Vanta Master Subscription Agreement
Last revised: November 13, 2026
You can find our previous terms as of November 21, 2025 here
NOTE: Before reviewing the MSA, please review our FAQ at https://www.vanta.com/legal/terms-faq. The FAQ does not form part of the contract and is provided for informational purposes only.
This Vanta Master Subscription Agreement (“MSA”) entered into by and between Vanta Inc., a Delaware corporation with a principal place of business at 655 Montgomery Street, Suite 1600, San Francisco, CA 94111 (“Vanta”), and the entity or person (i) executing an order form for the Services that expressly references this MSA (“Order Form”), (ii) accepting an Order Form via private offer on a cloud service provider marketplace or (iii) otherwise signing up for and accessing the Services who, in each case, agrees to be bound by this MSA to the exclusion of all other terms (as applicable, “Customer”) (each of Customer and Vanta, a “Party”, and together, the “Parties”). The MSA consists of the terms and conditions set forth below and incorporates by reference any ancillary documents (e.g., attachments, addenda, exhibits) expressly referenced herein.
The “Effective Date” of this MSA is (a) the effective date of the first Order Form entered into by the Parties, (b) the date Customer first accepts a private offer containing an Order Form or (c) the date Customer receives its credentials to access the Services and accepts this MSA through any online provisioning, as applicable.
Section 1. Services and Support.
1.1. Services. “Services” means the Vanta products and services that are made available to Customer by Vanta hereunder. Subject to the terms and conditions of this MSA, Vanta will make the Services available to Customer for the service period of Customer’s subscription specified on the applicable Order Form (“Service Period”). Customer acknowledges that the Services are regularly evolving and that Vanta may modify the features and functionality of the Services. Notwithstanding the foregoing, Vanta will not materially decrease the functionality of the Services during the applicable Service Period.
1.2. Service Levels; Support. Vanta will provide the Services in accordance with the Service Level Agreement available at https://www.vanta.com/legal/sla. Vanta will provide commercially reasonable support during the Service Period in accordance with Vanta’s Support Policy, available at https://www.vanta.com/legal/support-policy.
Section 2. Fees and Payment; Beta Offerings.
2.1. Payment and Taxes.
2.1.1. Fees. “Fees” means the amounts payable by Customer to Vanta for the applicable Services, as set forth in the Order Form. Customer is responsible for all Fees set forth in the Order Form. Vanta will invoice Customer for such Fees using the billing information set forth therein. If Customer purchases a subscription to the Services using a credit card or similar online payment method, Vanta will bill that payment method for all Fees due, including renewals and add-on purchases, as applicable, unless Customer designates an alternative payment method in writing and Vanta approves such alternative method. Customer shall pay all Fees in accordance with the payment terms set forth in the applicable Order Form. Except as expressly set forth in this MSA, all payment obligations are non-cancelable and Fees are non-refundable and not subject to set off. Subject to Section 2.1.2 below, in the event of non-payment of undisputed Fees by Customer within fifteen (15) days after the due date of an invoice, Vanta reserves the right to (i) immediately suspend Customer’s access to the Services until all outstanding amounts are paid in full and/or (ii) charge interest on past due amounts at the lesser of one and a half percent (1.5%) per month or the highest interest rate allowed by law. Vanta will promptly restore Customer’s access to the Services once such non-payment is cured.
2.1.2. Fee Disputes. If Customer has a bona fide belief that an invoice is incorrect, Customer must notify Vanta within thirty (30) days of the invoice date ("Dispute Period") and describe the basis for the dispute in reasonable detail. Upon receipt of such notice, Vanta and Customer will work together in good faith to resolve the dispute and, if such disputed amount(s) are deemed legitimate, Customer agrees to pay such amounts promptly upon resolution of the dispute (and in any event, within 30 days thereafter). If Customer does not notify Vanta of a dispute within the Dispute Period, all invoiced Fees (except invoices prepared with material accounting errors) will be deemed legitimate and owing in accordance with this MSA.
2.1.3. Taxes. Fees do not include taxes, levies, duties or similar governmental assessments of any nature, including, for example, any sales, use, GST, value-added, withholding taxes, or similar taxes, whether domestic or foreign, or assessed by any jurisdiction (collectively, “Taxes”). Customer is responsible for paying all Taxes associated with its purchase of the Services, excluding Taxes based on Vanta’s net income or receipts, property or employees. If Vanta has the legal obligation to pay or collect Taxes for which Customer is responsible under this MSA Vanta will invoice Customer and Customer will pay such Taxes in accordance with the payment terms as set forth in the applicable Order Form unless Customer provides Vanta with a valid tax exemption certificate authorised and issued by the appropriate taxing authority in advance of issuance of such invoice.
