Terms & Conditions

Between

(1) Catcher24 B.V., with registered office at Prinsengracht 530H, 1017KJ Amsterdam, The Netherlands, and registered number 84881704 (“Catcher”);

and

(2) The Customer as identified in the Order (“Customer”).

Background

1. Catcher has developed certain vulnerability scanner software products, which it offers to customers on a Software as a Service (SaaS) basis, enabling them to identify cybersecurity weaknesses in their digital infrastructure.
2. The Customer seeks to utilize Catcher’s services for its internal business operations.
3. Catcher has agreed to provide, and the Customer has agreed to engage and pay for, Catcher’s services subject to the terms and conditions outlined in this Agreement.

1. Definitions

In this Agreement:

• “Agreement” refers to these terms and conditions, including the Order, Trial, schedules, annexes, and all referenced documents.
• “Business Day” means any day that is not a Saturday, Sunday, or public holiday in The Netherlands.
• “Confidential Information” encompasses the provisions of this Agreement and, concerning either Party, all non-public information, including commercial, financial, marketing, or technical data.
• “Customer User” denotes any employee, agent, contractor, or consultant of the Customer utilizing the Services.
• “Effective Date” indicates the date when the Order is accepted by Catcher.
• “End Customers” The ultimate recipient of the Services, whether obtained directly from Catcher24 or through a Reseller..
• “Fees” represent the charges for the Services as specified in the relevant Plan.
• “Force Majeure” refers to any event beyond a Party’s control affecting its ability to fulfill obligations under this Agreement.
• “Intellectual Property Rights” includes patents, copyrights, trademarks, trade secrets, and other proprietary rights.
• “Catcher Portal” denotes the online portal through which the Customer and Customer Users manage their Target Systems and view security Weaknesses.
• “Order” indicates the specific order for Services accepted by Catcher during the sign-up process.
• “Party” or “Parties” refers to Catcher and/or the Customer.
• “Plan” signifies the relevant service plan offered by Catcher, specifying the number of Target Systems, associated Fees, and Term.
• “Platform” represents the Catcher software platform, including the Catcher Portal.
• “Platform Data” encompasses usage, statistical, or derived data from the Platform, anonymized and aggregated.
• “Reseller” A third party authorized by Catcher24 to sell or distribute the Services to End- Customers.
• “Services” refers to the services provided by Catcher under this Agreement, as identified in the Order.
• “Service Specification” signifies the description of the Services outlined in the Catcher Service Overview.
• “Target System” denotes an individual computer system identified by IP address, hostname, or unique identifier.
• “Term” indicates the duration specified in the Plan or Order.
• “Weakness” signifies a configuration, patch level, or application deployment likely to undermine a Target System’s security or information.

1.2 Drafting Conventions

(a) Headings are for convenience and do not affect interpretation.
(b) Singular terms include the plural, and vice versa.
(c) “Other,” “including,” and “in particular” do not limit preceding words.
(d) References to clauses are to clauses in these Terms and Conditions unless stated otherwise.

2 The Service

2.1 Subject to acceptance of a relevant Order by Catcher, and receipt of the Fees in accordance with the relevant payment terms, and subject to compliance by the Customer with the provisions of the relevant Plan and the terms of this Agreement, Catcher agrees to provide the Customer with the Services.

2.2 The Customer may, subject to the relevant Plan details:

(a) use the Services for the Customer’s own internal business purposes in relation to its own Target Systems;

(b) use the Services to provide services to its own End Customers, by including its end customer’s systems in the Target Systems.

(c) obtain the Services through an authorized Reseller. In such cases, the terms of this Agreement shall apply to the End Customer as if they had contracted directly with Catcher24.

2.3 For the avoidance of doubt the Customer may not permit its End Customers to use the Services or access the Platform directly, and the Customer must at all times use the Services on behalf of its End Customers. The Customer is responsible for ensuring that only employees, agents and consultants authorized and permitted by the Customer can access and use the Service. Only employees, agents and consultants of the Customer are entitled to be Customer Users.

2.4 The Customer shall be responsible for all access to and use of the Service as enabled by the Customer via the Customer’s account and or Customer Users’ login credentials.

2.5 In connection with its supply of the Services, Catcher may be required to process personal data on behalf of the Customer. In such circumstances the parties will each comply with the terms and conditions of Schedule 1 – the Data Processing Agreement (NL: Verwerkersovereenkomst).

3 Customer Systems and Customer Responsibilities

3.1 The Customer shall perform or comply with the Customer responsibilities under this Agreement and agrees that Catcher’s provision of the Service is dependent on the Customer performing or complying with the Customer responsibilities.

