Contracts
Master Subscription Agreement
Effective September 14, 2023
DownloadTable of Contents
WIZ MASTER SUBSCRIPTION AGREEMENT
BY ACCEPTING THIS AGREEMENT OR ACCESSING OR USING THE SERVICES, YOU ARE ACCEPTING THE TERMS AND CONDITIONS OF THIS AGREEMENT, UNLESS A SEPARATE WRITTEN AGREEMENT IS IN EFFECT THAT SPECIFICALLY GOVERNS THE SUBJECT MATTER HEREOF. IF YOU DO NOT AGREE TO THIS AGREEMENT, YOU MAY NOT USE THE SERVICE. YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO ENTER INTO THIS AGREEMENT; IF YOU ARE USING THE SERVICE AS AN EMPLOYEE OR AGENT OF AN ORGANIZATION OR ENTITY, THEN YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO SIGN FOR AND BIND SUCH ORGANIZATION OR ENTITY IN ORDER TO ACCEPT THE TERMS OF THIS AGREEMENT. IF YOU DO NOT HAVE AUTHORITY TO BIND YOUR EMPLOYER OR OTHER LEGAL ENTITY, PLEASE DO NOT ACCEPT THIS AGREEMENT AND IMMEDIATELY REFRAIN FROM ACCESSING AND/OR USING THE SERVICES.
IF YOU ARE USING THE SERVICE AS A PROOF OF CONCEPT OR FOR EVALUATION PURPOSES, THE SERVICES ARE PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND AND IN ACCORDANCE WITH THE TERMS OF SECTION 8 (“EVALUATIONS”) BELOW.
This Master Subscription Agreement (the “Agreement”) is effective on the earlier of: the date of (i) the execution of an Order referencing this Agreement; or (ii) Customer’s use of the Services (the “Effective Date”), by and between Wiz (as defined in Section 21 below) and you or the entity you represent referenced in the Order or otherwise accessing the Services (the “Customer”) (each, a “Party” and collectively, the “Parties”). Customer may use the Services (as defined below) subject to the terms below.
- Ordering.
1.1. Customer may place an order for Services directly with Wiz via an order form (a “Direct Order”). Direct Orders may be entered into by Wiz or Wiz Affiliates with Customer or Customer Affiliates. Each Direct Order is hereby incorporated into this Agreement by reference and shall be deemed to be a stand-alone agreement that incorporates by reference the terms of this Agreement (mutatis mutandis) whereby each signing entity to the Direct Order shall be considered to be either “Wiz” or “Customer” referenced herein. A Customer Affiliate will have the right to enter into an Order referencing this Agreement and thereby indicating its agreement to be bound by the terms of this Agreement as if it were an original party hereto. In such case, for purposes of such Order, such Customer Affiliate will be deemed to be the “Customer” hereunder. To the extent of any conflict or inconsistency between the terms and conditions of this Agreement and a Direct Order, this Agreement shall prevail (unless a Direct Order specifically states otherwise). “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
1.2. If Customer has purchased a subscription pursuant to the terms hereof from a partner, reseller or distributor authorized by Wiz (“Partner”), to the extent there is any conflict between this Agreement and the agreement entered between Customer and the respective Partner, including any purchase order (“Partner Order”), then, as between Customer and Wiz, this Agreement shall prevail. Any rights granted to Customer in such Partner Order which are not contained in this Agreement, apply only in connection with such Partner. In that case, Customer must seek redress or realization or enforcement of such rights solely with such Partner and not Wiz. An “Order” means a Direct Order or a Partner Order, as applicable. - Subscription.
2.1. Subject to the terms and conditions of this Agreement (including payment obligations), Wiz hereby grants Customer, in connection with each Order, a limited, non-exclusive, non-sublicensable, non-transferable and revocable (as provided herein) right to use the Wiz cloud security platform (“Platform”) in object code form, during the corresponding Subscription Term (as defined in an Order), solely for Customer's internal business purposes and in accordance with the subscriptions specified in the applicable Order.
2.2. Unless otherwise indicated, the term “Platform” also includes all software, revisions, fixes, improvements and/or updates to the subscription type specified in an Order and any user manuals and documentation available within the Platform (“Documentation”) provided to Customer in connection with the operation of the Platform. Customer may only use the Platform in accordance with the Documentation, subject to any use limitations indicated in an Order, and applicable laws and regulations. The Platform and any related services provided to Customer and detailed in an Order shall be referred to as the “Services”. - Fees.
The Services are conditioned on Customer’s payment of the applicable fees as set forth in each Order (“Fees”) and Wiz reserves the right, following at least 15 days’ notice to Customer, to suspend Customer’s access to the Services for non or late payment. Except as set forth in this Agreement or a Direct Order, all Fees and other amounts paid pursuant to this Agreement and an Order are non-refundable and without right of set off. Unless otherwise specified in an Order: (i) Customer will pay all amounts due under this Agreement in U.S. Dollars currency, (ii) Fees for the entire Subscription Term set out in the applicable Order are due at the commencement of such Subscription Term and payable as described in the Order; (iii) all Fees are due and payable within thirty (30) days of the date of Wiz’s invoice; (iv) any amount not paid when due shall accrue interest on a daily basis until paid in full at the lesser of: (a) the rate of one and a half percent (1.5%) per month; or (b) the highest amount permitted by applicable law; and (v) all amounts payable under each Order are exclusive of all sales, use, value-added, withholding, and other direct or indirect taxes, charges, levies and duties. Customer shall bear all value added, state, local, withholding, and other taxes or other charges applicable to the Services; provided that Wiz will be responsible for any taxes imposed on Wiz’s income, assets and/or workforce. - Permitted Users. The Platform may be accessed solely by Customer or its Affiliates' employees or service providers who are explicitly authorized by Customer to use the Platform (each, a “Permitted User”). Customer will (i) ensure that Permitted Users comply with the terms of this Agreement at all times, (ii) maintain the confidentiality and security of their Wiz account credentials, and (iii) be fully responsible for any acts or omissions by a Permitted User. Customer must promptly notify Wiz upon becoming aware of any unauthorized access to or use of the Platform.
- Prohibited Uses. Except as specifically permitted herein, without the prior written consent of Wiz, Customer shall not, and shall not allow any Permitted User or any third party to, directly or indirectly: (i) copy, modify, create derivative works of or distribute any part of the Platform (including by incorporation into its products); (ii) sell, license (or sub-license), lease, assign, transfer, pledge, or share Customer's rights under this Agreement with any third party; (iii) disclose the results of any testing or benchmarking of the Platform to any third party; (iv) disassemble, decompile, reverse engineer or attempt to discover the Platform’s source code or underlying algorithms; (v) use the Platform for any use in competition with Wiz’s Services; (vi) use the Platform in a manner that violates or infringes any rights of any third party; (vii) remove or alter any trademarks or other proprietary notices related to the Platform; or (vii) circumvent, disable or otherwise interfere with security-related features of the Platform or features that enforce use limitations.
- Security.
Customer acknowledges that it is responsible for implementing, running and managing its subscription to the Platform on a day to day basis. Wiz shall employ administrative, physical, and technical security measures in accordance with applicable industry standards, including AICPA SOC2 Type 2 criteria and ISO 27001, to protect (and prevent the accidental loss or unauthorized access, use or disclosure of) Customer Data, in each case, under its control. Customer shall be responsible for: (i) the security of cloud environments it owns, operates, and connects to Wiz, and for configuration of its instance(s) of the Wiz Platform; (ii) provisioning Permitted Users with access to Customer’s instance of the Wiz Platform, including: (a) managing instance-level administrators and other user privileges; (b) deauthorizing Permitted Users who no longer need access; (c) provisioning and configuring service account or API access; and (d) enabling integrations, in Customer’s sole discretion, with customer-owned or third-party technologies. Wiz provides customers with audit logs that record customer user account and application activity occurring within their respective Wiz Platform instance(s), however, Customer is responsible for monitoring its own instance’s audit logs. - Customer Data.
7.1. As between the parties, Customer owns and retains all right, title and interest (including all intellectual property rights) in and to any data or information that originates, resides on, or is otherwise processed through Customer's systems and processed by Wiz in the provision of the Services (“Customer Data”). Customer has exclusive control and responsibility for determining what Customer Data it and its Permitted Users submit into the Services and for obtaining all necessary rights, consents and permissions for submission of Customer Data and processing instructions to Wiz. Customer hereby grants to Wiz a non-exclusive, worldwide, royalty-free right to use Customer Data to provide the Services and perform its obligations under this Agreement.
7.2. If Customer Data contains personally identifiable information, to the extent applicable, the Parties shall comply with Wiz’s Data Processing Agreement (“DPA”), which is available at https://www.wiz.io/data-processing-agreement and forms an integral part of this Agreement.
7.3. Customer acknowledges and agrees that Wiz may collect and process information regarding the configuration, performance, security, access to and use of the Services by Customer (“Account Data”) for its internal business purposes including to develop, improve, support, secure and operate the Services and to fulfill legal obligations. Notwithstanding the foregoing, nothing in this Agreement shall restrict Wiz’s use of data that has been anonymized and/or aggregated, provided that such data does not in any way identify and cannot be reasonably associated with Customer, its Affiliates, Permitted Users or any individuals connected to Customer or Customer Confidential Information (“Anonymized Data”). - Evaluations. If Customer is using the Services for a free trial, proof of concept, evaluation, one-time assessment, or other similar purpose (“Evaluation”), such Evaluation is granted for a limited period of twenty-one (21) days, (or in the case of Wiz’s One-time free assessment for up to seven (7) days), unless Wiz agrees to an extension and in each case solely for the purpose of evaluating and testing the Services to determine whether to purchase a subscription for Customer’s internal use. Wiz may terminate Customer’s access to and use of any Evaluation at any time. Evaluations are provided “as is” without guaranteed support levels, indemnification, or warranty of any kind, whether express, implied, statutory, or otherwise. Notwithstanding Section 15 (Limitation of Liability) or any other provision of this Agreement, Wiz’s maximum aggregate liability under any Evaluation shall be capped at one thousand dollars US ($1,000 US).
- Wiz Preview Features. From time to time, upon Customer or its Permitted Users' request, Wiz may make available to Customer one or more proprietary, non-commercially available, hosted software applications, application platform interfaces, services, products, features and/or functionalities on a beta testing basis (“Wiz Preview Feature(s)”) to try at no charge. Customer may choose to try such Wiz Preview Features in its sole discretion subject to the Wiz Preview Program Terms which are available at https://www.wiz.io/preview-terms.
- Customer Integrations. Customer acknowledges that the Services may link to third party websites, applications or services that can be integrated with or connected to the Services (“Third Party Integrations”). Customer’s use of such Third Party Integrations is optional. To use such features, Customer must either obtain access to the Third Party Integrations via the third party provider or authorize Wiz to obtain access on Customer’s behalf. If Customer uses such Third Party Integrations, it acknowledges and agrees that: (a) any link from the Service does not imply any Wiz endorsement of, or responsibility for, those Third Party Integrations and the use of such Third Party Integrations are subject to the terms and conditions of the Third Party Integration provider; (b) Customer may be required to grant Wiz access to its Third Party Integration account and/or to grant the Third Party Integration provider access to its Wiz account; (c) Customer Data may be transferred between Wiz and the Third Party Integration provider as required for the interoperation with the Services; and (d) Wiz does not guarantee the continued availability of such Third Party Integrations, and may cease supporting them without liability to Customer. To the maximum extent permitted by law but without derogating from Wiz’s obligations under this Agreement, Wiz shall not bear and expressly disclaims all responsibility or liability of any kind relating to such Third Party Integrations, including, without limitation, for any disclosure of, access to or other processing of Customer Data by Third Party Integration providers.
- Warranties. Each Party represents and warrants that it is duly organized, validly existing and in good standing under the laws of its jurisdiction of incorporation or organization; and that the execution and performance of this Agreement will not conflict with other agreements to which it is bound or violate applicable law.
- Intellectual Property Rights. All right, title, and interest, including any intellectual property rights evidenced by or embodied in, attached, connected, and/or related to the Platform (and any and all improvements enhancements, corrections, modifications, alterations, revisions, extensions and updates and derivative works thereof) and any other products, deliverables or services provided by Wiz; are and shall remain owned solely by Wiz or its licensors. This Agreement does not convey to Customer any interest in or to the Platform other than a limited right to use the Platform in accordance with Section 2 (Subscription). Nothing herein constitutes a waiver of Wiz’s intellectual property rights under any law. Wiz reserves all rights not expressly granted herein to the Platform.
If Customer chooses, in its sole discretion, to provide Feedback (defined below) to Wiz, nothing in this Agreement or in the parties’ dealings arising out of or related to this Agreement will restrict Wiz's right to use, profit from, disclose, publish, or otherwise exploit Feedback, without compensating or crediting Customer or the individual providing such Feedback. Customer’s Confidential Information shall not include Feedback, to the extent that such Feedback relates exclusively to Wiz’s products or services. “Feedback” means any feedback (e.g., questions, comments, suggestions or the like), whether orally or in writing, regarding any of the Services. - Confidentiality. Each Party may have access to certain non-public information of the other Party, in any form or media, including without limitation trade secrets and other information related to the products, software, technology, data, know-how, or business of the other Party, and any other information that a reasonable person should have reason to believe is proprietary, confidential, or competitively sensitive (the “Confidential Information”). The receiving Party will use the same standard of care to protect the disclosing Party’s Confidential Information as it uses to protect its own Confidential Information, but no less than reasonable care. The receiving Party’s obligations under this Section, with respect to any Confidential Information of the disclosing Party, shall not apply to and/or shall terminate if such information: (a) was already lawfully known to the receiving Party at the time of disclosure by the disclosing Party; (b) was disclosed to the receiving Party by a third party who had the right to make such disclosure without any confidentiality restrictions; (c) is, or through no fault of the receiving Party has become, generally available to the public; or (d) was independently developed by the receiving Party without access to, or use of, the disclosing Party’s Confidential Information. Neither Party shall use or disclose the Confidential Information of the other Party except for performance of its obligations under this Agreement. The receiving Party shall only permit access to the disclosing Party's Confidential Information to its and/or its Affiliates’ respective employees, consultants, affiliates, service providers, agents, partners, and subcontractors having a need to know such information, and who are bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement (such recipients being “Authorized Recipients”). The receiving Party is responsible for the compliance of its Authorized Recipients with the confidentiality and non-disclosure obligations of this Agreement. The receiving Party will be allowed to disclose Confidential Information to the extent that such disclosure is required by law or by the order or a court of similar judicial or administrative body, provided that, to the extent permitted by applicable law, it notifies the disclosing Party of such required disclosure to enable disclosing party to seek a protective order or otherwise prevent or restrict such disclosure. Notwithstanding the foregoing, each Party can disclose the terms and existence of this Agreement to third parties in connection with a due diligence review (i.e., a potential investment in a Party or a going-public transaction) subject to such third parties being bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement. All right, title and interest in and to Confidential Information are and shall remain the sole and exclusive property of the disclosing Party.
- LIMITED WARRANTIES. Wiz represents and warrants that the Platform shall substantially perform in conformance with its Documentation. As the Customer's sole and exclusive remedy and Wiz's sole liability for breach of this warranty, Wiz shall use commercially reasonable efforts to repair the Platform and, if Wiz cannot do so within a reasonable time, not to exceed 30 days, Customer may terminate this Agreement and receive a pro-rata refund of any amounts pre-paid by Customer for the remaining unused period of the Term. The warranty set forth shall not apply if the failure of the Platform results from or is otherwise attributable to Customer or its Permitted User’s acts or omissions in violation of this Agreement. Wiz shall not be liable for any inaccuracy in the Service's output and/or delay and/or unavailability of the Services, caused due to (a) failure of Customer's Internet access or any public telecommunications network, or shortage of adequate power, (b) any incompatibility between the Customer's systems and the Platform and/or (c) maintenance within the Customer's systems affecting the operation of the Platform. OTHER THAN AS EXPLICITLY STATED IN THIS AGREEMENT, TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE PLATFORM, ITS RELATED SERVICES AND ANY OUTPUT RESULTED FROM THE USE OF THE PLATFORM ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. WIZ DOES NOT WARRANT THAT: (i) THE SERVICES WILL MEET CUSTOMER'S REQUIREMENTS, OR (ii) THE SERVICES WILL OPERATE ERROR-FREE. EXCEPT AS SET FORTH IN THIS AGREEMENT, WIZ EXPRESSLY DISCLAIMS ALL EXPRESS WARRANTIES AND ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, TITLE, NON- INFRINGEMENT, NON-INTERFERENCE, FITNESS FOR A PARTICULAR PURPOSE.
WIZ SHALL NOT BE RESPONSIBLE FOR ANY WARRANTIES AND REPRESENTATIONS MADE BY ANY PARTNER TO CUSTOMER, AND SUCH WARRANTIES AND REPRESENTATIONS ARE THE SOLE RESPONSIBILITY OF SUCH PARTNER. - LIMITATION OF LIABILITY. TO THE MAXIMUM EXTENT PERMITTED BY LAW:
(A) EXCEPT FOR ANY DAMAGES RESULTING FROM CUSTOMER'S VIOLATION OF WIZ'S INTELLECTUAL PROPERTY RIGHTS; NEITHER PARTY OR ITS AFFILIATES SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE.
(B) EXCEPT FOR WIZ’S INDEMNIFICATION OBLIGATION UNDER SECTION 16, AND/OR DAMAGES RESULTING FROM CUSTOMER'S VIOLATION OF WIZ'S INTELLECTUAL PROPERTY RIGHTS; EITHER PARTY’S INCLUDING ITS AFFILIATES’ MAXIMUM LIABILITY FOR ANY DAMAGES ARISING OUT OF OR RELATED TO THIS AGREEMENT, INCLUDING ITS EXHIBITS, WHETHER IN CONTRACT OR TORT, OR OTHERWISE, SHALL IN NO EVENT EXCEED, IN THE AGGREGATE, THE TOTAL FEES ATTRIBUTABLE UNDER THE APPLICABLE ORDER TO THE TWELVE MONTH PERIOD OF THE CURRENT SUBSCRIPTION YEAR IN WHICH THE EVENT GIVING RISE TO SUCH CLAIM OCCURS. FOR CLARITY LIMITATIONS IN THIS SECTION DO NOT APPLY TO FEES DUE TO WIZ UNDER THIS AGREEMENT. - Indemnification. Wiz agrees to defend, at its expense, any third party action or suit brought against the Customer alleging that the Platform, when used as permitted under this Agreement and each respective Order or Partner Order (as the case may be), infringes intellectual property rights of a third party (“IP Infringement Claim”); and Wiz will pay any damages awarded in a final judgment against the Customer that are attributable to any such claim, or that are otherwise agreed in a settlement with the prior written consent of Wiz, provided that (i) the Customer promptly notifies Wiz in writing of such claim; (ii) the Customer grants Wiz the sole authority to handle the defense or settlement of any such claim and provides Wiz with all reasonable information and assistance, at Wiz’s expense; and (iii) the Customer refrains from admitting any liability or otherwise compromising the defense in whole or in part, without the express prior written consent of Wiz. Wiz will not enter into any settlement that imposes any legal liability or financial obligation on Customer without Customer’s prior written consent.
If the Platform becomes, or in Wiz’s opinion is likely to become, the subject of an IP Infringement Claim, then Wiz may, at its sole discretion: (a) procure for the Customer the right to continue using the Platform; (b) replace or modify the Platform to avoid the IP Infringement Claim; or (c) if options (a) and (b) cannot be accomplished despite Wiz’s reasonable efforts, then Wiz or Customer may terminate all affected Orders and Wiz shall provide a pro-rata refund for any amount pre-paid by Customer for the remaining unused period of the Term.
Notwithstanding the foregoing, Wiz shall have no responsibility for IP Infringement Claims to the extent resulting from or based on: (i) modifications to the Platform made by a party other than Wiz; (ii) the Customer’s failure to implement software updates provided by Wiz specifically to avoid infringement; or (iii) combination or use of the Platform with software not supplied by Wiz or not in accordance with the Documentation.
This Section states Wiz’s entire liability, and Customer’s exclusive remedy, for claims or alleged or actual infringement. - Term. This Agreement shall enter into force and effect on the Effective Date and, unless earlier terminated in accordance with Section 18, shall remain in full force and effect until all Orders expire or are terminated (the “Term”).
- Termination. Either Party may terminate an Order and/or this Agreement for cause with immediate effect if (a) the other Party breaches any material term or condition of an Order and/or this Agreement, and (b) such breach remains uncured thirty (30) days after the breaching Party receives written notice thereof. Upon termination or expiration of this Agreement and/or an Order: (i) all rights granted to Customer in the Platform shall expire, and Customer shall discontinue any further use and access thereof including, to the extent applicable, by deinstalling any Wiz provided software; (ii) Customer shall immediately delete and dispose of all copies of the Documentation in Customer’s or any of its representatives’ possession or control; and (iii) Wiz may retain Customer Data in accordance with its customer data retention policy without affecting any of Wiz’s rights to the Account Data or Anonymized Data. Section 5 (Prohibited Uses), Section 6 (Security) Section 7 (Customer Data), Section 8 (Evaluations), Section 9 (Wiz Preview Features), Section 10 (Customer Integrations), Section 12 (Intellectual Property), Section 13 (Confidentiality), Section 14 (Limited Warranties), Section 15 (Limitation of Liability), Section 18 (Termination), Section 21 (Contracting) and Section 22 22 (Miscellaneous) shall survive termination or expiration of this Agreement for any reason. Customer shall be responsible for downloading its Customer Data prior to termination of this Agreement.
- Customer Reference. Unless stated otherwise in an Order, Wiz shall not use Customer’s name to identify Customer as a customer of Wiz on Wiz’s websites or public marketing materials without Customer’s prior written consent.
- Export Compliance. The Services may be subject to export laws and regulations of the United States and other jurisdictions. Wiz and Customer each represents that it is not on any U.S. government denied-party list. Customer will not permit any Permitted User to access or use any Service in a U.S. embargoed country or region (currently the Crimea, Luhansk or Donetsk regions, Cuba, Iran, North Korea, Sudan or Syria) or as may be updated from time to time, or in violation of any U.S. export law or regulation.
- Contracting entity. For the purposes of this Agreement “Wiz” means Wiz Inc., a company incorporated under the laws of the State of Delaware, having its principal place of business at One Manhattan West, 57th Floor, New York, NY 10001 or its Affiliates, as applicable. For clarity, unless a Direct Order specifies otherwise, the Wiz entity contracting with Customer hereunder will be (i) Wiz, Inc., if Customer is located outside of the UK or Europe or is purchasing via a cloud service provider marketplace; or (ii) Wiz Cloud Limited, a private limited company under the laws of England and Wales, if Customer is located in the UK or Europe and not purchasing via a cloud service provider.
- Miscellaneous. This Agreement, including any Order(s) and any exhibits attached or referred hereto, represents the complete agreement concerning the subject matter hereof and may be amended only by a written agreement executed by both Parties. The failure of either Party to enforce any rights granted hereunder or to take action against the other Party in the event of any breach hereunder shall not be deemed a waiver by that Party as to subsequent enforcement of rights or subsequent actions in the event of future breaches. If any provision of this Agreement is held to be unenforceable, such provision shall be reformed only to the extent necessary to make it enforceable. This Agreement represents the entire agreement of the Parties with respect to the subject matter hereof, and supersedes and replaces all prior and contemporaneous oral or written understandings, agreements and statements by the Parties with respect to such subject matter, including prior non-disclosure agreements or evaluation agreements. Without limiting the generality of the foregoing, this Agreement supersedes any terms or conditions (whether printed, hyperlinked, or otherwise) in any Customer's purchase order or other standardized business forms, which purport to supersede, modify or supplement this Agreement. Neither Party may assign its rights or obligations under this Agreement without the prior written consent of the other Party, which consent may not be unreasonably withheld or delayed. Notwithstanding the foregoing, this Agreement may be assigned by either Party to its Affiliate or in connection with a merger, consolidation, sale of all of the equity interests of the Party, or a sale of all or substantially all of the assets of the Party to which this Agreement relates. Subject to the foregoing, this Agreement will be binding on the parties and their permitted successors and assigns. This Agreement shall be governed by and construed under the laws of the state of New York, without reference to principles and laws relating to the conflict of laws. The competent courts of New York City, New York shall have the exclusive jurisdiction with respect to any dispute and action arising under or in relation to this Agreement. This Agreement does not, and shall not be construed to create any relationship, partnership, joint venture, employer-employee, agency, or franchisor-franchisee relationship between the Parties. Neither Party will be liable for any delay or failure to perform its obligations hereunder resulting from circumstances or causes beyond its reasonable control including, but not limited to on account of strikes, shortages, riots, insurrection, fires, flood, storms, explosions, acts of God, war, government or quasi-governmental authorities actions, acts of terrorism, earthquakes, or power outages. From time to time, Wiz may modify this Agreement. Unless otherwise specified by Wiz, changes become effective for Customer upon renewal of the then-current Subscription Term or upon the effective date of a new Order after the updated version of this Agreement goes into effect. Wiz will use reasonable efforts to notify Customer of the changes through communications via Customer’s Account, email or other means. Customer may be required to click to accept or otherwise agree to the modified Agreement before renewing a Subscription Term or upon the effective date of a new Order, and in any event continued use of any Wiz Services after the updated version of this Agreement goes into effect will constitute Customer’s acceptance of such updated version.
Effective September 11, 2023 to September 14, 2023
DownloadTable of Contents
WIZ MASTER SUBSCRIPTION AGREEMENT
BY ACCEPTING THIS AGREEMENT OR ACCESSING OR USING THE SERVICES, YOU ARE ACCEPTING THE TERMS AND CONDITIONS OF THIS AGREEMENT, UNLESS A SEPARATE WRITTEN AGREEMENT IS IN EFFECT THAT SPECIFICALLY GOVERNS THE SUBJECT MATTER HEREOF. IF YOU DO NOT AGREE TO THIS AGREEMENT, YOU MAY NOT USE THE SERVICE. YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO ENTER INTO THIS AGREEMENT; IF YOU ARE USING THE SERVICE AS AN EMPLOYEE OR AGENT OF AN ORGANIZATION OR ENTITY, THEN YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO SIGN FOR AND BIND SUCH ORGANIZATION OR ENTITY IN ORDER TO ACCEPT THE TERMS OF THIS AGREEMENT. IF YOU DO NOT HAVE AUTHORITY TO BIND YOUR EMPLOYER OR OTHER LEGAL ENTITY, PLEASE DO NOT ACCEPT THIS AGREEMENT AND IMMEDIATELY REFRAIN FROM ACCESSING AND/OR USING THE SERVICES.
IF YOU ARE USING THE SERVICE AS A PROOF OF CONCEPT OR FOR EVALUATION PURPOSES, THE SERVICES ARE PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND AND IN ACCORDANCE WITH THE TERMS OF SECTION 6 (“EVALUATIONS”) BELOW.
This Master Subscription Agreement (the “Agreement”) is effective on the earlier of: the date of (i) the execution of an Order referencing this Agreement; or (ii) Customer’s use of the Services (the “Effective Date”), by and between Wiz (as defined in Section 20 below) and you or the entity you represent referenced in the Order or otherwise accessing the Services (the “Customer”) (each, a “Party” and collectively, the “Parties”). Customer may use the Services (as defined below) subject to the terms below.
The Services are conditioned on Customer’s payment of the applicable fees as set forth in each Order (“Fees”) and Wiz reserves the right, following at least 15 days’ notice to Customer, to suspend Customer’s access to the Services for non or late payment. Except as set forth in this Agreement or a Direct Order, all Fees and other amounts paid pursuant to this Agreement and an Order are non-refundable and without right of set off. Unless otherwise specified in an Order: (i) Customer will pay all amounts due under this Agreement in U.S. Dollars currency, (ii) Fees for the entire Subscription Term set out in the applicable Order are due at the commencement of such Subscription Term and payable as described in the Order; (iii) all Fees are due and payable within thirty (30) days of the date of Wiz’s invoice; (iv) any amount not paid when due shall accrue interest on a daily basis until paid in full at the lesser of: (a) the rate of one and a half percent (1.5%) per month; or (b) the highest amount permitted by applicable law; and (v) all amounts payable under each Order are exclusive of all sales, use, value-added, withholding, and other direct or indirect taxes, charges, levies and duties. Customer shall bear all value added, state, local, withholding, and other taxes or other charges applicable to the Services; provided that Wiz will be responsible for any taxes imposed on Wiz’s income, assets and/or workforce.
If Customer chooses, in its sole discretion, to provide Feedback (defined below) to Wiz, nothing in this Agreement or in the parties’ dealings arising out of or related to this Agreement will restrict Wiz's right to use, profit from, disclose, publish, or otherwise exploit Feedback, without compensating or crediting Customer or the individual providing such Feedback. Customer’s Confidential Information shall not include Feedback, to the extent that such Feedback relates exclusively to Wiz’s products or services. “Feedback” means any feedback (e.g., questions, comments, suggestions or the like), whether orally or in writing, regarding any of the Services.
WIZ SHALL NOT BE RESPONSIBLE FOR ANY WARRANTIES AND REPRESENTATIONS MADE BY ANY PARTNER TO CUSTOMER, AND SUCH WARRANTIES AND REPRESENTATIONS ARE THE SOLE RESPONSIBILITY OF SUCH PARTNER.
(A) EXCEPT FOR ANY DAMAGES RESULTING FROM CUSTOMER'S VIOLATION OF WIZ'S INTELLECTUAL PROPERTY RIGHTS; NEITHER PARTY OR ITS AFFILIATES SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE.
(B) EXCEPT FOR WIZ’S INDEMNIFICATION OBLIGATION UNDER SECTION 15, AND/OR DAMAGES RESULTING FROM CUSTOMER'S VIOLATION OF WIZ'S INTELLECTUAL PROPERTY RIGHTS; EITHER PARTY’S INCLUDING ITS AFFILIATES’ MAXIMUM LIABILITY FOR ANY DAMAGES ARISING OUT OF OR RELATED TO THIS AGREEMENT, INCLUDING ITS EXHIBITS, WHETHER IN CONTRACT OR TORT, OR OTHERWISE, SHALL IN NO EVENT EXCEED, IN THE AGGREGATE, THE TOTAL FEES ATTRIBUTABLE UNDER THE APPLICABLE ORDER TO THE TWELVE MONTH PERIOD OF THE CURRENT SUBSCRIPTION YEAR IN WHICH THE EVENT GIVING RISE TO SUCH CLAIM OCCURS. FOR CLARITY LIMITATIONS IN THIS SECTION DO NOT APPLY TO FEES DUE TO WIZ UNDER THIS AGREEMENT.
If the Platform becomes, or in Wiz’s opinion is likely to become, the subject of an IP Infringement Claim, then Wiz may, at its sole discretion: (a) procure for the Customer the right to continue using the Platform; (b) replace or modify the Platform to avoid the IP Infringement Claim; or (c) if options (a) and (b) cannot be accomplished despite Wiz’s reasonable efforts, then Wiz or Customer may terminate all affected Orders and Wiz shall provide a pro-rata refund for any amount pre-paid by Customer for the remaining unused period of the Term.
Notwithstanding the foregoing, Wiz shall have no responsibility for IP Infringement Claims to the extent resulting from or based on: (i) modifications to the Platform made by a party other than Wiz or its designee; (ii) the Customer’s failure to implement software updates provided by Wiz specifically to avoid infringement; or (iii) combination or use of the Platform with software not supplied by Wiz or not in accordance with the Documentation.
This Section states Wiz’s entire liability, and Customer’s exclusive remedy, for claims or alleged or actual infringement.
21. Miscellaneous. This Agreement, including any Order(s) and any exhibits attached or referred hereto, represents the complete agreement concerning the subject matter hereof and may be amended only by a written agreement executed by both Parties. The failure of either Party to enforce any rights granted hereunder or to take action against the other Party in the event of any breach hereunder shall not be deemed a waiver by that Party as to subsequent enforcement of rights or subsequent actions in the event of future breaches. If any provision of this Agreement is held to be unenforceable, such provision shall be reformed only to the extent necessary to make it enforceable. This Agreement represents the entire agreement of the Parties with respect to the subject matter hereof, and supersedes and replaces all prior and contemporaneous oral or written understandings, agreements and statements by the Parties with respect to such subject matter, including prior non-disclosure agreements or evaluation agreements. Without limiting the generality of the foregoing, this Agreement supersedes any terms or conditions (whether printed, hyperlinked, or otherwise) in any Customer's purchase order or other standardized business forms, which purport to supersede, modify or supplement this Agreement. Neither Party may assign its rights or obligations under this Agreement without the prior written consent of the other Party, which consent may not be unreasonably withheld or delayed. Notwithstanding the foregoing, this Agreement may be assigned by either Party to its Affiliate or in connection with a merger, consolidation, sale of all of the equity interests of the Party, or a sale of all or substantially all of the assets of the Party to which this Agreement relates. Subject to the foregoing, this Agreement will be binding on the parties and their permitted successors and assigns. This Agreement shall be governed by and construed under the laws of the state of New York, without reference to principles and laws relating to the conflict of laws. The competent courts of New York City, New York shall have the exclusive jurisdiction with respect to any dispute and action arising under or in relation to this Agreement. This Agreement does not, and shall not be construed to create any relationship, partnership, joint venture, employer-employee, agency, or franchisor-franchisee relationship between the Parties. Neither Party will be liable for any delay or failure to perform its obligations hereunder resulting from circumstances or causes beyond its reasonable control including, but not limited to on account of strikes, shortages, riots, insurrection, fires, flood, storms, explosions, acts of God, war, government or quasi-governmental authorities actions, acts of terrorism, earthquakes, or power outages. From time to time, Wiz may modify this Agreement. Unless otherwise specified by Wiz, changes become effective for Customer upon renewal of the then-current Subscription Term or upon the effective date of a new Order after the updated version of this Agreement goes into effect. Wiz will use reasonable efforts to notify Customer of the changes through communications via Customer’s Account, email or other means. Customer may be required to click to accept or otherwise agree to the modified Agreement before renewing a Subscription Term or upon the effective date of a new Order, and in any event continued use of any Wiz Services after the updated version of this Agreement goes into effect will constitute Customer’s acceptance of such updated version.
Effective September 11, 2023 to September 11, 2023
DownloadTable of Contents
WIZ MASTER SUBSCRIPTION AGREEMENT
BY ACCEPTING THIS AGREEMENT OR ACCESSING OR USING THE SERVICES, YOU ARE ACCEPTING THE TERMS AND CONDITIONS OF THIS AGREEMENT, UNLESS A SEPARATE WRITTEN AGREEMENT IS IN EFFECT THAT SPECIFICALLY GOVERNS THE SUBJECT MATTER HEREOF. IF YOU DO NOT AGREE TO THIS AGREEMENT, YOU MAY NOT USE THE SERVICE. YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO ENTER INTO THIS AGREEMENT; IF YOU ARE USING THE SERVICE AS AN EMPLOYEE OR AGENT OF AN ORGANIZATION OR ENTITY, THEN YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO SIGN FOR AND BIND SUCH ORGANIZATION OR ENTITY IN ORDER TO ACCEPT THE TERMS OF THIS AGREEMENT. IF YOU DO NOT HAVE AUTHORITY TO BIND YOUR EMPLOYER OR OTHER LEGAL ENTITY, PLEASE DO NOT ACCEPT THIS AGREEMENT AND IMMEDIATELY REFRAIN FROM ACCESSING AND/OR USING THE SERVICES.
IF YOU ARE USING THE SERVICE AS A PROOF OF CONCEPT OR FOR EVALUATION PURPOSES, THE SERVICES ARE PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND AND IN ACCORDANCE WITH THE TERMS OF SECTION 6 (“EVALUATIONS”) BELOW.
This Master Subscription Agreement (the “Agreement”) is effective on the earlier of: the date of (i) the execution of an Order referencing this Agreement; or (ii) Customer’s use of the Services (the “Effective Date”), by and between Wiz (as defined in Section 20 below) and you or the entity you represent referenced in the Order or otherwise accessing the Services (the “Customer”) (each, a “Party” and collectively, the “Parties”). Customer may use the Services (as defined below) subject to the terms below.
The Services are conditioned on Customer’s payment of the applicable fees as set forth in each Order (“Fees”) and Wiz reserves the right, following at least 15 days’ notice to Customer, to suspend Customer’s access to the Services for non or late payment. Except as set forth in this Agreement or a Direct Order, all Fees and other amounts paid pursuant to this Agreement and an Order are non-refundable and without right of set off. Unless otherwise specified in an Order: (i) Customer will pay all amounts due under this Agreement in U.S. Dollars currency, (ii) Fees for the entire Subscription Term set out in the applicable Order are due at the commencement of such Subscription Term and payable as described in the Order; (iii) all Fees are due and payable within thirty (30) days of the date of Wiz’s invoice; (iv) any amount not paid when due shall accrue interest on a daily basis until paid in full at the lesser of: (a) the rate of one and a half percent (1.5%) per month; or (b) the highest amount permitted by applicable law; and (v) all amounts payable under each Order are exclusive of all sales, use, value-added, withholding, and other direct or indirect taxes, charges, levies and duties. Customer shall bear all value added, state, local, withholding, and other taxes or other charges applicable to the Services; provided that Wiz will be responsible for any taxes imposed on Wiz’s income, assets and/or workforce.
If Customer chooses, in its sole discretion, to provide Feedback (defined below) to Wiz, nothing in this Agreement or in the parties’ dealings arising out of or related to this Agreement will restrict Wiz's right to use, profit from, disclose, publish, or otherwise exploit Feedback, without compensating or crediting Customer or the individual providing such Feedback. Customer’s Confidential Information shall not include Feedback, to the extent that such Feedback relates exclusively to Wiz’s products or services. “Feedback” means any feedback (e.g., questions, comments, suggestions or the like), whether orally or in writing, regarding any of the Services.
WIZ SHALL NOT BE RESPONSIBLE FOR ANY WARRANTIES AND REPRESENTATIONS MADE BY ANY PARTNER TO CUSTOMER, AND SUCH WARRANTIES AND REPRESENTATIONS ARE THE SOLE RESPONSIBILITY OF SUCH PARTNER.
(A) EXCEPT FOR ANY DAMAGES RESULTING FROM CUSTOMER'S VIOLATION OF WIZ'S INTELLECTUAL PROPERTY RIGHTS; NEITHER PARTY OR ITS AFFILIATES SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE.
(B) EXCEPT FOR WIZ’S INDEMNIFICATION OBLIGATION UNDER SECTION 15, AND/OR DAMAGES RESULTING FROM CUSTOMER'S VIOLATION OF WIZ'S INTELLECTUAL PROPERTY RIGHTS; EITHER PARTY’S INCLUDING ITS AFFILIATES’ MAXIMUM LIABILITY FOR ANY DAMAGES ARISING OUT OF OR RELATED TO THIS AGREEMENT, INCLUDING ITS EXHIBITS, WHETHER IN CONTRACT OR TORT, OR OTHERWISE, SHALL IN NO EVENT EXCEED, IN THE AGGREGATE, THE TOTAL FEES ATTRIBUTABLE UNDER THE APPLICABLE ORDER TO THE TWELVE MONTH PERIOD OF THE CURRENT SUBSCRIPTION YEAR IN WHICH THE EVENT GIVING RISE TO SUCH CLAIM OCCURS. FOR CLARITY LIMITATIONS IN THIS SECTION DO NOT APPLY TO FEES DUE TO WIZ UNDER THIS AGREEMENT.
If the Platform becomes, or in Wiz’s opinion is likely to become, the subject of an IP Infringement Claim, then Wiz may, at its sole discretion: (a) procure for the Customer the right to continue using the Platform; (b) replace or modify the Platform to avoid the IP Infringement Claim; or (c) if options (a) and (b) cannot be accomplished despite Wiz’s reasonable efforts, then Wiz or Customer may terminate all affected Orders and Wiz shall provide a pro-rata refund for any amount pre-paid by Customer for the remaining unused period of the Term.
