The CluePoints Trust Center

1. Purpose
Recipient may access the security, privacy, and compliance information CluePoints makes available through the Trust Center (the “Trust Center Materials”) solely to evaluate, establish, or maintain a business relationship with CluePoints, including assessing its security and compliance posture (the “Permitted Purpose”).
2. Confidential Information
2.1 “Confidential Information” means all Trust Center Materials, including penetration test reports, SOC 2 Type II and other audit or attestation reports, certifications, security policies and questionnaires, risk assessments, and vulnerability, incident, and remediation information, as well as any findings described in them. All Trust Center Materials are confidential whether or not marked.
2.2 It does not include information Recipient can show by written evidence: (a) it lawfully knew before disclosure; (b) is or becomes public through no fault of Recipient; (c) it lawfully received from a third party free of any duty of confidence; or (d) it independently developed without use of the Confidential Information.
3. Recipient’s Obligations
3.1 Recipient shall use the Confidential Information only for the Permitted Purpose, keep it strictly confidential, and protect it with at least reasonable care.
3.2 Recipient may share it only with its employees and professional advisors who need it for the Permitted Purpose and are bound by confidentiality obligations at least as protective as these; Recipient is responsible for their compliance.
3.3 Recipient shall not copy, download, or extract the Trust Center Materials except as reasonably necessary for the Permitted Purpose, and shall not remove any confidentiality notices.
3.4 If compelled by law to disclose, Recipient may do so provided it (where legally permitted) gives CluePoints prompt prior notice and discloses only what is required.
4. Ownership; No Warranty
The Confidential Information and all intellectual property rights in it remain CluePoints’ property; no licence is granted except use for the Permitted Purpose. The Confidential Information is provided “AS IS,” with no warranties, and neither Party is obligated to proceed with any transaction.
5. Term
This Agreement takes effect on acceptance and continues until terminated by CluePoints. Recipient’s obligations for each item of Confidential Information survive three (3) years from its disclosure (and, for trade secrets, for as long as they remain trade secrets).
6. Return or Destruction
On CluePoints’ request, or when no longer needed, Recipient shall stop accessing and return or destroy all Confidential Information (certifying destruction if asked), except copies required by law or routine back-up, which stay subject to this Agreement.
7. Equitable Relief
Unauthorized use or disclosure may cause CluePoints irreparable harm, so CluePoints may seek injunctive or other equitable relief, without posting bond, in addition to other remedies.
8. Data Protection
Personal data collected under this Agreement is processed by CluePoints as controller in accordance with the GDPR and other applicable law and CluePoints’ privacy notice at https://cluepoints.com/privacy-policy/.
9. General
Recipient may not assign this Agreement without CluePoints’ consent; CluePoints may assign it to an affiliate or in a corporate transaction. This is the entire agreement on Trust Center access; any separate signed NDA between the Parties governs to the extent of conflict. No failure to enforce is a waiver, and if any provision is unenforceable the rest remains in effect.
9.1 Governing Law. This Agreement is governed by the laws of England and Wales, and the Parties submit to the exclusive jurisdiction of the courts of England and Wales, except that CluePoints may seek injunctive relief in any competent court.
9.2 Electronic Acceptance. Clicking “I Accept” (or accessing the Trust Center Materials) is a binding electronic signature. The individual accepting confirms they are 18 or over and authorized to bind the organization named above.