Definitions.

"Affiliate” means any entity not under sanctions or embargo restrictions by the U.S. Government that controls, is controlled by, or is under common control with the subject entity. “Control,” for purposes of this definition, means possessing, directly or indirectly, the power to direct or cause the direction of the management, policies, and operations of such entity, whether through ownership of voting securities, by contract or otherwise.

"Authorized Representative” means an entity that has entered into an agreement with AAI authorizing them to distribute or resell AAI Services to Customer.

"Confidential Information” has the meaning given to it in Section 4.1.

"Customer Data” means the electronic data or information, including Personal Data, submitted by Customer to the Services or through AAI’s support portal.

"Documentation” means AAI’s installation guides and/or manuals, operating instructions and technical specifications describing how to properly install, configure and use the Services, updated from time to time, and made available via download or during setup of the Services.

"DPA” means the most current version of AAI’s Data Processing Addendum, located at https://www.automationanywhere.com/DPA.pdf, and incorporated herein by reference.

"Free Trial” has the meaning given to it in Section 2.1.1.

"Order Form” means, for a Direct Purchase, an ordering document or online order referencing an AAI quotation and specifying the Services to be provided hereunder that is entered into between Customer or any of its Affiliates and AAI, including any addenda and supplements thereto.

"Personal Data” has the meaning given to it in the DPA.

"Purchase Agreement” means the agreement between Customer and Authorized Representative that describes the AAI Services to be purchased by Customer, however such agreement is titled.

"Services” means AAI’s software-as-a-service automation platform, inclusive of applications and downloaded components, as described in the Documentation and subscribed to under an Order Form or from an Authorized Representative, or provided to Customer under a Free Trial.

"Term” has the meaning given to it in Section 3.1.1.

1. Use Rights and Obligations. For any Services provisioned to Customer under an Order Form or through a Purchase Agreement, and subject to Customer’s compliance with the terms and conditions of this CAA, AAI grants to Customer a limited, non-exclusive, non-transferable, revocable right to access and use the Services (including a limited, non-exclusive, non-transferable, revocable license to use any associated downloaded components, such as bot agents or software sensors, needed to use the Services) in amounts provisioned for Customer by AAI solely for Customer’s internal use in connection with Customer’s ordinary business operations, for the term described in Section 3 below. Customer agrees to operate the Services in compliance with the terms of this CAA and any applicable laws. Customer may exercise its access and license rights under this Section 2.1 through its third-party service providers and Customer’s Affiliates, provided that such Affiliates and third-party service providers must at all times comply with the terms of this CAA, and provided further that Customer shall be responsible for the acts or omissions of such Affiliates and third-party service providers as if Customer had acted or failed to act in accordance with the terms of this CAA.
   1. Free Trials/Evaluations. If Customer registers for, and AAI agrees to provide a free trial, proof of concept or any other unpaid evaluation whatsoever labeled (hereinafter, a “Free Trial”), AAI will make the applicable Service(s) available to Customer on a trial basis free of charge for the term described in Section 3.1.3. Customer’s Free Trial shall be subject to the terms of this CAA.
2. Use Restrictions. Except as otherwise provided in this CAA or as required or permitted by a law that cannot be excluded or by the terms of a third-party license, Customer shall not, and shall not permit any employees, agents, or representatives to: (a) disclose, sell, assign, lease, commercially exploit or market any part of the Services or AAI Confidential Information in any way or manner; (b) copy, modify, enhance, translate, supplement, create derivative works from, or remove any proprietary notices or labels from any part of the Services or AAI Confidential Information; (c) disassemble, decompile, reverse engineer or otherwise attempt to discover the source code, object code or underlying structure, ideas, know-how or algorithms relevant to the Services or any AAI Confidential Information; (d) use the Services to create bots or other automated processes that are designed to violate any applicable laws, regulations or policies, or terms of use imposed by any third parties; or (e) use any Services which have not been provisioned by AAI or an Authorized Representative for Customer’s use under this CAA. Except as expressly permitted in this CAA, Customer shall not cause or permit competitive analysis, benchmarking, or the use, evaluation or viewing of the Services for the purpose of testing, designing, modifying, or otherwise creating any software program, or any portion thereof, that performs functions similar to the functions performed by the Services. Any use of the Services in breach of the foregoing by Customer that reasonably threatens the security, integrity or availability of the Services, may result in AAI’s immediate suspension of the Services; however, AAI will use commercially reasonable efforts under the circumstances to provide Customer with notice and an opportunity to remedy such violation or threat prior to any suspension.
3. Customer Responsibilities. Customer is responsible for use of the Services by all users to whom it grants its account credentials. Therefore, Customer must:
   • Ensure it grants administrator privileges to qualified personnel.
   • Ensure that its users do not share their passwords.
   • Ensure and maintain security of its systems and the machines that connect to and use the Services, including implementation of critical patches and operating system updates.
   • Create backups of its data and Customer Data processed through the Services or during the provision of support services.
4. Ownership; Intellectual Property Protection. Subject to the limited rights expressly granted hereunder, AAI, its Affiliates, and its licensors reserve all of their right, title and interest in and to the Services, including all of their related intellectual property rights. No rights are granted to Customer hereunder other than as expressly set forth herein. The placement of a copyright notice on any part of the Services or AAI Confidential Information will not constitute publication or the permission to publish or otherwise impair the confidential or trade secret nature of the Services or AAI Confidential Information. Customer grants to AAI and its Affiliates a worldwide, perpetual, irrevocable, royalty-free license to use and incorporate into its Services any suggestion, enhancement request, recommendation, correction or other feedback provided by Customer relating to the operation of the Services, but only to the extent that any such feedback does not contain Customer Confidential Information. As between AAI and Customer, Customer owns its Customer Data, and AAI makes no claims to ownership thereto.

