25_pipeline_rules.docx 67 tracked changes Download .docx
delete × 22 format:pPrChange × 1 format:rPrChange × 2 insert × 26 move-from × 6 move-to × 6 paragraph-mark-delete × 1 paragraph-mark-insert × 3 Redline (67)

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.2 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.3 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.4 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.5 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.9

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shall invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) daysforty-five (45) days of the invoice date.1

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.50% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteenthirty (1530) days past due, upon fifteen (15) days' prior written notice.2

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.10

4.24.3 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.5

4.34.4 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.44.5 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shall make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement

5.1 Uptime Commitment. Provider shall use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credit Request Window. Customer must request any service credit in writing within sixty (60) days of the end of the affected calendar month.13

5.25.3 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.35.4 Support. Provider shall provide technical support in accordance with the support tier purchased under the applicable Order Form.

6. Data Protection and Security

6.1 Security Measures. Provider shall maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.

6.4 Breach Notification. Provider shall notify Customer without undue delay, and in no event later than seventy-two (72) hoursforty-eight (48) hours, after becoming aware of a confirmed security breach affecting Customer Data.37

7. Intellectual Property

7.1 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.27.1 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

7.2 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.12

8. Confidentiality

8.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.3 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

9. Warranties and Disclaimers

9.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 9, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

10.1 Excluded Claims. The limitations in Section 10.3 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.11

10.110.2 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.210.3 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.310.1, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM PRECEDING THE CLAIM.04

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shall defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

12. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.6

12.212.1 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.312.2 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.412.3 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.512.4 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.612.5 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

13. Insurance14

13.1 Provider shall maintain cyber-liability and professional-indemnity insurance of not less than $5,000,000 per occurrence throughout the Subscription Term.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (please print)8

Title

CLIENT CO., INC.

Signature

Date

Name (print)

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.24.3

Annual Fees: $186,000, payable annually in advance

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly Fees

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shall: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 Redline (R)
Confirm the cap multiple with finance before signature.
1 Redline (R)
[AI-001 · high] Align payment terms with our standard 45-day cycle.
2 Redline (R)
[AI-002 · high] Reduce default interest and extend the suspension grace period.
3 Redline (R)
[AI-003 · critical] Tighten the breach-notification window.
4 Redline (R)
[AI-004 · medium] Clarify the measurement period for the liability cap.
5 Redline (R)
[AI-005 · high] Remove automatic renewal; renewal should be affirmative.
6 Redline (R)
[AI-012 · low] Flag the governing-law jurisdiction for the deal team.
7 Redline (R)
[AI-013 · low] Give the breach-notification clause room to breathe.
8 Redline (R)
[AI-014 · low] Signature block wording is ambiguous.
9 Redline (R)
[AI-006 · low] Redundant with the licence grant; deleting closes the numbering gap.
10 Redline (R)
[AI-007 · medium] Surface governing law with the term provisions; the engine renumbers both affected clause groups and every cross-reference.
11 Redline (R)
[AI-008 · medium] The excluded claims frame the whole liability section and should lead it; the engine renumbers the section and repoints every cross-reference to it.
12 Redline (R)
[AI-009 · low] Put this section's clauses in alphabetical order so the boilerplate is navigable; numbering follows the new order.
13 Redline (R)
[AI-010 · medium] Give Customer a longer window than the Exhibit B default.
14 Redline (R)
[AI-011 · medium] Standard insurance covenant is missing from the agreement.
25_rejected.docx 0 tracked changes Download .docx

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.2 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.3 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.4 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.5 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.10

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.23

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shall invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within thirty (30) days of the invoice date.568

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.7

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.

4.3 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.

4.4 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shall make Customer Data available for export for thirty (30) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement29

5.1 Uptime Commitment. Provider shall use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shall provide technical support in accordance with the support tier purchased under the applicable Order Form.

6. Data Protection and Security

6.1 Security Measures. Provider shall maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.1

6.4 Breach Notification. Provider shall notify Customer without undue delay, and in no event later than seventy-two (72) hours, after becoming aware of a confirmed security breach affecting Customer Data.

7. Intellectual Property

7.1 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

8. Confidentiality

8.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.3 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

9. Warranties and Disclaimers

9.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 9, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

10.1 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.2 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.3, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.03

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shall defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

12. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.15

12.2 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.3 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.4 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.5 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.6 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (print)13

Title

CLIENT CO., INC.