2.2. Cloud Marketplace Billing & Payment. Notwithstanding anything to the contrary in this MSA, where Customer has purchased the Services through a marketplace offered by a cloud service provider (e.g., Amazon Web Services, Google Cloud Platform, Microsoft Azure, etc.), Customer agrees to pay the Fees specified on the applicable cloud service pricing page(s) (including any notes included on such page(s)) or in any offer accepted by Customer in the cloud service provider marketplace, as applicable. Customer agrees that all Fees shall be paid through billing of Customer's account with such cloud service provider (unless otherwise specified) and that any refund to which Customer may be entitled under this MSA or an Order Form may be provided in the form of a credit back to Customer's account with such cloud service provider.
2.3. Reseller Purchases. The Parties agree that Customer may purchase the Services through a reseller authorized by Vanta to sell its products and services (“Authorized Reseller”). Vanta subscriptions purchased via Authorized Resellers are governed by this MSA. Services purchased through an Authorized Reseller, including multi-year subscriptions, are not subject to cancellation by Customer unless terminated in accordance with Section 3.2. Where Customer purchases the Services through an Authorized Reseller, the Authorized Reseller will enter into an Order Form with Vanta for the purchase of Services that references this MSA and Customer as end user, and Authorized Reseller and Customer will enter into a separate agreement setting forth the fees to be paid by Customer to Authorized Reseller for such Services, as well as any other terms or conditions that apply between them. Vanta hereby agrees that, subject to receiving payment from the Authorized Reseller, it shall be responsible to Customer, pursuant to the terms and conditions of this MSA, for providing the Services under any such Order Form. Customer hereby acknowledges that Vanta will not be responsible for the obligations of any Authorized Reseller to Customer under such separate agreement, for the acts or omissions of Authorized Reseller, or for any third party products or services furnished to Customer by any Authorized Reseller. For the avoidance of doubt, where Customer purchases the Services through an Authorized Reseller, (a) Sections 2.1 above will be of no effect and (b) the Fees Customer pays, including any increases thereto upon renewal, will be determined by the Authorized Reseller, as payment and taxes will be addressed in the agreement between Authorized Reseller and Customer.
2.4. Affiliate Purchases. Any Customer Affiliate may procure Services from Vanta under the terms and conditions of this MSA by executing an Order Form with Vanta referencing this MSA. This will establish a new and separate agreement between the Vanta and Customer entity signing such Order Form and all references to "Customer" or "Vanta" herein shall be deemed to reference such signing entity(ies). Unless otherwise specifically provided for herein, only the entities which execute the Order Form shall (a) have the right or power to enforce its rights thereunder and (b) be liable for its obligations in connection with the provision or use of the Services, as applicable. "Affiliate" means any company, corporation, partnership or other entity, directly or indirectly controlling, controlled by, or under common control with such party where "control" means the direct or indirect ownership of 50% or more of the voting power or equity in such entity.
Section 3. Term and Termination.
3.1. Term and Renewal.
3.1.1. MSA. This MSA commences on the Effective Date and will remain in effect until all Order Forms have expired or been terminated in accordance with this Section 3 (“Term”).
3.1.2. Order Form. The Service Period for each Order Form shall be set forth therein; provided that if the Order Form does not specify a Service Period, the Service Period will be one (1) year. Unless otherwise expressly stated in the applicable Order Form, upon expiration of the Service Period, the Customer’s subscription will automatically renew for successive one (1) year Service Periods unless Customer provides Vanta with notice of termination at least thirty (30) days prior to the end of the then-current Service Period.
3.2. Termination for Cause. A Party may terminate this MSA or an Order Form for cause (a) upon written notice to the other Party of a material breach if such breach remains uncured after thirty (30) days from the date of the breaching Party’s receipt of such notice; (b) if the other Party becomes the subject of a petition in bankruptcy or any other proceeding relating to insolvency, receivership, liquidation or assignment for the benefit of creditors that is not dismissed within sixty (60) days of the commencement thereof; or (c) immediately by Vanta if Customer violates Section 4.5 (Prohibited Uses) of this MSA. Non-payment of undisputed Fees by Customer for thirty (30) days after the due date of an invoice will be considered material breaches of this MSA.
