PindropⓇ Pulse for Meetings

Terms of Service 

Last Updated: April 16, 2026

These Terms of Service (the "Terms") establish what you can expect from us as you use Pindrop services, and what we expect from your company. Please read these Terms carefully because they are a binding agreement between your company (“Company”) and Pindrop Security, Inc. (“Pindrop”). By entering into an Order with Pindrop for a Pindrop® Pulse for Meetings (the "Product") subscription, Company is agreeing to these terms. These Terms will start on the calendar day of the initial Order between the parties (the "Terms Effective Date"). Capitalized terms not defined within the body of a given paragraph have the meanings assigned in Section 10 (Definitions) below.
Company's Agreement with Pindrop

1.  Engagement Model

(a) Marketplace and Meeting Platform Relationship. Company's rights and obligations to the Marketplace Provider and the Meeting Platform provider (including installation, platform integration, meeting platform use, and any related fees) are governed solely by Company's agreement(s) with those providers (the “Company Provider Agreements”). Company shall look exclusively to the Marketplace Provider and/or Meeting Platform provider for any claims, disputes, or obligations arising from those relationships.  

(b) Pindrop Relationship. Company's rights to access and use the Product and obtain Services are governed solely by these Terms. Company shall look exclusively to Pindrop for any claims, disputes, or obligations applicable to Products and Services arising under these Terms.

2.  Use of Products and Services

(a) Subscriptions.  Unless otherwise provided in the applicable Order, the Products and Services are purchased as subscriptions for the Subscription Term stated in the applicable Order.  Company agrees that its purchases are not contingent on Pindrop’s delivery of any future functionality or features, or dependent on any oral or written comments made by Pindrop regarding future functionality or features.

(b) Company Use Rights.  Subject to the terms and conditions in these Terms and each applicable Order, Pindrop hereby grants to Company a limited, non-exclusive, non-transferable (except as expressly provided in these Terms with respect to the entire agreement) right during the Subscription Term to (i) allow Users to access and use the Product within the Authorized Geography and add the Security Assistant to one or more Meetings in accordance with these Terms and the Documentation solely for security purposes; and (ii) retain and use the portion of the Outputs that are available to Users via the Product’s user interface or exportable reports solely for security and Company’s internal recordkeeping purposes during and after the Subscription Term; provided that the Outputs remain the Confidential Information of Pindrop and subject to the obligations of confidentiality and use restrictions set forth in these Terms.  For clarity, to the extent Company Data is contained in an Output, nothing in this Section shall restrict Company’s right to use its own Company Data in any manner.  

(c) General Company Responsibilities. Company (i) will be responsible for its Users’ compliance with these Terms and the Documentation; (ii) will be responsible for the accuracy, quality and legality of the Company Data; (iii) will comply with Pindrop’s acceptable use policy available at https://www.pindrop.com/pindrop-acceptable-use-policy/; (iv) warrants, acknowledges and agrees that (A) Company hereby provides its express written consent, on behalf of itself and its personnel (e.g., its Users and any other Meeting Participants affiliated with or employed by Company), to Pindrop and its subprocessors to record the Meetings (each a “Meeting Recording”) and analyze the Meetings, and Company represents that at least one Company employee will be present as a participant in each Meeting; (B) Company will, on behalf of itself and Pindrop, provide all required notices to, and obtain all required consents from, Meeting Participants in compliance with applicable Laws with respect to the Outputs and Company Data; and (C) Company is solely responsible for complying with all applicable Laws regarding its use and access to the Product and Outputs; and (v) will use commercially reasonable efforts to prevent unauthorized access to and use of the Product, and notify Pindrop promptly of any such unauthorized access or use (collectively, (i) through (v) are referred to as the “Company Responsibilities”).  Pindrop may modify the Product and/or suspend Company’s access and use of the Product as it deems necessary to address compliance with applicable Laws.  

(d) Restrictions. Company will not: (i) provide, transmit, or otherwise make available through the Product any Company Data that would violate the Payment Card Industry Data Security Standard (PCI DSS), as amended from time to time, including without limitation any credit security validation (CSV) number, credit card account number, or other payment card information subject to PCI DSS requirements (the “PCI Restriction”); (ii) make the Product available to anyone other than Company or Users, or use any other Pindrop Property (as defined in Section 4(c) (Pindrop Property) below) for the benefit of anyone other than Company or its subsidiaries, unless expressly stated otherwise in these Terms or provided for in the Documentation (such as enabling an Alert that is visible to all Meeting Participants in a given Meeting); (iii) except to the extent permitted by applicable law, disassemble, reverse engineer or decompile all or any portion of the Product in any manner; (iv) sell, resell, sublicense, distribute, rent or lease the Pindrop Property in any manner (including without limitation in any service bureau or outsource offering); (v) copy, modify or create derivative works of all or any portion of the Pindrop Property; (vi) use the Product for any unauthorized purposes, including without limitation: (A) credit, insurance, employment or other eligibility decisioning; (B) as a consumer report or credit report;  ; or (C) as the sole basis for any decision that produces legal effects concerning an individual or similar significant impacts, unless such use includes meaningful human review and oversight; or (vii) directly or indirectly authorize any third parties to do any of the foregoing. Any use of the Pindrop Property in violation of these Terms or that in Pindrop's commercially reasonable business judgment threatens the security, integrity or availability of the Product to Pindrop's or its subsidiaries' customers, may result in immediate suspension of Company's access to Product. For clarity, Pindrop is not a consumer reporting agency and none of the information provided through the Product constitutes a "consumer report", as such term is defined in the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq.

(e) Free Trial Products.  Company acknowledges that Products made available to Company on a “free trial basis,” as reflected in the relevant Order (each a “Free Trial Product”) are provided “as is” and solely for internal evaluation and testing purposes, where Meeting Participants shall be limited to Company’s own internal personnel. Notwithstanding anything to the contrary in these Terms, Company agrees that the warranty in Section 5(b)(ii) (Product Performance), the Support Program Terms in Section 5(b)(iii) (Support Terms) and Pindrop’s responsibility with respect to third party claims set forth in Section 6(a) (Pindrop Coverage for Third Party Claims) of these Terms do not apply to Free Trial Products.   

3. Fees and Payments.

(a) Description of Fees; Invoice Schedule. Company shall pay Pindrop the fees for paid subscription Products and Services in accordance with the applicable Order.  All fees will be invoiced and payable in U.S. Dollars and are due and payable to Pindrop within 30 days after the date of invoice to Company for such amounts (the "Due Date").

‍
(b) Late Payment Terms. If Company fails to remit an undisputed portion of a payment by the applicable Due Date, Pindrop reserves the right to apply late charges at the lesser of (i) 1.5% per month of the overdue amount; or (ii) the maximum amount permitted under applicable Law.

