Microsoft 365, Entra ID & Azure Security,
Done Right.

SIEMSERVA END USER LICENSE AGREEMENT This End User License Agreement ("Agreement") is between the person or entity purchasing or downloading Siemserva ("you" or "Client") and Senserva, LLC, with its principal place of business at 4661 White Bear Parkway, St. Paul, MN 55110 (hereinafter, "Senserva"). Senserva and Client are collectively referred to as the "Parties." Effective Date: January 21, 2026 SENSERVA PROVIDES SIEMSERVA SOFTWARE SOLELY ON THE TERMS AND CONDITIONS SET FORTH IN THIS AGREEMENT. BY PURCHASING, DOWNLOADING, INSTALLING, OR USING SIEMSERVA IN ANY WAY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO ACCEPT THIS AGREEMENT ON YOUR OWN BEHALF OR IF CLIENT IS A CORPORATION, ORGANIZATION, OR OTHER LEGAL ENTITY, YOU HAVE THE RIGHT, POWER, AND AUTHORITY TO ENTER INTO THIS AGREEMENT ON BEHALF OF CLIENT. IF YOU DO NOT AGREE TO THESE TERMS, SENSERVA WILL NOT AND DOES NOT LICENSE SIEMSERVA TO YOU AND YOU MUST NOT DOWNLOAD, INSTALL, OR USE SIEMSERVA. AGREEMENT 1. License Grant and Types. 1.1. License Types. Siemserva is available under the following license types: (a) Annual License: A paid annual subscription license that grants access to Siemserva for a period of twelve (12) months, renewable annually. (b) Non-Profit License: A complimentary license available at no charge to qualified non-profit organizations with valid 501(c)(3) status or equivalent international non-profit designation, granted on an annual basis subject to verification of non-profit status. (c) One-Week License: A paid single-use license that grants access to Siemserva for one-time use with a seven (7) day grace period for completion of assessment activities. 1.2. Grant of License. Subject to the terms and conditions of this Agreement and payment of applicable fees (if any), Senserva hereby grants to Client, solely for Client's internal business purposes, a non-exclusive, non-transferable, non-sublicensable license to (a) install, access, download, use, and run Siemserva software on Client's devices for the purpose of conducting Microsoft 365 security assessments and generating security reports; and (b) prepare, reproduce, print, download, and use a reasonable number of copies of the generally available user documentation relating to Siemserva (including user manuals, operating manuals, and other instructions, specifications, documents, and materials provided by Senserva to Client) as may be necessary or useful for any use of Siemserva permitted under this Agreement. 1.3. Non-Profit License Requirements. To qualify for and maintain a Non-Profit License, Client must: (a) Provide valid documentation of 501(c)(3) status or equivalent international non-profit designation upon request; (b) Use Siemserva solely for the non-profit organization's internal security assessment purposes; (c) Not use Siemserva to provide commercial services to other entities; (d) Reverify non-profit status annually upon license renewal. Senserva reserves the right to convert a Non-Profit License to an Annual License if Client no longer qualifies as a non-profit organization or fails to provide requested verification documentation. 1.4. One-Week License Limitations. One-Week Licenses are subject to the following additional limitations: (a) Valid for one-time use for a single security assessment project or engagement; (b) License period of seven (7) days from the date of first installation or use to provide grace period for completing assessment activities; (c) Automatically expire after seven (7) days without further action required by either party; (d) Not available to clients who have previously used a One-Week License; (e) Cannot be renewed or extended; subsequent use requires purchase of an Annual License or qualification for a Non-Profit License. 2. Restrictions. Except as expressly permitted in this Agreement, Client must not: (a) copy, modify, reverse engineer, decompile, disassemble, or otherwise attempt to derive or gain access to the source code of Siemserva, or attempt to do so; (b) install or use any third-party software or technology in any way that would subject Senserva's intellectual property or technology to any other license terms; (c) work around any technical limitations in Siemserva; (d) use Siemserva for any unlawful purpose; (e) distribute, sublicense, rent, lease, or lend Siemserva, in whole or in part to any other person or entity (except for third party service providers or contractors that access Siemserva in the provision of services to Client), or use it to offer hosting services to a third party; (f) publish, or otherwise make available to any third party, any benchmark testing information or results relating to Siemserva; (g) use Siemserva for any function other than internal business use or provision of professional services to Client's customers without express written consent from Senserva; or (h) remove, obscure, or modify any copyright, trademark, or other proprietary notices contained in or displayed by Siemserva. 