TERMS AND CONDITIONS   BACKGROUND:   (A)   We, CRIF DECISION SOLUTIONS LIMITED, a company incorporated in England (Company no 3395992) whose registered office is at Suite 1, 3rd Floor 11-12 St. James Square, London SW1Y 4LB UK (hereinafter the "Supplier" or “We/Us/Our”), are the authorised distributor and sub-licensor of the KYND Products as defined below; (B)   These Terms and Conditions, together with any and all other documents referred to herein, set out the terms of use under which you may use the KYND Products, as defined below. Please read these Terms and Conditions carefully and ensure that you understand them. You will be required to read and accept these Terms and Conditions when entering into a license with Us. If you do not agree to comply with and be bound by these Terms and Conditions, you will not be granted a license. IT IS NOW AGREED as follows:

1. Definitions and Interpretation

1.1          In This Agreement, unless the context otherwise requires, the following expressions have the following meanings: “Confidential Information” means, in relation to either Party, information which is disclosed to that Party by the other Party pursuant to, or in connection with, this Agreement (whether orally or in writing or any other medium, and whether or not the information is expressly stated to be confidential or marked as such): “Content” means any and all text, images, audio, video, scripts, code, software, processes, databases and any other form of information capable of being stored on a computer that appears on or forms part of the KYND Products and other related services, together with all analytical material and outputs generated by the Supplier and/or KYND, other than any material and outputs owned by you and/or a third party prior to such generation;       “Data Protection Legislation” means all applicable data protection and privacy legislation, regulations and guidance including: Regulation (EU) 2016/679 (the “General Data Protection Regulation” or “GDPR”), the Data Protection Act 2018 and any other national implementing laws, regulations and secondary legislation, the Privacy and Electronic Communications (EC Directive) Regulations 2003, and guidance and codes of practice issued by the Information Commissioner’s Office from time to time (all as amended, updated or re-enacted from time to time). “Effective Date” means the date of activation of the KYND Products by Us following your acceptance of the present Terms and Conditions. “KYND Products” means KYND Start or KYND On, depending on which service you selected in the registration form that you are required to complete when accepting these Terms and Conditions “KYND Start” KYND Start is a one off cyber risk management report service which enables a User to run a one-off risk report on a Subject, as described in Annex 1 to this Agreement; “KYND On” means a cyber risk management service for the periodical monitoring of a business, detecting the infrastructures that belongs to the organisation and analysing the cyber risk that may affect a business, provided through a web application developed and owned by KYND, as described in Annex 1 to this Agreement “KYND” means KYND Ltd, a private limited company registered in England under company number 10943213) whose registered office is at International House, Canterbury Crescent, London SW9 7QD “Licence” means the licence granted by the Supplier pursuant to sub-Clause 3.1; “User” means a user of the KYND Products;   “User Content” means the domain names, email addresses and other information entered by Users into the KYND Products.

2. Access and Changes to the KYND Products

2.1          We may from time to time make changes to the KYND Products: 2.1.1    Minor changes may be required to make underlying technical alterations, for example, to fix an error or to improve a feature.  We will inform you by email of any such changes (including, if applicable, anything that you need to do), however they will be unlikely to materially affect your use of the KYND Products; 2.1.2    Minor changes may also be made to reflect changes in the law or other regulatory requirements. We will inform you by email of any such changes (including, if applicable, anything that you need to do), however they will be unlikely to materially affect your use of the KYND Products; and 2.1.3    We will continue to develop and improve the KYND Products over time, in some cases making significant changes to it. You will be kept fully informed of any and all such changes by email. We reserve the right remove redundant versions or functionality at any time. 2.1.4    We will aim to ensure that the KYND Products are available at all times.  In certain limited cases, however, We may need to temporarily suspend availability to make certain changes outlined under this sub-Clause 2.1. Unless We are responding to an emergency or an urgent issue, We will use reasonable endeavours to inform you in advance of any interruptions to the availability of the KYND Products.