‍
(c) Invoice Dispute. Disputes arising from invoices will be handled on a case-by-case basis. Company must notify Pindrop of any invoice dispute no later than the applicable Due Date or such invoice will be deemed approved and accepted by Company. Both parties will use their commercially reasonable efforts to assess and rectify, if applicable, discrepancies found within a disputed invoice as soon as commercially practicable.


(d) Taxes.  Company shall pay all taxes, tariffs and transportation costs relating to, or incurred under, these Terms (including any sales, use, excise or value added taxes), exclusive of taxes based on or measured by Pindrop’s net income, unless Company is exempt from the payment of such taxes.  To the extent applicable, Company will provide to Pindrop any resale exemption certificate, direct pay permit or other exemption certificate or information reasonably requested by Pindrop.   Company shall promptly notify Pindrop if any such exemption is subsequently revoked or modified.  If Pindrop is required or permitted by applicable Law to charge and collect sales, use, excise, value-added or similar taxes (but excluding taxes based on or measured by Pindrop’s net income) that are directly imposed on the purchase, lease or other transfer of taxable Products or Services for consideration, Pindrop shall separately state such taxes on Company invoices along with other applicable related charges, including transportation and tariffs. Company shall promptly pay invoiced taxes.  Notwithstanding the foregoing, the failure of Pindrop to properly designate all taxes on an invoice shall not relieve Company of its obligation to pay all such taxes as set forth above.  To the extent Pindrop fails to designate such taxes on an invoice, Company shall, upon notice and request by Pindrop, promptly pay or reimburse Pindrop for any taxes that are Company’s responsibility under this Section.

4. Confidentiality, Data Use and Proprietary Rights 

(a) Confidentiality.  

(i) Definition.  “Confidential Information” means information designated as confidential or proprietary or that should be considered as confidential from its nature or from the circumstances surrounding its disclosure.  Additionally, Pindrop Property constitutes “Confidential Information” of Pindrop, and Company Data constitutes “Confidential Information” of Company.    

(ii) Use and Disclosure.  With respect to any Confidential Information a party receives (“Receiving Party”) from the other party (“Disclosing Party”), the Receiving Party shall: (A) keep such information confidential; (B) use the same degree of care for the Disclosing Party’s Confidential Information that it uses for its own Confidential Information, but in no event less than reasonable care; (C) not use the Confidential Information other than in connection with the performance of or as authorized in these Terms; and (D) not divulge the Confidential Information to any third party. Receiving Party agrees to use all reasonable steps to ensure that the Disclosing Party’s Confidential Information is not disclosed by a Receiving Party Representative in violation of this Section.  Company also agrees it shall not disclose the results of benchmark tests or any other evaluation of any Pindrop Property to any third party without Pindrop’s prior written approval.  For purposes of this Section, “third party” excludes the Receiving Party’s or its subsidiaries’ employees, contractors, subcontractors, attorneys, accountants or other professional advisors, as long as such representative (1) has a commercially reasonable need to know and access such Confidential Information in connection with authorized purposes; and (2) is under contractual or fiduciary confidentiality obligations substantially equivalent to the terms and conditions of this Section (each a “Receiving Party Representative”).  A Receiving Party is responsible for a breach by the Receiving Party Representative of the confidentiality obligations to the same extent as the Receiving Party itself.

(iii) Exclusions.  Confidential Information shall not include information that: (A) is or becomes generally known or available to the public at large other than as a result of a breach by the Receiving Party of any obligation to the Disclosing Party; (B) was known to the Receiving Party free of any obligation of confidence prior to disclosure by the Disclosing Party; (C) is disclosed to the Receiving Party on a non-confidential basis by a third party who did not owe an obligation of confidence to the Disclosing Party; or (D) is developed by the Receiving Party independently of and without reference to any part of the Confidential Information.  Confidential Information shall not be deemed to be in the public domain or generally known or available to the public merely because any part of said information is embodied in general disclosures or because individual features, components or combinations thereof are now or become known to the public.  During the term of these Terms, the Receiving Party may publicize the existence of the relationship between Pindrop and Company in connection with the Products being provided under Order(s) and Pindrop may list Company’s name on Pindrop’s standard customer lists.

(iv) Limited Exceptions.  Confidential Information may be disclosed in response to a valid order by a court or other governmental body of the United States or any political subdivision thereof, as otherwise required by law, or as necessary to establish the rights of either party under these Terms, provided that the party making such disclosure must provide written notice to the other party with a reasonable opportunity to obtain a protective order or otherwise protect the confidentiality of such information.   

(b) Data Use and Data Privacy Terms.

(i) Data Collected via Approved Marketplace and/or Marketplace Providers.  Pindrop may collect personal information from the Company and its Users from the Approved Marketplace and/or the Marketplace Provider in connection with the Product (the “Marketplace PI”).   Pindrop’s Website Privacy Policy shall apply to the collection and use of any Marketplace PI.  

(ii) Data Privacy, Data Use and Optimization Authorization.  

(A) The data privacy terms set forth in Annex 2 (Data Processing Addendum) apply to Personal Data Processed by the Product under these Terms (as such terms are defined in Annex 2).  

(B) In addition to the rights and obligations in Annex 2, the following apply:

(1) Company grants Pindrop and its subprocessors a limited, non-exclusive, non-transferable right during the applicable Subscription Term to collect, use, record, host, transmit and Process the Company Data to provide, maintain and support the Product and Services as contemplated in these Terms and each Order.  This includes the use of AI Tools to derive insights from Company Data for Company's benefit.  

(2) Subject to the use restrictions in this Section 4(b)(ii)(B)(2), Company agrees that Pindrop and its subsidiaries can collect, analyze, retain and use the usage, statistical, metadata and other log data collected by Support Tools or the Product (the “Support Data”) to maintain, develop, manage, administer and improve Pindrop’s and its subsidiaries’ products and services, including the Product and Services and the AI Tools applicable to such products and services for Company’s benefit, as well as Pindrop’s benefit, which includes the use of AI Tools to derive insights from Company Data for such benefits (“Product Optimization Purposes”).  Except where the data in this Section is being used for the benefit of Company, such data will not be disclosed by Pindrop in a manner that identifies Company or any individual Meeting Participant as the source of that data.  Pindrop’s right to retain and use the Support Data or derived insights for Product Optimization Purposes shall survive any termination or expiration of these Terms and each applicable Order. 

(C) Company understands that the nature of Pindrop’s Product is to provide a probabilistic determination as to whether a Meeting Participant may be human or a machine or an authenticated participant, and geolocation intelligence depending on which features and functionality Company enables in the Product.  As such, the Product has and will continue to use AI Tools in order to provide the core functionality of the Product (such as generating the Outputs).   Outputs are informational only and Company is solely responsible for any actions or decisions made based on the Outputs.  