3. Intellectual Property Rights and Ownership. Rights to access or use Siemserva do not give Client any right to implement Senserva's patents or other intellectual property. All right, title, or interest in or to the copyrights, trademarks, patents, trade secrets and all other intellectual property rights in Siemserva are and shall remain with Senserva. Senserva may place copyright and/or proprietary notices, including hypertext links, within Siemserva indicating Senserva's proprietary interest therein. Client may not remove, obscure or modify such notices without Senserva's prior written permission. Client acknowledges and agrees that Siemserva is provided under license, and not sold, to Client. Client does not acquire any ownership interest in Siemserva under this Agreement, or any other rights thereto, other than to use the same in accordance with the license granted and subject to all terms, conditions, and restrictions under this Agreement. Senserva reserves and shall retain its entire right, title, and interest in and to Siemserva and all intellectual property rights arising out of or relating to Siemserva, except as expressly granted to the Client in this Agreement. Client shall safeguard Siemserva from infringement, misappropriation, theft, misuse, or unauthorized access. 4. Third-Party Materials. Siemserva may include software, content, data, or other materials, including related documentation, that are owned by persons other than Senserva and that are provided to Client on terms that are in addition to and/or different from those contained in this Agreement ("Third-Party Components"). Any such Third-Party Components are licensed to Client under the terms of the applicable third-party licensor. 5. Use of Microsoft Graph APIs. Siemserva uses Microsoft Graph APIs to collect security configuration data from Client's Microsoft 365 tenant for the purpose of security assessment and compliance validation. Senserva does not store, transmit, or remove this data from Client's environment, nor is it used for any purpose other than generating security assessment reports for Client's use. Siemserva operates with read-only permissions and makes no modifications to Client's Microsoft 365 configurations. Senserva may use documented or undocumented Microsoft APIs to provide comprehensive security assessment coverage and framework controls mapping. 6. Data Privacy and Security. Siemserva operates locally on Client's devices and does not transmit security assessment data to Senserva or any third party. All security scans, analysis, and report generation occur on Client's local system. Assessment reports are stored locally on Client's devices and Client maintains full control over distribution and storage of such reports. Senserva may collect anonymized usage statistics (such as feature usage, error logs, and performance metrics) for the purpose of improving Siemserva, but such data collection does not include any Client security findings, configurations, or identifiable information from Client's Microsoft 365 environment. 7. End Users. Client will control access to and use of Siemserva by end users and is responsible for any use of Siemserva that does not comply with this Agreement. Specifically, and without limiting the generality of the foregoing, Client is responsible and liable for all actions and failures to take required actions with respect to Siemserva by its authorized users or by any other person to whom Client or an authorized user may provide access to or use of Siemserva, whether such access or use is permitted by or in violation of this Agreement. 8. Fees and Payments. 8.1. Annual License Fees. Annual License fees are payable in advance for each twelve (12) month license period. All fees are non-refundable except as may be expressly set forth in Section 11 (Limited Warranties). Senserva may increase Annual License fees upon thirty (30) days' prior written notice to Client, with such increases effective upon the next license renewal date. 8.2. One-Week License Fees. One-Week License fees are payable in advance as a one-time payment. All fees are non-refundable except as may be expressly set forth in Section 11 (Limited Warranties). One-Week Licenses are designed for single-use security assessment projects with a seven (7) day grace period for completion. 8.3. Non-Profit License. Non-Profit Licenses are provided at no charge to qualified non-profit organizations. Senserva reserves the right to verify non-profit status at any time and to convert Non-Profit Licenses to Annual Licenses if Client no longer qualifies or fails to provide requested verification. 8.4. Future Updates. Updates and enhancements to Siemserva, including additional framework support (MCSB, MITRE ATT&CK), web interface, and mobile applications, are included in the Annual License and Non-Profit License at no additional charge. One-Week License holders may access updates available during their seven (7) day license period but are not entitled to future updates released after license expiration. 