1. Cloud SaaS Platform Access & Restrictions

Subscription Grant: Jurybox operates a cloud-hosted Software-as-a-Service (SaaS) platform providing digital trial preparation, workflow configurations, and jury selection management tools. Subject to compliance with this Agreement, Jurybox grants Client a non-exclusive, non-transferable, revocable right to access and use the cloud platform over the web and authorized application endpoints.

Platform Constraints: This is a hosted service; no software or source code is downloaded, modified, or compiled locally by the Client. Client shall not, and shall not permit any third party to:

• Reverse-engineer, decompile, or copy the architectural runtime or user interfaces of Jurybox.

• Interfere with, bypass, or disrupt the network firewalls or integrity of the service.

• Ingest or transmit malicious scripts, malware, or illegal data tracking tools into the system.

2. Core Security Commitments & Infrastructure Boundaries

In alignment with our corporate compliance baselines, Jurybox strictly enforces the following administrative, physical, and logical data security controls:

Infrastructure Isolation: The platform is deployed using modern cloud isolation infrastructure hosted in the United States by our vetted cloud subservice organization (identified in our Trust Center).

Cryptographic Safeguards: Client data, court notes, and uploaded documentation are strictly encrypted using industry-standard cryptographic protocols both at rest within cloud storage frameworks and in transit across public networks.

Incident Preparedness: The Company maintains structured, audited incident response playbooks to programmatically identify, triage, escalate, and counter logical perimeter exceptions or potential data integrity risks.

3. Complementary User Entity Controls (Client Obligations)

The security of the Jurybox environment depends directly on the configuration states and access discipline maintained by our clients. To fulfill overall compliance requirements, Client legally agrees to implement and enforce the following baseline controls:

Credential Management: Client is solely responsible for maintaining the privacy of user session tokens, login combinations, and staff passwords.

Breach Notification: Client must immediately notify Jurybox customer support or security workflows if any internal employee account or credential map is suspected of being compromised.

Independent Access Audits: Client agrees to run continuous management oversight and periodic access reviews over their own active employee rosters, immediately offboarding or deactivating staff credentials when an employee changes roles or leaves the firm.

Authorized Personnel Validation: Client must supply and maintain an authenticated, accurate list of internal administrative personnel authorized to request sensitive system tier modifications or data routing configuration changes from Jurybox support engineers.

Business Continuity: Client is responsible for designing, testing, and maintaining independent Disaster Recovery (DR) and Business Continuity Plans (BCP) to govern their firm's operational workflows in the event of an external public internet disruption.

Intended Use: The platform is designed and operated to hold jury-selection work product: jury panel lists, juror questionnaire responses, voir dire notes, challenge and strike decisions, and the related case materials a trial team maintains for a proceeding. Client shall use the platform only for that purpose and only with content that Client has the legal right to collect and process.

Restricted Data: Client shall not upload, enter, or transmit into the platform, in any field or by any method (including free-text notes, custom demographic fields, uploaded documents, and AI-assisted document import), any of the following ("Restricted Data"): payment card numbers or other cardholder data; Social Security numbers; bank, brokerage, or other financial account numbers; government-issued personal identification numbers, such as driver's license, passport, or taxpayer identification numbers; or protected health information, as defined under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations, or other medical records. Court-assigned juror and panel numbers are not Restricted Data. Subscription payments are collected by Jurybox's payment processor, and Jurybox itself never receives or stores full payment card numbers. The platform is not designed, certified, or contracted to hold Restricted Data: Jurybox does not maintain PCI DSS certification, does not enter into HIPAA business associate agreements, and makes the security commitments in Section 2 on the basis that Restricted Data is not present.

Removal of Restricted Data: If Jurybox becomes aware that Restricted Data has been entered into the platform, Jurybox may, upon notice to Client's administrative contact, redact, quarantine, or delete the content in question and may suspend the affected upload or feature until the Restricted Data is removed. Jurybox will make reasonable efforts to limit any removal to the Restricted Data itself. Jurybox has no obligation to monitor Client content for Restricted Data, and a failure to detect Restricted Data does not waive any part of this Section.

