Snapshot 882
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Legal & Terms of Service for
Compliance: Businesses
Version 3
Effective Date: 11 October 2024
TERMS OF SERVICE FOR BUSINESSES
You should download a copy of these terms of service for future reference.
THE SERVICES ARE INTENDED TO PROVIDE SUBSCRIBERS AND THEIR AUTHORIZED USERS WITH
CYBERSECURITY UPSKILLING. THE SERVICES ARE HOSTED ON OUR SERVERS AND DO NOT INVOLVE ANY
CONNECTION OR ACCESS BY US TO YOUR SYSTEMS, NETWORKS OR DATABASES. THE ONLY PERSONAL
DATA PROCESSED BY US IN CONNECTION WITH THE SERVICES IS AUTHORIZED USERS’ ACCOUNT
CREDENTIALS PROVIDED BY YOU FOR LOGIN AND ACCOUNT MANAGEMENT PURPOSES.
TOGETHER WITH THE SERVICE ORDER FORM THESE TERMS OF SERVICE CONSTITUTE A BINDING
AGREEMENT BETWEEN US THAT GOVERNS YOUR ACCESS TO, AND USE OF, THE SERVICES. THEY APPLY
WHETHER YOUR SUBSCRIPTION HAS BEEN PURCHASED DIRECTLY FROM US OR INDIRECTLY VIA ONE OF
OUR RESELLERS, DISTRIBUTORS OR OTHER PARTNERS.
TO THE EXTENT PERMITTED BY APPLICABLE LAW, THESE TERMS OF SERVICE APPLY TO THE EXCLUSION OF
ANY OTHER TERMS THAT YOU MAY SEEK TO IMPOSE OR INCORPORATE, OR WHICH ARE IMPLIED BY
LAW, TRADE CUSTOM, PRACTICE OR COURSE OF DEALING.
PRIOR TO ACCESSING AND USING THE SERVICES UNDER THIS AGREEMENT, YOU WILL BE PROMPTED TO
SIGNIFY YOUR ACCEPTANCE OF THESE TERMS OF SERVICE BY SELECTING OR CLICKING “ACCEPT”. BY
ACCEPTING, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD AND AGREE TO BE LEGALLY BOUND
BY THESE TERMS AND, IF YOU ARE ENTERING INTO THIS AGREEMENT ON BEHALF OF A LEGAL ENTITY,
YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY TO THE AGREEMENT, IN WHICH
CASE THE TERM "SUBSCRIBER” SHALL REFER TO SUCH ENTITY.
Box’s Confidential Information to at least the
1 DEFINITIONS same extent as protected by this Agreement.
“Confidential Information” refers to the
Words and expressions used in this Agreement following items one party to this Agreement
shall have the respective meanings set forth in (“Disclosing Party”) discloses to the other
this Section 1. (“Receiving Party”): (a) any document
Disclosing Party marks “Confidential”; (b) any
“Agreement” means together the Service information Disclosing Party orally designates
Order Form, these Terms of Service and any as “Confidential” at the time of disclosure,
Special Terms. provided Disclosing Party confirms such
“Affiliate” means any entity that controls, is designation in writing within five (5) business
controlled by, or is under common control days; (c) any of Disclosing Party proprietary
with a party to this Agreement; in this context, information, technical data, trade secret, or
“control” means ownership, directly or know-how, including without limitation any
indirectly, of a majority of the outstanding research, product plan, patent, copyright,
equity of an entity. trade secret, and other proprietary
information, techniques, processes,
“Authorized Users” means Subscriber’s and its algorithms, software programs, hardware
Affiliates’ employees, consultants, configuration information and software
contractors, and agents: (a) who are source documents and other technology,
authorized by Subscriber to access and use related to the current, future and proposed
the Services under the rights granted to products and services, including without
Subscriber pursuant to this Agreement; (b) for limitation pricing, margins, merchandising
whom access to the Services has been plans and strategies, finances, financial and
purchased hereunder; and (c) with respect to accounting data and information, suppliers,
Authorized Users other than Subscriber’s customers, customer lists and data, personal
employees, who have entered into a written data, purchasing data, sales and marketing
agreement with Subscriber obligating such plans, future business plans and any other
consultant, contractor or agent to protect the information which is proprietary; and (d) any
confidentiality of the Services and Hack The other non-public, sensitive information, which,
with respect to each of the foregoing, as
1
applicable, Recipient should reasonably rights to use, and protect the confidentiality
consider a trade secret or otherwise of, confidential information (including know-
confidential. Without limiting the above, how) and all other intellectual property rights,
Confidential Information includes (a) the in each case whether registered or
Services and (b) the specific terms and pricing unregistered and whether registrable or not,
set forth in this Agreement or in any Service and including all applications and rights to
Order. Confidential Information does not apply for and be granted, renewals or
include information that: (a) was publicly extensions of and rights to claim priority from
known and made generally available in the such rights, and all similar or equivalent rights
public domain prior to the time of disclosure or forms of protection which subsist or will
by the Disclosing Party; (b) becomes publicly subsist now or in the future in any part of the
known and made generally available after world.
disclosure by the Disclosing Party to the
“Initial Term” means the initial subscription
Receiving Party through no action or inaction
term set out in the Service Order Form or, if
of the Receiving Party; (c) is already in the
none, one (1) month (in the case of monthly
possession of the Receiving Party at the time
subscription plans) or twelve (12) months (in
of disclosure by the Disclosing Party as shown
the case of annual subscription plans)
by the Receiving Party’s files and records
commencing on the date the Services are first
immediately prior to the time of disclosure; (d)
made available to the Subscriber.
is obtained by the Receiving Party from a third
party without a breach of such third party’s “Parties” means Hack The Box and Subscriber
obligations of confidentiality; or (e) is and “Party” shall be construed accordingly.
independently developed by the Receiving
“Partner” means, in relation to a subscription
Party without use of or reference to the
for Services that has been purchased by
Disclosing Party’s Confidential Information, as
Subscriber indirectly, the reseller, distributor or
shown by documents and other competent
other partner of Hack The Box through which
evidence in the Receiving Party’s possession.