(D) Pindrop is responsible for monitoring the quality and performance of the AI Tools in the Product and for taking reasonable steps to address significant deteriorations in the AI Tool’s performance in the Product in use by Company. Company understands that minor fluctuations that are normal for any models are not considered a “deterioration” of the AI Tool’s performance.  Upon request, Pindrop will provide reasonable information about the AI Tools used in the Product, including descriptions of their purpose, intended outputs, and Pindrop's standard development and validation documentation. Pindrop is not required to disclose trade secrets, proprietary algorithms, model architectures, specific input features, weighting factors, or other sensitive technical information about how the AI Tools operate.  

(E) Pindrop will not use the “voice features” extracted by the Product or any of the Company Data spoken in any Meeting Recording (i.e., the actual words said by a Meeting Participant) to train Pindrop’s AI Tools.  For clarity, this restriction does not limit Pindrop's use of AI Tools to analyze Company Data for generating insights, provided such tools are not trained on Company Data.

(c) Pindrop Property. Subject to the limited rights expressly granted by Pindrop under these Terms, Pindrop, its subsidiaries and its and their licensors and third party providers reserve and retain and own all rights, title and interests the Product (including Free Trial Products), Outputs, Services, AI Tools and Documentation and all updates, upgrades, derivative works, modifications, conversions, improvements or the like made to each of the foregoing, together with all intellectual property rights embodied therein (collectively, the “Pindrop Property”). Company agrees to retain and reproduce all copyright, trademark and other proprietary notices contained on or in the Pindrop Property as delivered to Company on all copies of such Pindrop Property and shall not seek to remove any such notices.

(d) Company Property. Subject to the limited rights expressly granted by Company under these Terms, Company retains and owns all right, title and interest in all intellectual property rights in and to the Company Data and its Marketplace PI. 

(e) Feedback.  Company may, at its sole election, provide Feedback to Pindrop to help identify ways in which Pindrop and its subsidiaries may improve or expand their product and service offerings for its customers, including the Products and Services. If provided, Company agrees to assign and hereby assigns to Pindrop all rights, title and interests in and to the Feedback.

5. Security, Warranties and Other Responsibilities

(a) Representations and Warranties by Both Parties. Each party represents that it has validly entered into these Terms and the Orders and has the legal power to do so. 

(b) Pindrop Warranties, Support and Other Responsibilities.  

(i) Protection of Company Data.  During the term of these Terms and for as long as Pindrop maintains Company’s Confidential Information within the Pindrop-Controlled Information Systems, Pindrop will have and maintain the information security program and safeguards as detailed Annex 1 (Pindrop’s Information Security Program).

(ii) Product Performance.  Pindrop warrants that the Product will perform without Errors during the applicable Subscription Term.  Pindrop will use commercially reasonable efforts to correct Errors, excluding those Errors resulting from an Excused Event, as further described in the Support Program Terms.  Company’s exclusive remedies for Pindrop’s failure to comply with the product warranties in this Section 5(b)(ii) shall be to pursue termination pursuant to Section 8(c) (Mutual Rights of Termination).  

(iii) Support Terms.  Unless provided otherwise in an Order, Pindrop will provide the support and maintenance services during the Subscription Term, as detailed in the Support Program Terms (the “Services”).  The Support Program Terms may be updated and/or supplemented by Pindrop from time to time upon prior notice to Company.  However, Pindrop will not, without Company’s approval, make any change to its Support Program Terms that will materially degrade the overall level of Services for Company during any Order.

(iv) Compliance with Laws.  Pindrop represents and warrants that the Products, when used in accordance with the terms and conditions of these Terms,  will comply with applicable Laws.  Pindrop shall not be in breach of this Section to the extent such non-compliance is based on or arises from Company's unauthorized use of the Products and/or Services or a breach of Company's obligations in these Terms. 

(c) Limited Warranties.  Company acknowledges that the Product utilizes AI Tools that generate probabilistic Outputs.  Such Outputs may contain inaccuracies, including false positives and false negatives, and are not guaranteed to be complete or error-free.  The Product is intended to support, and not replace, human judgment.  EXCEPT AS PROVIDED OTHERWISE IN THESE TERMS OR AN ORDER, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE PRODUCT (INCLUDING FREE TRIAL PRODUCTS), THE OUTPUTS, THE SERVICES AND ALL OTHER PINDROP PROPERTY ARE PROVIDED TO COMPANY “AS IS,” AND PINDROP AND ITS SUBSIDIARIES, AND ITS AND THEIR LICENSORS AND THIRD PARTY SERVICE PROVIDERS DISCLAIM ANY AND ALL OTHER PROMISES, REPRESENTATIONS AND WARRANTIES, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, QUIET ENJOYMENT, SYSTEM INTEGRATION AND/OR DATA ACCURACY.  PINDROP, ON BEHALF OF ITSELF AND ITS SUBSIDIARIES, AND ITS AND THEIR LICENSORS AND THIRD-PARTY SERVICE PROVIDERS, DOES NOT WARRANT THAT THE PRODUCTS, SERVICES OR OUTPUTS WILL MEET COMPANY’S REQUIREMENTS, THAT THE OPERATION OR USE OF THE FOREGOING OR THE OUTPUTS THEMSELVES WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT ALL ERRORS WILL BE CORRECTED.  COMPANY ACKNOWLEDGES AND AGREES THAT THE DISCLAIMERS, LIMITATIONS AND EXCLUSIONS OF LIABILITY SET FORTH IN THESE TERMS FORM AN ESSENTIAL BASIS OF THE BARGAIN BETWEEN THE PARTIES, AND THAT, ABSENT SUCH DISCLAIMERS, LIMITATIONS AND EXCLUSIONS, THE TERMS OF THESE TERMS, INCLUDING, WITHOUT LIMITATION, THE ECONOMIC TERMS, WOULD BE SUBSTANTIALLY DIFFERENT.

6. Responsibility for Third Party Claims.

(a) Pindrop Coverage for Third Party Claims.  

(i) Pindrop agrees, at its expense, to defend, indemnify, and hold harmless Company from and against any and all third party claims, actions or demands and legal proceedings, liabilities, damages, losses, and judgments or authorized settlements, and reasonable costs and expenses as incurred, including without limitation attorneys’ fees, arising from (A) Pindrop’s failure to comply with its information security safeguards for Personal Data expressly set forth these Terms, where such failure results in a Security Breach (as defined in Annex 1 (Pindrop’s Information Security Program); (B) Pindrop’s breach of Section 5(b)(iv) (Compliance with Laws) of these Terms; and (C) where the third party alleges that the Product furnished to Company and used within the scope of and in compliance with these Terms infringes the intellectual property right of a third-party.

