Halcyon Standard Terms & Conditions

ARTICLE 1  – DEFINITIONS 

For purposes of these Standard Terms and Conditions, the following terms shall have the meanings set forth below: 

1.1 Affiliate. 

“Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with a party. For purposes of this definition, “control” means ownership of more than fifty percent (50%) of the voting interests of an entity or the power to direct the management and policies of such entity. 

1.2 Authorized User. 

“Authorized User” means any employee, contractor, consultant, agent, representative, or other individual authorized by Client to access or use the Software on Client’s behalf. 

1.3 Client Data. 

“Client Data” means all information, records, files, documents, data, content, and materials submitted to, transmitted through, uploaded into, processed by, or otherwise provided to the Software by or on behalf of Client. 

Client Data does not include Derivative Information. 

1.4 Confidential Information. 

“Confidential Information” means any non-public business, financial, technical, operational, commercial, security, regulatory, product, customer, vendor, software, source code, trade secret, or proprietary information disclosed by one party to the other, whether disclosed orally, visually, electronically, or in writing, that a reasonable person would understand to be confidential given the nature of the information or the circumstances of disclosure. 

Confidential Information includes all Software, Documentation, security materials, audit reports, penetration testing reports, system architecture information, pricing information, product roadmaps, and non-public information relating to either party’s business. 

1.5 Derivative Information. 

“Derivative Information” means information, data, analytics, statistics, reports, benchmarks, models, outputs, algorithms, machine learning artifacts, metadata, trend information, or other materials that are created, generated, derived, aggregated, anonymized, de-identified, transformed, enhanced, or otherwise developed from Client Data, whether alone or in combination with data from other sources, provided that such information does not identify Client, a taxpayer, or any individual person. 

1.6 Documentation. 

“Documentation” means the user guides, technical documentation, implementation materials, specifications, operating instructions, training materials, and similar materials made available by Halcyon relating to the Software. 

1.7 Intellectual Property Rights. 

“Intellectual Property Rights” means all patents, patent rights, copyrights, copyright registrations, trademarks, service marks, trade names, trade dress, domain names, trade secrets, know-how, database rights, moral rights, mask works, inventions, algorithms, processes, methodologies, software, source code, object code, proprietary rights, and all other intellectual property or proprietary rights recognized under applicable law. 

1.8 Personally Identifiable Information or PII. 

“PII” means personally identifiable information, nonpublic personal information, or similar protected information as defined under applicable law, including the Gramm-Leach-Bliley Act and its implementing regulations. 

1.9 Software. 

“Software” means the software, platform, applications, APIs, services, functionality, technology, models, databases, tools, reports, outputs, Documentation, and related offerings made available by Halcyon pursuant to an Order Form. 

1.10 Taxpayer. 

“Taxpayer” means any individual, business entity, trust, estate, organization, or other person whose information, records, tax-related information, or other data is processed through the Software. 

1.11 Third-Party Provider. 

“Third-Party Provider” means any governmental authority, regulatory authority, data provider, vendor, subcontractor, service provider, cloud provider, financial institution, technology provider, or other third party utilized by Halcyon in connection with the Software. 

ARTICLE 2  – USE RIGHTS AND RESTRICTIONS 

2.1 Authorized Use. 

Client shall access and use the Software solely in accordance with the Agreement, applicable Order Forms, applicable law, and the Regulatory Schedule. 

2.2 Restrictions. 

Except as expressly authorized in writing by Halcyon, Client shall not, and shall not permit any third party to: 

(a) copy, reproduce, modify, adapt, translate, distribute, sell, sublicense, lease, rent, timeshare, or otherwise make the Software available to any third party; 

(b) reverse engineer, decompile, disassemble, decode, attempt to derive source code from, or otherwise attempt to discover the underlying structure, algorithms, architecture, methods, techniques, or ideas embodied in the Software; 

(c) create derivative works based upon the Software; 

(d) remove, alter, obscure, or modify any copyright, trademark, proprietary rights notice, disclaimer, or legend appearing in or on the Software; 

(e) access or use the Software for purposes of developing, training, improving, benchmarking, validating, marketing, supporting, or operating any competing product, service, platform, model, algorithm, or technology; 

(f) use the Software to create, train, fine tune, validate, improve, benchmark, test, or otherwise support any artificial intelligence, machine learning, large language model, predictive model, automation engine, or similar technology; 

(g) scrape, harvest, extract, download, mine, collect, or systematically retrieve data, outputs, metadata, reports, algorithms, models, or information from the Software except as expressly permitted by the Agreement; 

(h) circumvent or attempt to circumvent any security measure, authentication mechanism, access control, usage limitation, monitoring capability, or technological protection measure incorporated into the Software; 

(i) interfere with, disrupt, degrade, damage, disable, overburden, or impair the Software or any systems, infrastructure, or services used to provide the Software; 

(j) use the Software in violation of applicable law, regulatory requirements, governmental requirements, taxpayer authorization requirements, or third-party provider requirements; or 

(k) access or use the Software in any manner that exceeds the scope of rights granted under the applicable Order Form. 

2.3 Responsibility for Authorized Users. 

Client shall be responsible and liable for all acts and omissions of its Authorized Users and any person accessing the Software through Client’s accounts, credentials, systems, devices, or networks. 

2.4 Cooperation. 

Client shall reasonably cooperate with Halcyon in investigating suspected violations of the Agreement, misuse of the Software, security incidents, regulatory inquiries, or unauthorized access to the Software. 

2.5 Monitoring. 

Halcyon may monitor access to and use of the Software for security, compliance, operational, regulatory, audit, support, quality assurance, product improvement, and enforcement purposes. 

ARTICLE 3 – PLATFORM OPERATIONS AND SERVICE ADMINISTRATION 

3.1 Provision of Software. 

Halcyon shall make the Software available to Client in accordance with the Agreement, applicable Order Forms, and applicable law. 

Client acknowledges that the Software is a dynamic technology platform that may evolve, change, and be enhanced over time. 

3.2 Platform Administration. 

Halcyon shall have sole discretion and control over the operation, administration, management, support, maintenance, configuration, architecture, hosting, delivery, security, and provisioning of the Software. 

Nothing in the Agreement shall be construed to require Halcyon to utilize any specific technology, infrastructure, methodology, workflow, service provider, hosting environment, integration, data source, or operational process. 

3.3 Third-Party Providers and Affiliates. 

Halcyon may utilize Affiliates, subcontractors, cloud providers, technology providers, data providers, financial institutions, contractors, service providers, consultants, and other Third-Party Providers in connection with the Software and performance of its obligations under the Agreement. 

Halcyon shall remain responsible for the performance of any material obligations delegated to such parties to the same extent as if performed directly by Halcyon. 

3.4 Modifications and Enhancements. 

Halcyon may modify, update, upgrade, replace, discontinue, enhance, redesign, or otherwise change the Software, including features, functionality, interfaces, workflows, data sources, integrations, reporting, user experiences, technical requirements, security requirements, and operational processes. 

Provided that Halcyon does not materially reduce the core functionality of the Software purchased under an applicable Order Form during its then-current term, such modifications shall not constitute a breach of the Agreement. 

3.5 Regulatory and Data Source Changes. 

Client acknowledges that the Software relies upon data, systems, services, infrastructure, permissions, authorizations, and access rights provided by governmental authorities, regulatory authorities, financial institutions, taxpayers, and Third-Party Providers. 