3.2 The Customer permits Catcher to access the Customer’s systems and networks (including without limitation the Target Systems and any applications or data held on such network and systems) for the purposes of the relevant actual Dutch legislation (as updated, replaced and amended from time to time) and represents it has authority and will have authority at all times during this Agreement, to give such permission.

3.3 The Customer undertakes that it has and will have at all times during this Agreement, all necessary permissions, authorizations and consents from the owners or licensors of the Customer’s systems and networks (including without limitation the Target Systems) to enable the Services to be provided to the Customer.

3.4 The Customer undertakes that where it uses the Service in any jurisdiction or territory other than The Netherlands, it shall be wholly responsible for ensuring that the use of the Service in that jurisdiction or territory complies with applicable laws or regulation.

3.5 The Customer shall not and shall not permit any third party to:

(a) attempt to download, copy, modify, create derivative works from, frame, mirror, republish or distribute any portion of the Platform except to the extent expressly set out in this Agreement; or

(b) attempt to copy, adapt, decompile, disassemble, reverse engineer or otherwise reduce to human-perceivable form all or any part of the Platform, except as may be allowed by any applicable law which is incapable of exclusion by agreement between the parties;

(c) use any knowledge or information acquired in relation to the Platform or Services in order to build a software product which competes with the Platform;

(d) resell, sublicense or otherwise use the Platform or Services to provide services to third parties, save as permitted under clause 2.2.

3.6 if the Customer is a Reseller, the Customer is responsible for obtaining all necessary consents, permissions, and authorizations from the End Cutomer to enable the provision of the Services.

4 Security and Disclaimers

4.1 The Customer acknowledges that in order for Catcher to provide the Services it will use penetration testing techniques on the Target Systems in accordance with the Service Specification to try and identify Weaknesses. The Customer acknowledges that use of the Service may cause certain temporary increase of network bandwidth usage and / or system processing load of the Target System during the tests, and that Catcher is not responsible for any consequences of Customer network bandwidth or processing capacity limitations.

4.2 Notwithstanding the above, Catcher will ensure it or the Services do not cause any new or worsen any existing Weaknesses, and will not enable any unauthorized access to or use of the Target Systems.

4.3 The Customer acknowledges that the Service is not built specifically as a service for the Customer or the Target Systems and is not guaranteed to and may not identify all Weaknesses that can impact or affect systems.

4.4 Catcher performs assessments and provides notifications of identified vulnerabilities; however, Catcher does not undertake the remediation of any vulnerabilities discovered during assessments. It is the responsibility of the customer to address and remediate any vulnerabilities identified.

4.5 The Service, when used by the Customer, may in certain cases cause unforeseen reactions in the Target System, including but not limited to unavailability, data corruption, or a crash. The Customer is at all times solely responsible for creating backups, configuring so-called “rate limiting” on the Target System prior to using the Service, and monitoring the Target System during the use of the Service.

4.6 Catcher shall not be responsible for any damage or loss that the Customer, any Customer User or End Customer may suffer, whether directly or indirectly as a result of use and provision of the Service as intended, and / or in relation to any Weakness that is not identified by the Service.

5 Intellectual Property

5.1 Catcher has, at its sole cost, created, licensed and developed the Services and the technology and systems including the Platform that form part of the Services.

5.2 As between the Parties, all Intellectual Property Rights in the Services, the Platform and the Platform Data belong solely to Catcher.

5.3 This Agreement shall not constitute a transfer of any Intellectual Property Rights in the Services or Platform to the Customer, nor grant the Customer any rights to the Services or Platform, (including any Intellectual Property Rights in the same) other than as set out in clause 2.

6 Fees

6.1 The Fee under this Agreement is payable by the Customer in full and cleared funds on the Effective Date and on the first day of each Year or Month thereafter, in advance of any access to the Services. In the event your payment method is by payment card, you authorize us to automatically take further payment on renewal of the Term, until you instruct us otherwise.

6.2 The Fee payable under this Agreement is exclusive of value added, sales, withholding or any similar tax, import or customs duties, which shall be paid in addition by the Customer to Catcher at the then prevailing rate.

6.3 If any sum payable under this Agreement is not paid when due then until payment is made in full Catcher shall be entitled to:

(a) suspend access to the Services; and

(b) charge interest on any overdue payment at the rate of 4% per annum above the base rate of the European interest rate (Euribor).

6.4 Catcher reserves the right to modify the Fees at any time and will notify the Customer of any such changes by email, through the Catcher Portal, or other means of electronic communication.

6.5 If Catcher increases its Fees for the Services, the new Fees will take effect at the beginning of the next billing period after the Customer has been notified, subject to clause 6.6. Existing Agreements or Orders will remain in effect at the original Fees until the end of the current billing period.

