Terms and Conditions for Entry to the Vulnerability Verification Program The Vulnerability Verification Program (hereinafter referred to as the “Program”) is provided by Cybozu, Inc. (hereinafter referred to as “Cybozu”). Participants in the Program (hereinafter referred to as the “Participant”) are required to agree to the following terms and conditions: (hereinafter referred to as the “Terms”) Article 1 Purpose The purpose of the Program is to [1] make use of the vulnerability information provided by Cybozu (hereinafter referred to as the “Vulnerability Information”) external experts to improve the quality of products and services of Cybozu, [2] expand the recognition of products and services of Cybozu and build and maintain amicable relationships with external experts and [3] increase the confidence of the customers for the Cybozu products by verifying vulnerabilities before the products and services of Cybozu, are released. 1 Article 2 Overview Cybozu provides a Participant with an environment to verify vulnerabilities so that a Participant reports vulnerabilities when they are discovered. Article 3 Period A Verification Environment is provided from February 2014 to the time designated by Cybozu. Cybozu may stop providing the Verification Environment at any time by giving notice on the website within three (3) months before. Article 4 Subjects Subjects to be verified are all services provided by cybozu.com. For details of the subjects, see the following website: http://cybozu.co.jp/securityprogram.html Article 5 Eligibility for Participation 1. Anyone who can communicate in Japanese or English is eligible for participation. 2. Legal entity (including, but not limited to, a corporation) must apply through the designated application form including their legal entity name. 2 Employees of Cybozu and affiliated companies of Cybozu are prohibited to participate in the Program. Article 6 Application A Participant must submit an application by the designated application form by Cybozu. If a Participant agrees to the Terms, Cybozu shall provide the Participant with the Verification Environment. If the number of Participants is significantly greater than expected, a Participant shall confirm that Cybozu may not be able to provide the Verification Environment due to insufficient resources. Article 7 Use 1. Cybozu will continue to provide a Participant who conducted verification during the Period with the Verification Environment. Cybozu may discontinue providing a verification environment to a Participant whose access count has not reached a certain number. Cybozu deems that the Participant is doing nothing for the verification. 2. Participant must confirm that the Verification Environment with which a Participant is provided by 3 Cybozu may change due to some reasons such as the regular maintenance for stable operation of services. 3. A Participant must use the following vulnerability form (https://www.cybozu.com/jp/support/security.html) to report the vulnerabilities. 4. If any of the following events occurred, Cybozu may suspend providing a Participant with a verification environment: (1)Unavoidable reasons such as Cybozu conducts maintenance of the Verification Environment and any other systems required for providing the Verification Environment and maintenance and construction of telecommunications equipment or if any failures occurred thereto. (2)If Cybozu determines on the discretion of Cybozu it difficult to provide a Participant with a stable verification environment as a result that significant load and failure are imposed on the Verification Environment provided by Cybozu. (3)If Cybozu recognizes that a Participant including third parties may suffer significant damages due to a 4 verification environment. (4)If provision of telecommunications service by telecommunications service providers or telecommunications suppliers in Japan and overseas, power supply services by power suppliers and any other public services are suspended and it becomes difficult to provide the Verification Environment. (5)If any emergency conditions occurred or they might occur due to earthquake, tsunami, typhoon, lightning or any other natural disasters, war, civil disturbance, enactment, amendment or repeal of laws and any other force majeure event. (6)Otherwise, Cybozu determines on the discretion of Cybozu it is necessary to suspend providing a Verification Environment or make emergency stop. 5. Inquiries for the Program must be sent to the e-mail address provided on the website. No telephone or fax inquiries will be accepted. Article 8 Prohibitions Cybozu prohibits a Participant from committing any act of disturbing operation of the Program, accessing data not owned by a Participant or any other act in breach of the 5 purposes of Article 1 and the overview of Article 2 hereof (acts of use of services provided at cybozu.com by Cybozu for any purpose other than verification in the Terms) and acts in breach of the following Article. Article 9 Treatment of Confidential Information 1. A Participant must treat the Vulnerability Information as confidential information (hereinafter referred to as the “Confidential Information”) not only during implementation of the Program but also after termination of the Program and must not disclose, divulge or publish the Vulnerability Information to any third party until Cybozu publishes the Vulnerability Information. 2. A Participant must treat the domain information and the password for the environment provided by Cybozu as confidential and must not disclose, divulge, publish or lend to any third party not only during implementation of the Program but also after termination of the Program. 3. A Participant may publish to third parties, including posting on SNS, only the fact of participation in the Program and impressions, during participation; except 6 for the Confidential Information specified in the preceding two paragraphs, which must not be disclosed to any third party. Article 10 DISCLAIMER 1. A PARTICIPANT SHALL PARTICIPATE IN THE PROGRAM AT ITS OWN RESPONSIBILITY AND CYBOZU SHALL NOT BE LIABLE ANY DAMAGES INCURRED BY A PARTICIPANT DUE TO PARTICIPATION IN THE PROGRAM. 2. CYBOZU SHALL NOT BE INVOLVED IN ANY DISPUTES AMONG PARTICIPANTS OR WITH A THIRD PARTY CONCERNING THE PROGRAM, AND A PARTICIPANT SHALL RESOLVE THE DISPUTE, INCLUDING, BUT NOT LIMITED TO, THE DAMAGES INCURRED BY THIRD PARTIES CAUSED BY THE BREACH OF THE PRECEDING ARTICLE BY CYBOZU, AT THE RESPONSIBILITY AND EXPENSE OF THE PARTICIPANT. Article 11 Treatment of Personal Information Cybozu may use personal information on a Participant for implementation, management and operation of the Program. If Cybozu determines it necessary on the discretion of Cybozu(including, but not limited to the cases where Cybozu is requested by law, it becomes necessary for 7 Cybozu to carry out legal procedures and Cybozu shall protect the rights of Cybozu and a Participant or third parties) , Cybozu may disclose to a third party the personal information on a Participant. For any other matters, the privacy policy of Cybozu may be referred to. ▼Privacy Policy: http://cybozu.co.jp/company/copyright/privacy_policy.html Article 12 Amendment of the Terms 1. Cybozu may amend the Terms without prior notice to a Participant. 2. If the Terms are amended, Cybozu shall give notice to a Participant of the content of amendment. If a Participant continues to participate in the Program after the amendment, the Participant shall be deemed to have agreed to the Terms after amendment; provided, however, that Cybozu may omit such notice to a Participant if Cybozu determines on the discretion of Cybozu the content of amendment is minor and would not give adverse effect to the Participant, including correction of wording. Article 13 Governing Law and Court Jurisdiction 8 The Terms shall be governed by the laws of Japan, except for application of the principle of conflicts of laws. If any dispute arises over the Terms, Tokyo Summary Court and Tokyo District Court shall be the court of exclusive jurisdiction for the first instance according to the amount in controversy. 9
© Copyright 2024