Halcyon shall not be responsible for interruptions, delays, limitations, inaccuracies, unavailability, modifications, suspensions, or discontinuation arising from: (a) actions or inactions of any governmental authority; (b) Internal Revenue Service requirements or restrictions; (c) taxpayer authorization requirements; (d) Third-Party Provider actions or restrictions; (e) changes in law or regulation; or (f) limitations on Halcyon’s lawful ability to obtain, access, process, use, or provide data. 

3.6 Security and Operational Measures. 

Halcyon may implement and enforce such administrative, technical, operational, security, authentication, monitoring, access control, fraud prevention, identity verification, record retention, data governance, and compliance measures as Halcyon determines necessary or appropriate to: (a) protect the Software; (b) comply with applicable law; (c) comply with Regulatory Schedule requirements; (d) satisfy Third-Party Provider requirements; (e) protect taxpayer information; or (f) mitigate operational, legal, regulatory, cybersecurity, fraud, reputational, or business risk. 

Client shall reasonably cooperate with the implementation of such measures. 

3.7 Maintenance. 

Halcyon may perform scheduled or emergency maintenance, repairs, upgrades, patches, updates, migrations, security activities, testing, and other operational activities affecting the Software. 

Halcyon shall use commercially reasonable efforts to minimize disruptions associated with scheduled maintenance. 

3.8 Monitoring and Usage Analytics. 

Halcyon may monitor access to and use of the Software for security, compliance, audit, operational, support, quality assurance, training, analytics, product improvement, fraud prevention, and enforcement purposes. 

Client acknowledges and agrees that Halcyon may collect and utilize usage statistics, performance metrics, telemetry data, diagnostic information, and other operational information relating to the Software and its use. 

3.9 No Obligation to Continue Specific Features. 

Except as expressly set forth in an applicable Order Form, Halcyon shall have no obligation to continue offering any specific feature, integration, functionality, report, data source, workflow, product module, or service offering. 

 ARTICLE 4 – REGULATORY COMPLIANCE 

4.1 Compliance Obligations. 

Client shall comply with: (a) the Agreement; (b) the Regulatory Schedule; (c) all applicable federal, state, local, and foreign laws, regulations, rules, guidance, orders, and governmental requirements; (d) all requirements imposed by governmental authorities, regulatory authorities, financial institutions, data providers, and Third-Party Providers applicable to Client’s use of the Software; and (e) all lawful instructions, policies, procedures, and operational requirements reasonably implemented by Halcyon to maintain lawful, secure, and compliant operation of the Software. 

4.2 Taxpayer Authorizations and Consents. 

Client shall obtain and maintain all authorizations, permissions, disclosures, acknowledgements, certifications, consents, and approvals required to permit: (a) Client’s use of the Software; (b) Halcyon’s performance of the services; (c) the retrieval, access, processing, use, storage, transmission, and disclosure of data contemplated by the Agreement; and 

(d) compliance with applicable law, regulatory requirements, governmental requirements, and Third-Party Provider requirements. 

Client acknowledges that Halcyon relies upon the validity and sufficiency of such authorizations and consents in performing its obligations under the Agreement. 

4.3 Verification of Identity and Authority. 

Client shall be solely responsible for verifying the identity, authority, legitimacy, and authorization of each Taxpayer, applicant, customer, borrower, account holder, or other individual or entity whose information is submitted to or processed through the Software. 

Client acknowledges that Halcyon is not responsible for independently verifying the identity, authority, or legitimacy of any such person unless expressly agreed in writing through a separate service offering. 

4.4 Compliance Program. 

Client shall maintain policies, procedures, controls, training, recordkeeping, and compliance processes reasonably designed to satisfy applicable legal, regulatory, and operational requirements relating to Client’s use of the Software. 

Upon reasonable request, Client shall certify its compliance with this Article 4 and the Regulatory Schedule. 

4.5 Audit Rights. 

To verify compliance with the Agreement, Regulatory Schedule, applicable law, or Third-Party Provider requirements, Halcyon may, upon reasonable advance notice, request information, certifications, records, documentation, policies, procedures, or other materials reasonably necessary to verify Client’s compliance. 

If Halcyon reasonably believes that a material compliance violation exists, or if required by a governmental authority, regulator, financial institution, data provider, investor, auditor, insurer, or Third-Party Provider, Halcyon may conduct additional compliance reviews or require supplemental certifications. 

Client shall reasonably cooperate with any such review. 

4.6 Regulatory Inquiries. 

Client shall promptly notify Halcyon of: (a) any actual or suspected material violation of applicable law relating to the Software; (b) any governmental inquiry, investigation, examination, subpoena, civil investigative demand, enforcement action, consent order, or similar proceeding that may reasonably affect Client’s use of the Software; (c) any suspension, restriction, revocation, or material limitation affecting Client’s authority to conduct its business; or (d) any material event that may adversely affect Client’s ability to satisfy its obligations under the Agreement or Regulatory Schedule. 

4.7 Changes in Requirements. 

Client acknowledges that legal, regulatory, governmental, financial institution, taxpayer authorization, data access, privacy, cybersecurity, fraud prevention, identity verification, and operational requirements may change from time to time. 

Halcyon may implement reasonable modifications to policies, procedures, operational requirements, onboarding requirements, documentation requirements, security controls, reporting requirements, compliance obligations, and client responsibilities as necessary to satisfy obligations imposed upon Halcyon by governmental authorities, financial institutions, data providers, investors, insurers, auditors, or other third parties whose requirements affect Halcyon’s ability to lawfully or commercially provide the Software. 

4.8 Third-Party Beneficiaries. 

To the extent expressly required by a governmental authority, financial institution, data provider, regulatory authority, investor, insurer, auditor, or Third-Party Provider, such party may be designated as an intended third-party beneficiary of specific compliance obligations contained within the Regulatory Schedule. 

No other provision of the Agreement shall create third-party beneficiary rights. 

4.9 Material Breach. 

Any material violation of this Article 4 or the Regulatory Schedule shall constitute a material breach of the Agreement and may result in suspension or termination of access to the Software. 

 ARTICLE 5 – CLIENT DATA 

5.1 Client Data. 

As between the parties, Client retains all right, title, and interest in and to Client Data. 

Except for the limited rights expressly granted under the Agreement, nothing in the Agreement transfers ownership of Client Data to Halcyon. 

5.2 Authorized Taxpayer Data. 

For purposes of the Agreement, “Authorized Taxpayer Data” means any information, records, tax return information, tax transcripts, transcript data, taxpayer information, financial information, income information, verification information, or related materials obtained by Halcyon directly or indirectly pursuant to a consent, authorization, disclosure, acknowledgement, or permission granted directly to Halcyon by a Taxpayer, including without limitation any authorization obtained through Form 1177, Form 8821, any successor form, any electronic authorization process, or any other taxpayer authorization mechanism utilized by Halcyon. 

Authorized Taxpayer Data shall not constitute: (a) Client Data; (b) Confidential Information of Client; (c) information held by Halcyon on behalf of Client; or (d) information owned by Client solely because Client introduced, referred, originated, serviced, processed, or maintained a relationship with the applicable Taxpayer. 

Client acknowledges and agrees that Authorized Taxpayer Data is obtained pursuant to rights granted directly to Halcyon by the applicable Taxpayer and may be used, retained, disclosed, processed, transmitted, stored, and otherwise handled by Halcyon in accordance with applicable law, the applicable taxpayer authorization, and the Agreement. 