3. Intellectual Property Rights and Licence

3.1          We grant you a limited, non-exclusive, revocable, worldwide, non-transferable, non sub-licencable licence, to use the KYND Products for business purposes only, subject to this Agreement. 3.2          Subject to the licence granted to Us under sub-Clause 6.3, Users retain the ownership of copyright and other intellectual property rights in their User Content (subject to any third party rights in that User Content and the terms of any licence under which you use such Content). 3.3          All other Content and all Intellectual Property rights in and associated with the KYND Products or other Supplier’s and/or KYND’s applications and services (including all user-facing material, and all underlying material such as code, software and databases) and the copyright and other intellectual property rights in that Content, unless specifically labelled otherwise, belongs to or has been licensed by the Supplier and/or KYND. All Content is protected by applicable domestic  and international intellectual property laws and treaties. 3.4          By accepting this Agreement, you hereby undertake: 3.4.1    Not to copy, download or otherwise attempt to acquire any part of the KYND Products; 3.4.2    Not to disassemble, decompile or otherwise reverse engineer the KYND Products; 3.4.3    Not to allow or facilitate any use of the KYND Products that would constitute a breach of this Agreement; and 3.4.4    Not to embed or otherwise distribute the KYND Products on any website or other service.

4. Links to KYND Products

4.1          You may link to the KYND Products provided that: 4.1.1    You do so in a fair and legal manner; 4.1.2    You do so solely from an email address or other website that is directly linked to and forming part of your business; 4.1.3    You do not do so in a manner that suggests any form of association, endorsement or approval on Our part where none exists; 4.1.4    You do not use any of Our logos or trade marks (or any others displayed on KYND Products) without Our express written permission; and 4.1.5    You do not do so in a way that is calculated to damage Our reputation or to take unfair advantage of it. 4.2          You may not link to KYND Products from any website which contains material that: 4.2.1    Is sexually explicit; 4.2.2    Is obscene, deliberately offensive, hateful or otherwise inflammatory; 4.2.3    Promotes violence; 4.2.4    Promotes or assists in any form of unlawful activity; 4.2.5    Discriminates against, or is in any way defamatory of, any person, group or class of persons, race, sex, religion, nationality, disability, sexual orientation, or age; 4.2.6    Is designed or is otherwise likely to threaten, harass, annoy, alarm, inconvenience, upset, or embarrass another person; 4.2.7    Is calculated or is otherwise likely to deceive another person; 4.2.8    Is designed or is otherwise likely to infringe (or threaten to infringe) another person’s privacy; 4.2.9    Misleadingly impersonates any person or otherwise misrepresents the identity or affiliation of a particular person in a way that is calculated to deceive; 4.2.10   Implies any form of affiliation with Us where none exists; 4.2.11   Infringes, or assists in the infringement of, the intellectual property rights (including, but not limited to, copyright, trade marks, patents and database rights) of any other party; or 4.2.12   Is made in breach of any legal duty owed to a third party including, but not limited to, contractual duties and duties of confidence.

5. Links to Other Content

We may provide links to other content such as websites, web apps and downloadable apps. Unless expressly stated, this content is not under Our control. We neither assume or accept responsibility or liability for such third party content. The provision of a link by Us is for reference only and does not imply any endorsement of the linked content or of those in control of it.

6. User Content

6.1          You agree that you will be solely responsible for any and all User Content that you enter into the KYND Products. Specifically, you agree, represent and warrant that you have the right to enter the User Content and the right to use all materials of which it is comprised, that it will not contravene any aspect of Our Acceptable Usage Policy, detailed in Clause 7, and that it may lawfully be used by Supplier and/or KYND for the purposes of performing its services to you. 6.2          You agree that you will be liable to Us and will, to the fullest extent permissible by law, indemnify Us for any breach of the warranties given by you under sub-Clause 6.1. You will be responsible for any loss or damage suffered by Us as a result of such breach. 6.3          You (or your licensors, as appropriate) retain ownership of your User Content and all intellectual property rights subsisting therein. By entering User Content, you grant Us an unconditional, non-exclusive, fully transferable, royalty-free, perpetual, worldwide licence to use, store, archive, syndicate, publish, transmit, adapt, edit, reproduce, distribute, prepare derivative works from, display, perform and sub-licence your User Content solely for and limited to  the purposes of operating If you wish to remove User Content, you may do so by sending to us an email requesting such removal which will do within no later than 7 days of receipt.  Removing User Content also revokes the licence granted to Us to use that User Content under this sub-Clause 6.3. You acknowledge, however, that caching or references to your User Content may not be made immediately unavailable (or may not be made unavailable at all where they are outside of Our reasonable control). 6.4          We may reject, reclassify, or remove any User Content entered into the KYND Products where that User Content, in Our sole opinion, violates Our Acceptable Usage Policy, or if We receive a complaint from a third party and determine that the User Content in question should be removed as a result.