3.3. Effect of Termination and Survival. Termination of this MSA will concurrently terminate all active Order Forms. Upon termination of this MSA and/or an Order Form, (a) Customer will have no further right to use the Services under the terminated or canceled Order Form(s) and Vanta will remove Customer’s access to the same, and (b) unless otherwise specified herein, Customer will not be entitled to a refund of Fees paid; provided that if Customer terminates for Vanta’s uncured material breach in accordance with Section 3.2 (Termination for Cause), Customer shall be entitled to a pro-rata refund of any prepaid, unused Fees paid to Vanta. The following Sections will survive termination or expiration: Section 2 (Fees and Payment) for any Fees due and payable at the time of termination or expiration, Section 3.3 (Effect of Termination and Survival), Section 4 (Ownership, License, and Use of the Services), Section 5 (Confidentiality), Section 6 (Privacy and Security Practices) solely with respect to any Customer Information retained post termination pursuant to the Information Security Addendum or DPA, Section 7.5 (Disclaimers), Section 8 (Indemnification), Section 9 (Limitation of Liability), and Section 10 (Miscellaneous). Termination of this MSA will not limit a Party’s liability for obligations accrued as of or prior to such termination or for any breach of this MSA.
Section 4. Ownership, License, and Use of the Services.
4.1. Ownership. Each Party will retain all rights, title and interest in any of its patents, inventions, copyrights, trademarks, domain names, trade secrets, know-how and any other intellectual property and proprietary rights (“Intellectual Property Rights”). Vanta will retain all Intellectual Property Rights in and to the Services and all components of, or used to provide, the Services and any other materials developed by Vanta in its performance hereunder that derive from, improve, enhance or modify the Services or other Vanta pre-existing intellectual property (collectively with the corresponding Intellectual Property Rights, “Services Information”). Customer will retain Intellectual Property Rights in all information uploaded to the Services by or on behalf of Customer, including any outputs, AI Outputs (defined below) or results produced by the Services from such information (excluding any Services Information embedded therein) (collectively, “Customer Information”).
4.2. Feedback. During the Term, Customer may volunteer feedback to Vanta about the Services (“Feedback”). Vanta and its Affiliates shall be irrevocably entitled to use such Feedback for any purpose and without any duty to account; provided that, in doing so, they may not breach their obligations of confidentiality under Section 5 of this MSA.
4.3. Licenses. Subject to Customer’s compliance with the terms and conditions of this MSA (including any limitations and restrictions set forth on an applicable Order Form), Vanta hereby grants Customer a non-exclusive, non-transferable, non-sublicensable limited right and license to access and use the Services, solely during the applicable Service Period for Customer’s internal business purposes. Customer hereby grants Vanta a non-exclusive, non-transferable, non-sublicensable right and license to use Customer Information solely to provide the Services to Customer.
4.4. Authorized Users. Customer may designate and provide access to the Services to its authorized employees, agents, or contractors (each an “Authorized User”). Customer is responsible for all use and misuse of the Services by Authorized Users and for adherence to all terms of this MSA by any Authorized Users as though such Authorized Users were parties hereto, and references to Customer herein will be deemed to apply to Authorized Users as necessary and applicable. Customer agrees to promptly notify Vanta of any unauthorized access or use of which Customer becomes aware. Authorized Users are strictly prohibited from sharing their accounts or account passwords and their doing so is a material breach of this MSA by Customer.
4.5. Prohibited Uses. Customer will not, and will not permit any Authorized Users to: (a) “frame”, distribute, resell, or permit access to the Services by any third party other than as allowed by the features and functionality of the Services; (b) use the Services in violation of applicable laws, rules or regulations; (c) interfere with, disrupt, or gain unauthorized access to the Services; (d) successfully or otherwise, attempt to: decompile, disassemble, reverse engineer, discover the underlying source code or structure of, or copy the Services; (e) provide Vanta any Customer Information or Feedback that is unlawful, defamatory, harassing, discriminatory, or infringing of third party Intellectual Property Rights; (f) transfer to the Services or otherwise use on the Services any code, exploit, or undisclosed feature that is designed to delete, disable, deactivate, interfere with or otherwise harm or provide unauthorized access to the Services; (g) use any robot, spider, data scraping, or extraction tool or similar mechanism with respect to the Services; (h) extract information from the Services, or otherwise access or use the Services, in furtherance of replicating the Services or otherwise competing with Vanta; (i) encumber, sublicense, transfer, rent, lease, time-share or use the Services in any service bureau arrangement or otherwise for the benefit of any third party; (j) copy, distribute, manufacture, adapt, create derivative works of, translate, localize, port or otherwise modify any aspect of the Services; (k) remove or otherwise alter any proprietary notices or labels from the Service or any portion thereof; or (l) permit any third party to engage in any of the foregoing proscribed acts (each of (a) through (l), a “Prohibited Use” and, collectively, “Prohibited Uses”). Customer will promptly notify Vanta of any violations of the Prohibited Uses and take all necessary steps to prevent or cease any such use(s). Vanta reserves the right to suspend Customer and/or Authorized User’s access to the Services in the event Vanta reasonably suspects Customer or an Authorized User is in breach of this Section.
