Terms of Service

These Terms of Service (the “Terms”) are between the health institution executing and agreeing to an Order Form describing the Services and which is identified in such Order Form (as these terms are defined below) (the “Health Institution”) and Stenoa Inc., located at 800, Square Victoria, Suite 3500, Montréal, Québec, H4Z 1E9, Canada (“Stenoa”, “we,” “our,” or “us”).

These Terms are effective upon the execution of a corresponding Order Form (as defined below), and continue in full force until terminated in accordance with these Terms.

The person executing an Order Form on behalf of a Health Institution represents and warrants that they are authorized to bind the Health Institution, and that they have the authority to enter into the Agreement (as defined below) on behalf of the Health Institution.

1. Definitions

In this Agreement, the capitalized terms have the meanings set forth below, unless indicated otherwise:

• “Aggregated Data” means the Health Institution Data that is aggregated with other data or datasets in a manner that a) do not allow for the identification of Patients or End Users and b) does not allow for the identification of the Health Institution. Aggregated Data is not specific to the Health Institution’s activities or use of the Services and no longer constitute Confidential Information.
• “Agreement” means these Terms, along with any Order Forms, Change Orders, amendments, and addendums which are executed by the parties from time to time.
• “Anti-Spam Laws” means CASL and the regulations thereunder and any other Applicable Laws that regulate the same or similar subject matter.
• “Applicable Laws” means any applicable laws to the parties, the Services, the health services or the performance of this Agreement, including, without limitation, laws, regulations, rules, orders, decrees, ethical obligations, binding codes of conducts, by-laws and mandatory guidance.
• “Beta Services” means any Services which are made available to the Health Institution, with or without Fees, pursuant to an Order Form or otherwise, and which are identified as early access, free trial, beta, or otherwise tentative Services.
• “CASL” means Canada’s Anti-Spam Legislation (Statutes of Canada 2010, c 23) and its associated regulations.
• “Change Order” means an electronic record or procurement document describing changes to an Order Form, including modifications to the Fees, Subscription Term or otherwise as agreed upon between the Parties. A Change Order is effective once executed by both Parties, including by digital acceptance or by the issuance of a purchase order corresponding to the Change Order issued by Stenoa.
• “Confidential Information” means all information, regardless of format, disclosed by a party (the “Disclosing Party”) to the other party (the “Receiving Party”), whether directly or indirectly, of a business, financial, scientific, or technical nature, and includes, without limitation, all information relating to Technologies, designs, inventions, concepts, methods, processes, techniques, know-how, trade secrets, creative works, patents or patent applications, models, drawings, data, prototypes, blueprints, business plans, pending projects, plans, studies, research and development, list of customers, vendor lists, financial statements, strategy, marketing and development plans, information relating to prices, costs and profits, information relating to current, future or eventual agreements, as well as any other information that a reasonable business person would regard as confidential. Confidential Information shall also include all documents prepared by the Receiving Party which contain, reflect or are based upon, in whole or in part Confidential Information.
• “Content” means any data, information, text, images, videos, or other content that End Users upload or submit through the Services.
• “De-identified Data” means Personal Data which have been de-identified in accordance with Applicable Laws so that it is no longer possible to re-identify such individuals. For the avoidance of doubts, De-identified Data shall be deemed to be the Health Institution Data.
• “End Users” means the Health Institution’s hub and spoke employees, agents and other health professionals, or care providers who are authorized by the Health Institution to use the Services pursuant to this Agreement.
• “Fees” means any fees which are due by the Health Institution to Stenoa pursuant to an Order Form, as modified from time to time by a Change Order, including any costs, expenses, fees and taxes which Stenoa is required to invoice to the Health Institution under Applicable Laws, if any.
• “Health Institution Data” means the Personal Data, PHI, Content, and De-identified Data which constitute the Health Institution’s Confidential Information and which Stenoa is collecting, using or disclosing as part of the Services, and pursuant to this Agreement.
• “Intellectual Property” means any and all intellectual property, including without limitation, works, inventions (whether patentable or not), discoveries, improvements, trade secrets, know-how, scientific formulae, data, information, images, reports, results, analysis, software, models, research and development information, technical information, prototypes, specifications, patterns, drawings, algorithms, products, compositions, processes and protocols, methods, tests, devices, computer programs, trade-marks and any and all proprietary rights provided under patent law, copyright law, trademark law, design patent or industrial design law, semiconductor chip or mask work law, or any other statutory provision or civil or common law principles applicable to the protection of intangible proprietary information or rights, including trade secret law, which may provide a right in any of the foregoing as well as any and all applications, registrations or other evidence of a right in any of the foregoing.
• “Intended Purposes” means the use of the Services in a medical or clinical setting to manage the care coordination and communications in relation to the medical treatment of acute coronary syndrome Patients or any compatible uses, which excludes domestic, and consumer uses. The Services are intended to be operated by a Health Institution and qualified professionals.
• “Mobile App” means the mobile application which Stenoa makes available to End Users through a download in Apple’s App Store or Google’s Playstore, or as otherwise specified. Once authorized to use the Services by Health Institution, End Users must accept the Terms of Use which contain their license to use and install the Mobile App, along with any terms and conditions relating to the use of the Mobile App.
• “Order Form” means an electronic record or procurement document describing the Services to be provided to Health Institution, along with the Fees, the Subscription Term and any additional terms that the parties agree upon for the performance of the Services. An Order Form is effective once issued by Stenoa and accepted by Health Institution upon the date agreed to, including but not limited to electronic indication of acceptance, signature, or by the issuance of a purchase order by the Health Institution.
• “Patient” means any patient whose PHI is processed by Stenoa as part of the Services, and as a result of the Health Institution’s use of the Services.
• “Personal Data” means any data, metadata, or information that would meet the definition of “personal information” or “personal data” (or similar nomenclature) under Applicable Laws and that is submitted through the Services by End Users, including any PHI, or that relates to End Users’ use of the Services.
• “Personal Health Information” (or “PHI”) means any Personal Data which relates to the health of a Patient, to a Patient’s medical conditions, or medical records in connection with the Services.
• “Security Breach” means the unauthorized access, use or disclosure, or loss of Health Institution Data resulting from a breach of security safeguards, or otherwise as defined under Applicable Laws.
• “Services” means the Mobile App, the web application platform, technical support and related services which are provided by Stenoa pursuant to the Agreement. The Services also include required licenses to the Stenoa Technologies, such as the API, which are used to integrate and connect the Services with third-party applications, or with the Health Institution’s own services and systems.
• “Stenoa Technologies” means the Web App, Mobile App, the Services, any interfaces, application programming interface (“API”) technologies, or any underlying technologies, software, application, codes, algorithms, models or otherwise, which are used, developed, licensed, or otherwise owned by Stenoa or its licensors.
• “Subscription Term” means the term during which the Services are made available to the Health Institution in accordance with an Order Form, as modified by a Change Order from time to time.
• “Web App” means the web application which Stenoa makes available to End Users once authorized to use the Services by Health Institution, End Users must accept the Terms of Use which contain their license to use the Web App, along with any terms and conditions relating to the use of the Web App.

