[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

Exhibit 10.18

Amendment 2
to the Enterprise Subscription Agreement No. CW1985661

This Amendment 2 (“Amendment 2”) is entered into as of November 17, 2017
(“Amendment 2 Effective Date”) by and between Cloudera, Inc., a Delaware
corporation, with offices at 395 Page Mill Road, Palo Alto, CA 94306
(“Cloudera”) and Intel Corporation and its Affiliates, a Delaware corporation,
with offices at 2200 Mission College Boulevard, Santa Clara, CA 94504
(“Customer”) and amends that certain Enterprise Subscription Agreement entered
into by and between the parties dated April 25, 2014 (“Agreement”), CW1985661.

The parties hereby agree to amend the Agreement as follows:

1.Amended Terms.

A. Modify and append the following definitions:

The following definitions replaces the same definition in the Agreement:

1.3    “Cloudera Products” means the (i) Cloudera Open Source Distribution, the
Cloudera Software and the Cloudera Online Services, and (ii) any Third Party
Software (as defined below) incorporated in the foregoing.

1.4    “Cloudera Software” means Cloudera’s proprietary software components set
forth in the applicable Order Form for a Subscription Period. Cloudera Software
does not include Cloudera Online Services.

1.6    “Node” means a physical or virtual computer providing data processing
capabilities or running coordinator processes to drive data processing
activities, including but not limited to the following: Apache Hadoop (HDFS,
MapReduce), Apache Hive, Apache HCatalog, Cloudera Hue, Apache Mahout, Apache
Oozie, Apache Pig, Apache Sentry, Apache Sqoop / Sqoop2, Apache Whirr, Apache
Zookeeper, Apache Spark, Apache Crunch, Apache HBase, Apache Kafka, Apache
Accumulo, Apache Impala (Incubating), Cloudera Search, Apache Kudu or Apache
YARN services.

1.7 “End User Client” means the person who actually uses the [***].

The following definitions are hereby added to the Agreement:

1.11    “Cloudera Online Services” means any Cloudera Product that is provided
by Cloudera as a hosted, cloud- based service, accessible to Customer through a
web browser.

1.12    “Transaction Data” means all data that is (i) input into Cloudera Online
Services or generated through the use of the Cloudera Online Services, or (ii)
generated for troubleshooting and diagnostics, in each case that is transmitted
to Cloudera. Transaction Data does not include Customer’s originating data that
might be stored in Customer’s clusters running the Cloudera Products.

B. Section 2 of the Agreement is modified as follows:

Add the following at the end of Section 2.1 (i): “For clarity, Customer’s
internal use as set forth in this Section 2.1(i) and Section 2.1(ii) below
includes the use of the Cloudera Software to [***], provided that all such use
is limited to licensed Nodes owned or controlled by Customer, on hardware owned
or controlled by Customer, or as may be deployed by Customer in a public cloud
environment. Cloudera will have no direct obligation to any End User Client,
including any obligation to provide support, and

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

Customer will indemnify and defend Cloudera for claims or demands against
Cloudera brought by any such End User Client, excluding claims or demands for
intellectual property infringement due to any Cloudera Products. Except as
expressly set forth herein with respect to [***], the license grant in the
preceding sentence expressly excludes any other hosting of third party data or
the provision of any other products and services to third parties.”

C. Section 5 of the Agreement is modified as follows:

Add the following as Sections 5.2

“5.2 Policies; Personally Identifiable Information. Customer and Cloudera will
adhere to and agree to be bound by the Data Policy with respect to the handling
of Transaction Data, and the Privacy Terms with respect to the handling of PII,
as defined below, attached hereto as Attachment 1, as such policies and terms
may be updated by the parties from time to time (the “Data Policy” and the
“Privacy Terms,” respectively). All Transaction Data (as defined in the Data
Policy) will be handled in accordance with the provisions set forth in the Data
Policy and governed exclusively by those terms. Subject to applicable law, in
connection with the performance of this Addendum and Customer’s use of the
Cloudera Online Services: (i) Cloudera agrees that it will not require Customer
to deliver to Cloudera any personally identifiable information (as defined by
the National Institute of Standards and Technology) (“PII”); and (ii) Customer
agrees not to deliver any PII to Cloudera; provided, however, that Customer’s
Account Data (as defined in the Data Policy) may include PII to the extent it is
business contact information necessary to access the Service, and will be
governed by the Data Policy.”

2.Exhibit C-1 attached hereto is appended to Exhibit C of the Agreement to
provide licensing of Cloudera Products through the amended Expiration Date.

