# CIPHERMAP ENTERPRISE ORDER FORM & MASTER ZERO-EGRESS SOFTWARE LICENSE AGREEMENT (EULA)

**Document Version:** `2026.10-STD` (Standard 2-Page Commercial Schedule + Zero-Egress EULA)  
**Licensor:** Ciphermap Technologies LLC · 1500 N Grant St, #11719, Denver, CO 80203, United States  
**Procurement & Redlines:** `licensing@ciphermap.io` · **Enterprise Sales:** `sales@ciphermap.io`

---

## PAGE 1 — COMMERCIAL ORDER SCHEDULE

### 1. Parties & Order Metadata

| Field | Licensor (Vendor) | Customer (Licensee) |
| :--- | :--- | :--- |
| **Legal Entity Name** | **Ciphermap Technologies LLC** | `________________________________________` |
| **Primary Domain** | `ciphermap.io` | `________________________________________` |
| **Notice / Billing Address** | 1500 N Grant St, #11719, Denver, CO 80203, US | `________________________________________` |
| **Licensing / Technical Contact** | `licensing@ciphermap.io` | `________________________________________` |
| **Accounts Payable / Invoicing** | Remittance issued per invoice / Stripe checkout | `________________________________________` |
| **Release Signing Provenance** | macOS: `Developer ID Application: Ciphermap Technologies LLC (ZLF7244KA7)` (Apple Notarized)<br>Windows: Microsoft Authenticode Signed<br>Integrity: Published `SHA-256` + `Ed25519` `.text` Binary Seal | **Effective Date:** `____________________`<br>**Subscription Term:** Twelve (12) Months<br>**Customer PO # (Optional):** `____________` |

**Payment & Settlement Method (Select One):**  
`[ ]` Corporate Card (Stripe Invoice / Checkout) &nbsp;&nbsp; `[ ]` Net-30 ACH / Domestic Wire (PO / Invoice) &nbsp;&nbsp; `[ ]` Net-30 International Wire

---

### 2. Commercial License Tier Selection (Option A Annual Schedule)

Select the applicable annual subscription tier below. All fees are stated in U.S. Dollars (USD), billed annually in advance, and exclude applicable sales, use, or withholding taxes.

| Select | License Tier & SKU | Annual Fee (USD) | Licensed Scope & Included Technical Capabilities |
| :---: | :--- | :--- | :--- |
| `[ ]` | **Tier A — Standalone Auditor**<br>`SKU: CM-TIER-A-AUDITOR` | **$4,999 / yr** | **1 named auditor seat · 1 repository scope (up to ~250k LOC; unlimited local/offline assessments).** Includes signed CycloneDX 1.6 CBOM, SPDX 2.3 & PQC OpenVEX 0.2.0 exports, composite `Ed25519 + ML-DSA-65` (`.pqc.sig`) artifact signatures, `T0/T1` blame-separated readiness diagnostics, CNSA 2.0 / FIPS 140-3 / OMB M-23-02 / CMMC / PCI-DSS 4.0 / DORA compliance profiles, and Gate 2 AST hash/cipher remediation (`--zero-attestation`) for supported patterns. |
| `[ ]` | **Tier B — Startup Multi-Repo Fleet**<br>`SKU: CM-TIER-B-STARTUP` | **$9,999 / yr**<br>*(or $7,499/yr w/ signed Reference Partner Addendum)* | **Up to 10 active contributing developers · up to 25 repositories (~1M LOC soft band).** Includes all Tier A deliverables plus the complete 12-language Immunity Engine (`ciphermap immunity scan`, 4-gate `immunity extinguish --apply`, unified `ciphermap fix --with-immunity --apply`, signed CycloneDX 1.6 CISA IBOM & Immunity OpenVEX 0.2.0 via `immunity attest`, monotonic `immunity ratchet`), CI/CD pull-request regression gates (`ci-review`), local stdio AI coding agent referee (`ciphermap mcp` + `.cursor/rules` & `CLAUDE.md` policy ratchets), and self-hosted `ciphermap server` CISO Web Console. |
| `[ ]` | **Tier B — Growth Multi-Repo Fleet**<br>`SKU: CM-TIER-B-GROWTH` | **$24,999 / yr**<br>*(or $18,749/yr w/ signed Reference Partner Addendum)* | **Up to 30 active contributing developers · up to 100 repositories (~5M LOC soft band).** Full Tier B Multi-Repo Fleet platform (`immunity scan`, `immunity extinguish --apply`, `fix --with-immunity --apply`, `immunity attest` CISA IBOM + OpenVEX 0.2.0, `immunity ratchet`, `ciphermap mcp` local AI referee, self-hosted `ciphermap server` CISO Web Console, 12-language hybrid `ML-KEM-768 + X25519` sidecar codegen, 3-stage CI policy ratchets, Jira closure, and zero-PII `PRF_seat` contributor verification). |
| `[ ]` | **Tier B — Scale Multi-Repo Fleet**<br>`SKU: CM-TIER-B-SCALE` | **$49,999 / yr**<br>*(or $37,499/yr w/ signed Reference Partner Addendum)* | **Up to 100 active contributing developers · up to 250 repositories (~15M+ LOC soft band).** Full Tier B Multi-Repo Fleet platform across multi-business-unit engineering portfolios with priority solutions engineering onboarding. |
| `[ ]` | **Tier B — Sovereign / Air-Gapped Enclave**<br>`SKU: CM-TIER-B-SOVEREIGN` | **$__________ / yr**<br>*(Per Scoping Exhibit)* | **>100 active contributors, dormant `--legacy-archive` estates, or SCIF / air-gapped enclaves** with offline Last-Known-Good (LKG) rulepacks and RFC 9180 HPKE `ML-KEM-768` policy capsules per attached written scope. |