4.6. Artificial Intelligence.
4.6.1. AI Features. Customer acknowledges that the Services offer features that leverage the use of artificial intelligence, machine learning, or similar technologies provided by Vanta and/or its licensors (“AI Features”). Use of AI Features by Customer is voluntary. Customer will have the ability to disable AI Features within the Services at the admin level for all Authorized Users by using the functionality of the Services. Vanta will not, and will not permit any third party to, use any Customer Information to train any artificial intelligence or machine learning models.
4.6.2. AI Compliance. Vanta agrees that it will comply with artificial intelligence laws and regulations, including the EU AI Act, to the extent applicable to Vanta and the AI Features. As of the Effective Date, Vanta maintains an ISO42001 certification for the Services. Vanta agrees to maintain such certification (or an equivalent AI governance, risk and compliance certification) during the Term.
4.6.3. Disclaimer. Vanta makes no covenants, representations or warranties regarding any outputs generated, transmitted or made available in connection with Customer’s or any Authorized User’s use of AI Features (“AI Outputs”), including, without limitation, with respect to the accuracy, quality or truthfulness thereof. AI Outputs should be used at Customer’s own risk. Due to the nature of AI Features generally, Customer acknowledges that it is possible that (a) Customer’s AI Outputs may be similar to outputs generated by other Vanta customers’ use of the Services, (b) the same input may result in different AI Outputs from one use to the next and (c) the AI Outputs may not be accurate, reliable or suitable for Customer’s requirements. Before leveraging any AI Outputs in any manner, Customer and its Authorized Users are responsible for making their own determination that the AI Outputs are suitable, and Customer is solely responsible for any reliance on the accuracy, completeness, or usefulness of any AI Outputs. Neither Customer nor any Authorized User may represent that any AI Outputs were human generated.
4.7. Beta Services.
4.7.1 Beta Offerings. From time to time, Vanta may make Beta Offerings available to Customer at no charge. “Beta Offerings” means pre-release services, features, or functions identified as alpha, beta, preview, early access, or words or phrases with similar meanings. Customer may elect to try such Beta Offering(s) in its sole discretion. Beta Offerings are intended for evaluation purposes, not for production use, and may be subject to additional terms. Beta Offerings are not considered “Services” under this MSA; however, all Prohibited Uses, Customer obligations and terms regarding Vanta’s ownership concerning the Services shall apply to Beta Offerings. Unless otherwise stated or communicated to Customer, any Beta Offerings trial period will expire upon the date that a version of the Beta Offerings becomes generally available without a “Beta Offerings” designation. Vanta may discontinue Beta Offerings at any time in its sole discretion and may never make them generally available.
4.7.2 Disclaimers. NOTWITHSTANDING SECTIONS 1.2 (SUPPORT), 7 (REPRESENTATIONS, WARRANTIES AND DISCLAIMERS) AND 8 (INDEMNIFICATION) BELOW, BETA OFFERINGS ARE PROVIDED “AS-IS” AND “AS AVAILABLE” WITHOUT ANY WARRANTY AND VANTA SHALL HAVE NO SUPPORT OR INDEMNIFICATION OBLIGATIONS NOR LIABILITY OF ANY TYPE WITH RESPECT TO BETA OFFERINGS UNLESS SUCH EXCLUSION OF LIABILITY IS NOT ENFORCEABLE UNDER APPLICABLE LAW, IN WHICH CASE VANTA’S LIABILITY WITH RESPECT TO BETA OFFERINGS SHALL NOT EXCEED ONE THOUSAND DOLLARS ($1,000.00).