Nothing in the Agreement shall be construed as creating in Client any ownership interest in Authorized Taxpayer Data. 

5.3 License to Client Data. 

Client grants to Halcyon and its Affiliates, contractors, service providers, and Third-Party Providers involved in the provision of the Software a worldwide, non-exclusive, royalty-free right and license to access, use, host, store, reproduce, transmit, process, modify, display, disclose, and otherwise utilize Client Data as reasonably necessary to: (a) provide the Software and related services; (b) perform obligations under the Agreement; (c) comply with applicable law and regulatory requirements; (d) prevent fraud, abuse, misuse, unauthorized activity, and security threats; (e) conduct quality assurance, testing, support, troubleshooting, and operational activities; and (f) create Derivative Information. 

5.4 Derivative Information. 

Halcyon shall exclusively own all right, title, and interest in and to Derivative Information. 

Client acknowledges that Derivative Information may be derived from: 

(a) Client Data; 

(b) Authorized Taxpayer Data; 

(c) Operational Data; 

(d) publicly available information; 

(e) third-party information; or 

(f) any combination thereof. 

Derivative Information shall be deemed the exclusive property of Halcyon regardless of the source materials used in its creation. 

Client shall have no ownership interest in Derivative Information and no right to inspect, recover, reconstruct, reverse engineer, attribute, identify, or request deletion of Derivative Information. 

Halcyon may create, use, retain, commercialize, license, disclose, transfer, and otherwise exploit Derivative Information for any lawful business purpose without restriction or accounting to Client. 

5.5 No Re-Identification Obligation. 

Nothing in the Agreement shall require Halcyon to identify, track, segregate, reconstruct, or attribute any Derivative Information to Client, any Taxpayer, or any particular source of data. 

5.6 Data Retention and Deletion. 

Subject to applicable law, regulatory requirements, litigation holds, governmental requests, contractual obligations, internal compliance requirements, backup procedures, and legitimate business purposes, Halcyon may retain Client Data and other information for such period as Halcyon reasonably determines necessary. 

Upon expiration of applicable retention periods, Halcyon may delete or destroy such information in accordance with its then-current policies and procedures. 

5.7 Operational Data. 

Halcyon shall own all right, title, and interest in and to usage data, telemetry data, audit logs, access logs, system data, diagnostic information, performance metrics, metadata, operational information, security information, and other information generated through the operation, administration, support, monitoring, or use of the Software. 

5.8 No Fiduciary or Agency Relationship. 

Client acknowledges that, with respect to Authorized Taxpayer Data, Halcyon acts pursuant to rights granted directly by the applicable Taxpayer and not as Client’s fiduciary, trustee, bailee, custodian, agent, or representative. 

Nothing in the Agreement shall be construed as creating a fiduciary, agency, custodial, or trust relationship between Halcyon and Client with respect to Authorized Taxpayer Data. 

 ARTICLE 6 – INTELLECTUAL PROPERTY 

6.1 Ownership of Software and Intellectual Property. 

The Software is licensed and not sold. 

As between the parties, Halcyon and its licensors exclusively own and shall retain all right, title, and interest in and to: (a) the Software; (b) the Documentation; (c) all Intellectual Property Rights embodied in, related to, or arising from the Software; (d) all products, services, technologies, methodologies, workflows, business processes, systems, designs, algorithms, models, reports, analytics, databases, interfaces, integrations, and tools developed, used, or provided by Halcyon; (e) all Derivative Information; (f) all Operational Data; and (g) all modifications, enhancements, updates, upgrades, improvements, derivative works, and extensions of any of the foregoing. 

Except for the limited rights expressly granted under the Agreement, no rights are granted to Client by implication, estoppel, exhaustion, or otherwise. 

6.2 Reservation of Rights. 

Halcyon reserves all rights not expressly granted under the Agreement. 

Client acknowledges that the Software and related technologies contain valuable trade secrets and proprietary information belonging to Halcyon and its licensors. 

6.3 Improvements. 

Any modification, enhancement, adaptation, derivative work, improvement, customization, configuration, extension, feature enhancement, workflow enhancement, integration enhancement, report enhancement, model enhancement, or similar improvement relating to the Software or any Halcyon technology developed, conceived, suggested, requested, funded, sponsored, or otherwise arising from Client’s use of the Software (collectively, “Improvements”) shall be exclusively owned by Halcyon. 

To the extent any ownership interest in an Improvement may vest in Client by operation of law, Client hereby irrevocably assigns to Halcyon all right, title, and interest in and to such Improvement, including all associated Intellectual Property Rights. 

6.4 Feedback. 

Client may from time to time provide suggestions, comments, ideas, recommendations, enhancement requests, feature requests, corrections, improvements, observations, or other feedback relating to the Software or Halcyon’s products or services (“Feedback”). 

Client hereby irrevocably assigns to Halcyon all right, title, and interest in and to all Feedback and all Intellectual Property Rights associated therewith. 

Halcyon shall be free to use, commercialize, modify, disclose, reproduce, distribute, license, and otherwise exploit Feedback without restriction, obligation, attribution, approval, or compensation. 

6.5 Models, Analytics, and Learning Systems. 

Without limiting the foregoing, Halcyon shall exclusively own all right, title, and interest in and to: (a) machine learning models; (b) artificial intelligence systems; (c) predictive models; (d) scoring methodologies; (e) fraud detection systems; (f) identity verification systems; (g) underwriting tools; (h) income calculation methodologies; (i) automation systems; (j) training data sets; (k) model outputs; (l) model parameters; (m) analytics frameworks; and (n) any other technologies developed, trained, enhanced, informed, or improved through use of the Software, Derivative Information, Operational Data, Excluded Data, Feedback, or Improvements. 

6.6 No Challenge. 

Client shall not, directly or indirectly: (a) challenge the validity, ownership, enforceability, or scope of Halcyon’s Intellectual Property Rights; (b) assist any third party in challenging Halcyon’s Intellectual Property Rights; or (c) seek registration, ownership, protection, or enforcement of any rights inconsistent with Halcyon’s ownership rights under the Agreement. 

6.7 Trademarks and Publicity. 

Except as expressly permitted in writing by Halcyon, Client shall not use Halcyon’s name, trademarks, service marks, logos, trade dress, branding, or other identifying materials. 

Subject to Client’s right to revoke such permission upon written notice, Halcyon may identify Client as a customer of Halcyon in customer lists, investor materials, presentations, proposals, websites, and marketing materials consistent with Halcyon’s ordinary business practices. 

6.8 Protection of Intellectual Property. 

Client shall promptly notify Halcyon of any actual or suspected infringement, misappropriation, unauthorized use, security breach, data scraping activity, competitive misuse, or other violation relating to the Software or Halcyon’s Intellectual Property Rights that becomes known to Client. 

6.9 Equitable Relief. 

Client acknowledges that a breach of this Article 6 may cause irreparable harm for which monetary damages alone would be an inadequate remedy. 

Accordingly, Halcyon shall be entitled to seek temporary, preliminary, and permanent injunctive relief, specific performance, and other equitable remedies, without the necessity of posting bond or proving actual damages, in addition to any other remedies available at law or in equity. 

 ARTICLE 7 – SUSPENSION RIGHTS 

7.1 Suspension Authority. 

Halcyon may suspend, restrict, disable, condition, or terminate access to all or any portion of the Software immediately upon written notice, or without prior notice where reasonably necessary to protect the Software, taxpayers, data, regulatory compliance, Intellectual Property Rights, or Halcyon’s legitimate business interests. 