3.Expiration Date of the Agreement is extended to March 31, 2023.

Integration; Conflict. The provisions of this Amendment 2 will govern
notwithstanding anything to the contrary in the Agreement. Except as otherwise
expressly provided or modified herein, the terms and conditions of the Agreement
remain in full force and effect, and the Agreement and this Amendment 2
constitute the entire and exclusive agreement between the parties regarding the
subject matter hereof, and supersede all proposals and prior agreements, oral or
written, and all other communications.

IN WITNESS WHEREOF, the parties have caused this Amendment 2 to be executed by
their duly authorized representatives.

Customer: Intel Corporation
 
Cloudera, Inc.
 
 
 
 
 
Signature:
/s/ Sommer Starr
 
Signature:
/s/ Wayne Kimber
Printed:
Sommer Starr
 
Printed:
Wayne Kimber
Title:
Commodity Manager
 
Title:
VP Finance & PAO
Date:
17-Nov-2017
 
Date:
21-Nov-2017

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

Exhibit C-1
RENEWAL ORDER FORM

Cloudera Product: Cloudera Enterprise Data Hub including NavOpt services, Gold
Support providing 24x7 support as set forth in Exhibit A of the Agreement (list:
$10,000 per Node)

Subscription Period: April 1, 2018 – March 31, 2021* (Years 5-7, with optional
renewal years 8 and 9)

[***] begins October 31, 2017

Subscription Fees under this Exhibit C-1 are as follows:

Year 5 (April 1, 2018-March 31, 2019):
Node Quantity: [***]
Annual Subscription Fee: $[***]
Year 6 (April 1, 2019 – March 31, 2020)
Node Quantity: minimum [***] Nodes
Annual Subscription Fee per Node: [***]
Minimum Annual Subscription Fee: $[***] plus $[***] per Node for Nodes [***],
plus $[***] for Nodes in excess of [***]
Year 7 (April 1, 2020 – March 31, 2021)
Node Quantity: minimum [***] Nodes Annual Subscription Fee per Node: $[***]
Minimum Annual Subscription Fee: $[***] plus $[***] per Node for Nodes [***],
plus $[***] for Nodes in excess of [***]
OPTIONAL RENEWAL: Years 8 and 9 (April 1, 2021 – March 31, 2023):
Annual Subscription Fee: $[***] per Node for up to [***] Nodes Node Quantity:
minimum [***] Nodes
Minimum Annual Subscription Fee: $[***] plus $[***] per Node for Nodes [***]
No additional fee for actual deployments between [***] Nodes and [***] Nodes
during the Subscription Period
For Nodes [***] and greater, Customer will pay an additional annual subscription
fee of $[***] per Node

Payment Schedule:

Year 5:
 
April 1 2018
July 1 2018
Oct 1 2018
Jan 1 2019
[***]
[***]
[***]
[***]

Year 6*:
 
April 1 2019
July 1 2019
Oct 1 2019
Jan 1 2020
[***]
[***]
[***]
[***]

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

Year 7**:
 
 
 
April 1 2020
July 1 2020
Oct 1 2020
Jan 1 2021
[***]
[***]
[***]
[***]

Optional Year 8**:

April 1 2021
July 1 2021
Oct 1 2021
Jan 1 2022
[***]
[***]
[***]
[***]

Optional Year 9**:

April 1 2022
July 1 2022
Oct 1 2022
Jan 1 2023
[***]
[***]
[***]
[***]

* plus $[***] per Node for Nodes [***], plus $[***] for Nodes in excess of [***]

** plus $[***] per Node for Nodes [***], plus $[***] for Nodes in excess of
[***]

Reporting and payment for Incremental Nodes:

During Years 6 through 9, inclusive, of the Subscription Period as set forth in
this Exhibit C-1, Customer may elect to add Nodes that exceed the annual minimum
quantity of Nodes as set forth herein (the “Incremental Nodes”). Customer agrees
to notify Cloudera of its elected use of such Incremental Nodes at time of
deployment. The annual subscription fees for the Incremental Nodes will be
calculated for the period commencing immediately upon the installation date of
the Incremental Nodes according to the fees set forth above, pro-rated such that
the Subscription Period of the Incremental Nodes will terminate on the same date
as the existing Subscription Period. Cloudera will invoice Customer for the
Incremental Nodes upon receipt of Customer’s Purchase Order that it has so
elected, and fees will be due as set forth in the Agreement.

