Product–Specific Special Terms

1. In provisioning the Services for proper usage by Customer and its Users under all Egnyte plans detailed under the Agreement and the associated compute resources to be utilized, Egnyte targets a Content access limit of up to 100% of the total monthly storage purchased during any given month of the Subscription Term (the “Access Limit”). Customer usage in excess of the Access Limit qualifies as a restricted use under Section 3.d of the Agreement and may subject Customer to overage fees.

Notwithstanding the above, any Customer and/or User attempts to access Content in any other manner that imperil the stability and reliability of the Services or which are prohibited under Section 3.d of the Agreement may be subject to additional restrictions. For example: i. the sharing of Content reasonably identified by Egnyte as an attempt to propagate a mass, junk mailing may be blocked in its entirety, temporarily or permanently; ii. Customer’s initiation of Egnyte network egress activities, bandwidth usage, or API calls may be limited by Egnyte in accordance with Egnyte’s then-current plan limits (which may include, but are not limited to, those found at: https://helpdesk.egnyte.com/hc/en-us/articles/201637594-Am-I-Subject-to-Any-Restrictions ; https://helpdesk.egnyte.com/hc/en-us/articles/17683455594125-Select-Usage-Restrictions-by-Plan).

2. Methods of Content access by Customer or its Users that count toward the Access Limit include, but are not limited to, the following:

1. Web UI
2. Shared file and folder links
3. Desktop App
4. Desktop Sync
5. WebEdit
6. WebDAV
7. Mobile App
8. Storage Sync
9. Turbo
10. FTP/SFTP
11. Microsoft Office Add-In
12. Salesforce Integration

1. Pricing for Governance functionality includes fees for Customer’s right to utilize the Content Classification and Access Control modules.

1. Multiple Entity Management (MEM) Power User Access. Customers with the Administrative Package may use MEM capability to manage multiple domains.

If this feature is utilized, all unique Power Users under the Agreement may access any domain listed under this Order Form or a subsequent Order Form under the Agreement (excluding any Archive Domain or GxP Domain), subject to Customer configuration and MEM limitations.

1. Archive Storage will be accessed and utilized through an Archive Domain for a Customer with RAD functionality enabled via its plan. Archive Storage is automatically allocated by Egnyte following the purchase of such storage.
2. The Archive Domain is not to be utilized as an active domain, rather only as an archive ancillary to the active domain(s) for housing low-use files and folders.
   1. Up to 5 unique Admin Users under the Agreement may access such Archive Domain.
   2. Governance, Permissions, and Legal Hold functionality are unavailable for the Archive Domain.
   3. General search functionality is available for the Archive Domain but may be subject to limitations.
   4. Accessing (i.e. downloads) of Content from the Archive Domain by Customer and its Users, including any modification, access, or migration of data already in an Archive Domain, is limited to 5% of the total storage in use on the last day of each month for the Archive Domain (the "Download Limit"). Should Customer and its Users, in the aggregate, exceed the Download Limit in any month during the Subscription Term, Egnyte may increase the fee for that month (based on the applicable pricing for non-archive storage), rounded up to each TB above the Download Limit during that month. Egnyte will bill for such usage following discovery of the overage, with billing effective as of the date such overage occurred.
   5. Any file size limit under Customer’s purchased plan shall not apply to the Archive Domain.
3. For clarity, “accessing” refers to the download centric activities set forth in Egnyte’s Service generated audit report, and includes downloads, downloads via link, preview, and preview via link.

Notwithstanding the foregoing, in no event shall the following operational activities be counted against the accessing/download limit:

1. the removal of data from the Archive Domain upon termination of the archive service
2. uploading of data into the Archive Domain from the primary, active domain(s)

Methods of Content access by Customer or its Users that count toward the Download Limit include, but are not limited to, the following:

1. Web UI
2. Shared file and folder links
3. FTP/SFTP
4. Public API
5. RAD
6. Migration tools
7. All other methods of Content access are prohibited on the Archive Domain, and as such, the Administrator is required to manually disable the following on the domain configuration settings prior to Customer’s use of the Archive Domain:
   1. Mobile
   2. Desktop App
   3. Apps and Integrations

1. Description. The Egnyte GxP Platform Plan and GxP Modular Use Case Plans include a domain with features to enable Customer to meet certain GxP requirements, such as those set forth in FDA 21 CFR Part 11 and in DG COMP Annex 11.
   • Any GxP domain can hold Customer’s regulated data. Such domain will be generated following Egnyte’s qualifications procedures and have features to meet relevant GxP requirements.
   • In addition to the domain described in subsection a. above, all GxP plans include a separate test domain at no additional cost, which includes 25 GB of storage and which may be accessed by up to 5 unique Power Users and up to 5 unique Standard Users. Additional Users within this test domain may be offered by Egnyte via a mutually executed Order Form.
   • As a service alongside purchase of any GxP plan, Customer may access Egnyte's GxP Portal, which provides ongoing access to Egnyte's Validation documentation, GxP Risk Assessed Release Notes, and daily Performance Testing Results. Customer may also request, at any time during the Subscription Term:
     1. that the audit log retention period for their GxP domain and test domain be extended by Egnyte from 90 days to a period up to 10 years, as well as
     2. the ability to capture audit reports of up to 366 days of data. Any additional requests may be addressed in a separately negotiated Order Form or Statement of Work, as applicable.
   • As a service alongside purchase of the GxP Platform (GxP Modular Use Case Plans excluded), Customer will be able to review Egnyte's GxP-related SOPs through remote audit once per annual Subscription Term (or annual portion thereof), provided such review is formally requested in advance and does not exceed reasonable limits on time and resources to be expended by Egnyte in providing Customer support in relation to its review, as may be determined by Egnyte in its sole discretion (which shall not be unreasonably withheld). Excess support for such review, or any review by a GxP Modular Use Case Customer, may be offered by Egnyte via a separately negotiated Statement of Work or Order Form, as applicable. Use of a third party to conduct such remote audits shall require Egnyte’s advance written consent (in its sole discretion), and in the event such consent is given, the third party must not be a competitor of Egnyte in any form and must be held subject to appropriate non-disclosure terms that extend to any Egnyte Confidential Information (which includes, but is not limited to, Egnyte’s GxP-related SOPs and Trust Packet).Customer shall remain liable for any breach of such terms, or any other improper behavior, by this third party. In no event shall Egnyte’s facilities or systems, nor the underlying procedures governed by the policies provided in the Customer Trust Packet, be subject to review or audit.
   • If required, costs and scope of a User Acceptance Testing Package shall be addressed in a separately negotiated Statement of Work.
   • Customer understands that its use of any GxP Platform is dependent on maintaining Administrator functionality and will maintain such functionality as needed to secure access to the GxP Platform.