6.6 If the Customer does not agree with any Fee changes, it has the right to terminate the Agreement by providing written notice within thirty (30) days of the date of the notice of the Fee change.  Such termination will take effect at the end of the current Term.

6.7 Promotional offers or discounts may be offered from time to time at Catcher’s discretion. Such offers will have their own terms, which will be communicated to the Customer at the time of the offer.

6.8 If the Customer is a Reseller, the payment terms between the Reseller and the End-Customer shall be governed by their separate agreement. However, this does not affect the Reseller’s payment obligations to Catcher24 under this Agreement

7 Confidentiality

7.1 Each Party shall keep and procure to be kept secret and confidential all Confidential Information of the other Party disclosed or obtained as a result of the relationship of the Parties under this Agreement and shall not use nor disclose the same except in relation to the performance of this Agreement or with the prior written consent of the other Party. Where disclosure is made by a Party of the other Party’s Confidential Information, to any employee, agent or consultant, it shall be done subject to obligations equivalent to those set out in this Agreement. Each Party agrees to use its best endeavors to procure that any such employee, agent or consultant complies with such obligations provided that each Party shall continue to be responsible to the other Party in respect of any disclosure or use of such Confidential Information by a person to whom disclosure is made.

7.2 The obligations of confidentiality in this clause shall not extend to any information which the other Party can show:

(a) is in, or has become part of, the public domain other than as a result of a breach of the obligations of confidentiality under this Agreement; or

(b) was in its written records prior to the date of this Agreement and not subject to any confidentiality obligations; or

(c) was independently disclosed to it by a third party entitled to disclose the same; or

(d) is required to be disclosed under any applicable law, or by order of a court or governmental body or authority of competent jurisdiction.

7.3 The Customer shall ensure that the Customer Users are aware of and undertake to comply with the obligations of confidentiality set out in this clause.

7.4 Catcher24, in its capacity as Platform Administrator and helpdesk agent, has access to the Platform Data of the Customer on the Platform. This includes, but is not limited to, enabling Catcher24 to provide support to the Customer in this manner and is at all times subject to the confidentiality clause.

7.5 This clause shall survive termination of this Agreement.

8 Warranties and Indemnities

8.1 Subject to clauses 4 and 8.2, Catcher warrants that:

(a) the Service shall comply in all material respects with the Service Specification and shall be provided with all reasonable skill and care and good industry practice.

(b) it has full right, power and authority to enter into this Agreement; and

(c) the Platform and Services will, to the best of its knowledge, contain nothing that infringes the statutory, common law, or Intellectual Property Rights of any third party.

8.2 Save as expressly set out here, any other conditions, warranties or other terms which might have effect between the parties or be implied or incorporated into this Agreement whether by statute, common law or otherwise, are hereby excluded to the fullest extent permitted by law, including, without limitation, the implied conditions, warranties or other terms as to satisfactory quality and fitness for purpose.

8.3 The Customer warrants that:

(a) It, and its representative signing up to the Agreement, has full right, power and authority to enter into this Agreement;

(b) it has all the rights, licenses, permits, approvals and clearance of third party rights as required by applicable laws and as are necessary to perform its obligations and allow Catcher to perform its obligations under this Agreement;

8.4 Catcher will indemnify the Customer from and against any and all losses, damages, claims, penalties, fines, costs and expenses (including reasonable external legal expenses) suffered or incurred by or awarded against the Customer payable in relation to any third party claims or actions as a result of or in connection with any breach by Catcher of clause 8.1.

8.5 The Customer will indemnify Catcher from and against any and all losses, damages, claims, penalties, fines, costs and expenses (including reasonable external legal expenses) suffered or incurred by or awarded against Catcher payable in relation to any third party claims or actions as a result of or in connection with any breach by the Customer of clause 8.3 and/or clauses 3.2, 3.3 and 3.4.

8.6 Each Party will fully indemnify the other from and against any and all losses, damages, claims, penalties, fines, costs and expenses (including reasonable external legal expenses) suffered or incurred by or awarded against the other as a result of or in connection with any breach by the other of clause 7 (Confidentiality).