1. Term.
   1. Term of CAA. This CAA commences on the date Customer accepts it and continues until all subscriptions and/or Free Trials hereunder have expired or have been terminated (the “Term”).
   2. Term of Purchased Services. The term of each subscription for purchased Services shall begin on the date AAI makes the Services available to Customer and shall extend for the period as specified in the applicable Order Form or Purchase Agreement. For Direct Purchases, except as otherwise specified in an Order Form, or unless either party gives the other written notice of its intent not to renew at least sixty (60) days before the end of the relevant subscription term, Customer’s payment for a renewed subscription will extend the subscription term for an additional period equal to the expiring subscription term or one year (whichever is shorter). For Direct Purchases, except as expressly provided in the applicable Order Form, renewal of promotional or one-time priced subscriptions will be at AAI’s applicable list price in effect at the time of the applicable renewal.
   3. Term of Free Trials. The term of each Free Trial shall extend until (a) the expiry of the license keys issued, or online access granted in respect of such Free Trial, or (b) the start date of any purchased Services subscriptions ordered by Customer for such Services, or (c) terminated by AAI in its sole discretion.
2. Termination. This CAA may be terminated: (a) by a party immediately by written notice upon the occurrence of either of the following events: (i) if the other party ceases to do business; or (ii) if the other party becomes insolvent or seeks protection under any bankruptcy, receivership, trust, deed, creditor's arrangement, or comparable proceeding, or if any such proceeding is instituted against the other party and not dismissed within sixty (60) days (provided that in either case, only the party not experiencing the event(s) may elect to terminate) except that if Customer is purchasing Services in France, this CAA may be terminated if the other party becomes insolvent or seeks protection under bankruptcy proceeding solely in compliance with applicable French bankruptcy legislation; and (b) by the non-breaching party immediately upon written notice if the other party breaches any of its material obligations under this CAA, including failure to timely pay fees, and fails to cure such breach within thirty (30) days following receipt of written notice from the non-breaching party.
3. Effect of Termination. Upon termination or expiration of this CAA, Customer will cease all use of all Services provided hereunder and return, or destroy upon AAI’s request, all copies of any part of the Services then in Customer’s possession or under Customer’s control. The terms in Sections 2.2, 2.4, 3.3, 4, 5, 9-11, 13, 14, and 16-18 will survive any termination or expiration of this CAA.