7. Acceptable Usage Policy

7.1          You may only use the KYND Products in a manner that is lawful and that complies with the provisions of this Clause 7.  Specifically: 7.1.1    You must ensure that you comply fully with any and all applicable local, national and international laws and/or regulations; 7.1.2    You must not use KYND Products in any way, or for any purpose, that is unlawful or fraudulent; 7.1.3    You must not use the KYND Products to knowingly send, upload, or in any other way transmit data that contains any form of virus or other malware, or any other code designed to adversely affect computer hardware, software or any data of any kind; and 7.1.4    You must not use the KYND Products in any way, or for any purpose, that is intended to harm any person or persons in any way. 7.2          We reserve the right to suspend or terminate your access to the KYND Products if you materially breach the provisions of this Clause 7 or any of the other provisions of this Agreement. Specifically, We may take one or more of the following actions: 7.2.1    Suspend, whether temporarily or permanently, your right to access the KYND Products; 7.2.2    Issue you with a written warning; 7.2.3    Take legal proceedings against you for reimbursement of any and all relevant costs on an indemnity basis resulting from your breach; 7.2.4    Take further legal action against you as appropriate; 7.2.5    Disclose such information to law enforcement authorities as required or as we deem reasonably necessary; and/or 7.2.6    Any other actions which We deem reasonably appropriate (and lawful). We hereby exclude any and all liability arising out of any actions (including, but not limited to, those set out above) that We may take in response to breaches of this Agreement.

8. Our Liability

8.1          To the fullest extent permissible by law, We accept no liability for any loss in contract, tort (including negligence), or breach of statutory duty, or otherwise arising out of or in connection with the use of (or inability to use) the KYND Products, any information produced by or resulting from use of the KYND Products, or the use of or reliance upon any Content (whether that Content is provided by Us or whether it is User Content) included in or resulting from your use of the KYND Products. 8.2          In any case, Our aggregate liability in respect of all claims arising out of or in connection with this Agreement (including as a result of breach of contract, negligence or any other tort, under statute or otherwise) during the entire term of the Agreement for more than one event or series of linked events shall be limited to no more than the fees (excluding VAT) paid by you to Us under this Agreement in the previous contract year or, if an event occurs in the first year of this Agreement, the value of the fees paid by you at the date of such event. 8.3          To the fullest extent permissible by law, we accept no loss or damage that is not foreseeable. 8.4          To the fullest extent permissible by law, We exclude all representations, warranties, and guarantees (whether express or implied) that may apply to the KYND Products or any Content (including User Content) included in the KYND Products or that may result from your use of the KYND Products. 8.5          We accept no liability for loss of profits, sales, business or revenue; loss of business opportunity, goodwill or reputation; loss of anticipated savings; business interruption; or for any indirect or consequential loss or damage. 8.6          We exercise all reasonable skill and care to ensure that the KYND Products is free from viruses and other malware. We accept no liability for any loss or damage resulting from a virus or other malware, a distributed denial of service attack, or other harmful material that may adversely affect your hardware, software, data or other material that occurs as a result of your use of the KYND Products  or any other website or service that We may provide a link to. 8.7          We neither assume nor accept responsibility or liability arising out of any disruption or non-availability of the KYND Products resulting from external causes including, but not limited to, ISP equipment failure, host equipment failure, communications network failure, natural events, acts of war, or legal restrictions and censorship. 8.8          Nothing in this Agreement excludes or restricts Our liability in any situation where it would be unlawful for us to do so including fraud or fraudulent misrepresentation, for death or personal injury resulting from negligence, or for any other forms of liability which cannot be excluded or restricted by law.