(ii) Pindrop is not responsible under this Section for any infringement arising out of or related to: (A) modification of a Product by anyone other than Pindrop, where the Product would not infringe except for that modification; (B) any infringement arising out of any combination of the Product with other software, hardware, processes or materials not provided by Pindrop, where the Product would not infringe except for such combination; (C) Company’s use of a version of the Product other than the most current release of the Products that results in a claim or action for infringement that could have been avoided by use of the current release, provided that Pindrop has supplied Company with the most current release at no additional fee; or (D) any Company Data, where the Product would not infringe except for that Company Data.  If the Product is held or believed by Pindrop to infringe, Pindrop may, at its sole option and expense, elect to: (w) modify the Product so that it is non-infringing; (x) replace the Product with non-infringing products which are functionally equivalent or superior in performance; (y) obtain a license for Company to continue to use and access the Product as provided hereunder; or (z) terminate the license for the infringing Product and refund any prepaid but unused license fees paid for such Product under the impacted Order.  

(iii) THE RIGHTS GRANTED TO COMPANY UNDER THIS SECTION 6(a) SHALL BE COMPANY’S SOLE AND EXCLUSIVE REMEDY FOR ANY CLAIM OF INFRINGEMENT OR MISAPPROPRIATION RELATED TO THE PRODUCTS AND THE THIRD PARTY CLAIMS DESCRIBED IN THIS SECTION 6(a).

(b) Company Coverage for Third Party Claims.  Company agrees, at its expense, to defend, indemnify, and hold harmless Pindrop and its subsidiaries  (each a “Pindrop Party”) from and against any and all third party claims, actions, demands and legal proceedings, liabilities, damages, losses, and judgments or authorized settlements, and reasonable costs and expenses as incurred, including without limitation attorneys’ fees, arising out of or in connection with any alleged or actual breach or violation of the Company Responsibilities.   

(c) Procedural Requirements for Third Party Claims.  For each party to be responsible for its indemnification obligations under Sections 6(a) (Pindrop Coverage for Third Party Claims) or 6(b) (Company Coverage for Third Party Claims), as applicable (the “Responsible Party”), the other party (the “Covered Party”) shall (i) promptly notify the Responsible Party in writing of its receipt of notice of any claim or when it discovers facts on which the Covered Party intends to base a request for indemnification under such Section(s) of these Terms (each a “Claim Notice”); (ii) afford the Responsible Party the choice to control the defense and all related settlement negotiations of such claim; provided that the Covered Party can participate at its own expense; and (iii) provide the Responsible Party with reasonable assistance, information and authority necessary to perform its obligations under Sections 6(a) or 6(b) above.  Each party, as a Responsible Party, agrees to keep the Covered Party reasonably informed as to the status of the Responsible Party’s efforts in connection with the defense or settlement of claims on behalf of the Covered Party and reasonably consult with the Covered Party (or the Covered Party’s counsel) concerning such efforts.

Notwithstanding anything to the contrary in Section 6(c)(i), a Covered Party’s failure to provide a Claim Notice does not relieve the Responsible Party of its liability to the Covered Party under Sections 6(a) or 6(b), as applicable, unless such delay materially prejudices the Responsible Party’s defense or the scope of the Responsible Party’s liability for the applicable third party claim.    

Notwithstanding anything to the contrary in Section 6(c)(ii), the following apply:

(A) The Responsible Party agrees it will not, without the Covered Party’s written approval, make any admission of facts that exposes the Covered Party to any liability, requires the Covered Party to take or cease to take any action (including without limitation any requirement to make payments), or exposes the Covered Party to other claims that are not covered by the obligations for the applicable claim under Section 6.  However, if the Responsible Party is required by applicable Law to make an admission, the Responsible Party may proceed in making such admission without the Covered Party’s prior approval; provided the Responsible Party provides written notice to the Covered Party with a reasonable opportunity to obtain a protective order or otherwise address such requirement with the appropriate authority.   

(B) If the Responsible Party fails to respond to a Claim Notice or refuses to assume the defense of a claim tendered in good faith within 10 days of its receipt of the Claim Notice with respect to a claim for which it is seeking indemnification under this Section 6, then the Covered Party may proceed to defend or otherwise settle the claim as the Covered Party deems reasonably appropriate and the Responsible Party agrees to reimburse the Covered Party with respect to all defense costs, including but not limited to reasonable attorneys’ fees and expenses or damages incurred with respect to such claim, as incurred.  

7. Limitation of Liability; Consequential Damages Waiver

(a) Consequential Damages Waiver. IN NO EVENT SHALL EITHER PARTY OR ITS SUBSIDIARIES BE LIABLE TO THE OTHER FOR ANY SPECIAL, INCIDENTAL, PUNITIVE, EXEMPLARY OR CONSEQUENTIAL DAMAGES OF ANY KIND, WHETHER BASED ON DAMAGES, LOSSES OR COSTS INCURRED AS A RESULT OF LOSS OF TIME, LOSS OR CORRUPTION OF APPLICATION OR DATA, LOSS OF PRODUCT OR REVENUE, OR LOSS OF USE OF THE PRODUCTS, REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT, NEGLIGENCE, STRICT PRODUCT LIABILITY, OR OTHERWISE, EVEN IF SUCH PARTY HAS BEEN INFORMED OF THE POSSIBILITY OF ANY SUCH DAMAGES IN ADVANCE.

(b) Liability for Direct Damages.  THE MAXIMUM AGGREGATE LIABILITY FOR DAMAGES TO A PARTY OR ITS SUBSIDIARIES ARISING FROM OR RELATED TO THESE TERMS OR ANY PINDROP PROPERTY, WHETHER FOR BREACH OF CONTRACT OR WARRANTY, STRICT LIABILITY, NEGLIGENCE OR OTHERWISE, SHALL NOT:

(i) FOR PINDROP, EXCEED (A) TWO TIMES THE FEES PAID TO PINDROP DURING THE PRECEDING 12 MONTHS FOR A PAID SUBSCRIPTION PRODUCT; OR (B) $1000.00 USD FOR A FREE TRIAL PRODUCT, IN EACH CASE, UNDER THE ORDER GIVING RISE TO SUCH LIABILITY; AND

(ii) FOR COMPANY, EXCEED TWO TIMES THE FEES PAID OR PAYABLE TO PINDROP DURING THE PRECEDING 12 MONTHS, WHICHEVER AMOUNT IS GREATER, FOR A PAID SUBSCRIPTION PRODUCT UNDER THE ORDER GIVING RISE TO SUCH LIABILITY.

(c) Exclusions.  