7.2 Suspension Events. 

Without limiting any other rights or remedies available under the Agreement, Halcyon may suspend access to the Software if: (a) Client fails to pay any undisputed amount when due; (b) Halcyon reasonably believes Client has violated the Agreement, Regulatory Schedule, or applicable law; (c) Halcyon reasonably believes Client has violated any Intellectual Property Rights of Halcyon or a third party; (d) Halcyon reasonably believes continued access may create cybersecurity, fraud, operational, regulatory, legal, reputational, or business risk; (e) Halcyon receives a request, directive, subpoena, order, requirement, or recommendation from a governmental authority, regulator, financial institution, insurer, investor, auditor, data provider, or Third-Party Provider; (f) Client fails to cooperate with a compliance review, audit, investigation, certification request, or security inquiry; (g) Halcyon reasonably believes taxpayer authorizations, permissions, consents, or certifications are invalid, insufficient, expired, inaccurate, or otherwise non-compliant; or (h) any event occurs that would reasonably permit termination of the Agreement. 

7.3 Unauthorized Use of Transcript Data and Income Information. 

Client acknowledges that a material inducement for Halcyon to provide access to the Software is Client’s agreement to utilize Halcyon’s authorized methodologies, workflows, and technologies for the processing, interpretation, analysis, calculation, verification, and utilization of transcript-derived information. 

Accordingly, Client shall not, directly or indirectly: 

(a) use transcript information, transcript-derived information, Excluded Data, Derivative Information, income information, calculated income information, verification information, or any output generated through the Software in connection with any third-party or internally developed income calculator, income analyzer, income determination engine, underwriting model, decision engine, scoring system, risk model, verification platform, automation platform, artificial intelligence system, machine learning system, or similar technology; 

(b) use any transcript data or transcript-derived data obtained through the Software to train, support, validate, improve, calibrate, benchmark, test, or operate any income calculation or income analysis solution other than a Halcyon-authorized solution; 

(c) extract, copy, replicate, recreate, emulate, reverse engineer, validate, benchmark, compare against, or otherwise attempt to derive the logic, methodology, operation, or outputs of any Halcyon income calculation, verification, or analytical process; or 

(d) use transcript information obtained through the Software in any manner intended to avoid, replace, compete with, or circumvent Halcyon’s income calculation, verification, underwriting, fraud prevention, or analytical products. 

7.4 Presumption of Material Breach. 

Any violation of Section 7.3 shall constitute a material breach of the Agreement and shall be deemed incapable of cure due to the substantial risk of irreparable harm to Halcyon’s Intellectual Property Rights, trade secrets, competitive position, business model, and proprietary methodologies. 

7.5 Investigation Rights. 

Upon reasonable request, Client shall provide information reasonably necessary for Halcyon to investigate suspected violations of this Article 7, including information concerning the systems, workflows, products, software applications, integrations, vendors, service providers, and technologies used in connection with transcript information obtained through the Software. 

7.6 Reinstatement. 

Halcyon may condition reinstatement of suspended access upon remediation of the underlying issue, delivery of certifications, implementation of corrective measures, payment of outstanding amounts, completion of compliance reviews, or satisfaction of such other conditions as Halcyon reasonably determines appropriate. 

7.7 No Waiver. 

A suspension shall not constitute a waiver of any right to terminate the Agreement or pursue any other remedies available at law or in equity. 

7.8 Continuing Payment Obligations. 

Unless otherwise expressly agreed in writing, suspension of access to the Software shall not relieve Client of any payment obligations accrued prior to the suspension or otherwise owed under the Agreement. 

 ARTICLE 8 – CONFIDENTIALITY 

8.1 Confidential Information. 

“Confidential Information” means any non-public information disclosed by one party (“Disclosing Party”) to the other party (“Receiving Party”) that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. 

Without limitation, Halcyon’s Confidential Information includes the Software, Documentation, product designs, methodologies, algorithms, models, source code, object code, workflows, business processes, security information, audit reports, penetration testing reports, pricing, product roadmaps, Derivative Information, Operational Data, Improvements, Feedback, and all non-public information relating to the Software or Halcyon’s business. 

8.2 Exclusions. 

Confidential Information shall not include information that: (a) is or becomes publicly available through no fault of the Receiving Party; (b) was lawfully known to the Receiving Party without restriction prior to disclosure; (c) is lawfully obtained from a third party without restriction on disclosure; (d) is independently developed without use of or reference to the Disclosing Party’s Confidential Information; or (e) constitutes Authorized Taxpayer Data. 

8.3 Authorized Taxpayer Data. 

Client acknowledges that Authorized Taxpayer Data is obtained pursuant to rights granted directly to Halcyon by the applicable Taxpayer and is governed by applicable law, including the Internal Revenue Code and related regulations, together with the terms of the applicable taxpayer authorization. 

8.4 Non-Disclosure Obligations. 

Each Receiving Party shall: (a) protect Confidential Information using at least the same degree of care it uses to protect its own confidential information of a similar nature, but not less than a commercially reasonable degree of care; (b) use Confidential Information solely for purposes of exercising its rights and performing its obligations under the Agreement; and 

(c) disclose Confidential Information only to those employees, contractors, Affiliates, professional advisors, auditors, service providers, and representatives who have a need to know such information and who are bound by confidentiality obligations no less protective than those contained herein. 

8.5 Required Disclosures. 

A Receiving Party may disclose Confidential Information to the extent required by law, regulation, subpoena, court order, governmental request, regulatory examination, audit, or similar legal process, provided that, where legally permitted, the Receiving Party provides reasonable advance notice to the Disclosing Party. 

8.6 Equitable Relief. 

Each party acknowledges that unauthorized use or disclosure of Confidential Information may cause irreparable harm for which monetary damages alone may be inadequate. Accordingly, the Disclosing Party shall be entitled to seek injunctive relief, specific performance, and other equitable remedies in addition to any other remedies available at law or in equity. 

8.7 Limitation on Client Claims Relating to Authorized Taxpayer Data. 

To the fullest extent permitted by applicable law, Client waives and releases any claim against Halcyon arising solely from Halcyon’s collection, receipt, access, storage, processing, use, disclosure, transmission, retention, or destruction of Authorized Taxpayer Data, except to the extent resulting from Halcyon’s fraud, willful misconduct, or knowing violation of applicable law. 

Nothing in this Section shall limit any rights or remedies that may be possessed by the applicable Taxpayer under applicable law. 

ARTICLE 9 – AVAILABILITY, SUPPORT, AND SERVICE ADMINISTRATION 

9.1 Availability. 

Subject to the terms of the Agreement, Halcyon shall use commercially reasonable efforts to make the Software available to Client. 

Client acknowledges that the Software is dependent upon governmental authorities, third-party providers, telecommunications networks, cloud infrastructure, financial institutions, internet connectivity, taxpayer authorizations, and other systems and services outside of Halcyon’s reasonable control. 

9.2 No Guaranteed Availability. 

Except as expressly set forth in an applicable Order Form, Halcyon does not guarantee: (a) uninterrupted availability of the Software; (b) uninterrupted access to any governmental system or database; (c) uninterrupted access to any third-party data source; (d) uninterrupted access to any financial institution integration; (e) uninterrupted access to taxpayer information or tax transcript information; (f) availability of any specific feature, functionality, integration, report, workflow, or service; or (g) that the Software will operate without interruption, delay, degradation, error, or downtime. 