Section 5. Confidentiality. As used herein, “Confidential Information” of a Party (“Disclosing Party”) means all financial, technical, or business information of the Disclosing Party that the Disclosing Party designates as confidential at the time of disclosure to the other Party (“Receiving Party”) or that the Receiving Party reasonably should understand to be confidential based on the nature of the information or the circumstances surrounding its disclosure. Services Information is Vanta’s Confidential Information and Customer Information is Customer’s Confidential Information under this MSA. The Receiving Party agrees to keep Confidential Information in confidence using the same degree of care that the Receiving Party uses to protect its own Confidential Information (but in no event less than reasonable care). Except as expressly permitted in this MSA, the Receiving Party will not disclose, duplicate, publish, transfer or otherwise make available Confidential Information of the Disclosing Party in any form to any person or entity without the Disclosing Party’s prior written consent; provided the Receiving Party may disclose Confidential Information to its and its Affiliates’ employees and contractors who have a legitimate need to know such information and who are bound by obligations of confidentiality and non-use at least as protective of the Confidential Information as those in this Section 5. The Receiving Party will not use the Disclosing Party’s Confidential Information except to perform its obligations or exercise its rights under this MSA, such obligations including, in the case of Vanta, to provide the Services. Notwithstanding the foregoing, the Receiving Party may disclose Confidential Information to the extent required by law, provided that the Receiving Party: (a) gives the Disclosing Party prior written notice of such disclosure so as to afford the Disclosing Party a reasonable opportunity to appear, object, and obtain a protective order or other appropriate relief regarding such disclosure (if such notice is not prohibited by applicable law); (b) uses diligent efforts to limit disclosure and to obtain confidential treatment or a protective order; and (c) allows the Disclosing Party to participate in the proceeding to the extent permissible according to applicable law. Further, Confidential Information does not include any information that: (i) is or becomes generally known to the public without the Receiving Party's breach of any obligation owed to the Disclosing Party; (ii) was independently developed by the Receiving Party without the Receiving Party's breach of any obligation owed to the Disclosing Party; or (iii) is received from a third party who obtained such Confidential Information without any third party's breach of any obligation owed to the Disclosing Party. Due to the unique nature of Confidential Information, the Parties agree that the Disclosing Party shall be entitled to seek an injunction or similar equitable relief against any breach or threatened breach of this Section without the necessity of posting any bond or showing irreparable harm.
Section 6. Privacy and Security Practices. Vanta will implement and maintain appropriate administrative, physical and technical safeguards during the Service Period to protect the security, confidentiality and integrity of Customer Information as described at https://www.vanta.com/legal/information-security-addendum. If personal data is processed in connection with the Services, the Data Processing Addendum available at https://www.vanta.com/legal/dpa shall govern such processing, unless the Parties have a separately executed Data Processing Addendum, in which case such executed version shall govern (as applicable, the “DPA”). The DPA is hereby incorporated by reference.
Section 7. Representations, Warranties, and Disclaimers.
7.1. Authority. Each Party represents that it has validly entered into this MSA and has the legal power to do so.
7.2. Services Warranty. Vanta warrants that during an applicable Service Period, (a) the Services will perform materially in accordance with any applicable documentation provided to Customer and (b) the technical support services will be provided in a professional, workmanlike manner. If Vanta breaches this warranty and Customer makes a reasonably detailed warranty claim within thirty (30) days of discovering the issue, Vanta will use reasonable efforts to correct the non-conformity. If Vanta is not able to correct any reported non-conformity with this warranty, either Party may terminate the applicable Order Form and Vanta will refund to Customer any prepaid unused Fees for the applicable Services purchased thereunder. The foregoing procedures are Customer’s sole and exclusive remedy for breach of this warranty. This warranty shall not extend to issues or non-conformities resulting from Customer’s use of the Services in violation of the MSA or not in accordance with the documentation.
7.3. Compliance with Laws Warranty. Vanta warrants that it will provide the Services and perform its obligations hereunder in accordance will all applicable laws and regulations.
7.4 Harmful Code Warranty. Vanta warrants that it will employ then-current, industry-standard measures to scan the Services to detect and remediate malicious code designed to negatively impact the operation or performance of the Services.
7.5. Disclaimers. EXCEPT AS SPECIFICALLY SET FORTH IN THIS SECTION, (A) THE SERVICES, INCLUDING ALL SERVER AND NETWORK COMPONENTS, AI OUTPUTS, SERVICES INFORMATION AND ANY OTHER INFORMATION OR ADVICE OBTAINED BY CUSTOMER THROUGH THE SERVICES, ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS, WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES OF ANY KIND TO THE FULLEST EXTENT PERMITTED BY LAW, AND (B) VANTA EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. THE PARTIES ADDITIONALLY AGREE THAT VANTA WILL HAVE NO LIABILITY OR RESPONSIBILITY FOR CUSTOMER’S VARIOUS COMPLIANCE PROGRAMS, AND THAT THE SERVICES, TO THE EXTENT APPLICABLE, ARE ONLY TOOLS FOR ASSISTING CUSTOMER IN MEETING THE VARIOUS COMPLIANCE OBLIGATIONS FOR WHICH IT SOLELY IS RESPONSIBLE.