2. Provision of the Services

2.1. Procurement. Stenoa will provide the Services described and agreed upon in an Order Form. An Order Form may only be modified by a Change Order. In case of conflicts between the respective terms of these documents and the remaining of the Agreement, such conflict will be resolved in the following order of precedence: a) Change Order; b) Order Form and c) the remaining of this Agreement.

2.2. End Users. Stenoa will create a workspace within the Services interface for the Health Institution (a “Workspace”), which will be managed and customizable by a single user (the “Workspace Owner”). Only the Workspace Owner may delete the Workspace, delete or export Health Institution Data, transfer Workspace ownership, or modify the Workspace settings. The Workspace Owner will be provided with provisioning rights to assign management rights and manage administrators of the Workspace (each, a “Workspace Admin”). The Workspace Admins are responsible for managing access and credentials for other End Users, including for removing access to the Services as needed. End Users are solely responsible for ensuring the confidentiality of their credentials. All actions taken through End Users’ accounts will be deemed to be actions of the Health Institution.

2.3. Notifications and Alerts. The Services include alert functionalities, such as critical and noncritical push notifications. The Health Institution and End Users are solely responsible for a) activating and accepting notifications or alerts as required based on their use of the Services; b) verifying any notifications or alerts, including by monitoring any relevant changes, modifications or content which is posted through the Services. The Health Institution will implement a contingency plan, in conjunction with Stenoa, in the event of the unavailability of the Services, such as in the event of a server failure, or as required to ensure that notifications and alerts are received. The Health Institution is responsible for testing out-of-band communications and maintaining these plans accurate and in effect. Stenoa will provide reasonable support to Health Institution to ensure contingency plans are in place, and will participate in testing as required.

2.4. Beta Services. The Services may include access to Beta Services. The Beta Services are optional and use or access to the Beta Services is at the Health Institution’s sole risks, unless agreed otherwise. Notwithstanding anything to the contrary, the Beta Services are provided “as is” and “as available,” and may contain errors, bugs, as well as algorithms in training that can still contain biases or which may lack accuracy. Notwithstanding anything to the contrary, Stenoa makes no promises that future versions of Beta Services will be released or will be available under the same commercial or other terms. Stenoa may terminate Health Institution’s right to use any Beta Services at any time for any reason or no reason in Stenoa’s sole discretion, without liability of any kind.

2.5. Free Trial. If the Health Institution subscribes to a free trial through Beta Services, Stenoa will provide access to all or part of the Services available to the Health Institution on a trial basis, free of charge, until the earlier of a) the end of the free trial period for which the Health Institution is registered or is registering to access the applicable Services through an Order Form or b) the start date of the Subscription Term for the Services.

2.6. Technical Support. During the Subscription Term, Stenoa will provide technical support services by email, on a twenty-four (24) hours basis per day, seven (7) days per week basis. Upon reception of a support request, Stenoa will assign a criticality rating to such request in accordance with the table set forth below.

2.7. Availability. During the Subscription Term, the Services will be available on a twenty-four-hour basis, every day of the year, for an average monthly uptime of 99.5% which shall be calculated as follows:

• (Number of minutes the Services were available during the month + Scheduled Downtime) / (Number of minutes in each month) x 100% = uptime.
• The Services shall be considered available unless a critical portion of the Services is unavailable, meaning that they cannot be accessed or used in the manner substantially described in the Documentation. Notwithstanding the foregoing, the Services shall not be considered unavailable if the unavailability is due to circumstances beyond the reasonable control of a party, including, without limitation a) an electrical or Internet failure; b) the acts or omissions of the Health Institution and any of its service providers or agents; c) any suspension due to a breach of this Agreement; d) any use of the Services in violation of this Agreement; e) a force majeure event, as described below, and f) any emergency security patches which must be deployed, with or without prior notification to the Health Institution. For the avoidance of doubts, Scheduled Downtime shall not be considered as an unavailability of the Services.
• “Scheduled Downtime” means up to four (4) hours per month which is reserved by Stenoa to conduct maintenance on the Services. Stenoa will make commercially reasonable efforts to provide a prior notice to the Health Institution of Scheduled Downtime at least seventy-two (72) hours before such Scheduled Downtime, and to perform the Scheduled Downtime during off-peak hours, where possible.