(i) Liability for (1) a breach by a party of its confidentiality obligations under these Terms; (2) fulfillment by Pindrop of its obligations and liabilities pursuant to Section 6(a) (Pindrop Coverage for Third Party Claims) and, as a Responsible Party, pursuant to Section 6(c) (Procedural Requirements for Third Party Claims); (3) fulfillment by Company of its obligations and liabilities pursuant to Section 6(b) (Company Coverage for Third Party Claims) and, as a Responsible Party, pursuant to Section 6(c) (Procedural Requirements for Third Party Claims); (4) for infringement and misappropriation by one party of the other party’s intellectual property rights; and (5) a party’s liability for any gross negligence or willful misconduct, shall each be excluded from the limitations of liability in Sections 7(a) (Consequential Damages Waiver) and 7(b) (Liability for Direct Damages).  Responsible Party has the meaning assigned in Section 6(c) (Procedural Requirements for Third Party Claims).

(ii) Liability for a breach (i) by Company of the Company Responsibilities; and (ii) liability for any personal injury or damage to tangible property resulting from the acts and omissions of a party (except to the extent such damage or injury was caused by the other party, its employees or representatives), shall each be excluded from the limitations of liability in Section 7(b) (Liability for Direct Damages).  

8. Term and Termination

(a) Term of Agreement.  The Terms start on the Terms Effective Date and continue for a period of 3 years.  These Terms shall automatically renew for additional 3-year periods, unless one party provides the other party with a minimum of 60 days written notice prior to the expiration of the then-current year.  Any Orders that have not yet terminated or expired as of the effective date of termination of these Terms will continue and remain binding and in full force and effect and the terms and conditions of these Terms shall continue to apply with the same effect until any such Order terminates according to its own terms or is terminated earlier for cause in accordance with the below terms.  For clarity, a notice of non-renewal of these Terms shall not in any way modify, impact the validity or terminate any existing Orders. 

(b) Term of Orders.  The term for each Order shall start and end as described in the Order.

(c) Mutual Rights of Termination.  Either party may terminate these Terms and/or an Order if the other party materially breaches any section of these Terms or the Order, as applicable, and fails to cure such breach within 30 days prior written notice by the non-breaching party specifying the nature of the breach and the reasonable actions required to cure the breach; provided, however, that if such breach does not involve the payment of any amounts to Pindrop and is of a nature that can be cured but not within the stated period and the breaching party has commenced significant efforts to cure such breach within such period. 

(d) Obligations Upon Termination.  Upon the expiration or termination of these Terms or an Order for any reason and except as expressly authorized otherwise in these Terms, all licenses granted under the impacted Order(s), or all associated rights granted to Company under these Terms, as applicable, shall immediately terminate and all relevant Pindrop Property shall, at Pindrop’s sole option, be destroyed by Company. Further, upon request by a Disclosing Party, a Receiving Party agrees to (i) destroy the Disclosing Party’s Confidential Information in its possession or control; and (ii) confirm in writing to the Disclosing Party that it has complied with the destruction instructions with respect to the Disclosing Party’s Confidential Information. However, with respect to any Confidential Information (A) in the Receiving Party’s or its Receiving Party Representatives’ archive (including legal archives and business records generated in the delivery and support of the Products and Services), back-up or other comparable systems or servers; (B) expressly authorized in these Terms or an Order to be retained; or (C) retained to comply with litigation holds or applicable Law, such Confidential Information is only required to be destroyed in accordance with the Receiving Party’s and its Receiving Party Representative’s then-current data retention policies, litigation hold or applicable Law, whichever is the longest of the retention requirements.   Pindrop has no obligation to retain or otherwise make available any Company Data or any Outputs after the effective termination date of an Order.  The terms in this Section 8(d), all defined terms, rights or obligations that expressly survive expiration or termination and the rights and obligations contained in Sections 2(d)  (Restrictions) (to the extent applicable), 3 (Fees and Payments), 4(a) (Confidentiality), 4(b)(ii)(A), 4(c) (Pindrop Property), 4(d) (Company Property), 4(e) (Feedback), 5(b)(i) (Protection of Company Data) (for the time period stated in such Section), 5(c) (Limited Warranties), 6 (Responsibility for Third Party Claims), 7 (Limitation of Liability; Consequential Damages Waiver), and 9 (General) shall survive any expiration or termination of these Terms or any Order.  

9. General

(a) Export Compliance. The Pindrop Property and derivatives thereof may be subject to export laws and regulations of the United States and other jurisdictions. Pindrop and Company each represent that it is not on any U.S. government denied-party list. Company will not permit any User to access or use the Pindrop Property in violation of any U.S. export law or regulation or other equivalent laws of other jurisdictions, as applicable.

(b) Governing Law; Jurisdiction and Attorneys' Fees. These Terms will be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict of law provisions. With respect to any legal disputes between Company and Pindrop arising out of or related to these Terms, Company and Pindrop irrevocably consent to the exclusive personal jurisdiction of the federal courts located in Delaware or, if the Federal courts do not have jurisdiction, in the Superior Court of the State of Delaware, and any appellate court from any such state or Federal court. In the event of any dispute arising out of or related to these Terms, the prevailing party shall be entitled to recover its reasonable attorneys' fees and costs.
‍

(c) Notices. All notices permitted or required under these Terms shall be in writing and shall be delivered as follows, except as otherwise expressly provided in these Terms, with notice deemed given as indicated (i) by personal delivery when delivered personally; (ii) by commercially established courier service upon delivery or, if the courier attempted delivery on a normal business day and delivery was not accepted, upon attempted delivery; or (iii) by certified or registered mail, return receipt requested, 10 days after deposit in the mail.  Notice will be sent to each party respectively to the addresses set forth in the Order or at such other addresses as one party shall notify the other party of in writing.   

(d) Waivers; Severability. Neither party shall by mere lapse of time without giving notice or taking other action be deemed to have waived any breach by the other party of any of the provisions of these Terms. Further, the waiver by either party of a particular breach of these Terms by the other party shall not be construed as, or constitute, a continuing waiver of such breach, or of other breaches of the same or other provisions of these Terms. If any provision of these Terms shall be held illegal, unenforceable, or in conflict with any law of a federal, state, or local government having jurisdiction over these Terms, the validity of the remaining portions or provisions hereof shall not be affected.

(e) Force Majeure. Neither party shall be liable for any failure or delay in performance under these Terms which might be due to strikes, shortages, riots, insurrection, fires, flood, storm, other weather conditions, explosion, acts of God, war, government action, inability to obtain delivery of parts, supplies or labor, labor conditions (including strikes, lockouts or other industrial disturbances), earthquakes, riots or acts of terrorism, epidemic, pandemic or any other cause which is beyond the reasonable control of such party.