9.3 Maintenance. 

Halcyon may perform scheduled maintenance, emergency maintenance, upgrades, patches, repairs, migrations, security activities, testing, and other operational activities affecting the Software. 

Halcyon shall use commercially reasonable efforts to minimize disruptions associated with scheduled maintenance but shall have no liability for downtime, delays, interruptions, or service degradation resulting from such activities. 

9.4 Governmental and Regulatory Dependencies. 

Client acknowledges that certain Software functionality depends upon: (a) the Internal Revenue Service; (b) state taxing authorities; (c) governmental authorities; (d) taxpayer authorizations and consents; (e) regulatory agencies; (f) financial institutions; and (g) Third-Party Providers. 

Halcyon shall not be responsible for delays, interruptions, inaccuracies, unavailability, failures, limitations, restrictions, suspensions, or changes resulting from actions or omissions of any such parties. 

9.5 Government Shutdowns and Government Service Interruptions. 

Without limiting the foregoing, Halcyon shall not be responsible for any interruption, degradation, delay, limitation, suspension, inaccuracy, or unavailability of the Software arising from: (a) federal, state, local, or foreign government shutdowns; (b) furloughs of governmental personnel; (c) governmental funding interruptions; (d) suspension or limitation of governmental operations; (e) closure or restricted operation of governmental systems; (f) Internal Revenue Service processing delays; (g) Internal Revenue Service transcript retrieval delays; (h) Internal Revenue Service system outages; (i) changes to governmental forms, procedures, requirements, authorizations, or workflows; or (j) any governmental action or inaction affecting Halcyon’s ability to access, retrieve, process, verify, transmit, or provide information. 

Such events shall not constitute a breach of the Agreement by Halcyon. 

9.6 Support Services. 

Any implementation, onboarding, training, technical support, customer success, or other support services shall be provided in accordance with the applicable Order Form or Halcyon’s then-current support practices. 

Halcyon may modify support procedures, support channels, support personnel, escalation procedures, documentation, and support offerings from time to time. 

9.7 Security and Operational Actions. 

Halcyon may take any action it reasonably determines necessary or appropriate to: (a) protect the Software; (b) protect taxpayer information; (c) comply with law or regulatory requirements; (d) satisfy Third-Party Provider requirements; (e) address cybersecurity risks; (f) investigate suspected misuse of the Software; (g) prevent fraud or abuse; or (h) preserve the integrity, security, or availability of the Software. 

Such actions may include temporary suspension, access restrictions, credential resets, enhanced authentication requirements, system modifications, workflow changes, or other operational measures. 

9.8 No Responsibility for Third-Party Services. 

Halcyon shall not be responsible for the acts, omissions, availability, performance, security, accuracy, legality, or reliability of any governmental authority, financial institution, cloud provider, telecommunications provider, taxpayer, data provider, integration partner, or other Third-Party Provider. 

9.9 Service Changes. 

Halcyon reserves the right to modify, replace, discontinue, enhance, redesign, suspend, or retire any feature, functionality, integration, workflow, report, service component, or offering, provided that Halcyon does not materially reduce the core functionality of the Software purchased under an active Order Form during the applicable Order Form term. 

 ARTICLE 10 – REPRESENTATIONS AND WARRANTIES 

10.1 Mutual Authority. 

Each party represents and warrants that: (a) it is duly organized, validly existing, and in good standing under the laws of its jurisdiction of organization; (b) it possesses all necessary power and authority to enter into and perform the Agreement; (c) the Agreement constitutes a valid and binding obligation enforceable against such party in accordance with its terms; and (d) the execution, delivery, and performance of the Agreement do not violate any agreement by which such party is bound. 

10.2 Halcyon Limited Warranty. 

Halcyon represents and warrants that: 

(a) it has the right to grant the rights and licenses expressly granted under the Agreement; and 

(b) it will utilize commercially reasonable administrative, technical, and organizational safeguards designed to protect information maintained by Halcyon within the Software. 

10.3 Client Warranties. 

Client represents and warrants that: (a) Client possesses all rights, permissions, authorizations, consents, licenses, and approvals necessary for Client’s use of the Software; (b) Client shall comply with all applicable laws, regulations, governmental requirements, Regulatory Schedule requirements, and taxpayer authorization requirements; (c) all information provided by Client to Halcyon shall be accurate and complete in all material respects; (d) Client shall not use the Software in any unlawful, fraudulent, deceptive, unauthorized, or misleading manner; and (e) Client shall maintain all authorizations necessary for Halcyon’s access to and use of information submitted through the Software. 

10.4 Third-Party and Governmental Dependencies. 

Client acknowledges that the Software relies upon information, systems, infrastructure, authorizations, responses, and services provided by governmental authorities, taxpayers, financial institutions, Third-Party Providers, and other external parties. 

Accordingly, Halcyon does not warrant and expressly disclaims responsibility for: (a) the accuracy, completeness, timeliness, availability, legality, or reliability of information obtained from governmental authorities, taxpayers, financial institutions, or Third-Party Providers; (b) the availability, performance, operation, security, uptime, functionality, or responsiveness of governmental systems or Third-Party Provider systems; (c) taxpayer actions or omissions; (d) governmental actions or omissions; (e) regulatory changes; (f) interruptions, delays, inaccuracies, or failures arising from any external source outside of Halcyon’s reasonable control; or (g) the decisions, actions, conclusions, underwriting determinations, lending decisions, compliance decisions, business decisions, or other activities undertaken by Client based upon information obtained through the Software. 

10.5 No Guarantee of Results. 

The Software is a tool intended to assist Client in obtaining, organizing, analyzing, verifying, processing, and utilizing information. 

Halcyon does not warrant: (a) any lending outcome; (b) any underwriting outcome; (c) any compliance outcome; (d) any fraud detection outcome; (e) any tax outcome; (f) any business outcome; or (g) any particular result from Client’s use of the Software. 

Client remains solely responsible for its decisions, conclusions, analyses, verifications, and business judgments. 

10.6 Disclaimer of Warranties. 

EXCEPT AS EXPRESSLY SET FORTH IN THIS ARTICLE 10, THE SOFTWARE, SERVICES, OUTPUTS, REPORTS, ANALYSES, INFORMATION, DATA, DOCUMENTATION, AND ALL OTHER MATERIALS PROVIDED BY HALCYON ARE PROVIDED “AS IS” AND “AS AVAILABLE.” 

HALCYON EXPRESSLY DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, COMPLETENESS, AVAILABILITY, SECURITY, OR UNINTERRUPTED OPERATION. 

HALCYON DOES NOT WARRANT THAT THE SOFTWARE WILL OPERATE WITHOUT INTERRUPTION, DELAY, ERROR, OR SECURITY INCIDENT. 