9. Term & Termination. 9.1. Term. (a) Annual Licenses commence on the date of purchase and continue for an initial term of twelve (12) months ("Initial Term"), automatically renewing for successive twelve (12) month periods ("Renewal Terms") unless terminated in accordance with this Agreement. (b) Non-Profit Licenses commence on the date of approval and continue for twelve (12) months, subject to annual reverification of non-profit status and renewal at Senserva's discretion. (c) One-Week Licenses commence on the date of first installation or use and expire automatically after seven (7) days. One-Week Licenses are non-renewable and intended for single-use security assessment projects only. 9.2. Termination by Client. Client may terminate an Annual License by providing written notice to Senserva at least thirty (30) days prior to the end of the then-current term. No refunds will be provided for early termination. 9.3. Termination by Senserva. Senserva may terminate this Agreement: (a) For Annual Licenses, by providing sixty (60) days' written notice to Client; (b) For Non-Profit Licenses, immediately upon determination that Client no longer qualifies as a non-profit organization or upon Client's failure to provide requested verification; (c) For any license type, effective upon written notice to Client if Client materially breaches this Agreement and such breach: (i) is incapable of cure; or (ii) being capable of cure, remains uncured thirty (30) days after Senserva provides written notice thereof. 9.4. Termination for Insolvency. Either party may terminate effective immediately if the other party files, or has filed against it, a petition for voluntary or involuntary bankruptcy or pursuant to any other insolvency law, makes or seeks to make a general assignment for the benefit of its creditors or applies for, or consents to, the appointment of a trustee, receiver, or custodian for a substantial part of its property. 9.5. Effect of Termination. Upon termination or expiration of this Agreement, the license granted hereunder shall also terminate, and Client shall cease using Siemserva and shall uninstall all copies of Siemserva from Client's devices. No termination shall affect Client's obligation to pay all fees that may have become due before such termination, or entitle Client to any refund, except as explicitly provided in Section 11 (Limited Warranties). The provisions of this Agreement that, by their nature, should survive termination or expiration of this Agreement, will do so, including without limitation Sections 3, 10, 11, 12, 13, and 14. 10. Collection and Use of Information. Client acknowledges that Senserva may, directly or indirectly, collect and store anonymized information regarding use of Siemserva, including but not limited to feature usage, error logs, crash reports, and performance metrics. Such information does not include any security findings, configurations, or identifiable data from Client's Microsoft 365 environment. Client agrees that Senserva may use such anonymized information for any purpose related to improving Siemserva, including but not limited to: improving the performance of Siemserva or developing updates; verifying Client's compliance with the terms of this Agreement and enforcing Senserva's rights, including all intellectual property rights in and to Siemserva. 11. Limited Warranties. Senserva warrants that Siemserva will substantially contain the functionality described in the then-current user documentation, and when properly installed according to specifications, will substantially perform in accordance therewith for a period of thirty (30) days from the date of purchase or first use ("Warranty Period"). The foregoing warranties will not apply and will become null and void if Client (including any authorized user or any other person provided access to Siemserva by Client or any authorized user): (i) installs or uses Siemserva on or in connection with any hardware or software not meeting the minimum system requirements specified by Senserva; (ii) modifies or damages Siemserva; or (iii) misuses Siemserva. Subject to Client's prompt written notification to support@senserva.com of a failure of the foregoing warranty during the Warranty Period, Senserva's sole liability (and Client's sole remedy) will, at Senserva's option, be to: (i) repair or replace Siemserva, provided that Client provides Senserva with all information Senserva reasonably requests to resolve the reported failure, including sufficient information to enable Senserva to recreate such failure; or (ii) for Annual Licenses and One-Week Licenses, refund the license fee paid (or for Annual Licenses, a pro-rata portion based on the unused portion of the license term), subject to Client's ceasing all use of Siemserva and uninstalling all copies from Client's devices. EXCEPT AS EXPRESSLY SET FORTH ABOVE, SIEMSERVA IS PROVIDED "AS IS" AND WITH ALL FAULTS AND DEFECTS WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED UNDER APPLICABLE LAW, SENSERVA, ON ITS OWN BEHALF AND ON BEHALF OF ITS AFFILIATES AND ITS AND THEIR RESPECTIVE LICENSORS AND SERVICE PROVIDERS, EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, WITH RESPECT TO SIEMSERVA, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND WARRANTIES THAT MAY ARISE OUT OF COURSE OF DEALING, COURSE OF PERFORMANCE, USAGE, OR TRADE PRACTICE. WITHOUT LIMITATION TO THE FOREGOING, SENSERVA PROVIDES NO WARRANTY OR UNDERTAKING, AND MAKES NO REPRESENTATION OF ANY KIND THAT SIEMSERVA WILL MEET CLIENT'S REQUIREMENTS, ACHIEVE ANY INTENDED RESULTS, BE COMPATIBLE, OR WORK WITH ANY OTHER SOFTWARE, APPLICATIONS, SYSTEMS, OR SERVICES, OPERATE WITHOUT INTERRUPTION, MEET ANY PERFORMANCE OR RELIABILITY STANDARDS OR BE ERROR FREE, OR THAT ANY ERRORS OR DEFECTS CAN OR WILL BE CORRECTED. SIEMSERVA PROVIDES SECURITY ASSESSMENT AND COMPLIANCE FRAMEWORK MAPPING CAPABILITIES BUT DOES NOT GUARANTEE COMPLIANCE WITH ANY SECURITY FRAMEWORK, REGULATION, OR STANDARD. CLIENT IS SOLELY RESPONSIBLE FOR ENSURING COMPLIANCE WITH APPLICABLE SECURITY REQUIREMENTS, REGULATIONS, AND STANDARDS. SIEMSERVA'S SECURITY FINDINGS AND REMEDIATION RECOMMENDATIONS ARE PROVIDED FOR INFORMATIONAL PURPOSES ONLY AND DO NOT CONSTITUTE LEGAL, COMPLIANCE, OR SECURITY ADVICE. 12. Limitation of Liability. IN NO EVENT WILL SENSERVA OR ITS AFFILIATES, LICENSORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, OFFICERS, OR DIRECTORS (COLLECTIVELY, "SENSERVA PARTIES") HAVE LIABILITY FOR ANY DIRECT, CONSEQUENTIAL, SPECIAL, LOST PROFIT, PUNITIVE OR RELIANCE DAMAGES, OR INDIRECT LOSS FOR DAMAGES, REGARDLESS OF WHETHER SUCH DAMAGES ARE BASED ON CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR ANY OTHER THEORY OR FORM OF ACTION OR WHETHER THE SENSERVA PARTIES OR CLIENT KNEW OR SHOULD HAVE KNOWN OF THE LIKELIHOOD OF SUCH DAMAGES IN ANY CIRCUMSTANCES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE AGGREGATE LIABILITY OF SENSERVA PARTIES EXCEED THE AMOUNT PAID BY CLIENT FOR SIEMSERVA IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY. FOR NON-PROFIT LICENSES PROVIDED AT NO CHARGE, SENSERVA'S MAXIMUM AGGREGATE LIABILITY SHALL NOT EXCEED ONE HUNDRED DOLLARS ($100). THE PARTIES AGREE THAT THE LIMITATION AND EXCLUSIONS OF LIABILITY AND DISCLAIMERS SPECIFIED IN THIS AGREEMENT WILL SURVIVE AND APPLY EVEN IF FOUND TO HAVE FAILED OF THEIR ESSENTIAL PURPOSE. THE LIMITATIONS SET FORTH IN THIS SECTION SHALL APPLY EVEN IF CLIENT'S REMEDIES UNDER THIS AGREEMENT FAIL OF THEIR ESSENTIAL PURPOSE. 13. Indemnification. Client agrees to indemnify, defend, and hold harmless Senserva Parties from and against any and all losses, damages, liabilities, deficiencies, claims, actions, judgments, settlements, interest, awards, penalties, fines, costs, or expenses of whatever kind, including reasonable attorneys' fees, arising from or relating to Client's use or misuse of Siemserva or Client's breach of this Agreement, including but not limited to any actions taken based on Siemserva's security findings or recommendations. 14. Export Control. Siemserva may be subject to US export control laws. Client shall not, directly or indirectly, export, re-export, or release Siemserva to, or make Siemserva accessible from, any jurisdiction or country to which export, re-export, or release is prohibited by law, rule, or regulation. Client shall comply with all applicable federal laws, regulations, and rules, and complete all required undertakings (including obtaining any necessary export license or other governmental approval), prior to exporting, re-exporting, releasing, or otherwise making Siemserva available outside the US. 15. US Government Rights. Siemserva includes commercial computer software, as such term is defined in 48 C.F.R. §2.101. Accordingly, if Client is the US Government or any contractor therefor, Client shall receive only those rights with respect to Siemserva as are granted to all other end users under license, in accordance with (a) 48 C.F.R. §227.7201 through 48 C.F.R. §227.7204, with respect to the Department of Defense and their contractors, or (b) 48 C.F.R. §12.212, with respect to all other US Government licensees and their contractors. 16. Governing Law and Venue. The validity, interpretation, construction, performance, enforcement, and remedies of or relating to this Agreement, and the rights and obligations of the Parties to this Agreement, shall be governed and construed in all respects by the substantive laws of the State of Minnesota (without regard to the conflict of laws rules or statutes of Minnesota or any other jurisdiction that might result in the application of other law). Any legal action or proceeding arising under this Agreement will be brought exclusively in the federal or state courts located in Hennepin County, Minnesota, and the parties irrevocably consent to the personal jurisdiction and venue therein. 