1. Cloud SaaS Platform Access & Restrictions

Subscription Grant: Jurybox operates a cloud-hosted Software-as-a-Service (SaaS) platform providing digital trial preparation, workflow configurations, and jury selection management tools. Subject to compliance with this Agreement, Jurybox grants Client a non-exclusive, non-transferable, revocable right to access and use the cloud platform over the web and authorized application endpoints.

Platform Constraints: This is a hosted service; no software or source code is downloaded, modified, or compiled locally by the Client. Client shall not, and shall not permit any third party to:

• Reverse-engineer, decompile, or copy the architectural runtime or user interfaces of Jurybox.

• Interfere with, bypass, or disrupt the network firewalls or integrity of the service.

• Ingest or transmit malicious scripts, malware, or illegal data tracking tools into the system.

2. Core Security Commitments & Infrastructure Boundaries

In alignment with our corporate compliance baselines, Jurybox strictly enforces the following administrative, physical, and logical data security controls:

Infrastructure Isolation: The platform is deployed using modern cloud isolation infrastructure hosted by our subservice organization, Amazon Web Services (AWS).

Cryptographic Safeguards: Client data, court notes, and uploaded documentation are strictly encrypted using industry-standard cryptographic protocols both at rest within cloud storage frameworks and in transit across public networks.

Incident Preparedness: The Company maintains structured, audited incident response playbooks to programmatically identify, triage, escalate, and counter logical perimeter exceptions or potential data integrity risks.

3. Complementary User Entity Controls (Client Obligations)

The security of the Jurybox environment depends directly on the configuration states and access discipline maintained by our clients. To fulfill overall compliance requirements, Client legally agrees to implement and enforce the following baseline controls:

Credential Management: Client is solely responsible for maintaining the privacy of user session tokens, login combinations, and staff passwords.

Breach Notification: Client must immediately notify Jurybox customer support or security workflows if any internal employee account or credential map is suspected of being compromised.

Independent Access Audits: Client agrees to run continuous management oversight and periodic access reviews over their own active employee rosters, immediately offboarding or deactivating staff credentials when an employee changes roles or leaves the firm.

Authorized Personnel Validation: Client must supply and maintain an authenticated, accurate list of internal administrative personnel authorized to request sensitive system tier modifications or data routing configuration changes from Jurybox support engineers.

Business Continuity: Client is responsible for designing, testing, and maintaining independent Disaster Recovery (DR) and Business Continuity Plans (BCP) to govern their firm's operational workflows in the event of an external public internet disruption.

4. Data Ownership & Deletion Lifecycle

Data Proprietary Rights: Client retains exclusive ownership, title, and all intellectual property rights to all raw documents, trial notes, case files, and materials pushed or ingested into the Jurybox platform.

Post-Termination Purging Lifecycle: Upon the expiration, cancellation, or termination of your subscription contract, Jurybox will programmatically retain your data for a grace period of up to ninety (90) days. Following this 90-day window, all associated customer data states and lingering remnants will be securely and permanently deleted from our AWS production systems in accordance with our standardized data disposal rules.

5. Limitation of Liability & Indemnification

Limitation of Liability: To the maximum extent permitted by applicable law, neither party will be liable under this agreement for any lost profits, lost revenue, cover costs, or indirect, incidental, special, punitive, or consequential damages.

Liability Cap: Jurybox's total aggregate liability arising out of or related to your platform usage shall not exceed the total financial fees paid by the Client to Jurybox in the twelve (12) months immediately preceding the event giving rise to liability.

Warranties: Except as explicitly stated herein, the platform is provided on an "as-is" and "as-available" basis. Jurybox does not warrant that application service availability will be entirely uninterrupted or error-free.

6. Governing Law & Venue

This Agreement, and all legal disputes or claims arising out of its context, shall be governed exclusively by the laws of the State of Idaho, without regard to conflicts of law principles. Any legal action or proceeding must be brought exclusively in the state or federal courts located in Boise, Idaho.

7. Updates to Terms

Jurybox may update this Agreement from time to time. If we make material changes, we will provide notice by email, in-app notice, posting on our website, or another reasonable method. Unless a later effective date is stated, updated terms become effective when posted for non-material changes and thirty (30) days after notice for material changes. Your continued access to or use of the Services after the effective date constitutes acceptance of the updated Agreement. If you do not agree to the updated Agreement, you must stop using the Services before the effective date.