「FFRI AMC Information Collection Policy」
Comparative Table of the Old and New Clauses
The words related to the revision are underlined.
OldNew

HeadingHeading(Omitted)(No change)

I. Detection Review Setting

I. Detection Review Setting(Omitted)(No change)

1. Information Transmitted When Using This Setting

1. Information Transmitted When Using This Setting

Following information ("Transmitted Information") shall be transmitted to FFRI

Following information ("Transmitted Information") shall be transmitted to FFRI

server from a user ("Target User") who submits the inquiry based on theserver from a user ("Target User") who submits the inquiry based on thepreceding paragraph. FFRI shall perform the review set forth in the preceding

preceding paragraph. FFRI shall perform the review set forth in the preceding

paragraph using Transmitted Information and transmit the review result to Target

paragraph using Transmitted Information and transmit the review result to Target

User when it becomes available. Other purposes of usage of the Transmitted

User when it becomes available. Other purposes of usage of the Transmitted

Information shall be as described in Article Ⅲ.

Information shall be as described in Article V. FFRI will not provide Transmitted
Information to third parties in any format that could be identified by other thirdparties, unless otherwise specified by laws and regulations.

(1) Target File

(1) Target File

This includes information pertaining to the Target File that is required for theThis includes information pertaining to the Target File that is required for thereview process.

review process.

(2) Information To Identify Target User

(2) Information To Identify Target User

This includes user attributable information registered upon initial usage of theThis includes user attributable information registered upon initial usage of1

Product and the Setting which shall be used for the aforesaid review process andproducts such as FFRI yarai, the Product and the Setting which shall be used forsending back the review result.

the aforesaid review process and sending back the review result.

(3) Target User's User Environment For FFRI yarai, etc(3) Target User's User Environment For FFRI yarai, etc

This includes information pertaining to FFRI yarai managed by this ProductThis includes information pertaining to FFRI yarai managed by this Product(software version information, the hardware environment in which FFRI yarai is(software version information, the hardware environment in which FFRI yarai isinstalled on, Operating System, applications concurrently running, etc.) that is

installed on, Operating System, applications concurrently running, etc.) that isrequired for the review of Target File.

required for the review of Target File.

(4) Target User's FFRI yarai Operation Logs Managed By This Product(4) Target User's FFRI yarai Operation Logs Managed By This ProductThis information is used for Target File review.

This information is used for Target File review.

Ⅱ. Cloud Collaboration Feature

Ⅱ. Cloud Collaboration Feature(Omitted)(No change)

1. Information Transmitted When Using This Feature

1. Information Transmitted When Using This Feature

Hash values relating to a Target File (“Hash Values”) shall be transmitted from a

Hash values relating to a Target File (“Hash Values”) shall be transmitted from a

User who submit a Target File based on the preceding paragraph (“Target User”)

User who submit a Target File based on the preceding paragraph (“Target User”)

to FFRI server. FFRI shall perform the review set forth in the preceding paragraphto FFRI server. FFRI shall perform the review set forth in the preceding paragraphusing the Hash Values and transmit the result to a Target User when it becomesusing the Hash Values and transmit the result to a Target User when it becomes

available. Other purposes of usage of Hash Values shall be as described in Article

available. Other purposes of usage of Hash Values shall be as described in Article

Ⅲ.

V.

Ⅲ. Improvement of This Setting and This Feature, etc.

(Deleted)

FFRI may utilize information transmitted by each Target User to reflect it in theimprovement and development of this Product including this Setting and thisFeature and other FFRI software; provided that, in no case shall FFRI provide the2transmitted information to a third party in the form that may be identifiable by ageneral third party, unless otherwise specified by laws and regulations.
Ⅳ. Disclaimer(Move to Ⅵ)

Malware and vulnerability attacks continuously become more sophisticated andcomplicated on a daily basis and in no case shall FFRI guarantee to Target User
that this Setting and this Feature works perfectly despite the effort described inthe preceding paragraph. Target User hereby agrees that FFRI shall not be liable
for any damages with respect to usage of the Setting and the Feature .

Ⅴ. FFRI yarai Cloud

Ⅲ. FFRI yarai Cloud

FFRI yarai Cloud refers to the usage of this Product in the cloud provided by FFRI.

FFRI yarai Cloud refers to the usage of this Product in the cloud provided by FFRI.

A user may use this Product in the cloud.

A user may use this Product in the cloud.

1. Information Collected When Using FFRI yarai Cloud

1. Information Collected When Using FFRI yarai Cloud

FFRI shall be able to view various information and files that a user manages withFFRI shall be able to view various information and files that a user manages withthis Product, including but not limited to a user's client management information,

this Product, including but not limited to a user's client management information,

incident management information, event management information, malware, files

incident management information, event management information, malware, files

used to exploit vulnerabilities, as FFRI yarai Cloud is provided in FFRI's cloud.

used to exploit vulnerabilities, as FFRI yarai Cloud is provided in FFRI's cloud.
Other purposes of usage of such information will be as described in V hereafter.

2. Purpose Of Usage(Deleted)

FFRI shall be able to view and use the information collected through the usage ofthis Product in FFRI yarai Cloud described in Paragraph 1 above at any time forthe following purposes:(1)For user support such as updates and maintenance of this Product and3

improvement of FFRI products and services(2)For external disclosure including the research pertaining to the malware
detected or vulnerability attacks and commercial usage such as statistical data andmalware analysis information. However, FFRI shall never provide user
attributable information to third-parties in any format that could be identified byother third parties.
Ⅳ. Support Service(Established)

FFRI shall provide a Support Service to a user who has purchased the Product, forthe objectives of ensuring the proper and suitable use of the Product and assistingin the resolution of any issues that occur and are confirmed in use of the Product.
1. Information collected in the Support Service
In conducting the Support Service, FFRI may collect the user information
regarding the user's system (information about system, services, tasks, network,
installed software, etc.), log information regarding the system and the Product,
information on the Product settings, and other information in addition to theinformation described in I-III above. Other purposes of usage of such information
will be as described in V hereafter.
V. Purpose of Usage of the Information Collected(Established)

FFRI shall be able to view and use the information collected through I-IV aboveat any time for the following purposes:(1) For user support such as updates and maintenance of the Product(2) For improvement, development, etc. of FFRI product functions and quality(3) For improvement in quality of FFRI services(4) For external disclosure including research pertaining to detected malware or4vulnerability attacks and commercial usage such as statistical data andmalware analysis information
However, FFRI shall never provide user attributable information to third parties
in any format that could be identified by other third parties.
Moreover, FFRI shall take the necessary and appropriate safety control measures
to manage the information that is collected in I-IV above.
Ⅵ, Disclaimer(Move from III)

Malware and vulnerability attacks continuously become more sophisticated andcomplicated on a daily basis and in no case shall FFRI guarantee to Target User
that this Setting and this Feature works perfectly. Target User hereby agrees
that FFRI shall not be liable for any damages with respect to usage of the Setting
and the Feature .
Ⅵ. Reference On Information Collected via ProductⅦ. Reference On Information Collected via Product(Omitted)(No change)

Revised on June 25, 2020

Revised on January 10, 20225