17. Force Majeure. Senserva will not be responsible or liable to Client, or deemed in default or breach hereunder by reason of any failure or delay in the performance of its obligations hereunder where such failure or delay is due to strikes, labor disputes, civil disturbances, riot, rebellion, invasion, epidemic, hostilities, war, terrorist attack, embargo, natural disaster, acts of God, flood, fire, sabotage, fluctuations or non-availability of electrical power, heat, light, air conditioning, or Client equipment, loss and destruction of property, or any other circumstances or causes beyond Senserva's reasonable control. 18. Notice. All notices and other communications required or permitted to be given hereunder shall be in writing and shall be deemed to have been duly given if delivered personally, by email, or mailed first class, postage prepaid to: Senserva, LLC, 4661 White Bear Parkway, St. Paul, MN 55110, Email: info@senserva.com, or to such other addresses as one party may have furnished to the other in writing. 19. Waiver. Failure by either party at any time to enforce any obligation by the other party to claim a breach of any term of this Agreement or to exercise any power agreed to hereunder will not be construed as a waiver of any right, power or obligation under this Agreement, will not affect any subsequent breach and will not prejudice either party in regard to any subsequent action. 20. Assignment. Client shall not assign or otherwise transfer any of its rights, or delegate or otherwise transfer any of its obligations or performance, under this Agreement, in each case whether voluntarily, involuntarily, by operation of law, or otherwise, without Senserva's prior written consent. For purposes of the preceding sentence, and without limiting its generality, any merger, consolidation, or reorganization involving Client will be deemed to be a transfer of rights, obligations, or performance under this Agreement for which Senserva's prior written consent is required. Any purported assignment, delegation, or transfer in violation hereof is void. Senserva may freely assign or otherwise transfer all or any of its rights, or delegate or otherwise transfer all or any of its obligations or performance, under this Agreement without Client's consent. This Agreement is binding upon and inures to the benefit of the parties hereto and their respective permitted successors and assigns. 21. Complete Agreement. This Agreement constitutes the entire agreement of the Parties with respect to Siemserva. There are no other agreements, either express or implied, with regard to this subject matter. This Agreement may only be amended, modified, or supplemented by an agreement in writing signed by each party hereto. This Agreement is for the sole benefit of the parties hereto and their respective successors and permitted assigns and nothing herein, express or implied, is intended to or shall confer upon any other person any legal or equitable right, benefit, or remedy of any nature whatsoever, under or by reason of this Agreement. In the event that any of the terms of this Agreement are in conflict with any applicable rule of law or statutory provision or otherwise unenforceable under applicable law or regulation, such terms shall be deemed stricken from this Agreement, but such invalidity or unenforceability shall not invalidate any of the other terms of this Agreement and this Agreement shall continue in full force and effect. 22. Updates and Modifications. Senserva reserves the right to provide updates, upgrades, bug fixes, patches, and other modifications to Siemserva. Client acknowledges that such updates may be automatically downloaded and installed. Client may elect to disable automatic updates through Siemserva settings, but doing so may limit functionality or security. Any updates to Siemserva shall be deemed part of Siemserva and subject to all terms and conditions of this Agreement. 23. Technical Support. Senserva shall provide email-based technical support for Siemserva at support@senserva.com. Support is defined as response by Senserva to electronic contacts initiated by Client to address the performance and functionality of Siemserva. Senserva will use commercially reasonable efforts to respond to support requests within two (2) business days. Support does not include assistance with Client's Microsoft 365 environment configurations, compliance framework requirements, or security remediation implementation. Technical support is provided for Annual Licenses, One-Week Licenses, and Non-Profit Licenses during the active license term. 24. Acknowledgment. CLIENT ACKNOWLEDGES THAT IT HAS READ THIS AGREEMENT, UNDERSTANDS IT, AND AGREES TO BE BOUND BY ITS TERMS AND CONDITIONS. CLIENT FURTHER AGREES THAT THIS AGREEMENT IS THE COMPLETE AND EXCLUSIVE STATEMENT OF THE AGREEMENT BETWEEN THE PARTIES. For questions regarding this Agreement, please contact: Senserva, LLC 4661 White Bear Parkway St. Paul, MN 55110 Email: info@senserva.com (c) 2026 Senserva, LLC. All rights reserved. Siemserva is a trademark of Senserva, LLC.