Subscriber has purchased the subscription.
“Documentation” means any user manuals,
“Renewal Term” has the meaning given in
handbooks, installation guides, training
Section 8.1.
materials, and any other documentation
relating to the Services that may be provided “Service Order Form” means Hack The Box’s
from time to time by Hack The Box. order form or quotation signed or otherwise
accepted by Subscriber or, where applicable,
“Effective Date” means the date Subscriber
Partner (including via purchase order or other
indicates its acceptance of this Agreement.
ordering document submitted to Hack The
“Fees” means the fees payable by Subscriber Box) or order confirmation (in the case of self-
or, where applicable, a Partner to Hack The service purchases), which references the
Box for the Services, as specified in the Service Subscriber, the Services, the number of
Order Form subject to any increase in Authorized Users, the Fees, the Initial Term, and
accordance with Section 4.5. any other applicable terms, or any other
document(s) by which Subscriber or, where
“Hack The Box”, “we” and “our” means: (a)
applicable, Partner orders the Services
Hack The Box, Inc. a Delaware corporation, if
pursuant to this Agreement.
the Subscriber is incorporated or organized in
the USA, Canada, or otherwise in the “Services” means Hack The Box’s software-as-
Americas; or (b) Hack The Box Ltd, a company a-service offering(s) purchased by Subscriber
incorporated in England and Wales with and hosted by Hack The Box, its Affiliates or
registered number 10826193, if Subscriber is service providers and made available to
incorporated or organized in any other Subscriber on a subscription basis at
jurisdiction. www.hackthebox.com (or any subdomains
and/or other web pages designated by Hack
“Intellectual Property Rights” means patents,
The Box), and any other services Hack The Box
rights to inventions, copyrights and related
agrees to provide to Subscriber, in each case
rights, trade marks, business names and
as set out in the Service Order Form.
domain names, rights in get-up, goodwill and
the right to sue for passing off or unfair “SLA” means the Service Level Agreement
competition, rights in designs, database rights, that can be found at Hack The Box
2
https://resources.hackthebox.com/hubfs/Leg this Agreement is a valid and binding
al/SLA.pdf which is incorporated herein by obligation of the Party.
reference and made a part of this
2.2 Sanctions. Subscriber represents and
Agreement.
warrants that (a) neither Subscriber nor any of
“Software” means all software used by Hack its Affiliates or connected persons or
The Box to provide, or otherwise associated Authorized Users is subject to any embargoes
with, the Services. or sanctions or designated on any list of
prohibited and restricted parties administered
“Special Terms” means any other terms that
or enforced by the US Department of
the Parties may agree in writing (including in
Treasury’s Office of Foreign Assets Control, the
the Service Order Form and/or pursuant to
United Nations Security Council, the European
Section 13 (Special Terms)) are incorporated
Union or any of its member states, Her
into this Agreement from time to time.
Majesty’s Treasury in the United Kingdom or
“Subscriber”, “you” and “your” means the any other relevant embargoes or sanctions
person specified in the Service Order Form. (“Sanctions”); (b) neither Subscriber nor any of
its Affiliates or connected persons or
“Subscriber Materials” means all documents,
Authorized Users are located, organized or
information, data (excluding Usage Data)
resident in any country or territory that is the
items and materials in any form, whether
subject of any Sanctions (“Sanctioned State”).
owned by the Subscriber or a third party,
The representations and warranties set out in
which are provided by the Subscriber to Hack
this Section 2.2 will be deemed repeated by
The Box in connection with the Services,
Subscriber on each day during the
including those provided pursuant to section
Subscription Term and Subscriber will promptly
3.7.
notify Hack The Box if becomes subject to any
“Subscription Term” has the meaning given in Sanctions or becomes located, organized or
Section 8.1. resident in any Sanctioned State and Hack The
Box shall have the right to terminate this
“Trial Period” means any period during which
Agreement immediately, without notice and
Hack The Box agrees to permit the Subscriber
without liability to the Subscriber if Hack The
to have access to and use of any of the
Box becomes aware that this is the case.