1. Confidential Information. As used herein, “Confidential Information” shall mean (a) as to AAI, any software utilized by AAI in the provision of the Services, and its respective source code; (b) as to Customer, Customer Data; (c) each party’s business or technical information, including but not limited to the Documentation and SOC1 and SOC2 audit reports (in the case of AAI), training materials, any information relating to software plans, designs, costs, prices, finances, marketing plans, business opportunities, personnel, research, development or know-how that is designated by the disclosing party as "confidential" or "proprietary" or the receiving party knows or should reasonably know is confidential or proprietary; and (d) as to each party, the terms, conditions, and pricing of this CAA (but not its existence or parties).
2. Exclusions. Confidential Information shall not include information that: (a) is or becomes known or available to the public, other than through a breach of an obligation hereunder by the receiving party; (b) is lawfully acquired by the receiving party from a third party without breach of a confidentiality restriction; (c) the receiving party can demonstrate by written proof was (i) already in its possession at the time it was disclosed hereunder by the disclosing party or (ii) was independently developed by the receiving party without use of the disclosing party’s Confidential Information; or (d) has been approved for disclosure by the disclosing party.
3. Confidentiality Obligations. The receiving party will hold and maintain the disclosing party’s Confidential Information in confidence, exercising at least the same degree of care as the receiving party customarily exercises to protect its own proprietary information, but in no event with less than reasonable care. The receiving party will not, without the disclosing party’s prior written consent: (a) disclose any portion of the Confidential Information to any person or entity other than its and its Affiliates’ directors, officers, employees, agents or consultants who reasonably need access to the Confidential Information to fulfill the permitted uses described herein and who are bound to protect the Confidential Information on terms substantially similar to those in this CAA; or (b) use Confidential Information except as permitted in this CAA, including for the purpose of discussing the business relationship between the parties. Notwithstanding the foregoing, the receiving party may produce or disclose Confidential Information as required pursuant to applicable laws, regulations, or court order, provided that it first gives the disclosing party notice of the request, if permitted, such that the disclosing party has an opportunity to defend, limit or protect such production or disclosure.

1. Subscription Fees. The subscription fee and any other fees due for the Services will be reflected in the Order Form. An Order Form constitutes a legally binding commitment to purchase, and the relevant fees are due and non-refundable (except where expressly set out otherwise in this CAA) even if this CAA expires or is terminated earlier than the expiration of the relevant subscription term reflected in the Order Form. In the event Customer’s Affiliates wish to execute Order Forms directly with AAI, they must execute AAI's standard affiliate agreement directly with AAI, binding themselves to the terms of this CAA. Customer acknowledges that AAI may change its fees for Services at any time, provided that, any such change shall not affect the Customer’s then-current fees until the end of the subscription term set forth in the applicable Order Form.
2. Services Changes. If Customer’s use of the Services exceeds a Services capacity as set forth in the Order Form, then AAI reserves the right to bill for such increased usage at AAI's then-current applicable list prices, if applicable, and Customer agrees to pay the additional fees in the manner provided herein.
3. Payment Terms. Unless otherwise stated on an applicable Order Form, all invoices are payable in US Dollars within thirty (30) days after the receipt of the relevant invoice. All prices are exclusive of all taxes, duties, or other government fees of any kind, except for taxes imposed on AAI’s income by the taxing authority in AAI’s home jurisdiction, and Customer shall pay AAI such additional amount as shall cause the net amount of the aggregate payment to AAI, after giving effect to any taxes required to be collected or deducted by AAI, to equal the amount of the payment otherwise due to AAI under this CAA. AAI may impose interest on late payments at the lower of 1.5% per month or the maximum rate allowable by applicable law. Customer shall pay all of AAI’s reasonable fees, costs, and expenses (including reasonable attorney’s fees) if any action including legal action is required to collect outstanding undisputed balances.
4. Suspension of Services. If any fees owed by Customer under this CAA are thirty (30) days or more overdue, AAI may, without limiting its other rights and remedies, suspend the Services following five (5) days’ written notice that it will do so, until such amounts are paid in full. AAI will not suspend the Services if Customer is disputing the applicable fees reasonably and in good faith and is cooperating diligently to resolve the dispute.