9. Viruses, Malware and Security

9.1          We exercise all reasonable skill and care to ensure that the KYND Products is secure and free from viruses and other malware. We do not, however, guarantee that the KYND Products is secure or free from viruses or other malware and accept no liability in respect of the same. 9.2          You are responsible for protecting your hardware, software, data and other material from viruses, malware and other internet security risks. 9.3          You must not deliberately introduce viruses or other malware, or any other material which is malicious or technologically harmful either to or via the KYND Products. 9.4          You must not attempt to gain unauthorised access to any part of the KYND Products, the server on which the KYND Products is stored, or any other server, computer, or database connected to the KYND Products.

10. Privacy and Cookies

The Use of the KYND Products is also governed by KYND Privacy and Cookie Policy available from www.kynd.io/privacy-policy. This policy is incorporated into these Terms and Conditions by this reference.

11. Support Service

11.1       During the term of this Agreement We will provide the support service in accordance with the terms and conditions defined in Annex 1 to this Agreement. 11.2       The following services will not be included as part of the support service:  (i) any services with respect to your or third‑party software or hardware; (ii) system integration; (iii) data mapping or conversion; (iv) operational procedures (e.g. back‑ups, report generation, etc.); (v) network management or trouble‑shooting; (vi) resolving problems resulting from your improper use of the KYND Products, or use of the KYND Products with non‑approved software or hardware or  from configuration activities carried out by you; or (vii) training. If you request and Supplier agrees to perform any service that is not included within the support services, you shall pay Supplier at its then current time‑and‑materials rates for such out‑of‑scope services. 11.3       You shall co-operate fully with the Supplier’s personnel in the performance of the support service and, without prejudice to the generality of the foregoing, make available to Supplier all information, documentation and materials reasonably required by Supplier to enable it to perform the support service. Should you not fulfil the abovementioned obligations, Supplier shall not be liable in case of non performance, lack of performance and/or any delays in carrying out of the support service.

12. Economic Conditions

12.1       In consideration of the license to use the KYND Products and of the related services granted herein by the Supplier, you shall pay to the Supplier the fees specified in Annex 2 to this Agreement, depending on which service (KYND Start or KYND ON) you selected in the registration form that you are required to compile when accepting these Terms and Conditions. You shall pay all invoices within the terms specified in Annex 2. 12.2       Notwithstanding any dispute between the Parties under this Agreement, you shall make all payments when due and you shall not assert any right of setoff or counterclaim against your obligation to make payments hereunder, nor shall any payments otherwise required hereunder be abated through accident or unforeseen circumstances.

13. Term and Termination

  13.1       This Agreement shall commence on the Effective Date and shall continue for one (1) year, and, thereafter, automatically renew for further periods of one (1) year unless earlier terminated by written notice sent by one Party to the other Party given not later than ninety (90) days prior to the end of the then current term. 13.2       The parties shall be entitled to terminate this Agreement forthwith by the giving of notice to the other, if the other is in material breach of any of its substantive obligations under this Agreement and in the case of a breach capable of remedy has failed to remedy such breach within 30 days of delivery of the notice requiring such remedy. 13.3       The parties may terminate this Agreement forthwith by the giving of notice to the other if the other suffers or threatens to suffer any form of liquidation or insolvency or administration in any jurisdiction or ceases or threatens to cease to carry on business, save that no such right of termination will arise by reason only of a solvent reconstruction, amalgamation or scheme of arrangement. 13.4       The termination of this Agreement shall be without prejudice to the rights of either party, which have accrued prior to such termination, or to any provision of this Agreement, which by its terms is intended to survive termination of this Agreement or in respect of any sums or other claims outstanding at the time of such termination. 13.5       On termination of this Agreement, for whatever reason: 13.6       the balance of any charges or other monies payable by you will immediately fall due for payment; 13.7       you shall immediately discontinue use of the KYND Products; 13.8       you shall promptly return or destroy any marketing or advertising materials provided by the Supplier. 13.9       The Supplier may terminate this Agreement in case there is a change of control (as defined in section 1124 of the Corporation Tax Act 2010) of your company, to which the Supplier reasonably objects, provided that the Supplier serves its notice within  three months of the date on which you inform the Supplier (by written notice) of the change of control, or within three months of the date on which the Supplier otherwise becomes aware of the change of control, provided it informs you (by written notice) it is so aware.