Section 8. Indemnification.
8.1. Indemnification by Vanta. Vanta will indemnify and hold Customer harmless from any Losses (defined below) arising out of an unaffiliated third party’s claim (“Claim”) that the Services infringe or misappropriate such third party’s Intellectual Property Rights. Vanta will, at its sole expense, defend such claim and pay liabilities and expenses awarded to such unaffiliated third party by a court of competent jurisdiction or agreed to in a settlement (collectively, “Losses”) in connection with such Claim. If use of a Service by Customer has become, or, in Vanta’s opinion, is likely to become, the subject of any such Claim, Vanta may, at its option and expense, (i) procure for Customer the right to continue using the Service(s) as set forth hereunder; (ii) replace or modify a Service to make it non-infringing; or (iii) if options (i) or (ii) are not commercially reasonable or practicable as determined by Vanta, terminate the affected Order Form and repay, on a pro-rata basis, any Fees previously paid by Customer to Vanta for the corresponding unused portion of the then-current Service Period for such affected Service(s). Vanta will have no liability or obligation under this Section with respect to any Claim if such Claim is caused in whole or in part by (a) any use of the Services in non-conformity with the documentation or in violation of this MSA; (b) modification of the Services by anyone other than Vanta; or (c) the combination, operation or use of the Services with other hardware or software where the Services would not otherwise be infringing. The provisions of this Section state the sole, exclusive, and entire liability of Vanta to Customer and constitute Customer’s sole remedy with respect to an infringement claim brought by reason of access to or use of a Service by Customer or Authorized Users.
8.2. Indemnification by Customer. Customer will indemnify and hold Vanta harmless from any Losses arising out of a Claim related to Customer Information. Customer will, at its sole expense, defend Vanta against such Claim and pay any Losses in connection therewith. Customer will have no liability or obligation under this Section with respect to any Claim to the extent such Claim is caused by Vanta’s breach of this MSA or unauthorized use or modification of Customer Information.
8.3. Indemnification Conditions and Procedures. The obligations of the indemnifying Party in this Section 8 are conditioned upon the indemnified Party (i) promptly notifying the indemnifying Party of the threat or notice of the Claim (provided that a failure to provide such notice shall only relieve the indemnifying party of its indemnity obligations if the indemnifying party is materially prejudiced by such failure); (ii) giving the indemnifying Party sole and exclusive control and authority to select defense attorneys, and defend and/or settle the Claim (however, the indemnifying Party may not settle or compromise any Claim that results in liability or admission of any liability by the indemnified Party without prior written consent of the indemnified Party provided that such consent shall not be unreasonably conditioned, withheld or delayed); and (iii) cooperating with the indemnifying Party, at the indemnifying Party’s expense, in connection with the defense and/or settlement in connection therewith.
SECTION 9. LIMITATION OF LIABILITY.
9.1. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY (WHETHER IN CONTRACT, TORT, NEGLIGENCE OR OTHERWISE) WILL EITHER PARTY OR ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, SERVICE PROVIDERS, SUPPLIERS OR LICENSORS BE LIABLE TO THE OTHER PARTY OR ITS AFFILIATES FOR ANY LOST PROFITS, LOST SALES OR BUSINESS, LOST DATA (EXCEPT WHEN SUCH DATA LOSS ARISES SOLELY AS A DIRECT RESULT OF VANTA’S BREACH OF ITS OBLIGATIONS UNDER SECTION 6 OF THIS MSA OR THE DPA ), BUSINESS INTERRUPTION, LOSS OF GOODWILL, COSTS OF COVER OR REPLACEMENT, OR FOR ANY TYPE OF INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL OR PUNITIVE LOSS OR DAMAGES, REGARDLESS OF WHETHER SUCH PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF OR COULD HAVE FORESEEN SUCH DAMAGES.