Professional Services and Training Discount Hold:

During the Subscription Period as set forth in this Exhibit C-1, Cloudera agrees
to provide the following discounts from then-current list prices at time of
order:

Training, all classes: [***]% discount from list

Professional Services (Solutions Architect, Data Scientist): [***]% discount
from list, billed per day

Professional Services (Technical Account Manager/Customer Success Manager,
Designated Support Engineer): [***]% discount from list, billed per FTE annum

Services list rates as of the Amendment 2 Effective Date are as follows:

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

SKU
Role
Description
Discount
List Price
DSE-03
Designated Support Engineer
[***].
[***]
$250,000
CDS-CSM
Customer Success Manger
[***].
[***]
$100,000
PSHR-01 / PSHR-01- [***]
Data Scientist: [***]
[***].
[***]
$650
PSHR-03 / PSHR-03- [***]
Principal Solutions Architect: [***]
[***].
[***]
$500
PSHR-04 / PSHR-04- [***]
Sr. Solutions Architect: [***]
[***].
[***]
$450
PSHR-05 / PSHR-05- [***]
Solutions Architect: [***]
[***].
[***]
$400
RSA-SLVR
Resident Architect - Silver
[***].
[***]
$148,000
RSA-Gold
Resident Architect - Gold
[***].
[***]
$220,000
PSHR-09- [***]
Sr. Services Delivery Manager: One (1) Hour
[***].
[***]
$250

Cloudera Data Science Workbench (“CDSW”) [***]:

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

As of the Amendment 2 Effective Date, and during Years 5-7 (April 1, 2018 –
March 31, 2021) of the Subscription Period as set forth in this Exhibit C-1,
Customer [***] subscriptions to Unique Identifiers of Cloudera Data Science
Workbench (“CDSW”). A “Unique Identifier” means a unique user ID and password
denoted for Customer’s access to and use of CDSW during the Subscription Period.
Unique Identifiers may not be shared among users or used concurrently by
multiple users, however, a Unique Identifier may be transferred from one
individual to another if the original individual no longer requires or is no
longer permitted access to or use of CDSW. During the entire duration of the
Subscription Period for CDSW (“CDSW Term”), Customer must have a current valid
Node license for Cloudera Enterprise Data Hub as set forth in this Exhibit C-1
(“Required License”). CDSW requires dedicated Nodes that may be in excess of the
Nodes licensed under Customer’s then-current subscription for Cloudera
Enterprise Data Hub, in which case Customer acknowledges and agrees that must
license the applicable number of Incremental Nodes under this Exhibit C-1. In
the event that the Subscription Period for the Required License expires during
the CDSW Term, the CDSW rights and licenses granted to Customer under this
Exhibit C-1 will immediately terminate, with no right to refund or credit.

During each of Years 8 and 9 (April 1, 2021 – March 31, 2023) Customer may
purchase, at its sole election and subject to the terms as otherwise set forth
in the preceding paragraph, [***], due at the beginning of each of Year 8 and
Year 9.

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

Attachment 1

Privacy Terms

2.1    For the purposes of this Privacy section only, the following definitions
apply:

(A)“Data Breach” means any unauthorized or unlawful processing, loss,
disclosure, destruction, theft, or damage of any of the Personal Data.

(B)“Data Controller” is a person or entity who (either alone or jointly with
others) determines the purposes for which and the manner in which Personal Data
is to be processed

(C)“Data Processor” is a person or entity who processes Personal Data on behalf
of a Data Controller. In the Agreement, Supplier is the Data Processor.

(D)“Data Subject” is the individual to which the Personal Data relates.

(E)“Personal Data” means any information relating to an identified or
identifiable natural person of which Intel is the Data Controller and in
relation to which Supplier is providing products or services under the
Agreement. An identifiable person is one who can be identified, directly or
indirectly, by reference to an identification number or to one or more factors
specific to their physical, physiological, mental, economic, cultural or social
identity.

(F)“Processing Country” means the country where the Personal Data is to be
processed by the Supplier. Unless otherwise agreed to in writing by Intel, it is
the country where the Supplier is located as specified in the Agreement.

(G)“Processing of Personal Data” means any operation or set of operations which
is performed upon Personal Data, whether or not by automated means, including
but not limited to collection, recording, adaptation or alteration, retrieval,
consultation, use, disclosure by transmission, deleting or destruction.

(H)“Supplier” means Cloudera, Inc.

