Autify Self-hosted Provision Conditions

English Reference Translation

This English translation is provided for reference purposes only and is not legally binding. The Japanese version is the authoritative text. In the event of any discrepancy or inconsistency between the Japanese version and this English translation, the Japanese version shall prevail in all respects.

These provision conditions (these "Conditions") set forth the conditions specific to the Self-hosted Services defined in Article 2, paragraph 4 of the Autify Terms of Service (the "Terms") and the matters with which Members must comply. Terms used in these Conditions have the meanings assigned in the Terms unless otherwise defined herein. Matters not addressed in these Conditions are governed by the Terms. In the event of a conflict between these Conditions and the Terms, these Conditions shall prevail.

In these Conditions, the "Company" means the Company as defined in the Terms, and "Self-hosted Services" means the Self-hosted Services defined in Article 2, paragraph 4 of the Terms, operated in an environment managed by a Member, including an on-premises environment, a cloud environment, or any other equivalent environment.

Article 1 Grant of License

During the term of the Service Agreement, the Company grants a Member a non-exclusive, non-transferable, non-sublicensable license for the Member and its Users to use the Self-hosted Services solely for the Member's internal business purposes, subject to these Conditions and the Terms. All rights not expressly granted in these Conditions or the Terms are reserved by the Company.

Article 2 Open Source Software

The Self-hosted Services may contain open source software ("OSS"). The license terms applicable to OSS take precedence over these Conditions and the Terms. A Member shall comply with the applicable OSS license terms. The Company makes no warranties regarding OSS, whether express or implied, and shall not be liable for any loss or damage suffered by a Member arising from OSS.

Article 3 Usage Period and License Management

1. The period of use of the Self-hosted Services is limited to the period specified in the Service Agreement.

2. The period during which the Self-hosted Services can be used is technically controlled by a license file issued by the Company. A Member shall not copy, modify, or analyze the license file or otherwise circumvent or disable license-based usage controls.

3. The usage period is not extended automatically. It may be extended only where the Member and the Company separately agree to the extension, by the Company issuing a new license file to the Member.

4. A Member shall not use the Self-hosted Services beyond the validity period specified in the license file.

Article 4 Details of Usage Conditions

The scope, quantities, limits, and other conditions of use of the available features of the Self-hosted Services, including the number of available test scenarios and parallel executions, shall be as specified in the Service Agreement.

Article 5 Technical Premises and Member Responsibilities in the Self-hosted Environment

1. A Member understands and agrees in advance that, because the Self-hosted Services are provided in an environment under the Member's control, the Member may be able to view or ascertain the content of communications with generative AI models, input and output data, logs, and other information in the course of operation.

2. The Member's ability to view or ascertain the information referred to in the preceding paragraph arises from the nature of the environment under the Member's control. The Company shall not be liable for the fact that the Member can view or ascertain that information. The Member shall appropriately manage that information at its own responsibility.

3. The Member is responsible for managing the operating environment for the Self-hosted Services, including infrastructure, networks, operating systems, middleware, and related environments. The Company shall not be liable for defects, failures, security incidents, or other loss or damage arising from those environments.

4. A Member shall, at its own responsibility, make necessary backups of data processed or stored in the Self-hosted Services and establish recovery procedures. The Company shall not be liable for data loss, corruption, or inability to recover data arising from a Member's failure to take backups or other necessary measures.

5. A Member is responsible for selecting, preparing, and managing the generative AI models used in the Self-hosted Services and for the results arising from the use of those models. The Company shall not be liable for loss or damage arising from the performance or availability of a generative AI model selected by a Member, changes in its terms of provision, or discontinuation of its provision.

6. If the Company releases updates or security patches for the Self-hosted Services, the Member is responsible for applying them. The Company shall not be liable for defects, security risks, or other loss or damage arising from failure to apply an update or patch.

Article 6 Data Handling in the Self-hosted Environment

1. The Company shall not access data processed or stored in the environment managed by a Member in connection with the Self-hosted Services, including input data, output data, logs, and related information, unless the Member has given separate express consent.

2. Notwithstanding the preceding paragraph, where a Member provides the Company with logs, configuration information, reproduction data, or other information ("Provided Information"), the Company may use the Provided Information only to the extent necessary to achieve the purposes specified in Article 11, paragraph 2 of the Terms. Where Provided Information includes personal information, that personal information shall be handled in accordance with the Privacy Policy.