Notwithstanding the foregoing, Wiz shall have no responsibility for IP Infringement Claims to the extent resulting from or based on: (i) modifications to the Platform made by a party other than Wiz or its designee; (ii) the Customer’s failure to implement software updates provided by Wiz specifically to avoid infringement; or (iii) combination or use of the Platform with software not supplied by Wiz or not in accordance with the Documentation.
This Section states Wiz’s entire liability, and Customer’s exclusive remedy, for claims or alleged or actual infringement.
Miscellaneous. This Agreement, including any Order(s) and any exhibits attached or referred hereto, represents the complete agreement concerning the subject matter hereof and may be amended only by a written agreement executed by both Parties. The failure of either Party to enforce any rights granted hereunder or to take action against the other Party in the event of any breach hereunder shall not be deemed a waiver by that Party as to subsequent enforcement of rights or subsequent actions in the event of future breaches. If any provision of this Agreement is held to be unenforceable, such provision shall be reformed only to the extent necessary to make it enforceable. This Agreement represents the entire agreement of the Parties with respect to the subject matter hereof, and supersedes and replaces all prior and contemporaneous oral or written understandings, agreements and statements by the Parties with respect to such subject matter, including prior non-disclosure agreements or evaluation agreements. Without limiting the generality of the foregoing, this Agreement supersedes any terms or conditions (whether printed, hyperlinked, or otherwise) in any Customer's purchase order or other standardized business forms, which purport to supersede, modify or supplement this Agreement. Neither Party may assign its rights or obligations under this Agreement without the prior written consent of the other Party, which consent may not be unreasonably withheld or delayed. Notwithstanding the foregoing, this Agreement may be assigned by either Party to its Affiliate or in connection with a merger, consolidation, sale of all of the equity interests of the Party, or a sale of all or substantially all of the assets of the Party to which this Agreement relates. Subject to the foregoing, this Agreement will be binding on the parties and their permitted successors and assigns. This Agreement shall be governed by and construed under the laws of the state of New York, without reference to principles and laws relating to the conflict of laws. The competent courts of New York City, New York shall have the exclusive jurisdiction with respect to any dispute and action arising under or in relation to this Agreement. This Agreement does not, and shall not be construed to create any relationship, partnership, joint venture, employer-employee, agency, or franchisor-franchisee relationship between the Parties. Neither Party will be liable for any delay or failure to perform its obligations hereunder resulting from circumstances or causes beyond its reasonable control including, but not limited to on account of strikes, shortages, riots, insurrection, fires, flood, storms, explosions, acts of God, war, government or quasi-governmental authorities actions, acts of terrorism, earthquakes, or power outages. From time to time, Wiz may modify this Agreement. Unless otherwise specified by Wiz, changes become effective for Customer upon renewal of the then-current Subscription Term or upon the effective date of a new Order after the updated version of this Agreement goes into effect. Wiz will use reasonable efforts to notify Customer of the changes through communications via Customer’s Account, email or other means. Customer may be required to click to accept or otherwise agree to the modified Agreement before renewing a Subscription Term or upon the effective date of a new Order, and in any event continued use of any Wiz Services after the updated version of this Agreement goes into effect will constitute Customer’s acceptance of such updated version.
Effective August 14, 2023 to September 11, 2023
DownloadTable of Contents
WIZ MASTER SUBSCRIPTION AGREEMENT
BY ACCEPTING THIS AGREEMENT OR ACCESSING OR USING THE SERVICES, YOU ARE ACCEPTING THE TERMS AND CONDITIONS OF THIS AGREEMENT, UNLESS A SEPARATE WRITTEN AGREEMENT IS IN EFFECT THAT SPECIFICALLY GOVERNS THE SUBJECT MATTER HEREOF. IF YOU DO NOT AGREE TO THIS AGREEMENT, YOU MAY NOT USE THE SERVICE. YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO ENTER INTO THIS AGREEMENT; IF YOU ARE USING THE SERVICE AS AN EMPLOYEE OR AGENT OF AN ORGANIZATION OR ENTITY, THEN YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO SIGN FOR AND BIND SUCH ORGANIZATION OR ENTITY IN ORDER TO ACCEPT THE TERMS OF THIS AGREEMENT. IF YOU DO NOT HAVE AUTHORITY TO BIND YOUR EMPLOYER OR OTHER LEGAL ENTITY, PLEASE DO NOT ACCEPT THIS AGREEMENT AND IMMEDIATELY REFRAIN FROM ACCESSING AND/OR USING THE SERVICES.
IF YOU ARE USING THE SERVICE AS A PROOF OF CONCEPT OR FOR EVALUATION PURPOSES, THE SERVICES ARE PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND AND IN ACCORDANCE WITH THE TERMS OF SECTION 6 (“EVALUATIONS”) BELOW.
This Master Subscription Agreement (the “Agreement”) is effective on the earlier of: the date of (i) the execution of an Order referencing this Agreement; or (ii) Customer’s use of the Services (the “Effective Date”), by and between Wiz (as defined in Section 20 below) and you or the entity you represent referenced in the Order or otherwise accessing the Services (the “Customer”) (each, a “Party” and collectively, the “Parties”). Customer may use the Services (as defined below) subject to the terms below.
- Ordering.
- Customer may place an order for Services directly with Wiz via an order form (a “Direct Order”). Direct Orders may be entered into by Wiz or Wiz Affiliates with Customer or Customer Affiliates. Each Direct Order is hereby incorporated into this Agreement by reference and shall be deemed to be a stand-alone agreement that incorporates by reference the terms of this Agreement (mutatis mutandis) whereby each signing entity to the Direct Order shall be considered to be either “Wiz” or “Customer” referenced herein. A Customer Affiliate will have the right to enter into an Order referencing this Agreement and thereby indicating its agreement to be bound by the terms of this Agreement as if it were an original party hereto. In such case, for purposes of such Order, such Customer Affiliate will be deemed to be the “Customer” hereunder. To the extent of any conflict or inconsistency between the terms and conditions of this Agreement and a Direct Order, this Agreement shall prevail (unless a Direct Order specifically states otherwise). “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
- If Customer has purchased a subscription pursuant to the terms hereof from a partner, reseller or distributor authorized by Wiz (“Partner”), to the extent there is any conflict between this Agreement and the agreement entered between Customer and the respective Partner, including any purchase order (“Partner Order”), then, as between Customer and Wiz, this Agreement shall prevail. Any rights granted to Customer in such Partner Order which are not contained in this Agreement, apply only in connection with such Partner. In that case, Customer must seek redress or realization or enforcement of such rights solely with such Partner and not Wiz. A Direct Order together with a Partner Order are referred to herein as an “Order”.
- Subscription.
- Subject to the terms and conditions of this Agreement (including payment obligations), Wiz hereby grants Customer, in connection with each Order, a limited, non-exclusive, non-sublicensable, non-transferable and revocable (as provided herein) right to use the Wiz cloud security platform (“Platform”) in object code form, during the corresponding Subscription Term (as defined in an Order), solely for Customer's internal business purposes and in accordance with the subscriptions specified in the applicable Order.
- Unless otherwise indicated, the term “Platform” also includes all software, revisions, fixes, improvements and/or updates thereto and any appliance, user manuals and documentation available within the Platform (“Documentation”) provided to Customer in connection with the operation of the Platform. Customer may only use the Platform in accordance with the Documentation, subject to any use limitations indicated in an Order, and applicable laws and regulations. The Platform and any related services provided to Customer and detailed in an Order shall be referred to as the “Services”.
- Fees.
The Services are conditioned on Customer’s payment of the applicable fees as set forth in each Order (“Fees”) and Wiz reserves the right, following at least 15 days’ notice to Customer, to suspend Customer’s access to the Services for non or late payment. Except as set forth in this Agreement or a Direct Order, all Fees and other amounts paid pursuant to this Agreement and an Order are non-refundable and without right of set off. Unless otherwise specified in an Order: (i) Customer will pay all amounts due under this Agreement in U.S. Dollars currency, (ii) Fees for the entire Subscription Term set out in the applicable Order are due at the commencement of such Subscription Term and payable as described in the Order; (iii) all Fees are due and payable within thirty (30) days of the date of Wiz’s invoice; (iv) any amount not paid when due shall accrue interest on a daily basis until paid in full at the lesser of: (a) the rate of one and a half percent (1.5%) per month; or (b) the highest amount permitted by applicable law; and (v) all amounts payable under each Order are exclusive of all sales, use, value-added, withholding, and other direct or indirect taxes, charges, levies and duties. Customer shall bear all value added, state, local, withholding, and other taxes or other charges applicable to the Services; provided that Wiz will be responsible for any taxes imposed on Wiz’s income, assets and/or workforce.
- Permitted Users. The Platform may be accessed solely by Customer or its Affiliates' employees or service providers who are explicitly authorized by Customer to use the Platform (each, a “Permitted User”). Customer will (i) ensure that Permitted Users comply with the terms of this Agreement at all times, (ii) maintain the confidentiality and security of their Wiz account credentials, and (iii) be fully responsible for any acts or omissions by a Permitted User. Customer must promptly notify Wiz upon becoming aware of any unauthorized access to or use of the Platform.
- Prohibited Uses. Except as specifically permitted herein, without the prior written consent of Wiz, Customer shall not, and shall not allow any Permitted User or any third party to, directly or indirectly: (i) copy, modify, create derivative works of or distribute any part of the Platform (including by incorporation into its products); (ii) sell, license (or sub-license), lease, assign, transfer, pledge, or share Customer's rights under this Agreement with any third party; (iii) disclose the results of any testing or benchmarking of the Platform to any third party; (iv) disassemble, decompile, reverse engineer or attempt to discover the Platform’s source code or underlying algorithms; (v) use the Platform for any use in competition with Wiz’s Services; (vi) use the Platform in a manner that violates or infringes any rights of any third party; (vii) remove or alter any trademarks or other proprietary notices related to the Platform; or (vii) circumvent, disable or otherwise interfere with security-related features of the Platform or features that enforce use limitations.
- Customer Data.
- As between the parties, Customer owns and retains all right, title and interest (including all intellectual property rights) in and to any data or information that originates, resides on, or is otherwise processed through Customer's systems and processed by Wiz in the provision of the Services (“Customer Data”). Customer has exclusive control and responsibility for determining what Customer Data it and its Permitted Users submit into the Services and for obtaining all necessary rights, consents and permissions for submission of Customer Data and processing instructions to Wiz. Customer hereby grants to Wiz a non-exclusive, worldwide, royalty-free right to use Customer Data to provide the Services and perform its obligations under this Agreement.
- If Customer Data contains personally identifiable information, to the extent applicable, the Parties shall comply with Wiz’s Data Processing Agreement (“DPA”), which is available at https://www.wiz.io/data-processing-agreement and forms an integral part of this Agreement.
- Customer acknowledges and agrees that Wiz may collect and process information regarding the configuration, performance, security, access to and use of the Services by Customer (“Account Data”) for its internal business purposes including to develop, improve, support, secure and operate the Services and to fulfill legal obligations. Notwithstanding the foregoing, nothing in this Agreement shall restrict Wiz’s use of data that has been anonymized and/or aggregated, provided that such data does not in any way identify and cannot be reasonably associated with Customer, its Affiliates, Permitted Users or any individuals connected to Customer or Customer Confidential Information (“Anonymized Data”).
- Evaluations. If Customer is using the Services for a free trial, proof of concept, evaluation, one-time assessment, or other similar purpose (“Evaluation”), such Evaluation is granted for a limited period of twenty-one (21) days, (or in the case of Wiz’s One-time free assessment for up to seven (7) days), unless Wiz agrees to an extension and in each case solely for the purpose of evaluating and testing the Services to determine whether to purchase a subscription for Customer’s internal use. Wiz may terminate Customer’s access to and use of any Evaluation at any time. Evaluations are provided “as is” without guaranteed support levels, indemnification, or warranty of any kind, whether express, implied, statutory, or otherwise. Notwithstanding Section 14 (Limitation of Liability) or any other provision of this Agreement, Wiz’s maximum aggregate liability under any Evaluation shall be capped at one thousand dollars US ($1,000 US).
- Wiz Preview Features. From time to time, upon Customer or its Permitted Users' request, Wiz may make available to Customer one or more proprietary, non-commercially available, hosted software applications, application platform interfaces, services, products, features and/or functionalities on a beta testing basis (“Wiz Preview Feature(s)”) to try at no charge. Customer may choose to try such Wiz Preview Features in its sole discretion subject to the Wiz Preview Program Terms which are available at https://www.wiz.io/preview-terms.
- Customer Integrations. Customer acknowledges that the Services may link to third party websites, applications or services that can be integrated with or connected to the Services (“Third Party Integrations”). Customer’s use of such Third Party Integrations is optional. To use such features, Customer must either obtain access to the Third Party Integrations via the third party provider or authorize Wiz to obtain access on Customer’s behalf. If Customer uses such Third Party Integrations, it acknowledges and agrees that: (a) any link from the Service does not imply any Wiz endorsement of, or responsibility for, those Third Party Integrations and the use of such Third Party Integrations are subject to the terms and conditions of the Third Party Integration provider; (b) Customer may be required to grant Wiz access to its Third Party Integration account and/or to grant the Third Party Integration provider access to its Wiz account; (c) Customer Data may be transferred between Wiz and the Third Party Integration provider as required for the interoperation with the Services; and (d) Wiz does not guarantee the continued availability of such Third Party Integrations, and may cease supporting them without liability to Customer. To the maximum extent permitted by law but without derogating from Wiz’s obligations under this Agreement, Wiz shall not bear and expressly disclaims all responsibility or liability of any kind relating to such Third Party Integrations, including, without limitation, for any disclosure of, access to or other processing of Customer Data by Third Party Integration providers.
- Warranties. Each Party represents and warrants that it is duly organized, validly existing and in good standing under the laws of its jurisdiction of incorporation or organization; and that the execution and performance of this Agreement will not conflict with other agreements to which it is bound or violate applicable law.
- Intellectual Property Rights. All right, title, and interest, including any intellectual property rights evidenced by or embodied in, attached, connected, and/or related to the Platform (and any and all improvements enhancements, corrections, modifications, alterations, revisions, extensions and updates and derivative works thereof) and any other products, deliverables or services provided by Wiz; are and shall remain owned solely by Wiz or its licensors. This Agreement does not convey to Customer any interest in or to the Platform other than a limited right to use the Platform in accordance with Section 2 (Subscription). Nothing herein constitutes a waiver of Wiz’s intellectual property rights under any law. Wiz reserves all rights not expressly granted herein to the Platform.
If Customer chooses, in its sole discretion, to provide Feedback (defined below) to Wiz, nothing in this Agreement or in the parties’ dealings arising out of or related to this Agreement will restrict Wiz's right to use, profit from, disclose, publish, or otherwise exploit Feedback, without compensating or crediting Customer or the individual providing such Feedback. Customer’s Confidential Information shall not include Feedback, to the extent that such Feedback relates exclusively to Wiz’s products or services. “Feedback” means any feedback (e.g., questions, comments, suggestions or the like), whether orally or in writing, regarding any of the Services.
- Confidentiality. Each Party may have access to certain non-public information of the other Party, in any form or media, including without limitation trade secrets and other information related to the products, software, technology, data, know-how, or business of the other Party, and any other information that a reasonable person should have reason to believe is proprietary, confidential, or competitively sensitive (the “Confidential Information”). The receiving Party will use the same standard of care to protect the disclosing Party’s Confidential Information as it uses to protect its own Confidential Information, but no less than reasonable care. The receiving Party’s obligations under this Section, with respect to any Confidential Information of the disclosing Party, shall not apply to and/or shall terminate if such information: (a) was already lawfully known to the receiving Party at the time of disclosure by the disclosing Party; (b) was disclosed to the receiving Party by a third party who had the right to make such disclosure without any confidentiality restrictions; (c) is, or through no fault of the receiving Party has become, generally available to the public; or (d) was independently developed by the receiving Party without access to, or use of, the disclosing Party’s Confidential Information. Neither Party shall use or disclose the Confidential Information of the other Party except for performance of its obligations under this Agreement. The receiving Party shall only permit access to the disclosing Party's Confidential Information to its and/or its Affiliates’ respective employees, consultants, affiliates, service providers, agents, partners, and subcontractors having a need to know such information, and who are bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement (such recipients being “Authorized Recipients”). The receiving Party is responsible for the compliance of its Authorized Recipients with the confidentiality and non-disclosure obligations of this Agreement. The receiving Party will be allowed to disclose Confidential Information to the extent that such disclosure is required by law or by the order or a court of similar judicial or administrative body, provided that, to the extent permitted by applicable law, it notifies the disclosing Party of such required disclosure to enable disclosing party to seek a protective order or otherwise prevent or restrict such disclosure. Notwithstanding the foregoing, each Party can disclose the terms and existence of this Agreement to third parties in connection with a due diligence review (i.e., a potential investment in a Party or a going-public transaction) subject to such third parties being bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement. All right, title and interest in and to Confidential Information are and shall remain the sole and exclusive property of the disclosing Party.
- LIMITED WARRANTIES. Wiz represents and warrants that the Platform shall substantially perform in conformance with its Documentation. As the Customer's sole and exclusive remedy and Wiz's sole liability for breach of this warranty, Wiz shall use commercially reasonable efforts to repair the Platform and, if Wiz cannot do so within a reasonable time, not to exceed 30 days, Customer may terminate this Agreement and receive a pro-rata refund of any amounts pre-paid by Customer for the remaining unused period of the Term. The warranty set forth shall not apply if the failure of the Platform results from or is otherwise attributable to Customer or its Permitted User’s acts or omissions in violation of this Agreement. Wiz shall not be liable for any inaccuracy in the Service's output and/or delay and/or unavailability of the Services, caused due to (a) failure of Customer's Internet access or any public telecommunications network, or shortage of adequate power, (b) any incompatibility between the Customer's systems and the Platform appliance and/or (c) maintenance within the Customer's systems affecting the operation of the Platform. OTHER THAN AS EXPLICITLY STATED IN THIS AGREEMENT, TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE PLATFORM, ITS RELATED SERVICES AND ANY OUTPUT RESULTED FROM THE USE OF THE PLATFORM ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. WIZ DOES NOT WARRANT THAT: (i) THE SERVICES WILL MEET CUSTOMER'S REQUIREMENTS, OR (ii) THE SERVICES WILL OPERATE ERROR-FREE. EXCEPT AS SET FORTH IN THIS AGREEMENT, WIZ EXPRESSLY DISCLAIMS ALL EXPRESS WARRANTIES AND ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, TITLE, NON- INFRINGEMENT, NON-INTERFERENCE, FITNESS FOR A PARTICULAR PURPOSE.
WIZ SHALL NOT BE RESPONSIBLE FOR ANY WARRANTIES AND REPRESENTATIONS MADE BY ANY PARTNER TO CUSTOMER, AND SUCH WARRANTIES AND REPRESENTATIONS ARE THE SOLE RESPONSIBILITY OF SUCH PARTNER.
(A) EXCEPT FOR ANY DAMAGES RESULTING FROM CUSTOMER'S VIOLATION OF WIZ'S INTELLECTUAL PROPERTY RIGHTS; NEITHER PARTY OR ITS AFFILIATES SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE.
(B) EXCEPT FOR WIZ’S INDEMNIFICATION OBLIGATION UNDER SECTION 15, AND/OR DAMAGES RESULTING FROM CUSTOMER'S VIOLATION OF WIZ'S INTELLECTUAL PROPERTY RIGHTS; EITHER PARTY’S INCLUDING ITS AFFILIATES’ MAXIMUM LIABILITY FOR ANY DAMAGES ARISING OUT OF OR RELATED TO THIS AGREEMENT, INCLUDING ITS EXHIBITS, WHETHER IN CONTRACT OR TORT, OR OTHERWISE, SHALL IN NO EVENT EXCEED, IN THE AGGREGATE, THE TOTAL FEES ATTRIBUTABLE UNDER THE APPLICABLE ORDER TO THE TWELVE MONTH PERIOD OF THE CURRENT SUBSCRIPTION YEAR IN WHICH THE EVENT GIVING RISE TO SUCH CLAIM OCCURS. FOR CLARITY LIMITATIONS IN THIS SECTION DO NOT APPLY TO FEES DUE TO WIZ UNDER THIS AGREEMENT.
- Indemnification. Wiz agrees to defend, at its expense, any third party action or suit brought against the Customer alleging that the Platform, when used as permitted under this Agreement and each respective Order or Partner Order (as the case may be), infringes intellectual property rights of a third party (“IP Infringement Claim”); and Wiz will pay any damages awarded in a final judgment against the Customer that are attributable to any such claim, or that are otherwise agreed in a settlement with the prior written consent of Wiz, provided that (i) the Customer promptly notifies Wiz in writing of such claim; (ii) the Customer grants Wiz the sole authority to handle the defense or settlement of any such claim and provides Wiz with all reasonable information and assistance, at Wiz’s expense; and (iii) the Customer refrains from admitting any liability or otherwise compromising the defense in whole or in part, without the express prior written consent of Wiz. Wiz will not enter into any settlement that imposes any legal liability or financial obligation on Customer without Customer’s prior written consent.
If the Platform becomes, or in Wiz’s opinion is likely to become, the subject of an IP Infringement Claim, then Wiz may, at its sole discretion: (a) procure for the Customer the right to continue using the Platform; (b) replace or modify the Platform to avoid the IP Infringement Claim; or (c) if options (a) and (b) cannot be accomplished despite Wiz’s reasonable efforts, then Wiz or Customer may terminate all affected Orders and Wiz shall provide a pro-rata refund for any amount pre-paid by Customer for the remaining unused period of the Term.
Notwithstanding the foregoing, Wiz shall have no responsibility for IP Infringement Claims to the extent resulting from or based on: (i) modifications to the Platform made by a party other than Wiz or its designee; (ii) the Customer’s failure to implement software updates provided by Wiz specifically to avoid infringement; or (iii) combination or use of the Platform with software not supplied by Wiz or not in accordance with the Documentation.
This Section states Wiz’s entire liability, and Customer’s exclusive remedy, for claims or alleged or actual infringement.
- Term. This Agreement shall enter into force and effect on the Effective Date and, unless earlier terminated in accordance with Section 17, shall remain in full force and effect until all Orders expire or are terminated (the “Term”).
- Termination. Either Party may terminate an Order and/or this Agreement for cause with immediate effect if (a) the other Party breaches any material term or condition of an Order and/or this Agreement, and (b) such breach remains uncured thirty (30) days after the breaching Party receives written notice thereof. Upon termination or expiration of this Agreement and/or an Order: (i) all rights granted to Customer in the Platform shall expire, and Customer shall discontinue any further use and access thereof including, to the extent applicable, by deinstalling any Wiz provided software; (ii) Customer shall immediately delete and dispose of all copies of the Documentation in Customer’s or any of its representatives’ possession or control; and (iii) Wiz may retain Customer Data in accordance with its customer data retention policy without affecting any of Wiz’s rights to the Account Data or Anonymized Data. Section 5 (Prohibited Uses), Section 6 (Customer Data), Section 7 (Evaluations), Section 8 (Wiz Preview Features), Section 9 (Customer Integrations), Section 11 (Intellectual Property), Section 12 (Confidentiality), Section 13 (Limited Warranties), Section 14 (Limitation of Liability), Section 17 (Termination), Section 20 (Contracting) and Section 21(Miscellaneous) shall survive termination or expiration of this Agreement for any reason. Customer shall be responsible for downloading its Customer Data prior to termination of this Agreement.
- Customer Reference. Unless stated otherwise in an Order or Customer emails Wiz at advocates@wiz.io confirming otherwise, Customer hereby grants Wiz a revocable right and license to use: (a) Customer’s name to identify Customer as a customer of Wiz on Wiz’s websites, presentations, marketing materials or otherwise (collectively, “Marketing Materials”); and/or (b) Customer’s logo to identify Customer as customer of Wiz, in Wiz’s Marketing Materials. Without derogating from the foregoing, unless Customer confirms otherwise via email as set out in the previous sentence, following the deployment of the Services, Customer hereby agrees to participate in a case study about Wiz and its Services which may be published by Wiz in its Marketing Materials.
- Export Compliance. The Services may be subject to export laws and regulations of the United States and other jurisdictions. Wiz and Customer each represents that it is not on any U.S. government denied-party list. Customer will not permit any Permitted User to access or use any Service in a U.S. embargoed country or region (currently the Crimea, Luhansk or Donetsk regions, Cuba, Iran, North Korea, Sudan or Syria) or as may be updated from time to time, or in violation of any U.S. export law or regulation.
- Contracting entity. For the purposes of this Agreement “Wiz” means Wiz Inc., a company incorporated under the laws of the State of Delaware, having its principal place of business at One Manhattan West, 57th Floor, New York, NY 10001 or its Affiliates, as applicable. For clarity, unless a Direct Order specifies otherwise, the Wiz entity contracting with Customer hereunder will be (i) Wiz, Inc., if Customer is located outside of the UK or Europe or is purchasing via a cloud service provider marketplace; or (ii) Wiz Cloud Limited, a private limited company under the laws of England and Wales, if Customer is located in the UK or Europe and not purchasing via a cloud service provider.
Miscellaneous. This Agreement, including any Order(s) and any exhibits attached or referred hereto, represents the complete agreement concerning the subject matter hereof and may be amended only by a written agreement executed by both Parties. The failure of either Party to enforce any rights granted hereunder or to take action against the other Party in the event of any breach hereunder shall not be deemed a waiver by that Party as to subsequent enforcement of rights or subsequent actions in the event of future breaches. If any provision of this Agreement is held to be unenforceable, such provision shall be reformed only to the extent necessary to make it enforceable. This Agreement represents the entire agreement of the Parties with respect to the subject matter hereof, and supersedes and replaces all prior and contemporaneous oral or written understandings, agreements and statements by the Parties with respect to such subject matter, including prior non-disclosure agreements or evaluation agreements. Without limiting the generality of the foregoing, this Agreement supersedes any terms or conditions (whether printed, hyperlinked, or otherwise) in any Customer's purchase order or other standardized business forms, which purport to supersede, modify or supplement this Agreement. Neither Party may assign its rights or obligations under this Agreement without the prior written consent of the other Party, which consent may not be unreasonably withheld or delayed. Notwithstanding the foregoing, this Agreement may be assigned by either Party to its Affiliate or in connection with a merger, consolidation, sale of all of the equity interests of the Party, or a sale of all or substantially all of the assets of the Party to which this Agreement relates. Subject to the foregoing, this Agreement will be binding on the parties and their permitted successors and assigns. This Agreement shall be governed by and construed under the laws of the state of New York, without reference to principles and laws relating to the conflict of laws. The competent courts of New York City, New York shall have the exclusive jurisdiction with respect to any dispute and action arising under or in relation to this Agreement. This Agreement does not, and shall not be construed to create any relationship, partnership, joint venture, employer-employee, agency, or franchisor-franchisee relationship between the Parties. Neither Party will be liable for any delay or failure to perform its obligations hereunder resulting from circumstances or causes beyond its reasonable control including, but not limited to on account of strikes, shortages, riots, insurrection, fires, flood, storms, explosions, acts of God, war, government or quasi-governmental authorities actions, acts of terrorism, earthquakes, or power outages. From time to time, Wiz may modify this Agreement. Unless otherwise specified by Wiz, changes become effective for Customer upon renewal of the then-current Subscription Term or upon the effective date of a new Order after the updated version of this Agreement goes into effect. Wiz will use reasonable efforts to notify Customer of the changes through communications via Customer’s Account, email or other means. Customer may be required to click to accept or otherwise agree to the modified Agreement before renewing a Subscription Term or upon the effective date of a new Order, and in any event continued use of any Wiz Services after the updated version of this Agreement goes into effect will constitute Customer’s acceptance of such updated version.
Effective July 5, 2023 to August 14, 2023
DownloadTable of Contents
- Ordering.
- Customer may place an order for Services directly with Wiz via an order form (a “Direct Order”). Direct Orders may be entered into by Wiz or Wiz Affiliates with Customer or Customer Affiliates. Each Direct Order is hereby incorporated into this Agreement by reference and shall be deemed to be a stand-alone agreement that incorporates by reference the terms of this Agreement (mutatis mutandis) whereby each signing entity to the Direct Order shall be considered to be either “Wiz” or “Customer” referenced herein. A Customer Affiliate will have the right to enter into an Order referencing this Agreement and thereby indicating its agreement to be bound by the terms of this Agreement as if it were an original party hereto. In such case, for purposes of such Order, such Customer Affiliate will be deemed to be the “Customer” hereunder. To the extent of any conflict or inconsistency between the terms and conditions of this Agreement and a Direct Order, this Agreement shall prevail (unless a Direct Order specifically states otherwise). “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity.
- If Customer has purchased a subscription pursuant to the terms hereof from a partner, reseller or distributor authorized by Wiz (“Partner”), to the extent there is any conflict between this Agreement and the agreement entered between Customer and the respective Partner, including any purchase order (“Partner Order”), then, as between Customer and Wiz, this Agreement shall prevail. Any rights granted to Customer in such Partner Order which are not contained in this Agreement, apply only in connection with such Partner. In that case, Customer must seek redress or realization or enforcement of such rights solely with such Partner and not Wiz. A Direct Order together with a Partner Order are referred to herein as an “Order”.
- Subscription.
- Subject to the terms and conditions of this Agreement (including payment obligations), Wiz hereby grants Customer, in connection with each Order, a limited, non-exclusive, non-sublicensable, non-transferable and revocable (as provided herein) right to use the Wiz cloud security platform (“Platform”) in object code form, during the corresponding Subscription Term (as defined in an Order), solely for Customer's internal business purposes and in accordance with the subscriptions specified in the applicable Order.
- Unless otherwise indicated, the term “Platform” also includes all software, revisions, fixes, improvements and/or updates thereto and any appliance, user manuals and documentation available within the Platform (“Documentation”) provided to Customer in connection with the operation of the Platform. Customer may only use the Platform in accordance with the Documentation, subject to any use limitations indicated in an Order, and applicable laws and regulations. The Platform and any related services provided to Customer and detailed in an Order shall be referred to as the “Services”.
- Fees.
- Permitted Users. The Platform may be accessed solely by Customer or its Affiliates' employees or service providers who are explicitly authorized by Customer to use the Platform (each, a “Permitted User”). Customer will (i) ensure that Permitted Users comply with the terms of this Agreement at all times, (ii) maintain the confidentiality and security of their Wiz account credentials, and (iii) be fully responsible for any acts or omissions by a Permitted User. Customer must promptly notify Wiz upon becoming aware of any unauthorized access to or use of the Platform. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
- Prohibited Uses. Except as specifically permitted herein, without the prior written consent of Wiz, Customer shall not, and shall not allow any Permitted User or any third party to, directly or indirectly: (i) copy, modify, create derivative works of or distribute any part of the Platform (including by incorporation into its products); (ii) sell, license (or sub-license), lease, assign, transfer, pledge, or share Customer's rights under this Agreement with any third party; (iii) disclose the results of any testing or benchmarking of the Platform to any third party; (iv) disassemble, decompile, reverse engineer or attempt to discover the Platform’s source code or underlying algorithms; (v) use the Platform for any use in competition with Wiz’s Services; (vi) use the Platform in a manner that violates or infringes any rights of any third party; (vii) remove or alter any trademarks or other proprietary notices related to the Platform; or (vii) circumvent, disable or otherwise interfere with security-related features of the Platform or features that enforce use limitations.
- Customer Data.
- As between the parties, Customer owns and retains all right, title and interest (including all intellectual property rights) in and to any data or information that originates, resides on, or is otherwise processed through Customer's systems and processed by Wiz in the provision of the Services (“Customer Data”). Customer has exclusive control and responsibility for determining what Customer Data it and its Permitted Users submit into the Services and for obtaining all necessary rights, consents and permissions for submission of Customer Data and processing instructions to Wiz. Customer hereby grants to Wiz a non-exclusive, worldwide, royalty-free right to use Customer Data to provide the Services and perform its obligations under this Agreement.
- If Customer Data contains personally identifiable information, to the extent applicable, the Parties shall comply with Wiz’s Data Processing Agreement (“DPA”), which is available at https://www.wiz.io/data-processing-agreement and forms an integral part of this Agreement.
- Customer acknowledges and agrees that Wiz may collect and process information regarding the configuration, performance, security, access to and use of the Services by Customer (“Account Data”) for its internal business purposes including to develop, improve, support, secure and operate the Services and to fulfill legal obligations. Notwithstanding the foregoing, nothing in this Agreement shall restrict Wiz’s use of data that has been anonymized and/or aggregated, provided that such data does not in any way identify and cannot be reasonably associated with Customer, its Affiliates, Permitted Users or any individuals connected to Customer or Customer Confidential Information (“ Anonymized Data”).
- Evaluations. If Customer is using the Services for a free trial, proof of concept, evaluation, or other similar purpose (“Evaluation”), such Evaluation is granted for a limited period of twenty-one (21) days unless Wiz agrees to an extension and in each case solely for the purpose of evaluating and testing the Services to determine whether to purchase a subscription for Customer’s internal use. Wiz may terminate Customer’s access to and use of any Evaluation at any time. Evaluations are provided “as is” without guaranteed support levels, indemnification, or warranty of any kind, whether express, implied, statutory, or otherwise. Notwithstanding Section 14 (Limitation of Liability) or any other provision of this Agreement, Wiz’s maximum aggregate liability under any Evaluation shall be capped at one thousand dollars US ($1,000 US).
- Wiz Preview Features. From time to time, upon Customer or its Permitted Users' request, Wiz may make available to Customer one or more proprietary, non-commercially available, hosted software applications, application platform interfaces, services, products, features and/or functionalities on a beta testing basis (“Wiz Preview Feature(s)”) to try at no charge. Customer may choose to try such Wiz Preview Features in its sole discretion subject to the Wiz Preview Program Terms which are available at https://www.wiz.io/preview-terms.
- Customer Integrations. Customer acknowledges that the Services may link to third party websites, applications or services that can be integrated with or connected to the Services (“Third Party Integrations”). Customer’s use of such Third Party Integrations is optional. To use such features, Customer must either obtain access to the Third Party Integrations via the third party provider or authorize Wiz to obtain access on Customer’s behalf. If Customer uses such Third Party Integrations, it acknowledges and agrees that: (a) any link from the Service does not imply any Wiz endorsement of, or responsibility for, those Third Party Integrations and the use of such Third Party Integrations are subject to the terms and conditions of the Third Party Integration provider; (b) Customer may be required to grant Wiz access to its Third Party Integration account and/or to grant the Third Party Integration provider access to its Wiz account; (c) Customer Data may be transferred between Wiz and the Third Party Integration provider as required for the interoperation with the Services; and (d) Wiz does not guarantee the continued availability of such Third Party Integrations, and may cease supporting them without liability to Customer. To the maximum extent permitted by law but without derogating from Wiz’s obligations under this Agreement, Wiz shall not bear and expressly disclaims all responsibility or liability of any kind relating to such Third Party Integrations, including, without limitation, for any disclosure of, access to or other processing of Customer Data by Third Party Integration providers.
- Warranties. Each Party represents and warrants that it is duly organized, validly existing and in good standing under the laws of its jurisdiction of incorporation or organization; and that the execution and performance of this Agreement will not conflict with other agreements to which it is bound or violate applicable law.
- Intellectual Property Rights. All right, title, and interest, including any intellectual property rights evidenced by or embodied in, attached, connected, and/or related to the Platform (and any and all improvements enhancements, corrections, modifications, alterations, revisions, extensions and updates and derivative works thereof) and any other products, deliverables or services provided by Wiz; are and shall remain owned solely by Wiz or its licensors. This Agreement does not convey to Customer any interest in or to the Platform other than a limited right to use the Platform in accordance with Section 2 (Subscription). Nothing herein constitutes a waiver of Wiz’s intellectual property rights under any law. Wiz reserves all rights not expressly granted herein to the Platform.
- Confidentiality. Each Party may have access to certain non-public information of the other Party, in any form or media, including without limitation trade secrets and other information related to the products, software, technology, data, know-how, or business of the other Party, and any other information that a reasonable person should have reason to believe is proprietary, confidential, or competitively sensitive (the “Confidential Information”). The receiving Party will use the same standard of care to protect the disclosing Party’s Confidential Information as it uses to protect its own Confidential Information, but no less than reasonable care. The receiving Party’s obligations under this Section, with respect to any Confidential Information of the disclosing Party, shall not apply to and/or shall terminate if such information: (a) was already lawfully known to the receiving Party at the time of disclosure by the disclosing Party; (b) was disclosed to the receiving Party by a third party who had the right to make such disclosure without any confidentiality restrictions; (c) is, or through no fault of the receiving Party has become, generally available to the public; or (d) was independently developed by the receiving Party without access to, or use of, the disclosing Party’s Confidential Information. Neither Party shall use or disclose the Confidential Information of the other Party except for performance of its obligations under this Agreement. The receiving Party shall only permit access to the disclosing Party's Confidential Information to its and/or its Affiliates’ respective employees, consultants, affiliates, service providers, agents and subcontractors having a need to know such information, and who are bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement (such recipients being “Authorized Recipients”). The receiving Party is responsible for the compliance of its Authorized Recipients with the confidentiality and non-disclosure obligations of this Agreement. The receiving Party will be allowed to disclose Confidential Information to the extent that such disclosure is required by law or by the order or a court of similar judicial or administrative body, provided that, to the extent permitted by applicable law, it notifies the disclosing Party of such required disclosure to enable disclosing party to seek a protective order or otherwise prevent or restrict such disclosure. Notwithstanding the foregoing, each Party can disclose the terms and existence of this Agreement to third parties in connection with a due diligence review (i.e., a potential investment in a Party or a going-public transaction) subject to such third parties being bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement. All right, title and interest in and to Confidential Information are and shall remain the sole and exclusive property of the disclosing Party.
- LIMITED WARRANTIES. Wiz represents and warrants that the Platform shall substantially perform in conformance with its Documentation. As the Customer's sole and exclusive remedy and Wiz's sole liability for breach of this warranty, Wiz shall use commercially reasonable efforts to repair the Platform and, if Wiz cannot do so within a reasonable time, not to exceed 30 days, Customer may terminate this Agreement and receive a pro-rata refund of any amounts pre-paid by Customer for the remaining unused period of the Term. The warranty set forth shall not apply if the failure of the Platform results from or is otherwise attributable to Customer or its Permitted User’s acts or omissions in violation of this Agreement. Wiz shall not be liable for any inaccuracy in the Service's output and/or delay and/or unavailability of the Services, caused due to (a) failure of Customer's Internet access or any public telecommunications network, or shortage of adequate power, (b) any incompatibility between the Customer's systems and the Platform appliance and/or (c) maintenance within the Customer's systems affecting the operation of the Platform. OTHER THAN AS EXPLICITLY STATED IN THIS AGREEMENT, TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE PLATFORM, ITS RELATED SERVICES AND ANY OUTPUT RESULTED FROM THE USE OF THE PLATFORM ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. WIZ DOES NOT WARRANT THAT: (i) THE SERVICES WILL MEET CUSTOMER'S REQUIREMENTS, OR (ii) THE SERVICES WILL OPERATE ERROR-FREE. EXCEPT AS SET FORTH IN THIS AGREEMENT, WIZ EXPRESSLY DISCLAIMS ALL EXPRESS WARRANTIES AND ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, TITLE, NON- INFRINGEMENT, NON-INTERFERENCE, FITNESS FOR A PARTICULAR PURPOSE.
- Indemnification. Wiz agrees to defend, at its expense, any third party action or suit brought against the Customer alleging that the Platform, when used as permitted under this Agreement and each respective Order or Partner Order (as the case may be), infringes intellectual property rights of a third party (“IP Infringement Claim”); and Wiz will pay any damages awarded in a final judgment against the Customer that are attributable to any such claim, or that are otherwise agreed in a settlement with the prior written consent of Wiz, provided that (i) the Customer promptly notifies Wiz in writing of such claim; (ii) the Customer grants Wiz the sole authority to handle the defense or settlement of any such claim and provides Wiz with all reasonable information and assistance, at Wiz’s expense; and (iii) the Customer refrains from admitting any liability or otherwise compromising the defense in whole or in part, without the express prior written consent of Wiz. Wiz will not enter into any settlement that imposes any legal liability or financial obligation on Customer without Customer’s prior written consent.