Services free-of-charge for the purpose of
assessing whether to proceed to a
subscription. 3 THE SERVICES
“Usage Data” means data generated in
connection with Subscriber’s access, use and 3.1 Usage Right. Subject to payment of the
configuration of the Services and data Fees and Subscriber’s compliance with the
derived from it (e.g., interacting with the terms of this Agreement, Hack The Box hereby
Services). grants Subscriber, a limited, non-exclusive,
non-transferable and revocable right to
access and use (and permit Authorized Users
2 REPRESENTATIONS & WARRANTIES to access and use) the Services and the
Documentation during the Subscription Term
2.1 Authority. Each Party represents and solely for its internal business purposes.
warrants that: (a) it is duly organized, validly Notwithstanding the foregoing, if Hack The Box
existing and in good standing under the laws has agreed to provide Subscriber with a Trial
of its jurisdiction of incorporation or Period, Subscriber’s right to access and use
organization; (b) it has obtained all necessary (and permit Authorized Users to access and
approvals, consents, and authorizations to use) the Services and the Documentation will
enter into this Agreement and to perform and be for the limited purpose of assessing whether
carry out its obligations under this Agreement; to proceed to a subscription for the relevant
(c) the person executing this Agreement on Services.
the Party’s behalf has express authority to do
3.2 User Accounts. Each Authorized User
so and to bind the Party; (d) the execution and
must create a user account to access and use
performance of this Agreement will not
the Services. User accounts are personal and
conflict with other agreements to which it is
not shareable. Subscriber shall ensure that all
bound or violate any applicable laws and (e)
Authorized Users keep their account login
3
details secure at all times. Each Authorized on a per Authorized User basis, and the
User will be required to click accept Hack The Services may not be accessed by more than
Box’s User Agreement located at the specified number of Authorized Users; (b)
https://resources.hackthebox.com/hubfs/Leg access for additional Authorized Users may be
al/UA.pdf during the creation of their user purchased during the Subscription Term under
account. Subscriber shall ensure that all an additional Service Order Form at the same
Authorized Users comply with the terms of this pricing but pro-rated for the remainder of the
Agreement and the User Agreement and shall then current Subscription Term; and (c) any
be responsible for any breach of this additional Authorized User subscriptions
Agreement and/or the User Agreement by an purchased shall terminate on the same date
Authorized User. Subscriber shall promptly as the pre-existing Authorized Users
notify Hack The Box about any breach of this subscriptions.
Agreement and/or the User Agreement of
3.6 Support and Service Level Agreement
which it becomes aware and shall use all
(SLA). Hack The Box shall provide the Services,
commercially reasonable efforts to remedy
including the support described in the SLA,
any such breach as soon as reasonably
with reasonable care and skill and in
practicable and prevent any further breaches
accordance with the terms of the SLA. As the
occurring.
Subscriber’s sole and exclusive remedy and
3.3 Unauthorized Access. Subscriber shall Hack The Box's sole liability for breach of this
take reasonable steps to prevent section, Hack The Box shall use commercially
unauthorized access to the Services. reasonable efforts to restore the Services, and
Subscriber shall promptly notify Hack The Box shall provide any applicable service credits, in
about any known or suspected unauthorized accordance with the SLA.
access to and/or use of the Services, or any
3.7 Subscriber’s Obligations. Subscriber
breach of its security and shall use reasonable
shall: (a) provide to Hack The Box in a timely
efforts to stop such unauthorized access or
manner all documents, information, data,
breach.
items and materials in any form (whether
3.4 Right to Suspend Services. Hack The owned by Subscriber or a third party)
Box may suspend access to the Services (in reasonably required by Hack The Box in
whole or in part) for the Subscriber and/or any connection with the Services and ensure that
or all of the Authorized Users if: (a) the Fees are they are accurate and complete in all
not paid on the due date for payment; (b) the material respects: (b) perform any obligations
Subscriber or an Authorized User is in breach of it has agreed to perform (whether in the
this Agreement or the User Agreement; (c) the Service Order Form or otherwise) in a timely
Subscriber or an Authorized User is using the manner; and (c) if any of the Services require
Services in violation of applicable laws; or (d) Hack The Box to visit the Subscriber’s premises,
Hack The Box reasonably believes in good provide for Hack The Box, its agents, sub-
faith that there is a threat or attack on the contractors and employees, in a timely
Services or other event that imminently manner and at no charge, access to the
threatens the security, integrity, or availability Subscriber's premises as reasonably required
of the Services. Hack The Box shall, wherever by Hack The Box and inform Hack The Box of
reasonably practicable, provide prior written all health and safety and security requirements
notice of any Service suspension to Subscriber, that apply at such premises. If Hack The Box’s
and, in the event of a Service suspension performance of its obligations under this
pursuant to (a), (b) or (c), shall work with Agreement is prevented or delayed by any
Subscriber to remedy the violation. Hack The act or omission of the Subscriber, its agents,
Box shall provide updates regarding subcontractors or employees, then, without
resumption of Services following any Service prejudice to any other right or remedy it may
suspension under (d). Subscriber shall not be have, Hack The Box shall be allowed an
entitled to service credits under the SLA in extension of time to perform its obligations
respect of any Service suspension under (a), equal to the delay caused by the Subscriber.
(b) or (c).