9.2. NEITHER PARTY’S AGGREGATE LIABILITY ARISING OUT OF THIS MSA WILL EXCEED THE AGGREGATE FEES PAID OR PAYABLE BY CUSTOMER DURING THE TWELVE (12) MONTHS IMMEDIATELY PRIOR TO THE FIRST EVENT OR OCCURRENCE GIVING RISE TO SUCH CLAIM (“GENERAL CAP”); PROVIDED THAT FOR CLAIMS ARISING FROM A PARTY’S BREACH OF (I) ITS CONFIDENTIALITY OBLIGATIONS UNDER SECTION 5, (II) SECURITY OBLIGATIONS UNDER SECTION 6 OR (III) THE DPA, EACH PARTY’S AGGREGATE LIABILITY WILL NOT EXCEED TWO TIMES (2X) THE GENERAL CAP.
9.3. NOTWITHSTANDING SECTIONS 9.1 AND 9.2, NOTHING IN THIS MSA WILL LIMIT OR EXCLUDE EITHER PARTY’S LIABILITY FOR (I) GROSS NEGLIGENCE, FRAUD, INTENTIONAL MISCONDUCT, (II) A PARTY’S INDEMNIFICATION OBLIGATIONS UNDER SECTION 8, (III) CUSTOMER’S PAYMENT OBLIGATIONS UNDER SECTION 2, (IV) CUSTOMER’S VIOLATION OF SECTION 4.5 OR (V) ANY OTHER MATTER FOR WHICH LIABILITY CANNOT BE EXCLUDED BY LAW.
9.4. CUSTOMER ACKNOWLEDGES AND AGREES THAT THE ESSENTIAL PURPOSE OF THIS SECTION 9 IS TO ALLOCATE THE RISKS UNDER THIS MSA BETWEEN THE PARTIES AND LIMIT POTENTIAL LIABILITY GIVEN THE FEES, WHICH WOULD HAVE BEEN SUBSTANTIALLY HIGHER IF VANTA WERE TO ASSUME ANY FURTHER LIABILITY OTHER THAN AS SET FORTH HEREIN. VANTA HAS RELIED ON THESE LIMITATIONS IN DETERMINING WHETHER TO PROVIDE CUSTOMER WITH THE RIGHTS TO ACCESS AND USE THE SERVICES PROVIDED FOR IN THIS MSA.
Section 10. Miscellaneous.
10.1. Entire Agreement; Order of Precedence. This MSA, DPA and any active Order Forms constitute the entire agreement, and supersedes all prior agreements, between Vanta and Customer regarding the subject matter hereof. In the event of any inconsistency or conflict between the terms of the MSA, DPA and the terms of any Order Form, the following order of precedence shall apply: (1) Order Form, (2) the DPA and (3) the MSA. No terms or conditions stated in a Customer purchase order, vendor onboarding process or web portal, or any other Customer order documentation (excluding Order Forms) shall be incorporated into, or considered an amendment to, this MSA, DPA or any Order Form and all such terms or conditions are hereby deemed null and void, notwithstanding any language to the contrary therein, whether signed or issued before or after this MSA.
10.2. Assignment. Neither Party may, assign this MSA without the prior written consent of the other Party, except that either Party may, without the need for such consent, assign this MSA to any Affiliate or in connection with any merger, change of control, or the sale of all or substantially all of such Party’s assets; provided that (1) the other Party is provided notice of such assignment and (2) any such successor agrees to fulfill its obligations pursuant to this MSA. Subject to the foregoing restrictions, this MSA will be fully binding upon, inure to the benefit of and be enforceable by the Parties and their respective successors and assigns. Any attempt by a Party to transfer or assign this MSA or an Order Form, except as expressly authorized above, will be null and void.
10.3. Severability. If any provision in this MSA is held by a court of competent jurisdiction to be unenforceable, such provision will be modified by the court and interpreted so as to best accomplish the original provision to the fullest extent permitted by law, and the remaining provisions of this MSA will remain in effect.
10.4. Relationship of the Parties; Third-Party Beneficiaries. The Parties are independent contractors. This MSA does not create a partnership, franchise, joint venture, agency, fiduciary, or employment relationship between the Parties. There are no third-party beneficiaries under this MSA, except to the extent expressly stated herein.
10.5. Notices. All notices provided by Vanta to Customer under this MSA will be delivered in writing (a) by nationally recognized overnight delivery service (“Courier”) or U.S. mail to the contact mailing address provided by Customer on the Order Form; or (b) electronic mail to the electronic mail address provided for Customer’s account owner. Customer must give notice to Vanta in writing by email to legal@vanta.com. All notices shall be deemed to have been given immediately upon delivery by electronic mail; or, if otherwise delivered upon the earlier of receipt or two (2) business days after being deposited in the mail or with a Courier as permitted above.