3. Licenses

3.1. Use of Services. During the Subscription Term, and subject to the terms of this Agreement, Stenoa hereby grants the Health Institution a worldwide, non-exclusive, non-transferable (except as set forth herein), revocable (but only as set forth herein) and non-sublicensable (except to End Users as set forth herein) right and license to access and use the Services (and to allow End Users to access and use the Services) for the Intended Purposes, and in accordance with this Agreement.

3.2. Stenoa Technologies. During the Subscription Term, and subject to the terms of this Agreement, Stenoa hereby grants to the Health Institution a limited, non-exclusive, non-transferable (except as set forth herein), non-sublicensable (except to End Users) and revocable (but only as set forth herein) license and right to download, install, use, reproduce and copy the Stenoa Technologies solely for the Intended Purposes, in accordance with the Agreement. The right to make copies of the Stenoa Technologies shall be limited to copies which are strictly required as part of the performance of the Services, or for business continuity purposes, as part of secured back-ups. The Health Institution agrees that End Users are required to accept the Terms of Use prior to installing and using any Stenoa Technologies, such as the Mobile App. The Terms of Use contain End Users’ license to download and use the Mobile App in accordance with the foregoing, and are in lieu of any native license agreement, such as Apple’s End User License Agreement.

3.3. Reports. During the Subscription Term, and subject to the terms of this Agreement, Stenoa hereby grants to the Health Institution the ability to generate, access, and store reports and business intelligence outputs based on reporting functionalities (the “Reports”). Stenoa hereby grants the Health Institution a perpetual, worldwide, non-exclusive, non-transferable and sublicensable right and license to use, download, access, and translate the Reports for its internal business and compliance purposes. For the avoidance of doubts, the Health Institution may not sell or commercialize the Reports.

3.4. Health Institution Data. During the Subscription Term, the Health Institution hereby grants to Stenoa a worldwide, non-exclusive, non-transferable (except as set forth herein), and non-sublicensable (except as required to provide the Services) and non-revocable (except as set forth herein) right and license to access, modify, use and disclose the Health Institution Data solely as required to provide the Services, produce or generate Aggregated Data, and otherwise as authorized under this Agreement. Stenoa may use, process, store, disclose, transfer, transmit, copy, modify and display the Aggregated Data for any purpose and without restriction or obligation to the Health Institution of any kind. Aggregated Data is not Confidential Information and is not Health Institution Data. Notwithstanding anything to the contrary in this Agreement, as between Stenoa and the Health Institution, the Health Institution will be responsible for: (i) the accuracy, quality and legality of the Health Institution Data, the means by which the Health Institution acquired the Health Institution Data, the Health Institution’s use of applicable Health Institution Data within the Services, and the interoperation of any third party products or systems with which the Health Institution Data or any other assets of the Health Institution uses the Services; (ii) providing, at its own expense, all network access to the Services, including, without limitation, acquiring, installing and maintaining all telecommunications equipment, hardware, software and other equipment as may be necessary to connect to, access and use the Services or any Stenoa Technology; (iii) properly configuring and using the Services and taking its own steps to maintain appropriate security, protection and backup of its infrastructure (including without limitation any databases, servers, and any other protocol) which may include the use of encryption technology to protect such infrastructure from unauthorized access and routine archiving of such infrastructure; (iv) using the Services in accordance with this Agreement and Applicable Laws; (v) ensuring that only permitted users access and use the Services pursuant to this Agreement; and (vi) ensuring that none of the permitted users bring or maintain any Claim against Stenoa, its shareholders, employees, officers, directors, Affiliates, agents, contractors, successors, and assigns in respect of any matter related to or in connection with the subject matter of this Agreement. The Health Institution will be liable for any breach by a permitted user of this Agreement.

3.5. De-identified Data. During the Subscription Term, the Health Institution hereby grants to Stenoa a worldwide, exclusive, non-transferable (except as set forth herein), and non-sublicensable (except as required to provide the Services), and non-revocable (except as set forth herein) right and license to aggregate, modify, use and disclose the De-identified Data a) to provide the Services; b) to improve the Services; c) to conduct research and development and d) to comply with Applicable Laws, or otherwise as permitted under this Agreement.

4. Mobile App

4.1. Relationship. The Health Institution agrees and understands that the licenses to the Mobile App and any other aspects of this Agreement are between the Health Institution and Stenoa, and not with Apple or any other App Store or marketplace from which the Health Institution, or any of its End Users download the Mobile App from (each a “Marketplace”). The Marketplace has additional terms and conditions which may apply to the Health Institution’s use of the Mobile App (the “Usage Rules”). The Health Institution represents and warrants that it will comply, and ensure that End Users comply with, such Usage Rules. Notwithstanding anything to the contrary, in relation to the use of the Mobile App, the Usage Rules will have precedence over this Agreement. The Health Institution agrees and understands that Stenoa, not Apple (Apple Inc.) or Google (Google LLC), is responsible for the Mobile App, and its maintenance, through the technical support set forth herein. The following additional covenants shall be applicable to the Health Institution’s use of the Mobile App:

