Paridity Acceptable Use Policy

Attorney Review Draft - not contractually binding until executed. This Policy is incorporated into the Paridity Master Subscription Agreement by Section 2.2. Terms defined in the Agreement have the same meaning here. Under Section 2.3 of the Agreement, in the event of conflict the Agreement and its Schedules control over this Policy.

1. Purpose and scope

This Policy states conduct rules for use of Paridity, the Support Services, and the AI capabilities described in Article 20 of the Agreement. It supplements - and does not replace, restate, or limit - the Customer Restrictions in Article 4 of the Agreement.

This Policy applies to Customer and to every Authorized User, including contractors permitted under Section 3.4. Customer is responsible for compliance by its Authorized Users (Section 6.1 of the Agreement).

2. Deployment model and how this Policy is applied

Paridity is deployed within the Customer Environment (Article 5 of the Agreement). EGMW does not monitor, observe, or have access to Customer's use of Paridity within the Customer Environment, and nothing in this Policy grants EGMW any monitoring or surveillance right.

EGMW applies this Policy only on the basis of information that lawfully comes to its attention - for example, entitlement and usage records generated by Paridity under Article 11, material Customer shares in support interactions, notices Customer provides under Section 6.7, or reports from third parties. Remedies for violation are those in the Agreement (Section 7 below); this Policy creates no additional remedies.

3. General acceptable use

3.1 The license restrictions are stated in Article 4 of the Agreement (reverse engineering, circumvention of license and telemetry controls, unauthorized access, competitive use, benchmarking, resale, illegal activities) and are not repeated here.

3.2 In addition, Customer shall not:

(a) use Paridity to access, scan, or process data on any system that Customer is not authorized to access - every source and target system connected to Paridity must be one Customer owns, controls, or is authorized by its owner to connect;

(b) use Paridity to process data that Customer has no legal right to process (Section 6.3 of the Agreement allocates this responsibility to Customer);

(c) use Paridity, the Support Services, or any EGMW-provided channel to store or transmit malicious code, or to interfere with any system, service, or data of EGMW or any third party; or

(d) misrepresent identity, entitlements, or authorization in any interaction with EGMW systems or personnel.

4. AI capabilities

4.1 Advisory only. AI-generated outputs are advisory and require human review (Section 20.2 of the Agreement). Customer shall not represent AI-generated output as a professional opinion, certification, or audit conclusion of EGMW.

4.2 High-risk uses. Customer shall not use Paridity AI functionality as the sole basis for medical decisions, emergency-response decisions, life-critical decisions, or the operation of weapons, nuclear, or aviation-control systems, unless expressly approved by EGMW in writing.

4.3 AI features. Where Customer uses Paridity's AI features, Customer shall not:

(a) use those features for any purpose other than the reconciliation, validation, investigation, and explanation functions Paridity presents them for;

(b) attempt to circumvent the platform's prompt-context controls, including its masking of object, schema, and column names and its data-residency provider routing;

(c) attempt to extract another tenant's data, EGMW system prompts, or model configuration through crafted inputs (prompt injection); or

(d) submit content in free-text AI inputs that Customer is prohibited from disclosing to third parties, recognizing that AI features transmit prompt context to the model provider Customer has configured, as described in the Data-Flow & Sub-Processor Disclosure (the Paridity data-flow disclosure, available from your account team).

4.4 Customer's provider account. Paridity's AI features operate against a model provider that Customer configures with its own credential and contracts with directly. Customer's agreement with that provider governs those calls, including that provider's own use restrictions. EGMW provides no default AI provider.

5. Support Services conduct

When interacting with Support Services, Customer shall:

(a) provide masked, redacted, or synthetic material wherever it suffices - Paridity's evidence masking exists so that support material need not contain raw data values (Schedule D, Section D-3(4)); production data or Personal Data shared with EGMW is processed under the Data Processing Addendum;

(b) not upload malicious code or unlawful content through support channels; and

6. Security testing and vulnerability reporting

6.1 Customer's own deployment. Because Paridity runs in the Customer Environment, Customer may perform security testing of its own deployment within its own infrastructure. This Policy does not restrict testing of systems Customer owns.

6.2 EGMW-operated systems. Customer shall not perform penetration testing, vulnerability scanning, or denial-of-service testing against systems EGMW operates (including EGMW websites, support channels, and license services) without EGMW's prior written authorization.

6.3 Responsible disclosure. Customer shall report suspected security vulnerabilities in Paridity to EGMW through Support Services, and shall not publicly disclose a vulnerability before EGMW has had a reasonable opportunity to remediate it and make a fix available.

7. Violations

A material violation of this Policy is a material breach of the Agreement, subject to the notice-and-cure, suspension, and termination provisions of Articles 23 and 24 of the Agreement. Customer shall notify EGMW promptly upon becoming aware of a material violation of this Policy (consistent with Section 6.7 of the Agreement).

8. Updates to this Policy

EGMW may update this Policy prospectively. EGMW shall provide notice of material updates in accordance with Section 32.3 of the Agreement, and no update shall impose materially greater restrictions on Customer during a then-current paid Subscription Term without Customer's written consent. Because Section 2.3 of the Agreement ranks Policies below the Agreement and its Schedules, no update to this Policy can reduce any right the Agreement grants Customer.

Classification: Customer Confidential. Attorney Review Draft - counsel review required; not contractually binding until executed.