 ARTICLE 11 – LIMITATION OF LIABILITY 

11.1 Excluded Damages. 

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY SHALL BE LIABLE TO THE OTHER PARTY FOR ANY: (a) INDIRECT DAMAGES; (b) INCIDENTAL DAMAGES; (c) SPECIAL DAMAGES; (d) CONSEQUENTIAL DAMAGES; (e) EXEMPLARY DAMAGES; (f) PUNITIVE DAMAGES; (g) LOSS OF PROFITS; (h) LOSS OF REVENUE; (i) LOSS OF BUSINESS OPPORTUNITY; (j) LOSS OF GOODWILL; (k) LOSS OF DATA; (l) LOSS OF EXPECTED SAVINGS; (m) COST OF SUBSTITUTE GOODS OR SERVICES; OR (n) BUSINESS INTERRUPTION LOSSES, 

ARISING OUT OF OR RELATING TO THE AGREEMENT, REGARDLESS OF THE LEGAL THEORY ASSERTED AND EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 

11.2 Aggregate Liability Cap. 

EXCEPT FOR LIABILITY ARISING FROM A PARTY’S FRAUD OR WILLFUL MISCONDUCT, THE TOTAL CUMULATIVE LIABILITY OF HALCYON ARISING OUT OF OR RELATING TO THE AGREEMENT SHALL NOT EXCEED THE TOTAL FEES ACTUALLY PAID TO HALCYON BY CLIENT UNDER THE APPLICABLE ORDER FORM DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM. 

THIS LIMITATION SHALL APPLY COLLECTIVELY TO ALL CLAIMS, CAUSES OF ACTION, LOSSES, DAMAGES, LIABILITIES, COSTS, EXPENSES, AND REMEDIES OF EVERY KIND. 

11.3 Governmental and Third-Party Data Sources. 

WITHOUT LIMITING ANY OTHER LIMITATION CONTAINED IN THE AGREEMENT, HALCYON SHALL HAVE NO LIABILITY FOR ANY CLAIM ARISING FROM OR RELATING TO: (a) INFORMATION PROVIDED BY THE INTERNAL REVENUE SERVICE; (b) TAX TRANSCRIPTS OR TAX RETURN INFORMATION PROVIDED BY GOVERNMENTAL AUTHORITIES; (c) ERRORS, OMISSIONS, DELAYS, INACCURACIES, OR INCOMPLETE INFORMATION PROVIDED BY GOVERNMENTAL AUTHORITIES; (d) GOVERNMENTAL SHUTDOWNS; (e) GOVERNMENTAL FUNDING INTERRUPTIONS; (f) GOVERNMENTAL SYSTEM FAILURES; (g) CHANGES IN LAW, REGULATION, POLICY, OR GOVERNMENTAL REQUIREMENTS; (h) TAXPAYER ACTIONS OR OMISSIONS; (i) INVALID OR DEFECTIVE TAXPAYER AUTHORIZATIONS; (j) THIRD-PARTY PROVIDER DATA; (k) THIRD-PARTY PROVIDER ERRORS; (l) THIRD-PARTY PROVIDER SERVICE INTERRUPTIONS; OR (m) THIRD-PARTY PROVIDER SECURITY INCIDENTS. 

11.4 Security Incidents. 

CLIENT ACKNOWLEDGES THAT NO SYSTEM, NETWORK, CLOUD ENVIRONMENT, DATA STORAGE PLATFORM, GOVERNMENTAL SYSTEM, COMMUNICATION CHANNEL, OR TECHNOLOGY ENVIRONMENT CAN BE GUARANTEED TO BE COMPLETELY SECURE. 

PROVIDED THAT HALCYON UTILIZES COMMERCIALLY REASONABLE ADMINISTRATIVE, TECHNICAL, AND ORGANIZATIONAL SAFEGUARDS AND EXERCISES COMMERCIALLY REASONABLE DILIGENCE IN THE SELECTION AND MANAGEMENT OF ITS THIRD-PARTY PROVIDERS, HALCYON SHALL NOT BE LIABLE FOR: (a) CYBERATTACKS; (b) UNAUTHORIZED ACCESS; (c) DATA BREACHES; (d) RANSOMWARE EVENTS; (e) MALICIOUS ACTIVITY; (f) SECURITY INCIDENTS; (g) CLOUD PROVIDER COMPROMISES; (h) GOVERNMENTAL SYSTEM COMPROMISES; OR (i) OTHER SECURITY FAILURES OCCURRING WITHIN SYSTEMS OPERATED OR CONTROLLED BY THIRD-PARTY PROVIDERS OR GOVERNMENTAL AUTHORITIES. 

11.5 Client Decisions. 

CLIENT ACKNOWLEDGES THAT HALCYON DOES NOT MAKE LENDING DECISIONS, CREDIT DECISIONS, UNDERWRITING DECISIONS, COMPLIANCE DECISIONS, FRAUD DETERMINATIONS, EMPLOYMENT DECISIONS, OR OTHER BUSINESS DECISIONS ON CLIENT’S BEHALF. 

HALCYON SHALL HAVE NO LIABILITY ARISING FROM ANY DECISION, ACTION, INACTION, CONCLUSION, ANALYSIS, OR DETERMINATION MADE BY CLIENT OR ANY THIRD PARTY BASED UPON INFORMATION, OUTPUTS, REPORTS, CALCULATIONS, OR SERVICES PROVIDED THROUGH THE SOFTWARE. 

11.6 Exclusive Remedy. 

THE REMEDIES EXPRESSLY SET FORTH IN THE AGREEMENT SHALL CONSTITUTE CLIENT’S SOLE AND EXCLUSIVE REMEDIES ARISING OUT OF OR RELATING TO THE SOFTWARE OR THE AGREEMENT. 

ARTICLE 12 – INDEMNIFICATION 

12.1 Halcyon Indemnification. 

Subject to Sections 12.2, 12.3, and Article 11, Halcyon shall defend, indemnify, and hold harmless Client and its officers, directors, employees, and agents from and against any third-party claim, demand, action, suit, or proceeding, and any resulting damages, judgments, settlements, costs, and reasonable attorneys’ fees finally awarded therein, arising from: (a) a claim that the Software, as provided by Halcyon and used by Client in accordance with the Agreement, infringes a United States patent, copyright, trademark, or trade secret of a third party; (b) Halcyon’s fraud; (c) Halcyon’s willful misconduct; or (d) Halcyon’s gross negligence. 

12.2 Exclusions from Halcyon Indemnity. 

Halcyon shall have no indemnification obligation to the extent a claim arises from or relates to: (a) Client Data; (b) Authorized Taxpayer Data provided by or through Client; (c) taxpayer actions, omissions, misrepresentations, fraud, or misconduct; (d) Client’s use of the Software in violation of the Agreement; (e) Client’s violation of the Regulatory Schedule; (f) Client’s use of transcript information, transcript-derived information, income information, or Software outputs in connection with any non-Halcyon-approved income calculator, income determination engine, underwriting model, decision engine, scoring system, verification platform, or analytical tool; (g) modifications to the Software not made by Halcyon; (h) combinations of the Software with products, services, systems, software, models, algorithms, or technologies not provided by Halcyon; (i) compliance decisions, underwriting decisions, lending decisions, business decisions, or regulatory decisions made by Client; (j) governmental authorities, including the Internal Revenue Service; (k) governmental shutdowns, funding interruptions, regulatory actions, or changes in law; (l) Third-Party Providers, including cloud providers, telecommunications providers, integration partners, financial institutions, or data providers; or (m) security incidents occurring within systems operated or controlled by governmental authorities or Third-Party Providers, provided Halcyon utilized commercially reasonable safeguards and exercised commercially reasonable diligence in the selection and management of such providers. 