• Stenoa may issue updates, new releases, or upgrades for its Mobile App from time to time (the “Updates”). Updates are provided at Stenoa’s sole discretion, and may include bug fixes, security updates, new features, and enhancements to existing features. If Stenoa makes an Update available, the Health Institution is solely responsible for updating the Health Institution’s Mobile App. Stenoa may not support previous versions of its Mobile App, and Stenoa has no liability or responsibility for supporting and maintaining them, including for security patches. The Health Institution agrees and understands that it must install Updates to the Mobile App as they become available to use a secured version of our Mobile App.
• The Health Institution agrees that Stenoa is solely responsible for providing any maintenance and support services with respect to the Mobile App, in accordance with this Agreement or Applicable Laws. Marketplaces are not responsible for the maintenance and support of the Services.
• Stenoa is solely responsible for any warranties set forth in this Agreement, not Apple (Apple Inc.) or any other mobile operators, whether express or implied by law, to the extent not effectively disclaimed. To the maximum extent permitted by Applicable Laws, the Marketplaces will have no other warranty obligation whatsoever with respect to the Mobile App, and any other claims, losses, liabilities, damages, costs, or expenses attributable to any failure to conform to any warranty is our sole responsibility.
• The Health Institution acknowledges that Stenoa, and not the Marketplaces, is responsible for addressing any claims by the Health Institution or third parties relating to the Mobile App, or the Health Institution’s possession or use, including, but not limited to a) product liability claims; b) any claim that the Mobile App fails to conform to Applicable Laws; and c) claims arising under consumer protection, privacy, or similar legislation.
• In the event of any third-party claim that the Mobile App or the Health Institution’s possession and use of the Mobile App infringes a third party’s Intellectual Property, Stenoa, and not the Marketplaces, will be solely responsible for the investigation, defense, settlement, and discharge of any such claim.
• The Health Institution represents and warrants that a) the Health Institution is not located in a country that is subject to a U.S. Government embargo, or that has been designated by the U.S. Government as a “terrorist supporting” country; and b) the Health Institution is not listed on any U.S. Government list of prohibited or restricted parties.

5. Intellectual Property

5.1. Ownership. Notwithstanding anything to the contrary in this Agreement, and as between the parties, Stenoa owns all rights, titles, and interests in a) the Stenoa Technologies and b) the Aggregated Data, including any modifications or derivative works thereof. All rights not granted herein are reserved. The Services are licensed, not sold, to the Health Institution. For the avoidance of doubts, and as between the parties, the Health Institution owns all rights, titles, and interests in the Health Institution Data.

5.2. Feedback. If the Health Institution (or an End User) elects to provide any suggestions, comments, improvements, information, ideas, or other feedback to Stenoa with regards to the Services (collectively, “Feedback”), the Health Institution hereby waives any Intellectual Property rights, including any moral rights as may be applicable, in such Feedback, and where not authorized by Applicable Laws, assigns such Intellectual Property rights to Stenoa, which hereby accepts such assignment. Notwithstanding the foregoing, the Health Institution shall retain a right to use any such Feedback for its internal business use.

6. Acceptable Use of the Services

6.1. Restrictions. The Health Institution represents and warrants that it will use the Services, and only authorize the use of the Services, in a manner that complies with Applicable Laws, including the privacy rights of individuals granted under such Applicable Laws. Without limiting the generality of the foregoing, the Health Institution represents and warrants that it will not use the Services, nor authorize the use of the Services, in a manner which involves:

• Renting, leasing, copying, transferring, reselling, or sublicensing the Services in a manner which is not authorized by the Agreement;
• Making the Services available to a third party in a manner which is not authorized by the Agreement, including through time-sharing bureau, account sharing or otherwise;
• Conducting data scraping or screen scraping, including through any data linking, programmed or automated collection of visual data or bitmap data, by querying the graphical controls by obtaining references to underlying programming objects or any other form of programmatic or automatic information collection, whether using a software, application, crawler, robot, technology or otherwise, except as permitted herein;
• Reverse engineering, disassembling, decompiling, translating, or otherwise seeking to obtain or derive the source code, underlying ideas, algorithms, file formats or any non-public APIs, except to the extent specifically permitted by Applicable Laws, and then only with advance notice to Stenoa;
• Modifying or creating derivative works of the Services, or the Stenoa Technologies;
• Circumventing, breaching or avoiding by non-public means the security controls which are implemented as part of the Services;
• Accessing or using the Services for the purpose of building a competitive product or service, or otherwise for copying its features or user interfaces;
• Conducting product evaluation, benchmarking, or other comparative analysis intended for publication without Stenoa’s prior written consent; or
• Removing or obscuring any proprietary or other notices contained in the Services, or the Stenoa Technologies, or otherwise breaching third-party Intellectual Property rights, or misappropriating such third-party Intellectual Property, including as part of the Content.

6.2. Suspension. Stenoa reserves its right to suspend access to the Services in case of a material breach of this Section 6 by the Health Institution or its End Users. Any such suspension shall be to the minimum extent required to resolve the issues which gave rise to such suspension, and Stenoa will reactivate the Services without undue delays upon such issues being resolved.

7. Representations and Warranties

7.1. Each party represents and warrants that a) it has all rights, titles and interests as required to enter into this Agreement, b) that it is duly authorized to enter into this Agreement and c) that it will comply in all material respect with Applicable Laws.

