Terms
and
Conditions
for
Entry
to
the
Vulnerability
Verification Program
The Vulnerability Verification Program (hereinafter
referred to as the “Program”) is provided by Cybozu, Inc.
(hereinafter referred to as “Cybozu”).
Participants in the Program (hereinafter referred to as
the “Participant”) are required to agree to the following
terms and conditions: (hereinafter referred to as the
“Terms”)
Article 1 Purpose
The purpose of the Program is to [1] make use of the
vulnerability information provided by Cybozu (hereinafter
referred to as the “Vulnerability Information”)
external
experts to improve the quality of products and services of
Cybozu, [2] expand the recognition of products and
services of Cybozu and build and maintain
amicable
relationships with external experts and [3] increase the
confidence of the customers for the Cybozu products by
verifying
vulnerabilities before the products and
services of Cybozu, are released.
1
Article 2 Overview
Cybozu provides a Participant with an environment to
verify vulnerabilities so that a Participant reports
vulnerabilities when they are discovered.
Article 3 Period
A Verification Environment is provided from February 2014
to the time designated by Cybozu. Cybozu may stop
providing the Verification Environment at any time by
giving notice on the website within three (3) months
before.
Article 4 Subjects
Subjects to be verified are all services provided by
cybozu.com. For details of the subjects, see the following
website: http://cybozu.co.jp/securityprogram.html
Article 5 Eligibility for Participation
1. Anyone who can communicate in Japanese or English is
eligible for participation.
2. Legal entity (including, but not limited to, a
corporation) must apply through the designated
application form including their legal entity name.
2
Employees of Cybozu and affiliated companies of Cybozu
are prohibited to participate in the Program.
Article 6 Application
A Participant must submit an application by the designated
application form by Cybozu. If a Participant agrees to the
Terms, Cybozu shall provide the Participant with the
Verification Environment. If the number of Participants is
significantly greater than expected, a Participant shall
confirm that Cybozu may not be able to provide the
Verification Environment due to insufficient resources.
Article 7 Use
1. Cybozu will continue to provide a Participant who
conducted verification during the Period with the
Verification Environment. Cybozu may discontinue
providing a verification environment to a Participant
whose access count has not reached a certain number.
Cybozu deems that the Participant is doing nothing for
the verification.
2. Participant must confirm that the Verification
Environment with which a Participant is provided by
3
Cybozu may change due to some reasons such as the
regular maintenance for stable operation of services.
3. A Participant must use the following vulnerability form
(https://www.cybozu.com/jp/support/security.html) to
report the vulnerabilities.
4. If any of the following events occurred, Cybozu may
suspend providing a Participant with a verification
environment:
(1)Unavoidable reasons such as Cybozu conducts
maintenance of the Verification Environment and any
other systems required for providing the Verification
Environment and maintenance and construction of
telecommunications equipment or if any failures
occurred thereto.
(2)If Cybozu determines on the discretion of Cybozu it
difficult to provide a Participant with a stable
verification environment as a result that significant
load and failure are imposed on the Verification
Environment provided by Cybozu.
(3)If Cybozu recognizes that a Participant including
third parties may suffer significant damages due to a
4
verification environment.
(4)If provision of telecommunications service by
telecommunications service providers or
telecommunications suppliers in Japan and overseas,
power supply services by power suppliers and any
other public services are suspended and it becomes
difficult to provide the Verification Environment.
(5)If any emergency conditions occurred or they might
occur due to earthquake, tsunami, typhoon, lightning
or any other natural disasters, war, civil
disturbance, enactment, amendment or repeal of laws
and any other force majeure event.
(6)Otherwise, Cybozu determines on the discretion of
Cybozu it is necessary to suspend providing a
Verification Environment or make emergency stop.
5. Inquiries for the Program must be sent to the e-mail
address provided on the website. No telephone or fax
inquiries will be accepted.
Article 8 Prohibitions
Cybozu prohibits a Participant from committing any act of
disturbing operation of the Program, accessing data not
owned by a Participant or any other act in breach of the
5
purposes of Article 1 and the overview of Article 2 hereof
(acts of use of services provided at cybozu.com by Cybozu
for any purpose other than verification in the Terms) and
acts in breach of the following Article.
Article 9 Treatment of Confidential Information
1. A Participant must treat the Vulnerability Information
as confidential information (hereinafter referred to as
the “Confidential Information”) not only during
implementation of the Program but also after
termination of the Program and must not disclose,
divulge or publish the Vulnerability Information to any
third party until Cybozu publishes the Vulnerability
Information.
2. A Participant must treat the domain information and the
password for the environment provided by Cybozu as
confidential and must not disclose, divulge, publish or
lend to any third party not only during implementation
of the Program but also after termination of the
Program.
3. A Participant may publish to third parties, including
posting on SNS, only the fact of participation in the
Program and impressions, during participation; except
6
for the Confidential Information specified in the
preceding two paragraphs, which must not be disclosed
to any third party.
Article 10 DISCLAIMER
1. A PARTICIPANT SHALL PARTICIPATE IN THE PROGRAM AT ITS
OWN RESPONSIBILITY AND CYBOZU SHALL NOT BE LIABLE ANY
DAMAGES INCURRED BY A PARTICIPANT DUE TO PARTICIPATION
IN THE PROGRAM.
2. CYBOZU SHALL NOT BE INVOLVED IN ANY DISPUTES AMONG
PARTICIPANTS OR WITH A THIRD PARTY CONCERNING THE
PROGRAM, AND A PARTICIPANT SHALL RESOLVE THE DISPUTE,
INCLUDING, BUT NOT LIMITED TO, THE DAMAGES INCURRED BY
THIRD PARTIES CAUSED BY THE BREACH OF THE PRECEDING
ARTICLE BY CYBOZU, AT THE RESPONSIBILITY AND EXPENSE OF
THE PARTICIPANT.
Article 11 Treatment of Personal Information
Cybozu may use personal information on a Participant for
implementation, management and operation of the Program.
If Cybozu determines it necessary on the discretion of
Cybozu(including, but not limited to the cases where
Cybozu is requested by law, it becomes necessary for
7
Cybozu to carry out legal procedures and Cybozu shall
protect the rights of Cybozu and a Participant or third
parties) , Cybozu may disclose to a third party the
personal information on a Participant. For any other
matters, the privacy policy of Cybozu may be referred to.
▼Privacy Policy:
http://cybozu.co.jp/company/copyright/privacy_policy.html
Article 12 Amendment of the Terms
1. Cybozu may amend the Terms without prior notice to a
Participant.
2. If the Terms are amended, Cybozu shall give notice to a
Participant of the content of amendment. If a
Participant continues to participate in the Program
after the amendment, the Participant shall be deemed to
have agreed to the Terms after amendment; provided,
however, that Cybozu may omit such notice to a
Participant if Cybozu determines on the discretion of
Cybozu the content of amendment is minor and would not
give adverse effect to the Participant, including
correction of wording.
Article 13 Governing Law and Court Jurisdiction
8
The Terms shall be governed by the laws of Japan, except
for application of the principle of conflicts of laws. If
any dispute arises over the Terms, Tokyo Summary Court and
Tokyo District Court shall be the court of exclusive
jurisdiction for the first instance according to the
amount in controversy.
9