14. Data Protection

14.1       You undertakes to comply at all times with all Data Protection Legislation and any related legislation in so far as the same relates to the provisions and obligations of this Agreement. The Supplier undertakes to comply at all times with all Data Protection Legislation and any related legislation in so far as the same relates to the provisions and obligations of this Agreement, as updated from time to time. 14.2       Neither Party shall be liable for failures to comply with Data Protection Legislation by the other Party. 14.3       You recognises that

1. a)             the Supplier must legitimately process personal data (including, but not limited to, name and contact details) of your employees and other persons using the KYND Products service (where applicable) in order to deliver the service. This may include the management of contracts, activation of services, replying to any communications that you send to Us, sending you important notices, creating content, reports etc., provision of helpdesk services, administrative matters including invoicing, recording and monitoring usage of the KYND Products for billing purposes, and otherwise complying with Our obligations to you in accordance with the terms of this licence. For such processing activities, the Supplier is the Data Controller.
2. b)             We will share personal data (including, but not limited to, name and contact details) of your employees and other persons using the KYND Products service (where applicable) with KYND in order to deliver the KYND Products. KYND will become an autonomous Data Controller in respect of any personal data so transferred.
3. c)             We will also process personal data because it is necessary for Our legitimate interests, for example recovering money owed by you, seeking advice on rights and obligations or recording and monitoring the usage of the Service for security purposes. For such processing activities, We are the Data Controller.
4. d)             In respect of personal data for which We are the Data Controller, We may share the personal data with, or transfer it to, third parties that We engage to assist in delivering the services to you, including other companies in the CRIF Group; professional advisers where it is necessary to obtain their advice or assistance, including lawyers, accountants, IT services and infrastructure providers, data protection and information security advisers, public relations advisers, debt collection agencies, etc. Any third parties so engaged will be subject to a Data Processor Agreement as required under Data Protection Legislation. Transfers to Third Countries will be made in compliance with Data Protection Legislation.
5. e)             We may also share data with third parties and their advisers where those third parties are acquiring, or considering acquiring, all or part of our business.
6. f)               You are responsible for all necessary information notices or consents as required under Data Protection Legislation in respect of your transfer of employee and other persons’ data to Us for these purposes.
7. Confidentiality

  15.1         Both Parties undertake that, except as provided by sub-Clause 15.2 or as authorised in writing by the other Party, they shall at all times during the continuance of this Agreement and 3 years after its termination: 15.1.1  keep confidential all Confidential Information; 15.1.2  not disclose any Confidential Information to any other party; 15.1.3  not use any Confidential Information for any purpose other than as contemplated by this Agreement; 15.1.4  not make any copies of, record in any way or part with possession of any Confidential Information; and 15.1.5  ensure that (as applicable) none of its directors, officers, employees, agents or advisers does any act which, if done by that Party, would be a breach of the provisions of this Clause 15. 15.2         Subject to sub-Clause 15.3, either Party may disclose any Confidential Information to: 15.2.1   any of their sub-contractors, substitutes, or suppliers; 15.2.2   any party appointed to maintain the Equipment on which the Licensed Programs are being used (within the terms of the Licence); 15.2.3   any governmental or other authority or regulatory body; or 15.2.4   any of their employees or officers or those of any party described in sub-Clauses 15.2.1 to 15.2.3; 15.3         Disclosure under sub-Clause 15.2 may be made only to the extent that is necessary for the purposes contemplated by this Agreement, or as required by law.  In each case the disclosing Party must first inform the recipient that the Confidential Information is confidential.  Unless the recipient is a body described in sub-Clause 15.2.3 or is an authorised employee or officer of such a body, the disclosing Party must obtain and submit to the other Party a written undertaking from the recipient to keep the Confidential Information confidential and to use it only for the purposes for which the disclosure is made. 15.4         Either Party may use any Confidential Information for any purpose, or disclose it to any other party, where that Confidential Information is or becomes public knowledge through no fault of that Party. 15.5         When using or disclosing Confidential Information under sub-Clause 15.4, the disclosing Party must ensure that it does not disclose any part of that Confidential Information which is not public knowledge. 15.6         The provisions of this Clause 15 shall continue in force in accordance with their terms, notwithstanding the termination of this Agreement for any reason.