7.2. Stenoa represents and warrants that to the best of its knowledge, the Services do not infringe any third party’s Intellectual Property. In case of a breach of the foregoing warranty, the Health Institution’s only remedy shall be, at Stenoa’s reasonable discretion a) to provide the Health Institution with non-infringing and substantially similar Services; b) to obtain the rights to use the Services for the Health Institution, c) to modify the Services so that they are compliant with the foregoing or d) to terminate the Agreement and reimburse the Health Institution for all Fees paid for the Services in the last twelve (12) months.

7.3. Stenoa represents and warrants that the Services a) will be performed in a professional and workmanlike manner and b) will conform in all material manner with the specifications set forth in the documentation. In case of a breach of the foregoing which cannot be addressed through technical support, the Health Institution may terminate this Agreement for cause as set forth below.

7.4. Notwithstanding anything to the contrary in this Agreement, the Health Institution represents, warrants, and covenants to Stenoa that: (i) the Health Institution has obtained and provided, and will continue to obtain and provide, all necessary consents, rights and notices, and otherwise has and will continue to have all necessary authority in and relating to the Health Institution Data (including Personal Data and PHI), for Stenoa to perform its obligations and exercise its rights under this Agreement in compliance with Applicable Laws, including laws related to the protection of Personal Data and PHI, and without infringing, misappropriating or otherwise violating any intellectual property rights or other rights of any third party, and will inform Stenoa immediately if any such consents, rights or authority are withdrawn or can no longer be relied upon; and (ii) it will: (A) only send or cause or permit to be sent electronic communications, including commercial electronic messages (“CEMs”) related to Stenoa in compliance with Anti-Spam Laws, and, without limiting the foregoing, only to recipients from whom the Health Institution has obtained all necessary consents and provided all necessary notices and otherwise has all necessary authority as required by and in compliance with Applicable Laws, and (B) not send or cause or permit to be sent any CEMs on behalf of Stenoa or that a recipient would reasonably believe have been sent on behalf of Stenoa. The Health Institution acknowledges and agrees that it (and not Stenoa) will be the sender of any CEMs sent pursuant to this Agreement.

8. Disclaimers

8.1. General. To the maximum extent permitted by Applicable Laws, and except as set forth in this Agreement, Stenoa does not warrant that the Services will be uninterrupted or error free, nor does it make any warranty as to the results that may be obtained from the use of the Services. Except as set forth herein, Stenoa makes no other representations, conditions, warranties or guarantees, express or implied, including regarding the accuracy, reliability, or completeness of any data, and of any content, reports or outputs generated based on the foregoing, and expressly disclaims any implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. The Health Institution hereby waives any legal warranty except as otherwise provided in this Agreement. Except as provided in this Agreement, the Services, and any other components of the Services are provided “as is,” “where is” and “as available” by Stenoa to Health Institution.

8.2. For Information Only. The Services may include the use of predictive algorithms or data analytics services to provide Reports to the Health Institution. The Health Institution agrees and understands that a) the Health Institution is solely responsible for the decisions and actions that it takes based on such Reports, including any optimization initiatives thereafter; b) the Reports are intended to be reviewed, analyzed, and augmented by professionals, and not to be interpreted in isolation from their contextual factors. Notwithstanding anything to the contrary, the Health Institution hereby agrees and understands that Stenoa shall have no responsibility whatsoever for the Reports, nor for any decision or action taken in relation to a Report. The Health Institution agrees that the Reports may not be accurate, and depend entirely on the quality, accuracy and completeness of the Health Institution Data obtained by Stenoa to perform the Services.

8.3. Secondary Storage Only. The Services may not be used as primary means of storing PHI. The Services are not intended to serve as electronic health records or otherwise as electronic services for accessing and storing such PHI. The Health Institution is solely responsible for extracting and making appropriate copies of PHI, or any other Institution Health Data.

8.4. Communications. The Services include encrypted communications functionalities between End Users. While the communications are encrypted in-transit and at-rest, they are not encrypted at-use and the Health Institution must take adequate precautions, such as ensuring that endpoints are encrypted and protected by adequate passwords. Stenoa shall not be responsible for any breach of confidentiality affecting such communications to the extent that it is not caused by Stenoa’s breach of this Agreement. The communications may be deleted throughout the Subscription Term, by End Users, or otherwise may be archived or expired.

8.5. Ethical Obligations. The Health Institution (and any End Users, as applicable) are solely responsible for determining whether PHI should be processed through the Services, and whether there is a lawful basis for processing such PHI through the Services. The Health Institution is solely responsible for complying with Applicable Laws for the collection, use, and disclosure of Personal Data by End Users through the Services. Stenoa shall have no liability whatsoever for Personal Data provided in violation of this Agreement, or for any use of the Services in violation of medical, ethical, or professional obligations regarding patients, or otherwise in relation to the health services provided by the Health Institution, except as expressly set forth otherwise herein.

9. Confidential Information

9.1. Exclusions. Confidential Information shall not include information which the Receiving Party can demonstrate a) is readily available to the public in the same form through no fault of the Receiving Party; b) did not originate from the Disclosing Party and was lawfully obtained by the Receiving Party in the same form from an independent third party without any restrictions on disclosure; or c) did not originate from the Disclosing Party and was in the possession of the Receiving Party in the same form prior to disclosure to the Receiving Party by the Disclosing Party. The foregoing shall not apply to Personal Data.

9.2. Obligations. The Receiving Party shall only use or disclose Confidential Information a) to provide the Services; b) to perform its obligations under this Agreement or c) in accordance with Applicable Laws, or the administration thereof. The Receiving Party may use or disclose Confidential Information to a service provider, agent, legal or financial advisor, as reasonably required for their Services, subject to such recipients being under an appropriate confidentiality agreement.