10.6. Governing Law, Jurisdiction, Venue. This MSA, and all claims or causes of actions that may arise out of or relate to this MSA, will be governed by the laws of the State of California, without reference to conflict of laws principles. The Parties agree that the exclusive jurisdiction and venue for any actions or claims arising hereunder shall be the state and federal courts in San Francisco County, California. The Parties hereby expressly and irrevocably agree to, and waive any objection to, the jurisdiction and venue of such courts. The United Nations Convention on the International Sale of Goods does not apply to this MSA or any Order Form.
10.7. Export Compliance. The Services are subject to export control and economic sanctions laws, including the U.S. Export Administration Regulations and sanctions administered by the Office of Foreign Assets and Control and other applicable export laws, restrictions and regulations (collectively, “Export Controls”). Each Party agrees to comply with all Export Controls in connection with its provision or use of the Services hereunder. Without limiting the foregoing, Customer represents and warrants that (a) it is not named on any U.S. government list of persons or entities prohibited from receiving U.S. exports, or transacting with any U.S. person; (b) it is not located in or a national of, or a company registered in, any jurisdiction that is subject to a U.S. government embargo or has been designated by the U.S. government as a “state sponsor of terrorism”; (c) it will not permit any individuals under its control to access or use the Services in violation of any Export Controls and (d) will not submit to the Services any information that is controlled under the U.S. International Traffic in Arms Regulations.
10.8. Anti-Bribery and Anti-Corruption. Each Party represents that it has not offered, given, received or been offered any illegal or improper bribe, kickback, payment, gift, or thing of value from the other’s employees or agents in connection with this MSA and that it maintains and enforces a written policy prohibiting such conduct. Each Party will comply with anti-bribery and anti-corruption laws as applicable to it and will not make or accept any facilitation payment in violation thereof. If a Party learns of any violation of this Section, it will use reasonable efforts to promptly give notice to the other Party.
10.9. Publicity and Marketing. Vanta may use Customer’s name, logo, and trademarks to identify Customer as a client of Vanta on Vanta’s website and other marketing materials.
10.10. Amendments. No modification or amendment of this MSA shall be valid unless made in writing and signed by authorized representatives of both Parties.
10.11. Third Party Products and Services.
10.11.1. Third Party Products. Customer may enable integrations between the Services and third-party products, applications, and services (collectively, “Third Party Products”). Customer’s use of such Third Party Products will be subject to the privacy policies and terms and conditions of such third party providers. Customer acknowledges and agrees that Vanta makes no representations, warranties or covenants regarding such Third Party Products. Customer hereby waives any claim against Vanta with respect to Customer’s enablement of, access to or use of such Third Party Products in connection with the Services.
10.11.2. Third Party Services. If an Order Form contemplates Customer obtaining third party certifications or testing services (e.g., an audit or penetration testing services) (collectively, “Third Party Services”), Customer acknowledges and agrees that such Third Party Services will be performed by an independent third party and not by Vanta. Customer may be required to enter into an engagement letter or separate agreement with such third party in connection with such Third Party Services prior to the provision thereof which shall govern Customer’s receipt of such Third Party Services. Vanta will not be a party to such engagement letter or separate agreement and bears no responsibility for the quality, accuracy, or completeness of the Third Party Services. Customer acknowledges and agrees that Vanta makes no representations, warranties or covenants with respect to such Third Party Services.
10.12. Usage Data. Vanta collects and analyzes metadata and information relating to the access, use, and performance of the Services (“Usage Data”). Usage Data is distinct from, and shall not include any, Customer Information. Notwithstanding anything to the contrary herein, Vanta may use Usage Data for purposes of operating Vanta's business. Usage Data will only be shared with third parties if it (a) is aggregated and anonymized and (b) does not disclose any Customer Confidential Information or violate Section 5.
10.13. Insurance. During the Term, Vanta will maintain at its own cost: (a) Commercial General Liability insurance of not less than $1 million per occurrence and $2 million in the aggregate; (b) Technology E&O/Cyber-Risk insurance of not less than $5 million in the aggregate; and (c) an umbrella liability policy of not less than $5 million in the aggregate.
10.14. Force Majeure. Except with respect to Customer’s payment obligations, neither Party will be liable for, or considered in breach or default under this MSA or any Order Form as a result of any cause or condition beyond such Party’s reasonable control.
10.15. Waiver. Neither Party’s failure to enforce at any time any provision of this MSA constitutes a waiver of that provision or of any other provision of this MSA.