3. The Company may entrust all or part of the handling of Provided Information to third parties, including cloud service providers and error monitoring and analysis service providers, to the extent necessary for use under the preceding paragraph. In such cases, the Company shall impose obligations equivalent to those it bears under this Article on those third parties.

4. The Company shall not use the data processed or stored in the Member-managed environment referred to in paragraph 1 or the Provided Information referred to in paragraph 2 to train machine learning models or other AI models (meaning reflecting that data or Provided Information in the parameters of such AI models), unless the Member has given separate express consent.

5. If Article 11 of the Terms, the Company's Privacy Policy, or any other data use conditions separately established by the Company conflict or are inconsistent with this Article, this Article shall prevail with respect to the Self-hosted Services.

Article 7 Notification of Security Incidents

If a Member becomes aware of a security incident relating to the Self-hosted Services, including unauthorized access, information leakage, malware infection, or any equivalent event, the Member shall notify the Company without delay. The Member shall, in response to the Company's reasonable requests, report the details, scope of impact, and response status of the incident to the Company.

Article 8 Verification of Usage

The Company may request that a Member submit logs, usage records, or other reasonable materials concerning its use of the Self-hosted Services to verify compliance with these Conditions and the Terms. A Member shall respond to such a request within a reasonable period. The Company shall not use information acquired under this Article for any purpose other than verifying compliance.

Article 9 Handling of Generative AI Related Information and Prohibited Conduct

1. In these Conditions, "Generative AI Related Information" means prompts, processing flows, specifications, design concepts, and other technical information proprietary to the Company relating to communications with generative AI models in the course of operation of the Self-hosted Services. Generative AI Related Information is important technical information of the Company, and the Intellectual Property Rights and commercial interests in it belong to the Company.

2. Regardless of how it is obtained, a Member shall not engage in any of the following with respect to Generative AI Related Information:

(1) Using Generative AI Related Information to develop features or services that are the same as or substantially compete with the Services or Self-hosted Services.

(2) Using Generative AI Related Information to reproduce, imitate, copy, modify, reverse engineer, or engage in any equivalent conduct concerning the generative AI features of the Services or Self-hosted Services.

(3) Disclosing, providing, or licensing Generative AI Related Information to a third party.

(4) Otherwise infringing the Company's Intellectual Property Rights or commercial interests.

3. The preceding paragraph does not prohibit a Member from viewing or ascertaining Generative AI Related Information as part of ordinary operation, security, governance compliance, auditing, logging, or other administration of the environment it manages. A Member shall not, however, use such information in a manner falling within any item of the preceding paragraph.

4. If Generative AI Related Information includes third-party Intellectual Property Rights, a Member shall use that information in accordance with applicable laws, regulations, and agreements.

5. A Member does not acquire any right of use or other right in Generative AI Related Information beyond the scope of using the Self-hosted Services in accordance with the Service Agreement, nor may it grant, license, or otherwise dispose of any such right to a third party.

Article 10 Compliance with Export Controls

A Member shall comply with Japan's Foreign Exchange and Foreign Trade Act and other applicable export control laws and regulations when using the Self-hosted Services. A Member is responsible for determining whether the Self-hosted Services are subject to export controls (export control classification), and the Company shall not be responsible for the results of that determination. The Company shall reasonably cooperate in providing technical information and other materials necessary for the Member to make that determination.

Article 11 Measures upon the End of the Agreement

1. If provision of the Self-hosted Services ends due to expiration of the usage period or for any other reason, the Member shall immediately cease using the Self-hosted Services and, in accordance with the Company's instructions, uninstall or delete the Self-hosted Services, including license files.

2. After provision of the Self-hosted Services ends, a Member shall delete, to the extent reasonably possible, Generative AI Related Information copied or stored in connection with its use of the Self-hosted Services. If the Company separately instructs the Member regarding deletion or other handling of such information, the Member shall comply with those instructions. If deletion is difficult due to a legal obligation or other legitimate reason, the Member shall notify the Company, implement access restrictions and other appropriate security measures for that information, and promptly delete it once the reason ceases to exist.

Article 12 Survival

Article 2 (Open Source Software), Article 3 (Usage Period and License Management), Article 5 (Technical Premises and Member Responsibilities in the Self-hosted Environment), Article 7 (Notification of Security Incidents), Article 8 (Verification of Usage), Article 9 (Handling of Generative AI Related Information and Prohibited Conduct), Article 10 (Compliance with Export Controls), Article 11 (Measures upon the End of the Agreement), and this Article survive the end of use of the Self-hosted Services under the Service Agreement.

Established November 4, 2026

Effective date December 14, 2026