> **Express 30-Day 100% Fleet Upgrade Credit:** 100% of fees paid for Tier A Standalone Auditor ($4,999) may be credited dollar-for-dollar toward an annual Tier B Multi-Repo Fleet Order executed within thirty (30) calendar days of the Tier A Effective Date.

---

### 3. Order Execution & Order of Precedence

By signing below, each party agrees that this Commercial Order Schedule and the **Master Zero-Egress Software License Terms (EULA)** on Page 2 form the complete, binding agreement governing Customer's license to the CipherMap software and supersede any pre-printed terms on a Customer purchase order or vendor portal click-wrap unless expressly accepted in a countersigned writing.

| **LICENSOR: Ciphermap Technologies LLC** | **CUSTOMER: ____________________________________** |
| :--- | :--- |
| Signature: `____________________________________` | Signature: `____________________________________` |
| Printed Name: `_________________________________` | Printed Name: `_________________________________` |
| Title: `________________________________________` | Title: `________________________________________` |
| Date: `_________________________________________` | Date: `_________________________________________` |

---

## PAGE 2 — MASTER ZERO-EGRESS SOFTWARE LICENSE TERMS (EULA)

### 1. Zero Customer Data Processing & Air-Gap Architecture (DPA Exemption)
CipherMap is delivered as a statically compiled (`CGO_ENABLED=0`) local software binary designed for offline execution (`--offline --no-telemetry`). During normal operation, Licensor receives, accesses, stores, and processes **zero (0) bytes** of Customer source code, object code, cryptographic keys, X.509 certificates, repository file paths, secrets, or personal data. Because Licensor acts strictly as a local/on-premises software licensor and never as a cloud custodian, data processor, or subprocessor of Customer repository or production data, **no SaaS Data Processing Addendum (DPA), Standard Contractual Clauses, or Subprocessor Schedule is required** for software deployment.

### 2. License Grant & Air-Gapped Enclave Rights
Subject to Customer's timely payment of applicable Order Form fees, Licensor grants Customer a worldwide, non-exclusive, non-transferable, non-sublicensable subscription license during the Subscription Term to install and execute the licensed CipherMap binary and rulepacks across Customer's internal developer workstations, self-hosted CI/CD runners, private VPC containers, and air-gapped build enclaves within the seat or active-contributor allowance selected on Page 1. Active contributor counts are verifiable locally via zero-PII `PRF_seat` cryptographic nullifiers without transmitting developer emails or Git history to Licensor. Customer shall not (a) decompile, disassemble, or reverse-engineer the software except to the non-waivable extent permitted by applicable law, (b) tamper with or bypass cryptographic license verification, or (c) redistribute, lease, or host the software as a commercial service bureau for unaffiliated third parties without a separate written partner agreement.

### 3. Binary Provenance & Integrity
Licensor signs official macOS distributions with Apple **`Developer ID Application: Ciphermap Technologies LLC (ZLF7244KA7)`** (Apple-notarized), signs official Windows distributions via **Microsoft Authenticode**, and publishes deterministic `SHA-256` archive digests together with `Ed25519` `.text` binary integrity seals (`ciphermap doctor --offline`) for every production release.

