Non-Disclosure Agreement (NDA)

Parties: IVERIOS OÜ (the "Discloser") and the person registering for the trust center together with the organisation on whose behalf they act (the "Recipient").

1. Purpose

The Discloser gives the Recipient access to security, compliance and data-protection documents and information in the trust center ("Confidential Information") solely to evaluate the Discloser's services and to enter into or perform a business relationship (the "Purpose").

2. Recipient's obligations

The Recipient shall:

• use Confidential Information only for the Purpose;

• not disclose it to third parties, except to its employees and advisers who need it for the Purpose and are bound by equivalent confidentiality;

• not publish, copy or share documents outside its organisation without the Discloser's prior written consent;

• protect it with at least the same care it uses for its own confidential information.

3. Exceptions

These obligations do not apply to information that is public without breach of this agreement, that the Recipient lawfully held before disclosure, or that must be disclosed by law or order of a competent authority (with prior notice to the Discloser where permitted).

4. Term

The confidentiality obligations last three (3) years from the last access to Confidential Information.

5. Return and deletion

At the Discloser's request the Recipient shall delete or return downloaded Confidential Information.

6. Governing law

This agreement is governed by the law of the country of the Discloser's registered office.

By accepting during registration the Recipient confirms that it is authorised to accept this agreement on behalf of its organisation.