1. Indemnification by AAI: AAI will defend, indemnify, and hold Customer harmless from any damages or losses that it may incur by reason of or arising out of any third-party claim that any part of the Services (including any associated downloaded components, such as bot agents, needed to use the Services) infringes any patent or copyright or misappropriates any trade secret. In any action based on a claim of infringement, AAI may, at its sole option and expense: (a) procure for Customer the right to continue using the applicable Services under the terms of this CAA; (b) replace or modify the affected portion of the Services with a replacement or modification that permits the Services to function in substantially equivalent form as with the infringing portion of the Services; or (c) if options (a) and (b) above are not reasonably commercially available or practicable, then AAI may terminate Customer’s rights and AAI’s obligations hereunder with respect to the affected portion of the Services, in which case AAI will refund a pro rata portion of any prepaid fees (through the Authorized Representative in the case of an Indirect Purchase) for such affected portion of the Services equal to the period of time from the date of termination to the end of the then-current subscription term.
2. Indemnification Procedures. AAI’s indemnification obligations under this Article 6 are conditioned upon Customer: (a) promptly notifying AAI in writing of the claim; (b) granting AAI sole control of the defense and settlement of the claim, provided that Customer shall have the right to reject any settlement that requires it to admit wrongdoing or liability; and (c) providing AAI with all assistance (at AAI’s expense), information, and authority reasonably required for the defense and settlement of the claim.
3. Indemnity Exclusions. AAI will have no liability for any claim described in Section 6.1 to the extent that it would not have occurred but for: (a) modifications to the Services made by Customer or a party acting on Customer's behalf (other than modifications made at AAI's written direction); (b) the combination, operation or use of the Services with equipment, devices, software or data not supplied by AAI (including, without limitation, using the Services to automate Customer-selected software or processes); (c) Customer’s failure to use updated or modified forms of the Services provided by AAI; (d) Customer’s use of the Services other than in accordance with this CAA; or (e) compliance by AAI with designs, plans or specifications furnished by or on behalf of Customer.
4. THE PROVISIONS OF THIS ARTICLE 6 SET FORTH AAI’S SOLE AND EXCLUSIVE OBLIGATIONS, AND CUSTOMER’S SOLE AND EXCLUSIVE REMEDIES, WITH RESPECT TO INFRINGEMENT OR MISAPPROPRIATION OF THIRD-PARTY INTELLECTUAL PROPERTY RIGHTS.

1. Services Warranty. AAI warrants to Customer that during each subscription term the Services will perform in all material respects in accordance with the Documentation. The foregoing warranty does not apply to any Services that have been used in a manner other than as set forth in the Documentation and authorized under this CAA, to the extent such improper use causes the Services to be nonconforming. AAI does not warrant that the use or availability of the Services will be uninterrupted or error-free, or that all errors in the Services will be corrected. Any claim submitted under this Section 7.1 must be submitted in writing to AAI within thirty (30) days of Customer becoming aware of the warranty issue. AAI’s entire liability for any breach of the foregoing warranty is to repair, replace, or find a workaround for any nonconforming portion of the Services so that the affected Services operate as warranted or, if AAI is unable to repair, replace, or put in place a workaround, AAI may terminate the subscription for such Services and refund a pro rata portion of any prepaid fees for such affected portion of the Services equal to the period of time from the date of termination to the end of the then-current subscription term. If Customer purchases professional services from AAI under this CAA, AAI warrants to Customer that any such professional services provided hereunder shall be professional, workmanlike and performed in a manner conforming to the generally accepted industry standards and practices for similar services. Customer’s sole and exclusive remedy for any nonconforming professional services under this warranty shall be for AAI to re-perform the nonconforming services or, at AAI's sole election, to refund the applicable services fees, but subject to Customer informing AAI of any such nonconformity within thirty (30) days from the date of performance of the nonconforming service.
2. Malicious Code Warranty. AAI warrants to Customer that: (a) AAI applies industry standard tools to identify and eliminate viruses and other malware from the Services; and (b) the Services shall be free of: (i) functions or routines that are designed to surreptitiously delete or corrupt data in such a manner as to interfere with the normal operation of the Service, (ii) undisclosed “Time Bombs,” time-out or deactivation functions or other means designed to terminate the operation of the Services (other than at the end of a subscription term); (iii) “Back Doors” or other means designed to allow remote access and/or control a Customer’s networks; and (iv) any codes or keys designed to have the effect of disabling or otherwise shutting down all or any portion of the Services or limiting its functionality.
3. OTHER THAN THE EXPRESS WARRANTIES MADE BY AAI HEREIN, THE PARTIES ACKNOWLEDGE THAT THE SERVICES AND PROFESSIONAL SERVICES PROVIDED TO CUSTOMER PURSUANT TO AND FOR THE PURPOSES OF THIS CAA ARE PROVIDED "AS IS," “AS AVAILABLE,” AND WITHOUT ANY WARRANTY WHATSOEVER. AAI DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS, IMPLIED OR STATUTORY INCLUDING, WITHOUT LIMITATION, ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT OF THIRD-PARTY RIGHTS, OR ACCURACY OR COMPLETENESS OF RESPONSES OR RESULTS. NO AAI AGENT OR EMPLOYEE IS AUTHORIZED TO MAKE ANY MODIFICATIONS, EXTENSIONS, OR ADDITIONS TO THIS WARRANTY. TO THE EXTENT THE LAWS OF CUSTOMER’S JURISDICTION DO NOT PERMIT SUCH DISCLAIMER WITH RESPECT TO THE SERVICES AS PURCHASED HEREUNDER, AAI PROVIDES ONLY THE MINIMUM LAWFUL WARRANTY BEYOND THAT WARRANTY EXPRESSLY MADE ABOVE AND DISCLAIMS ALL WARRANTIES TO THE EXTENT PERMITTED BY APPLICABLE LAW. THE SERVICES ARE NOT DESIGNED OR INTENDED FOR USE WITH, AND SHOULD NOT BE USED IN CONNECTION WITH, HAZARDOUS APPLICATIONS, SUCH AS OPERATION OF NUCLEAR FACILITIES, LIFE SUPPORT, WEAPONS, AIRCRAFT NAVIGATION OR COMMUNICATION, AND/OR PROCESS CONTROL THAT COULD RESULT IN DEATH, INJURY OR ENVIRONMENTAL IMPACT. THE PARTIES ACKNOWLEDGE THAT THE DISCLAIMERS IN THIS SECTION ARE A MATERIAL PART OF THIS CAA, AND AAI WOULD NOT HAVE ENTERED INTO THIS CAA BUT FOR SUCH DISCLAIMERS.
4. The warranties set forth in Section 7.1 above apply to purchased Services and professional services only, and do not apply to Free Trials.