- Term. This Agreement shall enter into force and effect on the Effective Date and, unless earlier terminated in accordance with Section 17, shall remain in full force and effect until all Orders expire or are terminated (the “Term”).
- Termination. Either Party may terminate an Order and/or this Agreement for cause with immediate effect if (a) the other Party breaches any material term or condition of an Order and/or this Agreement, and (b) such breach remains uncured thirty (30) days after the breaching Party receives written notice thereof. Upon termination or expiration of this Agreement and/or an Order: (i) all rights granted to Customer in the Platform shall expire, and Customer shall discontinue any further use and access thereof including, to the extent applicable, by deinstalling any Wiz provided software; (ii) Customer shall immediately delete and dispose of all copies of the Documentation in Customer’s or any of its representatives’ possession or control; and (iii) Wiz may retain Customer Data in accordance with its customer data retention policy without affecting any of Wiz’s rights to the Account Data or Anonymized Data. Section 5 (Prohibited Uses), Section 6 (Customer Data), Section 7 (Evaluations), Section 8 (Wiz Preview Features), Section 9 (Customer Integrations), Section 11 (Intellectual Property), Section 12 (Confidentiality), Section 13 (Limited Warranties), Section 14 (Limitation of Liability), Section 17 (Termination), Section 20 (Contracting) and Section 21(Miscellaneous) shall survive termination or expiration of this Agreement for any reason. Customer shall be responsible for downloading its Customer Data prior to termination of this Agreement. Each Partner Order Form may be terminated in accordance with any termination rights specified therein.
- Customer Reference. Unless stated otherwise in an Order or Customer emails Wiz at advocates@wiz.io confirming otherwise, Customer hereby grants Wiz a revocable right and license to use: (a) Customer’s name to identify Customer as a customer of Wiz on Wiz’s websites, presentations, marketing materials or otherwise (collectively, “Marketing Materials”); and/or (b) Customer’s logo to identify Customer as customer of Wiz, in Wiz’s Marketing Materials. Without derogating from the foregoing, unless Customer confirms otherwise via email as set out in the previous sentence, following the deployment of the Services, Customer hereby agrees to participate in a case study about Wiz and its Services which may be published by Wiz in its Marketing Materials.
- Export Compliance. The Services may be subject to export laws and regulations of the United States and other jurisdictions. Wiz and Customer each represents that it is not on any U.S. government denied-party list. Customer will not permit any Permitted User to access or use any Service in a U.S. embargoed country or region (currently the Crimea, Luhansk or Donetsk regions, Cuba, Iran, North Korea, Sudan or Syria) or as may be updated from time to time, or in violation of any U.S. export law or regulation.
- Contracting entity. For the purposes of this Agreement “Wiz” means Wiz Inc., a company incorporated under the laws of the State of Delaware, having its principal place of business at One Manhattan West, 57th Floor, New York, NY 10001 or its Affiliates, as applicable. For clarity, unless a Direct Order specifies otherwise, the Wiz entity contracting with Customer hereunder will be (i) Wiz, Inc., if Customer is located outside of the UK or Europe or is purchasing via a cloud service provider marketplace; or (ii) Wiz Cloud Limited, a private limited company under the laws of England and Wales, if Customer is located in the UK or Europe and not purchasing via a cloud service provider.
- Miscellaneous. This Agreement, including any Order(s) and any exhibits attached or referred hereto, represents the complete agreement concerning the subject matter hereof and may be amended only by a written agreement executed by both Parties. The failure of either Party to enforce any rights granted hereunder or to take action against the other Party in the event of any breach hereunder shall not be deemed a waiver by that Party as to subsequent enforcement of rights or subsequent actions in the event of future breaches. If any provision of this Agreement is held to be unenforceable, such provision shall be reformed only to the extent necessary to make it enforceable. This Agreement represents the entire agreement of the Parties with respect to the subject matter hereof, and supersedes and replaces all prior and contemporaneous oral or written understandings, agreements and statements by the Parties with respect to such subject matter, including prior non-disclosure agreements or evaluation agreements. Without limiting the generality of the foregoing, this Agreement supersedes any terms or conditions (whether printed, hyperlinked, or otherwise) in any Customer's purchase order or other standardized business forms, which purport to supersede, modify or supplement this Agreement. Neither Party may assign its rights or obligations under this Agreement without the prior written consent of the other Party, which consent may not be unreasonably withheld or delayed. Notwithstanding the foregoing, this Agreement may be assigned by either Party to its Affiliate or in connection with a merger, consolidation, sale of all of the equity interests of the Party, or a sale of all or substantially all of the assets of the Party to which this Agreement relates. Subject to the foregoing, this Agreement will be binding on the parties and their permitted successors and assigns. This Agreement shall be governed by and construed under the laws of the state of New York, without reference to principles and laws relating to the conflict of laws. The competent courts of New York City, New York shall have the exclusive jurisdiction with respect to any dispute and action arising under or in relation to this Agreement. This Agreement does not, and shall not be construed to create any relationship, partnership, joint venture, employer-employee, agency, or franchisor-franchisee relationship between the Parties. Neither Party will be liable for any delay or failure to perform its obligations hereunder resulting from circumstances or causes beyond its reasonable control including, but not limited to on account of strikes, shortages, riots, insurrection, fires, flood, storms, explosions, acts of God, war, government or quasi-governmental authorities actions, acts of terrorism, earthquakes, or power outages. From time to time, Wiz may modify this Agreement. Unless otherwise specified by Wiz, changes become effective for Customer upon renewal of the then-current Subscription Term or upon the effective date of a new Order after the updated version of this Agreement goes into effect. Wiz will use reasonable efforts to notify Customer of the changes through communications via Customer’s Account, email or other means. Customer may be required to click to accept or otherwise agree to the modified Agreement before renewing a Subscription Term or upon the effective date of a new Order, and in any event continued use of any Wiz Services after the updated version of this Agreement goes into effect will constitute Customer’s acceptance of such updated version.
Data Processing Agreement
Effective September 19, 2023
DownloadTable of Contents
DATA PROCESSING AGREEMENT
This Data Processing Agreement (“DPA”) forms part of the Wiz Master Subscription Agreement or other agreement for Wiz services entered into between the Parties (the “Agreement”) between the Wiz entity that has entered into the Agreement (“Wiz”, “Us”, “We”, “Our”) and Customer (collectively, “You”, “Your”, or “Customer”) pursuant to the Agreement. Both parties shall be referred to as the “Parties” and each, a “Party”. This DPA forms a binding legal agreement to reflect the Parties’ agreement with regard to the Processing of Personal Data (as such terms are defined below).
WHEREAS, Wiz shall provide the services set forth in the Agreement (collectively, the “Services”) to Customer, as described in the Agreement; and
WHEREAS, the Parties wish to set forth the arrangements concerning the Processing of Personal Data within the context of the Services and agree to comply with the following provisions with respect to any Personal Data, each acting reasonably and in good faith.
NOW THEREFORE, in consideration of the mutual promises set forth herein and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged by the Parties, the Parties, intending to be legally bound, agree as follows:
1. INTERPRETATION AND DEFINITIONS
1.1 The headings contained in this DPA are for convenience only and shall not be interpreted to limit or otherwise affect the provisions of this DPA. References to clauses or sections are references to the clauses or sections of this DPA unless otherwise stated. Words used in the singular include the plural and vice versa, as the context may require. Capitalized terms not defined herein shall have the meanings assigned to such terms in the Agreement.
1.2 Definitions:
2. CUSTOMER’S PROCESSING OF PERSONAL DATA. Customer shall, in its use of the Services, Process Customer Personal Data in accordance with the requirements of Data Protection Laws and comply at all times with the obligations applicable to Controllers or Businesses, as applicable. For the avoidance of doubt, Customer’s instructions for the Processing of Customer Personal Data shall comply with Data Protection Laws. Customer shall have sole responsibility for the means by which Customer acquired Customer Personal Data. Without limitation, Customer shall comply with any and all transparency-related obligations (including, without limitation, displaying any and all relevant and required privacy notices or policies) and shall have any and all required legal basis in order to collect, Process and transfer to Wiz the Customer Personal Data and to authorize the Processing by Wiz of the Customer Personal Data which is authorized in this DPA.
3. WIZ’S PROCESSING OF PERSONAL DATA
3.1 Application. As used in clauses 3 – 9 herein, Customer Personal Data refers to Customer Personal Data that is subject to Data Protection Laws.
3.2 Roles of the Parties. The Parties acknowledge and agree that with regard to the Processing of Customer Personal Data, (i) Customer is the Controller or Business, (ii) Wiz is the Processor or Service Provider, and (iii) Wiz or its Affiliates may engage Sub-Processors pursuant to the requirements set forth in Clause 6 below.
3.3 Wiz and its Affiliates (as applicable) shall Process Customer Personal Data only in accordance with Customer’s documented instructions, which are set out in this DPA, the Agreement, as necessary for the performance of the Services and for the performance of the Agreement and this DPA, unless required to otherwise by any applicable law, court of competent jurisdiction or other Supervisory Authority to which Wiz and its Affiliates are subject, in which case, Wiz shall inform Customer of the legal requirement before processing, unless that law prohibits such information. Customer agrees that the Agreement is its complete and final instructions to Wiz in relation to the Processing of Personal Data. Processing any Personal Data outside the scope of the Agreement will require prior written agreement between Wiz and Customer by way of an amendment to the Agreement, and may include any additional fees that may be payable by Customer to Wiz for carrying out such instructions. The duration of the Processing, the nature and purposes of the Processing, as well as the types of Customer Personal Data Processed and categories of Data Subjects under this DPA are further specified in Schedule 1 to this DPA.
3.4 To the extent that Wiz or its Affiliates cannot comply with an instruction from Customer and/or its authorized users relating to Processing of Customer Personal Data or where Wiz considers such instruction to be unlawful, Wiz (i) shall inform Customer, providing relevant details of the problem; (ii) may, without any kind of liability towards Customer, temporarily cease all Processing of the affected Customer Personal Data (other than securely storing those data); and (iii) if the Parties do not agree on a resolution to the issue in question and the costs thereof, each Party may, as its sole remedy, terminate the Agreement and this DPA with respect to the affected Processing, and Customer shall pay to Wiz all the amounts owed to Wiz or due before the date of termination.
4. RIGHTS OF DATA SUBJECTS. If Wiz receives a request from a Data Subject to exercise its rights under Data Protection Laws (“Data Subject Request”), Wiz shall, to the extent legally permitted, promptly notify and forward such Data Subject Request to Customer. Taking into account the nature of the Processing, Wiz shall use commercially reasonable efforts to assist Customer by appropriate technical and organizational measures, insofar as this is possible, for the fulfilment of Customer’s obligation to respond to a Data Subject Request under Data Protection Laws.
5. WIZ PERSONNEL
5.1 Confidentiality. Wiz shall grant access to the Customer Personal Data to persons under its authority (including, without limitation, its personnel) only on a need-to-know basis and ensure that such persons engaged in the Processing of Customer Personal Data have committed themselves to confidentiality.
6. AUTHORIZATION REGARDING SUB-PROCESSORS
6.1 Customer hereby grants general written authorization to Wiz to appoint Sub-Processors to perform specific Processing activities on Customer Personal Data on its behalf. Wiz’s current list of Sub-Processors is included at https://www.wiz.io/sub-processor-list (“Sub-Processor List”) and is hereby approved by Customer.
6.2. Objection Right for Sub-Processors. Wiz offers a mechanism for Customers to subscribe to notifications of changes to Wiz’s Sub-Processor List via https://www.wiz.io/legal/sub-processor-list. If Customer subscribes to receive such updates, Wiz shall provide notification of any intended changes concerning the addition or replacement of other Sub-Processor(s) to the email address which has subscribed thereby giving Customer the opportunity to object. Customer may reasonably object to Wiz’s use of a Sub-Processor for reasons related to the Data Protection Laws by notifying Wiz in writing within ten (10) days after receipt of Wiz’s notice including the reasons for objecting to Wiz’s use of such Sub-Processor. Failure to object to such Sub-Processor in writing within ten (10) days following Wiz’s notice shall be deemed as acceptance of the Sub-Processor. In the event Customer reasonably objects to a Sub-Processor, Wiz will use reasonable efforts to make available to Customer a change in the Services to avoid Processing of Customer Personal Data by the objected-to Sub-Processor without unreasonably burdening Customer. If Wiz is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, Customer may, as a sole remedy, terminate the Agreement and this DPA by providing written notice to Wiz provided that all amounts due under the Agreement before the termination date shall be duly paid to Wiz. Until a decision is made regarding the Sub-Processor, Wiz may temporarily suspend the Processing of the affected Customer Personal Data.
6.3. Where Wiz engages a Sub-Processor, we shall do so by way of a written contract which imposes on the Sub-Processor substantially the same data protection obligations as in this DPA.
7. SECURITY
7.1 Controls for the Protection of Customer Personal Data. Taking into account the state of the art, Wiz shall maintain industry-standard technical and organizational measures, including as required pursuant to Article 32 of the GDPR and other applicable Data Protection Laws, for protection of the security (including protection against unauthorized or unlawful Processing and against accidental or unlawful destruction, loss or alteration or damage, unauthorized disclosure of, or access to, Customer Personal Data), confidentiality and integrity of Customer Personal Data, as set forth in the Security Documentation. Upon Customer’s request, Wiz will use commercially reasonable efforts to assist Customer, in ensuring compliance with the obligations pursuant to Articles 32 to 36 of the GDPR and other applicable Data Protection Laws taking into account the nature of the processing, the state of the art, the costs of implementation, the scope, the context, the purposes of the Processing and the information available to Wiz.
7.2 Third-Party Certifications and Audits. Upon Customer’s written request at reasonable intervals, and subject to the confidentiality obligations set forth in the Agreement, Wiz shall make available to Customer (or Customer’s independent, third-party auditor that is not reasonably objected to by Wiz and bound by confidentiality obligations) a copy of Wiz’s then most recent third-party audits or certifications, as applicable (provided, however, that any such documentation shall be Wiz’s confidential information and shall only be used by Customer to assess compliance with this DPA, and shall not be used for any other purpose or disclosed to any third party without Wiz’s prior written approval and, upon Wiz’s request, Customer shall return all such documentation in Customer’s possession or control). Only as required by applicable Data Protection Laws and at Customer’s cost and expense, not more than once per year, Wiz shall allow for and contribute to audits, including remote inspections, conducted by Customer (or Customer’s independent, third-party auditor that is not reasonably objected to by Wiz and that is bound by confidentiality obligations) provided that the parties shall agree on the scope, methodology, timing and conditions of such audits and inspections in advance. Notwithstanding anything to the contrary, such audits and/or inspections shall not contain any information, including without limitation, Personal Data that belongs to Wiz’s other customers.
8. TRANSFERS OF DATA
8.1 Transfers to countries that offer adequate level of data protection. Personal Data may be transferred from the Extended EEA Countries to countries or frameworks that offer adequate level of data protection under or pursuant to the adequacy decisions published by the relevant data protection authorities of the Extended EEA Countries (“Adequacy Decisions”), without any further safeguard being necessary.
8.2 Transfers to other countries. If, and to the extent, the Processing of Customer Personal Data which is subject to Data Protection Laws of the EEA Extended Countries includes transfers by Customer from the Extended EEA Countries to Wiz in countries outside the Extended EEA Countries which have not been subject to an Adequacy Decision (“Third Countries”), the Parties agree that such transfers shall be undertaken on the basis of the Standard Contractual Clauses, which will be deemed to have been signed by each Party on the Effective Date of this Agreement, are incorporated herein by reference and construed in accordance with Schedule 2 below, unless another mechanism provided for in the Data Protection Laws of the applicable Extended EEA Country applies.
8.3 In the event Customer enables Third Party Integrations (as defined in the Agreement) which involve transfers of Customer Personal Data between Wiz and the Third Party Integration provider, Customer acknowledges and agrees that (a) such Third Party Integration providers are not Sub-Processors of Wiz; (b) such transfers are conducted at Customer’s instruction in accordance with an agreement between the Customer and such Third Party Integration provider (which Wiz is not a party to); and (c) Customer shall be solely responsible for such transfers and their compliance with Data Protection Laws, including without limitation, executing Standard Contractual Clauses with such Third Party Integration providers as required.
9. US PRIVACY LAWS
9.1 In performing its obligations under the Agreement and this DPA, Wiz will not: (1) “sell” or “share” for purposes of “cross-context behavioral advertising” or “targeted advertising” (as defined by applicable US Privacy Laws) any Customer Personal Data; (2) retain, use, or disclose Customer Personal Data outside of the direct business relationship between Wiz and Customer; or (3) attempt to re-identify any pseudonymized, anonymized, aggregate, or de-identified Customer Personal Data.
9.2 Wiz will (1) comply with any applicable restrictions under applicable US Privacy Laws on combining Customer Personal Data with Personal Data that Wiz receives from, or on behalf of, another person or persons; and (2) promptly notify Customer if Wiz determines that it (i) can no longer meet its obligations under this DPA or applicable US Privacy Laws; or (ii) in Wiz’s opinion, an instruction from Customer infringes applicable US Privacy Laws.
9.3 Wiz certifies that it understands its obligations in this Clause 9.
9.4 The Parties agree that Schedule 1 hereto shall satisfy any requirement under applicable U.S. Privacy Law to provide details regarding the nature of the Processing activities related to Customer Personal Data.
10. PERSONAL DATA INCIDENT MANAGEMENT AND NOTIFICATION. To the extent required under applicable Data Protection Laws, Wiz shall notify Customer without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Personal Data (a “Personal Data Incident”). Wiz shall make reasonable efforts to identify the cause of such Personal Data Incident and take those steps as Wiz deems necessary, possible and reasonable in order to remediate the cause of such a Personal Data Incident. Customer (or its customers), as the Controller or Business, will be the party responsible for notifying supervisory authorities and/or concerned Data Subjects (where required by Data Protection Laws).
11. RETURN AND DELETION OF PERSONAL DATA. Subject to the Agreement, upon termination or expiry of the Services, Wiz shall, make available for return the Customer Personal Data via the Services and delete such Customer Personal Data in accordance with Wiz’s customer data retention & deletion policy unless applicable law requires storage of the Customer Personal Data. In any event, Customer agrees that Wiz may retain Customer Personal Data in accordance with its standard backup policy, for evidence purposes and/or for the establishment, exercise or defence of legal claims and/or to comply with applicable laws and regulations. Notwithstanding anything to the contrary, Customer hereby agrees and understands that, to the extent Wiz performs cloud scanning on behalf of Customer, if and when Customer wants to delete specific Customer Personal Data, Customer may delete such Customer Personal Data from its own databases, and it will automatically be erased from Wiz’s databases within a reasonable market standard timeframe. If Customer requests return of the Customer Personal Data, it shall be returned in an industry standard format generally available for Wiz’s Customers.
12. TERMINATION. This DPA shall automatically terminate upon the termination or expiration of the Agreement under which the Services are provided, provided that, to the extent Wiz retains any Customer Personal Data following termination or expiration of the Agreement, this DPA shall survive for such period that Wiz retains Customer Personal Data. Clauses 2, 3.4 and 13 shall survive the termination or expiration of this DPA for any reason. This DPA cannot, in principle, be terminated separately to the Agreement, except where the Processing ends before the termination of the Agreement, in which case, this DPA shall automatically terminate.
13. RELATIONSHIP WITH AGREEMENT. Subject to any provisions in Schedule 2 regarding governing law and choice of forum of the Standard Contractual Clauses, the governing law and choice of forum provision in the Agreement shall apply to this DPA. In the event of any conflict between the provisions of this DPA and the provisions of the Agreement, the provisions of this DPA shall prevail over the conflicting provisions of the Agreement. For the avoidance of doubt each Party’s and its Affiliates’ liability, taken together in the aggregate, arising out of or relating to this DPA, the Standard Contractual Clauses, Data Protection Laws and any other data protection agreements in connection with the Agreement (if any), shall be subject to any aggregate limitations on liability set out in the Agreement. NOTWITHSTANDING THE FOREGOING, IF CUSTOMER IS USING THE SERVICES FOR A FREE TRIAL, WIZ’S MAXIMUM AGGREGATE LIABILITY TO CUSTOMER UNDER OR RELATED TO THIS DPA SHALL BE CAPPED AT ONE THOUSAND DOLLARS US ($1,000 US).
14. MISCELLANEOUS. Any Wiz obligation hereunder may be performed (in whole or in part), and any Wiz right (including invoice and payment rights) or remedy may be exercised (in whole or in part), by an Affiliate of Wiz. This DPA may be amended by Wiz from time to time in its sole discretion, with such updated version posted to Wiz’s website, provided, however, that no such update shall materially diminish the privacy or security of Customer Personal Data.
List of Schedules
SCHEDULE 1 – DETAILS OF THE PROCESSING
SCHEDULE 2 – STANDARD CONTRACTUAL CLAUSE
SCHEDULE 1
DETAILS OF THE PROCESSING
Subject matter.
Wiz will Process Customer Personal Data as necessary to perform the Services pursuant to the Agreement, as further instructed by Customer in its use of the Services.
Nature and Purpose of Processing.
1. Performing the Agreement, this DPA and/or other contracts executed by the Parties, including, providing the Service(s) and support and technical maintenance to Customer.
2. To comply with documented reasonable instructions provided by Customer where such instructions are consistent with the terms of the Agreement.
3. Resolving disputes, enforcing the Agreement, this DPA and/or defending Wiz’s rights.
4. Complying with applicable laws and regulations, including for cooperating with local and foreign tax authorities, preventing fraud, money laundering and terrorist financing.
Duration of Processing.
Subject to any section of the DPA and/or the Agreement dealing with the duration of the Processing and the consequences of the expiration or termination thereof, Wiz will Process Customer Personal Data for the duration of the Agreement, unless otherwise agreed upon in writing.
Types of Customer Personal Data.
Customer determines the categories of any Customer Personal Data that is made accessible to Wiz, which may include, without limitation, Customer Personal Data relating to the following categories:
- If Customer uses Wiz for scanning, Personal Data might be temporarily processed by Wiz during the scanning. The type of the Personal Data depends on Customer environment and which sources Customer connects.
- Wiz only stores metadata such as CVEs, misconfigurations, list of installed packages, cloud events, local cloud user accounts, cloud object identifiers and (depending on the features used by Customer) logs and file paths. Such metadata does not generally contain Personal Data, however, depending on the Customer’s environment and naming conventions and the features used by Customer, some limited Personal Data may be included. For example, cloud user account names, logs and artifacts could include an individual’s name, logs could contain names, associated email address and IP address and (if specific Wiz features are enabled) pseudonymized samples of findings to enable Customer to locate, verify and remediate the finding(s).
Customer acknowledges that Wiz does not control which Customer Personal Data Customer shares with it in the context of the Services.
Categories of Data Subjects.
As part of providing the Services, Wiz may process Customer Personal Data related to Customer’s customers or users, leads, employees and service providers, the extent of which is solely determined by Customer.
SCHEDULE 2
STANDARD CONTRACTUAL CLAUSES
1. Incorporation and interpretation of the Standard Contractual Clauses
1.1 In relation to transfers by Customer of Customer Personal Data which are subject to Data Protection Laws of the EEA Extended Countries to Wiz in Third Countries, the parties agree that Module Two (Transfer controller to processor) or Module 3 (Transfer processor to processor) of the Standard Contractual Clauses shall apply, as applicable.
1.2 The Parties acknowledge that the information required to be provided in the Standard Contractual Clauses, including the appendices, is set out in Appendix 1 below.
1.3 If there is a conflict between the provisions of this Agreement and the Standard Contractual Clauses, the Standard Contractual Clauses will prevail, provided that, except to the extent prohibited by applicable law, the Standard Contractual Clauses shall be interpreted in accordance with and subject to this DPA and the Agreement, including without limitation, the provisions on limitation of liability, instructions, storage, erasure and return of Personal Data, audits and engagement of Sub-Processors.
1.4 If any provision or part-provision of this DPA or the Agreement causes the Standard Contractual Clauses to become an invalid export mechanism in the relevant Extended EEA Country, it shall be deemed deleted but that shall not affect the validity and enforceability of the rest of this Agreement and the parties shall negotiate in good faith to agree a replacement provision that, to the greatest extent possible, achieves the intended commercial result of the original provision.
1.5 Where requested by Wiz, Customer shall provide reasonable assistance to Wiz and be responsible for issuing such communications to Data Subjects and/or the Controller (to the extent Module Three applies) as are required in order for Wiz to comply with its obligations under the Standard Contractual Clauses.
1.6 For the purpose of Section III, Clause 14 of the Standard Contractual Clauses, the parties acknowledge and agree that, as between the parties, the Customer (acting as data exporter) is responsible for: (i) assessing the laws of the country to which it transfers Personal Data; and (ii) determining whether or not the transfer meets the requirements of Section III, Clause 14(a) of the Standard Contractual Clauses. Where Wiz (as data importer) provides information to the Customer (acting as data exporter) for assisting the Customer in its assessment, such information is provided on an “as is” basis for informational purposes only. Without prejudice to Section III, Clause 14(c) of the Standard Contractual Clauses, Wiz (as data importer) shall not be liable for any losses suffered by the Customer in connection with its assessment.
1.7 Notwithstanding anything to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is the UK, template Addendum B.1.0 issued by the UK ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section 18 of those Mandatory Clauses, (the “UK Approved Addendum”) shall amend the Standard Contractual Clauses in respect of such transfers and Part 1 of the UK Approved Addendum shall be populated as set out below:
Table 1. The “start date” will be the date this DPA enters into force. The “Parties” are Customer as exporter Wiz as importer.
Table 2. The “Addendum EU SCCs” are the modules and clauses of the Standard Contractual Clauses selected in relation to a particular transfer in accordance with paragraphs 1.1 and 1.2 of this Schedule.
Table 3. The “Appendix Information” is as set out in Appendix 1 to this Schedule.
Table 4. Neither party may end the UK Approved Addendum in accordance with its Section 19.
1.8 Except where paragraph 1.9 above applies, but notwithstanding anything else to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is not a Member State of the European Union, references in the Standard Contractual Clauses to:
(a)“Member States of the European Union” shall refer to the applicable Extended EEA Country in which the data exporter is established or from where the transferred Personal Data originated (as applicable);
(b)“the GDPR” shall refer to the Data Protection Laws of the Extended EEA Country in which the data exporter is established or from where the Personal Data originated; and
(c)“supervisory authority” shall refer to the data protection authority in the Extended EEA Country as determined in Annex I(C) below.
Appendix 1 – Completion of the Standard Contractual Clauses
ANNEX I
A. LIST OF THE PARTIES | |
Data Exporter: | Name and address: Customer, as set out in the Agreement Contact details: As set out in the Agreement Activities relevant to the data transferred under these Clauses: Receipt of Wiz Services, as set out in the Agreement and this DPA |
Data Importer: | Name and address: Wiz, as set out in the Agreement Contact details: Privacy Officer, privacy@wiz.io Activities relevant to the data transferred under these Clauses: Provision of Wiz Services, as set out in the Agreement and this DPA |
B. DETAILS OF PROCESSING/TRANSFER | |
CATEGORIES OF DATA SUBJECTS | As described in Schedule 1 |
CATEGORIES OF PERSONAL DATA | As described in Schedule 1 |
SPECIAL CATEGORIES OF DATA (IF APPLICABLE) | Wiz does not control which Personal Data Customer shares with it in the context of the Services |
FREQUENCY OF THE TRANSFER | As regular as is required to provide the Services |
NATURE AND PURPOSE OF THE PROCESSING | As described in Schedule 1 |
RETENTION | As described in Schedule 1 |
TRANSFER TO (SUB)PROCESSORS | As set out in Wiz’s Sub-Processor List |
C. COMPETENT SUPERVISORY AUTHORITY | |
The competent supervisory authority shall be determined in accordance with Clause 13 of the Standard Contractual Clauses. Where an EU Representative has not been appointed by data exporter, the competent supervisory authority shall be the supervisory authority of the Netherlands. | |
D. GOVERNING LAW AND CHOICE OF FORUM | |
GOVERNING LAW | For the purposes of Clause 17 of the Standard Contractual Clauses the Parties select OPTION 1: the law of the Netherlands. a |
CHOICE OF FORUM | For the purposes of Clause 18 of the SCCs: the Parties select the courts of the Netherlands. |
E. OTHER | |
Where the Standard Contractual Clauses identify optional provisions (or provisions with multiple options) the following will apply: For Clause 7 (Docking Clause), the optional provision will apply. For Clause 9(a), option 2 (General Written Authorisation) will apply and the time period for prior notice of Sub-Processor changes shall be as set out in this DPA. For Clause 11(a) (Redress) – the optional provision will not apply. |
ANNEX II – WIZ SECURITY MEASURES
The technical and organizational measures including technical and organizational measures to support the security of Personal Data incorporated into Annex II of the Standard Contractual Clauses shall be the technical and organizational security measures as described in Wiz’s Security Documentation.
In addition, Wiz agrees to the following compensating safeguards to protect such data to an equivalent level as required under the Data Protection Laws of the Extended EEA Countries to the extent required under the Standard Contractual Clauses:
- Wiz and Customer shall encrypt all transfers of the Customer Personal Data between them, and Wiz shall encrypt any onward transfers it makes of such Customer Personal Data.
- Wiz will use reasonably available legal mechanisms to challenge any demands for Customer Personal Data access through national security process it receives as well as any non-disclosure provisions attached thereto.
- Wiz will promptly notify Customer of any government demands for Customer Personal Data, unless prohibited under applicable law. To the extent Wiz is prohibited by law from providing such notification, Wiz shall: (i) review each request on a case-by-case basis; (ii) use reasonable efforts to request that the confidentiality requirement be waived to enable Wiz to notify the Customer and/or the appropriate Supervisory Authority competent for the Customer; and (iii) maintain evidence of any such attempt to have a confidentiality requirement waived.
- Wiz will promptly notify Customer if Wiz can no longer comply with the applicable clauses in this Section. Wiz shall not be required to provide Customer with specific information about why it can no longer comply, if providing such information is prohibited by applicable law. Such notice shall entitle Customer to terminate the Agreement (or, at Customer’s option, affected statements of work, order forms, and like documents thereunder) and receive a prompt pro-rata refund of any prepaid amounts thereunder.
Effective September 11, 2023 to September 19, 2023
DownloadTable of Contents
DATA PROCESSING AGREEMENT
This Data Processing Agreement (“DPA”) forms part of the Wiz Master Subscription Agreement or other agreement for Wiz services entered into between the Parties (the “Agreement”) between the Wiz entity that has entered into the Agreement (“Wiz”, “Us”, “We”, “Our”) and Customer (collectively, “You”, “Your”, or “Customer”) pursuant to the Agreement. Both parties shall be referred to as the “Parties” and each, a “Party”. This DPA forms a binding legal agreement to reflect the Parties’ agreement with regard to the Processing of Personal Data (as such terms are defined below).
WHEREAS, Wiz shall provide the services set forth in the Agreement (collectively, the “Services”) to Customer, as described in the Agreement; and
WHEREAS, the Parties wish to set forth the arrangements concerning the Processing of Personal Data within the context of the Services and agree to comply with the following provisions with respect to any Personal Data, each acting reasonably and in good faith.
NOW THEREFORE, in consideration of the mutual promises set forth herein and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged by the Parties, the Parties, intending to be legally bound, agree as follows:
1. INTERPRETATION AND DEFINITIONS
1.1 The headings contained in this DPA are for convenience only and shall not be interpreted to limit or otherwise affect the provisions of this DPA. References to clauses or sections are references to the clauses or sections of this DPA unless otherwise stated. Words used in the singular include the plural and vice versa, as the context may require. Capitalized terms not defined herein shall have the meanings assigned to such terms in the Agreement.
1.2 Definitions:
2. CUSTOMER’S PROCESSING OF PERSONAL DATA. Customer shall, in its use of the Services, Process Customer Personal Data in accordance with the requirements of Data Protection Laws and comply at all times with the obligations applicable to Controllers or Businesses, as applicable. For the avoidance of doubt, Customer’s instructions for the Processing of Customer Personal Data shall comply with Data Protection Laws. Customer shall have sole responsibility for the means by which Customer acquired Customer Personal Data. Without limitation, Customer shall comply with any and all transparency-related obligations (including, without limitation, displaying any and all relevant and required privacy notices or policies) and shall have any and all required legal basis in order to collect, Process and transfer to Wiz the Customer Personal Data and to authorize the Processing by Wiz of the Customer Personal Data which is authorized in this DPA.
3. WIZ’S PROCESSING OF PERSONAL DATA
3.1 Application. As used in clauses 3 – 9 herein, Customer Personal Data refers to Customer Personal Data that is subject to Data Protection Laws.
3.2 Roles of the Parties. The Parties acknowledge and agree that with regard to the Processing of Customer Personal Data, (i) Customer is the Controller or Business, (ii) Wiz is the Processor or Service Provider, and (iii) Wiz or its Affiliates may engage Sub-Processors pursuant to the requirements set forth in Clause 6 below.
3.3 Wiz and its Affiliates (as applicable) shall Process Customer Personal Data only in accordance with Customer’s documented instructions, which are set out in this DPA, the Agreement, as necessary for the performance of the Services and for the performance of the Agreement and this DPA, unless required to otherwise by any applicable law, court of competent jurisdiction or other Supervisory Authority to which Wiz and its Affiliates are subject, in which case, Wiz shall inform Customer of the legal requirement before processing, unless that law prohibits such information. Customer agrees that the Agreement is its complete and final instructions to Company in relation to the Processing of Personal Data. Processing any Personal Data outside the scope of the Agreement will require prior written agreement between Wiz and Customer by way of an amendment to the Agreement, and may include any additional fees that may be payable by Customer to Wiz for carrying out such instructions. The duration of the Processing, the nature and purposes of the Processing, as well as the types of Customer Personal Data Processed and categories of Data Subjects under this DPA are further specified in Schedule 1 to this DPA.
3.4 To the extent that Wiz or its Affiliates cannot comply with an instruction from Customer and/or its authorized users relating to Processing of Customer Personal Data or where Wiz considers such instruction to be unlawful, Wiz (i) shall inform Customer, providing relevant details of the problem; (ii) may, without any kind of liability towards Customer, temporarily cease all Processing of the affected Customer Personal Data (other than securely storing those data); and (iii) if the Parties do not agree on a resolution to the issue in question and the costs thereof, each Party may, as its sole remedy, terminate the Agreement and this DPA with respect to the affected Processing, and Customer shall pay to Wiz all the amounts owed to Wiz or due before the date of termination.
4. RIGHTS OF DATA SUBJECTS. If Wiz receives a request from a Data Subject to exercise its rights under Data Protection Laws (“Data Subject Request”), Wiz shall, to the extent legally permitted, promptly notify and forward such Data Subject Request to Customer. Taking into account the nature of the Processing, Wiz shall use commercially reasonable efforts to assist Customer by appropriate technical and organizational measures, insofar as this is possible, for the fulfilment of Customer’s obligation to respond to a Data Subject Request under Data Protection Laws.
5. WIZ PERSONNEL
5.1 Confidentiality. Wiz shall grant access to the Customer Personal Data to persons under its authority (including, without limitation, its personnel) only on a need-to-know basis and ensure that such persons engaged in the Processing of Customer Personal Data have committed themselves to confidentiality.
6. AUTHORIZATION REGARDING SUB-PROCESSORS
6.1 Customer hereby grants general written authorization to Wiz to appoint Sub-Processors to perform specific Processing activities on Customer Personal Data on its behalf. Wiz’s current list of Sub-Processors is included at https://www.wiz.io/sub-processor-list (“Sub-Processor List”) and is hereby approved by Customer.
6.2. Objection Right for Sub-Processors. Wiz offers a mechanism for Customers to subscribe to notifications of changes to Wiz’s Sub-Processor List via https://www.wiz.io/legal/sub-processor-list. If Customer subscribes to receive such updates, Wiz shall provide notification of any intended changes concerning the addition or replacement of other Sub-Processor(s) to the email address which has subscribed thereby giving Customer the opportunity to object. Customer may reasonably object to Wiz’s use of a Sub-Processor for reasons related to the Data Protection Laws by notifying Wiz in writing within ten (10) days after receipt of Wiz’s notice including the reasons for objecting to Wiz’s use of such Sub-Processor. Failure to object to such Sub-Processor in writing within ten (10) days following Wiz’s notice shall be deemed as acceptance of the Sub-Processor. In the event Customer reasonably objects to a Sub-Processor, Wiz will use reasonable efforts to make available to Customer a change in the Services to avoid Processing of Customer Personal Data by the objected-to Sub-Processor without unreasonably burdening Customer. If Wiz is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, Customer may, as a sole remedy, terminate the Agreement and this DPA by providing written notice to Wiz provided that all amounts due under the Agreement before the termination date shall be duly paid to Wiz. Until a decision is made regarding the Sub-Processor, Wiz may temporarily suspend the Processing of the affected Customer Personal Data.
6.3. Where Wiz engages a Sub-Processor, we shall do so by way of a written contract which imposes on the Sub-Processor substantially the same data protection obligations as in this DPA.
7. SECURITY
7.1 Controls for the Protection of Customer Personal Data. Taking into account the state of the art, Wiz shall maintain industry-standard technical and organizational measures, including as required pursuant to Article 32 of the GDPR and other applicable Data Protection Laws, for protection of the security (including protection against unauthorized or unlawful Processing and against accidental or unlawful destruction, loss or alteration or damage, unauthorized disclosure of, or access to, Customer Personal Data), confidentiality and integrity of Customer Personal Data, as set forth in the Security Documentation. Upon Customer’s request, Wiz will use commercially reasonable efforts to assist Customer, in ensuring compliance with the obligations pursuant to Articles 32 to 36 of the GDPR and other applicable Data Protection Laws taking into account the nature of the processing, the state of the art, the costs of implementation, the scope, the context, the purposes of the Processing and the information available to Wiz.
7.2 Third-Party Certifications and Audits. Upon Customer’s written request at reasonable intervals, and subject to the confidentiality obligations set forth in the Agreement, Wiz shall make available to Customer (or Customer’s independent, third-party auditor that is not reasonably objected to by Wiz and bound by confidentiality obligations) a copy of Wiz’s then most recent third-party audits or certifications, as applicable (provided, however, that any such documentation shall be Wiz’s confidential information and shall only be used by Customer to assess compliance with this DPA, and shall not be used for any other purpose or disclosed to any third party without Wiz’s prior written approval and, upon Wiz’s request, Customer shall return all such documentation in Customer’s possession or control). Only as required by applicable Data Protection Laws and at Customer’s cost and expense, not more than once per year, Wiz shall allow for and contribute to audits, including remote inspections, conducted by Customer (or Customer’s independent, third-party auditor that is not reasonably objected to by Wiz and that is bound by confidentiality obligations) provided that the parties shall agree on the scope, methodology, timing and conditions of such audits and inspections in advance. Notwithstanding anything to the contrary, such audits and/or inspections shall not contain any information, including without limitation, Personal Data that belongs to Wiz’s other customers.
8. TRANSFERS OF DATA
8.1 Transfers to countries that offer adequate level of data protection. Personal Data may be transferred from the Extended EEA Countries to countries or frameworks that offer adequate level of data protection under or pursuant to the adequacy decisions published by the relevant data protection authorities of the Extended EEA Countries (“Adequacy Decisions”), without any further safeguard being necessary.
8.2 Transfers to other countries. If, and to the extent, the Processing of Customer Personal Data which is subject to Data Protection Laws of the EEA Extended Countries includes transfers by Customer from the Extended EEA Countries to Wiz in countries outside the Extended EEA Countries which have not been subject to an Adequacy Decision (“Third Countries”), the Parties agree that such transfers shall be undertaken on the basis of the Standard Contractual Clauses, which will be deemed to have been signed by each Party on the Effective Date of this Agreement, are incorporated herein by reference and construed in accordance with Schedule 2 below, unless another mechanism provided for in the Data Protection Laws of the applicable Extended EEA Country applies.