(f) Assignment. Each party may, with prior written notice to the other party, assign these Terms and the then-current Orders to any third party who succeeds to substantially all of that party’s assets and business related to the Product and Services covered under these Terms by merger or purchase, provided that the assignee assumes these Terms and the Order by an instrument in writing.  Except as authorized in the preceding sentence, these Terms, including any Orders, may not be assigned or transferred by either party without the prior written consent of the other party.  

(g) Injunctive Relief. Notwithstanding any other provision of these Terms, any violation by either party of the other party’s intellectual property or proprietary rights will cause irreparable damage for which recovery of money damages would be inadequate, and the aggrieved party will therefore be entitled to seek timely injunctive relief to protect such party’s rights, without the need to post bond.

(h) Entire Agreement. These Terms, together with any Order which has incorporated these Terms therein, (i) is the complete agreement between the parties with respect to the subject matter hereof and supersedes any and all prior agreements and understandings; and (ii) unless expressly authorized otherwise in these Terms, may be amended only in a writing that refers to these Terms and is signed by both parties. Notwithstanding the foregoing, Pindrop may modify these Terms at any time by posting updated Terms at the URL referenced in Company’s Order or by providing notice by email to Company’s designated contact. Upon renewal of any Subscription Term or a new Order, the then-current version of these Terms will apply to the renewed Subscription Term or new Order, as applicable.  Company is responsible for reviewing these Terms periodically for changes.  Company’s continued use of the Product after the start date of a renewal Subscription Term constitutes Company’s acceptance of the then-current version of the Terms.  The parties are independent contractors. Except as expressly agreed by the parties, neither party will be deemed to be an employee, agent, partner or legal representative of the other for any purpose and neither will have any right, power or authority to create any obligation or responsibility on behalf of the other.  Notwithstanding anything to the contrary in the Company Provider Agreement, in the event of any conflict between these Terms and any Company Provider Agreements regarding Pindrop Property or any other subject matter covered under these Terms, these Terms shall control.

(i) Government and Public-Sector Users.  The following terms shall apply, as applicable:  

(i) US Government User Terms.  The Pindrop Property made available under these Terms is or otherwise contains commercial computer software as that term is defined in 48 C.F.R. 252-227-7014(a)(l). If acquired by or on behalf of a civilian agency, the U.S. Government acquires this commercial computer software and/or commercial computer software documentation and other technical data subject to the terms of these Terms as specified in 48 C.F.R. 12.212 (Computer Software) and 12.211 (Technical Data) of the Federal Acquisition Regulations (“FAR”) and its successors.  If acquired by or on behalf of any agency within the Department of Defense (“DOD”), the U.S. Government acquires this commercial computer software and/or commercial computer software documentation subject to the terms of these Terms as specified in 48 C.F.R. 227.7202-3 of the DOD FAR Supplement (“DFAR”) and its successors.  This U.S. Government Rights clause is in lieu of, and supersedes, any other FAR, DFAR, or other clause or provision that addresses government rights in computer software or technical data under these Terms.   

(ii) Freedom of Information Act Restrictions.  If the Freedom of Information Act, 5 U.S.C. 552 et seq. or a State’s equivalent law (each a “FOI Act”) applies to Company, Company acknowledges that Confidential Information is entitled to be exempt from disclosure under a FOI Act. Company will promptly notify Pindrop of any requests for the disclosure of any Confidential Information under a FOI Act, and will assert to the government or requester, orally and in writing, that such Confidential Information is exempt from disclosure under FOI Act.

10. Definitions

‍(a) “AI Tool(s)” means a system, application, algorithm, statistical model or other technology used within or in connection with the Product that can perform tasks that typically require human intelligence, including understanding natural language, recognizing patterns, solving problems, making predictions, interpreting and processing data or that are prompted by inputs it receives to produce outputs, such as predictions, classifications, prescribed actions, content, recommendations or decisions based on Company Data and the analysis of the Meetings. AI Tools include machine learning-based algorithms for fraud risk, authentication and audio and video manipulation technologies (e.g., voice cloning, deepfakes).  For purposes of clarity, AI Tools include Models. 

(b) “Alert” means an output generated by the Product’s analysis of a particular Meeting indicating a Meeting Participant may not be a real person or an authenticated participant.

(c) “Authorized Geography” has the meaning assigned in the applicable Order.

(d) “Approved Marketplace” means the Zoom Marketplace, Microsoft Marketplace and such other comparable marketplaces that Pindrop elects to offer its Companion App in from time to time.

(e) “Company Data” means the data and information that are uploaded, transmitted, input or otherwise provided or made available by Company in connection with the Product, including each Meeting. Company Data includes, by way of example only, the Meeting Recording and the content therein, the display name of each participant in a Meeting, the email address of each such participant and the spoken content captured during the course of the Meeting.  

(f)  “Company Marketplace Agreement” means the written agreement between Company and the provider of the relevant Approved Marketplace pursuant to which Company obtains the Product via such Approved Marketplace.

(g) “Documentation” means any documentation, user guides and installation instructions applicable to the Product provided by Pindrop to the Company from time to time.

(h) “Error” has the meaning assigned in the Support Program Terms.

(i) “Excused Event” has the meaning assigned in the Support Program Terms.

(j) “Feedback” means all ideas, suggestions, or similar information that Company provides or otherwise makes available to Pindrop or its subsidiaries with respect to the Product.

(k) “Laws” means all laws, statutes, regulations and other types of government authority, including without limitation, the laws and regulations governing data privacy or data protection.

(l) “Liveness Detection” means an assessment by the Product as to the likelihood a speaker in a Meeting is a real person or not.

(m) “Marketplace Provider” means the company who operates the Approved Marketplace (e.g., Zoom or Microsoft).

(n) “Meeting” means a virtual meeting in the Meeting Platform analyzed by the Product.

(o) "Meeting Participant" means any person, including Users, who administers, hosts, attends or otherwise participates in meetings, calls, or other interactions that are processed by the Product covered under these Terms.

(p) “Meeting Platform” means the third-party virtual meeting service identified in the applicable Order, to which the Security Assistant can be added to analyze the Company Data and help provide enhanced security.

(q) “Model(s)” (Machine Learning Model) means a mathematical representation that, once trained on a dataset, can be used to make predictions and classifications on new data by learning patterns, in each case, to produce outputs from a given set of inputs within or incorporated into the Product.

 (r) “Order” means a document entered into between Pindrop or its subsidiaries, and Company that incorporates these Terms by reference that describes the Product and/or related Services that Pindrop will provide to Company under these Terms.

(s) “Outputs” means the data or information portion of a Product that are generated based upon the Product’s analysis of a particular Meeting (including, by way of example only, an Alert, a Pindrop Risk Rating, Proprietary Prints, geolocation intelligence, Meeting Recordings, or explanatory data, as applicable).