9.3. Termination. Upon termination of this Agreement for any reason, the Receiving Party shall, at the Disclosing Party’s option, a) return the Confidential Information and/or b) securely destroy the Confidential Information. Notwithstanding the foregoing, the Receiving Party is authorized to keep a copy of the Confidential Information as required for business continuity purposes, pursuant to internal retention schedules, and for legal, auditing, or financial reasons.

9.4. Personal Data. Each party agrees to comply with Applicable Laws regarding the collection, use and disclosure of Personal Data. Without limiting the generality of the foregoing:

• Stenoa shall not collect, use, or disclose Personal Data for other purposes than as required to provide the Services (unless required otherwise under Applicable Laws), and as further described in its Privacy Policy.
• If the Health Institution reasonably determines that a privacy impact assessment or similar exercise is required pursuant to the Health Institution’s use of the Services, Stenoa will participate in a timely manner to such exercise by providing reasonably requested information. The Health Institution will assume the costs and expenses relating to such exercise.
• Personal Data will be stored in the country indicated in the Order Form. If no data hosting location is indicated for PHI, then it will be stored in Québec, Canada. The Health Institution agrees that certain functionalities, such as analytics or communication functionalities, involve the processing of Personal Data in the United States by Stenoa’s service providers, as further described in the Privacy Policy.
• Stenoa will implement technical and organizational measures as reasonably required to assist the Health Institution in responding to individuals’ rights requests in relation to their Personal Data. If Stenoa receives such a request, Stenoa will inform the Health Institution without undue delays, and the Health Institution will be responsible for responding to this request in accordance with Applicable Laws, unless such Applicable Laws make it mandatory for Stenoa to respond to such individual rights requests.
• If the Health Institution determines, in its sole reasonably discretion, that it is required to perform a privacy impact assessment, Stenoa will collaborate in good faith with the Health Institution by providing information reasonably requested. Stenoa will consider suggested remediation actions as part of its development roadmap, and will implement such actions were required to comply with Applicable Laws.
• The Health Institution agrees that it is solely responsible for ensuring that it is authorized to provide the Personal Data through the Services in accordance with Applicable Laws, including by providing adequate information to Patients on the collection, use and disclosure of their Personal Data through the Services when required under Applicable Laws. Stenoa will not be responsible for any damages, losses, claims, costs, expenses or reasonable attorneys’ fees resulting from the Health Institution’s breach of Applicable Laws, including for an authorized collection, use or disclosure of Personal Data resulting from a breach of the foregoing.

9.5. PHI. If applicable, the parties agree to enter into a Business Associate Agreement (“BAA”) for the provision of any PHI which are subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and such BAA will prevail over the remaining of the Agreement in case of conflict between their respective terms.

9.6. Data Security. Stenoa will develop, implement, and maintain appropriate technical and organizational controls as required to reasonably safeguard the Health Institution Data against a Security Breach. Without limiting the generality of the foregoing, Stenoa will

• Perform technical testing of the Services at least once annually and perform remediation in a diligent and timely manner given the risks associated with the Health Institution Data.
• Perform vulnerability management and address vulnerabilities diligently, including by issuing and applying security patches based on the risks to Health Institution Data.
• Ensure that any employee with access to PHI is subject to a criminal background check, and that all such employees receive appropriate training.

9.7. Security Breach. The Receiving Party shall notify the Disclosing Party without undue delays and no later than seventy-two (72) hours upon becoming aware of a Security Breach. This notification will include information on the nature of the Confidential Information compromised, a description of the likely consequences of the Security Breach, and of the measures taken or proposed to be taken by the Receiving Party. To the extent that such information is not available at the time of the notice, the Receiving Party shall follow up as the information becomes available, to complete its notice without undue delays.

10. Fees and Payment

10.1. Payment of Fees. The Health Institution agrees to pay for the Fees described in the Order Form. Unless indicated otherwise in the Order Form, the Fees are due within thirty (30) calendar days of the invoice date. The Health Institution shall have up to thirty (30) days from the reception of an invoice to dispute this invoice in accordance with this Agreement. After this delay, the Health Institution may no longer dispute an invoice. The Fees are non-cancellable, and non-reimbursable, except as set forth otherwise herein.

10.2. Tax. The Health Institution agrees to pay for taxes which Stenoa is required by Applicable Laws, or the administration thereof, to invoice. If the Health Institution is exempt from taxes, it will provide evidence of such exemption upon request and be responsible for any subsequent third-party claims to Stenoa resulting from false claims of exemption. If the Health Institution requires an Order Form number reference on the invoices for the Services, the Health Institution must promptly provide such number, ahead of invoices being issued.

10.3. Payment information. Stenoa may use a third party payment processor to collect any Fees due by Health Institution under this Agreement. Unless indicated otherwise in an Order Form, the Health Institution agrees to provide Stenoa with credit card information and the Fees will be debited from the Health Institution’s credit card based on the Purchase Order. The Health Institution represents and warrants that a) it is authorized to use this credit card; b) it will provide Stenoa with notification of any changes to its credit card information as required to ensure that the Fees will be processed through the credit card. For the avoidance of doubts, the Health Institution specifically authorizes Stenoa to debit the Fees from the Health Institution’s credit card in accordance with the Order Form (as modified from time to time through Change Orders).