Signature

Date

Name (print)14

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.2

Annual Fees: $186,000, payable annually in advance

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly Fees

Service credits must be requested in writing within thirty (30) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)2

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shall: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.

Comments

0 Redline (R)
Confirm the cap multiple with finance before signature.
1 Redline (R)
Ask whether ISO 27001 is also in scope for the current audit period.
2 Redline (R)
This is a summary only. Ask for the executable DPA before signature.
3 Redline (R)
Confirm the cap with finance.
4 Redline (R)
Flag to revenue ops.
5 Redline (R)
[AI-001 · high] Align payment terms with our standard 45-day cycle.
6 Redline (R)
[AI-002 · low] House style: plain 'will' over 'shall' for Provider obligations. `all` hits every occurrence.
7 Redline (R)
[AI-003 · high] Reduce default interest. `regex` lets the pattern escape the decimal point.
8 Redline (R)
[AI-004 · medium] Payment must not be netted against disputed amounts.
9 Redline (R)
[AI-005 · high] Renewal should be affirmative, not automatic.
10 Redline (R)
[AI-006 · critical] Over-broad non-compete restriction; strike the whole limb.
11 Redline (R)
[AI-007 · critical] Tighten the notification window and add a root-cause obligation. Word-level diff marks only the changed phrases.
12 Redline (R)
[AI-018 · low] Signature block needs a countersignature line.
13 Redline (R)
[AI-019 · low] Ambiguous instruction in the signature block.
14 Redline (R)
[AI-020 · low] Customer's block does not need a printed-name row; the signature line carries it.
15 Redline (R)
[AI-021 · low] Flag the governing-law jurisdiction for the deal team. Recorded as a w:rPrChange.
16 Redline (R)
[AI-022 · medium] Make the disclaimer's operative words impossible to skim past.
17 Redline (R)
[AI-023 · low] Give the breach-notification clause room to breathe. Recorded as a w:pPrChange.
18 Redline (R)
[AI-024 · low] Promote the lead definition so it shows up in the navigation pane.
19 Redline (R)
[AI-027 · high] Exhibit A: align the payment cadence with clause 3.2. Unnumbered content is targeted by a unique quote, not a clause number.
20 Redline (R)
[AI-028 · critical] Exhibit B: the tail-risk credit is too weak to change behaviour.
21 Redline (R)
[AI-008 · medium] Affiliate is used but never defined. Inserting before 1.1 pushes every later definition down one.
22 Redline (R)
[AI-009 · low] `into_section` appends to the end of a section when no anchor clause is given.
23 Redline (R)
[AI-010 · low] Reservation of Rights is redundant with the licence grant; deleting it closes the numbering gap.
24 Redline (R)
[AI-011 · medium] Governing law belongs with the term provisions. Both clause groups renumber and every cross-reference follows.
25 Redline (R)
[AI-012 · medium] The excluded claims frame the whole liability section, so they should lead it.
26 Redline (R)
[AI-013 · low] Customer Data before Provider IP.
27 Redline (R)
[AI-014 · low] Put the exclusions next to the definition they qualify. Only the clauses that must move are moved.
28 Redline (R)
[AI-015 · medium] Indemnification should precede the limitation of liability that carves it out.
29 Redline (R)
[AI-016 · high] The service levels are already set out in Exhibit B; one source of truth. The whole section and its sub-clauses go.
30 Redline (R)
[AI-017 · medium] Standard insurance covenant is missing from the agreement.
25_revised.docx 0 tracked changes Download .docx

SAMPLE DOCUMENT — FOR TESTING / TEMPLATE PURPOSES ONLY

SOFTWARE LICENSE AND SUBSCRIPTION SERVICES AGREEMENT

Order Form Reference: NSS-2026-00142

This Software License and Subscription Services Agreement (“Agreement”) is entered into as of September 1, 2026 (“Effective Date”) by and between:

Nimbus Software Solutions, Inc., a Delaware corporation with its principal place of business at 400 Market Street, Suite 900, San Francisco, CA 94105 (“Provider”); and

Client Co., Inc., a company organized under the laws of the State of New York with its principal place of business at 88 Lexington Avenue, New York, NY 10016 (“Customer”).

Provider and Customer are each a “Party” and collectively the “Parties.” This Agreement governs Customer’s access to and use of Provider’s cloud-based software platform, “Nimbus Workflow,” together with any related support and professional services (collectively, the “Services”), as further described in one or more Order Forms executed under this Agreement.