2.2    Supplier may collect and process the Personal Data only to the extent,
and in such manner, as is necessary to provide the products or services under
the Agreement and in accordance with Intel’s instructions from time to time.
Supplier will not collect or process the Personal Data for any other purpose.

2.3    Supplier must promptly comply with any request from Intel requiring
Supplier to amend, transfer or delete the Personal Data. In any event, upon
written request from Intel, Supplier must permanently delete Personal Data
within 30 days after the Personal Data is no longer being actively used in
fulfilling Supplier’s obligations to Intel under the Agreement.

2.4    Transfer, Disclosure, or Processing of Personal Data

It is the parties’ expectation that Personal Data that will be collected and
processed under this Agreement will be limited to business contact information
necessary for Intel employees to access the service,

(A)Supplier must not, except at the request of Intel, with Intel’s prior written
consent, or as otherwise expressly permitted in this Section:

1.transfer the Personal Data outside the Processing Country; or

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

2.disclose the Personal Data to anyone but Intel; or

3.subcontract or assign the Processing of Personal Data

(B)Notwithstanding the foregoing, unless otherwise advised by Intel, Supplier
may transfer Personal Data consisting solely of business emails, billing and
account information, addresses or phone numbers outside the Processing Country,
for the sole purpose of performing its obligations under the Agreement
(including facilitating of invoicing and billing under the Agreement).

2.5    If Supplier receives any communication relating to the Processing of the
Personal Data, Supplier must immediately notify Intel, and must fully cooperate
and assist Intel in addressing the communication.

2.6    Supplier must take appropriate physical, technical and administrative
security measures to protect the Personal Data against any Data Breach. Supplier
must notify Intel immediately if Supplier becomes aware of any Data Breach and
fully cooperate with Intel in investigating the Data Breach, including, without
limitation, making available to Intel all relevant records, logs, files, data
reporting and other materials related to the Data Breach required to comply with
applicable law, regulation, industry standards or as otherwise required by
Intel.

2.7    Supplier’s failure to comply with any of the provisions of this Section
is a material breach of the Agreement, and Intel may terminate the Agreement
effective immediately upon written notice to Supplier.

--------------------------------------------------------------------------------

CLOUDERA DATA POLICY

This Data Policy (the “Policy”) describes Cloudera’s policy for handling,
storing, and otherwise treating certain types of data of Cloudera’s customers
(each, a “Customer”), including data associated with individual users and
employees of Customer organizations, in each case pursuant to a Customer
Agreement (as defined
below). “Cloudera” means Cloudera, Inc. and its subsidiaries and affiliates.

Additional policies that apply to specific Cloudera Products and Services can be
found at the end of this Policy, in the section entitled “Service-Specific
Terms.”

OVERVIEW

Cloudera collects information that a Customer or other data sources send to
Cloudera as part of such Customer’s use of Cloudera Products and Services. This
data is addressed in three categories, “Transaction Data”, “Account Data” and
“Personal Data”, each as defined below.

TRANSACTION DATA AND ACCOUNT DATA

Security

Cloudera understands the sensitive nature of the data that Customer or
Customer’s organization may provide while using Cloudera Products and Services.
Cloudera will maintain commercially reasonable administrative, physical and
technical safeguards designed for the protection, confidentiality and integrity
of Customer’s Transaction Data and Account Data.

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

Data Use by Cloudera

Access. Cloudera places strict controls over its employees’ access to Customer’s
Transaction Data and Account Data that resides in the Cloudera Products and
Services, and is committed to ensuring that Customer’s Transaction Data and
Account Data is not used by anyone who should not have access to it. The
operation of the Cloudera Products and Services requires that some employees
have access to Customer systems which store and process Customer’s Transaction
Data and Account Data. For example, in order to diagnose a problem Customer is
having with Cloudera Products and Services, the Cloudera support team may need
to access Customer’s Transaction
Data. These employees are prohibited from using these permissions to view
Customer’s Transaction Data unless it is necessary to do so.

Ownership. As between Cloudera and Customer, Customer or its licensors own all
right, title, and interest in and to the Transaction Data and Account Data.
Cloudera obtains no ownership rights under this Agreement from Customer or its
licensors to any Transaction Data or Account Data.