1. Direct Purchase Services. During the Term and subject to Customer’s compliance with the terms and conditions of this CAA, AAI will provide support for purchased Services in accordance with its then-current support policy as more fully described at https://www.automationanywhere.com/technical-support-terms.
2. Indirect Purchase Services. Support for Customer’s Services will be provided by or through the respective Authorized Representative under the terms of the applicable Purchase Agreement.
3. Free Trials. Support is not provided for Free Trials.
4. Uptime Availability SLA.Throughout the Term of this CAA and subject to Customer’s compliance with the terms and conditions of this CAA including full payment for the Services, AAI will provide the Services in accordance with its then-current uptime availability standards established by the Service Level Agreement (“SLA”) which is available at https://www.automationanywhere.com/uptime-availability-SLA. In the event AAI fails to satisfy the terms of the SLA, in whole or in part, Customer shall have such rights and remedies as are set forth in the SLA.

1. Limitation of Liability. TO THE MAXIMUM EXTENT PERMITTED BY LAW, AND EXCEPT WITH RESPECT TO (A) AAI’S INFRINGEMENT INDEMNIFICATION OBLIGATIONS IN SECTION 6, (B) EITHER PARTY’S BREACH OF ITS CONFIDENTIALITY OBLIGATIONS SET FORTH IN SECTION 4 (EXCLUDING BREACHES RELATED TO CUSTOMER’S PERSONAL DATA, WHICH ARE ADDRESSED IN SECTION 10.1.2), (C) EITHER PARTY’S WILLFUL MISCONDUCT AND/OR FRAUD, (D) EITHER PARTY’S LIABILITY FOR DEATH, PERSONAL INJURY, OR TANGIBLE PERSONAL PROPERTY DAMAGE, (E) EITHER PARTY’S UNAUTHORIZED USE, DISTRIBUTION, OR DISCLOSURE OF THE OTHER PARTY’S INTELLECTUAL PROPERTY, OR (F) CUSTOMER’S PAYMENT OBLIGATIONS:
   1. IN NO EVENT SHALL EITHER PARTY’S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS CAA, WHETHER IN CONTRACT, TORT OR OTHERWISE, EXCEED THE FEES PAID BY CUSTOMER UNDER THIS CAA AND/OR UNDER THE PURCHASE AGREEMENT DURING THE TWELVE (12) MONTHS PRIOR TO THE EVENT GIVING RISE TO LIABILITY. FOR FREE TRIALS, NEITHER PARTY’S AGGREGATE LIABILITY SHALL EXCEED ONE HUNDRED DOLLARS ($100.00).
   2. NOTWITHSTANDING SECTION 10.1.1 ABOVE, AAI’S AGGREGATE LIABILITY FOR (A) A BREACH OF THIS CAA RESULTING IN A SUCCESSFUL SECURITY INCIDENT (AS DEFINED IN THE DPA), OR (B) A BREACH OF AAI’S CONFIDENTIALITY OBLIGATIONS UNDER THIS CAA (AS IT RELATES TO CUSTOMER’S PERSONAL DATA ONLY), SHALL NOT EXCEED TWO TIMES (2X) THE FEES PAID BY CUSTOMER UNDER THIS CAA AND/OR THE PURCHASE AGREEMENT DURING THE TWELVE (12) MONTHS PRIOR TO THE EVENT GIVING RISE TO LIABILITY.
2. Exclusion of Damages. EXCEPT WITH RESPECT TO: (A) AMOUNTS TO BE PAID BY AAI PURSUANT TO A COURT AWARD OR SETTLEMENT UNDER AAI’S INFRINGEMENT INDEMNIFICATION OBLIGATIONS; (B) EITHER PARTY’S BREACH OF ITS CONFIDENTIALITY OBLIGATIONS SET FORTH IN SECTION 4; (C) EITHER PARTY’S WILLFUL MISCONDUCT AND/OR FRAUD, OR (D) EITHER PARTY’S VIOLATION OF, OR UNAUTHORIZED USE, DISTRIBUTION, OR DISCLOSURE OF, THE OTHER PARTY’S INTELLECTUAL PROPERTY, NEITHER PARTY SHALL BE LIABLE FOR ANY PUNITIVE, SPECIAL, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING ANY COST OF PROCUREMENT OF SUBSTITUTE SERVICES AND LOSS OF USE, DATA, BUSINESS, OR PROFITS), REGARDLESS OF THE THEORY OF LIABILITY OR WHETHER THE LIABLE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, AND REGARDLESS IF A PARTY’S REMEDY OTHERWISE FAILS OF ITS ESSENTIAL PURPOSE.