8.3 In the event Customer enables Third Party Integrations (as defined in the Agreement) which involve transfers of Customer Personal Data between Wiz and the Third Party Integration provider, Customer acknowledges and agrees that (a) such Third Party Integration providers are not Sub-Processors of Wiz; (b) such transfers are conducted at Customer’s instruction in accordance with an agreement between the Customer and such Third Party Integration provider (which Wiz is not a party to); and (c) Customer shall be solely responsible for such transfers and their compliance with Data Protection Laws, including without limitation, executing Standard Contractual Clauses with such Third Party Integration providers as required.
9. US PRIVACY LAWS
9.1 In performing its obligations under the Agreement and this DPA, Wiz will not: (1) “sell” or “share” for purposes of “cross-context behavioral advertising” or “targeted advertising” (as defined by applicable US Privacy Laws) any Customer Personal Data; (2) retain, use, or disclose Customer Personal Data outside of the direct business relationship between Wiz and Customer; or (3) attempt to re-identify any pseudonymized, anonymized, aggregate, or de-identified Customer Personal Data.
9.2 Wiz will (1) comply with any applicable restrictions under applicable US Privacy Laws on combining Customer Personal Data with Personal Data that Wiz receives from, or on behalf of, another person or persons; and (2) promptly notify Customer if Wiz determines that it (i) can no longer meet its obligations under this DPA or applicable US Privacy Laws; or (ii) in Wiz’s opinion, an instruction from Customer infringes applicable US Privacy Laws.
9.3 Wiz certifies that it understands its obligations in this Clause 9.
9.4 The Parties agree that Schedule 1 hereto shall satisfy any requirement under applicable U.S. Privacy Law to provide details regarding the nature of the Processing activities related to Customer Personal Data.
10. PERSONAL DATA INCIDENT MANAGEMENT AND NOTIFICATION. To the extent required under applicable Data Protection Laws, Wiz shall notify Customer without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Personal Data (a “Personal Data Incident”). Wiz shall make reasonable efforts to identify the cause of such Personal Data Incident and take those steps as Wiz deems necessary, possible and reasonable in order to remediate the cause of such a Personal Data Incident. Customer (or its customers), as the Controller or Business, will be the party responsible for notifying supervisory authorities and/or concerned Data Subjects (where required by Data Protection Laws).
11. RETURN AND DELETION OF PERSONAL DATA. Subject to the Agreement, upon termination or expiry of the Services, Wiz shall, make available for return the Customer Personal Data via the Services and delete such Customer Personal Data in accordance with Wiz’s customer data retention & deletion policy unless applicable law requires storage of the Customer Personal Data. In any event, Customer agrees that Wiz may retain Customer Personal Data in accordance with its standard backup policy, for evidence purposes and/or for the establishment, exercise or defence of legal claims and/or to comply with applicable laws and regulations. Notwithstanding anything to the contrary, Customer hereby agrees and understands that, to the extent Wiz performs cloud scanning on behalf of Customer, if and when Customer wants to delete specific Customer Personal Data, Customer may delete such Customer Personal Data from its own databases, and it will automatically be erased from Wiz’s databases within a reasonable market standard timeframe. If Customer requests return of the Customer Personal Data, it shall be returned in an industry standard format generally available for Wiz’s Customers.
12. TERMINATION. This DPA shall automatically terminate upon the termination or expiration of the Agreement under which the Services are provided, provided that, to the extent Wiz retains any Customer Personal Data following termination or expiration of the Agreement, this DPA shall survive for such period that Wiz retains Customer Personal Data. Clauses 2, 3.4 and 13 shall survive the termination or expiration of this DPA for any reason. This DPA cannot, in principle, be terminated separately to the Agreement, except where the Processing ends before the termination of the Agreement, in which case, this DPA shall automatically terminate.
13. RELATIONSHIP WITH AGREEMENT. Subject to any provisions in Schedule 2 regarding governing law and choice of forum of the Standard Contractual Clauses, the governing law and choice of forum provision in the Agreement shall apply to this DPA. In the event of any conflict between the provisions of this DPA and the provisions of the Agreement, the provisions of this DPA shall prevail over the conflicting provisions of the Agreement. For the avoidance of doubt each Party’s and its Affiliates’ liability, taken together in the aggregate, arising out of or relating to this DPA, the Standard Contractual Clauses, Data Protection Laws and any other data protection agreements in connection with the Agreement (if any), shall be subject to any aggregate limitations on liability set out in the Agreement. NOTWITHSTANDING THE FOREGOING, IF CUSTOMER IS USING THE SERVICES FOR A FREE TRIAL, WIZ’S MAXIMUM AGGREGATE LIABILITY TO CUSTOMER UNDER OR RELATED TO THIS DPA SHALL BE CAPPED AT ONE THOUSAND DOLLARS US ($1,000 US).
14. MISCELLANEOUS. Any Wiz obligation hereunder may be performed (in whole or in part), and any Wiz right (including invoice and payment rights) or remedy may be exercised (in whole or in part), by an Affiliate of Wiz. This DPA may be amended by Wiz from time to time in its sole discretion, with such updated version posted to Wiz’s website, provided, however, that no such update shall materially diminish the privacy or security of Customer Personal Data.
List of Schedules
SCHEDULE 1 – DETAILS OF THE PROCESSING
SCHEDULE 2 – STANDARD CONTRACTUAL CLAUSE
SCHEDULE 1
DETAILS OF THE PROCESSING
Subject matter.
Wiz will Process Customer Personal Data as necessary to perform the Services pursuant to the Agreement, as further instructed by Customer in its use of the Services.
Nature and Purpose of Processing.
1. Performing the Agreement, this DPA and/or other contracts executed by the Parties, including, providing the Service(s) and support and technical maintenance to Customer.
2. To comply with documented reasonable instructions provided by Customer where such instructions are consistent with the terms of the Agreement.
3. Resolving disputes, enforcing the Agreement, this DPA and/or defending Wiz’s rights.
4. Complying with applicable laws and regulations, including for cooperating with local and foreign tax authorities, preventing fraud, money laundering and terrorist financing.
Duration of Processing.
Subject to any section of the DPA and/or the Agreement dealing with the duration of the Processing and the consequences of the expiration or termination thereof, Wiz will Process Customer Personal Data for the duration of the Agreement, unless otherwise agreed upon in writing.
Types of Customer Personal Data.
Customer determines the categories of any Customer Personal Data that is made accessible to Wiz, which may include, without limitation, Customer Personal Data relating to the following categories:
- If Customer uses Wiz for scanning, Personal Data might be temporarily processed by Wiz during the scanning. The type of the Personal Data depends on Customer environment and which sources Customer connects.
- Wiz only stores metadata such as CVEs, misconfigurations, list of installed packages, cloud events, local cloud user accounts, cloud object identifiers and (depending on the features used by Customer) logs and file paths. Such metadata does not generally contain Personal Data, however, depending on the Customer’s environment and naming conventions and the features used by Customer, some limited Personal Data may be included. For example, cloud user account names, logs and artifacts could include an individual’s name, logs could contain names, associated email address and IP address and (if specific Wiz features are enabled) pseudonymized samples of findings to enable Customer to locate, verify and remediate the finding(s).
Customer acknowledges that Wiz does not control which Customer Personal Data Customer shares with it in the context of the Services.
Categories of Data Subjects.
As part of providing the Services, Wiz may process Customer Personal Data related to Customer’s customers or users, leads, employees and service providers, the extent of which is solely determined by Customer.
SCHEDULE 2
STANDARD CONTRACTUAL CLAUSES
1. Incorporation and interpretation of the Standard Contractual Clauses
1.1 In relation to transfers by Customer of Customer Personal Data which are subject to Data Protection Laws of the EEA Extended Countries to Wiz in Third Countries, the parties agree that Module Two (Transfer controller to processor) or Module 3 (Transfer processor to processor) of the Standard Contractual Clauses shall apply, as applicable.
1.2 The Parties acknowledge that the information required to be provided in the Standard Contractual Clauses, including the appendices, is set out in Appendix 1 below.
1.3 If there is a conflict between the provisions of this Agreement and the Standard Contractual Clauses, the Standard Contractual Clauses will prevail, provided that, except to the extent prohibited by applicable law, the Standard Contractual Clauses shall be interpreted in accordance with and subject to this DPA and the Agreement, including without limitation, the provisions on limitation of liability, instructions, storage, erasure and return of Personal Data, audits and engagement of Sub-Processors.
1.4 If any provision or part-provision of this DPA or the Agreement causes the Standard Contractual Clauses to become an invalid export mechanism in the relevant Extended EEA Country, it shall be deemed deleted but that shall not affect the validity and enforceability of the rest of this Agreement and the parties shall negotiate in good faith to agree a replacement provision that, to the greatest extent possible, achieves the intended commercial result of the original provision.
1.5 Where requested by Wiz, Customer shall provide reasonable assistance to Wiz and be responsible for issuing such communications to Data Subjects and/or the Controller (to the extent Module Three applies) as are required in order for Wiz to comply with its obligations under the Standard Contractual Clauses.
1.6 For the purpose of Section III, Clause 14 of the Standard Contractual Clauses, the parties acknowledge and agree that, as between the parties, the Customer (acting as data exporter) is responsible for: (i) assessing the laws of the country to which it transfers Personal Data; and (ii) determining whether or not the transfer meets the requirements of Section III, Clause 14(a) of the Standard Contractual Clauses. Where Wiz (as data importer) provides information to the Customer (acting as data exporter) for assisting the Customer in its assessment, such information is provided on an “as is” basis for informational purposes only. Without prejudice to Section III, Clause 14(c) of the Standard Contractual Clauses, Wiz (as data importer) shall not be liable for any losses suffered by the Customer in connection with its assessment.
1.7 Notwithstanding anything to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is the UK, template Addendum B.1.0 issued by the UK ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section 18 of those Mandatory Clauses, (the “UK Approved Addendum”) shall amend the Standard Contractual Clauses in respect of such transfers and Part 1 of the UK Approved Addendum shall be populated as set out below:
Table 1. The “start date” will be the date this DPA enters into force. The “Parties” are Customer as exporter Wiz as importer.
Table 2. The “Addendum EU SCCs” are the modules and clauses of the Standard Contractual Clauses selected in relation to a particular transfer in accordance with paragraphs 1.1 and 1.2 of this Schedule.
Table 3. The “Appendix Information” is as set out in Appendix 1 to this Schedule.
Table 4. Neither party may end the UK Approved Addendum in accordance with its Section 19.
1.8 Except where paragraph 1.9 above applies, but notwithstanding anything else to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is not a Member State of the European Union, references in the Standard Contractual Clauses to:
(a)“Member States of the European Union” shall refer to the applicable Extended EEA Country in which the data exporter is established or from where the transferred Personal Data originated (as applicable);
(b)“the GDPR” shall refer to the Data Protection Laws of the Extended EEA Country in which the data exporter is established or from where the Personal Data originated; and
(c)“supervisory authority” shall refer to the data protection authority in the Extended EEA Country as determined in Annex I(C) below.
Appendix 1 – Completion of the Standard Contractual Clauses
ANNEX I
A. LIST OF THE PARTIES | |
Data Exporter: | Name and address: Customer, as set out in the Agreement Contact details: As set out in the Agreement Activities relevant to the data transferred under these Clauses: Receipt of Wiz Services, as set out in the Agreement and this DPA |
Data Importer: | Name and address: Wiz, as set out in the Agreement Contact details: Privacy Officer, privacy@wiz.io Activities relevant to the data transferred under these Clauses: Provision of Wiz Services, as set out in the Agreement and this DPA |
B. DETAILS OF PROCESSING/TRANSFER | |
CATEGORIES OF DATA SUBJECTS | As described in Schedule 1 |
CATEGORIES OF PERSONAL DATA | As described in Schedule 1 |
SPECIAL CATEGORIES OF DATA (IF APPLICABLE) | Wiz does not control which Personal Data Customer shares with it in the context of the Services |
FREQUENCY OF THE TRANSFER | As regular as is required to provide the Services |
NATURE AND PURPOSE OF THE PROCESSING | As described in Schedule 1 |
RETENTION | As described in Schedule 1 |
TRANSFER TO (SUB)PROCESSORS | As set out in Wiz’s Sub-Processor List |
C. COMPETENT SUPERVISORY AUTHORITY | |
The competent supervisory authority shall be determined in accordance with Clause 13 of the Standard Contractual Clauses. Where an EU Representative has not been appointed by data exporter, the competent supervisory authority shall be the supervisory authority of the Netherlands. | |
D. GOVERNING LAW AND CHOICE OF FORUM | |
GOVERNING LAW | For the purposes of Clause 17 of the Standard Contractual Clauses the Parties select OPTION 1: the law of the Netherlands. a |
CHOICE OF FORUM | For the purposes of Clause 18 of the SCCs: the Parties select the courts of the Netherlands. |
E. OTHER | |
Where the Standard Contractual Clauses identify optional provisions (or provisions with multiple options) the following will apply: For Clause 7 (Docking Clause), the optional provision will apply. For Clause 9(a), option 2 (General Written Authorisation) will apply and the time period for prior notice of Sub-Processor changes shall be as set out in this DPA. For Clause 11(a) (Redress) – the optional provision will not apply. |
ANNEX II – WIZ SECURITY MEASURES
The technical and organizational measures including technical and organizational measures to support the security of Personal Data incorporated into Annex II of the Standard Contractual Clauses shall be the technical and organizational security measures as described in Wiz’s Security Documentation.
In addition, Wiz agrees to the following compensating safeguards to protect such data to an equivalent level as required under the Data Protection Laws of the Extended EEA Countries to the extent required under the Standard Contractual Clauses:
- Wiz and Customer shall encrypt all transfers of the Customer Personal Data between them, and Wiz shall encrypt any onward transfers it makes of such Customer Personal Data.
- Wiz will use reasonably available legal mechanisms to challenge any demands for Customer Personal Data access through national security process it receives as well as any non-disclosure provisions attached thereto.
- Wiz will promptly notify Customer of any government demands for Customer Personal Data, unless prohibited under applicable law. To the extent Wiz is prohibited by law from providing such notification, Wiz shall: (i) review each request on a case-by-case basis; (ii) use reasonable efforts to request that the confidentiality requirement be waived to enable Wiz to notify the Customer and/or the appropriate Supervisory Authority competent for the Customer; and (iii) maintain evidence of any such attempt to have a confidentiality requirement waived.
- Wiz will promptly notify Customer if Wiz can no longer comply with the applicable clauses in this Section. Wiz shall not be required to provide Customer with specific information about why it can no longer comply, if providing such information is prohibited by applicable law. Such notice shall entitle Customer to terminate the Agreement (or, at Customer’s option, affected statements of work, order forms, and like documents thereunder) and receive a prompt pro-rata refund of any prepaid amounts thereunder.
Effective August 29, 2023 to September 11, 2023
DownloadTable of Contents
DATA PROCESSING AGREEMENT
This Data Processing Agreement (“DPA”) forms part of the Wiz Master Subscription Agreement or other agreement for Wiz services entered into between the Parties (the “Agreement”) between the Wiz entity that has entered into the Agreement (“Wiz”, “Us”, “We”, “Our”) and Customer (collectively, “You”, “Your”, or “Customer”) pursuant to the Agreement. Both parties shall be referred to as the “Parties” and each, a “Party”. This DPA forms a binding legal agreement to reflect the Parties’ agreement with regard to the Processing of Personal Data (as such terms are defined below).
WHEREAS, 	Wiz shall provide the services set forth in the Agreement (collectively, the “Services”) to Customer, as described in the Agreement; and
WHEREAS, 	the Parties wish to set forth the arrangements concerning the Processing of Personal Data within the context of the Services and agree to comply with the following provisions with respect to any Personal Data, each acting reasonably and in good faith.
NOW THEREFORE, in consideration of the mutual promises set forth herein and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged by the Parties, the Parties, intending to be legally bound, agree as follows:
1. 	INTERPRETATION AND DEFINITIONS
1.1 	The headings contained in this DPA are for convenience only and shall not be interpreted to limit or otherwise affect the provisions of this DPA. References to clauses or sections are references to the clauses or sections of this DPA unless otherwise stated. Words used in the singular include the plural and vice versa, as the context may require. Capitalized terms not defined herein shall have the meanings assigned to such terms in the Agreement.
1.2	Definitions:
- “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
- “Controller” or “Business” as relevant under applicable Data Protection Laws, means the entity which determines the purposes and means of the Processing of Personal Data or such equivalent term under Data Protection Laws.
- “Customer Personal Data” means any Personal Data which is provided to and Processed by Wiz on behalf of Customer in order to provide the Services under the Agreement. Customer Personal Data does not include Personal Data that Wiz Processes as a Controller separately from its Processing obligations to Customer under the Agreement.
- “Data Protection Laws” means all laws and regulations of the the European Union, the EEA and their Member States, Switzerland, the United Kingdom, and the United States, each to the extent applicable to the Processing of Personal Data under the Agreement.
- “Data Subject” means the identified or identifiable person to whom the Customer Personal Data relates.
- “EEA” means the European Economic Area.
- “EU Data Protection Law” means the GDPR, and the UK GDPR.
- “Extended EEA Country” means a Member State of the EEA, Switzerland or the United Kingdom, and Extended EEA Countries means the foregoing countries collectively.
- “Member State(s)” means a country that belongs to the European Union and/or the EEA.
- “GDPR” means the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier or such equivalent term under Data Protection Laws.
- “Process(ing)” means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- “Processor” or “Service Provider,” as relevant under applicable Data Protection Laws, means the entity which Processes Personal Data on behalf of the Controller or Business or such equivalent term under Data Protection Laws.
- “Security Documentation” means Wiz’s security documentation that is applicable to the specific Services purchased by Customer, as updated from time to time, and as made reasonably available by Wiz.
- “Standard Contractual Clauses” means the “standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council adopted by the European Commission decision of 4 June 2021” and published under document number C (2021) 3972 available at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021D0914&qid=1689513765256, as may be updated, amended or superseded from time to time.
- “Sub-Processor” means any Processor or Service Provider engaged by Wiz and/or Wiz Affiliate to Process Customer Personal Data.
- “Supervisory Authority” means the competent supervisory authority pursuant to the applicable Data Protection Laws.
- “Third Country” has the meaning given in Clause 8.2 below.
- “UK GDPR” means the GDPR as incorporated into United Kingdom domestic law pursuant to Section 3 of the European Union (Withdrawal) Act 2018 (the "UK GDPR").
- “US Privacy Laws” means the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act of 2020 along with any associated regulations (“CCPA”); the Virginia Consumer Data Protection Act (“VCDPA”); the Colorado Privacy Act; and any similar U.S. laws governing data privacy and security once effective.
2.	CUSTOMER’S PROCESSING OF PERSONAL DATA. Customer shall, in its use of the Services, Process Customer Personal Data in accordance with the requirements of Data Protection Laws and comply at all times with the obligations applicable to Controllers or Businesses, as applicable. For the avoidance of doubt, Customer’s instructions for the Processing of Customer Personal Data shall comply with Data Protection Laws. Customer shall have sole responsibility for the means by which Customer acquired Customer Personal Data. Without limitation, Customer shall comply with any and all transparency-related obligations (including, without limitation, displaying any and all relevant and required privacy notices or policies) and shall have any and all required legal basis in order to collect, Process and transfer to Wiz the Customer Personal Data and to authorize the Processing by Wiz of the Customer Personal Data which is authorized in this DPA.
3.	WIZ’S PROCESSING OF PERSONAL DATA
3.1	Application. As used in clauses 3 – 9 herein, Customer Personal Data refers to Customer Personal Data that is subject to Data Protection Laws.
3.2	Roles of the Parties. The Parties acknowledge and agree that with regard to the Processing of Customer Personal Data, (i) Customer is the Controller or Business, (ii) Wiz is the Processor or Service Provider, and (iii) Wiz or its Affiliates may engage Sub-Processors pursuant to the requirements set forth in Clause 6 below.
3.3	Wiz and its Affiliates (as applicable) shall Process Customer Personal Data only in accordance with Customer’s documented instructions, which are set out in this DPA, the Agreement, as necessary for the performance of the Services and for the performance of the Agreement and this DPA, unless required to otherwise by any applicable law, court of competent jurisdiction or other Supervisory Authority to which Wiz and its Affiliates are subject, in which case, Wiz shall inform Customer of the legal requirement before processing, unless that law prohibits such information. Customer agrees that the Agreement is its complete and final instructions to Company in relation to the Processing of Personal Data. Processing any Personal Data outside the scope of the Agreement will require prior written agreement between Wiz and Customer by way of an amendment to the Agreement, and may include any additional fees that may be payable by Customer to Wiz for carrying out such instructions. The duration of the Processing, the nature and purposes of the Processing, as well as the types of Customer Personal Data Processed and categories of Data Subjects under this DPA are further specified in Schedule 1 to this DPA.
3.4	To the extent that Wiz or its Affiliates cannot comply with an instruction from Customer and/or its authorized users relating to Processing of Customer Personal Data or where Wiz considers such instruction to be unlawful, Wiz (i) shall inform Customer, providing relevant details of the problem; (ii) may, without any kind of liability towards Customer, temporarily cease all Processing of the affected Customer Personal Data (other than securely storing those data); and (iii) if the Parties do not agree on a resolution to the issue in question and the costs thereof, each Party may, as its sole remedy, terminate the Agreement and this DPA with respect to the affected Processing, and Customer shall pay to Wiz all the amounts owed to Wiz or due before the date of termination.
4.	RIGHTS OF DATA SUBJECTS. If Wiz receives a request from a Data Subject to exercise its rights under Data Protection Laws (“Data Subject Request”), Wiz shall, to the extent legally permitted, promptly notify and forward such Data Subject Request to Customer. Taking into account the nature of the Processing, Wiz shall use commercially reasonable efforts to assist Customer by appropriate technical and organizational measures, insofar as this is possible, for the fulfilment of Customer’s obligation to respond to a Data Subject Request under Data Protection Laws.
5.	WIZ PERSONNEL
5.1	Confidentiality. Wiz shall grant access to the Customer Personal Data to persons under its authority (including, without limitation, its personnel) only on a need-to-know basis and ensure that such persons engaged in the Processing of Customer Personal Data have committed themselves to confidentiality.
6.	AUTHORIZATION REGARDING SUB-PROCESSORS
6.1	Customer hereby grants general written authorization to Wiz to appoint Sub-Processors to perform specific Processing activities on Customer Personal Data on its behalf. Wiz’s current list of Sub-Processors is included at https://www.wiz.io/sub-processor-list (“Sub-Processor List”) and is hereby approved by Customer.
6.2	Objection Right for Sub-Processors. Wiz offers a mechanism for Customers to subscribe to notifications of changes to Wiz’s Sub-Processor List via https://www.wiz.io/legal/sub-processor-list. If Customer subscribes to receive such updates, Wiz shall provide notification of any intended changes concerning the addition or replacement of other Sub-Processor(s) to the email address which has subscribed thereby giving Customer the opportunity to object. Customer may reasonably object to Wiz’s use of a Sub-Processor for reasons related to the Data Protection Laws by notifying Wiz in writing within ten (10) days after receipt of Wiz’s notice including the reasons for objecting to Wiz’s use of such Sub-Processor. Failure to object to such Sub-Processor in writing within ten (10) days following Wiz’s notice shall be deemed as acceptance of the Sub-Processor. In the event Customer reasonably objects to a Sub-Processor, Wiz will use reasonable efforts to make available to Customer a change in the Services to avoid Processing of Customer Personal Data by the objected-to Sub-Processor without unreasonably burdening Customer. If Wiz is unable to make available such change within a reasonable period of time, which shall not exceed thirty (30) days, Customer may, as a sole remedy, terminate the Agreement and this DPA by providing written notice to Wiz provided that all amounts due under the Agreement before the termination date shall be duly paid to Wiz. Until a decision is made regarding the Sub-Processor, Wiz may temporarily suspend the Processing of the affected Customer Personal Data.
6.3	Where Wiz engages a Sub-Processor, we shall do so by way of a written contract which imposes on the Sub-Processor substantially the same data protection obligations as in this DPA.
7.	SECURITY
7.1	Controls for the Protection of Customer Personal Data. Taking into account the state of the art, Wiz shall maintain industry-standard technical and organizational measures, including as required pursuant to Article 32 of the GDPR and other applicable Data Protection Laws, for protection of the security (including protection against unauthorized or unlawful Processing and against accidental or unlawful destruction, loss or alteration or damage, unauthorized disclosure of, or access to, Customer Personal Data), confidentiality and integrity of Customer Personal Data, as set forth in the Security Documentation. Upon Customer’s request, Wiz will use commercially reasonable efforts to assist Customer, in ensuring compliance with the obligations pursuant to Articles 32 to 36 of the GDPR and other applicable Data Protection Laws taking into account the nature of the processing, the state of the art, the costs of implementation, the scope, the context, the purposes of the Processing and the information available to Wiz.
7.2	Third-Party Certifications and Audits. Upon Customer’s written request at reasonable intervals, and subject to the confidentiality obligations set forth in the Agreement, Wiz shall make available to Customer (or Customer’s independent, third-party auditor that is not reasonably objected to by Wiz and bound by confidentiality obligations) a copy of Wiz’s then most recent third-party audits or certifications, as applicable (provided, however, that any such documentation shall be Wiz’s confidential information and shall only be used by Customer to assess compliance with this DPA, and shall not be used for any other purpose or disclosed to any third party without Wiz’s prior written approval and, upon Wiz’s request, Customer shall return all such documentation in Customer’s possession or control). Only as required by applicable Data Protection Laws and at Customer’s cost and expense, not more than once per year, Wiz shall allow for and contribute to audits, including remote inspections, conducted by Customer (or Customer’s independent, third-party auditor that is not reasonably objected to by Wiz and that is bound by confidentiality obligations) provided that the parties shall agree on the scope, methodology, timing and conditions of such audits and inspections in advance. Notwithstanding anything to the contrary, such audits and/or inspections shall not contain any information, including without limitation, Personal Data that belongs to Wiz’s other customers.
8.	TRANSFERS OF DATA
8.1	Transfers to countries that offer adequate level of data protection. Personal Data may be transferred from the Extended EEA Countries to countries or frameworks that offer adequate level of data protection under or pursuant to the adequacy decisions published by the relevant data protection authorities of the Extended EEA Countries (“Adequacy Decisions”), without any further safeguard being necessary.
8.2 	Transfers to other countries. If, and to the extent, the Processing of Customer Personal Data which is subject to Data Protection Laws of the EEA Extended Countries includes transfers by Customer from the Extended EEA Countries to Wiz in countries outside the Extended EEA Countries which have not been subject to an Adequacy Decision (“Third Countries”), the Parties agree that such transfers shall be undertaken on the basis of the Standard Contractual Clauses, which will be deemed to have been signed by each Party on the Effective Date of this Agreement, are incorporated herein by reference and construed in accordance with Schedule 2 below, unless another mechanism provided for in the Data Protection Laws of the applicable Extended EEA Country applies.
8.3	In the event Customer enables Third Party Integrations (as defined in the Agreement) which involve transfers of Customer Personal Data between Wiz and the Third Party Integration provider, Customer acknowledges and agrees that (a) such Third Party Integration providers are not Sub-Processors of Wiz; (b) such transfers are conducted at Customer’s instruction in accordance with an agreement between the Customer and such Third Party Integration provider (which Wiz is not a party to); and (c) Customer shall be solely responsible for such transfers and their compliance with Data Protection Laws, including without limitation, executing Standard Contractual Clauses with such Third Party Integration providers as required.
9. 	US PRIVACY LAWS
9.1 	In performing its obligations under the Agreement and this DPA, Wiz will not: (1) “sell” or “share” for purposes of “cross-context behavioral advertising” or “targeted advertising” (as defined by applicable US Privacy Laws) any Customer Personal Data; (2) retain, use, or disclose Customer Personal Data outside of the direct business relationship between Wiz and Customer; or (3) attempt to re-identify any pseudonymized, anonymized, aggregate, or de-identified Customer Personal Data.
9.2	Wiz will (1) comply with any applicable restrictions under applicable US Privacy Laws on combining Customer Personal Data with Personal Data that Wiz receives from, or on behalf of, another person or persons; and (2) promptly notify Customer if Wiz determines that it (i) can no longer meet its obligations under this DPA or applicable US Privacy Laws; or (ii) in Wiz’s opinion, an instruction from Customer infringes applicable US Privacy Laws.
9.3 Wiz certifies that it understands its obligations in this Clause 9.
9.4	The Parties agree that Schedule 1 hereto shall satisfy any requirement under applicable U.S. Privacy Law to provide details regarding the nature of the Processing activities related to Customer Personal Data.
10.	PERSONAL DATA INCIDENT MANAGEMENT AND NOTIFICATION. To the extent required under applicable Data Protection Laws, Wiz shall notify Customer without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Customer Personal Data (a “Personal Data Incident”). Wiz shall make reasonable efforts to identify the cause of such Personal Data Incident and take those steps as Wiz deems necessary, possible and reasonable in order to remediate the cause of such a Personal Data Incident. Customer (or its customers), as the Controller or Business, will be the party responsible for notifying supervisory authorities and/or concerned Data Subjects (where required by Data Protection Laws).
11.	RETURN AND DELETION OF PERSONAL DATA. Subject to the Agreement, upon termination or expiry of the Services, Wiz shall, make available for return the Customer Personal Data via the Services and delete such Customer Personal Data in accordance with Wiz’s customer data retention & deletion policy unless applicable law requires storage of the Customer Personal Data. In any event, Customer agrees that Wiz may retain Customer Personal Data in accordance with its standard backup policy, for evidence purposes and/or for the establishment, exercise or defence of legal claims and/or to comply with applicable laws and regulations. Notwithstanding anything to the contrary, Customer hereby agrees and understands that, to the extent Wiz performs cloud scanning on behalf of Customer, if and when Customer wants to delete specific Customer Personal Data, Customer may delete such Customer Personal Data from its own databases, and it will automatically be erased from Wiz’s databases within a reasonable market standard timeframe. If Customer requests return of the Customer Personal Data, it shall be returned in an industry standard format generally available for Wiz’s Customers.
12.	TERMINATION. This DPA shall automatically terminate upon the termination or expiration of the Agreement under which the Services are provided, provided that, to the extent Wiz retains any Customer Personal Data following termination or expiration of the Agreement, this DPA shall survive for such period that Wiz retains Customer Personal Data. Clauses 2, 3.4 and 13 shall survive the termination or expiration of this DPA for any reason. This DPA cannot, in principle, be terminated separately to the Agreement, except where the Processing ends before the termination of the Agreement, in which case, this DPA shall automatically terminate.
13.	RELATIONSHIP WITH AGREEMENT. Subject to any provisions in Schedule 2 regarding governing law and choice of forum of the Standard Contractual Clauses, the governing law and choice of forum provision in the Agreement shall apply to this DPA. In the event of any conflict between the provisions of this DPA and the provisions of the Agreement, the provisions of this DPA shall prevail over the conflicting provisions of the Agreement. For the avoidance of doubt each Party’s and its Affiliates’ liability, taken together in the aggregate, arising out of or relating to this DPA, the Standard Contractual Clauses, Data Protection Laws and any other data protection agreements in connection with the Agreement (if any), shall be subject to any aggregate limitations on liability set out in the Agreement. NOTWITHSTANDING THE FOREGOING, IF CUSTOMER IS USING THE SERVICES FOR A FREE TRIAL, WIZ’S MAXIMUM AGGREGATE LIABILITY TO CUSTOMER UNDER OR RELATED TO THIS DPA SHALL BE CAPPED AT ONE THOUSAND DOLLARS US ($1,000 US).
14.	MISCELLANEOUS. Any Wiz obligation hereunder may be performed (in whole or in part), and any Wiz right (including invoice and payment rights) or remedy may be exercised (in whole or in part), by an Affiliate of Wiz. This DPA may be amended by Wiz from time to time in its sole discretion, with such updated version posted to Wiz’s website, provided, however, that no such update shall materially diminish the privacy or security of Customer Personal Data.
List of Schedules
SCHEDULE 1 – DETAILS OF THE PROCESSING
SCHEDULE 2 – STANDARD CONTRACTUAL CLAUSE
SCHEDULE 1
DETAILS OF THE PROCESSING
Subject matter.
Wiz will Process Customer Personal Data as necessary to perform the Services pursuant to the Agreement, as further instructed by Customer in its use of the Services.
Nature and Purpose of Processing.
1.	Performing the Agreement, this DPA and/or other contracts executed by the Parties, including, providing the Service(s) and support and technical maintenance to Customer.
2.	To comply with documented reasonable instructions provided by Customer where such instructions are consistent with the terms of the Agreement.
3.	Resolving disputes, enforcing the Agreement, this DPA and/or defending Wiz’s rights.
4.	Complying with applicable laws and regulations, including for cooperating with local and foreign tax authorities, preventing fraud, money laundering and terrorist financing.
Duration of Processing.
Subject to any section of the DPA and/or the Agreement dealing with the duration of the Processing and the consequences of the expiration or termination thereof, Wiz will Process Customer Personal Data for the duration of the Agreement, unless otherwise agreed upon in writing.
Types of Customer Personal Data.
Customer determines the categories of any Customer Personal Data that is made accessible to Wiz, which may include, without limitation, Customer Personal Data relating to the following categories:
- If Customer uses Wiz for scanning, Personal Data might be temporarily processed by Wiz during the scanning. The type of the Personal Data depends on Customer environment and which sources Customer connects.
- Wiz only stores metadata such as CVEs, misconfigurations, list of installed packages, cloud events, local cloud user accounts, cloud object identifiers and (depending on the features used by Customer) logs and file paths. Such metadata does not generally contain Personal Data, however, depending on the Customer’s environment and naming conventions and the features used by Customer, some limited Personal Data may be included. For example, cloud user account names, logs and artifacts could include an individual’s name, logs could contain names, associated email address and IP address and (if specific Wiz features are enabled) pseudonymized samples of findings to enable Customer to locate, verify and remediate the finding(s).
Customer acknowledges that Wiz does not control which Customer Personal Data Customer shares with it in the context of the Services.
Categories of Data Subjects.
As part of providing the Services, Wiz may process Customer Personal Data related to Customer’s customers or users, leads, employees and service providers, the extent of which is solely determined by Customer.
SCHEDULE 2
STANDARD CONTRACTUAL CLAUSES
1	Incorporation and interpretation of the Standard Contractual Clauses
1.1	In relation to transfers by Customer of Customer Personal Data which are subject to Data Protection Laws of the EEA Extended Countries to Wiz in Third Countries, the parties agree that Module Two (Transfer controller to processor) or Module 3 (Transfer processor to processor) of the Standard Contractual Clauses shall apply, as applicable.
1.2	The Parties acknowledge that the information required to be provided in the Standard Contractual Clauses, including the appendices, is set out in Appendix 1 below.
1.3	If there is a conflict between the provisions of this Agreement and the Standard Contractual Clauses, the Standard Contractual Clauses will prevail, provided that, except to the extent prohibited by applicable law, the Standard Contractual Clauses shall be interpreted in accordance with and subject to this DPA and the Agreement, including without limitation, the provisions on limitation of liability, instructions, storage, erasure and return of Personal Data, audits and engagement of Sub-Processors.
1.4	If any provision or part-provision of this DPA or the Agreement causes the Standard Contractual Clauses to become an invalid export mechanism in the relevant Extended EEA Country, it shall be deemed deleted but that shall not affect the validity and enforceability of the rest of this Agreement and the parties shall negotiate in good faith to agree a replacement provision that, to the greatest extent possible, achieves the intended commercial result of the original provision.
1.5	Where requested by Wiz, Customer shall provide reasonable assistance to Wiz and be responsible for issuing such communications to Data Subjects and/or the Controller (to the extent Module Three applies) as are required in order for Wiz to comply with its obligations under the Standard Contractual Clauses.
1.6	For the purpose of Section III, Clause 14 of the Standard Contractual Clauses, the parties acknowledge and agree that, as between the parties, the Customer (acting as data exporter) is responsible for: (i) assessing the laws of the country to which it transfers Personal Data; and (ii) determining whether or not the transfer meets the requirements of Section III, Clause 14(a) of the Standard Contractual Clauses. Where Wiz (as data importer) provides information to the Customer (acting as data exporter) for assisting the Customer in its assessment, such information is provided on an “as is” basis for informational purposes only. Without prejudice to Section III, Clause 14(c) of the Standard Contractual Clauses, Wiz (as data importer) shall not be liable for any losses suffered by the Customer in connection with its assessment.
1.7 	Notwithstanding anything to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is the UK, template Addendum B.1.0 issued by the UK ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section 18 of those Mandatory Clauses, (the “UK Approved Addendum”) shall amend the Standard Contractual Clauses in respect of such transfers and Part 1 of the UK Approved Addendum shall be populated as set out below:
Table 1. The “start date” will be the date this DPA enters into force. The “Parties” are Customer as exporter Wiz as importer.
Table 2. The “Addendum EU SCCs” are the modules and clauses of the Standard Contractual Clauses selected in relation to a particular transfer in accordance with paragraphs 1.1 and 1.2 of this Schedule.
Table 3. The “Appendix Information” is as set out in Appendix 1 to this Schedule.
Table 4. Neither party may end the UK Approved Addendum in accordance with its Section 19.
1.8 	Except where paragraph 1.9 above applies, but notwithstanding anything else to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is not a Member State of the European Union, references in the Standard Contractual Clauses to:
(a)	“Member States of the European Union” shall refer to the applicable Extended EEA Country in which the data exporter is established or from where the transferred Personal Data originated (as applicable);
(b)	“the GDPR” shall refer to the Data Protection Laws of the Extended EEA Country in which the data exporter is established or from where the Personal Data originated; and
(c)	“supervisory authority” shall refer to the data protection authority in the Extended EEA Country as determined in Annex I(C) below.
Appendix 1 – Completion of the Standard Contractual Clauses
ANNEX I
A. LIST OF THE PARTIES | |
Data Exporter: | Name and address: Customer, as set out in the Agreement Contact details: As set out in the Agreement Activities relevant to the data transferred under these Clauses: Receipt of Wiz Services, as set out in the Agreement and this DPA |
Data Importer:	 | Name and address: Wiz, as set out in the Agreement Contact details: Privacy Officer, privacy@wiz.io Activities relevant to the data transferred under these Clauses: Provision of Wiz Services, as set out in the Agreement and this DPA |
B. DETAILS OF PROCESSING/TRANSFER | |
CATEGORIES OF DATA SUBJECTS | As described in Schedule 1 |
CATEGORIES OF PERSONAL DATA	 | As described in Schedule 1 |
SPECIAL CATEGORIES OF DATA (IF APPLICABLE) | Wiz does not control which Personal Data Customer shares with it in the context of the Services |
FREQUENCY OF THE TRANSFER | As regular as is required to provide the Services |
NATURE AND PURPOSE OF THE PROCESSING	 | As described in Schedule 1 |
RETENTION | As described in Schedule 1 |
TRANSFER TO (SUB)PROCESSORS | As set out in Wiz’s Sub-Processor List |
C. COMPETENT SUPERVISORY AUTHORITY | |
The competent supervisory authority shall be determined in accordance with Clause 13 of the Standard Contractual Clauses. Where an EU Representative has not been appointed by data exporter, the competent supervisory authority shall be the supervisory authority of the Netherlands. | |
D. GOVERNING LAW AND CHOICE OF FORUM | |
GOVERNING LAW | For the purposes of Clause 17 of the Standard Contractual Clauses the Parties select OPTION 1: the law of the Netherlands. a |
CHOICE OF FORUM | For the purposes of Clause 18 of the SCCs: the Parties select the courts of the Netherlands. |
E. OTHER | |
Where the Standard Contractual Clauses identify optional provisions (or provisions with multiple options) the following will apply:	 For Clause 7 (Docking Clause), the optional provision will apply. For Clause 9(a), option 2 (General Written Authorisation) will apply and the time period for prior notice of Sub-Processor changes shall be as set out in this DPA. For Clause 11(a) (Redress) – the optional provision will not apply. |
ANNEX II – WIZ SECURITY MEASURES
The technical and organizational measures including technical and organizational measures to support the security of Personal Data incorporated into Annex II of the Standard Contractual Clauses shall be the technical and organizational security measures as described in Wiz’s Security Documentation.