1. Definitions

1.1 “Authorized Users” means Customer’s employees and independent contractors who are authorized by Customer to access and use the Services under the rights granted to Customer in this Agreement, subject to the user limits set out in the applicable Order Form.

1.2 “Customer Data” means all electronic data, text, files, or other content submitted to the Services by or on behalf of Customer or its Authorized Users.

1.3 “Documentation” means Provider’s user guides and technical documentation describing the functionality of the Services, as updated from time to time.

1.4 “Order Form” means an ordering document specifying the Services to be provided, executed by both Parties, that references and is governed by this Agreement.

1.5 “Subscription Term” means the period of Customer’s subscription to the Services set forth in the applicable Order Form, together with any renewal terms.

2. License Grant and Restrictions

2.1 Grant of Rights. Subject to the terms of this Agreement and the applicable Order Form, Provider grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services and Documentation during the Subscription Term, solely for Customer’s internal business operations.

2.2 Restrictions. Customer shall not, and shall not permit any third party to: (a) copy, modify, or create derivative works of the Services; (b) reverse engineer, decompile, or disassemble the Services except to the extent such restriction is prohibited by applicable law; (c) sell, resell, lease, or sublicense the Services to any third party; (d) use the Services to build a competing product; or (e) remove or obscure any proprietary notices.

2.3 Reservation of Rights. Provider reserves all rights not expressly granted to Customer in this Agreement. No rights are granted other than as expressly set forth herein.

3. Fees and Payment

3.1 Fees. Customer shall pay the fees set forth in the applicable Order Form (“Fees”). Unless otherwise specified, Fees are quoted and payable in U.S. dollars.

3.2 Invoicing. Provider shall invoice Customer annually in advance unless a different billing frequency is specified in the Order Form. Payment is due within sixty (60) days of the invoice date.

3.3 Late Payment. Amounts not paid when due shall accrue interest at the lesser of 1.5% per month or the maximum rate permitted by applicable law, and Provider may suspend access to the Services for accounts more than fifteen (15) days past due, upon prior written notice.

3.4 Taxes. Fees are exclusive of applicable taxes, which Customer is responsible for, excluding taxes based on Provider’s net income.

4. Term, Renewal, and Termination

4.1 Term. This Agreement commences on the Effective Date and continues until all Order Forms hereunder have expired or been terminated.

4.2 Auto-Renewal. Each Subscription Term shall automatically renew for successive periods equal to the expiring term, unless either Party provides written notice of non-renewal at least sixty (60) days prior to the end of the then-current Subscription Term.

4.3 Termination for Cause. Either Party may terminate this Agreement if the other Party materially breaches this Agreement and fails to cure such breach within sixty (60) days of written notice.

4.4 Effect of Termination. Upon expiration or termination, Customer’s right to access the Services immediately ceases. Provider shall make Customer Data available for export for sixty (60) days following termination, after which Provider may delete such data in accordance with its data retention policies.

5. Service Level Agreement

5.1 Uptime Commitment. Provider shall use commercially reasonable efforts to maintain 99.9% monthly uptime for the Services, excluding scheduled maintenance and events of Force Majeure, as detailed in Exhibit B (Service Level Agreement).

5.2 Service Credits. If Provider fails to meet the uptime commitment in a given calendar month, Customer’s sole and exclusive remedy is the service credit set forth in Exhibit B.

5.3 Support. Provider shall provide technical support in accordance with the support tier purchased under the applicable Order Form.

6. Data Protection and Security

6.1 Security Measures. Provider shall maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Customer Data, consistent with industry standards.

6.2 Data Processing Agreement. To the extent Provider processes personal data on Customer’s behalf, the Data Processing Addendum attached as Exhibit C is incorporated by reference and shall govern such processing.

6.3 Security Certifications. Provider maintains SOC 2 Type II certification and shall provide Customer with a current copy of its audit report upon written request, no more than once per twelve-month period.

6.4 Breach Notification. Provider shall notify Customer without undue delay, and in no event later than seventy-two (72) hours, after becoming aware of a confirmed security breach affecting Customer Data.

7. Intellectual Property

7.1 Provider IP. Provider retains all right, title, and interest in and to the Services, Documentation, and all related intellectual property rights, including any improvements, enhancements, or feedback incorporated therein.