3. No Limitation of Liability by Law. Because some jurisdictions do not allow liability or damages to be limited to the extent set forth above, some of the above limitations may not apply.

1. DPA. To the extent AAI’s provision of the Services under this CAA is deemed under Applicable Data Protection Laws to involve the Processing of Customer Personal Data, where Customer acts as Controller of such Personal Data (as those terms are defined in the DPA), the DPA shall apply.
2. Data Retention/Use. Customer agrees that AAI will retain PHI (as defined in Section 11.3) and Personal Data for only those periods described in AAI’s Privacy Policy (at https://www.automationanywhere.com/privacy), will routinely destroy such information, and will not be responsible or liable for the deletion, correction, destruction, damage, or loss of any PHI or Personal Data. Customer agrees that AAI may use information, in an anonymized and aggregated format, obtained from Customer’s use of the Services, such as by tracking click actions, access information, runtime behavior and other usage telemetry and metadata derived from Customer’s use of the Services, to assess how the Services are performing and to analyze, diagnose, enhance and improve AAI’s service offerings and models (“Service Improvement”) including and as further described in AAI’s Privacy Policy.
3. Business Associate Agreement. If Customer is a Covered Entity or a Business Associate and the Personal Data includes Protected Health Information or “PHI” (as those previously undefined and capitalized terms are defined in the Health Insurance Portability and Accountability Act of 1996), Customer shall not transfer or otherwise disclose to AAI any such PHI prior to the effectiveness of an applicable written Business Associate Agreement (“BAA”) as set forth in this Section 11.3. If Customer is a Covered Entity and the Personal Data includes PHI, the BAA available at https://www.automationanywhere.com/support/CoveredEntityBAA.pdf shall apply and is hereby incorporated into this CAA by reference. If Customer is a Business Associate, and the Personal Data includes PHI, the BAA available at https://www.automationanywhere.com/support/Sub-ContractorBAA.pdf shall apply and is hereby incorporated into this CAA by reference.
4. Security/Technical and Organizational Measures ("TOMs") During the Term of this CAA, AAI shall maintain a formal security program materially in accordance with industry standards that is designed to: (i) ensure the security and integrity of Customer Data; (ii) protect against threats or hazards to the security or integrity of Customer Data; and (iii) prevent unauthorized access to Customer Data. Such security program will conform to the security TOMs identified in the DPA, which may be updated from time to time, and which are incorporated herein by reference. In no event during the Term shall AAI materially diminish the protections provided by the controls set forth in AAI’s TOMs. Through an independent third-party auditor, AAI performs regularly scheduled penetration tests (“Pen Tests”) to test the security of the Services. Upon Customer’s request, AAI will provide Customer, subject to the terms of Section 4, with a copy of AAI's then-current Pen Tests results, and SOC1 and SOC2 audit reports or comparable industry-standard successor reports prepared by AAI’s independent third-party auditor. AAI will maintain ISO27001:2013 and ISO22301:2019 and Type 2 SOC 1 and Type 2 SOC 2 certifications throughout the Term.