12.3 Intellectual Property Remedies. 

If the Software becomes, or in Halcyon’s reasonable opinion is likely to become, the subject of an infringement claim, Halcyon may, at its option and expense: (a) procure for Client the right to continue using the Software; (b) modify the Software so that it becomes non-infringing; (c) replace the Software with substantially equivalent functionality; or (d) terminate the affected Software and refund any prepaid fees attributable to the terminated portion of the Software for the unused portion of the applicable Order Form term. 

The remedies set forth in this Section 12.3 shall constitute Client’s exclusive remedies for any claim described in Section 12.1(a). 

12.4 Client Indemnification. 

Client shall defend, indemnify, and hold harmless Halcyon and its officers, directors, employees, Affiliates, contractors, licensors, successors, and assigns from and against any third-party claim, demand, action, suit, proceeding, damages, judgments, settlements, costs, and reasonable attorneys’ fees arising from or relating to: (a) Client Data; (b) taxpayer authorizations, taxpayer consents, taxpayer disclosures, or taxpayer permissions obtained or facilitated by Client; (c) Client’s violation of applicable law; (d) Client’s violation of the Regulatory Schedule; (e) Client’s misuse of the Software; (f) Client’s violation of Article 2, Article 4, Article 6, or Article 7; (g) Client’s use of transcript information, transcript-derived information, Authorized Taxpayer Data, income information, Software outputs, reports, analyses, or calculations in connection with any non-Halcyon-approved income calculator, income determination engine, underwriting model, decision engine, scoring system, verification platform, or analytical system; (h) Client’s lending decisions, underwriting decisions, credit decisions, compliance decisions, business decisions, or operational decisions; (i) any claim by a taxpayer, borrower, applicant, customer, regulator, governmental authority, investor, warehouse lender, counterparty, or third party arising from Client’s conduct, actions, omissions, decisions, or use of the Software; or (j) any breach of the Agreement by Client. 

12.5 Indemnification Procedure. 

A party seeking indemnification shall: (a) promptly notify the indemnifying party of the claim; (b) provide reasonable cooperation in the defense of the claim; and (c) permit the indemnifying party to control the defense and settlement of the claim. 

No settlement imposing liability or obligations upon the indemnified party may be entered into without such party’s prior written consent, not to be unreasonably withheld, conditioned, or delayed. 

12.6 Article 11 Controls. 

Except for claims arising from fraud or willful misconduct, all indemnification obligations under this Article 12 shall be subject to the exclusions, limitations, disclaimers, and liability cap set forth in Article 11. 

ARTICLE 13 – FORCE MAJEURE 

13.1 Force Majeure Events. 

Neither party shall be liable for any delay, interruption, failure, degradation of performance, or inability to perform resulting from circumstances beyond such party’s reasonable control, including: (a) acts of God; (b) natural disasters; (c) fire, flood, earthquake, tornado, hurricane, or severe weather events; (d) war, terrorism, civil unrest, riots, sabotage, or public emergencies; (e) labor disputes or work stoppages; (f) internet failures, telecommunications failures, utility failures, or infrastructure failures; (g) cybersecurity incidents, denial-of-service attacks, malware events, ransomware events, or similar attacks not caused by the affected party’s fraud or willful misconduct; (h) governmental actions, governmental shutdowns, governmental funding interruptions, governmental restrictions, embargoes, sanctions, or changes in law; (i) actions or omissions of the Internal Revenue Service, governmental authorities, regulatory authorities, financial institutions, or Third-Party Providers; (j) cloud provider outages, hosting provider outages, or third-party technology failures; or (k) any other event beyond the affected party’s reasonable control. 

13.2 Mitigation. 

The affected party shall use commercially reasonable efforts to mitigate the effects of the Force Majeure Event and resume performance as soon as reasonably practicable. 

13.3 No Termination for Temporary Events. 

A temporary inability to perform due to a Force Majeure Event shall not constitute a breach of the Agreement. 

13.4 Extended Force Majeure. 

If a Force Majeure Event materially prevents performance for more than ninety (90) consecutive days, either party may terminate the affected Order Form upon written notice without further liability except for obligations accrued prior to termination. 

ARTICLE 14 – RELATIONSHIP OF THE PARTIES 

14.1 Independent Contractors. 

The parties are independent contractors. Nothing in the Agreement shall be construed to create any partnership, joint venture, franchise, fiduciary relationship, employment relationship, agency relationship, or association between the parties. 

14.2 No Fiduciary Duties. 

Except as expressly required by applicable law, neither party owes any fiduciary duty to the other party under the Agreement. 

14.3 No Agency. 

Neither party shall have authority to bind, obligate, or act on behalf of the other party. 

14.4 Authorized Taxpayer Data. 

Client acknowledges that, with respect to Authorized Taxpayer Data, Halcyon acts pursuant to rights granted directly by the applicable Taxpayer and applicable law and not as Client’s fiduciary, trustee, bailee, custodian, agent, representative, or service bureau. 

Nothing in the Agreement shall be construed as creating any fiduciary, custodial, agency, trust, or representative relationship between Halcyon and Client with respect to Authorized Taxpayer Data. 

14.5 Professional Responsibility. 

Client is solely responsible for its lending decisions, underwriting decisions, compliance obligations, regulatory obligations, credit decisions, operational decisions, and business judgments. 

Halcyon does not provide legal advice, tax advice, accounting advice, investment advice, regulatory advice, underwriting advice, or lending advice. 

Client shall independently evaluate all information provided through the Software before relying upon such information. 

14.6 No Exclusive Relationship. 

Unless expressly provided in an Order Form, the relationship between the parties is non-exclusive, and each party may engage in business with any other person or entity, including competitors of the other party. 

ARTICLE 15 – MISCELLANEOUS 

15.1 Assignment. 

Client may not assign, transfer, delegate, or otherwise convey the Agreement without Halcyon’s prior written consent, except in connection with a merger, acquisition, or sale of substantially all of Client’s assets. 

Halcyon may assign the Agreement, in whole or in part, without Client’s consent in connection with a merger, acquisition, financing transaction, reorganization, sale of assets, or change of control. 

15.2 Notices. 

Any notice required under the Agreement shall be in writing and delivered by nationally recognized overnight courier, certified mail, or electronic mail to the notice addresses specified in the applicable Order Form. 

15.3 Waiver. 

No waiver of any provision of the Agreement shall be effective unless in writing and signed by the party against whom the waiver is asserted. 

No waiver shall constitute a waiver of any subsequent breach or default. 

15.4 Severability. 

If any provision of the Agreement is determined to be invalid, illegal, or unenforceable, the remaining provisions shall remain in full force and effect and shall be construed to effectuate the parties’ original intent to the maximum extent permitted by law. 

15.5 Cumulative Remedies. 

Except where expressly stated otherwise, all rights and remedies provided under the Agreement are cumulative and in addition to any rights or remedies available at law or in equity. 

15.6 No Third-Party Beneficiaries. 

Except as expressly provided in the Regulatory Schedule or the Agreement, the Agreement is for the sole benefit of the parties and their permitted successors and assigns and creates no rights in any third party. 

15.7 Publicity. 

Subject to applicable confidentiality obligations, Halcyon may identify Client as a customer in customer lists, investor materials, presentations, proposals, and marketing materials unless Client objects in writing. 

15.8 Electronic Signatures. 

Electronic signatures, electronic records, and electronically transmitted copies of documents shall be deemed originals and shall be fully enforceable. 

15.9 Interpretation. 

The Agreement shall be interpreted fairly and not strictly for or against either party regardless of which party drafted the Agreement. 