3.5 User Subscriptions. Unless otherwise 4 FEES AND PAYMENTS
specified in the applicable Service Order
Form: (a) access to the Services is purchased THIS SECTION ONLY APPLIES IF YOU HAVE
4
PURCHASED YOUR SUBSCRIPTION DIRECTLY 4.6 Increases in Fees. On an annual basis,
FROM HACK THE BOX. IT DOES NOT APPLY IF the Fees shall automatically be increased by
YOU HAVE PURCHASED YOUR SUBSCRIPTION 5% over the Fees payable in respect of the
VIA A RESELLER, DISTRIBUTOR OR OTHER immediately preceding period excluding any
PARTNER OF HACK THE BOX. Discounts (as defined in Section 4.6 below)
that applied in respect of such period. In
4.1 Invoices. Hack The Box shall invoice
addition to the foregoing, Hack The Box shall
Subscriber in respect of the Fees monthly (in
be entitled to increase the Fees in respect of
the case of monthly subscription plans) or
any Renewal Term by giving the Subscriber at
annually (in the case of annual subscription
least 60 days’ advance written notice of the
plans) in advance. Invoices will be addressed
increase.
to the invoicing department of the Subscriber
sent by e-mail in a .pdf format to the email 4.7 Discounts. Any discounts, offers, free
address provided by the Subscriber. trials, complimentary products/ services or
other incentives provided by Hack The Box
4.2 Payment Terms. Subscriber shall pay
(“Discounts”) shall only apply during the period
each invoice within seven (7) days (in the case
(whether the Initial Term or a Renewal Term) in
of monthly subscription plans) or thirty (30)
respect of which they have been expressly
days (in the case of annual subscription plans)
agreed by Hack The Box. No Discounts shall
of the date of the invoice, without any
apply in respect of any subsequent Renewal
deduction or set-off. Unless otherwise agreed
Term unless specifically agreed otherwise in
in writing by the parties, all sums payable
writing by Hack The Box.
under this Agreement will be paid in the
currency stated in the Service Order Form.
Fees are non-refundable except as expressly 5 INTELLECTUAL PROPERTY RIGHTS
stated herein.
4.3 Interest. Without prejudice to any other 5.1 IP Rights. The Subscriber acknowledges
rights and remedies Hack The Box may have, and agrees that Hack The Box and/or its
Subscriber shall pay to Hack The Box interest on licensors own all Intellectual Property Rights in
all overdue amounts at the rate of 1% per and to the Services, the Software and the
month. Such interest shall accrue on a daily Documentation (including all improvements
basis from the due date until the date of thereto). Except for the limited right to access
actual payment and compound monthly. and use the Services and Documentation
Subscriber will reimburse Hack The Box for all granted under this Agreement, the Subscriber
reasonable costs and expenses incurred shall have no rights in or to the Services, the
(including reasonable attorneys’ fees) in Software or the Documentation.
collecting any overdue amounts. 5.2 Restrictions. Except as expressly set out
4.4 Taxes. All Fees and other amounts in this Agreement, Subscriber shall not and
payable by Subscriber under this Agreement shall not authorize any third party to: (a) copy,
are exclusive of taxes and similar assessments. attempt to copy, modify, duplicate,
Without limiting the foregoing, Subscriber is reproduce, create derivative works from,
responsible for all sales, use, and excise taxes, frame, mirror, republish, download, display,
and any other similar taxes, duties, and transmit or distribute all or any portion of the
charges of any kind imposed by any federal, Services, Software or Documentation (as
state, or local governmental or regulatory applicable) in any form or media or by any
authority on any amounts payable by means; (b) attempt to de-compile, reverse
Subscriber hereunder, other than any taxes compile, disassemble, reverse engineer or
imposed on Hack The Box’s income. otherwise reduce to human-perceivable form
all or any part of the Services or Software; (c)
4.5 No Deductions or Setoffs. All amounts access all or any part of the Services, Software
payable to Hack The Box under this or Documentation to build a product or
Agreement shall be paid by Subscriber to service which competes with the Services,
Hack The Box in full without any setoff, Software or Documentation; (d) use the
recoupment, counterclaim, deduction, debit, Services, Software or Documentation to
or withholding for any reason (other than any provide services to third parties; (e) license,
deduction or withholding of tax as may be sell, rent, lease transfer, assign, distribute,
required by applicable Law). display, disclose, or otherwise commercially
5
exploit, or otherwise make the Services, Hack The Box’s confidentiality obligations
Software or Documentation available to any pursuant to Section 10 below.
third party; (f) attempt to obtain or assist third
5.5 Feedback. If Subscriber provides Hack
parties in obtaining access to the Services,
The Box with reports of defects in the Services
Software or Documentation; (g) alter the
or proposes or suggests any changes,
Services or the Documentation in any
modifications, or ideas (collectively
unauthorized way, including without limitation,
“Feedback”), such Feedback shall be free
delete or in any manner alter the copyright,
from any confidentiality restrictions that might
trademark, and other proprietary rights notices
otherwise be imposed upon Hack The Box
and labels appearing on the Services or
pursuant to this Agreement and may be
Documentation as delivered or made
implemented by Hack The Box in its sole
available to Subscriber; (h) use the Services,
discretion. Subscriber acknowledges that any
Software or Documentation to train, evaluate
services or materials incorporating any such
or fine tune algorithms or AI models or (i) use
Feedback shall be the sole and exclusive
the Services, Software or Documentation in a
property of Hack The Box. Subscriber grants
manner that infringes rights of Hack The Box or
Hack The Box a worldwide, irrevocable,
a third party. Subscriber acknowledges and
transferable, perpetual, royalty-free right, and
agrees that only Hack The Box shall have the
license to use and exploit such Feedback
right to maintain, enhance or otherwise modify
including, without limitation, the incorporation
the Services, Software and Documentation.
of such Feedback into Hack The Box’s software
Subscriber agrees to indemnify Hack The Box
and/or services, without any obligation to
from and against any and all claims,
Subscriber.