1. Summary and Delivery Cadence:
   Egnyte’s UAT Services are designed to assist GxP Platform customers with the development and delivery of components that demonstrate User Acceptance Testing (UAT) and/or Training activities. UAT Services are purchased via select packages, as further described herein.
2. UAT Services Plan Deliverables:
   1. 2.1 GxP Validation Generic Template - VaaS
      The following will be provided:
      • Generic User Requirements Specification (URS) ready for Customer use.
      • Generic UAT Scripts described in the Traceability Matrix ready for Customer use.
      • Generic Traceability Matrix (URS to UAT Scripts) ready for Customer use.
      *Does not include any 3rd Party Integrations
   2. 2.2 GxP Validation Customized Document Template - VaaS
      The following will be provided:
      • Customer-specific User Requirements Specification (URS) ready for Customer use.
      • Customer-specific UAT Scripts described in the Traceability Matrix ready for Customer use.
      • Customer-specific Traceability Matrix (URS to UAT Scripts) ready for Customer use.
      • Some 3rd party integrations are available.
   3. 2.3 GxP Validation - Generic Template + domain UAT execution - VaaS
      The following will be provided:
      • Completed UAT Document Package (approved by Egnyte).
      • Egnyte-approved UAT Plan.
      • Executed UAT Scripts along with any effort needed to resolve discrepancies / deviations (if any) in UAT Services environment (Production level equivalent).
      • UAT Summary Report ready for Customer approval.
      *Does not include any 3rd party integrations
   4. 2.4 GxP Validation - Customized Document Template + domain UAT execution - VaaS
      The following will be provided:
      • Completed UAT Document Package (approved by Egnyte).
      • Egnyte-approved UAT Plan.
      • Executed UAT Scripts along with any effort needed to resolve discrepancies / deviations (if any) in UAT Services environment (Production level equivalent).
      • UAT Summary Report ready for Customer approval.
      • Some 3rd Party integrations are available.
   5. 2.5 GxP Validation as a Service
      The following will be provided:
      • Developed and approved (Egnyte and Customer) UAT Plan.
      • Developed and approved (Egnyte and Customer) User Requirements Specification (URS).
      • Developed, approved (Egnyte and Customer), and executed UAT Scripts along with any effort needed to resolve discrepancies / deviations (if any) in Customer’s test environment.
      • Developed and approved (Egnyte and Customer) Traceability Matrix (URS to UAT Scripts).
      • UAT Summary Report ready for Customer approval.
      • Scope of services includes up to two (2) cycles of draft, review/revise, and approval of the above documents. The second cycle shall be final, with no further iterations.
      • Two (2) User Guides for the Operation and Administration of the System.
      • 3rd Party Integrations are available.
      Certain of the above deliverables may require Customer’s input, cooperation, or approval, and Customer commits to providing any such assistance requested by Egnyte in a prompt manner. In the event of Customer’s failure to promptly deliver such assistance:
      1. Customer’s relevant payment obligations shall remain unaffected.
      2. Egnyte may deem, at its sole reasonable discretion, any impacted deliverables or Services to be complete upon Egnyte’s delivery of all other non-contingent aspects of the deliverables or Services.
3. Custom Training
   Remote customized training and User adoption support, which will include curriculum development in collaboration with Customer. The following trainings will be recorded and provided to Customer:
   • 1 x Admin training
   • 1 x Power User training
   • 1 x GxP features training
   • 2 x Secure & Govern training for applicable Egnyte plans (as applicable)

1. Description. Advanced Privacy & Compliance ("APC") is a SaaS-based privacy feature licensed by Egnyte for delivery to Egnyte customers directly from a third-party licensor. For clarity, apart from the first sentence of such section, the provisions of Section 3.f of the Agreement are inapplicable to APC.

1. Customer is responsible for configuring its Egnyte for Government domain in accordance with its own compliance and business requirements, including, but not limited to, CMMC certification. CMMC functionality is a SaaS-based privacy feature licensed by Egnyte for delivery to Egnyte customers directly from a third-party licensor. For clarity, apart from the first sentence of such section, the provisions of Section 3.f of the Agreement are inapplicable to CMMC functionality.

Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.