10.4. Late Fees. If the Fees are not paid within thirty (30) days, the Health Institution agrees that Stenoa may apply interests corresponding to 1.5% monthly or 18% annually on such late Fees. If the Fees are not paid within ninety (90) days, the Health Institution agrees that it will be responsible for any late collection fees, including reasonable attorneys’ costs.

11. Limitations of Liability

11.1. Liability Cap. Subject to Section 11.2, to the maximum extent permitted by Applicable Laws, in no event will either party be liable for any interruption of business, loss or lost of (i) use, (ii) data, (iii) savings, (iv) goodwill, or (iv) profits, costs of delay, reputational harm, or any indirect, special, incidental, punitive or consequential damages of any kind, however, caused, even if informed in advance of the possibility of these damages. Either party’s total aggregate liability to the other party, including its affiliates, representatives, employees, directors, and officers, will not exceed in aggregate the amount payable by the Health Institution to Stenoa for the Services in the last twelve (12) months relating to the claim.

11.2. Exceptions. Notwithstanding anything in this Agreement, including Section 11.1, none of the limitations in this Section 11 excludes or limits (a) either party’s liability for fraud or for death or bodily injury to the extent caused by a party’s negligence, (b) the Health Institution’s liability or obligations under Sections 3.4, 6.1, 7.1(c), 7.4, 8.5, 10 and 14.10, (c) either party’s infringement, violation or misappropriation of the other party’s intellectual property rights. In addition, the laws in some jurisdictions may not allow some of the limitations of liability in this section. If any of these laws is found to apply to this agreement, this section 11 will apply to the maximum extent permitted by Applicable Laws.

11.3. Failure of Essential Purpose. Each party acknowledges and agrees that this Section 11 is a fundamental basis of the bargain and a reasonable allocation of risk between the parties and will survive and apply to any claims arising out of or related to this Agreement, any Stenoa technology or any related services, regardless of the theory of liability (contract, tort, strict liability or otherwise), even if any limited remedy in this Agreement is found to have failed of its essential purpose.

12. Termination

12.1. Term and Subscription Term. The term of this Agreement will commence on the effective date (as set out in preamble) and continue until terminated under this Section 12 (the “Term”). The start date of a Subscription Term is indicated in each Order Form and the term of each Order Form is coterminous to the Subscription Term. Except as otherwise provided in the applicable Order Form or in a Change Order, each Order Form will automatically renew for successive periods equal to the Subscription Term, and in any case for periods no longer than one year (each, a “Renewal Term”). The Order Form may continue to renew for successive Renewal Terms indefinitely, unless either party provides the other party with written notice of its intention not to renew not less than 30 days prior to the end of the-then current term.

12.2. Termination. This Agreement, or parts thereof, can be terminated upon written notice to the other party if this party is in breach of the Agreement and has not resolved such breach within thirty (30) days, or longer if agreed upon. Notwithstanding the foregoing, Stenoa may terminate this Agreement upon written notice if the Health Institution’s payment of the Fees is late of more than ninety (90) days from the due date, and the Health Institution does not remedy the default after receiving more than two written notices during this period.

12.3. Effects. Upon termination of this Agreement, all Change Orders and Order Forms will automatically be terminated, and the Health Institution (including all End Users) will cease to have access to the Services, including to any Health Institution Data stored on the Services. Within thirty (30) days from the termination date, the Health Institution may request a copy of the Health Institution Data which can be extracted by Stenoa. After this delay, the Health Institution agrees and understands that Stenoa will delete the Health Institution Data in accordance with this Agreement and may not be able to provide copies of the Health Institution Data. If the termination is caused by a breach of this Agreement by Stenoa, then Stenoa will reimburse the Health Institution for any Fees paid for Services which have not been rendered at the date of the termination. However, if the termination is caused by a breach of this Agreement by the Health Institution, then all Fees due for the Services during the Subscription Term will become due immediately, and no reimbursement will be due to the Health Institution for any Fees. The parties agree that the termination provisions set forth in this Section 11 will be applicable instead of, and result in the inapplicability, of articles 2125 and 2129 of the Civil Code of Quebec, the parties hereby disclaiming and renouncing to such articles based on the terms agreed upon in the Agreement. Sections 3.3, 5, 9, 11, 12.2, 13.5, 14 shall survive the termination of this Agreement for any reasons.

13. Dispute Resolution

13.1. General. In the interest of resolving disputes between the Health Institution and Stenoa in the most expedient and cost-effective manner, and except as described below, the Health Institution and Stenoa agree that every dispute arising in connection with this Agreement will be resolved by binding arbitration.

13.2. Exceptions. Despite the foregoing, nothing in this Agreement will be deemed to waive, preclude, or otherwise limit the right of either party to a) bring an individual action in a small claims court; b) pursue an enforcement action through the applicable federal, state, provincial, or local agency if that action is available; c) seek injunctive relief in a court of law in aid of arbitration; or d) file suit in a court of law to address an intellectual property infringement claim.

13.3. Opt-Out. If the Health Institution does not wish to resolve disputes by binding arbitration, the Health Institution may opt-out of the provisions of this Section 13 within thirty (30) days after the Effective Date of this Agreement by providing a notification to this effect to Stenoa by email at legal@stenoa.com, stating that the Health Institution would like to opt-out of arbitration (the “Opt-Out Notice”). Once Stenoa receives this notice, this Section 13 will not be applicable to the Health Institution, and any actions arising out of this Agreement will be resolved in courts as set forth under Section 13.5.

