End User License Agreement (EULA)

IMPORTANT — PLEASE READ CAREFULLY

This End User License Agreement (the "Agreement") is a legally binding contract between JUS., as identified below, and the natural or legal person who acquires, installs, activates or uses the Microsoft Word add-in known as JUS. for Word (the "Customer").

By installing, activating, signing in to, or otherwise using the Software, you confirm that you have read, understood and accepted all terms of this Agreement. If you do not accept these terms, do not install, activate or use the Software, and remove it if already installed.

The Software includes generative artificial intelligence components and does not constitute legal, financial or other professional advice. The critical disclaimers on this point are set out in Clause 11. Please pay particular attention to Clause 15 (limitation of liability) and Clause 23 (governing law and dispute resolution).

1. PARTIES AND DEFINITIONS

1.1 Licensor. JUS. — Veri Security Bilişim ve Danışmanlık Hizmetleri A.Ş. registered office at Kozyatağı Mahallesi, Bayar Caddesi, Gülbahar Sokak, Ege Yıldız Sitesi No: 15B/19, Kadıköy / İstanbul, Türkiye; R&D Centre at Ahmet Yesevi Mahallesi, Kerem Sokak No: 9/202, Pendik / İstanbul (Teknopol İstanbul Technopark); e-mail: [email protected]; telephone: +90 216 606 5877 ("JUS.").

1.2 Customer. The party that acquires, installs or uses the Software on its own behalf or on behalf of a legal entity it represents. Any individual using the Software on behalf of a legal entity represents and warrants that they are duly authorised to bind that entity to this Agreement.

1.3 Definitions. Capitalised terms have the following meanings:

• "Software" or "Add-in": the Microsoft Word add-in known as JUS. for Word, together with all client components, updates, patches, new releases and the Documentation.
• "Service": the server-side components, application programming interfaces, model inference infrastructure and administration console operated by or on behalf of JUS. that enable the Software to perform its functions.
• "Enterprise Licence": the licence type granting the right of use within the Customer's legal entity or designated organisational unit by the number of Authorised Users specified in the Order Form.
• "Order Form": the order, accepted quotation, subscription confirmation, Microsoft Marketplace purchase record or comparable document setting out the licence terms (seat count, term, fees).
• "Authorised User": an individual who is an employee, partner, intern or contractor working for and under the supervision of the Customer, and who has been named by the Customer to use the Software.
• "Seat": a unit of usage right allocated to a single Authorised User.
• "Administrator": a person appointed by the Customer with authority to add or remove Authorised Users, configure the Service and manage data on the Customer's behalf.
• "Document Data": the content of Word documents processed through the Software, text derived from them, file metadata, prompts, and all other content uploaded to the Service by the Customer.
• "Output": text, tables, summaries, drafts, assessments, classifications or other material generated by the Software on the basis of Document Data and prompts.
• "AI Features": functions of the Software that operate by means of large language models or other machine learning techniques.

• "Sub-processor": a third-party service provider that processes Document Data on behalf of and on the instructions of JUS. The current list is set out in Annex 1.
• "Personal Data", "Data Controller", "Data Processor", "Data Subject" and "Data Breach": have the meanings given to them under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and, to the extent applicable, the EU General Data Protection Regulation ("GDPR").
• "Microsoft Marketplace": the AppSource / Microsoft Marketplace storefront operated by Microsoft Corporation and the in-Word add-in store.
• "Documentation": the current user guides, technical descriptions and support articles published by JUS.
• "Subscription Term": the period specified in the Order Form during which the licence is in effect.
• "Confidential Information": as defined in Clause 12.
• "Applicable Law": all laws, regulations, secondary legislation, decisions of competent authorities and binding rules to which the Parties are subject.

2. SUBJECT MATTER AND FORMATION

2.1 Subject matter. This Agreement sets out the conditions on which the right to use the Software and the Service is granted to the Customer, the mutual rights and obligations of the Parties, the principles governing the processing of Document Data, and the applicable liability regime.

2.2 Acceptance. This Agreement is formed upon the occurrence of any of the following: (a) installation of the Software or its addition to Word; (b) electronic acceptance of this Agreement within the Software; (c) first sign- in with a JUS. account; (d) use of any function of the Software; or (e) execution of an Order Form or completion of a purchase through the Microsoft Marketplace.

2.3 Authority. Any person accepting this Agreement on behalf of a legal entity represents that they hold the necessary authority to do so. If that representation is untrue, the individual concerned shall be personally liable for the obligations arising under this Agreement.

2.4 Microsoft's position. The Software may be distributed through the Microsoft Marketplace. Microsoft Corporation and its affiliates are not parties to this Agreement; JUS. is solely responsible for the development, operation, support and content of the Software. Microsoft gives no warranty and assumes no liability in respect of the Software.

2.5 Order of precedence. Where the Parties have separately executed a master services agreement, data processing agreement or enterprise licence agreement, the order of precedence in the event of conflict is: (a) the executed master/enterprise agreement; (b) the Order Form; (c) this Agreement and its annexes; (d) the Documentation.

2.6 Annexes. Annex 1 (Sub-processors and AI Providers), Annex 2 (Details of Processing) form an integral part of this Agreement.