damages, obligations, losses, liabilities, costs,
debts, and expenses (including but not limited
to attorney’s fees) suffered or incurred by Hack 6 IP INDEMNITY
The Box arising out of or related to any breach
by the Subscriber of this Section 5.2. 6.1 IP Indemnity. Hack The Box shall,
5.3 Subscriber Materials. Hack The Box subject to Sections 6.2 and 6.3, defend
acknowledges that Subscriber and/or its Subscriber against all third-party claims, suits
licensors own all Intellectual Property Rights in and proceedings resulting from the alleged
and to the Subscriber Materials. Except for the violation, misappropriation, or infringement of
limited right to use the Subscriber Materials such third party’s patent, copyright, trademark
granted under this Agreement, Hack The Box or trade secret caused by Subscriber’s use of
shall have no rights in or to the Subscriber the Services (each a “Third Party IP Claim”),
Materials. Subscriber: (a) grants Hack The Box, and shall indemnify Subscriber against any
its Affiliates and sub-contractors a non- amounts awarded against Subscriber in
exclusive, royalty-free, worldwide license to judgement or settlement of a Third Party IP
use the Subscriber Materials for the purpose of Claim, provided that Subscriber: (a) promptly
providing the Services; and (b) warrants that notifies Hack The Box about each Third Party IP
the receipt and use of the Customer Materials Claim; (b) does not make any admission, or
by Hack The Box, its Affiliates and sub- otherwise attempt to compromise of settle any
contractors in accordance with the terms of Third Party IP Claim, and provides Hack The Box
this Agreement shall not infringe the rights, with reasonable cooperation and assistance
including any Intellectual Property Rights, of in the defense and settlement of each Third
any third party. Party IP Claim; and (c) gives Hack The Box sole
authority to defend or settle each Third Party IP
5.4 Usage Data. Hack The Box shall be Claim.
permitted to collect and use the Usage Data
for its reasonable business purposes. In the 6.2 Mitigation. In the event of a Third Party
event Hack The Box wishes to disclose the IP Claim, Hack The Box may: (a) obtain for
Usage Data or any part thereof to third parties Subscriber the right to continue using the
(either during the Subscription Term or Services in the manner contemplated by this
thereafter), such data shall be anonymized Agreement, (b) replace or modify the Services
and/or presented in the aggregate so that it so that they become non-infringing, or (c) if
will not identify Subscriber or its Authorized such remedies are not reasonably available,
Users. The foregoing shall not limit in any way terminate this Agreement by notice in writing
and without liability to Subscriber other than a
6
pro rata reimbursement of prepaid Fees DATA OR OTHERWISE RESULTING FROM THE USE
relating to any unused portion of the OF OR INABILITY TO USE THE SERVICES, UNDER
Subscription Term. Sections 6.1 and 6.2 state ANY LEGAL THEORY WHATSOEVER (INCLUDING
Subscriber’s sole and exclusive rights and TORT, CONTRACT, STRICT LIABILITY, OR
remedies, and Hack The Box’s entire OTHERWISE), EVEN IF ADVISED OF THE
obligations and liability, in the case of any Third POSSIBILITY OF SUCH DAMAGES.
Party IP Claim
7.3 TO THE EXTENT PERMITTED BY
6.3 Exclusions. Hack The Box shall not in any APPLICABLE LAW, EACH PARTY’S MAXIMUM
circumstances have any obligation or liability LIABILITY ARISING OUT OF OR RELATED TO THIS
if the Third Party IP Claim arises from or relates AGREEMENT, UNDER ANY LEGAL THEORY
to: (a) Subscriber’s use of the Services contrary WHATSOEVER (INCLUDING TORT, CONTRACT,
to this Agreement or any instructions given by STRICT LIABILITY, OR OTHERWISE), SHALL IN NO
Hack The Box (whether in the Documentation EVENT EXCEED, IN THE AGGREGATE, THE TOTAL
or otherwise) or in violation of applicable laws; FEES PAID TO HACK THE BOX UNDER OR IN
(b) Subscriber’s use of the Services after notice CONNECTION WITH THIS AGREEMENT IN THE 12
of the alleged or actual infringement from MONTHS PRECEDING THE DATE ON WHICH THE
Hack The Box or any appropriate authority; (c) CLAIM AROSE.
any modification, alteration or conversion of
7.4 Sections 7.2 and 7.3 will not limit: (a) a
the Services by anyone other than Hack The
Party’s liability for death or personal injury
Box (or as approved in writing by Hack The
caused by its negligence; (b) a Party’s fraud or
Box); (d) any combination or use of the
fraudulent misrepresentation; (c) any other
Services with any computer hardware,
liabilities that cannot be excluded under
software, data or service not provided by
applicable law; or (d) Subscriber’s payment
Hack The Box; (e) Hack The Box’s compliance
obligations hereunder or liability for
with specifications, requirements or requests of
infringement of Hack The Box’s Intellectual
Subscriber; or (f) Subscriber’s gross negligence
Property Rights.
or willful misconduct.
7.5 SUBSCRIBER ACKNOWLEDGES AND
7 DISCLAIMERS AND LIMITATIONS AGREES THAT ABSENT ITS AGREEMENT TO THIS
LIMITATION OF LIABILITY, HACK THE BOX WOULD
OF LIABILITY NOT PROVIDE THE SERVICE TO SUBSCRIBER.