In addition, Wiz agrees to the following compensating safeguards to protect such data to an equivalent level as required under the Data Protection Laws of the Extended EEA Countries to the extent required under the Standard Contractual Clauses:
- Wiz and Customer shall encrypt all transfers of the Customer Personal Data between them, and Wiz shall encrypt any onward transfers it makes of such Customer Personal Data.
- Wiz will use reasonably available legal mechanisms to challenge any demands for Customer Personal Data access through national security process it receives as well as any non-disclosure provisions attached thereto.
- Wiz will promptly notify Customer of any government demands for Customer Personal Data, unless prohibited under applicable law. To the extent Wiz is prohibited by law from providing such notification, Wiz shall: (i) review each request on a case-by-case basis; (ii) use reasonable efforts to request that the confidentiality requirement be waived to enable Wiz to notify the Customer and/or the appropriate Supervisory Authority competent for the Customer; and (iii) maintain evidence of any such attempt to have a confidentiality requirement waived.
- Wiz will promptly notify Customer if Wiz can no longer comply with the applicable clauses in this Section. Wiz shall not be required to provide Customer with specific information about why it can no longer comply, if providing such information is prohibited by applicable law. Such notice shall entitle Customer to terminate the Agreement (or, at Customer’s option, affected statements of work, order forms, and like documents thereunder) and receive a prompt pro-rata refund of any prepaid amounts thereunder.
Effective August 21, 2023 to August 29, 2023
DownloadTable of Contents
- “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
- “Authorized Affiliate” means any of Customer’s Affiliate(s) which (a) is subject to the Data Protection Laws, and (b) is permitted to use the Services pursuant to the Agreement between Customer and Wiz but has not signed its own agreement with Wiz and is not a “Customer” as defined under the Agreement. For the purposes of the DPA, the term Customer includes Customer Authorized Affiliates to the extent applicable.
- “Controller” or “Business” as relevant under applicable Data Protection Laws, means the entity which determines the purposes and means of the Processing of Personal Data or such equivalent term under Data Protection Laws.
- “Customer Personal Data” means any Personal Data which is provided to and Processed by Wiz on behalf of Customer in order to provide the Services under the Agreement. Customer Personal Data does not include Personal Data that Wiz Processes as a Controller separately from its Processing obligations to Customer under the Agreement.
- “Data Protection Laws” means all laws and regulations of the European Union, the EEA and their Member States, Switzerland, the United Kingdom, and United States, each to the extent applicable to the Processing of Personal Data under the Agreement.
- “Data Subject” means the identified or identifiable person to whom the Customer Personal Data relates.
- “EEA” means the European Economic Area.
- “EU Data Protection Law” means the GDPR, and the UK GDPR.
- “Extended EEA Country” means a country within the EEA, Switzerland or the United Kingdom, and Extended EEA Countries means the foregoing countries collectively.
- “Member State(s)” means a country that belongs to the European Union and/or the EEA.
- “GDPR” means the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier.
- “Process(ing)” means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- “Processor” or “Service Provider,” as relevant under applicable Data Protection Laws, means the entity which Processes Personal Data on behalf of the Controller or Business or such equivalent term under Data Protection Laws.
- “Security Documentation” means Wiz’s security documentation that is applicable to the specific Services purchased by Customer, as updated from time to time, and as made reasonably available by Wiz.
- “Standard Contractual Clauses” means the “standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council adopted by the European Commission decision of 4 June 2021” and published under document number C (2021) 3972 available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=en, as may be updated, amended or superseded from time to time.
- “Sub-Processor” means any Processor or Service Provider engaged by Wiz and/or Wiz Affiliate to Process Customer Personal Data.
- “Supervisory Authority” means the competent supervisory authority pursuant to the applicable Data Protection Laws.
- “Third Country” has the meaning given in Clause 8.2 below.
- “UK GDPR” means the GDPR as incorporated into United Kingdom domestic law pursuant to Section 3 of the European Union (Withdrawal) Act 2018 (the "UK GDPR").
- “U.S. Privacy Laws” means the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act of 2020 along with any associated regulations (“CCPA”); the Virginia Consumer Data Protection Act (“VCDPA”); the Colorado Privacy Act; and any similar U.S. laws governing data privacy and security once effective.
- Wiz certifies that it understands its obligations in this Clause 9.
Table 1. The “start date” will be the date this DPA enters into force. The “Parties” are Customer or Customer Authorized Affiliate as exporter Wiz as importer.
Table 2. The “Addendum EU SCCs” are the modules and clauses of the Standard Contractual Clauses selected in relation to a particular transfer in accordance with paragraphs 1.1 and 1.2 of this Schedule.
Table 4. Neither party may end the UK Approved Addendum in accordance with its Section 19.
A. LIST OF THE PARTIES | |
Data Exporter: | Name and address: Customer or Customer Authorized Affiliate, as set out in the Agreement Contact details: As set out in the Agreement Activities relevant to the data transferred under these Clauses: Receipt of Wiz Services, as set out in the Agreement and this DPA |
Data Importer:	 | Name and address: Wiz, as set out in the Agreement Contact details: Privacy Officer, privacy@wiz.io Activities relevant to the data transferred under these Clauses: Provision of Wiz Services, as set out in the Agreement and this DPA |
B. DETAILS OF PROCESSING/TRANSFER | |
CATEGORIES OF DATA SUBJECTS | As described in Schedule 1 |
CATEGORIES OF PERSONAL DATA	 | As described in Schedule 1 |
SPECIAL CATEGORIES OF DATA (IF APPLICABLE) | Wiz does not control which Personal Data Customer shares with it in the context of the Services |
FREQUENCY OF THE TRANSFER | As regular as is required to provide the Services |
NATURE AND PURPOSE OF THE PROCESSING	 | As described in Schedule 1 |
RETENTION | As described in Schedule 1 |
TRANSFER TO (SUB)PROCESSORS | As set out in Wiz’s Sub-Processor List. |
C. COMPETENT SUPERVISORY AUTHORITY | |
The competent supervisory authority shall be determined in accordance with Clause 13 of the Standard Contractual Clauses. Where an EU Representative has not been appointed by data exporter, the competent supervisory authority shall be the supervisory authority of the Netherlands. Where the data exporter is established outside of the EU, but within an Extended EEA Country, the competent supervisory authority shall be the supervisory authority of the Extended EEA Country in which the Transferring Client Entity is established. Where the data exporter is established outside an Extended EEA Country and the personal data originates from an Extended EEA Country which is not in the EU, the supervisory authority shall be the supervisory authority of the Extended EEA Country from which the Personal Data originated. | |
D. GOVERNING LAW AND CHOICE OF FORUM | |
GOVERNING LAW | For the purposes of Clause 17 of the Standard Contractual Clauses the Parties select OPTION 1: a)	(a) where the data exporter is established in the EU or otherwise if the personal data originates from the EU, the Parties select the laws of the Netherlands; (b) where the data exporter is established outside the EU but within an Extended EEA Country, the Parties select the laws of the Extended EEA Country where the data exporter is established; or (c) subject to (a) above, where the data exporter is established outside an Extended EEA Country, the parties select the laws of the Extended EEA Country where the personal data originates from. |
CHOICE OF FORUM | For the purposes of Clause 18 of the SCCs:
outside an Extended EEA Country, the parties select the courts of the Extended EEA Country where the personal data originates from. |
E. OTHER | |
Where the Standard Contractual Clauses identify optional provisions (or provisions with multiple options) the following will apply:	 For Clause 7 (Docking Clause), the optional provision will apply. For Clause 9(a), option 2 will apply and the time period for prior notice of Sub-Processor changes shall be as set out in this DPA. For Clause 11(a) (Redress) – the optional provision will not apply. |
Effective July 5, 2023 to August 21, 2023
DownloadTable of Contents
- “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
- “Authorized Affiliate” means any of Customer’s Affiliate(s) which (a) is subject to the Data Protection Laws, and (b) is permitted to use the Services pursuant to the Agreement between Customer and Wiz but has not signed its own agreement with Wiz and is not a “Customer” as defined under the Agreement. For the purposes of the DPA, the term Customer includes Customer Authorized Affiliates to the extent applicable.
- “Controller” or “Business” as relevant under applicable Data Protection Laws, means the entity which determines the purposes and means of the Processing of Personal Data or such equivalent term under Data Protection Laws.
- “Customer Personal Data” means any Personal Data which is provided to and Processed by Wiz on behalf of Customer in order to provide the Services under the Agreement. Customer Personal Data does not include Personal Data that Wiz Processes as a Controller separately from its Processing obligations to Customer under the Agreement.
- “Data Protection Laws” means all laws and regulations of the European Union, the EEA and their Member States, Switzerland, the United Kingdom, and United States, each to the extent applicable to the Processing of Personal Data under the Agreement.
- “Data Subject” means the identified or identifiable person to whom the Customer Personal Data relates.
- “EEA” means the European Economic Area.
- “EU Data Protection Law” means the GDPR, and the UK GDPR.
- “Extended EEA Country” means a country within the EEA, Switzerland or the United Kingdom, and Extended EEA Countries means the foregoing countries collectively.
- “Member State(s)” means a country that belongs to the European Union and/or the EEA.
- “GDPR” means the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier.
- “Process(ing)” means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- “Processor” or “Service Provider,” as relevant under applicable Data Protection Laws, means the entity which Processes Personal Data on behalf of the Controller or Business or such equivalent term under Data Protection Laws.
- “Security Documentation” means Wiz’s security documentation that is applicable to the specific Services purchased by Customer, as updated from time to time, and as made reasonably available by Wiz.
- “Standard Contractual Clauses” means the “standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council adopted by the European Commission decision of 4 June 2021” and published under document number C (2021) 3972 available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=en, as may be updated, amended or superseded from time to time.
- “Sub-Processor” means any Processor or Service Provider engaged by Wiz and/or Wiz Affiliate to Process Customer Personal Data.
- “Supervisory Authority” means the competent supervisory authority pursuant to the applicable Data Protection Laws.
- “Third Country” has the meaning given in Clause 8.2 below.
- “UK GDPR” means the GDPR as incorporated into United Kingdom domestic law pursuant to Section 3 of the European Union (Withdrawal) Act 2018 (the "UK GDPR").
- “U.S. Privacy Laws” means the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act of 2020 along with any associated regulations (“CCPA”); the Virginia Consumer Data Protection Act (“VCDPA”); the Colorado Privacy Act; and any similar U.S. laws governing data privacy and security once effective.
- Wiz certifies that it understands its obligations in this Clause 9.
Table 1. The “start date” will be the date this DPA enters into force. The “Parties” are Customer or Customer Authorized Affiliate as exporter Wiz as importer.
Table 2. The “Addendum EU SCCs” are the modules and clauses of the Standard Contractual Clauses selected in relation to a particular transfer in accordance with paragraphs 1.1 and 1.2 of this Schedule.
Table 4. Neither party may end the UK Approved Addendum in accordance with its Section 19.
A. LIST OF THE PARTIES | |
Data Exporter: | Name and address: Customer or Customer Authorized Affiliate, as set out in the Agreement Contact details: As set out in the Agreement Activities relevant to the data transferred under these Clauses: Receipt of Wiz Services, as set out in the Agreement and this DPA |
Data Importer:	 | Name and address: Wiz, as set out in the Agreement Contact details: Privacy Officer, privacy@wiz.io Activities relevant to the data transferred under these Clauses: Provision of Wiz Services, as set out in the Agreement and this DPA |
B. DETAILS OF PROCESSING/TRANSFER | |
CATEGORIES OF DATA SUBJECTS | As described in Schedule 1 |
CATEGORIES OF PERSONAL DATA	 | As described in Schedule 1 |
SPECIAL CATEGORIES OF DATA (IF APPLICABLE) | Wiz does not control which Personal Data Customer shares with it in the context of the Services |
FREQUENCY OF THE TRANSFER | As regular as is required to provide the Services |
NATURE AND PURPOSE OF THE PROCESSING	 | As described in Schedule 1 |
RETENTION | As described in Schedule 1 |
TRANSFER TO (SUB)PROCESSORS | As set out in Wiz’s Sub-Processor List. |
C. COMPETENT SUPERVISORY AUTHORITY | |
The competent supervisory authority shall be determined in accordance with Clause 13 of the Standard Contractual Clauses. Where an EU Representative has not been appointed by data exporter, the competent supervisory authority shall be the supervisory authority of the Netherlands. Where the data exporter is established outside of the EU, but within an Extended EEA Country, the competent supervisory authority shall be the supervisory authority of the Extended EEA Country in which the Transferring Client Entity is established. Where the data exporter is established outside an Extended EEA Country and the personal data originates from an Extended EEA Country which is not in the EU, the supervisory authority shall be the supervisory authority of the Extended EEA Country from which the Personal Data originated. | |
D. GOVERNING LAW AND CHOICE OF FORUM | |
GOVERNING LAW | For the purposes of Clause 17 of the Standard Contractual Clauses the Parties select OPTION 1: a)	(a) where the data exporter is established in the EU or otherwise if the personal data originates from the EU, the Parties select the laws of the Netherlands; (b) where the data exporter is established outside the EU but within an Extended EEA Country, the Parties select the laws of the Extended EEA Country where the data exporter is established; or (c) subject to (a) above, where the data exporter is established outside an Extended EEA Country, the parties select the laws of the Extended EEA Country where the personal data originates from. |
CHOICE OF FORUM | For the purposes of Clause 18 of the SCCs:
outside an Extended EEA Country, the parties select the courts of the Extended EEA Country where the personal data originates from. |
E. OTHER | |
Where the Standard Contractual Clauses identify optional provisions (or provisions with multiple options) the following will apply:	 For Clause 7 (Docking Clause), the optional provision will apply. For Clause 9(a), option 2 will apply and the time period for prior notice of Sub-Processor changes shall be as set out in this DPA. For Clause 11(a) (Redress) – the optional provision will not apply. |
Preview Terms
Effective September 11, 2023
DownloadTable of Contents
Wiz Preview Terms
These Wiz Preview Terms (the “Preview Terms”) apply to and govern the use of any Wiz Preview Features made available by Wiz and shall apply automatically from the first use of a Wiz Preview Feature (the “Effective Date”).
The Wiz Master Subscription Agreement or other similar agreement relating to Wiz services (“MSA”) entered into between Wiz Inc. (“Wiz”) and the counterparty identified in the MSA (“Customer”) is incorporated by reference and will control for any provisions not specifically addressed in these Preview Terms. The MSA shall remain in full force and effect, however, in the event of any conflict between these Preview Terms and the MSA, these Preview Terms will prevail in relation to Wiz Preview Features.
- License. From time to time, upon Customer or its Permitted Users’ request, Wiz may, in its sole discretion, make available to Customer or its Permitted Users, one or more proprietary, non-commercially available, hosted software applications, application platform interfaces, services, products, features and/or functionalities on a beta testing basis (“Wiz Preview Feature(s)”) to try at no charge. To the extent Wiz does so, Wiz grants Customer a limited, non-exclusive, non-sublicensable, non-transferable and revocable right to access and use the Wiz Preview Feature(s) solely to test their functionality and provide Feedback to Wiz in accordance with these Preview Terms. For the avoidance of doubt, Wiz’s SLA shall not apply to any Wiz Preview Feature(s).
- Fees. Wiz reserves the right to start charging fees for Wiz Preview Feature(s) at any time, including if the Wiz Preview Feature(s) are made widely available. Wiz shall provide Customer with advance notice of any commencement of fees.
- Scope. Wiz has the right, in its sole discretion, to determine what, if any, Wiz Preview Feature(s) will be made available to Customer and to suspend or revoke access to any one or more of the Wiz Preview Feature(s) for any reason or no reason at any time. Wiz has no obligation to make any Wiz Preview Feature widely available.
- Prohibited Use. All Customer restrictions, obligations and/or prohibited uses in the MSA shall apply equally to Customer’s use of Wiz Preview Features. Customer may not modify, distribute, prepare derivative works of, reverse engineer, reverse assemble, disassemble, decompile or otherwise attempt to decipher any code in connection with the Wiz Preview Feature(s), except as expressly permitted in writing by Wiz.
- Feedback and Customer Reference. Customer agrees to provide feedback, suggestions, enhancement requests, and recommendations to Wiz (“Feedback”) regarding the Wiz Preview Feature(s) and a public customer quote, which, subject to Customer’s prior review and written approval, Wiz will have the right to publish on its website/blog and marketing materials. All Feedback and intellectual property rights therein shall be solely owned by Wiz, and Wiz will have the right, without restriction or fee, to use, modify and incorporate such Feedback into the Wiz Preview Feature(s) and other Wiz products or services.
- Intellectual Property. All right, title, and interest, including any intellectual property rights evidenced by or embodied in, attached, connected, and/or related to the Wiz Preview Features (and any and all improvements enhancements, corrections, modifications, alterations, revisions, extensions and updates and derivative works thereof) and any other products, deliverables or services provided by Wiz; are and shall remain owned solely by Wiz. These Preview Terms do not convey any interest in or to the Wiz Preview Features to Customer other than a limited right of use in accordance with these Preview Terms. Nothing herein constitutes a waiver of Wiz’s intellectual property rights under any law and Wiz reserves all rights not expressly granted herein to the Wiz Preview Features.
- Term and Termination. These Preview Terms shall commence on the Effective Date and shall remain in effect for as long as Customer uses the Wiz Preview Feature(s) (the “Term”). Either party may terminate these Preview Terms at any time by providing written notice to the other party. Upon termination or expiration of these Preview Terms, Customer’s limited rights to use the Wiz Preview Features will automatically expire and Customer shall discontinue any further use and access thereof. Sections 2 - 12 shall survive termination or expiry of these Preview Terms.
- Confidential Information. Customer acknowledges and agrees that the Wiz Preview Features (including their existence and functionality) and any other know how, trade secrets, computer programs, source code, flowcharts, diagrams, manuals, schematics, development tools, specifications, design documents, marketing information, financial information, business plans or reports learnt or made available to Customer as part of the Wiz Preview Program is Wiz’s Confidential Information and shall be subject to the confidentiality obligations agreed between the parties in the MSA.
- Third Party Integrations. If applicable, one or more Wiz Preview Features may integrate with third party services. You hereby consent to the sharing of the information in the Wiz Preview Features with these third party services and certify that it has any and all required consents for doing so. You acknowledge and agree that Wiz has no and expressly disclaims all liability for any such third party services.
- Disclaimer of Warranties. Limitation of Liability. THE WIZ PREVIEW FEATURE(S) ARE PROVIDED “AS IS” AND “AS AVAILABLE”. WIZ MAKES NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, REGARDING THE WIZ PREVIEW FEATURE(S), INCLUDING ANY REPRESENTATION THAT THE SERVICES THEREUNDER WILL BE UNINTERRUPTED OR ERROR-FREE. TO THE FULLEST EXTENT PERMITTED UNDER APPLICABLE LAW, WIZ DISCLAIMS ANY IMPLIED OR STATUTORY WARRANTY, INCLUDING ANY IMPLIED WARRANTY OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE IN RESPECT OF THE WIZ PREVIEW FEATURE(S). FOR THE AVOIDANCE OF DOUBT, ALL WIZ PREVIEW FEATURE(S) ARE PRE-RELEASE, ARE EXPECTED TO CONTAIN DEFECTS WHICH MAY BE MATERIAL, AND ARE NOT EXPECTED TO OPERATE AT THE LEVEL OF PERFORMANCE OR COMPATIBILITY OF A FINAL, GENERALLY AVAILABLE PRODUCT OFFERING. WIZ PREVIEW FEATURE(S) MAY NOT OPERATE ACCURATELY AND MAY BE SUBSTANTIALLY MODIFIED PRIOR TO PUBLIC AVAILABILITY OR WITHDRAWN AT ANY TIME. ACCORDINGLY, ACCESS TO AND USE OF THE WIZ PREVIEW FEATURE(S) IS ENTIRELY AT CUSTOMER’S OWN RISK. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN NO EVENT SHALL WIZ BE LIABLE FOR ANY DAMAGE WHATSOEVER, INCLUDING DIRECT, INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE, ARISING OUT OF THE USE OF OR INABILITY TO USE THE WIZ PREVIEW FEATURE(S), EVEN IF WIZ HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CUSTOMER IS HEREBY ADVISED TO SAFEGUARD IMPORTANT DATA, TO USE CAUTION AND NOT TO RELY IN ANY WAY ON THE CORRECT FUNCTIONING OR PERFORMANCE OF ANY WIZ PREVIEW FEATURE(S).
- Governing Law and Jurisdiction. These Preview Terms shall be subject to the governing law and jurisdiction specific in the MSA.
- Miscellaneous. If any provision of these Preview Terms is unenforceable, that provision will be modified to render it enforceable to the extent possible to affect the parties’ intention and the remaining provisions will not be affected. Any failure by a Party to enforce a right under these Preview Terms shall not act as a waiver of that right or the ability to later assert that right relative to the particular situation involved. Wiz reserves the right to modify these Preview Terms from time to time.
Effective August 21, 2023 to September 11, 2023
DownloadTable of Contents
Wiz Preview Terms
These Wiz Preview Terms (the “Preview Terms”) apply to and govern the use of any Wiz Preview Features made available by Wiz and shall apply automatically from the first use of a Wiz Preview Feature (the “Effective Date”).
The Wiz Master Subscription Agreement or other similar agreement relating to Wiz services (“MSA”) entered into between Wiz Inc. (“Wiz”) and the counterparty identified in the MSA (“Customer”) is incorporated by reference and will control for any provisions not specifically addressed in these Preview Terms. The MSA shall remain in full force and effect, however, in the event of any conflict between these Preview Terms and the MSA, these Preview Terms will prevail in relation to Wiz Preview Features.
- License. From time to time, upon Customer or its Permitted Users’ request, Wiz may, in its sole discretion, make available to Customer or its Permitted Users, one or more proprietary, non-commercially available, hosted software applications, application platform interfaces, services, products, features and/or functionalities on a beta testing basis (“Wiz Preview Feature(s)”) to try at no charge. To the extent Wiz does so, Wiz grants Customer a limited, non-exclusive, non-sublicensable, non-transferable and revocable right to access and use the Wiz Preview Feature(s) solely to test their functionality and provide Feedback to Wiz in accordance with these Preview Terms. For the avoidance of doubt, Wiz’s SLA shall not apply to any Wiz Preview Feature(s).
- Fees. Wiz reserves the right to start charging fees for Wiz Preview Feature(s) at any time, including if the Wiz Preview Feature(s) are made widely available. Wiz shall provide Customer with advance notice of any commencement of fees.
- Scope. Wiz has the right, in its sole discretion, to determine what, if any, Wiz Preview Feature(s) will be made available to Customer and to suspend or revoke access to any one or more of the Wiz Preview Feature(s) for any reason or no reason at any time. Wiz has no obligation to make any Wiz Preview Feature widely available.
- Prohibited Use. All Customer restrictions, obligations and/or prohibited uses in the MSA shall apply equally to Customer’s use of Wiz Preview Features. Customer may not modify, distribute, prepare derivative works of, reverse engineer, reverse assemble, disassemble, decompile or otherwise attempt to decipher any code in connection with the Wiz Preview Feature(s), except as expressly permitted in writing by Wiz.
- Feedback and Customer Reference. Customer agrees to provide feedback, suggestions, enhancement requests, and recommendations to Wiz (“Feedback”) regarding the Wiz Preview Feature(s) and a public customer quote, which, subject to Customer’s prior review and written approval, Wiz will have the right to publish on its website/blog and marketing materials. All Feedback and intellectual property rights therein shall be solely owned by Wiz, and Wiz will have the right, without restriction or fee, to use, modify and incorporate such Feedback into the Wiz Preview Feature(s) and other Wiz products or services.
- Intellectual Property. All right, title, and interest, including any intellectual property rights evidenced by or embodied in, attached, connected, and/or related to the Wiz Preview Features (and any and all improvements enhancements, corrections, modifications, alterations, revisions, extensions and updates and derivative works thereof) and any other products, deliverables or services provided by Wiz; are and shall remain owned solely by Wiz. These Preview Terms do not convey any interest in or to the Wiz Preview Features to Customer other than a limited right of use in accordance with these Preview Terms. Nothing herein constitutes a waiver of Wiz’s intellectual property rights under any law and Wiz reserves all rights not expressly granted herein to the Wiz Preview Features.
- Term and Termination. These Preview Terms shall commence on the Effective Date and shall remain in effect for as long as Customer uses the Wiz Preview Feature(s) (the “Term”). Either party may terminate these Preview Terms at any time by providing written notice to the other party. Upon termination or expiration of these Preview Terms, Customer’s limited rights to use the Wiz Preview Features will automatically expire and Customer shall discontinue any further use and access thereof. Sections 2 - 12 shall survive termination or expiry of these Preview Terms.
- Confidential Information. Customer acknowledges and agrees that the Wiz Preview Features (including their existence and functionality) and any other know how, trade secrets, computer programs, source code, flowcharts, diagrams, manuals, schematics, development tools, specifications, design documents, marketing information, financial information, business plans or reports learnt or made available to Customer as part of the Wiz Preview Program is Wiz’s Confidential Information and shall be subject to the confidentiality obligations agreed between the parties in the MSA.
- Third Party Integrations. If applicable, one or more Wiz Preview Features may integrate with third party services. You hereby consent to the sharing of the information in the Wiz Preview Features with these third party services and certify that it has any and all required consents for doing so. You acknowledge and agree that Wiz has no and expressly disclaims all liability for any such third party services.
- Disclaimer of Warranties. Limitation of Liability. THE WIZ PREVIEW FEATURE(S) ARE PROVIDED “AS IS” AND “AS AVAILABLE”. WIZ MAKES NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, REGARDING THE WIZ PREVIEW FEATURE(S), INCLUDING ANY REPRESENTATION THAT THE SERVICES THEREUNDER WILL BE UNINTERRUPTED OR ERROR-FREE. TO THE FULLEST EXTENT PERMITTED UNDER APPLICABLE LAW, WIZ DISCLAIMS ANY IMPLIED OR STATUTORY WARRANTY, INCLUDING ANY IMPLIED WARRANTY OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE IN RESPECT OF THE WIZ PREVIEW FEATURE(S). FOR THE AVOIDANCE OF DOUBT, ALL WIZ PREVIEW FEATURE(S) ARE PRE-RELEASE, ARE EXPECTED TO CONTAIN DEFECTS WHICH MAY BE MATERIAL, AND ARE NOT EXPECTED TO OPERATE AT THE LEVEL OF PERFORMANCE OR COMPATIBILITY OF A FINAL, GENERALLY AVAILABLE PRODUCT OFFERING. WIZ PREVIEW FEATURE(S) MAY NOT OPERATE ACCURATELY AND MAY BE SUBSTANTIALLY MODIFIED PRIOR TO PUBLIC AVAILABILITY OR WITHDRAWN AT ANY TIME. ACCORDINGLY, ACCESS TO AND USE OF THE WIZ PREVIEW FEATURE(S) IS ENTIRELY AT CUSTOMER’S OWN RISK. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN NO EVENT SHALL WIZ BE LIABLE FOR ANY DAMAGE WHATSOEVER, INCLUDING DIRECT, INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE, ARISING OUT OF THE USE OF OR INABILITY TO USE THE WIZ PREVIEW FEATURE(S), EVEN IF WIZ HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CUSTOMER IS HEREBY ADVISED TO SAFEGUARD IMPORTANT DATA, TO USE CAUTION AND NOT TO RELY IN ANY WAY ON THE CORRECT FUNCTIONING OR PERFORMANCE OF ANY WIZ PREVIEW FEATURE(S).
- Governing Law and Jurisdiction. These Preview Terms shall be subject to the governing law and jurisdiction specific in the MSA.
- Miscellaneous. If any provision of these Preview Terms is unenforceable, that provision will be modified to render it enforceable to the extent possible to affect the parties’ intention and the remaining provisions will not be affected. Any failure by a Party to enforce a right under these Preview Terms shall not act as a waiver of that right or the ability to later assert that right relative to the particular situation involved. Wiz reserves the right to modify these Preview Terms from time to time.
Effective August 21, 2023 to August 21, 2023
DownloadTable of Contents
Wiz Preview Terms
These Wiz Preview Terms (the “Preview Terms”) apply to and govern the use of any Wiz Preview Features made available by Wiz and shall apply automatically from the first use of a Wiz Preview Feature (the “Effective Date”).
The Wiz Master Subscription Agreement or other similar agreement relating to Wiz services (“MSA”) entered into between Wiz Inc. (“Wiz”) and the counterparty identified in the MSA (“Customer”) is incorporated by reference and will control for any provisions not specifically addressed in these Preview Terms. The MSA shall remain in full force and effect, however, in the event of any conflict between these Preview Terms and the MSA, these Preview Terms will prevail in relation to Wiz Preview Features.
- License. From time to time, upon Customer or its Permitted Users’ request, Wiz may, in its sole discretion, make available to Customer or its Permitted Users, one or more proprietary, non-commercially available, hosted software applications, application platform interfaces, services, products, features and/or functionalities on a beta testing basis (“Wiz Preview Feature(s)”) to try at no charge. To the extent Wiz does so, Wiz grants Customer a limited, non-exclusive, non-sublicensable, non-transferable and revocable right to access and use the Wiz Preview Feature(s) solely to test their functionality and provide Feedback to Wiz in accordance with these Preview Terms. For the avoidance of doubt, Wiz’s SLA shall not apply to any Wiz Preview Feature(s).
- Fees. Wiz reserves the right to start charging fees for Wiz Preview Feature(s) at any time, including if the Wiz Preview Feature(s) are made widely available. Wiz shall provide Customer with advance notice of any commencement of fees.
- Scope. Wiz has the right, in its sole discretion, to determine what, if any, Wiz Preview Feature(s) will be made available to Customer and to suspend or revoke access to any one or more of the Wiz Preview Feature(s) for any reason or no reason at any time. Wiz has no obligation to make any Wiz Preview Feature widely available.
- Prohibited Use. All Customer restrictions, obligations and/or prohibited uses in the MSA shall apply equally to Customer’s use of Wiz Preview Features. Customer may not modify, distribute, prepare derivative works of, reverse engineer, reverse assemble, disassemble, decompile or otherwise attempt to decipher any code in connection with the Wiz Preview Feature(s), except as expressly permitted in writing by Wiz.
- Feedback and Customer Reference. Customer agrees to provide feedback, suggestions, enhancement requests, and recommendations to Wiz (“Feedback”) regarding the Wiz Preview Feature(s) and a public customer quote, which, subject to Customer’s prior review and written approval, Wiz will have the right to publish on its website/blog and marketing materials. All Feedback and intellectual property rights therein shall be solely owned by Wiz, and Wiz will have the right, without restriction or fee, to use, modify and incorporate such Feedback into the Wiz Preview Feature(s) and other Wiz products or services.
- Intellectual Property. All right, title, and interest, including any intellectual property rights evidenced by or embodied in, attached, connected, and/or related to the Wiz Preview Features (and any and all improvements enhancements, corrections, modifications, alterations, revisions, extensions and updates and derivative works thereof) and any other products, deliverables or services provided by Wiz; are and shall remain owned solely by Wiz. These Preview Terms do not convey any interest in or to the Wiz Preview Features to Customer other than a limited right of use in accordance with these Preview Terms. Nothing herein constitutes a waiver of Wiz’s intellectual property rights under any law and Wiz reserves all rights not expressly granted herein to the Wiz Preview Features.
- Term and Termination. These Preview Terms shall commence on the Effective Date and shall remain in effect for as long as Customer uses the Wiz Preview Feature(s) (the “Term”). Either party may terminate these Preview Terms at any time by providing written notice to the other party. Upon termination or expiration of these Preview Terms, Customer’s limited rights to use the Wiz Preview Features will automatically expire and Customer shall discontinue any further use and access thereof. Sections 2 - 12 shall survive termination or expiry of these Preview Terms.
- Confidential Information. Customer acknowledges and agrees that the Wiz Preview Features (including their existence and functionality) and any other know how, trade secrets, computer programs, source code, flowcharts, diagrams, manuals, schematics, development tools, specifications, design documents, marketing information, financial information, business plans or reports learnt or made available to Customer as part of the Wiz Preview Program is Wiz’s Confidential Information and shall be subject to the confidentiality obligations agreed between the parties in the MSA.
- Third Party Integrations. If applicable, one or more Wiz Preview Features may integrate with third party services. You hereby consent to the sharing of the information in the Wiz Preview Features with these third party services and certify that it has any and all required consents for doing so. You acknowledge and agree that Wiz has no and expressly disclaims all liability for any such third party services.
- Disclaimer of Warranties. Limitation of Liability. THE WIZ PREVIEW FEATURE(S) ARE PROVIDED “AS IS” AND “AS AVAILABLE”. WIZ MAKES NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, REGARDING THE WIZ PREVIEW FEATURE(S), INCLUDING ANY REPRESENTATION THAT THE SERVICES THEREUNDER WILL BE UNINTERRUPTED OR ERROR-FREE. TO THE FULLEST EXTENT PERMITTED UNDER APPLICABLE LAW, WIZ DISCLAIMS ANY IMPLIED OR STATUTORY WARRANTY, INCLUDING ANY IMPLIED WARRANTY OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE IN RESPECT OF THE WIZ PREVIEW FEATURE(S). FOR THE AVOIDANCE OF DOUBT, ALL WIZ PREVIEW FEATURE(S) ARE PRE-RELEASE, ARE EXPECTED TO CONTAIN DEFECTS WHICH MAY BE MATERIAL, AND ARE NOT EXPECTED TO OPERATE AT THE LEVEL OF PERFORMANCE OR COMPATIBILITY OF A FINAL, GENERALLY AVAILABLE PRODUCT OFFERING. WIZ PREVIEW FEATURE(S) MAY NOT OPERATE ACCURATELY AND MAY BE SUBSTANTIALLY MODIFIED PRIOR TO PUBLIC AVAILABILITY OR WITHDRAWN AT ANY TIME. ACCORDINGLY, ACCESS TO AND USE OF THE WIZ PREVIEW FEATURE(S) IS ENTIRELY AT CUSTOMER’S OWN RISK. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN NO EVENT SHALL WIZ BE LIABLE FOR ANY DAMAGE WHATSOEVER, INCLUDING DIRECT, INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE, ARISING OUT OF THE USE OF OR INABILITY TO USE THE WIZ PREVIEW FEATURE(S), EVEN IF WIZ HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CUSTOMER IS HEREBY ADVISED TO SAFEGUARD IMPORTANT DATA, TO USE CAUTION AND NOT TO RELY IN ANY WAY ON THE CORRECT FUNCTIONING OR PERFORMANCE OF ANY WIZ PREVIEW FEATURE(S).
- Governing Law and Jurisdiction. These Preview Terms shall be subject to the governing law and jurisdiction specific in the MSA.
- Miscellaneous. If any provision of these Preview Terms is unenforceable, that provision will be modified to render it enforceable to the extent possible to affect the parties’ intention and the remaining provisions will not be affected. Any failure by a Party to enforce a right under these Preview Terms shall not act as a waiver of that right or the ability to later assert that right relative to the particular situation involved. Wiz reserves the right to modify these Preview Terms from time to time.
Tech Integration Agreement
Effective September 21, 2023
DownloadTable of Contents
WIZ TECH INTEGRATION AGREEMENT
This WIZ TECH INTEGRATION AGREEMENT (the “Agreement”) is entered into on the date of the last signature below (the “Effective Date”), by and between:
- Wiz Inc., a company incorporated under the laws of the State of Delaware, having its principal place of business at One Manhattan West, 57th Floor, New York, NY 10001 (the “Wiz”); and
- the entity named in the box below (the “Partner”)
Partner Company Name | |
Registered Address | |
Partner Product for Integration[1] | |
Partner Contact | |
Partner Contact Email | |
Partner Technical Support Contact | |
Partner Technical Support Email |
	 (each, a “Party” and collectively, the “Parties”)
- INTEROPERABILITY AND VALIDATION
- The Parties wish to achieve product interoperability and integration between the Wiz Cloud Security Platform (“Wiz Platform”) and the Partner Product(s) identified in the table on page 1 above (“Partner Products”) via the Wiz integration APIs made available by Wiz to Partner, (“Wiz Integration API” together with the Wiz Platform, the “Wiz Products”, the Wiz Products together with the Partner Products, shall be referred to as the “Products”). Following the Effective Date, Partner shall be granted access to the Wiz partner portal (“Wiz Partner Portal”) including the Wiz integration documentation which sets forth the technical requirements for building the integration (“Wiz Integration Documentation”) which shall be incorporated by reference to this Agreement and Partner agrees to adhere to the requirements set forth in such Wiz Integration Documentation.
- In order to obtain validation and certification by Wiz for such integration, Partner must complete the certification process as defined at https://www.wiz.io/integrations/apply, which shall include demonstration and testing of how the Partner Products operate with the Wiz Products. Within 90 days of the Effective Date, Partner shall provide Wiz with the queries that Partner shall use on top of the Wiz Integration API in order to allow Wiz to ensure that Partner’s use of the API queries meets Wiz’s Integration API best practices. If Partner does not complete the validation and certification within 90 days from the day Partner has been granted access to the Wiz Integration API or refuses to co-operate with Wiz, Wiz shall have the right to terminate this Agreement immediately upon written notice to Partner by email to the Partner contact email specified in the table on page 1 above.
- Interoperability validation shall be confirmed by Wiz in writing and shall only apply to the Partner Products that were tested in accordance with this section. Wiz reserves the right to reject Partner in its sole discretion if Partner does not meet Wiz’s criteria or for any other reason at Wiz’s discretion. If Partner conforms to Wiz’s criteria, Wiz shall certify Partner as “Certified”.
- Once successful product interoperability and integration has been achieved and Partner has been certified by Wiz, the Parties may engage in mutually agreed-upon sales and marketing activities for the purpose of identifying business opportunities for both Parties as further described in this Agreement and subject to section 6.5.
- If either Party releases a new version of a Product that requires revalidation of interoperability, the Parties shall work together to complete such testing of the new product version as required and each Party agrees to contribute reasonable technical resources for such purpose.
- Partner shall be responsible for supporting and maintaining the integration contemplated herein.
- Either Party may engage subcontractors and involve Affiliates to perform its obligations under this Agreement provided that each Party remains fully responsible and liable for the performance of its subcontractors and Affiliates. Each Party shall bind its subcontractors and Affiliates to terms and conditions necessary to ensure such subcontractor’s and Affiliate’s compliance with the duties and obligations in this Agreement.
- LIMITED LICENSE.
- License by Partner. Subject to the terms of this Agreement, Partner hereby grants to Wiz and its Affiliates a non-exclusive, non-transferable, non-sub-licensable, revocable and limited license to use the Partner Products during the Term of this Agreement, solely internally for the purpose of making the Partner Product(s) interoperable with the Wiz Product(s). “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with the subject entity. “Control”, for purposes of this definition, means direct or indirect ownership or control of more than 50% of the voting interests of the subject entity.
- License by Wiz. Subject to the terms of this Agreement, Wiz hereby grants to Partner a non-exclusive, non-transferable, non-sub-licensable, revocable and limited license to use the Wiz Integration API and Wiz Integration Documentation during the Term of this Agreement, solely internally for the purpose of making the Partner Product(s) interoperable with the Wiz Platform.
- Open Source. Any open source software that may be provided with either Party’s Products (including APIs) is licensed and distributed under the terms and conditions of the applicable open source software license accompanying the open source software or set forth in the open source licenses (“Open Source Terms”). Each Party may use such open source software pursuant to the Open Source Terms.
- PROHIBITED USES.
- Unless expressly permitted by a Party in writing in advance, a Party may not use the other Party’s Products for production or commercial purposes or to test or build a competitive product. For the avoidance of doubt, this Agreement governs all uses of each Party’s products by the other Party for the purposes of making the Products interoperable and supersedes any other license agreement, including any click-through terms on either Party’s websites or otherwise.