3. GRANT OF LICENCE

3.1 Licence grant. Subject to full compliance with this Agreement and timely payment of the fees, JUS. grants the Customer a non-exclusive, non-transferable, non-sublicensable and revocable right, valid for the Subscription Term, to install and run the Software and access the Service solely for the Customer's own internal business purposes.

3.2 Seat-based use. The right of use is limited to the number of Seats specified in the Order Form. Each Seat is allocated to a single named Authorised User and may not be shared concurrently. Where an Authorised User's relationship with the Customer ends, the Seat may be permanently reassigned to another Authorised User.

3.3 Enterprise scope. The Enterprise Licence covers the Customer's legal entity and, where expressly stated in the Order Form, those affiliates in which the Customer directly or indirectly holds more than 50% of the share capital. The Customer is jointly and severally responsible for its affiliates' compliance with this Agreement.

3.4 Administration. The Customer shall appoint at least one Administrator. All actions taken through an Administrator account are deemed to have been taken by the Customer. The Customer shall keep the list of Authorised Users up to date.

3.5 Installation copies. Authorised Users may install the Software on a reasonable number of devices assigned to them (desktop, laptop, Word on the web) without this giving rise to additional Seat requirements.

3.6 Trial and evaluation versions. Versions provided by JUS. free of charge or on a trial, beta, preview or evaluation basis may be used solely for evaluation purposes and for the period determined by JUS. Clauses 14.5 and 15.2 apply to such versions.

3.7 Seat overuse. Where actual use exceeds the number of Seats specified in the Order Form, JUS. is entitled to charge additional fees for the excess Seats at the then-current list price and to require that the excess be remedied.

3.8 Reservation of rights. This Agreement is not a contract of sale; no title to the Software or the Service is transferred to the Customer. All rights not expressly granted are reserved to JUS.

4. LICENCE RESTRICTIONS AND PROHIBITED USE

4.1 The Customer shall not, and shall not permit its Authorised Users or any third party to:

• reverse engineer, decompile, disassemble or otherwise attempt to derive the source code of the Software or the Service (save to the extent and within the limits expressly permitted by mandatory law, including Turkish Law No. 5846 on Intellectual and Artistic Works; in such case the Customer shall notify JUS. in writing before commencing and shall first request the necessary interoperability information from JUS.);
• copy, reproduce, adapt, translate, create derivative works of, or develop any product derived from the Software;
• sell, rent, lend, lease, or make the Software or the Service available for the benefit of third parties by way of hosting, service bureau, outsourcing, software-as-a-service or similar arrangements;
• share, sell or make available to unauthorised persons any licence keys, account credentials or access tokens;
• disable, circumvent or interfere with any technical protection measures, usage limits, rate limits, verification or licensing mechanisms of the Software;
• use the Software or the Output to develop a competing product or service, or to train, fine-tune or distil any machine learning model;
• extract data from the Service systematically by automated means (scraping, crawling, bots) or impose a disproportionate load on the Service infrastructure;
• publish benchmark or comparative performance test results concerning the Software without JUS.'s prior written consent;
• remove, alter or obscure any copyright, trademark, patent or other proprietary notices;
• use the Software in breach of Applicable Law, to generate unlawful content, to infringe third-party rights, to create misleading documents, or to develop malicious code;
• upload Document Data containing third-party Personal Data without a valid legal basis for the processing (explicit consent, performance of a contract, legal obligation or otherwise);

• use the Software in critical infrastructure, medical diagnosis, weapons systems or comparable high-risk environments where human life or physical integrity could be directly endangered. 4.2 Consequences of breach. Any breach of Clause 4.1 constitutes a material breach and entitles JUS. to terminate with immediate effect under Clause 18.3 and to suspend access under Clause 18.4.

4.3 Duty to notify. The Customer shall notify JUS. without undue delay upon becoming aware of any unauthorised use of the Software, licence breach or compromise of account security.

5. INSTALLATION, SYSTEM REQUIREMENTS AND DEPENDENCIES

5.1 Requirements. Operation of the Software depends on the versions of Microsoft Word / Microsoft 365 and the supported operating systems set out in the Documentation, as well as on an uninterrupted internet connection. Meeting these requirements is the Customer's responsibility.

5.2 Third-party platform dependency. The Software runs on Microsoft's Office Add-ins platform. Changes made by Microsoft to that platform, its APIs, security policies or store rules may affect the functionality of the Software. JUS. shall not be liable for any interruption or loss of functionality resulting from such changes, save to the extent attributable to its own fault.

5.3 Customer infrastructure. JUS. is not responsible for incompatibilities arising from the Customer's firewalls, proxy servers, endpoint protection solutions or internal policies. JUS. shall provide reasonable technical guidance.

5.4 Uninstallation. The Customer may uninstall the Software at any time. Uninstallation does not in itself give rise to any right to a refund of fees paid.

6. CUSTOMER OBLIGATIONS

6.1 Account security. The Customer is responsible for the confidentiality of its account credentials and shall enable multi-factor authentication, apply a strong password policy, and promptly revoke access for departing personnel.

6.2 Acts of Authorised Users. The Customer is liable for the acts and omissions of its Authorised Users and Administrators in breach of this Agreement as if they were its own.

6.3 Lawfulness of content. The Customer represents and warrants that it holds all necessary rights and authority in respect of the Document Data it uploads; that a valid legal basis exists for its processing under the KVKK and, to the extent applicable, the GDPR; and that all required notices have been given to Data Subjects.

6.4 Professional secrecy and sector-specific obligations. The Customer is solely responsible for compliance with the legislation specific to its own field of activity, including attorney–client privilege, trade secrecy, banking secrecy, patient confidentiality and professional codes of conduct. The Customer shall assess which categories of documents may be uploaded to the Software on that basis and shall, where necessary, request the local processing option provided for in Clause 11.9.

6.5 Acceptable use. The Customer shall use the Service in accordance with the Documentation and any reasonable usage limits published by JUS.

6.6 Backup. The Customer shall retain original (source) copies of all documents processed through the Software in its own systems. The Service is not a primary backup or archiving solution.

6.7 Cooperation. The Customer shall provide reasonable cooperation necessary for the resolution of support requests, the investigation of security incidents and the verification of licence compliance.

7. FEES, PAYMENT, TERM AND RENEWAL

7.1 Fees. The acquisition of the Software is free of charge; the licence is obtained directly from JUS., not through an app store. Licence fees accrue in the amount, currency and billing period specified in the Order Form. Unless expressly agreed otherwise, fees are payable in advance and are non- refundable.

7.2 Taxes. Fees are exclusive of value added tax, withholding tax, stamp duty and similar taxes, duties and levies, which are borne by the Customer in accordance with Applicable Law. A Customer relying on a tax exemption shall provide the relevant documentation.

7.3 Late payment. Where payment is not made when due, JUS. is entitled to default interest calculated in accordance with Turkish Law No. 3095 and to recover collection costs.

7.4 Term and renewal. The Subscription Term runs for the period specified in the Order Form and renews automatically for successive periods of the same length unless either Party gives written notice of non-renewal at least thirty (30) days before the end of the then-current period.

7.5 Price changes. JUS. may change the fees applicable to renewal periods. Any such change shall be notified to the Customer at least sixty (60) days before it takes effect. The Customer may terminate this Agreement with effect from the end of the current period by giving notice within thirty (30) days of that notification.

7.6 Suspension. Where an overdue payment is not made within fifteen (15) days of JUS.'s written notice, JUS. may suspend the Customer's access to the Service. Suspension does not relieve the Customer of its payment obligations.

7.7 No purchase through the Marketplace. The Software is not sold through the Microsoft Marketplace or any app store; the licence is acquired directly from JUS. under an Order Form. The Microsoft Marketplace / AppSource listing is used only to discover and install the Add-in, not to purchase a licence.

7.8 Free tiers. The payment provisions of this Clause 7 do not apply to functionality offered by JUS. free of charge; JUS. reserves the right to change or discontinue such functionality at any time. Where the Customer moves from a paid plan to a free plan, the data export period in Clause 18.6 applies.

8. INTELLECTUAL PROPERTY RIGHTS

8.1 JUS.'s rights. All intellectual and industrial property rights in and to the Software, the Service, its source code, algorithms, prompt templates, model configurations, interface design, database structure, the Documentation and the "JUS." trademark belong to and remain with JUS. or its licensors.

8.2 Customer's rights. All right, title and interest in the Document Data and the Output belong to the Customer (or to the third parties from whom the Customer derives its rights). JUS. asserts no rights over the Output other than as necessary to perform this Agreement. It is for the Customer to assess whether the Output qualifies for and attracts protection under Applicable Law.

8.3 Feedback. JUS. may use any suggestions, bug reports, improvement requests and similar feedback provided by the Customer in relation to the Software to develop its products and services, under a royalty-free, perpetual, worldwide and irrevocable licence. Feedback must not contain the Customer's Confidential Information or Document Data.

8.4 Aggregated and anonymised data. JUS. may use aggregated and anonymised usage statistics (feature usage frequency, error rates, performance metrics) that do not directly or indirectly identify the Customer, its Authorised Users or any Data Subject, for the purposes of operating, securing and improving the Service. Such data does not include the content of Document Data.

8.5 Use of marks. Neither Party may use the other's name, trademarks or logos without prior written consent. JUS. shall not name the Customer as a reference customer without the Customer's written approval.

9. DOCUMENT DATA, SECURITY AND RETENTION

9.1 Limited use. JUS. processes Document Data only in order to (a) provide and maintain the Service, (b) respond to the Customer's support requests, (c) implement security, abuse-prevention and fraud-prevention measures, and (d) comply with its obligations under Applicable Law, and in each case in accordance with the Customer's instructions.

9.2 No model training. JUS. does not use Document Data or Output to train, fine-tune or distil general-purpose artificial intelligence models, and obtains contractual undertakings to the same effect from its Sub-processors. This prohibition does not apply where the Customer has given separate express written consent, which may be withdrawn at any time.

9.3 Technical and organisational measures. JUS. operates an information security management system aligned with the ISO/IEC 27001 framework and implements, as a minimum, the following measures:

• encryption of data in transit using TLS 1.2 or above;
• encryption of data at rest using AES-256 or an algorithm of equivalent strength;
• role-based access control, the principle of least privilege, and separate logging of privileged access;
• multi-factor authentication and centralised identity management;
• maintenance of audit logs protected against unauthorised alteration;
• separation of production and test environments, with no use of live Document Data in test environments;
• regular vulnerability scanning and independent penetration testing at least annually;
• business continuity, backup and disaster recovery plans;
• confidentiality undertakings, background checks and regular awareness training for personnel;
• contractual assurance of the security posture of Sub-processors. 9.4 Data residency. Document Data is hosted in the regions specified in the Order Form or Annex 2. Where requested by the Customer and agreed in the Order Form, processing may be carried out within Türkiye using the local model option under Clause 11.9.

9.5 Retention and deletion. Document Data is retained for the Subscription Term and for any retention period specified in the Order Form. Following expiry or termination of this Agreement, the periods in Clause 18.6 apply. The Customer may request deletion of data through the administration console; such requests are fulfilled as soon as technically practicable and in any event within thirty (30) days. Copies held in backups are deleted upon completion of the applicable backup cycle.

9.6 Data Breach notification. Upon becoming aware of a Data Breach affecting Document Data, JUS. shall notify the Customer without undue delay and in any event within seventy-two (72) hours, providing information on the nature of the breach, the categories of data affected, its likely consequences and the measures taken, and shall provide reasonable assistance to enable the Customer to discharge its notification obligations towards the Turkish Personal Data Protection Authority and affected Data Subjects.

9.7 Audit and transparency. JUS. shall, on request, share its current security certifications, independent audit summaries and security questionnaire responses with the Customer. The Customer or an independent auditor appointed by it may audit JUS.'s relevant controls once per year, subject to at least thirty (30) days' prior written notice and a confidentiality undertaking. Audits shall be conducted so as not to disrupt JUS.'s operations beyond what is reasonable; costs are borne by the Customer unless a breach is identified.

10. PROTECTION OF PERSONAL DATA

10.1 Allocation of roles. In respect of Personal Data contained in Document Data, the Customer acts as Data Controller and JUS. acts as Data Processor. In respect of the contact, billing and account data JUS. processes to manage its own commercial relationship, JUS. acts as Data Controller.

10.2 Legal framework. JUS. shall discharge the obligations incumbent on a Data Processor under Article 12 of the KVKK and its secondary legislation and, to the extent applicable, Article 28 of the GDPR. The Parties agree to enter into a separate Data Processing Agreement (DPA) where required; upon its execution, that agreement shall prevail in respect of Personal Data.

10.3 Processing on instructions. JUS. processes Personal Data only on the Customer's documented instructions and within the framework of this Agreement. If JUS. considers that an instruction infringes Applicable Law, it shall inform the Customer without undue delay and may suspend the processing concerned.

10.4 Confidentiality of personnel. JUS. limits access to Personal Data to personnel with a need to know and ensures that such personnel are bound by written confidentiality obligations.

10.5 Sub-processors. The Customer grants general authorisation for the use of the Sub-processors listed in Annex 1. JUS. shall notify the Customer at least thirty (30) days in advance of the addition or replacement of a Sub-processor. The Customer may object on reasonable, data-protection-related grounds; if the Parties fail to reach agreement within thirty (30) days, the Customer may terminate the affected service without penalty and claim a pro-rata refund of fees for the unused period. JUS. remains liable to the Customer for the acts and omissions of its Sub-processors.

10.6 International transfers. Where Document Data must be transferred outside Türkiye, JUS. shall apply the appropriate legal mechanism provided for in Article 9 of the KVKK (adequacy decision, standard contract, binding corporate rules or an applicable exception) and shall make any required filing of standard contracts with the Personal Data Protection Board in due time. For transfers within the scope of the GDPR, the European Commission's standard contractual clauses (SCCs) apply, together with a transfer impact assessment and supplementary technical measures where necessary. The scope of transfers and recipient jurisdictions are set out in Annexes 1 and 2.

10.7 Data Subject requests. JUS. shall provide the Customer with reasonable technical and organisational assistance to enable it to respond to requests from Data Subjects under Article 11 of the KVKK and Articles 15– 22 of the GDPR. Requests received directly by JUS. shall be referred to the Customer without undue delay, to the extent permitted by Applicable Law.

10.8 Records and accountability. JUS. maintains records of its processing activities and shall provide, to a reasonable extent, the information the Customer requires for its personal data inventory, VERBİS registration, privacy notices and, where required, data protection impact assessments (DPIA).

10.9 Special categories of data. Document Data may by its nature contain special categories of Personal Data (health data, criminal convictions, biometric data and similar). The Customer represents that the conditions set out in Article 6 of the KVKK are satisfied for the processing of such data; JUS. applies the additional measures set out in Annex 2 in respect of such data.

10.10 End of processing. Upon the end of processing, JUS. shall, at the Customer's election, return or delete the Personal Data. Retention obligations arising under Applicable Law are reserved; in such case the data is retained only to the extent required by that obligation and with restricted access.

11. AI FEATURES AND THE NATURE OF THE OUTPUT

This Clause contains the most important use restrictions applicable to the Software. The Customer shall communicate this Clause to its Authorised Users before they use the AI Features.

11.1 Disclosure of AI use. The Software performs part of its functions by means of large language models. The model providers used and their hosting regions are listed in Annex 1. The Customer may configure which providers are enabled through the Order Form or the administration console.

11.2 Probabilistic nature. The AI Features operate by probabilistic methods. The Output may contain incorrect, incomplete, outdated, out-of-context or factually untrue information ("hallucinations"), and may generate non- existent legal provisions, case law, citations or sources. The same prompt may produce different Output at different times.

11.3 NOT LEGAL OR PROFESSIONAL ADVICE. The Software and the Output do not constitute legal opinion, legal advice, the practice of law, accountancy, audit, tax advice or any other regulated professional service. Use of the Software does not create an attorney–client relationship between JUS. and the Customer, and JUS. does not become the legal representative of the Customer or of the Customer's clients. Any part of the Output in the nature of a compliance, regulatory or risk assessment does not replace the final judgement of a competent professional.

11.4 Mandatory human review. Before using the Output in any document, contract, pleading, filing, compliance report or comparable instrument, the Customer shall have it reviewed, verified and corrected as necessary by a competent human being. The final decision on and responsibility for the use of the Output rests solely with the Customer.

11.5 Automated decision-making. The Software is not designed to be used to take decisions concerning Data Subjects based solely on automated processing that produce legal effects concerning them or otherwise significantly affect them. The Customer undertakes not to use the Software in that manner.

11.6 Originality of Output. JUS. does not warrant that the Output is original, that it does not infringe third-party intellectual property rights, or that similar or identical Output will not be generated for other users. Similar prompts may produce similar Output for different Customers.

11.7 Prohibited AI uses. The Customer shall not use the AI Features to produce misleading or forged documents, to create official statements presented as human-authored in a way that misleads third parties, to engage in unlawful discrimination, to place individuals at an unfair disadvantage through profiling, or for any other purpose prohibited by Applicable Law.

11.8 Transparency obligations. When presenting Output to third parties, the Customer shall comply with the transparency and information obligations to which it is itself subject (including the relevant provisions of the EU Artificial Intelligence Act and equivalent legislation). JUS. shall provide reasonable technical documentation concerning the AI components of the Software on request.

11.9 Local (on-premise / private) model option. For sensitive categories of documents, the Customer may, where agreed in the Order Form, request that processing be carried out on the local language model infrastructure under JUS.'s control without transfer to third-party model providers. Functionality, accuracy and performance under this option may differ from those of third-party models, and JUS. shall not be liable for such differences.

11.10 Logging. For security and abuse-prevention purposes, JUS. retains transaction logs relating to the AI Features (metadata such as request time, user identifier, model identifier and token counts). Such logs are retained for the period specified in Annex 2 and with restricted access.

12. CONFIDENTIALITY

12.1 Definition. "Confidential Information" means any information disclosed by one Party to the other in written, oral, electronic or any other form which, by its nature or by reason of being marked as confidential, ought to be treated as confidential. Document Data and the Customer's client and business information constitute the Customer's Confidential Information; the source code, architecture, prompt templates, security configuration, pricing proposals and roadmap of the Software constitute JUS.'s Confidential Information.

12.2 Obligations. The receiving Party shall (a) use Confidential Information solely for the performance of this Agreement; (b) protect it with at least the degree of care it applies to its own information of a similar nature and in any event with reasonable care; and (c) disclose it only to personnel, advisers and Sub-processors who need to know it and who are bound by equivalent confidentiality obligations.

12.3 Exceptions. The confidentiality obligation does not apply to information that (a) is in the public domain; (b) becomes publicly available otherwise than through a breach by the receiving Party; (c) is independently developed by the receiving Party; or (d) is lawfully obtained from a third party without breach of any confidentiality obligation.

12.4 Compelled disclosure. Disclosures required by Applicable Law, court order or the request of a competent public authority do not constitute a breach. In such case the disclosing Party shall, to the extent legally possible and permitted, notify the other Party in advance, limit the disclosure to the minimum necessary and seek available protective measures.

12.5 Duration. Confidentiality obligations continue for five (5) years after termination or expiry of this Agreement and, in respect of trade secrets and Personal Data, indefinitely.

12.6 Return and destruction. Upon termination or at the request of the disclosing Party, the receiving Party shall return or destroy the Confidential Information and confirm this in writing on request. Retention obligations under Applicable Law and copies held in routine backups are reserved.

13. SUPPORT, SERVICE LEVELS AND UPDATES

13.1 Support. JUS. provides technical support to holders of paid licences on business days (excluding public holidays) between 09:00 and 18:00 (Türkiye time) via [email protected] and the other channels published in the Documentation.

13.2 Exclusions. Support does not cover the Customer's hardware and network infrastructure, faults in Microsoft products themselves, unauthorised modifications made by the Customer or third parties, use of the Software contrary to the Documentation, or requests for bespoke development.

13.3 Availability. JUS. targets availability of the Service of 99.5% measured per calendar month. Planned maintenance, force majeure, outages originating in the Microsoft platform and causes attributable to the Customer are excluded from that calculation. A binding service level commitment and associated service credits apply only where expressly agreed in the Order Form or in a separate Service Level Agreement.

13.4 Planned maintenance. JUS. shall, so far as practicable, carry out planned maintenance outside business hours and shall give reasonable advance notice of material interruptions.

13.5 Updates and changes. JUS. may update the Software and the Service in order to improve them, enhance security or comply with Applicable Law, and may add or modify functionality. Where an existing function will be materially adversely affected or removed, JUS. shall, so far as practicable, give at least thirty (30) days' notice. If such a change has a material adverse effect on the Customer, the Customer may terminate this Agreement within thirty (30) days of the notice and claim a pro-rata refund of fees for the unused period.

13.6 Supported versions. JUS. supports only the current version of the Software. The Customer shall apply updates within a reasonable time; JUS. shall not be liable for incompatibilities or security vulnerabilities arising from unpatched versions.

14. REPRESENTATIONS, WARRANTIES AND DISCLAIMER

14.1 Mutual representations. Each Party represents that it has the legal capacity and authority to enter into this Agreement, that this Agreement is valid and binding upon it, and that its performance does not breach Applicable Law or any other agreement to which it is a party.

14.2 Limited warranty. JUS. warrants that, during the Subscription Term, the Software will perform materially in accordance with the functions described in the Documentation. In the event of breach of this warranty, JUS.'s sole obligation and the Customer's sole remedy is for JUS. to remedy the non-conformity within a reasonable time, to provide a workaround, or, where neither is possible, to terminate this Agreement and refund the unused portion of the fees paid for the relevant period on a pro-rata basis.

14.3 Malicious code. JUS. represents that the Software contains no virus, backdoor, time bomb or similar malicious code knowingly introduced by it, and that it is scanned with current tools prior to distribution.

14.4 DISCLAIMER OF WARRANTIES. EXCEPT AS EXPRESSLY SET OUT IN CLAUSES 14.2 AND 14.3, AND TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE SOFTWARE AND THE SERVICE ARE PROVIDED "AS IS" AND "AS AVAILABLE". JUS. GIVES NO WARRANTY, EXPRESS OR IMPLIED, AS TO MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, UNINTERRUPTED OR ERROR-FREE OPERATION, THE CORRECTION OF ALL DEFECTS, OR THAT THE OUTPUT WILL BE ACCURATE, COMPLETE, CURRENT, ORIGINAL, COMPLIANT WITH APPLICABLE LAW OR CAPABLE OF ACHIEVING ANY PARTICULAR RESULT. THE CUSTOMER ACKNOWLEDGES THAT IT USES THE SOFTWARE HAVING ASSESSED ITS OWN BUSINESS RISK.

14.5 Free and trial versions. Free, trial, beta and preview versions are provided as is, without any warranty; Clause 14.2 does not apply to them and JUS.'s liability in respect of them is limited to the amount stated in Clause 15.2.

14.6 Consumer rights. Where the Customer qualifies as a consumer under Turkish Law No. 6502 on Consumer Protection, the rights conferred on the Customer by mandatory consumer legislation are reserved, and the limitations in this Clause do not affect those rights.

15. LIMITATION OF LIABILITY

15.1 Indirect losses. To the extent permitted by Applicable Law, neither Party shall be liable for loss of profit, loss of revenue, loss of business, loss of clients or customers, loss of goodwill, loss of or corruption of data, third- party claims, the missing of any limitation period or procedural deadline, or for any indirect, incidental, special or punitive damages.

15.2 Liability cap. JUS.'s total aggregate liability arising out of or in connection with this Agreement, on whatever basis, is limited to the total licence fees actually paid by the Customer during the twelve (12) months preceding the date on which the claim arose. In respect of free or trial use, that cap is limited to TRY [●].

15.3 Exclusions from the limitation. The limitations in Clauses 15.1 and 15.2 do not apply to (a) intent or gross negligence, to the extent that a limitation would be void under Article 115 of the Turkish Code of Obligations; (b) death or personal injury; (c) wilful breach of the confidentiality obligations in Clause 12; (d) infringement of the intellectual property rights referred to in Clause 8; (e) the indemnity obligations in Clause 16; and (f) the Customer's payment obligations.

15.4 Customer's sphere of responsibility. JUS. shall not be liable for loss arising from (a) use of the Output without human review; (b) Document Data having been obtained or uploaded unlawfully; (c) the Customer's breach of professional secrecy or sector-specific obligations; (d) compromise of account credentials attributable to the Customer; or (e) the Customer's use of the Software in breach of Clause 4.

15.5 Mitigation. The Party suffering loss shall take reasonable steps to mitigate it.

15.6 Time limit for claims. The Parties agree that claims arising under this Agreement must be notified to the other Party in writing within twelve (12) months of the claiming Party becoming aware of the event giving rise to the claim, failing which the claim shall lapse, without prejudice to mandatory limitation rules.

15.7 Basis of the bargain. The limitations in this Clause form an essential element of the commercial balance agreed between the Parties and apply to all claims, whether contractual, tortious or based on unjust enrichment.

16. INDEMNITIES

16.1 Indemnity by JUS. JUS. shall defend the Customer against any third-party claim alleging that the Customer's ordinary use of the Software infringes an intellectual property right valid in Türkiye or in the country in which the Customer operates, and shall pay the damages and legal costs finally awarded by a competent court, or any settlement amount approved by JUS.

16.2 JUS.'s remedies. In the event of such a claim, JUS. may, at its option, (a) modify the Software so that it is no longer infringing, (b) procure the necessary licence, or (c) if neither is commercially reasonable, terminate this Agreement and refund the fees for the unused period on a pro-rata basis.

16.3 Exclusions. The obligation in Clause 16.1 does not apply to claims arising from (a) modification of the Software by the Customer or a third party; (b) use of the Software contrary to the Documentation or this Agreement; (c) Document Data, Output or content supplied by the Customer; (d) combination of the Software with products or services not supplied by JUS.; or (e) the Customer's failure to apply an update.

16.4 Indemnity by the Customer. The Customer shall indemnify JUS. against loss arising from third-party claims alleging that (a) the Document Data or content supplied by the Customer infringes third-party rights or Applicable Law; (b) loss has been caused by the Customer's use of the Output; or (c) the Customer has breached Clause 4, 6 or 10.9.

16.5 Procedure. The Party claiming indemnity shall (a) notify the other Party in writing without undue delay upon becoming aware of the claim; (b) allow the indemnifying Party to control the defence; and (c) provide reasonable cooperation and the necessary information and documents. Any settlement entered into without the indemnifying Party's written consent releases it from its indemnity obligation. The indemnified Party may participate in the proceedings with separate counsel at its own cost.

17. THIRD-PARTY COMPONENTS AND INTEGRATIONS

17.1 Open-source components. The Software may include open-source components subject to their own licence terms. The relevant licence texts are made available in the Documentation or within the Software, and those licences prevail in respect of such components.

17.2 Model providers. The AI Features may use the services of the third-party model providers listed in Annex 1. JUS. enters into agreements with those providers securing the protection of Document Data and its exclusion from model training; JUS.'s liability to the Customer for the acts of Sub-processors continues in accordance with Clause 10.5.

17.3 Customer's own integrations. For third-party integrations activated at the Customer's request (document management systems, cloud storage, electronic signature and similar), the relevant third party's service and privacy terms apply between the Customer and that party. JUS. is not responsible for the operation or security of those services.

17.4 Microsoft. The interoperation of the Software with Microsoft products does not alter the Customer's agreements with Microsoft. Microsoft's terms of service and privacy policy apply between the Customer and Microsoft.

18. TERM, TERMINATION AND CONSEQUENCES

18.1 Term. This Agreement takes effect upon formation under Clause 2.2 and remains in force for the Subscription Term, including any renewals.

18.2 Termination for cause. Where a Party materially breaches this Agreement and fails to remedy the breach within thirty (30) days of written notice, the other Party may terminate this Agreement with immediate effect.

18.3 Immediate termination. JUS. may terminate this Agreement without notice period in the event of breach of (a) the licence restrictions in Clause 4, (b) intellectual property rights, or (c) the confidentiality obligations in Clause 12, and where the Customer suspends payments, becomes insolvent, applies for composition with creditors or is declared bankrupt.

18.4 Suspension. Where JUS. identifies a concrete and imminent threat to the security or integrity of the Service or to other customers, or where required by Applicable Law, it may suspend the Customer's access in whole or in part, subject to notifying the Customer without undue delay. Suspension shall be lifted as soon as the threat has been remedied.

18.5 Consequences of termination. Upon termination or expiry, all of the Customer's rights of use cease automatically; the Customer shall remove the Software from all devices and cease accessing the Service. All fees then due become immediately payable.

18.6 Data export and deletion. The Customer may export Document Data from the Service for thirty (30) days following the date of termination or expiry. At the end of that period access is closed and the Document Data is permanently deleted from production systems within ninety (90) days and from backups within a reasonable time thereafter. Deletion shall be confirmed in writing at the Customer's request. Retention obligations under Applicable Law are reserved.

18.7 Survival. Clauses 1 (Definitions), 4.2, 8, 9.2, 10.10, 12, 14.4, 15, 16, 20, 22 and 23, together with any other provision that by its nature is intended to survive, remain in force after termination or expiry.

19. LICENCE COMPLIANCE AUDIT

19.1 Audit right. During the Subscription Term and for one year following its end, JUS. may, no more than once per year and subject to at least fifteen (15) days' prior written notice, audit the Customer's use of the licence for compliance with this Agreement.

19.2 Conduct. Audits shall be conducted during business hours and in a manner that does not disrupt the Customer's operations beyond what is reasonable. Information accessible to JUS. during an audit is Confidential Information under Clause 12. JUS. shall not request access to the content of Document Data in the course of an audit.

19.3 Overuse. If an audit establishes that the licensed number of Seats has been exceeded, the Customer shall pay retrospectively for the excess use at list price. Where the excess exceeds 5%, the Customer shall also bear the costs of the audit.

20. EXPORT CONTROLS, SANCTIONS AND INTEGRITY

20.1 Export controls and sanctions. The Customer represents that it will not use the Software in breach of applicable export control and economic sanctions legislation, and that it will not provide access, directly or indirectly, to any person, entity or country subject to sanctions.

20.2 Anti-bribery. The Parties undertake to comply with applicable anti-bribery and anti-corruption legislation in their activities under this Agreement.

20.3 Competition. The Parties agree to comply with competition law and not to apply any provision of this Agreement in a manner that restricts competition.

21. FORCE MAJEURE

21.1 Events beyond the reasonable control of the Parties that prevent performance — including natural disaster, earthquake, fire, flood, epidemic, war, act of terrorism, mobilisation, civil unrest, general strike, cyber-attack, general failures of electricity or electronic communications infrastructure, widespread outages at a cloud service provider or in the Microsoft platform, and decisions of public authorities — constitute force majeure.