(t) “Pindrop Risk Rating” means the classification, status, label or score provided by Pindrop's proprietary processes, including statistical and audio and video models, that indicates, including without limitation, whether a Meeting Participant is (i) synthetic or not; (ii) enrolled or not enrolled; (iii) authenticated or not authenticated; or (iv) such other classification or any associated scoring metrics provided, as may be applicable depending on the features and functionality in the Product.

(u) “Proprietary Prints” means the numerical values generated by the Product that are a sequence of floating-point numbers, are not reversible into the original audio or video, are not composed of an audio wave file or video, and do not contain any actual recorded conversation or visual content.  Examples of proprietary prints include: (i) generic artifacts extracted to detect synthetic or recorded audio or video - not to identify a person; and (ii) voice features.

(v) “Security Assistant” means the functionality visible through the user interface of the Meeting Platform to indicate (i) the Product has “joined” a Meeting for the purpose of performing Liveness Detection and otherwise analyzing that Meeting based on the enabled functionality; and (ii) to display, if and when applicable, an Alert.  

(w) “Subscription Term” means the duration of the free trial or paid subscription for the Product, as detailed in the applicable Order.

(x) “Support Program Terms” means Pindrop’s standard support and maintenance services program applicable to the Products and available at https://meeting.pindrop.com/support-terms or such other terms provided to Company by Pindrop, as updated and/or supplemented by Pindrop from time to time upon notice to Company. 

(y)  “Support Tools” means (i) software, web analytics tools or other technology used by Pindrop or its subsidiaries to (1) monitor, maintain or improve the performance, integrity or security of the Product; (2) identify portions of the Product that may require maintenance (including without limitation errors that may require correction); and (3) manage subscription-related metrics (e.g., expiration of the given Beta Term); or (ii) cookies that are set on a User’s browser and used by Pindrop or its subsidiaries for the purpose of identifying Users and Company systems interacting with the Product, including the general location (e.g., city, state or country) of the IP addresses associated with Users who login into and use the Product.

(z) “User” means one of the Company’s personnel who has been assigned a unique account that allows such person to add the Security Assistant to a Meeting, where such person has used the Product to analyze at least one Meeting during the applicable Subscription Term.

Annex 1

Pindrop’s Information Security Program

1. Definitions.  Capitalized terms used in this Annex 1 have the meanings given below or, if not defined below, the meanings given in the main body of these Terms.

(a) “Company-Controlled Systems” means Information Systems that are within Company’s possession or control.

(b) “Pindrop-Controlled Systems” means (i) systems that are within Pindrop’s possession or control; and (ii) Amazon Web Services (“AWS”) Information Systems or Google Cloud Platform “GCP”) that meet the following criteria: (a) under Pindrop’s enterprise account with AWS or GCP, as applicable; (b) used by Pindrop to deliver the Products or Services or used by Pindrop for Pindrop’s internal,  corporate-level systems; and (c) are AWS systems or GCP systems for which Pindrop solely configures and manages the security controls used by Pindrop to protect the data stored within such AWS systems or GCP systems. The defined term Pindrop-Controlled Information Systems excludes all Company-Controlled Systems.

(c) “Security Breach” means a reasonably suspected or confirmed unauthorized disclosure of Company’s Confidential Information within Pindrop’s possession or control; or a reasonably suspected or confirmed unauthorized access by a third party to any Pindrop-Controlled Information Systems that process, hold, or provide access to Company’s Confidential Information.  

2. Information Security Program.  Pindrop maintains a comprehensive, written information security program designed to protect the confidentiality, integrity, and availability of the Pindrop-Controlled Systems and Company Data. This program is based on industry standards such as ISO 27001, SOC 2 Type II, and NIST guidelines, and includes physical, administrative, and technical safeguards appropriate to the nature of the data processed.

3. Policies, Access & Training.  Pindrop enforces internal security policies covering access control, asset management, vulnerability management, encryption, change management, and incident response.  Access to systems containing Company Data is limited to authorized personnel with a business need, and such access is reviewed and revoked upon role change or termination.  Employees receive security awareness and privacy training at least annually.  

4. Data Protection & Encryption.  Company Data in transit over public networks and at rest within Pindrop systems is protected using strong encryption consistent with industry standards (e.g., TLS 1.2+ for data in transit and AES-256 for data at rest).  Where encryption is not feasible, compensating controls are used to provide equivalent protection.

5. Certifications and Audits.  Pindrop undergoes regular independent third-party audits and maintains certifications or attestations (e.g., SOC 2 Type II, ISO 27001, PCI DSS, as applicable). Upon written request, Pindrop will make available summary audit reports or certificates under confidentiality.

6. Security Incident Response.  Pindrop maintains an incident response plan aligned with NIST 800-61 or equivalent standards.  In the event of a confirmed Security Breach affecting Company Data, Pindrop will notify Company without undue delay (and in no event later than 48 hours after confirmation), provide available details, and take reasonable steps to contain and remediate the incident.

7. Subprocessors and Vendors.  Pindrop uses subprocessors and service providers that are subject to written agreements requiring substantially similar security and privacy safeguards.  Pindrop remains responsible for the performance of its subprocessors and service providers.  Company acknowledges Pindrop's use of third-party cloud providers (e.g., AWS, Google) and authorizes Pindrop to share information about Company's use of the Product as required by Pindrop's provider agreements. Such services may be subject to monitoring per the provider's policies and applicable Laws.

8. Physical Security and Availability.  Pindrop’s production systems are hosted in secure data centers or cloud environments that include physical access controls, environmental safeguards, redundancy, and disaster recovery measures to ensure service availability.

9. Updates to Security Program.  Pindrop may update its security program from time to time, provided such updates do not materially reduce the overall level of security.  Pindrop reviews its policies and controls at least annually to ensure continued effectiveness and compliance with applicable standards.  

Annex 2

Data Processing Addendum

1. Definitions. In the event of a conflict between this definition and the definition of an applicable term under relevant Data Protection Law (defined below), the definition under the relevant Data Protection Law shall govern.

(a) “Aggregate Data” means information that relates to a group or category of individuals, from which individual identities have been removed, that is not linked or reasonably linkable to any individual or household, including via a device and “Aggregated” shall refer to the process to make any data Aggregated Data. 

(b) “Data Protection Law(s)” means any applicable state or federal Laws for the protection, privacy, and/or processing of Personal Data, including any amendment or re-enactment of the foregoing, to which Company or Pindrop are subject.

(c) “Deidentified Data” means information that cannot reasonably identify, be related to, describe, be capable of being associated with, or linked, directly or indirectly, to a particular individual, and “Deidentified” shall refer to the process to make any information Deidentified Data. 

(d) “Personal Data” means information that (i) identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device; or (ii) is made available to Pindrop by or on behalf of Company in connection with the Products and Services that Data Protection Laws define as “personal data,” “personal information,” “personally identifiable information” or similar term. 