15.10 Survival. 

Any provision that by its nature should survive expiration or termination shall survive, including provisions relating to confidentiality, data rights, intellectual property rights, payment obligations, audit rights, limitations of liability, indemnification, dispute resolution, and equitable remedies. 

15.11 Entire Agreement. 

The Agreement, including the MSA, Order Forms, Regulatory Schedule, and Standard Terms and Conditions, constitutes the complete and exclusive agreement between the parties regarding its subject matter and supersedes all prior or contemporaneous proposals, discussions, negotiations, understandings, and agreements relating thereto. 

15.12 Amendments. 

Except as expressly provided in the Agreement, no amendment, modification, or waiver shall be effective unless in writing and signed by authorized representatives of both parties. 

15.13 Statement of Work, Work Order, Purchase Orders. 

Any statement of work, work order, purchase order, procurement document, onboarding document, vendor registration form, portal submission, invoice processing document, or similar document issued by Client shall be deemed for administrative convenience only and shall not modify the Agreement, even if such document contains conflicting or additional terms. 

 SCHEDULE A – REGULATORY AND DATA ACCESS REQUIREMENTS SCHEDULE 

This Regulatory and Data Access Requirements Schedule (“Schedule”) forms part of the Agreement between Halcyon and Client. Compliance with this Schedule is a material condition to Client’s access to and use of the Software. 

1. CUSTOMER ELIGIBILITY 

1.1 Client shall maintain all licenses, registrations, approvals, authorizations, and legal authority necessary to conduct its business. 

1.2 Client shall promptly notify Halcyon of: (a) any material regulatory action; (b) any suspension, revocation, or restriction of a license; (c) any governmental investigation that could reasonably impact Client’s use of the Software; or (d) any material change in ownership or control. 

1.3 Upon request, Client shall provide information reasonably requested by Halcyon to verify Client’s identity, legal existence, ownership, authority, regulatory status, licensing, or compliance posture. 

2. TAXPAYER AUTHORIZATIONS 

2.1 Client shall obtain and maintain all taxpayer disclosures, consents, acknowledgements, authorizations, permissions, and approvals required for Client’s use of the Software. 

2.2 Client shall not submit a taxpayer through the Software unless the taxpayer has knowingly authorized the requested activity. 

2.3 Client shall retain evidence of taxpayer authorization for the longer of: (a) the period required by applicable law; or (b) seven (7) years. 

2.4 Upon request, Client shall provide documentation reasonably necessary to verify taxpayer authorization. 

2.5 Client shall promptly notify Halcyon of any revoked, challenged, withdrawn, disputed, fraudulent, forged, invalid, or suspected invalid taxpayer authorization. 

3. IRS AND TAX TRANSCRIPT REQUIREMENTS 

3.1 Client shall comply with all applicable requirements relating to tax return information, tax transcript information, taxpayer authorizations, and redisclosure restrictions. 

3.2 Client shall use transcript information solely for lawful purposes and solely in accordance with the Agreement. 

3.3 Client shall not use transcript information in any manner prohibited by applicable law, taxpayer authorization, or the Agreement. 

3.4 Client shall cooperate with Halcyon regarding any inquiry, audit, investigation, or compliance review relating to transcript information. 

4. SECURITY REQUIREMENTS 

4.1 Client shall maintain commercially reasonable administrative, technical, and physical safeguards designed to protect information obtained through the Software. 

4.2 Client shall: (a) maintain unique user credentials; (b) restrict access based upon legitimate business need; (c) promptly disable access for terminated personnel; (d) implement multi-factor authentication where reasonably available; (e) maintain commercially reasonable endpoint security protections; and (f) maintain procedures reasonably designed to prevent unauthorized access to information obtained through the Software. 

4.3 Client shall promptly notify Halcyon of any actual or suspected: (a) unauthorized access; (b) security incident; (c) data breach; (d) credential compromise; or (e) misuse of information obtained through the Software. 

5. AUDIT RIGHTS AND CERTIFICATIONS 

5.1 Halcyon may request certifications regarding Client’s compliance with the Agreement and this Schedule. 

5.2 Client shall cooperate with reasonable compliance reviews and audits conducted by or on behalf of Halcyon. 

5.3 If Halcyon reasonably believes a material compliance violation has occurred, Halcyon may require additional certifications, documentation, interviews, remediation plans, or corrective actions. 

5.4 If a material violation is identified, Client shall promptly implement corrective actions reasonably required by Halcyon. 

6. PROHIBITED USES 

6.1 Client shall not use transcript information, transcript-derived information, Authorized Taxpayer Data, income information, verification information, Derivative Information, or Software outputs in connection with: (a) any non-Halcyon-approved income calculator; (b) any non-Halcyon-approved income determination engine; (c) any non-Halcyon-approved income analysis solution; (d) any competing transcript analysis platform; (e) any competing verification platform; (f) any competing underwriting platform; (g) any competing scoring engine; (h) any competing risk model; or (i) any competing analytical platform. 

6.2 Client shall not use information obtained through the Software to: (a) train artificial intelligence systems; (b) train machine learning systems; (c) develop competing products; (d) validate competing products; (e) benchmark competing products; or (f) reverse engineer Halcyon’s methodologies. 

6.3 Client shall not directly or indirectly circumvent, replace, replicate, emulate, or avoid Halcyon’s proprietary transcript analysis, income calculation, verification, fraud detection, underwriting support, or analytical methodologies. 

7. THIRD-PARTY REQUIREMENTS 

7.1 Client acknowledges that Halcyon’s ability to provide the Software depends upon contractual, regulatory, operational, security, and compliance obligations imposed by governmental authorities, the Internal Revenue Service, financial institutions, data providers, service providers, investors, insurers, regulators, and other third parties. Client shall comply with any additional requirements reasonably imposed by Halcyon to satisfy such obligations and maintain lawful and compliant operation of the Software. 

7.2 Client shall comply with additional requirements reasonably communicated by Halcyon where necessary to: (a) maintain lawful access to data; (b) maintain regulatory compliance; (c) satisfy contractual obligations owed by Halcyon; (d) satisfy governmental requirements; (e) satisfy data-provider requirements; or (f) preserve the integrity and security of the Software. 

8. RECORD RETENTION 

8.1 Client shall maintain records sufficient to demonstrate compliance with the Agreement and this Schedule. 

8.2 Such records shall be retained for the longer of: (a) seven (7) years; or (b) any longer period required by applicable law. 

9. REMEDIES 

9.1 Any violation of this Schedule shall constitute a material breach of the Agreement. 

9.2 In addition to any other rights available under the Agreement, Halcyon may: (a) suspend access to the Software; (b) require corrective action; (c) require additional certifications; (d) restrict access to specific functionality; (e) require additional compliance controls; or (f) terminate the Agreement. 

10. CHANGES TO THIS SCHEDULE 

10.1 Client acknowledges that legal, regulatory, governmental, security, operational, financial institution, taxpayer authorization, and data-provider requirements may change from time to time. 

10.2 Halcyon may modify this Schedule upon written notice to Client where reasonably necessary to: (a) comply with law; (b) comply with governmental requirements; (c) comply with IRS requirements; (d) comply with financial institution requirements; (e) comply with data-provider requirements; (f) address security risks; (g) address fraud risks; or (h) maintain lawful and compliant operation of the Software. 

10.3 Continued use of the Software following the effective date of such modifications shall constitute acceptance of the revised Schedule.