Enterprise Terms of Service & SLA Agreement.

1. Agreement, Parties & Definitions

This Master Subscription Agreement (“Agreement”) is entered into by and between KATIRTEK TRIA PRIVATE LIMITED(“KatirTek Tria”, “we”, “our”, or “us”) and the company, organization, or legal entity creating an account or subscribing to services (“Customer”, “you”, or “your”).

By enrolling endpoint devices, initiating an organization account, or accessing the Tria Pulse cloud console, you acknowledge that you have read, understood, and agree to be legally bound by this Agreement. If you are agreeing on behalf of a company, you represent and warrant that you possess full corporate authority to bind said entity.

• “Endpoint Daemon”: The lightweight native background client application installed on authorized company or BYOD workstations.
• “Telemetry Data”: Operational metadata including shift duration, active/idle intervals, foreground application names, network status, and USB hardware events captured during active shifts.
• “Customer Tenant”: The cryptographically isolated database partition and organizational workspace provisioned exclusively for Customer.

2. License Grant, SaaS Access & Fleet Deployment

Subject to the terms and timely payment of subscription fees, KatirTek Tria grants Customer a non-exclusive, non-transferable, worldwide, revocable license during the subscription term to:

• Install and run the Tria Pulse native desktop agent across Customer's authorized endpoint fleets up to the purchased seat quota.
• Access and utilize the administrative cloud console for workforce telemetry analysis, shift auditing, and hardware security monitoring.
• Grant authorized administrators, team managers, and employees access to their respective role-based dashboards.

3. Ethical Boundary, Zero-Spyware Policy & Acceptable Use

Tria Pulse is engineered strictly for ethical operational intelligence and hardware security. Customer agrees to utilize the platform in full alignment with this ethical standard:

Customer further agrees that Customer shall NOT:

• Deploy the Endpoint Daemon without providing appropriate disclosure notices to employees in accordance with applicable labor laws.
• Reverse engineer, disassemble, decompile, or copy the proprietary algorithms of the platform or desktop daemon.
• Bypass, disable, or tamper with the multi-tenant security architecture or perform unauthorized penetration testing without advance written authorization.
• Use the platform to store, transmit, or process unlawful, defamatory, or infringing material.

4. Endpoint Responsibilities & Hardware Security (USB DLP)

Customer is responsible for managing its device fleet, operating system compatibility (Windows, macOS, Linux), and maintaining active network connectivity to the Tria Pulse ingestion endpoints.

The Endpoint Daemon includes hardware-level event listeners for USB mass storage devices to assist in Data Loss Prevention (DLP). Customer acknowledges that hardware event monitoring operates solely as an audit log and does not guarantee physical prevention of data transfers unless combined with operating system device policies.

5. High-Availability Service Level Agreement (SLA)

We commit to maintaining a Monthly Ingestion Uptime of at least 99.99% for all primary telemetry ingestion clusters and dashboard APIs, excluding scheduled maintenance announced at least 48 hours in advance.

Service credits are non-refundable, cannot be redeemed for cash, and are applied against Customer's subsequent subscription billing invoices upon written claim submitted within thirty (30) days of the incident.

6. 100% Customer Data Ownership & Non-Sale Pledge

As between KatirTek Tria and Customer, Customer owns all rights, title, and interest in and to all Customer Telemetry Data, shift logs, employee metadata, and reports generated from the platform.

KatirTek Tria warrants and represents that:

• We will never sell, lease, rent, or trade Customer Data to third-party advertisers, data brokers, or external entities.
• We process Customer Data solely as a data processor on Customer's instructions to provide and support the SaaS platform.
• Upon written request or subscription termination, Customer Data can be completely exported or permanently purged from our storage clusters.

7. Multi-Tenant Infrastructure & Cryptographic Safeguards

KatirTek Tria maintains rigorous administrative, physical, and technical safeguards designed to preserve the integrity and security of Customer Data:

• Encryption in Transit: TLS 1.3 encryption with high-grade ciphers across all daemon and web API traffic.
• Encryption at Rest: AES-256 database encryption with tenant-partitioned data storage.
• Strict Role-Based Access Control (RBAC): Access to production clusters is restricted to authorized personnel via hardware MFA and just-in-time privilege escalation.
• Continuous Vulnerability Auditing: Regular automated security scanning, dependency checking, and audit logging of administrative queries.

8. Subscription Billing, Quotas & Taxes

Subscriptions are billed in advance on recurring monthly or annual billing cycles in Indian Rupees (INR ₹) or US Dollars (USD $).

• Seat Allocations: Subscriptions are priced based on enrolled employee workstation seats. Adding seats mid-cycle triggers prorated charges for the remaining days of the current period.
• Payment Terms: Invoices are due upon issuance via approved credit card, UPI, wire transfer, or Net Banking. Overdue amounts are subject to a late charge of 1.5% per month or the maximum rate permitted by law.
• Taxes: All listed subscription fees are exclusive of applicable goods and services taxes (GST), value-added taxes (VAT), or sales taxes, which will be billed as separate line items in accordance with local regulations.

9. Term, Suspension & Termination

This Agreement commences on the date Customer creates an account and continues until all subscriptions hereunder have expired or been terminated.

• Termination for Convenience: Customer may cancel auto-renewal at any time via the admin console; access remains active through the end of the prepaid billing cycle.
• Termination for Cause: Either party may terminate this Agreement upon thirty (30) days written notice if the other party materially breaches any provision and fails to cure such breach within the notice window.
• Suspension:KatirTek Tria reserves the right to suspend endpoint daemon ingestion immediately if Customer's account is past due or if an active security compromise threatens cluster stability.
• Data Purge on Termination: Following thirty (30) days of account termination, Customer Tenant partitions and encryption keys are scheduled for permanent cryptographic deletion.

10. Confidentiality & Security Breach Notification

Each party agrees to safeguard the Confidential Information of the other party with the same degree of care it uses for its own sensitive information (and not less than reasonable care).

In the event of a confirmed security incident affecting Customer Telemetry Data, KatirTek Tria will notify Customer without unreasonable delay (and within forty-eight (48) hours of confirmation) and provide reasonable assistance in mitigating adverse impacts.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

• NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF BUSINESS REPUTATION, OR LOSS OF DATA.
• EXCEPT FOR BREACHES OF CONFIDENTIALITY OR WILLFUL MISCONDUCT, EACH PARTY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT SHALL NOT EXCEED THE TOTAL FEES ACTUALLY PAID BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

12. Mutual Indemnification

KatirTek Tria Indemnity: KatirTek Tria shall defend and hold harmless Customer against third-party claims alleging that the Tria Pulse software infringes any registered intellectual property right, provided Customer provides prompt written notice and cooperation.

Customer Indemnity:Customer shall defend and hold harmless KatirTek Tria against third-party claims arising from Customer's failure to provide mandatory labor privacy notices to monitored employees or use of the platform in violation of acceptable use terms.

13. Governing Law, Arbitration & Jurisdiction

This Agreement shall be governed by and construed in accordance with the laws of India, without regard to conflict of law principles. Any dispute or controversy arising out of this Agreement shall be referred to and finally settled by binding arbitration in accordance with the Indian Arbitration and Conciliation Act, 1996. The seat of arbitration shall be Tamil Nadu, India, and proceedings shall be conducted in English.

14. Corporate Contact & Legal Notices

For all official contractual notices, custom enterprise Master Service Agreements, compliance inquiries, or billing questions, contact: