Privacy, terms, security and support for Novulis products

01Order of Precedence

If the customer has entered into a separate written agreement with Novulis governing the applicable product, that agreement controls to the extent of any conflict with these Product Terms.

If a product is acquired through Microsoft Marketplace and Novulis has selected the Microsoft Standard Contract for Microsoft Marketplace, the Microsoft Standard Contract and any applicable Novulis amendments or private-offer terms govern that Marketplace transaction to the extent specified in the purchase flow.

If Novulis elects to use its own custom legal terms for a Marketplace offer instead of the Microsoft Standard Contract, the legal terms presented and accepted in the applicable Marketplace purchase flow govern that offer.

These Product Terms do not replace a Microsoft Marketplace legal contract where another contract is expressly presented and accepted as part of the Marketplace transaction.

When these Product Terms are presented and accepted as Novulis's custom terms in a Microsoft Marketplace purchase, they govern the product license. Any accepted customer-specific terms in the private offer also apply to that transaction.

These Product Terms do not alter the customer's separate agreements with Microsoft for Marketplace purchases or Microsoft cloud services.

02Products Covered

These Product Terms apply to:

• Build Studio
• GovXRM

They apply to both Novulis-hosted SaaS and customer-hosted deployments unless an applicable order or agreement states otherwise.

03License and Right to Use

Subject to payment of applicable fees and compliance with the governing agreement, Novulis grants the customer a limited, non-exclusive, non-transferable right to access and use the applicable product during the subscription or license term for the customer's internal business or governmental purposes.

The scope of use may be limited by the applicable order, private offer, plan, subscription, environment, organization, user population, capacity, or other entitlement identified in the governing agreement.

No ownership interest in Novulis software or intellectual property is transferred to the customer.

04SaaS Use

For a Novulis-hosted SaaS deployment, Novulis provides access to the applicable product as a hosted service. Build Studio SaaS is hosted in Novulis's Azure subscription, with a separate Build Studio environment for each customer.

The applicable order identifies the agreed deployment location and cloud environment, subject to supported configurations and service availability.

The customer may permit authorized users to access the service in accordance with the purchased subscription and the customer's internal policies.

The customer is responsible for:

• Authorized-user administration
• Appropriate use of credentials and identity systems
• The accuracy and legality of Customer Content submitted to the service
• Compliance with applicable laws, regulations, and organizational policies governing the customer's use of the service

05Customer-Hosted Use

For a customer-hosted deployment, Novulis provides the applicable software, deployment artifacts, entitlement, updates, or other materials described in the governing agreement for deployment into a customer-controlled environment.

For Build Studio, the customer may choose deployment into a new Azure environment or installation into an existing customer Azure Kubernetes Service (AKS) cluster, subject to the supported deployment requirements. The applicable order or deployment documentation identifies the required supporting resources and customer prerequisites.

The customer is responsible for operating and administering its environment, including applicable cloud subscriptions, infrastructure, identities, networking, security configuration, backups, monitoring, and third-party or Microsoft cloud services unless the governing agreement states otherwise.

Novulis does not receive ownership of customer cloud resources or Customer Content by virtue of the deployment.

06Authorized Users

The customer is responsible for ensuring that only authorized users access the products and that users comply with these Product Terms and the governing agreement.

The customer is responsible for maintaining appropriate identity, authentication, and access-control practices for its users.

07Acceptable Use and Restrictions

Except to the extent expressly permitted by applicable law or the governing agreement, the customer will not:

• Sell, sublicense, lease, rent, distribute, or commercially provide the product to a third party as a standalone product
• Copy or reproduce the product except as necessary for an authorized customer-hosted deployment, backup, or disaster-recovery purpose
• Reverse engineer, decompile, or disassemble the product
• Remove or obscure proprietary notices
• Circumvent license, entitlement, security, or access-control mechanisms
• Use the product to violate applicable law or the rights of another person or organization
• Introduce malicious code or intentionally disrupt the product or related systems
• Attempt unauthorized access to Novulis-hosted systems or another customer's environment

Nothing in this section restricts rights that cannot lawfully be restricted under applicable law.

08Customer Content

As between Novulis and the customer, the customer retains its rights in data, documents, source code, records, content, and other information provided to or processed through the products ("Customer Content").

The customer grants Novulis only the rights necessary to process Customer Content to provide the applicable Novulis-hosted service, support the customer, comply with customer instructions, or perform obligations under the governing agreement.

For customer-hosted deployments, Customer Content remains within the customer-controlled environment as described in the Novulis Product Privacy Policy, except where the customer expressly provides information to Novulis for support or another authorized purpose.

09Privacy

Use of Build Studio and GovXRM is subject to the Novulis Product Privacy Policy, available at:

Product Privacy Policy

The Product Privacy Policy explains the different data-handling models for Novulis-hosted SaaS and customer-hosted deployments.

10Artificial Intelligence Features

Certain product features may use artificial intelligence or machine-learning services, including Microsoft Azure AI services, depending on product configuration and deployment.

AI-generated output may be probabilistic and may not always be complete, accurate, or appropriate for every use. Customers are responsible for reviewing outputs before relying on them for legal, regulatory, security, financial, operational, or other material decisions.

Customers are responsible for determining whether their content is appropriate for processing through configured AI features and for configuring applicable customer-hosted AI resources in accordance with their requirements.

Novulis does not claim ownership of Customer Content merely because it is processed by an AI-enabled feature.

11Microsoft and Third-Party Services

Novulis products may depend on, integrate with, or be deployed using Microsoft Azure, Microsoft cloud services, or other third-party services.

Use of those services may be subject to separate terms between the customer and the applicable provider. Unless the governing agreement expressly states otherwise, the customer is responsible for licenses, subscriptions, consumption charges, and configuration of third-party services procured directly by the customer.

Novulis is not responsible for changes made independently by third-party providers to services outside Novulis's control, but Novulis may provide product updates or compatibility guidance under the applicable support arrangement.

12Support and Updates

Support, maintenance, update rights, service levels, and response commitments are governed by the applicable subscription, support plan, Marketplace offer, private offer, order form, or service agreement.

General Novulis product-support information is available at:

Product Support

Novulis may provide product updates, defect fixes, security-related fixes, compatibility updates, and new versions. The manner and timing of deployment may differ between SaaS and customer-hosted environments.

For customer-hosted environments, deployment of an update may require customer action or customer authorization.

13Security

Security responsibilities are shared according to the selected deployment model.

A summary of Novulis product-security practices and customer responsibilities is available at:

Product Security Overview

The customer remains responsible for its own users, endpoints, identities, cloud subscriptions, network configuration, and customer-controlled infrastructure unless the governing agreement expressly assigns a responsibility to Novulis.

14Ownership and Intellectual Property

Novulis and its licensors retain all right, title, and interest in and to the products, software, documentation, product designs, trademarks, and related intellectual property, including improvements and derivative works created by Novulis.

No rights are granted except those expressly stated in the governing agreement or these Product Terms.

15Feedback

If a customer voluntarily provides product suggestions, ideas, or feedback, Novulis may use that feedback to improve its products without restriction or payment, provided that Novulis does not acquire ownership of the customer's confidential information or Customer Content through this feedback provision.

16Fees, Taxes, and Cloud Consumption

Product fees and billing terms are established in the applicable order, subscription, Marketplace transaction, private offer, or other governing agreement.

For Build Studio purchases through Microsoft Marketplace, the applicable private offer specifies the annual software license fee, payable upfront through Microsoft, and any add-on package charges. Customer-specific prices are established in the accepted private offer.

For Build Studio SaaS, the applicable private offer or order specifies the included allowance for hosting and AI usage. Customers may purchase add-on packages providing fixed amounts of extra AI processing and hosting or storage capacity, with payment collected through Microsoft Marketplace. The applicable offer or order must specify the package quantities, usage units, validity period, price, and payment schedule.

For customer-hosted deployments, cloud infrastructure and consumption charges associated with the customer's environment are the customer's responsibility unless expressly included in the governing agreement.

Taxes are handled in accordance with the applicable transaction and governing agreement.

17Suspension

Novulis may suspend access to a Novulis-hosted service when reasonably necessary to address a material security threat, prevent unlawful or unauthorized use, comply with law, or address a material breach of the governing agreement, subject to any applicable contractual notice requirements.

For customer-hosted deployments, Novulis may suspend or terminate entitlement to future updates, support, or licensed use as permitted by the governing agreement, but Novulis does not obtain independent administrative control over customer resources solely through these Product Terms.

18Term and Termination

The subscription or license term is specified in the applicable governing agreement.

Upon expiration or termination, the customer's right to use the product ends except to the extent that the governing agreement provides continuing or perpetual rights.

For customer-hosted deployments, the customer remains responsible for removing or disabling software where required by the governing agreement and for managing its own Customer Content and cloud resources.

19Confidentiality

Confidentiality obligations are governed by the applicable agreement between Novulis and the customer. These Product Terms do not reduce confidentiality protections contained in a separately executed agreement.

20Warranties, Disclaimers, Liability, and Indemnification

Any warranties, disclaimers, limitations of liability, indemnification obligations, remedies, service credits, or similar risk-allocation terms are governed by the applicable written agreement, Microsoft Marketplace legal contract, private offer, or order governing the transaction.

Where no separate written provision applies, rights and remedies are determined by applicable law.

21Government and Regulated Customers

Customers are responsible for determining whether the applicable product configuration, deployment model, and Microsoft cloud environment meet their regulatory, procurement, records-management, accessibility, security, and data-residency requirements.

Novulis may provide product documentation or respond to customer security and compliance reviews under the applicable sales or support process.

22Export and Sanctions Compliance

Customers must use Novulis products in compliance with applicable export-control, sanctions, and trade laws.

23Changes to These Product Terms

Novulis may update these Product Terms from time to time. Changes will be posted with a revised effective date.

For an active paid subscription, changes that materially alter contractual rights will apply only to the extent permitted by the governing agreement and applicable law.