7.1 DISCLAIMERS. EXCEPT AS EXPRESSLY
AND SPECIFICALLY PROVIDED IN THIS
8 TERM AND TERMINATION
AGREEMENT, TO THE FULLEST EXTENT PERMITTED
BY APPLICABLE LAW, THE SERVICES ARE 8.1 Subscription Term. Unless terminated
PROVIDED ON AN “AS IS” AND “AS AVAILABLE” earlier in accordance with this Section 8, this
BASIS, AND HACK THE BOX EXPRESSLY Agreement shall commence on the Effective
DISCLAIMS ALL OTHER WARRANTIES OF ANY Date and continue until the end of the Initial
KIND RELATED TO THE SERVICES, WHETHER Term at which point it will automatically renew
EXPRESS, IMPLIED, OR STATUTORY, INCLUDING, for successive periods equal in length to the
BUT NOT LIMITED TO, THE IMPLIED WARRANTIES Initial Term (or such other period as the Parties
OF MERCHANTABILITY, FITNESS FOR A may agree in writing) (each a “Renewal
PARTICULAR PURPOSE, TITLE, AND NON- Term”), unless either Party provides written
INFRINGEMENT. HACK THE BOX DOES NOT notice of non-renewal at least seven (7) days
WARRANT THAT THE SERVICES WILL MEET (in the case of monthly subscription plans) or
SUBSCRIBER’S REQUIREMENTS OR THAT THE thirty (30) days (in the case of all other
OPERATION OR USE OF THE SERVICES WILL BE subscription plans) before the end of the Initial
UNINTERRUPTED OR ERROR FREE. Term or any Renewal Term. The Initial Term and
each Renewal Term are collectively referred
7.2 TO THE EXTENT PERMITTED BY to herein as the "Subscription Term".
APPLICABLE LAW, NEITHER PARTY SHALL BE Notwithstanding the foregoing if: (i) the
LIABLE FOR ANY CONSEQUENTIAL, INDIRECT, Subscriber has purchased its subscription via a
SPECIAL, INCIDENTAL, PUNITIVE OR EXEMPLARY reseller, distributor or other partner of Hack The
DAMAGES, INCLUDING BUT NOT LIMITED TO Box, this Agreement shall commence on the
ANY LOSS OF PROFIT, LOSS OF BUSINESS, LOSS Effective Date and continue until the end of
OF GOODWILL, LOSS OF OR CORRUPTION OF
7
the Initial Term at which point it will within thirty (30) days after written request
automatically terminate unless the Partner return or destroy any Confidential Information
signs or otherwise accepts a new Service of the other Party within its possession or
Order Form; or (ii) Hack The Box has agreed to control. Subscriber acknowledges that it is
provide the Subscriber with a Trial Period, this responsible for exporting any Subscriber
Agreement shall commence on the Effective Materials to which Subscriber desires
Date and continue until the end of the Trial continued access after termination of this
Period at which point the Initial Term shall Agreement and Hack The Box shall have no
commence (and the Subscriber shall become liability for any failure of Subscriber to retrieve
liable to pay the Fees) unless the Subscriber such Subscriber Materials and no obligation to
provides written notice of termination before store or retain any such Subscriber Materials
the end of the Trial Period. after the termination of the Agreement.
8.2 Termination for Cause. Without 8.4 Survival. Termination or expiration of
affecting any other right or remedy available this Agreement will not affect any obligations
to it, Hack The Box may terminate this or liabilities of the Parties that have accrued
Agreement immediately by written notice if prior to the effective date of expiration or
the Subscriber or, where applicable, the termination (including any obligation to pay
Partner fails to pay any amount due under this previously accrued amounts). Sections 5, 7,
agreement on the due date for payment and 8.3, 9, 10, 12, and 13 will survive any termination
remains in default seven (7) days after being or expiration of this Agreement.
notified in writing to make such payment.
Without affecting any other right or remedy 9 DATA PRIVACY AND SECURITY
available to it, either Party may terminate this
Agreement immediately by written notice to
the other Party if: (a) the other Party commits 9.1 Personal Data. Other than Authorized
a material or persistent breach of any term Users’ login credentials used to create and
(other than a payment term) of this manage user accounts, the Services are not
Agreement and (if such breach is remediable) designed to process (and do not require the
fails to remedy that breach within a period of processing of) personal data, and Subscriber is
fourteen (14) days after being notified in responsible for ensuring no other personal
writing to do so; or (b) the other Party has a data is submitted to the Services. Personal
liquidator, administrator or administrative data provided in connection with user
receiver appointed over it, or a material part account management will be treated in
of its assets, or makes an arrangement or accordance with the then-current Privacy
composition with its creditors, or an Notice at https://resources.hackthebox.com
application to a court of competent /hubfs/Legal/PN.pdf.
jurisdiction for protection from its creditors, or 9.2 DPA. To the extent Hack The Box is
(being an natural person) is declared bankrupt deemed a processor under applicable law for
or makes an arrangement with or for the the provision of services, and such law requires
benefit of his creditors, or (in either case) suffers the Parties to enter into a data processing
or takes any equivalent action in any agreement, the Parties agree that Hack The
jurisdiction. Upon any termination for cause by Box will process personal data in accordance
Subscriber, Hack The Box shall refund the with the online Data Processing Addendum
Subscriber or, where applicable, the Partner (DPA), which is made available at
any prepaid Fees covering the remainder of https://resources.HackTheBox.com/hubfs/Leg
the Subscription Term. Upon any termination al/DPA.pdf. This DPA is hereby incorporated by
for cause by Hack The Box, Subscriber shall pay reference and forms an integral part of this
any unpaid Fees covering the remainder of Agreement.
the Subscription Term.