(e) “Process”, “Processing”, or “Processed” means any operation or set of operations performed on Personal Data or on sets of Personal Data, whether automated or not, such as, collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

(f) “Processing Purpose” means the purpose for which Pindrop is Processing Personal Data as set forth in Section 2(c) of this Annex 2 and shall also be deemed to mean a Business Purpose.

(g) “Processor” means an entity that Processes Personal Data on behalf of another entity. “Processor” includes similar terms under Data Protection Laws, such as the term “Service Provider,” as context requires.

(h) The terms “Business”, “Business Purpose”, “sell” (and its cognates), “share” (and its cognates) and “Third Party” will have the meaning as ascribed to it or to a similar term under applicable Data Protection Laws.

2. Processing Purpose. With respect to Pindrop’s provision of the Products and Services to Company pursuant to these Terms:      

  1. As between Pindrop and Company, Pindrop is a Service Provider and Processor with respect to any Personal Data that Pindrop Processes on behalf of Company pursuant to these Terms.
  1. All Personal Data provided by or on behalf of Company to Pindrop is owned or licensed by Company. Unless otherwise expressly provided herein, nothing herein confers any rights or ownership in such Personal Data to Pindrop.
  1. Company has disclosed Personal Data to Pindrop and its subsidiaries for the following Processing Purposes: (1) detecting security incidents and/or utilization by a Meeting Participant of a non-human voice, and protecting against malicious, deceptive, fraudulent or illegal activity; (2) assisting in the authentication of Meeting Participants for Company; (3) as well as is reasonably necessary to support any other valid Processing Purposes that are part of the Product and Services so long as they are contemplated by the parties in these Terms; and (4) analyzing Company Data to generate insights, identify trends, detect patterns, and improve business outcomes and Product performance for Company's benefit;
  1. Pindrop and Company acknowledge and confirm any disclosure of Personal Data pursuant to these Terms is exclusively for the provision of the Product and Services under these Terms and that Pindrop does not receive any Personal Data as monetary or other valuable consideration for the Product, any Services or other items provided under these Terms; and
  1. Company hereby instructs and authorizes Pindrop to Process Personal Data in connection with Pindrop’s performance and exercise of its obligations and rights under these Terms.  Any additional or alternate instructions must be mutually agreed upon in writing.

3. Permitted Use. Pindrop will only collect, use, retain, disclose and otherwise Process Personal Data solely: (a) for the Processing Purposes described above and its performance of these Terms, including in support of Pindrop’s and its subsidiaries’ internal operations as necessary to the provision of the Product and Services for Company; (b) on Company’s behalf and in accordance with Company’s documented, written instructions; (c) for its internal use to build or improve the quality of the Product and Services,  including through analysis of Company Data using AI Tools to generate insights and recommendations, provided that such use is authorized in these Terms and Pindrop will not use the Personal Data to perform services on behalf of another person; or (d) as otherwise necessary for compliance with applicable Laws. Pindrop will ensure that its personnel engaged in the Processing of Personal Data are informed of the confidential nature of the Personal Data and are subject to a duty of confidentiality with respect to Personal Data. For clarity, Pindrop may retain, use, or otherwise Process certain Personal Data (and combine it with Personal Data from other clients) as reasonably necessary to detect data security incidents, or protect against fraudulent or illegal activity.

4. Subprocessors. Company agrees and authorizes Pindrop to disclose Personal Data to, and permit the Processing of Personal Data by, its subprocessors used to deliver and perform its obligations under these Terms. Pindrop may add or change subprocessors at any time provided such subprocessors are subject to substantially similar data protection obligations.  A copy of Pindrop’s current subprocessors is available upon request.  

5. Restrictions. Pindrop will not (a) sell or share Personal Data in violation of Data Protection Laws; (b) collect, retain, use, disclose or otherwise Process Personal Data for any purpose other than for the Processing Purpose, which, for the avoidance of doubt, also prohibits Pindrop from disclosing Personal Data to unauthorized third parties or for any other commercial purpose; or (c) engaging in any targeted advertising or unauthorized profiling.  Pindrop certifies that it understands and will comply with the foregoing restrictions set forth in this paragraph. 

6. Deidentified Data and Aggregate Data. Pindrop and its subsidiaries may use Deidentified Data and Aggregate Data derived from the Product and Services, for the purposes of providing the Product and Services, and general Product Optimization Purposes.  Pindrop and its subsidiaries may also, during and after any expiration or termination of these Terms, use, maintain, and disclose Deidentified Data for its own product improvement and general purposes.  Pindrop agrees it will not identify Company or otherwise disclose Company as the source of any such Deidentified Data or Aggregate Data in connection with any general use purposes.  Pindrop further agrees it will not make any attempt to (a) re-identify the Deidentified Data; or (b) otherwise attempt to create or derive any Personal Data from such Deidentified Data or Aggregate Data, in each case without Company’s express written permission. 

7. Duration of Processing.  Pindrop will only Process Personal Data for the duration of these Terms and as otherwise allowed under these Terms or permitted under applicable Law. Unless retention of Personal Data is otherwise permitted under these Terms or required under Data Protection Laws, upon the termination or expiration of these Terms for any reason, Pindrop will, at the choice of Company, securely destroy all Personal Data as soon as practicable, but no later than 90 days from such termination or expiration. If Pindrop is obliged to retain Personal Data after termination or expiration of these Terms to comply with a legal obligation to which it is subject, Pindrop will: (a) inform Company thereof; (b) protect the confidentiality of the Personal Data in its possession; and (c) no longer actively Process Personal Data. 

8. Privacy Rights Requests. If Pindrop receives a complaint, dispute, or request from a person concerned by Personal Data to exercise any privacy rights it may have under applicable Data Protection Laws, and Pindrop is able to confirm that such request relates to Company, Pindrop will promptly notify Company of such request, and in any event within 5 business days, or as soon as commercially reasonable, following Pindrop’s confirmation. Taking into account the nature of Pindrop’s Processing of Personal Data, Pindrop shall provide reasonable assistance to permit Company to respond to privacy rights requests as required by Data Protection Laws. Unless required by applicable Law, Pindrop will not respond to or take any action to comply with a privacy rights request without Company’s approval.  

‍9. Audits. Pindrop's independent security audit reports (such as SOC 2 Type II) shall constitute sufficient verification of Pindrop's security obligations. If required by Data Protection Laws, Company may audit Pindrop's relevant controls upon a minimum of 30 days' notice, once annually, using an independent auditor acceptable to Pindrop, at Company's expense. Any audit shall be limited in scope to documentation and information reasonably necessary to verify Pindrop's compliance with its obligations under this Annex 2 and shall be subject to Pindrop's security and confidentiality policies and conducted in a manner that does not disrupt operations.