16. Communications from Us

16.1       We may from time to time send you important notices by email.  Such notices may relate to matters including, but not limited to, alerts and warnings, service changes, changes to this Agreement, and changes to the KYND Products.

17. Miscellaneous

17.1       We may transfer (assign) Our obligations and rights under this Agreement (and under the Contract, as applicable) to a third party (this may happen, for example, if We sell Our business).  If this occurs, you will be informed by Us in writing. Your rights under this Agreement will not be affected and Our obligations under this Agreement will be transferred to the third party who will remain bound by them. 17.2       You may not transfer (assign) your obligations and rights under this Agreement (and under the Contract, as applicable) without Our express written permission. 17.3       If any of the provisions of this Agreement are found to be unlawful, invalid or otherwise unenforceable by any court or other authority, that / those provision(s) shall be deemed severed from the remainder of this Agreement.  The remainder of this Agreement shall be valid and enforceable. 17.4       No failure or delay by Us in exercising any of Our rights under this Agreement means that We have waived that right, and no waiver by Us of a breach of any provision of this Agreement means that We will waive any subsequent breach of the same or any other provision.

18. Changes to this Agreement

18.1       We may alter this Agreement at any time. Any such changes will become binding on you upon your first use of the KYND Products after the changes have been implemented and notified to you by email. 18.2       Subject to clause 18.1, in the event of any conflict between the current version of this Agreement and any previous version(s), the provisions current and in effect shall prevail unless it is expressly stated otherwise.

19. Law and Jurisdiction

19.1       This Agreement, the Contract, and the relationship between you and Us (whether contractual or otherwise) shall be governed by, and construed in accordance with the laws of England & Wales. 19.2       Any disputes concerning this Agreement, the relationship between you and Us, or any matters arising therefrom or associated therewith (whether contractual or otherwise) shall be subject to the exclusive jurisdiction of the courts of England and Wales.           ANNEX 1  

1. PRODUCT SPECIFICATION – KYND Start

 

1. Product distributed via PDFs

 

1. Product Description

KYND Start is a one off cyber risk management report service which enables User to run a one-off risk report on a Subject.  

1. The following functionality is included;

Domain discovery: Identify domains owned by the Subject. These are listed in the report. Domain Risks: Summarize all high and medium risks identified and associated with the identified domains. Service Discovery: Identify external Internet facing services being run by the Subject. Service Risks: Summarize all high and medium risks identified and associated with the identified services. Phishing Risks: Identify whether domains owned by the Subject are being used or impersonated to host phishing or malware. Certificate Risks: Identify risks associated with the configuration of the websites owned by the Subject and the certificates associated with these. Email Security Risks: Analyse how the Subject has configured its email security and Identify any impersonation, spoofing and business email compromise risks associated with this. Comparative Risk Profiles (CRISPs): A comparison of the Subject versus its peers in the same industry sector. The comparison covers:

1. The percentage of services using out of date software
2. The percentage of services with known vulnerabilities
3. The percentage of certificates that have or are in danger of expiry
4. The percentage of domains with severe email security risks

The comparison places the Subject either inline, falling behind or a lagging versus its peers on each of these measures.  

1. the KYND Start ‘Full’ report contains:
2. An aggregated view of Red, Amber and Green Risk Factors;
3. Number of Domains discovered;

iii. Email security risks associated with the domain given by the User when the KYND Start report is created

1. Comparative Risk Profiles.
2. A curated set of 5 recommended actions for each Subject (available from 31.01.20)
3. The full list of all identified Risk Factors, the Domains and Services associated with each risk and details on how to resolve these.
4. PRODUCT SPECIFICATION – KYND ON

 

1. Product distributed via web interface

 

1. Product Description: KYND ON is a cyber risk management service. It is a subscription service which periodically discovers the infrastructure that belongs to a Subject and analyzes the cyber risks that may affect it. This monitoring starts from the date on which the Subject or User activates the Subject in KYND ON.