21.2 The affected Party shall notify the other without undue delay and shall use reasonable efforts to mitigate the effects. Performance of the affected obligations is suspended for the duration of the force majeure event.

21.3 Where a force majeure event continues for more than sixty (60) days, either Party may terminate this Agreement without liability. In that case the Customer may claim a pro-rata refund of fees for the unused period.

21.4 Force majeure does not relieve the Customer of payment obligations that have already fallen due.

22. GENERAL PROVISIONS

22.1 Assignment. The Customer may not assign this Agreement or any rights or obligations under it without JUS.'s prior written consent. JUS. may assign this Agreement, upon notice to the Customer, in connection with a merger, acquisition or transfer of all or part of its business.

22.2 Independence. The Parties are independent contracting parties. This Agreement does not create any partnership, joint venture, agency, representation or employment relationship between them.

22.3 Severability. If any provision is held invalid, unlawful or unenforceable, the validity of the remaining provisions is unaffected. The invalid provision shall be deemed replaced by a valid provision that most closely reflects the Parties' intention.

22.4 Waiver. Failure or delay in exercising a right does not constitute a waiver of it. A waiver is effective only if given in writing.

22.5 Entire agreement. This Agreement and its annexes constitute the entire agreement between the Parties on its subject matter and supersede all prior written and oral discussions, statements, proposals and agreements on that subject matter. Terms contained in the Customer's purchase order, standard purchasing conditions or similar documents that conflict with this Agreement do not apply unless expressly accepted in writing by JUS.

22.6 Amendments. JUS. may update this Agreement in response to changes in Applicable Law, product developments or operational requirements. The current text is published on JUS.'s website and notified to the Customer by e-mail or in-product notice. Changes take effect thirty (30) days after publication. Continued use of the Software after that period constitutes acceptance. If a change has a material adverse effect on the Customer, the Customer may terminate this Agreement within thirty (30) days and claim a pro-rata refund of fees for the unused period. For Enterprise Licences, the commercial terms agreed in an executed Order Form may not be varied unilaterally during the relevant Subscription Term.

22.7 Notices. Notices shall be given to JUS. at [email protected] and at the registered office stated above, and to the Customer at the e-mail address on its account record and the address in the Order Form. Notices given by e-mail are deemed served on the business day following dispatch. Notices of termination and indemnity claims shall additionally be given in writing (by notary, registered electronic mail (KEP) or recorded delivery post).

22.8 Language. This Agreement is executed in Turkish and English. In the event of any discrepancy between the texts, the Turkish text shall prevail.

22.9 Evidential agreement. The Parties agree that JUS.'s system, server and application logs, e-mail correspondence and electronic acceptance records shall constitute conclusive and binding evidence within the meaning of Article 193 of Turkish Law No. 6100 on Civil Procedure. This provision does not apply to the extent that it conflicts with mandatory consumer legislation where the Customer is a consumer.

22.10 Electronic signature and counterparts. Electronic acceptance of this Agreement or execution by means of a qualified electronic signature has the same legal effect as a wet-ink signature.

22.11 Headings. Clause headings are for convenience only and shall not affect interpretation.

23. GOVERNING LAW AND DISPUTE RESOLUTION

23.1 Governing law. This Agreement is governed by the laws of the Republic of Türkiye. The United Nations Convention on Contracts for the International Sale of Goods (CISG) does not apply.

23.2 Amicable resolution. The Parties agree to seek a resolution in good faith for a period of thirty (30) days before commencing proceedings. This does not prevent applications for interim injunctions or attachment orders.

23.3 Mediation. In commercial disputes, the provisions on mediation as a condition precedent to litigation under Turkish Law No. 6325 and Article 5/A of the Turkish Commercial Code No. 6102 are reserved.

23.4 Jurisdiction. The courts and enforcement offices of İstanbul Anadolu Courthouse have exclusive jurisdiction over disputes arising out of this Agreement.

23.5 Consumers. Where the Customer qualifies as a consumer, its right to apply to the consumer courts and consumer arbitration committees of its place of residence, and all other rights conferred by mandatory consumer legislation, are reserved.

23.6 Interim relief. In the event of infringement of intellectual property rights or Confidential Information, either Party may apply to any competent court for interim injunctive relief and the preservation of evidence.

24. EFFECTIVENESS

24.1 This Agreement, consisting of twenty-four (24) clauses and two (2) annexes, takes effect on the date on which any of the acts of acceptance set out in Clause 2.2 occurs.

Questions: [email protected] · +90 216 606 5877 · Kozyatağı Mah. Bayar Cad. Gülbahar Sok. Ege Yıldız Sitesi No: 15B/19, Kadıköy / İstanbul, Türkiye

ANNEX 1: SUB-PROCESSORS AND AI PROVIDERS

The following list sets out the Sub-processors for which the Customer grants general authorisation under Clause 10.5. The current list is published on JUS.'s website; changes are notified thirty (30) days in advance.

• Agreements with model providers secure the exclusion of data from model training and zero or minimal data retention terms.
• The Customer may restrict which model providers are enabled through the administration console or the Order Form, and may request that only the local model option be used.
• The legal mechanisms set out in Clause 10.6 apply to transfers to the European Union and the United States.

ANNEX 2: DETAILS OF PROCESSING

This Annex sets out the scope of the processing in accordance with Article 12 of the KVKK and Article 28(3) of the GDPR.