1. Governing Law. This CAA is governed by the laws of the State of California, without regard to its conflict of laws principles. The parties agree that the United Nations Convention on Contracts for the International Sale of Goods and the Uniform Computer Information Transactions Act shall not apply to this CAA. The parties submit to exclusive jurisdiction and venue in an appropriate court sitting in Santa Clara County, California, USA.
2. Notices. All notices related to this CAA shall be made in writing in English and shall be effective upon (a) personal delivery, (b) the second business day after mailing (or, if posted internationally, the fifth business day after mailing), and (c) the day of emailing (provided that notices of termination and indemnifiable claims shall also be sent by the processes described in (a) and (b) in addition to email). Notices sent to AAI shall be addressed to: 633 River Oaks Parkway, San Jose,‎ CA‎ 95134 U.S.A., ATTN: General Counsel, and/or emailed to: legalnotices@automationanywhere.com. Notices sent to Customer shall be sent to the Customer address on the applicable Order Form unless Customer has notified AAI of another address in accordance with this Section. Any notice given in conformance with this Section shall be effective upon actual delivery or refusal of delivery.
3. Assignment. Neither party may assign this CAA or any right or obligation hereunder without the other party’s prior written consent; provided, however that AAI may assign this CAA to a subsidiary or Affiliate or a successor in interest in case of a merger or acquisition of AAI or in case of a transfer of all or substantially all of its assets, or the assets of a major division, to another entity. This CAA will be binding upon and inure to the benefit of the parties hereto and their respective successors and assigns.
4. Third-Party Beneficiaries/Independent Contractors. No person or entity other than the parties hereto will have any right to enforce or seek enforcement of this CAA. There are no third-party beneficiaries to this CAA. Each party will perform its obligations hereunder as an independent contractor and not as an agent or representative of the other party. Nothing in this CAA will be deemed or construed as creating a partnership, joint venture, or any similar relationship between the parties.
5. Entire Agreement/Order of Precedence. This CAA, together with applicable Order Forms, the documents linked hereto and any exhibit(s) (as applicable) referenced herein, constitutes the entire understanding between Customer and AAI with respect to the subject matter hereof. No terms or conditions set forth in any purchase order or other document provided by Customer to AAI shall be part of any agreement between AAI and Customer unless specifically accepted by AAI in writing. In the event of a conflict between the terms of this CAA and the terms of an Order Form (other than payment terms), a document linked hereto or any exhibit(s) (as applicable) referenced herein, the terms of this CAA shall take precedence and control unless the Order Form or other document explicitly references and overrides a provision of this CAA.
6. Modification/Waiver/Severability. No modification of this CAA will be binding, unless in writing and signed by an authorized representative of each party. Any express waiver or failure to exercise promptly any right under this CAA will not create a continuing waiver or any expectation of non-enforcement. If any provision of this CAA shall for any reason be held illegal or unenforceable, such provision shall be deemed severable from the remaining provisions of this CAA and shall in no way affect or impair the validity or enforceability of the remaining provisions of this CAA, unless such omission would frustrate the intent of the parties, in which case this CAA may be reformed to give effect to the other provisions hereof.

1. General Provisions. Section 17.1 is deleted in its entirety and replaced with the following:
2. Governing Law. This CAA is governed by the laws of the State of California, without regard to its conflict of laws principles. The parties agree that the United Nations Convention on Contracts for the International Sale of Goods and the Uniform Computer Information Transactions Act shall not apply to this CAA. As for any disputes arising out of and/or from the CAA, the parties shall agree on the competent jurisdiction; provided that if the parties cannot reach an agreement on a competent jurisdiction, the parties shall comply with Korean Civil Procedure Law for this limited purpose.