13.4. Arbitrator. Any arbitration between the Health Institution and Stenoa will be settled under the Arbitration Rules of the ADR Institute of Canada, Inc., under a sole arbitrator chosen by Stenoa. The Health Institution will have ten (10) days to object to the choice of an arbitrator and select a different arbitrator. The arbitration will occur in a) Montreal, Québec, Canada; b) through online dispute resolution services or c) in the Health Institution’s jurisdiction, if Applicable Laws do not allow another choice of jurisdiction. The parties will share the fees and costs associated with the arbitration equally.

13.5. Governing Laws. To the extent permitted by Applicable Laws, this Agreement shall be governed by and construed by the laws of the Province of Québec, Canada and the laws of Canada applicable therein. Except as set forth herein, the parties hereby submit and attorn to the jurisdiction of the Courts of the district of Montreal, Province of Québec. The terms of the United Nations Convention on Contracts for the Sale of Goods do not apply to this Agreement.

14. General

14.1. Amendment. No amendment, supplement, modification, waiver, or termination of this Agreement and, unless otherwise expressly specified in this Agreement, no consent or approval by any party, will be binding unless executed in writing by the party or parties to be bound thereby. Notwithstanding the preceding sentence, Stenoa may unilaterally amend this agreement, in whole or in part (each, an “Amendment”), by providing the Health Institution with at least 10 days’ prior notice of such Amendment, which prior notice may include posting the Amendment on the Website. Unless otherwise indicated by Stenoa, any such Amendment will become effective 10 days after the date the notice of such Amendment is provided to the Health Institution or is posted on the Website (whichever occurs first).

14.2. Assignment. This Agreement will bind and inure to the benefit of each party’s permitted successors and assigns. Neither party may assign this Agreement without the advance written consent of the other party, except that Stenoa may assign this Agreement without consent to an Affiliate or in connection with a merger, reorganization, acquisition, or other transfer of all or substantially all of its assets or voting securities. Any attempt to transfer or assign this Agreement except as expressly authorized under this Section 14.2 will be void.

14.3. Notices. Any notice or communication under this Agreement must be in writing. Health Institution must send any notices under this Agreement (including Breach Notices) to Stenoa at the following address: legal@stenoa.com. Stenoa may send notices to the email addresses on Health Institution’s account or, at Stenoa’s option, to Health Institution’s last-known postal address, as documented in an Order Form. The Health Institution is responsible for informing Stenoa if such changes are made. Stenoa may also provide operational notices regarding the Services or other business-related notices through conspicuous posting of the notice on Stenoa’s website or the Services. Each party consents to receiving electronic notices. Stenoa is not responsible for any automatic filtering Health Institution or its network provider may apply to email notifications.

14.4. Relationship between the Parties. The Parties agree that each of them is in business for themselves and that they are independent contractors under Applicable Laws, including without limitation, pursuant to the Income Tax Act (Canada) and any other federal or provincial legislation relating to income tax, social security benefits or unemployment compensation. Nothing in this Agreement shall be regarded or construed as creating any other relationship, whether employer/employee, principal/agent, joint venture, association, partnership, or otherwise between the Parties. For greater certainty, End Users are not entitled to and shall have no claim against Stenoa for any benefits or other perquisites from Stenoa including, but not limited to vacation pay, sick leave, retirement benefits, social security, workplace safety and insurance coverage, health or disability benefits, unemployment insurance benefits, minimum wage or workers’ compensation coverage.

14.5. Force Majeure. Neither party will be liable for any delay or failure to perform its obligation under this Agreement (except payment obligations) if the delay or failure is due to causes beyond its reasonable control, such as acts of God, a strike, blockade, distributed denial of services and denial-of-services attacks, zero-day attacks, war, act of terrorism, riot, natural disaster, failure or reduction of power or telecommunications or data networks or services, or government act, unless such delay or failure is caused by the negligence of this party.

14.6. Severability. If any provision of this Agreement is found by any court of competent jurisdiction to be unenforceable or invalid, that provision will be limited to the minimum extent necessary so that this Agreement may otherwise remain in effect.

14.7. Entire Agreement. This Agreement represents the parties’ complete and exclusive understanding relating to the Agreement’s subject matter. It supersedes all prior or contemporaneous oral or written communications, proposals and representations with respect to the Stenoa Technology or any other subject matter covered by this Agreement. Any terms provided by Health Institution (including as part of any purchase order or other business form used by Health Institution) are for administrative purposes only, and have no legal effect.

14.8. Waiver. The failure of a party to enforce its rights with respect to a violation of this Agreement will not constitute a waiver of the right to enforce its rights with respect to the same or any other violation of this Agreement.

14.9. List of Clients. Stenoa may use the name and logo of the Health Institution to add the Health Institution to list of current clients, as part of proposals or otherwise. The Health Institution may revoke its consent in writing at any time.

14.10. Export Control. This Agreement is made subject to any restrictions concerning the export of products or technical information from Canada or other countries that may be imposed on the parties from time to time. Each party agrees that it will not export, directly or indirectly, any technical information acquired from the other party under this Agreement or any products using such technical information to a location or in a manner that at the time of export requires an export license or other governmental approval, without first obtaining the written consent to do so from the appropriate agency or other governmental entity in accordance with Applicable Laws.

14.11. Language. The parties acknowledge that they have required this Agreement and all related documents to be prepared in English only. Les parties reconnaissent avoir demandé que le présent Contrat ainsi que tous les documents qui s’y rattachent soient rédigés uniquement en langue anglaise.