Master Subscription & Enterprise User Agreement

1.0 Scope, Platform Architecture, and Non-Advisory Status

1.1 Deterministic Computational Tool: Nex-Trace Global, Inc. ("Nex-Trace", "Company", "we", or "us") provides a deterministic corporate graph traversal engine, screening coprocessor, and export compliance verification platform (the "Platform"). The Platform executes recursive network walks using Python NetworkX libraries, aggregates public screening list dumps from the International Trade Administration Consolidated Screening List ("ITA CSL"), and applies statutory algebraic formulations pursuant to the Department of the Treasury Office of Foreign Assets Control ("OFAC") 50% Rule and Department of Commerce Bureau of Industry and Security ("BIS") Affiliates Rule.

1.2 No Legal Advice or Official Agency Determination: Nex-Trace is an independent software provider. The Platform, its outputs, API responses, risk tier classifications (CLEARED, MANUAL_REVIEW, CONSTRUCTIVELY_BLOCKED, DIRECT_MATCH_DENIED), and Safe Harbor PDF certificates do NOT constitute legal counsel, an irrevocable export authorization, or an official advisory opinion from OFAC, BIS, DDTC, or any other federal authority. Customer acknowledges that regulatory compliance under U.S. and foreign export control regimes remains Customer's non-delegable duty.

2.0 Statutory Export Control Liability Allocation

2.1 Strict Liability Regimes: Export violations under the International Emergency Economic Powers Act ("IEEPA", 50 U.S.C. § 1705), the Export Control Reform Act ("ECRA", 50 U.S.C. § 4801 et seq.), and the Arms Export Control Act ("AECA", 22 U.S.C. § 2778) are strict liability offenses. Civil penalties exceed $356,579 per transaction (or twice the value of the transaction) without regard to intent.

2.2 Principal Party in Interest Warranty: Customer represents and warrants that as the U.S. Principal Party in Interest ("USPPI") or Foreign Principal Party in Interest ("FPPI") pursuant to 15 CFR § 758.1, Customer maintains an affirmative, independent Internal Compliance Program ("ICP"). Customer shall not rely exclusively on the Platform to authorize the physical export, intangible transmission, or re-export of dual-use commodities, software, technology, or defense articles without performing human verification of anomalous red flags.

2.3 Red Flag Deconfliction Duty: If the Platform assigns a MANUAL_REVIEW risk tier indicating minority blocked equity (10.0% to 49.9%), address co-location, or high-risk diversion routing, Customer covenants to freeze the transaction until its designated Export Compliance Officer ("ECO") executes an affirmative end-use/end-user deconfliction check.

3.0 Industry-Specific Covenants & Operational Restraints

Customer explicitly covenants to adhere to the specialized statutory covenants applicable to each industry vertical in which Customer operates:

4.0 Prohibition on Classified & ITAR Technical Data

4.1 Unclassified System Architecture: The Platform operates on commercial cloud multi-tenant infrastructure designed solely for public and commercial compliance screening.

5.0 EAR § 762 Safe Harbor, Digital Signatures, & VSD Procedures

5.1 Cryptographic Seal Integrity: Every completed audit generates a canonical payload hashed via SHA-256 and sealed with Nex-Trace's cryptographic signature. Customer may submit this certificate to demonstrate good-faith pre-transaction screening under 15 CFR § 762.2 (Recordkeeping). Any modification or hex-alteration of the PDF document renders the signature invalid and voids all safe harbor defense warranties.

5.2 Voluntary Self-Disclosure ("VSD") Cooperation: In the event that a previously cleared entity is subsequently designated by OFAC or BIS, Customer is entitled to access historical point-in-time audit snapshots to support a mitigating VSD submission under 15 CFR § 764.5 and the Department of Justice Export Control Enforcement Policy.

6.0 ERP Webhook Gating & Service Level Warranties

6.1 Sub-100ms ERP Pre-Check SLA: Nex-Trace targets a 99.9% uptime availability for the /api/v1/webhooks/erp-pre-check order-gating endpoint. However, Customer is required to implement fail-safe circuit breaker logic in its ERP (SAP, NetSuite, Epicor): in the event of an unreachable API response, Customer's ERP MUST default to HOLD_ORDER_FOR_REVIEW rather than automatic release. Nex-Trace disclaims any liability for shipments released during a network outage where Customer configured a "fail-open" state.

7.0 Limitation of Liability & Exclusion of Statutory Penalties

8.0 Indemnification by Customer

Customer shall defend, indemnify, and hold harmless Nex-Trace, its affiliates, and its licensors from and against all claims, regulatory investigations, administrative penalties, enforcement actions, damages, and legal fees arising out of or resulting from: (a) Customer's export, re-export, or transfer of commodities in violation of U.S. or international trade controls; (b) Customer's failure to maintain independent screening procedures; (c) Customer's submission of classified or ITAR-controlled technical data to the Platform; or (d) unauthorized alterations to cryptographic audit certificates.

9.0 Governing Law, Mandatory Arbitration, & Class Action Waiver

9.1 Governing Law: This Agreement is governed by the laws of the State of Delaware and the federal laws of the United States, without regard to conflicts of law principles.

9.2 Binding Commercial Arbitration: Any dispute, controversy, or claim arising under or relating to this Agreement shall be resolved exclusively through confidential binding arbitration administered by the American Arbitration Association ("AAA") under its Commercial Arbitration Rules, before a single arbitrator with at least ten (10) years of experience in U.S. export control regulation. The seat of arbitration shall be Wilmington, Delaware.

9.3 Class Action Waiver: CUSTOMER AND NEXTRACE AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.