Use of Transaction Data. Cloudera will treat Transaction Data as confidential
and will use it only to: (i) facilitate operation of the Cloudera Products and
Services; (ii) enhance the use of the Cloudera Products and Services and its
related web pages; (iii) perform internal tracking to improve Cloudera Products
and Services; (iv) analyze the extent to which Customers use Cloudera Products
and Services; (v) enable Cloudera to contact its Customers; (vi) process, bill
and invoice Customer’s transactions for Cloudera Products and Services usage;
(vii) make backups in order to prevent data loss; and (viii) comply with the law
or a binding order of a governmental body. This permission includes allowing us
to use third-party service providers in the operation and administration of
Cloudera Products and Services and the rights granted to us are extended to
these third parties to the degree necessary in order for Cloudera Products and
Services to be provided. The Privacy Terms do not apply to Transaction Data.

Use of Account Data. To the extent the Account Data constitute Personal Data (as
defined in the Privacy Terms) Cloudera will only use such Account Data in
accordance with the Privacy Terms, and Customer consents to such usage.

Feedback. If any Customer users provide Cloudera with any feedback, support
tickets, reported defects, usability enhancements, feature requests or
suggestions regarding Cloudera Products and Services, Customer grants Cloudera
an unlimited, irrevocable, perpetual, free license to use any such feedback or
suggestions for any purpose without any obligation to Customer.

Retention of Transaction Data and Account Data

Data collected by Cloudera as part of diagnostic bundles will be retained for a
period of 12 months. All other Transaction Data and Account Data may be retained
no longer than as permitted by governing law, but in no event longer than for
the life of the related Cloudera product + 10 years.

Incident Management and Response

In the event of a security breach involving Cloudera Products and Services,
Cloudera will promptly notify each affected Customer of any unauthorized access
to any of such Customer’s Transaction Data or Account Data that was stored in
Cloudera Products and Services. Cloudera has internal incident management
procedures in place to handle such an event.

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

Product Security Practices

New features, functionality, and design changes go through a security review
process facilitated by Cloudera’s security team. The security team works closely
with development teams to resolve any additional security concerns that may
arise during development.

PERSONAL DATA

The Privacy Terms in this Attachment are hereby incorporated into this document
and include important terms regarding Cloudera’s handling of Personal Data. The
sections above relating to Incident Management and Response and Product Security
Practices also apply to Personal Data.

CUSTOMER RESPONSIBILITIES

Customer Account and Account Data

To access certain Cloudera Online Services, Customer may be asked to create a
Cloudera account associated with a valid e-mail address (a “Customer Account”).
Customer may only create one account per email address. Customer is responsible
for: (i) maintaining the confidentiality of the Account Data, (ii) monitoring
and controlling which end users have access to the Customer Account; and (iii)
all activities that occur under the Customer Account, regardless of whether the
activities are undertaken by Customer, Customer’s employees or a third party
(including Customer’s contractors or agents). Except to the extent caused by
Cloudera’s breach of this Data Policy and the Privacy Terms, Cloudera and its
Affiliates are not responsible for unauthorized access to the Customer
Account. Customer will contact Cloudera immediately if Customer believes an
unauthorized third party may be using the Customer Account or if Customer’s
Account Information is lost or stolen.

Acceptable Use

Customer must not: (i) use, or encourage, promote, facilitate or instruct others
to use, Cloudera Products and Services for any illegal, harmful or offensive
use, or to transmit, store, display, distribute or otherwise make available
content that is illegal, harmful, or offensive; (ii) use Cloudera Products and
Services to violate the security or integrity of any network, computer or
communications system, software application, or network or computing device;
(iii) make network connections to any users, hosts, or networks unless Customer
has permission to communicate with them; (iv) use Cloudera Products and Services
to transmit spam, bulk or unsolicited communications; or (v) use Cloudera
Products and Services to collect and store personally identifiable information
about any person unless specifically authorized by such person.

Transaction Data, Account Data and Personal Data

Customer is solely responsible for the creation, operation and maintenance of
Transaction Data, Account Data and Personal Data (unless such Personal Data is
collected or transferred to Cloudera for processing). For example, Customer is
solely responsible for:

•
the technical operation of Cloudera Products and Services, including ensuring
that calls Customer makes to any Cloudera Online Service are compatible with
then-current APIs for that Cloudera Online Service;

•
compliance with the Acceptable Use provisions herein;

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

•
to the extent Transaction Data, Account Data and Personal Data are under
Customer’s control, compliance with all applicable laws;

•
any claims relating to Transaction Data, Account Data and Personal Data;

•
anonymizing data to the extent Customer deems it reasonable or prudent to do so;
and

•
properly handling and processing notices sent to Customer (or any of its
affiliates) by any person claiming Customer’s data violates such person’s
rights, including notices pursuant to the Digital Millennium Copyright Act.