8.7 In all cases the indemnified party agrees to:

(a) promptly notify the indemnifying party of any allegation of infringement or other claim that may give rise to reliance on an indemnity, which comes to its attention, and give the indemnifying party all reasonable assistance subject to reimbursement by the indemnifying party of the indemnified party’s costs so incurred;

(b) not to make any admission, settle, compromise or negotiate the settlement of any such claim without the prior consent of the indemnifying party (such consent not to be unreasonably withheld) provided that the indemnifying party considers and defends any claim diligently, using competent counsel and in such a way as not to bring the reputation of the indemnified party into disrepute; and

(c) allow the indemnifying party to conduct and settle all negotiations and proceedings, save that the indemnifying party may not conclude settlement of any negotiations and proceedings which may have a material effect (whether financial, practical or in terms of reputation) on the indemnified party without the indemnified party’s prior written consent which will not be unreasonably withheld.

8.8 Resellers shall indemnify Catcher24 against any and all claims, damages, and liabilities arising from the acts or omissions of the Reseller in connection with the provision of the Services to End Users.

9 Limitation of Liability

9.1 Nothing in this Agreement shall exclude or limit:

(a) either Party’s liability for death or personal injury caused by that Party’s negligence, fraud or fraudulent misrepresentation, or any liability which cannot be legally excluded or limited;

(b) the Customer’s liability to pay the Fees.

9.2 Subject to clause 9.1, neither party will be liable, whether in contract, tort (including negligence) breach of statutory duty, or otherwise, for any of the following losses or damage (whether or not such losses or damage were direct, foreseen, foreseeable, known or otherwise) howsoever arising in respect of any: special, indirect, incidental or consequential loss or damage; loss of actual or anticipated profits; loss of business or contracts; loss of revenue or of the use of money; loss of anticipated savings; and/or loss of goodwill, arising out of or in connection with this Agreement.

9.3 Subject to clauses 9.1, the maximum aggregate liability of Catcher to the Customer for all claims arising in connection with this Agreement whether in contract, tort (including negligence) or breach of statutory duty, misrepresentation or otherwise shall be limited to the amount (value) of the agreement and never more than € 500,000.00 (five hundred thousand Euros).

9.4 Catcher shall have no liability towards any End Customer.

10 Term, Termination, Modification and Suspension

10.1 This Agreement will begin on the Effective Date and continue for the Term, unless terminated in accordance with these terms.

10.2 At the end of the relevant Term the Order will be automatically renewed for successive periods equivalent to the Term (each a “Renewal Period“), unless either party notifies the other party of termination, before the end of the Term or any Renewal Period, in which case this Order shall terminate upon the expiry of the applicable Term or Renewal Period. The Customer will not be entitled to any refund or credit for any portion of the Fee for any unused part of the Term already paid for. In the event the method of Customer is by payment card, Customer authorizes Catcher24 to automatically take further payment on renewal of the Term, until Customer requests differently.

10.3 Within the relevant Term, each modification or change will be subject to a notice period of one (1) month. This includes the removal of a target. A replacement target can first be activated after the removal term of one (1) month of the deleted target.

10.4 Either Party may terminate this Agreement if the other party commits a material breach of this Agreement that is capable of remedy and which the party in breach has not remedied within 30 days of a receipt of a written notice identifying the breach.

10.5 Catcher may terminate this Agreement immediately and/or suspend the Service without notice if the Fee has not been received by the due date or if the provision of the Service is found to be unlawful in the jurisdiction or territory in which it is used.

10.6 In the event of any termination of this Agreement by Catcher under clause 10.3 or 10.4, Catcher will not refund nor shall credit, and the Customer will not be entitled to any refund or credit for, any portion of the Fee for any unused part of the Term.

10.7 Upon termination of this Agreement for any reason whatsoever:

(a) the relationship of the Parties shall cease and all rights granted under this Agreement to access and use the Service shall cease immediately;

(b) any provision which is expressly or by implication intended to come into force or remain in force on or after termination will continue in full force and effect.

10.7 The termination of this Agreement shall be without prejudice to the rights and remedies of either Party which may have accrued up to the date of termination.

10.8 Catcher24 reserves the right to terminate its agreement with a Reselle if the Reseller breaches the terms of this Agreement. Such termination may result in the cessation of Services to the End Customer.

11 Force Majeure

11.1 A Party will not be in breach of this Agreement nor liable for any failure or delay in performance of any obligations (except for those in relation to payment) under this Agreement, and the date for performance of the obligations affected will be extended accordingly, as a result of Force Majeure, provided that such Party shall:

(a) promptly notify the other Party in writing of the matters constituting the Force Majeure and shall keep that Party fully informed of their continuance and of any relevant change of circumstances whilst such Force Majeure continues; and

(b) take all reasonable steps available to it to minimize its effects on the performance of its obligations under this Agreement.

11.2 If Force Majeure continues for longer than 30 days’ either Party may, whilst the Force Majeure continues, immediately terminate this Agreement by notice in writing to the other.

12 Parties

12.1 The Customer may not assign, transfer, charge or otherwise dispose of all or any of its rights and responsibilities under this Agreement.