- Wiz and Partner each agree that they will not, and will not permit any third party to, without the other Party’s prior written consent in each case: (a) use the other Party’s Products in any manner not authorized by the applicable product documentation or applicable laws, or in a way that could create an unreasonable risk from a security or data privacy perspective, (b) distribute, lease, license, sublicense or otherwise disseminate the other Party’s Products to any third party (except as specifically allowed under this Agreement); (c) modify, enhance, create derivative works from, reverse engineer, disassemble, decompile or otherwise reduce the other Party’s Products to human-readable form or attempt to derive the source code, methodology, analysis, or results of the other Party’s Products; (d) use the other Party’s Products in a business production mode, as an end-use product, or use any third-party software embedded in or bundled with the other Party’s Product as a standalone program or in any way independently from other Party’s Product, as applicable; (e) reproduce or make more than a reasonable number of copies of the other Party’s Products; or (f) use the other Party’s Product for commercial purposes or to test a competitive product; (g) disclose, publish or otherwise make publicly available any benchmark, performance or comparison tests that a Party (or a third party contracted by the Party) runs on the other Party’s Products, in whole or in part; (h) remove, modify, or conceal any product identification, copyright, proprietary, intellectual property notices or other such marks on or within the other Party’s Product; (i) use the other Party’s Product to store or transmit infringing, libelous, or otherwise unlawful or tortious material, to store or transmit material in violation of third-party privacy or intellectual property rights, or to conduct any fraudulent or other unlawful activity; (j) interfere with, disrupt the integrity or performance of, or attempt to gain unauthorized access to the other Party’s Product, their related systems or networks, or any third-party data contained therein. Both Parties shall reproduce any copyright notices, legends and proprietary marking on any authorized copy of the other Party’s Products.
- In addition, Partner acknowledges and agrees that: (a) Partner shall only use Wiz’s official Integration APIs as provided in the Wiz Integration Documentation; and (b) it shall only provide access to the Wiz Partner Portal, Wiz Integration Documentation and Wiz Integration API to its employees or service providers on a need to know basis (“Permitted Users”). Partner will ensure that the Permitted Users comply with the terms of this Agreement and shall be fully responsible for any breach of this Agreement by a Permitted User. Partner and its Permitted Users shall not share user credentials to the Wiz Partner Portal with any third party and Partner shall promptly notify Wiz upon becoming aware of any breach of this section which shall be grounds for immediate termination of access to the Wiz Partner Portal and this Agreement by Wiz.
- Any rights not expressly granted herein are deemed reserved and neither Party shall make any other use of the other Party’s Products other than as expressly permitted in this Agreement.
- Wiz may refuse Partner’s access to Wiz Products and/or Wiz Integration Documentation and may delist the integration contemplated hereunder, where, acting reasonably and in good faith, Wiz knows or suspects that such access would violate the terms and conditions of this Agreement (including where Wiz knows or suspects that Partner may have been compromised by a malicious actor). In such circumstances, Wiz shall promptly inform Partner in writing of such refusal of access and/or delisting unless prohibited by applicable law or where Wiz reasonably believes that providing such notice poses a risk to the security of its customers or other Products. Wiz will promptly reinstate Partner’s access and use once the issue has been resolved.
- TITLE AND OWNERSHIP.
- Each Party acknowledges that the other Party and its licensors retain all right, title and interest in and to their respective Products including user manuals and other written materials for the Products and any other materials which are owned by either Party prior to beginning any work under this Agreement and which are not generated in the course of performing this Agreement, including any derivatives, enhancements, improvements or modifications thereof (together “Background Works”) and all intellectual property rights embodied in the Background Works. Except for the limited rights expressly granted herein, this Agreement does not transfer title of a Party’s Background Works from either Party to the other Party or to any third party, and all right, title and interest in and to either Parties’ Background Works will at all times remain solely and exclusively with the respective Party. Neither Party shall take any action inconsistent with such title and ownership.
- Subject to section 4.1 above, each Party shall own any developed work which is produced by that Party in order to fulfil the interoperation of the Party’s Products or otherwise to fulfil the objectives of this Agreement and such developed work shall not be deemed a “work made for hire”. Each Party hereby grants to the other Party a non-exclusive, non-transferable, non-sub-licensable, revocable and limited license to use any of such developed work solely for purposes of and to the extent necessary to perform its obligations under this Agreement during the Term of this Agreement. Notwithstanding the foregoing, if the Parties or each Party develops such works pursuant to Open Source Terms, then such works will be licensed under the applicable Open Source Terms.
- During the course of their relationship, each Party may have opportunity to provide feedback to the other Party regarding the other Party’s Products. Each Party hereby assigns to the other Party all rights, title to and interest to such feedback it supplies to the other Party, including all intellectual property rights therein, provided that such feedback shall not contain any Confidential Information of the other Party. Each Party agrees to assist the other with and sign any and all documentation to secure those rights.
- SUPPORT.
Each Party shall provide support for its own Product to its own customers according to such Party’s standard business practices. Notwithstanding the foregoing, the Parties agree to work together to jointly resolve any integration issues identified by mutual customers. Partner agrees to provide support during normal business hours to Wiz or mutual customers with issues concerning interoperability of the Products and agrees to respond to any support requests from Wiz or mutual customers within 3 business days of receipt. Any support provided herein shall be at no cost to either Party. Partner’s point of contact for such support requests is set out in the table on page 1.
- JOINT MARKETING AND SALES ACTIVITIES.
- Once interoperability has been achieved, the Parties may jointly develop a marketing and promotions plan (the “Marketing Plan”) including to notify each other’s customers of the relationship between the Parties and develop qualified sales opportunities. The Marketing Plan must be mutually agreed by both Parties in writing prior to either Party taking any action and each Party will use commercially reasonable efforts to implement the Marketing Plan.
- In furtherance of marketing the Products and services of the other Party, each Party shall:
- Avoid deceptive, misleading, misrepresentative, illegal, or unethical practices that may be detrimental to the other Party or to the Products and services of such other Party;
- Not make any representations, warranties, or guarantees to customers concerning the other Party’s Products or services that are inconsistent with or in addition to those made in this Agreement or the Marketing Plan; and
- Comply with all applicable international, federal, state and local laws and regulations, including privacy and data protection laws, in performing marketing activities and its duties with respect to its own Products and services.
- Each Party shall obtain the other Party’s prior written approval in each case for all publicity concerning the other Party including, but not limited to, any press release, marketing statements or sales materials.
- Notwithstanding the foregoing, it is agreed and understood that either Party shall have unrestricted rights to pursue any business or sales opportunity alone or with any third parties. The Parties agree that this Agreement does not authorize or require either Party to sell the other Party’s Products. The Parties agree that neither Party shall earn or pay any type of commission or revenue share or other compensation in connection with sales referrals made under this Agreement unless mutually agreed by the Parties in writing.
- To the extent that the Parties share or disclose personal data or information of potential or actual customers (“Prospect Information”) with each other in connection with joint marketing activities under this Agreement: (i) the Privacy Addendum set forth at https://www.wiz.io/legal/privacy-addendum shall apply; (ii) each Party will treat Prospect Information provided by the other as Confidential Information; and (iii) will only share or use such Prospect Information under this Agreement in accordance with the Agreement and applicable laws, including privacy and data protection laws. Without limiting the foregoing, each Party will be solely responsible for any Prospect Information it elects to provide to the other Party, including providing any required notices to, and receiving any required consents and authorizations from, the prospects, customers and individuals that are the subjects of such Prospect Information.
- TRADEMARK LICENSE.
- Subject to the terms of this Agreement and any additional policies and instructions identified by a Party with respect to the use of its Marks, once validation and certification has been confirmed by Wiz to Partner in writing, each Party grants to the other Party and its Affiliates a limited, revocable, non-exclusive, non-transferable, royalty-free license for the Term of this Agreement to use the other Party’s trademarks, trade names and/or logos (“Marks”) solely in connection with the integration of the Party’s Products in accordance with this Agreement.
- Each Party maintains exclusive title to its Marks and retains all rights not explicitly granted by the Agreement. Neither Party will: (i) challenge or take any action which interferes with the other Party’s rights in its Marks; (ii) directly or indirectly use any Marks or any mark or name confusingly similar to any Marks of the other Party, as part of its business names or in any manner except as explicitly authorized by the other Party; (iii) register or attempt to register any trademark, any part of trademark, or any mark or name confusingly similar to any of the other Party’s Marks. Each Party shall have the right to object to and thereby prohibit the use of its Marks on or in any materials at any time in its sole discretion, provided that if Partner prohibits the use of its Marks by Wiz after certification has been achieved, Wiz shall not be obligated to provide Partner with any support and may, at its discretion, terminate this Agreement immediately upon written notice to Partner by email. If the Party owning the Marks notifies the other Party that the use of the Marks is not in compliance with the Mark owner’s policies or is otherwise in breach of this Agreement, then the Party using the Marks will promptly take such reasonable corrective action as directed by the Mark owner. All of the benefit and goodwill associated with the use of the Marks will inure entirely to the Mark owner. Either Party may terminate its trademark license if, in its reasonable discretion, the other Party’s use of one or more of its Marks tarnishes, blurs or dilutes the quality associated with the Marks or the associated goodwill.
- EXPENSES.
Each Party shall bear its own costs and expenses incurred in performing its obligations under this Agreement, unless otherwise agreed by the Parties in writing.
Each Party represents and warrants to the other Party that it has the right to enter into this Agreement, and that this Agreement constitutes a valid binding obligation of such Party, enforceable against such Party in accordance with its terms and does not conflict with or violate any agreements such Party has with any third party. EACH OF THE WIZ PRODUCTS AND PARTNER PRODUCTS IS PROVIDED “AS IS” WITHOUT WARRANTY AND EACH PARTY HEREBY DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, INCLUDING BUT NOT LIMITED TO ANY IMPLIED WARRANTY OF PRODUCT LIABILITY, MERCHANTABILITY, NON-INFRINGEMENT OF THIRD-PARTY RIGHTS, FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR PERFORMANCE.
- CONFIDENTIALITY.
- Each Party and its Affiliates may have access to non-public information of the other Party or its Affiliates, in any form or media, including without limitation, trade secrets and other information related to the products, software, technology, intellectual property, testing results, data, know-how, customers or prospective customers or business of the other Party, and any other information that a reasonable person should have reason to believe is proprietary, confidential, or competitively sensitive (the “Confidential Information”). For the avoidance of doubt, the Wiz Integration API and all information in the Wiz Partner Portal including the Wiz Integration Documentation are Wiz’s Confidential Information. In addition, to the extent the Parties share information with each other regarding customers or prospective customers, such information, and the existence of such discussions between the Parties shall be treated as Confidential Information. The receiving Party’s obligations under this section, with respect to any Confidential Information of the disclosing Party, shall not apply to and/or shall terminate if such information: (a) was already lawfully known to the receiving Party at the time of disclosure by the disclosing Party; (b) was disclosed to the receiving Party by a third party who had the right to make such disclosure without any confidentiality restrictions; (c) is, or through no fault of the receiving Party has become, generally available to the public; or (d) was independently developed by the receiving Party without access to, or use of, the disclosing party’s Confidential Information, as evidenced by written records.
- The receiving Party will use the same standard of care to protect the disclosing Party’s Confidential Information as it uses to protect its own Confidential Information, but no less than reasonable care. Neither Party shall use or disclose the Confidential Information of the other Party except for as reasonably necessary for performance of its obligations under this Agreement. The receiving Party shall only permit access to the disclosing Party’s Confidential Information to its and/or its Affiliates’ respective employees, consultants, subcontractors and advisors having a need to know such information, and who are bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement (such recipients being “Authorized Recipients”). The receiving Party is responsible for the compliance of its Authorized Recipients with the confidentiality and non-disclosure obligations of this Agreement and shall notify the other Party immediately upon becoming aware of any unauthorized access or use of the other Party’s Confidential Information. The receiving Party will be allowed to disclose Confidential Information to the extent that such disclosure is required by law or by the order or a court of similar judicial or administrative body, provided that, to the extent permitted by applicable law, it notifies the disclosing Party of such required disclosure to enable disclosing Party to seek a protective order or otherwise prevent or restrict such disclosure. Notwithstanding the foregoing, each Party can disclose the terms and existence of this Agreement to third parties in connection with a due diligence subject to such third parties being bound by at least equivalent obligations of confidentiality and non-disclosure as those under this Agreement.
- Unless otherwise agreed by the Parties, upon (a) the disclosing Party’s request (but only if such Confidential Information is not required to exercise a right or perform an obligation under this Agreement); or, (b) in any event, termination or expiration of this Agreement, each Party will return or destroy (and certify such destruction upon request of the disclosing Party) the Confidential Information of the other Party, and all copies thereof, in its possession or control, except such Confidential Information as is necessary to continue performing any obligations or exercising any rights that survive termination or expiration of this Agreement or as otherwise required to comply with applicable laws. The obligation to return or destroy all copies of Confidential Information does not extend to automatically generated copies which may still exists on servers and back-ups for a reasonable period in line with industry standards provided that the receiving Party shall make no further use of those copies and that the confidentiality obligations herein shall continue to apply until the Confidential Information is fully destroyed.
- All Confidential Information and any derivatives thereof are and shall remain the exclusive property of the disclosing Party and no rights, interests or license, are granted or implied hereby to have been granted to the receiving Party. Each Party acknowledges and agrees that its products and services contain proprietary information and trade secrets of the owner of the products and services. Each Party will not use any Confidential Information that it gains through use or study of the other Party’s products and services to facilitate its or any third party’s development of any software programs or other products that would compete with the other Party’s products and services. Notwithstanding the foregoing, each Party hereby acknowledges and agrees that the other Party may currently or in the future be developing information internally, or receiving information from other parties, that is similar to the Confidential Information of the disclosing Party. Accordingly, nothing in this Agreement will be construed as a representation or agreement that either Party will not develop or have developed products, services, concepts, systems or techniques that are similar to or compete with the products, concepts, systems or techniques contemplated by or embodied in the Confidential Information, provided that the receiving Party does not violate any of its obligations under this Agreement in connection with such development.
- Each Party acknowledges that a breach by the other Party of any confidentiality or proprietary rights provision of this Agreement may cause the non-breaching Party irreparable damage, for which the award of damages would not be adequate compensation. Consequently, the non-breaching Party may seek an action to enjoin the breaching Party from any and all acts in violation of those provisions, which remedy shall be cumulative and not exclusive, and a Party may seek the entry of an injunction enjoining any breach or threatened breach of those provisions, in addition to any other relief to which the non-breaching Party may be entitled at law or in equity.
- INDEMNIFICATION.
- Each Party (“Indemnifying Party”) will indemnify, defend and hold harmless the other Party, its Affiliates, directors and employees (collectively “Indemnified Party”) against any and all claims made by any third parties and all related losses, liabilities, damages, costs and expenses (including without limitation reasonable attorneys’ fees) directly resulting from any such claims that Indemnified Party’s use of the Indemnifying Party’s Products or integration contemplated hereunder as authorized by this Agreement violates, misappropriates or infringes upon the patent, copyright, trademark, trade secret, or other proprietary rights of any third party.
- The Indemnified Party will promptly notify Indemnifying Party promptly of any such claims, suits, and proceedings in writing. Indemnifying Party will be given full and complete authority and information for the defense and settlement of the claim provided that Indemnifying Party will have no authority to enter into any settlement or compromise which imposes any obligation or admits any guilt on behalf of Indemnified Party without the prior written consent of Indemnified Party, which shall not be unreasonably withheld. At Indemnifying Party’s request, Indemnified Party will reasonably cooperate with Indemnifying Party in defending or settling any such action.
- Notwithstanding the foregoing, a Party will have no obligation under this section or otherwise with respect to any infringement claim to the extent based upon or it relates to: (i) any use of the other Party’s Products not in accordance with this Agreement or the relevant product documentation; (ii) any use of the other Party’s Products in combination with other products, hardware, equipment, software, or data not authorized in writing by such Party to be used with the technology; (iii) any modification of the other Party’s Products by any person other than other Party or its authorized agents or subcontractors; (iv) Indemnified Party’s gross negligence or willful misconduct, or (v) any refusal of Indemnified Party to use a non-infringing version of Product or integration contemplated hereunder or any part thereof (including any update, if such infringement could have been avoided by use of the most recent update) offered by Indemnifying Party at no cost to Indemnified Party. THIS SECTION STATES THE INDEMNIFYING PARTY’S ENTIRE LIABILITY AND THE INDEMNIFIED PARTY’S EXCLUSIVE REMEDY FOR INFRINGEMENT CLAIMS AND ACTIONS.
- LIMITATION OF LIABILITY.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:
- EXCEPT FOR ANY DAMAGES ARISING OUT OF A PARTY’S: (1) GROSS NEGLIGENCE, WILLFUL MISCONDUCT OR FRAUDULENT ACT, (2) MISAPPROPRIATION OR OTHERWISE VIOLATION OF THE OTHER PARTY’S INTELLECTUAL PROPERTY RIGHTS, OR (3) BREACH OF ITS CONFIDENTIALITY OBLIGATIONS HEREIN, NEITHER PARTY OR ITS AFFILIATES SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR ANY LOSS OF REVENUE, REPUTATION, OR PROFITS, DATA, OR DATA USE.
- EXCEPT FOR ANY DAMAGES ARISING OUT OF A PARTY’S: (1) GROSS NEGLIGENCE, WILLFUL MISCONDUCT OR FRAUDULENT ACT, (2) INDEMNIFICATION OBLIGATIONS IN THIS AGREEMENT, (3) MISAPPROPRIATION OR OTHERWISE VIOLATION OF THE OTHER PARTY’S INTELLECTUAL PROPERTY RIGHTS, OR (4) BREACH OF ITS CONFIDENTIALITY OBLIGATIONS HEREIN, THE MAXIMUM LIABILITY OF EACH PARTY FOR ALL DAMAGES OR ALLEGED DAMAGES ARISING OUT OF OR RELATED TO THIS AGREEMENT, WHETHER IN CONTRACT, TORT OR OTHERWISE, IS LIMITED TO, AND SHALL IN NO EVENT EXCEED, IN THE AGGREGATE, USD $1,000.
- TERM AND TERMINATION.
- Term. Unless terminated earlier as provided herein, the Term of this Agreement shall be one (1) year and will automatically renew for consecutive one (1) year term(s) (together, the “Term”) unless otherwise terminated in accordance with this section.
- Termination for Convenience. This Agreement may be terminated for convenience by a Party providing the other Party thirty (30) days prior written notice. Any accrued rights and obligations will survive termination.
- Termination for Cause. Either Party may immediately terminate this Agreement upon notice to the other Party if the other Party: (i) materially breaches this Agreement and, to the extent such breach is curable, fails to cure such breach within 30 days after receiving notice of the breach from the other Party, or (ii) commences bankruptcy or dissolution proceedings, has a receiver appointed for a substantial part of its assets, or ceases to operate in the ordinary course of business. Any accrued rights and obligations will survive termination.
- Effect of termination. Upon expiration or termination of this Agreement (a) all rights and obligations granted to each Party by the other Party hereunder shall immediately cease; (b) neither Party shall have the right to represent itself as a partner of the other Party; (c) each Party shall remove all references of the other Party from its website and marketing materials, and shall cease all use of the other Party’s Marks; and (d) within thirty (30) days, each Party shall return to the other Party and destroy all Products or other materials in its possession or control that belong to the other Party and shall certify compliance with this section upon request.
- Survival. Sections 3 (Prohibited Uses), 4 (Title and Ownership), 8 (Expenses), 9 (Limited Warranty) 10 (Confidentiality), 11 (Indemnity), 12 (Limitation of Liability), 13 (Term and Termination) and 14 (Miscellaneous) shall survive termination or expiration of this Agreement
- MISCELLANEOUS.
- Relationship of Parties. The Parties expressly agree that they are independent contractors under this Agreement and no other relationship is intended, including without limitation a partnership, franchise, joint venture, agency, employer/employee, fiduciary, master/servant relationship, or other special relationship. Neither Party shall have any right or authority to assume, create, or incur any liability or any obligation on behalf of the other Party. Neither Party shall take any action that expresses or implies a relationship other than that of independent contractor.
- No Third Party Beneficiaries. Unless otherwise expressly provided, no provisions of this Agreement are intended or shall be construed to confer upon or give to any person or entity other than Partner and Wiz any rights, remedies or other benefits under or by reason of this Agreement.
- Notices. All notices which are required to be given pursuant to this Agreement shall be in writing and shall be sent by overnight courier to the address listed on page 1, with receipt acknowledged, or by email with an electronic proof of transmission. In respect of Wiz, notices may be sent by email to legalnotices@wiz.io. Notices shall be deemed to have been delivered at the time delivered by overnight courier and transmitted by email.
- Force Majeure. Nonperformance by either Party will be excused to the extent that performance is rendered impossible by strike, fire, flood, riots, terrorism, governmental acts or orders or restrictions, or any other reason where failure to perform is beyond the reasonable control of the nonperforming Party and not caused by the negligence of the nonperforming Party.
- Assignment. Neither Party may assign its rights or obligations under this Agreement without the prior written consent of the other Party, which consent may not be unreasonably withheld or delayed. Notwithstanding the foregoing, this Agreement may be assigned by either Party to its Affiliate or in connection with a merger, consolidation, sale of all of the equity interests of the Party, or a sale of all or substantially all of the assets of the Party to which this Agreement relates, provided in any event that the assignee or successor agrees to be bound by all of the terms and conditions of this Agreement. Subject to the foregoing, this Agreement will be binding on the parties and their permitted successors and assigns.
- Export. Each Party represents and warrants that such Party, its Affiliates, or any director or officer thereof, is, or is owned or controlled by individuals or entities that are: (i) the target of any sanctions administered or enforced by the U.S. Department of the Treasury Office of Foreign Asset Control (“OFAC”), the U.S. State Department or any other U.S. government agency or department, the United Nations Security Council, the European Union or Her Majesty Treasury and/or the target of any Israeli sanctions (collectively, “Sanctions”), or (ii) located, organized or resident in a country or territory that is the subject of comprehensive territorial Sanctions. Each Party acknowledges that any use of its Products and services (the “Product Usage”) may not be provided to or used by any person in any of the countries that are subject to comprehensive economic sanctions under the EAR, OFAC, or Israeli regulations, which currently include Crimea, Donetsk and Luhansk - regions of Ukraine, Cuba, Iran, North Korea, and Syria. Moreover, each Party shall not allow and fully restrict any usage relating to its Products and services from persons identified on any Sanctions list, including but not limited to OFAC’s Specially Designated Nationals and Blocked Parties List (the “SDN List”), entities owned 50% or more by any individuals or entities on the SDN List, or individuals or entities that are located in any comprehensively sanctioned country. Each Party shall be responsible for complying with all applicable laws in connection with its use of the Products including, but not limited to, U.S. Export Administration Regulations, any other export laws, restrictions, and regulations to ensure that the products and any technical data related thereto is not exported or re-exported, directly or indirectly, in violation of or used for any purposes prohibited by such laws and regulations.
- Compliance with Laws & Data Protection. Each Party will comply with its respective legal obligations in exercising its rights and performing its duties under this Agreement including complying with all applicable international, federal, state and local laws and regulations, including all applicable data privacy, data protection and data security laws and regulations. The Parties agree that, for the purposes of the GDPR and any equivalent data protection laws, there is no controller-processor relationship between Wiz and Partner with regards to either Party’s customers’ personal data shared via the integration contemplated hereunder or personal data of usersof the Wiz Partner Portal. In the event the Parties are required to enter into additional agreements to comply with applicable laws, including to put in place adequate data transfer mechanisms such as Standard Contractual Clauses, Partner agrees to execute such additional agreements as needed.
- Waiver, Severability and Modification. The failure of either Party to enforce any rights granted hereunder or to take action against the other Party in the event of any breach hereunder shall not be deemed a waiver by that Party as to subsequent enforcement of rights or subsequent actions in the event of future breaches. If any provision of this Agreement is held to be unenforceable, such provision shall be reformed only to the extent necessary to make it enforceable and will have no effect on the remainder of this Agreement. Any waiver, amendment or other modification of any provision of this Agreement will be effective only if in writing and signed by the Parties.
- Governing Law and Jurisdiction. This Agreement will be governed by and construed in accordance with the laws of New York, not including its law of conflicts of laws. The Parties irrevocably consent to the exclusive jurisdiction of the courts of Manhattan, New York, over any action, suit or proceeding arising hereunder.
- Entire Agreement. This Agreement, including all exhibits or terms that are incorporated herein by reference, constitutes the entire agreement between the Parties with respect to the subject matter hereof, and supersedes and replaces all prior and contemporaneous understandings or agreements, written or oral, regarding such subject matter, including prior non-disclosure agreements. Notwithstanding the foregoing, Wiz may make available other optional products, services, features or cooperation, which may be subject to additional terms to which Partner will be required to agree and to additional fees which Customer may be required to pay before being permitted to use such products, services, features or participate in such cooperation.
- Counterparts. This Agreement may be executed in electronic counterparts, each of which shall be an original and together which shall constitute one and the same instrument.
If no Partner product has been identified above, then the presumption shall be that the Parties intend to achieve interoperability between the selected Wiz Products and any and all Partner Product(s). If a specific Partner product has been identified above, Wiz and Partner may mutually agree to integrate other Products which shall be subject to the terms of this Agreement. ↑
Effective September 21, 2023 to September 21, 2023
DownloadTable of Contents
WIZ TECH INTEGRATION AGREEMENT
This WIZ TECH INTEGRATION AGREEMENT (the “Agreement”) is entered into on the date of the last signature below (the “Effective Date”), by and between:
- Wiz Inc., a company incorporated under the laws of the State of Delaware, having its principal place of business at One Manhattan West, 57th Floor, New York, NY 10001 (the “Wiz”); and
- the entity named in the box below (the “Partner”)
Partner Company Name | |
Registered Address | |
Partner Product for Integration[1] | |
Partner Contact | |
Partner Contact Email | |
Partner Technical Support Contact | |
Partner Technical Support Email |
(each, a “Party” and collectively, the “Parties”)
Each Party shall provide support for its own Product to its own customers according to such Party’s standard business practices. Notwithstanding the foregoing, the Parties agree to work together to jointly resolve any integration issues identified by mutual customers. Partner agrees to provide support during normal business hours to Wiz or mutual customers with issues concerning interoperability of the Products and agrees to respond to any support requests from Wiz or mutual customers within 3 business days of receipt. Any support provided herein shall be at no cost to either Party. Partner’s point of contact for such support requests is set out in the table on page 1.
Each Party shall bear its own costs and expenses incurred in performing its obligations under this Agreement, unless otherwise agreed by the Parties in writing.
Each Party represents and warrants to the other Party that it has the right to enter into this Agreement, and that this Agreement constitutes a valid binding obligation of such Party, enforceable against such Party in accordance with its terms and does not conflict with or violate any agreements such Party has with any third party. EACH OF THE WIZ PRODUCTS AND PARTNER PRODUCTS IS PROVIDED “AS IS” WITHOUT WARRANTY AND EACH PARTY HEREBY DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, INCLUDING BUT NOT LIMITED TO ANY IMPLIED WARRANTY OF PRODUCT LIABILITY, MERCHANTABILITY, NON-INFRINGEMENT OF THIRD-PARTY RIGHTS, FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR PERFORMANCE.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:
(1) If no Partner product has been identified above, then the presumption shall be that the parties intend to achieve interoperability between the selected Wiz Products and any and all Partner Product(s). If a specific Partner product has been identified above, Wiz and Partner may mutually agree to integrate other Products which shall be subject to the terms of this Agreement. ↑
Effective August 21, 2023 to September 21, 2023
DownloadTable of Contents
WIZ TECH INTEGRATION AGREEMENT
This WIZ TECH INTEGRATION AGREEMENT (the “Agreement”) is entered into on the date of the last signature below (the “Effective Date”), by and between:
- Wiz Inc., a company incorporated under the laws of the State of Delaware, having its principal place of business at One Manhattan West, 57th Floor, New York, NY 10001 (the “Wiz”); and
- the entity named in the box below (the “Partner”)
Partner Company Name | |
Registered Address | |
Partner Product for Integration[1] | |
Partner Contact | |
Partner Contact Email | |
Partner Technical Support Contact | |
Partner Technical Support Email |
(each, a “Party” and collectively, the “Parties”)
IN WITNESS HEREOF, the Parties have caused this Agreement to be executed by their duly authorized representatives to be effective as of the Effective Date.
WIZ, INC. | PARTNER |
Signature | Signature |
Name | Name |
Title | Title |
Date | Date |
Each Party shall provide support for its own Product to its own customers according to such Party’s standard business practices. Notwithstanding the foregoing, the Parties agree to work together to jointly resolve any integration issues identified by mutual customers. Partner agrees to provide support during normal business hours to Wiz or mutual customers with issues concerning interoperability of the Products and agrees to respond to any support requests from Wiz or mutual customers within 3 business days of receipt. Any support provided herein shall be at no cost to either Party. Partner’s point of contact for such support requests is set out in the table on page 1.
Each Party shall bear its own costs and expenses incurred in performing its obligations under this Agreement, unless otherwise agreed by the Parties in writing.
Each Party represents and warrants to the other Party that it has the right to enter into this Agreement, and that this Agreement constitutes a valid binding obligation of such Party, enforceable against such Party in accordance with its terms and does not conflict with or violate any agreements such Party has with any third party. EACH OF THE WIZ PRODUCTS AND PARTNER PRODUCTS IS PROVIDED “AS IS” WITHOUT WARRANTY AND EACH PARTY HEREBY DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, INCLUDING BUT NOT LIMITED TO ANY IMPLIED WARRANTY OF PRODUCT LIABILITY, MERCHANTABILITY, NON-INFRINGEMENT OF THIRD-PARTY RIGHTS, FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR PERFORMANCE.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:
(1) If no Partner product has been identified above, then the presumption shall be that the parties intend to achieve interoperability between the selected Wiz Products and any and all Partner Product(s). If a specific Partner product has been identified above, Wiz and Partner may mutually agree to integrate other Products which shall be subject to the terms of this Agreement. ↑
Wiz Privacy Addendum
Effective September 11, 2023
DownloadTable of Contents
- Definitions.
- “Controller” or “Business” as relevant under applicable Data Protection Laws, means the entity which determines the purposes and means of the Processing of Personal Data or such equivalent term under Data Protection Laws.
- “Data Protection Laws” means all laws and regulations relating to data protection, security and privacy, including but not limited to the laws and regulations of the European Union, the EEA and their Member States, Switzerland, the United Kingdom, and the United States, each to the extent applicable to the Parties’ Processing of Personal Data under the Agreement.
- “Disclosing Party” the Party that discloses or shares Personal Data to the other Party under the Agreement.
- “EEA” means the European Economic Area.
- “Extended EEA Country” means a country within the EEA, Switzerland or the United Kingdom, and Extended EEA Countries means the foregoing countries collectively.
- “Member State(s)” means a country that belongs to the European Union and/or the EEA.
- “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier or such equivalent term under Data Protection Laws. For the purposes of this Addendum, Personal Data refers to Personal Data that is shared or disclosed between the Parties under the Agreement.
- “Standard Contractual Clauses” or “SCCs” means the “standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council adopted by the European Commission decision of 4 June 2021” and published under document number C (2021) 3972 available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=en and as may be otherwise amended or updated from time to time.
- “Receiving Party” the Party that receives or shares Personal Data from the other Party under the Agreement.
- Representations and Warranties. The Parties acknowledge and agree that each Party acts as a separate Controller of the Personal Data shared between the Parties under the Agreement. The Disclosing Party hereby represents, warrants and covenants to that: (a) it has obtained any and all required consents, rights, legal bases and/or licenses to collect and share the Personal Data with the Receiving Party for the purposes permitted under the Agreement , including, where applicable, to communicate with the leads, to send marketing and sales communications; (b) the Personal Data has been legally collected by the Disclosing Party; and (c) it has complied and shall comply with any and all applicable laws (including, but not limited to Data Protection Laws) in the performance of its obligations hereunder and Processing of the Personal Data.
- Data Privacy.
- Restrictions on Use. The Disclosing Party discloses Personal Data to the Receiving Party solely for the purposes permitted by the Agreement. The Receiving Party will not “Sell” or “Share” (as both terms are defined in applicable Data Protection Laws) Personal Data provided by Counterparty pursuant to the Agreement, or otherwise retain, use, disclose, or process Personal Data, for any purpose other than for the specific purposes set forth herein or otherwise outside the direct business relationship between the parties. The Receiving Party will comply with all applicable requirements of applicable Data Protection Law, including but not limited to by: (i) providing the same level of privacy protection to Personal Data as required the Disclosing Party under applicable Data Protection Law, and in no event less than a reasonable standard of care; (ii) providing any required disclosures, such as privacy policies, notices at collection, or opt out notices to consumers whose Personal Data the Receiving Party processes; and (iii) implementing appropriate technical and organizational measures to ensure a level of security for the Personal Data appropriate to the risk. The Disclosing Party shall have the right, upon reasonable notice to the Receiving Party, to take reasonable and appropriate steps to help ensure that the Receiving Party uses the Personal Data transferred in a manner consistent with Data Protection Laws and to stop and remediate unauthorized use of Personal Data. The Receiving Party shall notify the Disclosing Party if it makes a determination that it can no longer meet its obligations under this Addendum and in such case each Party shall be entitled to terminate the Agreement.
- Data Transfers. To the extent that the Personal Data is subject to Data Protection Laws of an Extended EEA Country and as a result of the provision of such Personal Data by the Disclosing Party to the Receiving Party, there is a transfer of Personal Data from the Extended EEA Countries to countries outside the Extended EEA Countries which are not subject to an adequacy decision published by the relevant data protection authorities of the Extended EEA Countries (“Third Countries”), the Parties agree that such transfers shall be undertaken on the basis of Module 1 (Controller to Controller) of the Standard Contractual Clauses which will be deemed to have been signed by each Party on the Effective Date of the Agreement, are incorporated herein by reference and construed in accordance with Schedule 1 below, unless another mechanism provided for in the Data Protection Laws of the applicable Extended EEA Country applies.
- Incorporation and interpretation of the Standard Contractual Clauses
1.1. In relation to transfers of Personal Data which is subject to Data Protection Laws of the EEA Extended Countries to Third Countries, the Parties agree that: Module One (Transfer Controller to Controller) of the Standard Contractual Clauses shall apply.
1.2. Where the data exporter is an Affiliate of the Disclosing Party, the Standard Contractual Clauses shall constitute a separate agreement between such Affiliate acting as a data exporter and the Disclosing Party acting as data importer.
1.3. The Parties acknowledge that the information required to be provided in the Standard Contractual Clauses, including the appendices, is set out in the Appendix below.
1.4. If there is a conflict between the provisions of this Addendum, the Agreement and the Standard Contractual Clauses, the Standard Contractual Clauses will prevail, provided that, except to the extent prohibited by applicable law, the Standard Contractual Clauses shall be interpreted in accordance with and subject this Addendum and the Agreement.
1.5. If any provision or part-provision of this Addendum and/or the Agreement causes the Standard Contractual Clauses to become an invalid export mechanism in the relevant Extended EEA Country, it shall be deemed deleted but that shall not affect the validity and enforceability of the rest of this Addendum and/or the Agreement and the Parties shall negotiate in good faith to agree a replacement provision that, to the greatest extent possible, achieves the intended commercial result of the original provision.
1.6. Notwithstanding anything to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is the UK, template Addendum B.1.0 issued by the UK ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section 18 of those Mandatory Clauses, (the “UK Approved Addendum”) shall amend the Standard Contractual Clauses in respect of such transfers and Part 1 of the UK Approved Addendum shall be populated as set out below:- Table 1. The “start date” will be the date this DPA enters into force. The “Parties” are set forth in the Appendix below.
- Table 2. The “Addendum EU SCCs” are the modules and clauses of the Standard Contractual Clauses selected in relation to a particular transfer in accordance with paragraphs 1.1 of this Schedule.
- Table 3. The “Appendix Information” is as set out in Appendix to this Schedule.
- Table 4. Neither party may end the UK Approved Addendum in accordance with its Section 19.
- Member States of the European Union” shall refer to the applicable Extended EEA Country in which the data exporter is established or from where the transferred Personal Data originated (as applicable);
- “the GDPR” shall refer to the Data Protection Laws of the Extended EEA Country in which the data exporter is established or from where the Personal Data originated; and
- “supervisory authority” shall refer to the data protection authority in the Extended EEA Country as determined in Annex I(C) below.
A. LIST OF THE PARTIES | |
Data Exporter: | Counterparty or Wiz or Counterparty or Wiz Affiliate, in each case to the extent applicable in respect of the specific transfer |
Data Importer: | Counterparty or Wiz, in each case to the extent applicable in respect of the specific transfer |
B. DETAILS OF PROCESSING/TRANSFER | |
CATEGORIES OF DATA SUBJECTS | Leads, event attendees, prospective customers or partners |
CATEGORIES OF PERSONAL DATA | Business contact information such as name, email address, phone number, role, company |
SPECIAL CATEGORIES OF DATA (IF APPLICABLE) | N/A |
FREQUENCY OF THE TRANSFER | As regular as is required in connection with the Parties’ performance of the Agreement |
NATURE AND PURPOSE OF THE PROCESSING | The Personal Data will be processed in connection with the Parties’ performance of the Agreement. |
RETENTION | Personal Data will be retained in accordance with the data importer’s retention policies. |
C. COMPETENT SUPERVISORY AUTHORITY | |
Identify the competent supervisory authority/ies in accordance with Clause 13: (a)Where an EU Representative has not been appointed by data exporter, the competent supervisory authority shall be the supervisory authority of the Netherlands. (b)Where the data exporter is established outside of the EU, but within an Extended EEA Country, the competent supervisory authority shall be the supervisory authority of the Extended EEA Country in which the data exporter is established. (c)Where the data exporter is established outside an Extended EEA Country and the Personal Data originates from an Extended EEA Country which is not in the EU, the supervisory authority shall be the supervisory authority of the Extended EEA Country from which the Personal Data originated. | |
D. GOVERNING LAW AND CHOICE OF FORUM | |
GOVERNING LAW | For the purposes of Clause 17 of the Standard Contractual Clauses the Parties select OPTION 1: (a) where the data exporter is established in the EU or otherwise if the personal data originates from the EU, the Parties select the laws of the Netherlands (b) where the data exporter is established outside the EU but within an Extended EEA Country, the Parties select the laws of the Extended EEA Country where the data exporter is established (c) subject to (a) above, where the data exporter is established outside an Extended EEA Country, the parties select the laws of the Extended EEA Country where the personal data originates from |
CHOICE OF FORUM | For the purposes of Clause 18 of the SCCs:
outside an Extended EEA Country, the parties select the courts of the Extended EEA Country where the personal data originates from |
TECHNICAL AND ORGANISATIONAL MEASURES | Each Party shall have adequate security measures in order to protect the Personal Data in compliance with Data Protection Laws. |
E. OTHER | |
Where the Standard Contractual Clauses identify optional provisions (or provisions with multiple options) the following will apply: (a) For Clause 7 (Docking Clause), the optional provision will apply. (b) For Clause 11(a) (Redress) – the optional provision will not apply. |
Effective July 5, 2023 to September 11, 2023
DownloadTable of Contents
- Definitions.
- “Controller” or “Business” as relevant under applicable Data Protection Laws, means the entity which determines the purposes and means of the Processing of Personal Data or such equivalent term under Data Protection Laws.
- “Data Protection Laws” means all laws and regulations relating to data protection, security and privacy, including but not limited to the laws and regulations of the European Union, the EEA and their Member States, Switzerland, the United Kingdom, and the United States, each to the extent applicable to the Parties’ Processing of Personal Data under the Agreement.
- “Disclosing Party” the Party that discloses or shares Personal Data to the other Party under the Agreement.
- “EEA” means the European Economic Area.
- “Extended EEA Country” means a country within the EEA, Switzerland or the United Kingdom, and Extended EEA Countries means the foregoing countries collectively.
- “Member State(s)” means a country that belongs to the European Union and/or the EEA.
- “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier or such equivalent term under Data Protection Laws. For the purposes of this Addendum, Personal Data refers to Personal Data that is shared or disclosed between the Parties under the Agreement.
- “Standard Contractual Clauses” or “SCCs” means the “standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council adopted by the European Commission decision of 4 June 2021” and published under document number C (2021) 3972 available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=en and as may be otherwise amended or updated from time to time.
- “Receiving Party” the Party that receives or shares Personal Data from the other Party under the Agreement.