9.3 Security of Data. The Parties have or
8.3 Effect of Termination. Upon the shall adopt and maintain data security policies
termination of this Agreement: (a) all rights and and procedures that contain organizational
licenses granted under this Agreement will and technical measures appropriate to the
terminate and Subscriber and all Authorized complexity, nature, and scope of its activities,
Users must cease accessing and using the to protect personal and confidential data
Services immediately; (b) each Party shall against unauthorized access, processing,
8
disclosure, destruction, damage, or loss.
11 DISPUTE RESOLUTION
10 CONFIDENTIAL INFORMATION
11.1 Dispute Resolution Procedure. The
Parties shall use the following procedure to
10.1 The Receiving Party shall not use the
address any dispute arising out of or in
Disclosing Party’s Confidential Information or
connection with this Agreement, including any
disclose such Confidential Information to any
question regarding its existence, validity or
third party in each case except as expressly
termination (a “Dispute”).
permitted by this Agreement. The Receiving
Party will maintain the confidentiality of all 11.2 Negotiation. Either Party may initiate
Confidential Information in its possession or the Dispute resolution procedures by sending
control using the same efforts that it ordinarily notice of Dispute (“Notice of Dispute”) to the
uses with respect to its own proprietary other Party. The Parties shall attempt to resolve
information of similar nature and importance, the Dispute promptly through good faith
but no less than reasonable efforts. The negotiations including (a) timely escalation of
foregoing obligations will not restrict the the Dispute to executives who have authority
Receiving Party from disclosing Confidential to settle the Dispute and show they are at a
Information of the Disclosing Party: (a) higher level of management than the persons
pursuant to the order or requirement of a with direct responsibility for the matter, and (b)
court, administrative agency, or other direct communication between the
governmental body, provided that, to the executives. If the Dispute has not been
extent it is legally permitted to do so, the resolved within ten (10) days from the Notice
Receiving Party gives reasonable notice to the of Dispute, the Parties shall proceed to comply
Disclosing Party to contest such order or with the provisions of the following sub-section
requirement; and (b) on a confidential basis to and submit Dispute to a court of competent
its legal or financial advisors or to such of its jurisdiction.
employees, officers, partners or agents as
11.3 Arbitration. Any Dispute remaining
have a reasonable need to know such
unresolved after compliance with the previous
Confidential Information. In addition, each
sub-section will be settled exclusively through
Party may disclose the terms and conditions of
binding arbitration administered: (a) in New
this Agreement: (a) as required under
York, NY by JAMS pursuant to its
applicable securities regulations; and (b) on a
Comprehensive Arbitration Rules and
confidential basis to present or future investors
Procedures (and in accordance with the
in, lenders to or acquirers of such Party.
Expedited Procedures in those Rules) if
10.2 The Receiving Party hereby Subscriber is incorporated or organized in the
acknowledges that: (a) its rights to the USA, Canada, or otherwise in the Americas; or
Confidential Information to be provided by the (b) in London by The London Court of
Disclosing Party pursuant to the terms of this International Arbitration (LCIA) pursuant to the
Agreement shall be limited to use in relation to LCIA Rules if Subscriber is incorporated or
the performance of the Agreement, and (b) organized in any other jurisdiction. Judgment
the Disclosing Party may demand the on the award rendered by the arbitrator(s)
destruction or return of the Confidential may be entered in any court having
Information at any time upon giving written jurisdiction. Notwithstanding the foregoing,
notice to the Receiving Party. The Receiving either Party may seek injunctive or other
Party undertakes to notify the Disclosing Party equitable relief from any court having
promptly of any unauthorized use, copying or jurisdiction for any alleged or threatened
disclosure of any of the Confidential misappropriation of intellectual property rights
Information of which the Receiving Party or breach of confidentiality, and Hack The Box
becomes aware, and to provide all may pursue claims for unpaid invoices in small
reasonable assistance to the Disclosing Party claims court or comparable venues in any
to terminate such unauthorized acts. Nothing applicable jurisdiction or refer such invoices to
in this section shall prevent a Party from collections services. The prevailing Party in any
immediately seeking an injunction in cases dispute hereunder will be entitled to recover its
where the Party will suffer irreparable harm reasonable attorney’s fees and costs. THE
without entry thereof. PARTIES HERETO EXPRESSLY WAIVE THE RIGHT
9
TO TRIAL BY JURY AND ANY RIGHT TO enforced by, any other person or entity except
PARTICIPATE IN CLASS-ACTION PROCEEDINGS. as expressly set forth herein.