12.2 A person who is not a Party to this Agreement has no rights to enforce any provision of this Agreement.

12.3 Neither Party may pledge the credit of the other Party nor represent itself as being the other Party nor an agent, partner, employee or representative of the other Party and neither Party may hold itself out as such nor as having any power or authority to incur any obligation of any nature, express or implied, on behalf of the other.

12.4 Nothing in this Agreement, and no action taken by the Parties pursuant to this Agreement creates, or is deemed to create, a partnership or joint venture or relationship of employer and employee or principal and agent between the Parties.

13 Construction

13.1 Entire Agreement

(a) This Agreement contains the entire agreement between the Parties in relation to its subject matter and supersedes any prior arrangement, understanding written or oral agreements between the Parties in relation to such subject matter.

(b) The Parties acknowledge that this Agreement has not been entered into wholly or partly in reliance on, nor has either Party been given, any warranty, statement, promise or representation by the other or on its behalf other than as expressly set out in this Agreement.

(c) Each Party agrees that the only rights and remedies available to it arising out of or in connection with any warranties, statements, promises or representations will be for breach of contract and irrevocably and unconditionally waives any right it may have to any claim, rights or remedies including any right to rescind this Agreement which it might otherwise have had in relation to them.

(d) All warranties, conditions, terms and representations not set out in this Agreement whether implied by statute or otherwise are excluded to the extent permitted by law.

(e) Nothing in this clause will exclude any liability in respect of misrepresentations made fraudulently.

13.2 Severability of provisions

(a) If at any time any part of this Agreement is held to be or becomes void or otherwise unenforceable for any reason under any applicable law, the same shall be deemed omitted from this Agreement and the validity and/or enforceability of the remaining provisions of this Agreement shall not in any way be affected or impaired as a result of that omission.

(b) If any void or unenforceable part of this Agreement would be valid and enforceable if some part of it were deleted, the part shall apply with the minimum modification necessary to make it valid and enforceable.

13.3 Waiver. The rights and remedies of either Party in respect of this Agreement shall not be diminished, waived or extinguished by the granting of any indulgence, forbearance or extension of time granted by that Party to the other nor by any failure of, or delay in ascertaining or exercising any such rights or remedies. Any waiver of any breach of this Agreement shall be in writing. The waiver by either Party of any breach of this Agreement shall not prevent the subsequent enforcement of that provision and shall not be deemed to be a waiver of any subsequent breach of that or any other provision.

14 Contract Administration

14.1 Variation. No purported alteration or variation of this Agreement shall be effective unless it is in writing, refers specifically to this Agreement, and is signed or otherwise expressly agreed to by each of the Parties to this Agreement.

14.2 Language. This Agreement is entered into in the English language. All amendments or correspondence concerning or relating to this Agreement and all notices given and all documentation to be delivered by either Party to the other under this Agreement shall be written in English or Dutch. If there is any conflict in meaning between the English language version and any version or translation of this Agreement in any other language the English version shall prevail.

14.3 Notices

(a) Any notices sent under this Agreement must be in writing, sent and delivered by email to [email protected].

(b) Notices shall be served to the addresses set out above or to such other email address and/or address as the relevant Party may give notice to the other Party for the purpose of service of notices under this Agreement. The deemed time of delivery of notice by email shall be 9:00 am CET on the first Business Day after sending and proof of service of email despatched in a legible and complete form to the correct email address without any error message.

14.4 Complaints. Formal complaints relating to the Service must be delivered either by email to [email protected], or via the in-app customer support options.

15 Governing Law and Jurisdiction

15.1 These Terms as well as all agrrements shall be governed by and construed in accordance with the laws of the Netherlands.

15.2 Any dispute arising out of or in connection with these Terms shall be submitted to the exclusive jurisdiction of the courts of Amsterdam, Netherlands.

16 Publicity

Catcher shall be entitled to describe the Customer as a customer of this Service and include its name on marketing and promotional materials. In addition and on reasonable notice the Customer shall act as a referee for Catcher in respect of prospective customers of Catcher for the Service.

17 Miscellaneous

17.1 These Terms constitute the entire agreement between the parties with respect to the subject matter hereof and supersede all prior agreements and understandings, whether written or oral.

17.2 In the event of any inconsistencies between this Agreement and any agreement with a Reseller, the terms of this Agreement shall prevail with respect to the rights and obligations of Catcher24.

17.3 Catcher24 may update or modify these Terms from time to time, and such updates or modifications shall be effective upon posting on our website or notifying the Client.

18 Version

Version ID 2503.0116 (date: March 18, 2025)