### 4. Deterministic Verification & Customer Merge Authority
CipherMap remediation commands (`ciphermap fix` and `immunity extinguish`) run AST/CFG validation, host compiler builds, and project test suites locally inside network-denied sandboxes using `T0/T1` baseline fault isolation (`PRE_EXISTING_REPO_ERROR` / `MISSING_HOST_DEPENDENCY`), automatically rolling back candidate edits that fail verification or trigger protocol-safety guardrails (`declined_protocol_guardrail`). **Customer retains sole authority and engineering responsibility** for reviewing, testing, approving, merging, and deploying any code changes into Customer branches or production environments. Software outputs, compliance profile mappings, and signed CBOM/IBOM/OpenVEX artifacts provide scoped technical evidence for engineering and audit review and do not constitute legal advice, a regulatory compliance determination, or third-party accreditation.

### 5. Optional Collective Herd Immunity (Strict Opt-In Zero-Code Boundary)
Collective Herd Immunity (`ciphermap herd-immunity`) is **disabled by default**. Even if affirmatively opted into by Customer, any generated receipt contains solely anonymized 12-node AST token shapes and transmits **0 source lines, 0 identifiers or variable names, 0 string literals, 0 file paths, and 0 Customer or repository identity**.

### 6. Proprietary Rights & Confidentiality
As between the parties, Customer retains 100% right, title, and interest in and to its source code, repositories, generated remediation patches, and exported CBOM, IBOM, OpenVEX, and SARIF reports. Licensor retains all right, title, and interest in and to the CipherMap software, detection/remediation engines, rulepacks, documentation, and trademarks. Each party agrees to protect the other party's non-public business, technical, and pricing information designated or reasonably understood as confidential ("Confidential Information") using at least the same degree of care it uses for its own similar information (and no less than reasonable care), and not to disclose such Confidential Information to third parties other than bound employees, advisors, or contractors with a need to know, for **three (3) years** from disclosure (and perpetually for trade secrets).

### 7. Warranties, IP Indemnification & Limitation of Liability
**(a) Performance & No-Egress Warranty.** Licensor warrants during the Subscription Term that the unmodified production software will perform in all material respects in accordance with its published documentation and will contain no malicious code, time bombs, or undocumented network egress ("phone-home") routines. Customer's exclusive remedy for breach of this warranty not cured within thirty (30) days of written notice is termination of the affected Order Form and a pro-rata refund of prepaid, unused fees for the remainder of the Subscription Term. EXCEPT AS EXPRESSLY STATED HEREIN, THE SOFTWARE IS PROVIDED WITHOUT OTHER IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.  
**(b) Intellectual Property Indemnification.** Licensor will defend Customer against any unaffiliated third-party claim, suit, or proceeding alleging that Customer's authorized use of unmodified CipherMap software directly infringes a valid U.S. patent, copyright, or trademark, and will indemnify Customer against final court-awarded damages and Licensor-approved settlement amounts, provided Customer gives prompt written notice, sole control of defense/settlement, and reasonable cooperation.  
**(c) Limitation of Liability.** EXCEPT FOR A PARTY'S BREACH OF SECTION 2 (LICENSE RESTRICTIONS), SECTION 6 (CONFIDENTIALITY), CUSTOMER'S PAYMENT OBLIGATIONS, OR LICENSOR'S INDEMNIFICATION OBLIGATIONS UNDER SECTION 7(b): (i) NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR LOST PROFITS OR REVENUE, EVEN IF ADVISED OF THEIR POSSIBILITY; AND (ii) EACH PARTY'S AGGREGATE CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT SHALL NOT EXCEED **TWELVE (12) MONTHS OF FEES ACTUALLY PAID** BY CUSTOMER UNDER THE APPLICABLE ORDER FORM IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY.

### 8. Term, Non-Auto-Renewing PO Option & Governing Law
Unless otherwise stated on Page 1, the Subscription Term is **twelve (12) months** commencing on the Effective Date. Subscriptions purchased via Purchase Order / Net-30 invoice **do not auto-renew** and renew solely upon execution of a mutual written renewal Order Form (card-billed subscriptions renew only if Customer affirmatively selects recurring card billing at checkout and may be cancelled any time prior to the renewal date). Either party may terminate this Agreement for material breach not cured within thirty (30) days after written notice. Upon expiration or termination, Customer's right to execute licensed Tier A/Tier B commands ceases, while all previously exported Customer CBOM, IBOM, OpenVEX, and SARIF reports remain Customer's property perpetually. This Agreement is governed by the laws of the **State of Delaware**, without regard to conflict-of-laws rules, and the parties consent to exclusive jurisdiction and venue in the state and federal courts located in Delaware. Formal legal notices to Licensor shall be sent to `licensing@ciphermap.io` with a copy to Ciphermap Technologies LLC, 1500 N Grant St, #11719, Denver, CO 80203, United States.