- Representations and Warranties. The Parties acknowledge and agree that each Party acts as a separate Controller of the Personal Data shared between the Parties under the Agreement. The Disclosing Party hereby represents, warrants and covenants to that: (a) it has obtained any and all required consents, rights, legal bases and/or licenses to collect and share the Personal Data with the Receiving Party for the purposes permitted under the Agreement , including, where applicable, to communicate with the leads, to send marketing and sales communications; (b) the Personal Data has been legally collected by the Disclosing Party; and (c) it has complied and shall comply with any and all applicable laws (including, but not limited to Data Protection Laws) in the performance of its obligations hereunder and Processing of the Personal Data.
- Data Privacy.
- Restrictions on Use. The Disclosing Party discloses Personal Data to the Receiving Party solely for the purposes permitted by the Agreement. The Receiving Party will not “Sell” or “Share” (as both terms are defined in applicable Data Protection Laws) Personal Data provided by Counterparty pursuant to the Agreement, or otherwise retain, use, disclose, or process Personal Data, for any purpose other than for the specific purposes set forth herein or otherwise outside the direct business relationship between the parties. The Receiving Party will comply with all applicable requirements of applicable Data Protection Law, including but not limited to by: (i) providing the same level of privacy protection to Personal Data as required the Disclosing Party under applicable Data Protection Law, and in no event less than a reasonable standard of care; (ii) providing any required disclosures, such as privacy policies, notices at collection, or opt out notices to consumers whose Personal Data the Receiving Party processes; and (iii) implementing appropriate technical and organizational measures to ensure a level of security for the Personal Data appropriate to the risk. The Disclosing Party shall have the right, upon reasonable notice to the Receiving Party, to take reasonable and appropriate steps to help ensure that the Receiving Party uses the Personal Data transferred in a manner consistent with Data Protection Laws and to stop and remediate unauthorized use of Personal Data. The Receiving Party shall notify the Disclosing Party if it makes a determination that it can no longer meet its obligations under this Addendum and in such case each Party shall be entitled to terminate the Agreement.
- Data Transfers. To the extent that the Personal Data is subject to Data Protection Laws of an Extended EEA Country and as a result of the provision of such Personal Data by the Disclosing Party to the Receiving Party, there is a transfer of Personal Data from the Extended EEA Countries to countries outside the Extended EEA Countries which are not subject to an adequacy decision published by the relevant data protection authorities of the Extended EEA Countries (“Third Countries”), the Parties agree that such transfers shall be undertaken on the basis of Module 1 (Controller to Controller) of the Standard Contractual Clauses which will be deemed to have been signed by each Party on the Effective Date of the Agreement, are incorporated herein by reference and construed in accordance with Schedule 1 below, unless another mechanism provided for in the Data Protection Laws of the applicable Extended EEA Country applies.
- Incorporation and interpretation of the Standard Contractual Clauses
- In relation to transfers of Personal Data which is subject to Data Protection Laws of the EEA Extended Countries to Third Countries, the Parties agree that: Module One (Transfer Controller to Controller) of the Standard Contractual Clauses shall apply.
- Where the data exporter is an Affiliate of the Disclosing Party, the Standard Contractual Clauses shall constitute a separate agreement between such Affiliate acting as a data exporter and the Disclosing Party acting as data importer.
- The Parties acknowledge that the information required to be provided in the Standard Contractual Clauses, including the appendices, is set out in the Appendix below.
- If there is a conflict between the provisions of this Addendum, the Agreement and the Standard Contractual Clauses, the Standard Contractual Clauses will prevail, provided that, except to the extent prohibited by applicable law, the Standard Contractual Clauses shall be interpreted in accordance with and subject this Addendum and the Agreement.
- If any provision or part-provision of this Addendum and/or the Agreement causes the Standard Contractual Clauses to become an invalid export mechanism in the relevant Extended EEA Country, it shall be deemed deleted but that shall not affect the validity and enforceability of the rest of this Addendum and/or the Agreement and the Parties shall negotiate in good faith to agree a replacement provision that, to the greatest extent possible, achieves the intended commercial result of the original provision.
- Notwithstanding anything to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is the UK, template Addendum B.1.0 issued by the UK ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section 18 of those Mandatory Clauses, (the “UK Approved Addendum”) shall amend the Standard Contractual Clauses in respect of such transfers and Part 1 of the UK Approved Addendum shall be populated as set out below:
- Table 1. The “start date” will be the date this DPA enters into force. The “Parties” are set forth in the Appendix below.
- Table 2. The “Addendum EU SCCs” are the modules and clauses of the Standard Contractual Clauses selected in relation to a particular transfer in accordance with paragraphs 1.1 of this Schedule.
- Table 3. The “Appendix Information” is as set out in Appendix to this Schedule.
- Table 4. Neither party may end the UK Approved Addendum in accordance with its Section 19.
- Except where paragraph 1.6 above applies, but notwithstanding anything else to the contrary, where the applicable Extended EEA Country where the data exporter is established or from where the transferred personal data originated is not a Member State of the European Union, references in the Standard Contractual Clauses to:
- “Member States of the European Union” shall refer to the applicable Extended EEA Country in which the data exporter is established or from where the transferred Personal Data originated (as applicable);
- “the GDPR” shall refer to the Data Protection Laws of the Extended EEA Country in which the data exporter is established or from where the Personal Data originated; and
- “supervisory authority” shall refer to the data protection authority in the Extended EEA Country as determined in Annex I(C) below.
A. LIST OF THE PARTIES | |
Data Exporter: | Counterparty or Wiz or Counterparty or Wiz Affiliate, in each case to the extent applicable in respect of the specific transfer |
Data Importer:	 | Counterparty or Wiz, in each case to the extent applicable in respect of the specific transfer |
B. DETAILS OF PROCESSING/TRANSFER | |
CATEGORIES OF DATA SUBJECTS | Leads, event attendees, prospective customers or partners |
CATEGORIES OF PERSONAL DATA	 | Business contact information such as name, email address, phone number, role, company |
SPECIAL CATEGORIES OF DATA (IF APPLICABLE) | N/A |
FREQUENCY OF THE TRANSFER | As regular as is required in connection with the Parties’ performance of the Agreement |
NATURE AND PURPOSE OF THE PROCESSING	 | The Personal Data will be processed in connection with the Parties’ performance of the Agreement. |
RETENTION | Personal Data will be retained in accordance with the data importer’s retention policies. |
C. COMPETENT SUPERVISORY AUTHORITY | |
Identify the competent supervisory authority/ies in accordance with Clause 13: (a)	Where an EU Representative has not been appointed by data exporter, the competent supervisory authority shall be the supervisory authority of the Netherlands. (b)	Where the data exporter is established outside of the EU, but within an Extended EEA Country, the competent supervisory authority shall be the supervisory authority of the Extended EEA Country in which the data exporter is established. (c)	Where the data exporter is established outside an Extended EEA Country and the Personal Data originates from an Extended EEA Country which is not in the EU, the supervisory authority shall be the supervisory authority of the Extended EEA Country from which the Personal Data originated. | |
D. GOVERNING LAW AND CHOICE OF FORUM | |
GOVERNING LAW | For the purposes of Clause 17 of the Standard Contractual Clauses the Parties select OPTION 1: (a) where the data exporter is established in the EU or otherwise if the personal data originates from the EU, the Parties select the laws of the Netherlands (b) where the data exporter is established outside the EU but within an Extended EEA Country, the Parties select the laws of the Extended EEA Country where the data exporter is established (c) subject to (a) above, where the data exporter is established outside an Extended EEA Country, the parties select the laws of the Extended EEA Country where the personal data originates from |
CHOICE OF FORUM | For the purposes of Clause 18 of the SCCs:
outside an Extended EEA Country, the parties select the courts of the Extended EEA Country where the personal data originates from |
TECHNICAL AND ORGANISATIONAL MEASURES | Each Party shall have adequate security measures in order to protect the Personal Data in compliance with Data Protection Laws. |
E. OTHER | |
Where the Standard Contractual Clauses identify optional provisions (or provisions with multiple options) the following will apply: (a) For Clause 7 (Docking Clause), the optional provision will apply. (b) For Clause 11(a) (Redress) – the optional provision will not apply. |
Wiz Community Terms of Service
Effective September 12, 2023
DownloadTable of Contents
Wiz Community Forum Terms of Service
Last updated: Nov, 22 2022
The Wiz Community Forum is a space for Wiz customers to interact with each another and to share knowledge, information, best practices, and experiences from their use of Wiz. The following user terms apply to all who use the Wiz Community Forum. “We,” “our,” and “us” refer to the applicable Wiz entity providing services to your organization. “You” and “your” refers to you, the individual user and participant in the Wiz Community Forum.
PLEASE NOTE THAT THE WIZ COMMUNITY FORUM IS NOT A SUPPORT CHANNEL AND IS NOT SUBJECT TO WIZ’S OFFICIAL SLA. IF YOU HAVE A SUPPORT REQUEST, PLEASE SUBMIT THIS THROUGH THE OFFICIAL WIZ SUPPORT CHANNELS. THE WIZ COMMUNITY FORUM IS INTENDED FOR WIZ CUSTOMERS ONLY AND YOUR ACCESS WILL BE REVOKED WHEN YOU / YOUR ORGANIZATION IS NO LONGER A WIZ CUSTOMER.
THE WIZ COMMUNITY FORUM IS INTENDED FOR GENERAL QUERIES AND KNOWLEDGE SHARING. DO NOT SHARE ANY CONFIDENTIAL INFORMATION INCLUDING PERSONAL DATA OF YOUR ORGANIZATION THROUGH THE WIZ COMMUNITY FORUM.
Wiz Community Forum Rules of Engagement
All use of the Wiz Community Forum is subject to these Wiz Community Forum Terms of Service, Wiz’s Privacy Policy and all applicable Wiz policies (together “Terms”). The Wiz Community Forum is intended for Wiz customers only and your access will be revoked when you / your organization is no longer a Wiz customer.
You must:
- Monitor and control all activity conducted through your Wiz Community Forum account.
- Keep all passwords and login information for your Wiz Community Forum account confidential.
- Use commercially reasonable efforts to prevent unauthorized access to or use of the Wiz Community Forum.
- Keep all information learned through the Wiz Community Forum confidential and only disclose such information to other users of Wiz within your organization on a need to know basis in order to enhance your experience of Wiz services.
- Be respectful of other users.
- Promptly notify us if you become aware of or reasonably suspect any illegal or unauthorized activity or a security breach involving your account, including any loss, theft, or unauthorized disclosure or use of a username, password, or account by contacting communities@wiz.io.
- You may also report offensive or unreasonable conduct to us via communities@wiz.io.
You must never:
- Post any Customer Data including confidential information of your organization.
- Post other content that you do not have the required rights to under law and under contractual and fiduciary relationships (such as proprietary and confidential information learned or disclosed as part of employment relationships or under nondisclosure agreements).
- Post content that includes another person’s private or personal information, including but not limited to community forum profile information, images, personal phone numbers, email addresses, addresses, and Social Security numbers.
- Post content that violates applicable laws and governmental regulations, including, but not limited to, all intellectual property, data, privacy, and export control laws, and regulations promulgated by any government agencies, including any rules of any national and other securities exchanges.
- Allow another person to use your account or share your account credentials with another person.
- Post content that is abusive, offensive, vulgar, obscene, hateful, racist or bigoted, threatening, libelous, defamatory, or fraudulent.
- Upload to, link to or transmit from, the Wiz Community Forum any data, file, software, or link that contains or redirects to a virus, Trojan horse, worm, or other harmful component or a technology that unlawfully accesses or downloads content or information stored within the Wiz Community Forum or on the hardware of Wiz or any third party.
- Post or send unsolicited communications, spam or advertisements.
- Use contact or other user information obtained from the Wiz Community Forum (including email addresses) to contact other users outside of the Wiz Community Forum without their express permission or authority or to create or distribute mailing lists or other collections of contact or user profile information for users for use outside of the Wiz Community Forum.
- Impersonate any person or entity, or falsely state or otherwise misrepresent an affiliation with a person, organization, or entity of Wiz.
- Interfere with or disrupt the operation or integrity of Wiz Community Forum or any information, data, content or other materials available on or through Wiz Community Forum.
- Share information learned through the Wiz Community Forum with anyone outside of the Wiz Community Forum or use such information for any competitive purposes or any purpose other than the intended purpose.
- Authorize, permit, enable, induce or encourage any third party to do any of the above.
- Do anything to violate the spirit of these Terms.
User Submissions, Member-Generated Content and Profile Information
As a user of Wiz Community Forum, you may have the ability to make information, data, graphics, sounds, videos, messages, profiles and other materials and content, each a “Submission,” available through Wiz Community Forum. Submissions include but are not limited to all comments, suggestions, advice, and ideas, including those made or given on an existing or potential Wiz product or feature. All Submissions are subject to the same licensing provisions contained herein.
Users are solely responsible for all Submissions to Wiz Community Forum. Wiz has no control over users’ Submissions, and we do not endorse any user Submissions. Additionally, Wiz does not make any promises about the reliability of any source or the accuracy, safety, or intellectual property rights of any Submissions. By posting a Submission, you represent and warrant to either own or have all the intellectual property rights necessary to upload or share all content contained within such Submission and that the Submission does not infringe on the intellectual property rights of others.
Licenses
When you submit content to Wiz Community Forum, you do not lose ownership of your Submission. Rather, with each Submission, you grant Wiz an unlimited, irrevocable, perpetual, and royalty-free license to access, use, reproduce, display, prepare derivative works of, sublicense, perform, and distribute any Submission content, feedback, suggestions, or ideas for any purpose without any obligation or compensation to you.
If you make available through Wiz Community Forum ideas and suggestions on Wiz products or services, you acknowledge and agree that posting such a Submission does not make you an inventor of any invention that may arise during any development of any Wiz product or service, including those that may incorporate or are related to user contributions to Wiz Community Forum. If, despite the foregoing, you retain any right, title, or interest in any invention, you agree to assign to Wiz all right, title, and interest in and to such invention, effective upon the invention’s conception, creation, or development. To the extent that you retain any right to or interest in any invention after all permissible assignment, you waive all claims with respect to such rights or interests against Wiz and its affiliates, and any user of any Wiz product or service. In addition, you grant Wiz an unlimited, irrevocable, perpetual, and royalty-free license to access, use, reproduce, display, prepare derivatives works of, sublicense, perform, distribute, modify, make, sell, offer to sell, import, analyze, and exploit all or any portion of such invention. You waive and quitclaim to Wiz any claim for infringement, misappropriation, or other violation of any invention or intellectual property rights assigned or licensed under these Terms.
Moderation & Removal of Access
Wiz Community Forum is intended to be a place for users of Wiz products and services to connect, communicate, and share information, experiences, tips, and thoughts on Wiz products and services. To ensure and foster a positive environment, Wiz may designate Wiz employees to act as moderators / administrators for Wiz Community Forum ("Community Moderators"). Wiz reserves the discretion to remove and alter any user Submission to Wiz Community Forum at any time, with or without notice, for violation of these Terms; otherwise being deemed inappropriate and/or unlawful; or for any other reason. Wiz has the discretion to block users who violate these Terms or the Community Forum Guidelines from posting and/or to terminate the user’s Wiz Community Forum account. In addition, Wiz will revoke your access to the Wiz Community Forum if you are no longer working at an organization that is a Wiz customer or if your organization ceases to be a Wiz customer.
Disclaimer of Warranties
WIZ COMMUNITY FORUM AND ALL RELATED COMPONENTS AND INFORMATION ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS WITHOUT ANY WARRANTIES OF ANY KIND AND WIZ EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. YOU ACKNOWLEDGE THAT WIZ DOES NOT WARRANT THAT THE WIZ COMMUNITY FORUM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE.
Limitation of Liability
NEITHER WIZ, NOR ANY OF ITS OFFICERS, DIRECTORS, EMPLOYEES, LICENSORS, OR AFFILIATES SHALL BE LIABLE TO YOU OR ANY THIRD-PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES ARISING FROM OR RELATING TO YOUR PARTICIPATION IN WIZ COMMUNITY FORUM, INCLUDING, WITHOUT LIMITATION, LOST REVENUE, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES HOWEVER CAUSED, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, AND WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Modifications
As our business evolves, we may change these Terms and other policies relating to Wiz Community Forum. Any material revisions to these Terms will become effective on the date we publish the change. If you use the Wiz Community Forum after the effective date of any changes, that use will constitute your acceptance of the revised terms and conditions.
Severability
These Terms will be enforced to the fullest extent permitted under applicable law. If any provision of the Terms is held by a court of competent jurisdiction to be contrary to law, the provision will be modified by the court and interpreted so as best to accomplish the objectives of the original provision to the fullest extent permitted by law, and the remaining provisions of these Terms will remain in effect.
Governing Law; Venue
These Terms constitute a binding agreement, and failure to comply with these Terms may result in legal action. This agreement, and any disputes arising out of or related hereto, shall be governed exclusively by the internal laws of the State of New York, without regard to its conflicts with the laws or rules of the United Nations Convention on the International Sale of Goods. The state and federal courts located in New York City, New York shall have exclusive jurisdiction to adjudicate any dispute arising out of or relating to this Agreement.
Please feel free to contact us if you have any questions about these Terms. You may contact us at communities@wiz.io.
Effective September 11, 2023 to September 12, 2023
DownloadTable of Contents
Wiz Community Forum Terms of Service
Last updated: Nov, 22 2022
The Wiz Community Forum is a space for Wiz customers to interact with each another and to share knowledge, information, best practices, and experiences from their use of Wiz. The following user terms apply to all who use the Wiz Community Forum. “We,” “our,” and “us” refer to the applicable Wiz entity providing services to your organization. “You” and “your” refers to you, the individual user and participant in the Wiz Community Forum.
PLEASE NOTE THAT THE WIZ COMMUNITY FORUM IS NOT A SUPPORT CHANNEL AND IS NOT SUBJECT TO WIZ’S OFFICIAL SLA. IF YOU HAVE A SUPPORT REQUEST, PLEASE SUBMIT THIS THROUGH THE OFFICIAL WIZ SUPPORT CHANNELS. THE WIZ COMMUNITY FORUM IS INTENDED FOR WIZ CUSTOMERS ONLY AND YOUR ACCESS WILL BE REVOKED WHEN YOU / YOUR ORGANIZATION IS NO LONGER A WIZ CUSTOMER.
THE WIZ COMMUNITY FORUM IS INTENDED FOR GENERAL QUERIES AND KNOWLEDGE SHARING. DO NOT SHARE ANY CONFIDENTIAL INFORMATION INCLUDING PERSONAL DATA OF YOUR ORGANIZATION THROUGH THE WIZ COMMUNITY FORUM.
Wiz Community Forum Rules of Engagement
All use of the Wiz Community Forum is subject to these Wiz Community Forum Terms of Service, Wiz’s Privacy Policy and all applicable Wiz policies (together “Terms”). The Wiz Community Forum is intended for Wiz customers only and your access will be revoked when you / your organization is no longer a Wiz customer.
You must:
- Monitor and control all activity conducted through your Wiz Community Forum account.
- Keep all passwords and login information for your Wiz Community Forum account confidential.
- Use commercially reasonable efforts to prevent unauthorized access to or use of the Wiz Community Forum.
- Keep all information learned through the Wiz Community Forum confidential and only disclose such information to other users of Wiz within your organization on a need to know basis in order to enhance your experience of Wiz services.
- Be respectful of other users.
- Promptly notify us if you become aware of or reasonably suspect any illegal or unauthorized activity or a security breach involving your account, including any loss, theft, or unauthorized disclosure or use of a username, password, or account by contacting communities@wiz.io.
- You may also report offensive or unreasonable conduct to us via communities@wiz.io.
You must never:
- Post any Customer Data including confidential information of your organization.
- Post other content that you do not have the required rights to under law and under contractual and fiduciary relationships (such as proprietary and confidential information learned or disclosed as part of employment relationships or under nondisclosure agreements).
- Post content that includes another person’s private or personal information, including but not limited to community forum profile information, images, personal phone numbers, email addresses, addresses, and Social Security numbers.
- Post content that violates applicable laws and governmental regulations, including, but not limited to, all intellectual property, data, privacy, and export control laws, and regulations promulgated by any government agencies, including any rules of any national and other securities exchanges.
- Allow another person to use your account or share your account credentials with another person.
- Post content that is abusive, offensive, vulgar, obscene, hateful, racist or bigoted, threatening, libelous, defamatory, or fraudulent.
- Upload to, link to or transmit from, the Wiz Community Forum any data, file, software, or link that contains or redirects to a virus, Trojan horse, worm, or other harmful component or a technology that unlawfully accesses or downloads content or information stored within the Wiz Community Forum or on the hardware of Wiz or any third party.
- Post or send unsolicited communications, spam or advertisements.
- Use contact or other user information obtained from the Wiz Community Forum (including email addresses) to contact other users outside of the Wiz Community Forum without their express permission or authority or to create or distribute mailing lists or other collections of contact or user profile information for users for use outside of the Wiz Community Forum.
- Impersonate any person or entity, or falsely state or otherwise misrepresent an affiliation with a person, organization, or entity of Wiz.
- Interfere with or disrupt the operation or integrity of Wiz Community Forum or any information, data, content or other materials available on or through Wiz Community Forum.
- Share information learned through the Wiz Community Forum with anyone outside of the Wiz Community Forum or use such information for any competitive purposes or any purpose other than the intended purpose.
- Authorize, permit, enable, induce or encourage any third party to do any of the above.
- Do anything to violate the spirit of these Terms.
User Submissions, Member-Generated Content and Profile Information
As a user of Wiz Community Forum, you may have the ability to make information, data, graphics, sounds, videos, messages, profiles and other materials and content, each a “Submission,” available through Wiz Community Forum. Submissions include but are not limited to all comments, suggestions, advice, and ideas, including those made or given on an existing or potential Wiz product or feature. All Submissions are subject to the same licensing provisions contained herein.
Users are solely responsible for all Submissions to Wiz Community Forum. Wiz has no control over users’ Submissions, and we do not endorse any user Submissions. Additionally, Wiz does not make any promises about the reliability of any source or the accuracy, safety, or intellectual property rights of any Submissions. By posting a Submission, you represent and warrant to either own or have all the intellectual property rights necessary to upload or share all content contained within such Submission and that the Submission does not infringe on the intellectual property rights of others.
Licenses
When you submit content to Wiz Community Forum, you do not lose ownership of your Submission. Rather, with each Submission, you grant Wiz an unlimited, irrevocable, perpetual, and royalty-free license to access, use, reproduce, display, prepare derivative works of, sublicense, perform, and distribute any Submission content, feedback, suggestions, or ideas for any purpose without any obligation or compensation to you.
If you make available through Wiz Community Forum ideas and suggestions on Wiz products or services, you acknowledge and agree that posting such a Submission does not make you an inventor of any invention that may arise during any development of any Wiz product or service, including those that may incorporate or are related to user contributions to Wiz Community Forum. If, despite the foregoing, you retain any right, title, or interest in any invention, you agree to assign to Wiz all right, title, and interest in and to such invention, effective upon the invention’s conception, creation, or development. To the extent that you retain any right to or interest in any invention after all permissible assignment, you waive all claims with respect to such rights or interests against Wiz and its affiliates, and any user of any Wiz product or service. In addition, you grant Wiz an unlimited, irrevocable, perpetual, and royalty-free license to access, use, reproduce, display, prepare derivatives works of, sublicense, perform, distribute, modify, make, sell, offer to sell, import, analyze, and exploit all or any portion of such invention. You waive and quitclaim to Wiz any claim for infringement, misappropriation, or other violation of any invention or intellectual property rights assigned or licensed under these Terms.
Moderation & Removal of Access
Wiz Community Forum is intended to be a place for users of Wiz products and services to connect, communicate, and share information, experiences, tips, and thoughts on Wiz products and services. To ensure and foster a positive environment, Wiz may designate Wiz employees to act as moderators / administrators for Wiz Community Forum ("Community Moderators"). Wiz reserves the discretion to remove and alter any user Submission to Wiz Community Forum at any time, with or without notice, for violation of these Terms; otherwise being deemed inappropriate and/or unlawful; or for any other reason. Wiz has the discretion to block users who violate these Terms or the Community Forum Guidelines from posting and/or to terminate the user’s Wiz Community Forum account. In addition, Wiz will revoke your access to the Wiz Community Forum if you are no longer working at an organization that is a Wiz customer or if your organization ceases to be a Wiz customer.
Disclaimer of Warranties
WIZ COMMUNITY FORUM AND ALL RELATED COMPONENTS AND INFORMATION ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS WITHOUT ANY WARRANTIES OF ANY KIND AND WIZ EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. YOU ACKNOWLEDGE THAT WIZ DOES NOT WARRANT THAT THE WIZ COMMUNITY FORUM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE.
Limitation of Liability
NEITHER WIZ, NOR ANY OF ITS OFFICERS, DIRECTORS, EMPLOYEES, LICENSORS, OR AFFILIATES SHALL BE LIABLE TO YOU OR ANY THIRD-PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES ARISING FROM OR RELATING TO YOUR PARTICIPATION IN WIZ COMMUNITY FORUM, INCLUDING, WITHOUT LIMITATION, LOST REVENUE, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES HOWEVER CAUSED, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, AND WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Modifications
As our business evolves, we may change these Terms and other policies relating to Wiz Community Forum. Any material revisions to these Terms will become effective on the date we publish the change. If you use the Wiz Community Forum after the effective date of any changes, that use will constitute your acceptance of the revised terms and conditions.
Severability
These Terms will be enforced to the fullest extent permitted under applicable law. If any provision of the Terms is held by a court of competent jurisdiction to be contrary to law, the provision will be modified by the court and interpreted so as best to accomplish the objectives of the original provision to the fullest extent permitted by law, and the remaining provisions of these Terms will remain in effect.
Governing Law; Venue
These Terms constitute a binding agreement, and failure to comply with these Terms may result in legal action. This agreement, and any disputes arising out of or related hereto, shall be governed exclusively by the internal laws of the State of New York, without regard to its conflicts with the laws or rules of the United Nations Convention on the International Sale of Goods. The state and federal courts located in New York City, New York shall have exclusive jurisdiction to adjudicate any dispute arising out of or relating to this Agreement.
Please feel free to contact us if you have any questions about these Terms. You may contact us at communities@wiz.io.
Effective August 29, 2023 to September 11, 2023
DownloadTable of Contents
Wiz Community Forum Terms of Service
Last updated: Nov, 22 2022
The Wiz Community Forum is a space for Wiz customers to interact with each another and to share knowledge, information, best practices, and experiences from their use of Wiz. The following user terms apply to all who use the Wiz Community Forum. “We,” “our,” and “us” refer to the applicable Wiz entity providing services to your organization. “You” and “your” refers to you, the individual user and participant in the Wiz Community Forum.
PLEASE NOTE THAT THE WIZ COMMUNITY FORUM IS NOT A SUPPORT CHANNEL AND IS NOT SUBJECT TO WIZ’S OFFICIAL SLA. IF YOU HAVE A SUPPORT REQUEST, PLEASE SUBMIT THIS THROUGH THE OFFICIAL WIZ SUPPORT CHANNELS. THE WIZ COMMUNITY FORUM IS INTENDED FOR WIZ CUSTOMERS ONLY AND YOUR ACCESS WILL BE REVOKED WHEN YOU / YOUR ORGANIZATION IS NO LONGER A WIZ CUSTOMER.
THE WIZ COMMUNITY FORUM IS INTENDED FOR GENERAL QUERIES AND KNOWLEDGE SHARING. DO NOT SHARE ANY CONFIDENTIAL INFORMATION INCLUDING PERSONAL DATA OF YOUR ORGANIZATION THROUGH THE WIZ COMMUNITY FORUM.
Wiz Community Forum Rules of Engagement
All use of the Wiz Community Forum is subject to these Wiz Community Forum Terms of Service, Wiz’s Privacy Policy and all applicable Wiz policies (together “Terms”). The Wiz Community Forum is intended for Wiz customers only and your access will be revoked when you / your organization is no longer a Wiz customer.
You must:
- Monitor and control all activity conducted through your Wiz Community Forum account.
- Keep all passwords and login information for your Wiz Community Forum account confidential.
- Use commercially reasonable efforts to prevent unauthorized access to or use of the Wiz Community Forum.
- Keep all information learned through the Wiz Community Forum confidential and only disclose such information to other users of Wiz within your organization on a need to know basis in order to enhance your experience of Wiz services.
- Be respectful of other users.
- Promptly notify us if you become aware of or reasonably suspect any illegal or unauthorized activity or a security breach involving your account, including any loss, theft, or unauthorized disclosure or use of a username, password, or account by contacting communities@wiz.io.
- You may also report offensive or unreasonable conduct to us via communities@wiz.io.
You must never:
- Post any Customer Data including confidential information of your organization.
- Post other content that you do not have the required rights to under law and under contractual and fiduciary relationships (such as proprietary and confidential information learned or disclosed as part of employment relationships or under nondisclosure agreements).
- Post content that includes another person’s private or personal information, including but not limited to community forum profile information, images, personal phone numbers, email addresses, addresses, and Social Security numbers.
- Post content that violates applicable laws and governmental regulations, including, but not limited to, all intellectual property, data, privacy, and export control laws, and regulations promulgated by any government agencies, including any rules of any national and other securities exchanges.
- Allow another person to use your account or share your account credentials with another person.
- Post content that is abusive, offensive, vulgar, obscene, hateful, racist or bigoted, threatening, libelous, defamatory, or fraudulent.
- Upload to, link to or transmit from, the Wiz Community Forum any data, file, software, or link that contains or redirects to a virus, Trojan horse, worm, or other harmful component or a technology that unlawfully accesses or downloads content or information stored within the Wiz Community Forum or on the hardware of Wiz or any third party.
- Post or send unsolicited communications, spam or advertisements.
- Use contact or other user information obtained from the Wiz Community Forum (including email addresses) to contact other users outside of the Wiz Community Forum without their express permission or authority or to create or distribute mailing lists or other collections of contact or user profile information for users for use outside of the Wiz Community Forum.
- Impersonate any person or entity, or falsely state or otherwise misrepresent an affiliation with a person, organization, or entity of Wiz.
- Interfere with or disrupt the operation or integrity of Wiz Community Forum or any information, data, content or other materials available on or through Wiz Community Forum.
- Share information learned through the Wiz Community Forum with anyone outside of the Wiz Community Forum or use such information for any competitive purposes or any purpose other than the intended purpose.
- Authorize, permit, enable, induce or encourage any third party to do any of the above.
- Do anything to violate the spirit of these Terms.
User Submissions, Member-Generated Content and Profile Information
As a user of Wiz Community Forum, you may have the ability to make information, data, graphics, sounds, videos, messages, profiles and other materials and content, each a “Submission,” available through Wiz Community Forum. Submissions include but are not limited to all comments, suggestions, advice, and ideas, including those made or given on an existing or potential Wiz product or feature. All Submissions are subject to the same licensing provisions contained herein.
Users are solely responsible for all Submissions to Wiz Community Forum. Wiz has no control over users’ Submissions, and we do not endorse any user Submissions. Additionally, Wiz does not make any promises about the reliability of any source or the accuracy, safety, or intellectual property rights of any Submissions. By posting a Submission, you represent and warrant to either own or have all the intellectual property rights necessary to upload or share all content contained within such Submission and that the Submission does not infringe on the intellectual property rights of others.
Licenses
When you submit content to Wiz Community Forum, you do not lose ownership of your Submission. Rather, with each Submission, you grant Wiz an unlimited, irrevocable, perpetual, and royalty-free license to access, use, reproduce, display, prepare derivative works of, sublicense, perform, and distribute any Submission content, feedback, suggestions, or ideas for any purpose without any obligation or compensation to you.
If you make available through Wiz Community Forum ideas and suggestions on Wiz products or services, you acknowledge and agree that posting such a Submission does not make you an inventor of any invention that may arise during any development of any Wiz product or service, including those that may incorporate or are related to user contributions to Wiz Community Forum. If, despite the foregoing, you retain any right, title, or interest in any invention, you agree to assign to Wiz all right, title, and interest in and to such invention, effective upon the invention’s conception, creation, or development. To the extent that you retain any right to or interest in any invention after all permissible assignment, you waive all claims with respect to such rights or interests against Wiz and its affiliates, and any user of any Wiz product or service. In addition, you grant Wiz an unlimited, irrevocable, perpetual, and royalty-free license to access, use, reproduce, display, prepare derivatives works of, sublicense, perform, distribute, modify, make, sell, offer to sell, import, analyze, and exploit all or any portion of such invention. You waive and quitclaim to Wiz any claim for infringement, misappropriation, or other violation of any invention or intellectual property rights assigned or licensed under these Terms.
Moderation & Removal of Access
Wiz Community Forum is intended to be a place for users of Wiz products and services to connect, communicate, and share information, experiences, tips, and thoughts on Wiz products and services. To ensure and foster a positive environment, Wiz may designate Wiz employees to act as moderators / administrators for Wiz Community Forum ("Community Moderators"). Wiz reserves the discretion to remove and alter any user Submission to Wiz Community Forum at any time, with or without notice, for violation of these Terms; otherwise being deemed inappropriate and/or unlawful; or for any other reason. Wiz has the discretion to block users who violate these Terms or the Community Forum Guidelines from posting and/or to terminate the user’s Wiz Community Forum account. In addition, Wiz will revoke your access to the Wiz Community Forum if you are no longer working at an organization that is a Wiz customer or if your organization ceases to be a Wiz customer.
Disclaimer of Warranties
WIZ COMMUNITY FORUM AND ALL RELATED COMPONENTS AND INFORMATION ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS WITHOUT ANY WARRANTIES OF ANY KIND AND WIZ EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. YOU ACKNOWLEDGE THAT WIZ DOES NOT WARRANT THAT THE WIZ COMMUNITY FORUM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE.
Limitation of Liability
NEITHER WIZ, NOR ANY OF ITS OFFICERS, DIRECTORS, EMPLOYEES, LICENSORS, OR AFFILIATES SHALL BE LIABLE TO YOU OR ANY THIRD-PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES ARISING FROM OR RELATING TO YOUR PARTICIPATION IN WIZ COMMUNITY FORUM, INCLUDING, WITHOUT LIMITATION, LOST REVENUE, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES HOWEVER CAUSED, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, AND WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Modifications
As our business evolves, we may change these Terms and other policies relating to Wiz Community Forum. Any material revisions to these Terms will become effective on the date we publish the change. If you use the Wiz Community Forum after the effective date of any changes, that use will constitute your acceptance of the revised terms and conditions.
Severability
These Terms will be enforced to the fullest extent permitted under applicable law. If any provision of the Terms is held by a court of competent jurisdiction to be contrary to law, the provision will be modified by the court and interpreted so as best to accomplish the objectives of the original provision to the fullest extent permitted by law, and the remaining provisions of these Terms will remain in effect.
Governing Law; Venue
These Terms constitute a binding agreement, and failure to comply with these Terms may result in legal action. This agreement, and any disputes arising out of or related hereto, shall be governed exclusively by the internal laws of the State of New York, without regard to its conflicts with the laws or rules of the United Nations Convention on the International Sale of Goods. The state and federal courts located in New York City, New York shall have exclusive jurisdiction to adjudicate any dispute arising out of or relating to this Agreement.
Please feel free to contact us if you have any questions about these Terms. You may contact us at communities@wiz.io.
Effective August 21, 2023 to August 29, 2023
DownloadTable of Contents
Wiz Community Forum Terms of Service
Last updated: Nov, 22 2022
The Wiz Community Forum is a space for Wiz customers to interact with each another and to share knowledge, information, best practices, and experiences from their use of Wiz. The following user terms apply to all who use the Wiz Community Forum. “We,” “our,” and “us” refer to the applicable Wiz entity providing services to your organization. “You” and “your” refers to you, the individual user and participant in the Wiz Community Forum.
PLEASE NOTE THAT THE WIZ COMMUNITY FORUM IS NOT A SUPPORT CHANNEL AND IS NOT SUBJECT TO WIZ’S OFFICIAL SLA. IF YOU HAVE A SUPPORT REQUEST, PLEASE SUBMIT THIS THROUGH THE OFFICIAL WIZ SUPPORT CHANNELS. THE WIZ COMMUNITY FORUM IS INTENDED FOR WIZ CUSTOMERS ONLY AND YOUR ACCESS WILL BE REVOKED WHEN YOU / YOUR ORGANIZATION IS NO LONGER A WIZ CUSTOMER.
THE WIZ COMMUNITY FORUM IS INTENDED FOR GENERAL QUERIES AND KNOWLEDGE SHARING. DO NOT SHARE ANY CONFIDENTIAL INFORMATION INCLUDING PERSONAL DATA OF YOUR ORGANIZATION THROUGH THE WIZ COMMUNITY FORUM.
Wiz Community Forum Rules of Engagement
All use of the Wiz Community Forum is subject to these Wiz Community Forum Terms of Service, Wiz’s Privacy Policy and all applicable Wiz policies (together “Terms”). The Wiz Community Forum is intended for Wiz customers only and your access will be revoked when you / your organization is no longer a Wiz customer.
You must:
- Monitor and control all activity conducted through your Wiz Community Forum account.
- Keep all passwords and login information for your Wiz Community Forum account confidential.
- Use commercially reasonable efforts to prevent unauthorized access to or use of the Wiz Community Forum.
- Keep all information learned through the Wiz Community Forum confidential and only disclose such information to other users of Wiz within your organization on a need to know basis in order to enhance your experience of Wiz services.
- Be respectful of other users.
- Promptly notify us if you become aware of or reasonably suspect any illegal or unauthorized activity or a security breach involving your account, including any loss, theft, or unauthorized disclosure or use of a username, password, or account by contacting communities@wiz.io.
- You may also report offensive or unreasonable conduct to us via communities@wiz.io.
You must never:
- Post any Customer Data including confidential information of your organization.
- Post other content that you do not have the required rights to under law and under contractual and fiduciary relationships (such as proprietary and confidential information learned or disclosed as part of employment relationships or under nondisclosure agreements).
- Post content that includes another person’s private or personal information, including but not limited to community forum profile information, images, personal phone numbers, email addresses, addresses, and Social Security numbers.
- Post content that violates applicable laws and governmental regulations, including, but not limited to, all intellectual property, data, privacy, and export control laws, and regulations promulgated by any government agencies, including any rules of any national and other securities exchanges.
- Allow another person to use your account or share your account credentials with another person.
- Post content that is abusive, offensive, vulgar, obscene, hateful, racist or bigoted, threatening, libelous, defamatory, or fraudulent.
- Upload to, link to or transmit from, the Wiz Community Forum any data, file, software, or link that contains or redirects to a virus, Trojan horse, worm, or other harmful component or a technology that unlawfully accesses or downloads content or information stored within the Wiz Community Forum or on the hardware of Wiz or any third party.
- Post or send unsolicited communications, spam or advertisements.
- Use contact or other user information obtained from the Wiz Community Forum (including email addresses) to contact other users outside of the Wiz Community Forum without their express permission or authority or to create or distribute mailing lists or other collections of contact or user profile information for users for use outside of the Wiz Community Forum.
- Impersonate any person or entity, or falsely state or otherwise misrepresent an affiliation with a person, organization, or entity of Wiz.
- Interfere with or disrupt the operation or integrity of Wiz Community Forum or any information, data, content or other materials available on or through Wiz Community Forum.
- Share information learned through the Wiz Community Forum with anyone outside of the Wiz Community Forum or use such information for any competitive purposes or any purpose other than the intended purpose.
- Authorize, permit, enable, induce or encourage any third party to do any of the above.
- Do anything to violate the spirit of these Terms.
User Submissions, Member-Generated Content and Profile Information
As a user of Wiz Community Forum, you may have the ability to make information, data, graphics, sounds, videos, messages, profiles and other materials and content, each a “Submission,” available through Wiz Community Forum. Submissions include but are not limited to all comments, suggestions, advice, and ideas, including those made or given on an existing or potential Wiz product or feature. All Submissions are subject to the same licensing provisions contained herein.