7.2 Customer Data. As between the Parties, Customer retains all right, title, and interest in and to Customer Data. Customer grants Provider a limited license to host, copy, and process Customer Data solely to provide the Services.

8. Confidentiality

8.1 Definition. “Confidential Information” means non-public information disclosed by one Party to the other that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure.

8.2 Obligations. The receiving Party shall use the disclosing Party’s Confidential Information solely to perform its obligations under this Agreement and shall protect it using at least the same degree of care it uses for its own confidential information, and no less than a reasonable degree of care.

8.3 Exclusions. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving Party, was rightfully known prior to disclosure, or is independently developed without use of the disclosing Party’s Confidential Information.

9. Warranties and Disclaimers

9.1 Mutual Warranties. Each Party represents that it has the legal power and authority to enter into this Agreement.

9.2 Provider Warranty. Provider warrants that the Services will perform materially in accordance with the Documentation. Customer’s sole remedy for breach of this warranty is prompt correction of the non-conforming Service.

9.3 Disclaimer. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION 9, THE SERVICES ARE PROVIDED “AS IS,” AND PROVIDER DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

10.1 Exclusion of Damages. NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING OUT OF OR RELATED TO THIS AGREEMENT, REGARDLESS OF THE THEORY OF LIABILITY.

10.2 Liability Cap. EXCEPT FOR EXCLUDED CLAIMS DEFINED IN SECTION 10.3, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

10.3 Excluded Claims. The limitations in Section 10.2 shall not apply to: (a) either Party’s indemnification obligations; (b) breach of Section 8 (Confidentiality); (c) Customer’s payment obligations; or (d) either Party’s gross negligence or willful misconduct.

11. Indemnification

11.1 By Provider. Provider shall defend Customer against any third-party claim alleging that the Services infringe such third party’s intellectual property rights, and shall indemnify Customer for damages finally awarded, subject to Section 10.

11.2 By Customer. Customer shall defend and indemnify Provider against any third-party claim arising from Customer Data or Customer’s use of the Services in violation of this Agreement or applicable law.

12. General Provisions

12.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.

12.2 Assignment. Neither Party may assign this Agreement without the other Party’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

12.3 Force Majeure. Neither Party shall be liable for delays caused by circumstances beyond its reasonable control, including natural disasters, acts of government, or internet or utility failures.

12.4 Notices. All notices under this Agreement shall be in writing and delivered to the addresses set forth above, or such other address as a Party may designate in writing.

12.5 Entire Agreement. This Agreement, together with all Order Forms and Exhibits, constitutes the entire agreement between the Parties and supersedes all prior agreements relating to its subject matter.

12.6 Severability. If any provision of this Agreement is held unenforceable, the remaining provisions shall remain in full force and effect.

Signatures

IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

NIMBUS SOFTWARE SOLUTIONS, INC.

Signature

Date

Name (print)

Title

CLIENT CO., INC.

Signature

Date

Name (print)

Title

Exhibit A — Order Form Summary

The following commercial terms apply to this Order Form and are incorporated into the Agreement by reference.

Subscription: Nimbus Workflow — Business Tier, up to 250 Authorized Users

Subscription Term: 12 months, commencing on the Effective Date, with auto-renewal per Section 4.2

Annual Fees: $186,000, payable annually in advance

Support Tier: Premium (24/5 support, 4-hour critical response SLA)

Billing Contact: accounts.payable@clientco.example

Renewal Notice Window: 60 days prior to Subscription Term end date

Exhibit B — Service Level Agreement

Provider commits to the following monthly uptime and remedy schedule for the Services:

Monthly Uptime Commitment: 99.9%

99.0%–99.89% uptime: 5% service credit of monthly Fees

95.0%–98.99% uptime: 10% service credit of monthly Fees

Below 95.0% uptime: 25% service credit of monthly Fees

Service credits must be requested in writing within sixty (60) days of the end of the affected month and will be applied to Customer’s next invoice.

Exhibit C — Data Processing Addendum (Summary)

Where Provider processes personal data on behalf of Customer in the course of providing the Services, the Parties agree that Customer is the data controller and Provider is the data processor, and that Provider shall: process personal data only on documented instructions from Customer; ensure personnel are bound by confidentiality obligations; implement appropriate technical and organizational security measures; assist Customer in responding to data subject requests; and delete or return personal data upon termination of the Services, except as required by applicable law.