Customer agrees that its Transactional Data, Account Data and Personal Data will
not include information regulated under the International Traffic in Arms
Regulations (U.S. government regulations addressing defense- related articles
and services).

Customer agrees not to upload, post or otherwise transmit to Cloudera any
Transaction Data that: (a) is inaccurate, harmful, obscene, pornographic,
defamatory, racist, violent, offensive, harassing, or otherwise objectionable;
(b) includes unauthorized disclosure of personally identifiable information or
other confidential information; (c) violates or infringes any third party
intellectual property rights; or (d) contains software viruses or any other
computer code, files or programs designed to interrupt, destroy or limit the
functionality of any computer
software or hardware or telecommunications equipment. Cloudera reserves the
right to edit or remove Transaction Data that violates this Policy.

By providing Transaction Data, Customer represents and warrants to Cloudera that
Customer owns or otherwise possesses all intellectual property rights and other
rights necessary to provide such Transaction Data and to permit others to make
use of such Transaction Data.

Security and Backup

Customer is responsible for taking its own steps to maintain appropriate
security, protection and backup of Transactional Data, Account Data and Personal
Data, which may include the use of encryption technology or anonymization to
protect such data from unauthorized access.

Customer Data

Cloudera Products and Services that store or process Customer Data are either
located on a third-party hosting site or on Customer’s own servers. As such,
Cloudera has no liabilities or obligations with respect to Customer Data under
this Data Policy.

DEFINITIONS

“Account Data” means information about Customer that Customer provides to
Cloudera in connection with the creation or administration of its Cloudera
account. For example, Account Data includes names, user names, phone numbers,
email addresses and billing information associated with Customer’s Cloudera
account.

"Cloudera Products and Services" means any of Cloudera’s products and software
to which Customer may have subscribed under the terms of a Customer Agreement,
including but not limited to Cloudera Manager, Cloudera Enterprise, Cloudera
Live, Cloudera Express, Cloudera Director, any Cloudera Online Services, any
trial software, and any software related to the foregoing.

--------------------------------------------------------------------------------

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY
BRACKETS AND ASTERISKS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE
SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 24B-2 OF THE SECURITIES
EXCHANGE ACT OF 1934, AS AMENDED. CONFIDENTIAL TREATMENT HAS BEEN REQUESTED WITH
RESPECT TO THE OMITTED INFORMATION.

“Customer Agreement” means the separate agreement between Customer and Cloudera
governing Customer’s use of the Cloudera Products and Services.
“Customer Data” means any of Customer’s originating data that might be stored in
nodes and accessed by Cloudera’s software or other third-party software.
“Personal Data” means Personal Data as defined in the Privacy Terms.
“Privacy Terms” means the privacy terms included in this Attachment
“Transaction Data” means all data that is (i) input into Cloudera Products and
Services by Customer or its end users, (ii) generated by Cloudera’s systems as a
result of Customer’s or its end users’ use of the Cloudera Products and
Services, or (iii) data that is generated for troubleshooting and diagnostics,
in each case that is transmitted to Cloudera. Transaction Data does not include
Customer Data.

In the event of a conflict between this Policy and the terms of the applicable
Customer Agreement, the terms and conditions of this Policy apply, but only to
the extent of such conflict.

SERVICE-SPECIFIC TERMS

Cloudera Navigator Optimizer and Workload Analytics

Data Use. Cloudera’s Navigator Optimizer service (“Optimizer”) and Workload
Analytics service (“Workload Analytics”) do not collect or store any Personal
Data or Customer Data. These services may collect and/or store certain types of
Transaction Data such as Customer’s queries or workload information (“Analytics
Data”). While Analytics Data is confidential information and will be protected
pursuant to the provisions in this policy that apply to Transaction Data,
Optimizer and Workload Analytics are not databases of record for the storage of
Analytics Data. Retention of this Analytics Data is not Cloudera’s
responsibility.

Availability. Cloudera is committed to making Optimizer and Workload Analytics
highly-available services that Customers can count on. To the extent feasible,
Cloudera’s infrastructure runs on systems that are fault-tolerant, for failures
of individual servers. Cloudera’s operations team tests disaster-recovery
measures regularly and staffs a team to quickly resolve unexpected incidents.
However, at this time Cloudera makes no uptime or availability guarantees with
respect to Optimizer or Workload Analytics or retention of Analytics Data.

Cloudera will host Optimizer and Workload Analytics only in the United States.