Users are solely responsible for all Submissions to Wiz Community Forum. Wiz has no control over users’ Submissions, and we do not endorse any user Submissions. Additionally, Wiz does not make any promises about the reliability of any source or the accuracy, safety, or intellectual property rights of any Submissions. By posting a Submission, you represent and warrant to either own or have all the intellectual property rights necessary to upload or share all content contained within such Submission and that the Submission does not infringe on the intellectual property rights of others.
Licenses
When you submit content to Wiz Community Forum, you do not lose ownership of your Submission. Rather, with each Submission, you grant Wiz an unlimited, irrevocable, perpetual, and royalty-free license to access, use, reproduce, display, prepare derivative works of, sublicense, perform, and distribute any Submission content, feedback, suggestions, or ideas for any purpose without any obligation or compensation to you.
If you make available through Wiz Community Forum ideas and suggestions on Wiz products or services, you acknowledge and agree that posting such a Submission does not make you an inventor of any invention that may arise during any development of any Wiz product or service, including those that may incorporate or are related to user contributions to Wiz Community Forum. If, despite the foregoing, you retain any right, title, or interest in any invention, you agree to assign to Wiz all right, title, and interest in and to such invention, effective upon the invention’s conception, creation, or development. To the extent that you retain any right to or interest in any invention after all permissible assignment, you waive all claims with respect to such rights or interests against Wiz and its affiliates, and any user of any Wiz product or service. In addition, you grant Wiz an unlimited, irrevocable, perpetual, and royalty-free license to access, use, reproduce, display, prepare derivatives works of, sublicense, perform, distribute, modify, make, sell, offer to sell, import, analyze, and exploit all or any portion of such invention. You waive and quitclaim to Wiz any claim for infringement, misappropriation, or other violation of any invention or intellectual property rights assigned or licensed under these Terms.
Moderation & Removal of Access
Wiz Community Forum is intended to be a place for users of Wiz products and services to connect, communicate, and share information, experiences, tips, and thoughts on Wiz products and services. To ensure and foster a positive environment, Wiz may designate Wiz employees to act as moderators / administrators for Wiz Community Forum ("Community Moderators"). Wiz reserves the discretion to remove and alter any user Submission to Wiz Community Forum at any time, with or without notice, for violation of these Terms; otherwise being deemed inappropriate and/or unlawful; or for any other reason. Wiz has the discretion to block users who violate these Terms or the Community Forum Guidelines from posting and/or to terminate the user’s Wiz Community Forum account. In addition, Wiz will revoke your access to the Wiz Community Forum if you are no longer working at an organization that is a Wiz customer or if your organization ceases to be a Wiz customer.
Disclaimer of Warranties
WIZ COMMUNITY FORUM AND ALL RELATED COMPONENTS AND INFORMATION ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS WITHOUT ANY WARRANTIES OF ANY KIND AND WIZ EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. YOU ACKNOWLEDGE THAT WIZ DOES NOT WARRANT THAT THE WIZ COMMUNITY FORUM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE.
Limitation of Liability
NEITHER WIZ, NOR ANY OF ITS OFFICERS, DIRECTORS, EMPLOYEES, LICENSORS, OR AFFILIATES SHALL BE LIABLE TO YOU OR ANY THIRD-PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES ARISING FROM OR RELATING TO YOUR PARTICIPATION IN WIZ COMMUNITY FORUM, INCLUDING, WITHOUT LIMITATION, LOST REVENUE, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES HOWEVER CAUSED, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, AND WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Modifications
As our business evolves, we may change these Terms and other policies relating to Wiz Community Forum. Any material revisions to these Terms will become effective on the date we publish the change. If you use the Wiz Community Forum after the effective date of any changes, that use will constitute your acceptance of the revised terms and conditions.
Severability
These Terms will be enforced to the fullest extent permitted under applicable law. If any provision of the Terms is held by a court of competent jurisdiction to be contrary to law, the provision will be modified by the court and interpreted so as best to accomplish the objectives of the original provision to the fullest extent permitted by law, and the remaining provisions of these Terms will remain in effect.
Governing Law; Venue
These Terms constitute a binding agreement, and failure to comply with these Terms may result in legal action. This agreement, and any disputes arising out of or related hereto, shall be governed exclusively by the internal laws of the State of New York, without regard to its conflicts with the laws or rules of the United Nations Convention on the International Sale of Goods. The state and federal courts located in New York City, New York shall have exclusive jurisdiction to adjudicate any dispute arising out of or relating to this Agreement.
Please feel free to contact us if you have any questions about these Terms. You may contact us at communities@wiz.io.
Cookies Policy
Effective September 11, 2023
DownloadTable of Contents
Cookies Policy
Our website https://www.wiz.io/ ("Website") uses cookies and similar files or technologies to automatically collect and store information about your computer, device, and Website usage, in order to improve their performance and enhance your user experience. We use the general term "cookies" in this policy to refer to these technologies and all such similar technologies that collect information automatically when you are using our Website where this policy is posted. You can find out more about cookies and how to control them in the information below.
If you do not accept the use of these cookies, please disable them using the instructions in this Cookies Policy or by changing your browser settings so that cookies from this Website cannot be placed on your computer or mobile device. Important: disabling certain cookies on this Website may cripple the user experience and other features on the Website, to the point of rendering them useless.
In this Cookies Policy, we use the term Wiz (and "we", "us" and "our") to refer to Wiz Inc. and our affiliates. Our Privacy Policy is available at https://www.wiz.io/privacy-policy.
åWhat is a cookie?
Cookies are computer files containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies can then be sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. Cookies are widely used in order to make websites work, or to work more efficiently, as well as to provide information to the owners of the website.
Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences and generally improving the user experience. Cookies may tell us, for example, whether you have visited our Website before or whether you are a new visitor.
There are two broad categories of cookies:
- First Party cookies, served directly by us to your computer or mobile device.
- Third Party cookies, which are served by a third party on our behalf. We use third party cookies for functionality, performance / analytics, marketing, unclassified and other technologies, and social media purposes.
Cookies can remain on your computer or mobile device for different periods of time. Some cookies are 'session cookies', meaning that they exist only while your browser is open. These are deleted automatically once you close your browser. Other cookies are 'permanent cookies', meaning that they survive after your browser is closed. They can be used by websites to recognize your computer when you open your browser and browse the Internet again.
What are web beacons?
Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are small graphics files that contain a unique identifier that enable us to recognize when someone has visited our website. This allows us, for example, to monitor the traffic patterns of users from one page within our website to another, to deliver or communicate with cookies, to understand whether you have come to our website from an online advertisement displayed on a third party website, to improve website performance and to measure the success of email marketing campaigns. In most instances, these technologies are reliant on cookies to function, and therefore declining cookies prevents them from functioning.
If you don't want your cookie information to be associated with your visits to these pages, you can set your browser to turn off cookies as described further below. If you turn off cookies, web beacon and other technologies will still detect your visits to our Website; however, they will not be associated with information otherwise stored in cookies.
Targeted advertising
Third parties may drop cookies on your computer or mobile device to serve advertising through our Website. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying details unless you choose to provide these to us.
How do we use cookies?
We use cookies to:
- track traffic flow and patterns of travel and behavior in connection with our Website;
- understand the total number of visitors to our Websites on an ongoing basis and the types of internet browsers (e.g. Chrome, Firefox, Safari, or Internet Explorer) and operating systems (e.g. Windows or Mac) used by our visitors;
- monitor the performance of our Website and to continually improve it;
- in connection with our marketing and advertising efforts; and
- customize and enhance your online experience.
What types of cookies do we use?
The types of cookies used by us in connection with the Website can be considered “strictly necessary”, “performance or analytics cookies”, “marketing / targeting”, and “unclassified”. We've set out some further information below about each category.
Cookies strictly necessary for website purposes
These cookies are strictly necessary to provide you with services available through the Website and to use some of its features, such as access to secure areas. These cookies cannot be switched as without them we will not be able to provide essential website services.
Cookie Name | Type | Lifespan |
OptanonAlertBoxClosed | 1st Party | 1 year |
OptanonConsent | 1st Party | 1 year |
Performance / Analytics Cookies
We use performance/analytics cookies to analyze how the website is accessed, used, or is performing. We do this in order to provide you with a better user experience and to maintain, operate and continually improve the website. For example, these cookies allow us to:
- Better understand our website visitors so that we can improve how we present our content;
- Test different design ideas for particular pages, such as our homepage;
- Collect information about Website visitors such as where they are located and what browsers they are using;
- Determine the number of unique users of the website;
- Improve the website by measuring any errors that occur;
- Measuring campaign effectiveness; and
- Conduct research and diagnostics to improve product offerings.
Cookie Name | Type | Lifespan |
---|---|---|
_ga | 1st Party | 730 days |
_gid | 1st Party | 1 day |
_biz_sid | 1st Party | 0 days |
_biz_uid | 1st Party | 364 days |
_biz_nA | 1st Party | 364 days |
_biz_pendingA | 1st Party | 364 days |
_uetvid | 1st Party | 389 days |
_clsk | 1st Party | 0 days |
_session_id | 3rd Party | 13 days |
_clck | 1st Party | 364 days |
JSESSIONID | 3rd Party | 1 day |
_ga_xxxxxxx | 1st Party | 729 days |
ARRAffinity | 3rd Party | 0 days |
Functionality Cookies
These cookies enable the Website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
Cookie Name | Type | Lifespan |
_rdt_uuid | 1st Party | 90 days |
_gd_visitor | 1st Party | 730 days |
_gd_session | 1st Party | 0 days |
_mkto_trk | 1st Party | 730 days |
_an_uid | 1st Party | 6 days |
_gd_svisitor | 1st Party | 730 days |
vuid | 3rd party | 729 days |
__cf_bm | 3rd party | 0 days |
player | 3rd Party | 365 days |
__q_domainTest | 1st Party | 0 days |
Marketing / Targeting
We use marketing cookies to deliver many types of targeted digital marketing. We do this in order to provide you with a better user experience and to maintain, operate and continually improve the website. The cookie store user data and behavior information, which allows advertising services to target audience according to variables. For example, these cookies allow us to:
- Observe the Website performance and generate retargeting (Site retargeting, search retargeting, etc.).
- Maintain and improve the website and our products
Cookie Name | Type | Lifespan |
NO NAME | 3rd party | 0 days |
6suuid | 3rd party | 729 days |
lidc | 3rd party | 1 day |
_fbp | 1st Party | 90 days |
bcookie | 3rd party | 731 days |
bscookie | 3rd party | 731 days |
AnalyticsSyncHistory | 3rd party | 30 days |
UserMatchHistory | 3rd party | 30 days |
li_gc | 3rd party | 713 days |
_BUID | 3rd party | 364 days |
_biz_kvpA | 1st Party | 0 days |
_biz_dfsA | 1st Party | 0 days |
_BUID | 3rd party | 364 days |
VISITOR_INFO1_LIVE | 3rd party | 179 days |
YSC | 3rd party | 0 days |
CONSENT | 3rd party | 729 days |
_uetsid | 1st Party | 0 days |
ANONCHK | 3rd Party | 0 days |
SRM_B | 3rd Party | 389 days |
MUID | 3rd Party | 389 days |
SM | 3rd Party | 0 days |
muc_ads | 3rd Party | 729 days |
personalization_id | 3rd Party | 729 days |
in_or | 1st party | 0 days |
q_state_ubFjDH1QLqM69tJc | 1st Party | 3649 days |
_gat_UA-XXXXXX-X | 1st Party | 0 days |
_biz_flagsA | 1st Party | 364 days |
__cf_bm | 3rd Party | 0 days |
guest_id | 3rd Party | 729 days |
MR | 3rd Party | 6 days |
guest_id_ads | 3rd Party | 729 days |
_cfuvid | 3rd Party | 0 days |
li_sugr | 3rd Party | 89 days |
MUID | 3rd Party | 389 days |
guest_id_marketing | 3rd Party | 729 days |
ARRAffinitySameSite | 3rd Party | 0 days |
visitorId | 3rd Party | 364 days |
CLID | 3rd Party | 364 days |
MR | 3rd Party | 6 days |
How to control or delete cookies
Most browsers allow you to change your cookie settings. These settings will typically be found in the “options” or “preferences” menu of your browser. In order to understand these settings and learn how to use them, please consult the “Help” function of your browser, or the documentation published online for your particular browser type and version. However, please note that if you choose to refuse cookies you may not be able to use the full functionality of our Website.
Depending on where you are located, you may also be able to change your cookie preferences using the cookies banner on our Website.
The following pages have information on how to change your cookies settings for the different browsers:
- Cookie settings in Chrome
- Cookie settings in Firefox
- Cookie settings in Internet Explorer
- Cookie settings in Safari and iOS
Third Party Websites' Cookies
When using our Website you may be directed to other websites. These websites may use their own cookies. We do not have control over the placement of cookies by other websites you visit, even if you are directed to them from our Website.
If you use the buttons that allow you to share products and content with your friends via social networks like Google, Twitter and Facebook, these companies may set a cookie on your computer memory. Find out more about these here:
https://www.facebook.com/about/privacy http://twitter.com/privacy http://www.google.com/intl/en-GB/policies/privacy
Need More Information?
If you would like to find out more about cookies and their use on the Internet, you may find the following link useful: All About Cookies.
Cookies that have been set in the past
If you have disabled one or more Cookies, we may still use information collected from cookies prior to your disabled preference being set, however, we will stop using the disabled cookie to collect any further information.
Contact us
If you have any questions or comments about this cookies policy, or privacy matters generally, please contact us via email at privacy@wiz.io.
Updated 17 July 2023
Effective September 11, 2023 to September 11, 2023
DownloadTable of Contents
Cookies Policy
Our website https://www.wiz.io/ ("Website") uses cookies and similar files or technologies to automatically collect and store information about your computer, device, and Website usage, in order to improve their performance and enhance your user experience. We use the general term "cookies" in this policy to refer to these technologies and all such similar technologies that collect information automatically when you are using our Website where this policy is posted. You can find out more about cookies and how to control them in the information below.
If you do not accept the use of these cookies, please disable them using the instructions in this Cookies Policy or by changing your browser settings so that cookies from this Website cannot be placed on your computer or mobile device. Important: disabling certain cookies on this Website may cripple the user experience and other features on the Website, to the point of rendering them useless.
In this Cookies Policy, we use the term Wiz (and "we", "us" and "our") to refer to Wiz Inc. and our affiliates. Our Privacy Policy is available at https://www.wiz.io/privacy-policy.
åWhat is a cookie?
Cookies are computer files containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies can then be sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. Cookies are widely used in order to make websites work, or to work more efficiently, as well as to provide information to the owners of the website.
Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences and generally improving the user experience. Cookies may tell us, for example, whether you have visited our Website before or whether you are a new visitor.
There are two broad categories of cookies:
- First Party cookies, served directly by us to your computer or mobile device.
- Third Party cookies, which are served by a third party on our behalf. We use third party cookies for functionality, performance / analytics, marketing, unclassified and other technologies, and social media purposes.
Cookies can remain on your computer or mobile device for different periods of time. Some cookies are 'session cookies', meaning that they exist only while your browser is open. These are deleted automatically once you close your browser. Other cookies are 'permanent cookies', meaning that they survive after your browser is closed. They can be used by websites to recognize your computer when you open your browser and browse the Internet again.
What are web beacons?
Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are small graphics files that contain a unique identifier that enable us to recognize when someone has visited our website. This allows us, for example, to monitor the traffic patterns of users from one page within our website to another, to deliver or communicate with cookies, to understand whether you have come to our website from an online advertisement displayed on a third party website, to improve website performance and to measure the success of email marketing campaigns. In most instances, these technologies are reliant on cookies to function, and therefore declining cookies prevents them from functioning.
If you don't want your cookie information to be associated with your visits to these pages, you can set your browser to turn off cookies as described further below. If you turn off cookies, web beacon and other technologies will still detect your visits to our Website; however, they will not be associated with information otherwise stored in cookies.
Targeted advertising
Third parties may drop cookies on your computer or mobile device to serve advertising through our Website. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying details unless you choose to provide these to us.
How do we use cookies?
We use cookies to:
- track traffic flow and patterns of travel and behavior in connection with our Website;
- understand the total number of visitors to our Websites on an ongoing basis and the types of internet browsers (e.g. Chrome, Firefox, Safari, or Internet Explorer) and operating systems (e.g. Windows or Mac) used by our visitors;
- monitor the performance of our Website and to continually improve it;
- in connection with our marketing and advertising efforts; and
- customize and enhance your online experience.
What types of cookies do we use?
The types of cookies used by us in connection with the Website can be considered “strictly necessary”, “performance or analytics cookies”, “marketing / targeting”, and “unclassified”. We've set out some further information below about each category.
Cookies strictly necessary for website purposes
These cookies are strictly necessary to provide you with services available through the Website and to use some of its features, such as access to secure areas. These cookies cannot be switched as without them we will not be able to provide essential website services.
Cookie Name | Type | Lifespan |
OptanonAlertBoxClosed | 1st Party | 1 year |
OptanonConsent | 1st Party | 1 year |
Performance / Analytics Cookies
We use performance/analytics cookies to analyze how the website is accessed, used, or is performing. We do this in order to provide you with a better user experience and to maintain, operate and continually improve the website. For example, these cookies allow us to:
- Better understand our website visitors so that we can improve how we present our content;
- Test different design ideas for particular pages, such as our homepage;
- Collect information about Website visitors such as where they are located and what browsers they are using;
- Determine the number of unique users of the website;
- Improve the website by measuring any errors that occur;
- Measuring campaign effectiveness; and
- Conduct research and diagnostics to improve product offerings.
Cookie Name | Type | Lifespan |
---|---|---|
_ga | 1st Party | 730 days |
_gid | 1st Party | 1 day |
_biz_sid | 1st Party | 0 days |
_biz_uid | 1st Party | 364 days |
_biz_nA | 1st Party | 364 days |
_biz_pendingA | 1st Party | 364 days |
_uetvid | 1st Party | 389 days |
_clsk | 1st Party | 0 days |
_session_id | 3rd Party | 13 days |
_clck | 1st Party | 364 days |
JSESSIONID | 3rd Party | 1 day |
_ga_xxxxxxx | 1st Party | 729 days |
ARRAffinity | 3rd Party | 0 days |
Functionality Cookies
These cookies enable the Website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
Cookie Name | Type | Lifespan |
_rdt_uuid | 1st Party | 90 days |
_gd_visitor | 1st Party | 730 days |
_gd_session | 1st Party | 0 days |
_mkto_trk | 1st Party | 730 days |
_an_uid | 1st Party | 6 days |
_gd_svisitor | 1st Party | 730 days |
vuid | 3rd party | 729 days |
__cf_bm | 3rd party | 0 days |
player | 3rd Party | 365 days |
__q_domainTest | 1st Party | 0 days |
Marketing / Targeting
We use marketing cookies to deliver many types of targeted digital marketing. We do this in order to provide you with a better user experience and to maintain, operate and continually improve the website. The cookie store user data and behavior information, which allows advertising services to target audience according to variables. For example, these cookies allow us to:
- Observe the Website performance and generate retargeting (Site retargeting, search retargeting, etc.).
- Maintain and improve the website and our products
Cookie Name | Type | Lifespan |
NO NAME | 3rd party | 0 days |
6suuid | 3rd party | 729 days |
lidc | 3rd party | 1 day |
_fbp | 1st Party | 90 days |
bcookie | 3rd party | 731 days |
bscookie | 3rd party | 731 days |
AnalyticsSyncHistory | 3rd party | 30 days |
UserMatchHistory | 3rd party | 30 days |
li_gc | 3rd party | 713 days |
_BUID | 3rd party | 364 days |
_biz_kvpA | 1st Party | 0 days |
_biz_dfsA | 1st Party | 0 days |
_BUID | 3rd party | 364 days |
VISITOR_INFO1_LIVE | 3rd party | 179 days |
YSC | 3rd party | 0 days |
CONSENT | 3rd party | 729 days |
_uetsid | 1st Party | 0 days |
ANONCHK | 3rd Party | 0 days |
SRM_B | 3rd Party | 389 days |
MUID | 3rd Party | 389 days |
SM | 3rd Party | 0 days |
muc_ads | 3rd Party | 729 days |
personalization_id | 3rd Party | 729 days |
in_or | 1st party | 0 days |
q_state_ubFjDH1QLqM69tJc | 1st Party | 3649 days |
_gat_UA-XXXXXX-X | 1st Party | 0 days |
_biz_flagsA | 1st Party | 364 days |
__cf_bm | 3rd Party | 0 days |
guest_id | 3rd Party | 729 days |
MR | 3rd Party | 6 days |
guest_id_ads | 3rd Party | 729 days |
_cfuvid | 3rd Party | 0 days |
li_sugr | 3rd Party | 89 days |
MUID | 3rd Party | 389 days |
guest_id_marketing | 3rd Party | 729 days |
ARRAffinitySameSite | 3rd Party | 0 days |
visitorId | 3rd Party | 364 days |
CLID | 3rd Party | 364 days |
MR | 3rd Party | 6 days |
How to control or delete cookies
Most browsers allow you to change your cookie settings. These settings will typically be found in the “options” or “preferences” menu of your browser. In order to understand these settings and learn how to use them, please consult the “Help” function of your browser, or the documentation published online for your particular browser type and version. However, please note that if you choose to refuse cookies you may not be able to use the full functionality of our Website.
Depending on where you are located, you may also be able to change your cookie preferences using the cookies banner on our Website.
The following pages have information on how to change your cookies settings for the different browsers:
- Cookie settings in Chrome
- Cookie settings in Firefox
- Cookie settings in Internet Explorer
- Cookie settings in Safari and iOS
Third Party Websites' Cookies
When using our Website you may be directed to other websites. These websites may use their own cookies. We do not have control over the placement of cookies by other websites you visit, even if you are directed to them from our Website.
If you use the buttons that allow you to share products and content with your friends via social networks like Google, Twitter and Facebook, these companies may set a cookie on your computer memory. Find out more about these here:
https://www.facebook.com/about/privacy http://twitter.com/privacy http://www.google.com/intl/en-GB/policies/privacy
Need More Information?
If you would like to find out more about cookies and their use on the Internet, you may find the following link useful: All About Cookies.
Cookies that have been set in the past
If you have disabled one or more Cookies, we may still use information collected from cookies prior to your disabled preference being set, however, we will stop using the disabled cookie to collect any further information.
Contact us
If you have any questions or comments about this cookies policy, or privacy matters generally, please contact us via email at privacy@wiz.io.
Updated 17 July 2023
Effective August 29, 2023 to September 11, 2023
DownloadTable of Contents
Cookies Policy
Our website https://www.wiz.io/ ("Website") uses cookies and similar files or technologies to automatically collect and store information about your computer, device, and Website usage, in order to improve their performance and enhance your user experience. We use the general term "cookies" in this policy to refer to these technologies and all such similar technologies that collect information automatically when you are using our Website where this policy is posted. You can find out more about cookies and how to control them in the information below.
If you do not accept the use of these cookies, please disable them using the instructions in this Cookies Policy or by changing your browser settings so that cookies from this Website cannot be placed on your computer or mobile device. Important: disabling certain cookies on this Website may cripple the user experience and other features on the Website, to the point of rendering them useless.
In this Cookies Policy, we use the term Wiz (and "we", "us" and "our") to refer to Wiz Inc. and our affiliates. Our Privacy Policy is available at https://www.wiz.io/privacy-policy.
What is a cookie?
Cookies are computer files containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies can then be sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. Cookies are widely used in order to make websites work, or to work more efficiently, as well as to provide information to the owners of the website.
Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences and generally improving the user experience. Cookies may tell us, for example, whether you have visited our Website before or whether you are a new visitor.
There are two broad categories of cookies:
- First Party cookies, served directly by us to your computer or mobile device.
- Third Party cookies, which are served by a third party on our behalf. We use third party cookies for functionality, performance / analytics, marketing, unclassified and other technologies, and social media purposes.
Cookies can remain on your computer or mobile device for different periods of time. Some cookies are 'session cookies', meaning that they exist only while your browser is open. These are deleted automatically once you close your browser. Other cookies are 'permanent cookies', meaning that they survive after your browser is closed. They can be used by websites to recognize your computer when you open your browser and browse the Internet again.
What are web beacons?
Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are small graphics files that contain a unique identifier that enable us to recognize when someone has visited our website. This allows us, for example, to monitor the traffic patterns of users from one page within our website to another, to deliver or communicate with cookies, to understand whether you have come to our website from an online advertisement displayed on a third party website, to improve website performance and to measure the success of email marketing campaigns. In most instances, these technologies are reliant on cookies to function, and therefore declining cookies prevents them from functioning.
If you don't want your cookie information to be associated with your visits to these pages, you can set your browser to turn off cookies as described further below. If you turn off cookies, web beacon and other technologies will still detect your visits to our Website; however, they will not be associated with information otherwise stored in cookies.
Targeted advertising
Third parties may drop cookies on your computer or mobile device to serve advertising through our Website. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying details unless you choose to provide these to us.
How do we use cookies?
We use cookies to:
- track traffic flow and patterns of travel and behavior in connection with our Website;
- understand the total number of visitors to our Websites on an ongoing basis and the types of internet browsers (e.g. Chrome, Firefox, Safari, or Internet Explorer) and operating systems (e.g. Windows or Mac) used by our visitors;
- monitor the performance of our Website and to continually improve it;
- in connection with our marketing and advertising efforts; and
- customize and enhance your online experience.
What types of cookies do we use?
The types of cookies used by us in connection with the Website can be considered “strictly necessary”, “performance or analytics cookies”, “marketing / targeting”, and “unclassified”. We've set out some further information below about each category.
Cookies strictly necessary for website purposes
These cookies are strictly necessary to provide you with services available through the Website and to use some of its features, such as access to secure areas. These cookies cannot be switched as without them we will not be able to provide essential website services.
Cookie Name | Type | Lifespan |
OptanonAlertBoxClosed | 1st Party | 1 year |
OptanonConsent | 1st Party | 1 year |
Performance / Analytics Cookies
We use performance/analytics cookies to analyze how the website is accessed, used, or is performing. We do this in order to provide you with a better user experience and to maintain, operate and continually improve the website. For example, these cookies allow us to:
- Better understand our website visitors so that we can improve how we present our content;
- Test different design ideas for particular pages, such as our homepage;
- Collect information about Website visitors such as where they are located and what browsers they are using;
- Determine the number of unique users of the website;
- Improve the website by measuring any errors that occur;
- Measuring campaign effectiveness; and
- Conduct research and diagnostics to improve product offerings.
Cookie Name | Type | Lifespan |
---|---|---|
_ga | 1st Party | 730 days |
_gid | 1st Party | 1 day |
_biz_sid | 1st Party | 0 days |
_biz_uid | 1st Party | 364 days |
_biz_nA | 1st Party | 364 days |
_biz_pendingA | 1st Party | 364 days |
_uetvid | 1st Party | 389 days |
_clsk | 1st Party | 0 days |
_session_id | 3rd Party | 13 days |
_clck | 1st Party | 364 days |
JSESSIONID | 3rd Party | 1 day |
_ga_xxxxxxx | 1st Party | 729 days |
ARRAffinity | 3rd Party | 0 days |
Functionality Cookies
These cookies enable the Website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
Cookie Name | Type | Lifespan |
_rdt_uuid | 1st Party | 90 days |
_gd_visitor | 1st Party | 730 days |
_gd_session | 1st Party | 0 days |
_mkto_trk | 1st Party | 730 days |
_an_uid | 1st Party | 6 days |
_gd_svisitor | 1st Party | 730 days |
vuid | 3rd party | 729 days |
__cf_bm | 3rd party | 0 days |
player | 3rd Party | 365 days |
__q_domainTest | 1st Party | 0 days |
Marketing / Targeting
We use marketing cookies to deliver many types of targeted digital marketing. We do this in order to provide you with a better user experience and to maintain, operate and continually improve the website. The cookie store user data and behavior information, which allows advertising services to target audience according to variables. For example, these cookies allow us to:
- Observe the Website performance and generate retargeting (Site retargeting, search retargeting, etc.).
- Maintain and improve the website and our products
Cookie Name | Type | Lifespan |
NO NAME | 3rd party | 0 days |
6suuid | 3rd party | 729 days |
lidc | 3rd party | 1 day |
_fbp | 1st Party | 90 days |
bcookie | 3rd party | 731 days |
bscookie | 3rd party | 731 days |
AnalyticsSyncHistory | 3rd party | 30 days |
UserMatchHistory | 3rd party | 30 days |
li_gc | 3rd party | 713 days |
_BUID | 3rd party | 364 days |
_biz_kvpA | 1st Party | 0 days |
_biz_dfsA | 1st Party | 0 days |
_BUID | 3rd party | 364 days |
VISITOR_INFO1_LIVE | 3rd party | 179 days |
YSC | 3rd party | 0 days |
CONSENT | 3rd party | 729 days |
_uetsid | 1st Party | 0 days |
ANONCHK | 3rd Party | 0 days |
SRM_B | 3rd Party | 389 days |
MUID | 3rd Party | 389 days |
SM | 3rd Party | 0 days |
muc_ads | 3rd Party | 729 days |
personalization_id | 3rd Party | 729 days |
in_or | 1st party | 0 days |
q_state_ubFjDH1QLqM69tJc | 1st Party | 3649 days |
_gat_UA-XXXXXX-X | 1st Party | 0 days |
_biz_flagsA | 1st Party | 364 days |
__cf_bm | 3rd Party | 0 days |
guest_id | 3rd Party | 729 days |
MR | 3rd Party | 6 days |
guest_id_ads | 3rd Party | 729 days |
_cfuvid | 3rd Party | 0 days |
li_sugr | 3rd Party | 89 days |
MUID | 3rd Party | 389 days |
guest_id_marketing | 3rd Party | 729 days |
ARRAffinitySameSite | 3rd Party | 0 days |
visitorId | 3rd Party | 364 days |
CLID | 3rd Party | 364 days |
MR | 3rd Party | 6 days |
How to control or delete cookies
Most browsers allow you to change your cookie settings. These settings will typically be found in the “options” or “preferences” menu of your browser. In order to understand these settings and learn how to use them, please consult the “Help” function of your browser, or the documentation published online for your particular browser type and version. However, please note that if you choose to refuse cookies you may not be able to use the full functionality of our Website.
Depending on where you are located, you may also be able to change your cookie preferences using the cookies banner on our Website.
The following pages have information on how to change your cookies settings for the different browsers:
- Cookie settings in Chrome
- Cookie settings in Firefox
- Cookie settings in Internet Explorer
- Cookie settings in Safari and iOS
Third Party Websites' Cookies
When using our Website you may be directed to other websites. These websites may use their own cookies. We do not have control over the placement of cookies by other websites you visit, even if you are directed to them from our Website.
If you use the buttons that allow you to share products and content with your friends via social networks like Google, Twitter and Facebook, these companies may set a cookie on your computer memory. Find out more about these here:
https://www.facebook.com/about/privacy http://twitter.com/privacy http://www.google.com/intl/en-GB/policies/privacy
Need More Information?
If you would like to find out more about cookies and their use on the Internet, you may find the following link useful: All About Cookies.
Cookies that have been set in the past
If you have disabled one or more Cookies, we may still use information collected from cookies prior to your disabled preference being set, however, we will stop using the disabled cookie to collect any further information.
Contact us
If you have any questions or comments about this cookies policy, or privacy matters generally, please contact us via email at privacy@wiz.io.
Updated 17 July 2023
Effective August 14, 2023 to August 29, 2023
DownloadTable of Contents
Cookies Policy
Our website https://www.wiz.io/ ("Website") uses cookies and similar files or technologies to automatically collect and store information about your computer, device, and Website usage, in order to improve their performance and enhance your user experience. We use the general term "cookies" in this policy to refer to these technologies and all such similar technologies that collect information automatically when you are using our Website where this policy is posted. You can find out more about cookies and how to control them in the information below.
If you do not accept the use of these cookies, please disable them using the instructions in this Cookies Policy or by changing your browser settings so that cookies from this Website cannot be placed on your computer or mobile device. Important: disabling certain cookies on this Website may cripple the user experience and other features on the Website, to the point of rendering them useless.
In this Cookies Policy, we use the term Wiz (and "we", "us" and "our") to refer to Wiz Inc. and our affiliates. Our Privacy Policy is available at https://www.wiz.io/privacy-policy.
What is a cookie?
Cookies are computer files containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies can then be sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. Cookies are widely used in order to make websites work, or to work more efficiently, as well as to provide information to the owners of the website.
Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences and generally improving the user experience. Cookies may tell us, for example, whether you have visited our Website before or whether you are a new visitor.
There are two broad categories of cookies:
- First Party cookies, served directly by us to your computer or mobile device.
- Third Party cookies, which are served by a third party on our behalf. We use third party cookies for functionality, performance / analytics, marketing, unclassified and other technologies, and social media purposes.
Cookies can remain on your computer or mobile device for different periods of time. Some cookies are 'session cookies', meaning that they exist only while your browser is open. These are deleted automatically once you close your browser. Other cookies are 'permanent cookies', meaning that they survive after your browser is closed. They can be used by websites to recognize your computer when you open your browser and browse the Internet again.
What are web beacons?
Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are small graphics files that contain a unique identifier that enable us to recognize when someone has visited our website. This allows us, for example, to monitor the traffic patterns of users from one page within our website to another, to deliver or communicate with cookies, to understand whether you have come to our website from an online advertisement displayed on a third party website, to improve website performance and to measure the success of email marketing campaigns. In most instances, these technologies are reliant on cookies to function, and therefore declining cookies prevents them from functioning.
If you don't want your cookie information to be associated with your visits to these pages, you can set your browser to turn off cookies as described further below. If you turn off cookies, web beacon and other technologies will still detect your visits to our Website; however, they will not be associated with information otherwise stored in cookies.
Targeted advertising
Third parties may drop cookies on your computer or mobile device to serve advertising through our Website. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying details unless you choose to provide these to us.
How do we use cookies?
We use cookies to:
- track traffic flow and patterns of travel and behavior in connection with our Website;
- understand the total number of visitors to our Websites on an ongoing basis and the types of internet browsers (e.g. Chrome, Firefox, Safari, or Internet Explorer) and operating systems (e.g. Windows or Mac) used by our visitors;
- monitor the performance of our Website and to continually improve it;
- in connection with our marketing and advertising efforts; and
- customize and enhance your online experience.
What types of cookies do we use?
The types of cookies used by us in connection with the Website can be considered “strictly necessary”, “performance or analytics cookies”, “marketing / targeting”, and “unclassified”. We've set out some further information below about each category.
Cookies strictly necessary for website purposes
These cookies are strictly necessary to provide you with services available through the Website and to use some of its features, such as access to secure areas. These cookies cannot be switched as without them we will not be able to provide essential website services.
Cookie Name | Type | Lifespan |
OptanonAlertBoxClosed | 1st Party | 1 year |
OptanonConsent | 1st Party | 1 year |
Performance / Analytics Cookies
We use performance/analytics cookies to analyze how the website is accessed, used, or is performing. We do this in order to provide you with a better user experience and to maintain, operate and continually improve the website. For example, these cookies allow us to:
- Better understand our website visitors so that we can improve how we present our content;
- Test different design ideas for particular pages, such as our homepage;
- Collect information about Website visitors such as where they are located and what browsers they are using;
- Determine the number of unique users of the website;
- Improve the website by measuring any errors that occur;
- Measuring campaign effectiveness; and
- Conduct research and diagnostics to improve product offerings.
Cookie Name | Type | Lifespan |
_ga | 1st Party | 730 days |
_gid | 1st Party | 1 day |
_biz_sid | 1st Party | 0 days |
_biz_uid | 1st Party | 364 days |
_biz_nA | 1st Party | 364 days |
_biz_pendingA | 1st Party | 364 days |
_uetvid | 1st Party | 389 days |
_clsk | 1st Party | 0 days |
_session_id | 3rd Party | 13 days |
_clck | 1st Party | 364 days |
JSESSIONID | 3rd Party | 1 day |
_ga_xxxxxxx | 1st Party | 729 days |
ARRAffinity | 3rd Party | 0 days |
Functionality Cookies
These cookies enable the Website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
Cookie Name | Type | Lifespan |
_rdt_uuid | 1st Party | 90 days |
_gd_visitor | 1st Party | 730 days |
_gd_session | 1st Party | 0 days |
_mkto_trk | 1st Party | 730 days |
_an_uid | 1st Party | 6 days |
_gd_svisitor | 1st Party | 730 days |
vuid | 3rd party | 729 days |
__cf_bm | 3rd party | 0 days |
player | 3rd Party | 365 days |
__q_domainTest | 1st Party | 0 days |
Marketing / Targeting
We use marketing cookies to deliver many types of targeted digital marketing. We do this in order to provide you with a better user experience and to maintain, operate and continually improve the website. The cookie store user data and behavior information, which allows advertising services to target audience according to variables. For example, these cookies allow us to:
- Observe the Website performance and generate retargeting (Site retargeting, search retargeting, etc.).
- Maintain and improve the website and our products
Cookie Name | Type | Lifespan |
NO NAME | 3rd party | 0 days |
6suuid | 3rd party | 729 days |
lidc | 3rd party | 1 day |
_fbp | 1st Party | 90 days |
bcookie | 3rd party | 731 days |
bscookie | 3rd party | 731 days |
AnalyticsSyncHistory | 3rd party | 30 days |
UserMatchHistory | 3rd party | 30 days |
li_gc | 3rd party | 713 days |
_BUID | 3rd party | 364 days |
_biz_kvpA | 1st Party | 0 days |
_biz_dfsA | 1st Party | 0 days |
_BUID | 3rd party | 364 days |
VISITOR_INFO1_LIVE | 3rd party | 179 days |
YSC | 3rd party | 0 days |
CONSENT | 3rd party | 729 days |
_uetsid | 1st Party | 0 days |
ANONCHK | 3rd Party | 0 days |
SRM_B | 3rd Party | 389 days |
MUID | 3rd Party | 389 days |
SM | 3rd Party | 0 days |
muc_ads | 3rd Party | 729 days |
personalization_id | 3rd Party | 729 days |
in_or | 1st party | 0 days |
q_state_ubFjDH1QLqM69tJc | 1st Party | 3649 days |
_gat_UA-XXXXXX-X | 1st Party | 0 days |
_biz_flagsA | 1st Party | 364 days |
__cf_bm | 3rd Party | 0 days |
guest_id | 3rd Party | 729 days |
MR | 3rd Party | 6 days |
guest_id_ads | 3rd Party | 729 days |
_cfuvid | 3rd Party | 0 days |
li_sugr | 3rd Party | 89 days |
MUID | 3rd Party | 389 days |
guest_id_marketing | 3rd Party | 729 days |
ARRAffinitySameSite | 3rd Party | 0 days |
visitorId | 3rd Party | 364 days |
CLID | 3rd Party | 364 days |
MR | 3rd Party | 6 days |
How to control or delete cookies
Most browsers allow you to change your cookie settings. These settings will typically be found in the “options” or “preferences” menu of your browser. In order to understand these settings and learn how to use them, please consult the “Help” function of your browser, or the documentation published online for your particular browser type and version. However, please note that if you choose to refuse cookies you may not be able to use the full functionality of our Website.
Depending on where you are located, you may also be able to change your cookie preferences using the cookies banner on our Website.
The following pages have information on how to change your cookies settings for the different browsers:
Third Party Websites' Cookies
When using our Website you may be directed to other websites. These websites may use their own cookies. We do not have control over the placement of cookies by other websites you visit, even if you are directed to them from our Website.
If you use the buttons that allow you to share products and content with your friends via social networks like Google, Twitter and Facebook, these companies may set a cookie on your computer memory. Find out more about these here:
https://www.facebook.com/about/privacy http://twitter.com/privacy http://www.google.com/intl/en-GB/policies/privacy
Need More Information?
If you would like to find out more about cookies and their use on the Internet, you may find the following link useful: All About Cookies.
Cookies that have been set in the past
If you have disabled one or more Cookies, we may still use information collected from cookies prior to your disabled preference being set, however, we will stop using the disabled cookie to collect any further information.
Contact us
If you have any questions or comments about this cookies policy, or privacy matters generally, please contact us via email at privacy@wiz.io.
Updated 17 July 2023