 

1. The following functionality is included;

Domain discovery: Identify domains owned by the Subject. Frequency: Minimum monthly   Domain Risks: Identify risks that exist in the Subject’s domains Frequency: Minimum monthly   Service Discovery:Identify external Internet facing services being run by the Subject. Frequency: Minimum monthly   Service Risks:Identify risks that exist in the Subject’s services. Frequency: Minimum monthly Phishing & Malware Risks: Identify whether domains owned by the Subject are being used or impersonated to host phishing or malware. Frequency: Minimum monthly   Website and Certificate Risks: Identify risks associated with the configuration of the websites owned by the  Subject and the certificates associated with these. Frequency: Minimum monthly   Customer Data Risks: Identify risks to the security of the customer data being held by the  Subject. This involves KYND creating unique synthetic identities which the Customer Business can insert into their databases. KYND will then monitor for and alert to any use or attempt to use these identities. Frequency: Daily   Service location: Identify the location(s) of the Subject’s services through IP data Frequency: Minimum Monthly   Email Security Risks: Analyse how the Subject has configured its email security and identify impersonation, spoofing and business email compromise risks associated with this. Frequency: Minimum Monthly   Comparative Risk Profiles (CRISPs): A comparison of the Subject versus its peers in the same industry sector. The comparison covers (for example);

1. The percentage of services using out of date software
2. The percentage of services with known vulnerabilities
3. The percentage of certificates that have or are in danger of expiry
4. The percentage of domains with severe email security risks

  The comparison places the Subject either inline, falling behind or a laggard versus its peers on each of these measures. Frequency: Minimum monthly   Domain Suppression: Allows the User to suppress new & previously identified risks for any domain.   Seed Domains: Allows the User to add additional ‘seed’ domains (at signup only) from which new domains will be discovered and new risks will be identified (see Product List Price below for number of available seed domains per Plan).

1. SUPPORT SERVICE

Support Services included: Level 1 Customer support will be provided via chat in English with an optional call me back capability. Level 1 support is only available to Users using the KYND Products. The hours of support will be 9 a.m. to 5 p.m. Monday to Friday. Level 1 support will deal with:

1. account access and activation support
2. basic “how to” questions about the web application
3. sufficient detail regarding any analysis results or alerts sent for the customer to be able to pass the information to their IT support function or partner for investigation or fix

Level 2 Customer support will be an escalation from Level 1 where an issue or support question requires detailed investigation by a cyber analysts or engineers and/or where more detailed information is required by the customer. Level 2 customer support is available to all Users.       ANNEX 2 ECONOMIC CONDITIONS

1. KYND Start economic conditions

Report	Fee	Minimum number of Credits Purchased
KYND START	£50.00

Note: All fees quoted are list price fees and exclude VAT at the applicable rate. Discounts may be applied from time to time as per particular marketing campaigns communicated in separate documents to You.

1.1 We will calculate the number of reports per User and invoice correspondent Fee according to the table before.

1.3  All fees will be billed in advance.

1.4 Product Price includes, product access via web application Level 1 customer support in English (where appropriate), Level 2 customer support in English

1. KYND ON economic conditions

 

Plan	Number of Seed domains	Monthly fee	Annual Fee	Synthetic Identities
A	1	£19.00	£228.00	1
B	1	£33.00	£396.00	2
C	2	£69.00	£828.00	10
D	5	£199.00	£2,388.00	20
E	10	£399.00	£4,788.00	50

Note: All fees quoted are list price fees and exclude VAT at the applicable rate. Discounts may be applied from time to time as per particular marketing campaigns communicated in separate documents to You.

1.1 We will calculate the Band in which the customer has been enrolled in accordance to the table above.

1.3. All fees for the 12 month minimum period will be billed in advance

1.4 Product Price to include, product access via web application, Level 1 customer support in English (where appropriate), Level 2 customer support in English