11.4 Confidentiality. All communications 12.4 Waiver. A Party’s delay or failure to
made during negotiations under this section exercise or enforce any right or provision in this
shall be treated as compromise and Agreement will not prejudice or operate to
settlement negotiations for purposes of waive such right or provision.
applicable rules of evidence and any
12.5 Insurance. The Parties shall have in
additional confidentiality protections provided
force and maintain at their own cost insurance
by applicable law.
policies with a reputable carrier in
11.5 Injunctive Relief. Nothing in this section commercially reasonable types and amounts
shall prevent a Party from immediately seeking based on their operations.
an injunction in cases where the Party will suffer
12.6 Severability. The invalidity or
irreparable harm without entry thereof.
unenforceability of any provision of this
11.6 Governing Law. This Agreement, and Agreement shall not affect the validity or
any dispute or claim (including non- enforceability of any other provision hereof
contractual disputes or claims) arising out of or and it is the intent and agreement of the
in connection with it or its subject matter or Parties that this Agreement shall be deemed
formation, shall be governed by, and amended by modifying such provision to the
construed in accordance with: (a) the laws of extent necessary to render it valid, legal and
the State of Delaware, if Subscriber is enforceable while preserving its intent or, if
incorporated or organized in the USA, such modification is not possible, by
Canada, or otherwise in the Americas; or (b) substituting another provision that is legal and
the laws of England and Wales, if Subscriber is enforceable and that achieves the same
incorporated or organized in any other objective. The balance of this Agreement will
jurisdiction; in each case without regards to not be affected.
conflicts of laws principles.
12.7 Force Majeure. Hack The Box shall not
be deemed to be in breach of this Agreement
12 GENERAL TERMS for any failure or delay in performance caused
by reasons beyond its reasonable control,
12.1 Modification. Hack The Box may including but not limited to acts of God,
modify all or any part of these Terms of Service earthquakes, wars, terrorism, communication
at any time by posting a revised version (“New failures, strikes or shortages of materials,
Terms”) on its website or otherwise notifying pandemics, epidemics, or governmental
Subscriber. The New Terms will become action.
effective upon posting or as otherwise stated 12.8 Compliance with Laws. Each Party
in the notice. By continuing to access and use represents and warrants that it is aware of,
the Services after the New Terms have been understands and will comply with all laws and
posted on Hack The Box’s website or otherwise regulations applicable in the performance of
notified to it, Subscriber agrees to be bound by this Agreement. In particular, each Party
the New Terms. It is Subscriber’s responsibility to warrants and undertakes that, in connection
check Hack The Box’s website for with this Agreement and the performance
modifications. The date these Terms of Service thereof, it will comply with all applicable laws,
were last modified is stated at the beginning of regulations, rules and requirements relating to
these Terms of Service. trade sanctions, foreign trade controls, export
12.2 Assignment. Subscriber may not assign and re-export controls, non-proliferation, anti-
this Agreement, in whole or in part, to any third terrorism and similar laws, including the ones of
party. Any purported assignment in violation of the U.N., E.U., U.S., and the UK (“Export Laws”).
this section will be null and void. 12.9 Notices. Unless another email address
12.3 No Third-Party Beneficiaries. This is specified in writing by the Parties, all notices,
Agreement is intended for the benefit of the demands, or consents required or permitted
Parties hereto and their respective permitted under this Agreement shall be in writing and
successors and assigns, and is not for the delivered at the following email addresses:
benefit of, nor may any provision hereof be For Hack The Box: legal@hackthebox.com
10
For Subscriber: The email address provided to Agreement. Subscriber understands that
Hack The Box. activation of such an indicator will constitute
A notice sent by email in accordance with this its electronic signature and acknowledges
Section 12.9 shall be deemed to have been that such electronic signature is equivalent to
received at the time of transmission of the a handwritten signature.
email or, if this time is outside business hours
(being 09:00 to 17:30 in the place of receipt), 13 SPECIAL TERMS
when business hours next resume.
This section does not apply to the service of 13.1 Federal Government End Users. Any
any proceedings or other documents in any Services, including related software and
legal action. technology, provided for ultimate federal
12.10 Publicity. Neither Party will make or government end use will be provided solely in
issue any formal or informal announcement or accordance with the following: the Services
statement to the press or any third party in consist of “commercial items,” as defined at
connection with this Agreement without the FAR 2.101. The Services, and related technical
prior written consent of the other Party. data and software rights, are provided in
accordance with the Agreement’s customary
12.11 Entire Agreement. This Agreement commercial license, and in accordance with
together with any schedules and other FAR 12.211 (Technical Data) and FAR 12.212
documents referred to herein, represents the (Software) and, for Department of Defense
entire agreement between the parties with transactions, DFAR 252.227-7015 (Technical
respect to Subscriber’s access to, and use of, Data) and DFAR 227.7202-3 (Software and
the Services. To the extent that the terms of this Documentation). If a government agency
Agreement are in conflict with the terms of any needs additional rights, it must negotiate a
other agreement between Subscriber and mutually acceptable written addendum to
Hack The Box, the terms of this Agreement will this Agreement with Hack The Box specifically
take precedence and supersede the terms of granting those rights.
such other agreement with respect to
Subscriber’s access to, and use of, the 13.2 CTF Credits. The purchase and use of
Services. CTF Credits by the Subscriber shall be
governed by the CTF Credits Terms, which can
12.12 Electronic Signature. To demonstrate be found here: https://resources.hackthe
Subscriber’s assent to this Agreement, Hack box.com/hubfs/Legal/CTF.pdf and which are
The Box may require Subscriber’s authorized incorporated herein by reference and made
representative to click an “accept,” “agree,” a part of this Agreement.
or other assent indicator accompanying this
11
Previous versions of these TERMS OF SERVICE FOR BUSINESSES can be found at:
Effective Date Link
2022/08/01 https://resources.hackthebox.com/hubfs/Legal/Terms/B2BT/20220801.pdf
2024/05/15 https://resources.hackthebox.com/hubfs/Legal/Terms/B2BT/20240515.pdf
12