Responsibility for Restricted Data: Client is solely responsible for any Restricted Data that Client or its users enter into the platform, whether or not Jurybox detects it. Jurybox's obligations under this Agreement, the Jurybox Privacy Policy, and any security or compliance documentation Jurybox provides do not extend to Restricted Data, and Jurybox shall have no liability to Client or to any third party arising from Restricted Data entered in breach of this Section. Client shall defend, indemnify, and hold harmless Jurybox and its members, managers, employees, and contractors from and against any claim, regulatory inquiry, fine, penalty, loss, cost, or expense (including reasonable attorneys' fees and any breach-notification or remediation costs) arising out of Restricted Data that Client or its users entered into the platform. This indemnity is in addition to, and is not limited by, Section 5.

Juror Information and Court Rules: Juror information is sensitive by nature. Client is solely responsible for complying with the statutes, court rules, standing orders, protective orders, and rules of professional conduct that govern the collection, use, disclosure, retention, and destruction of juror information in each jurisdiction in which Client uses the platform, including any obligation to return or destroy jury panel lists and juror questionnaires at the close of a proceeding. Jurybox provides the platform as a tool for organizing that information and does not determine what Client may lawfully collect or retain. Nothing in this Agreement relieves Client of those obligations.

4. Data Ownership & Deletion Lifecycle

Data Proprietary Rights: Client retains exclusive ownership, title, and all intellectual property rights to all raw documents, trial notes, case files, and materials pushed or ingested into the Jurybox platform.

Post-Termination Purging Lifecycle: Upon the expiration, cancellation, or termination of your subscription contract, Jurybox will programmatically retain your data for a grace period of up to ninety (90) days. Following this 90-day window, all associated customer data states and lingering remnants will be securely and permanently deleted from our production systems in accordance with our standardized data disposal rules.

5. Limitation of Liability & Indemnification

Limitation of Liability: To the maximum extent permitted by applicable law, neither party will be liable under this agreement for any lost profits, lost revenue, cover costs, or indirect, incidental, special, punitive, or consequential damages.

Liability Cap: Jurybox's total aggregate liability arising out of or related to your platform usage shall not exceed the total financial fees paid by the Client to Jurybox in the twelve (12) months immediately preceding the event giving rise to liability.

Warranties: Except as explicitly stated herein, the platform is provided on an "as-is" and "as-available" basis. Jurybox does not warrant that application service availability will be entirely uninterrupted or error-free.

6. Governing Law & Venue

This Agreement, and all legal disputes or claims arising out of its context, shall be governed exclusively by the laws of the State of Idaho, without regard to conflicts of law principles. Any legal action or proceeding must be brought exclusively in the state or federal courts located in Boise, Idaho.

7. AI-Assisted Features

Optional Feature: Jurybox offers optional AI-assisted features, such as AI-assisted document import, and may introduce, modify, or retire AI-assisted features from time to time. These features are disabled by default and become available to an organization only after an administrator for that organization reviews the in-app disclosure and enables them. An administrator may disable them at any time. All AI-assisted features process Client content under the commitments described in the Jurybox Privacy Policy's AI-Assisted Features section.

Output Review: Output generated by AI-assisted features is provided as-is. It may contain errors or omissions, and Jurybox does not warrant its accuracy or completeness. Client is responsible for reviewing all AI-generated output against the source materials before relying on it.

Client Warranty: Client represents and warrants that it has the legal right to upload and process the content it submits to AI-assisted features, and that such use complies with applicable law and any court or agency rules that apply to Client.

8. Document Credits

Prepaid Credits: Certain AI-assisted features, including AI-assisted document import, consume document page credits. Jurybox may include a monthly allowance of pages with an active subscription; additional credits may be purchased in prepaid packs. Purchased credits are consumed only after the monthly included allowance has been used.

No Refunds: Purchased credits are non-refundable except at Jurybox's discretion.

Expiration and Transfer: Purchased credits remain available while your organization holds an active subscription. Jurybox may remove unused purchased credits beginning ninety (90) days after the subscription under which they were purchased ends. Credits are not transferable between organizations.

9. Updates to Terms

Jurybox may update this Agreement from time to time. If we make material changes, we will provide notice by email, in-app notice, posting on our website, or another reasonable method. Unless a later effective date is stated, updated terms become effective when posted for non-material changes and thirty (30) days after notice for material changes. Your continued access to or use of the Services after the effective date constitutes acceptance of the updated Agreement. If you do not agree to the updated Agreement, you must stop using the Services before the effective date.