instruction:
In this task, you're given a passage that represents a legal contract or clause between multiple parties, followed by a question that needs to be answered. Based on the paragraph, you must write unambiguous answers to the questions and your answer must refer a specific phrase from the paragraph. If multiple answers seem to exist, write the answer that is the most plausible.
question:
CERTAIN IDENTIFIED INFORMATION HAS BEEN EXCLUDED FROM THIS EXHIBIT BECAUSE IT IS NOT MATERIAL AND WOULD LIKELY CAUSE COMPETITIVE HARM TO THE REGISTRANT IF PUBLICLY DISCLOSED. [***] INDICATES THAT INFORMATION HAS BEEN REDACTED.

PROMOTION AGREEMENT

by and between

JANSSEN BIOTECH, INC.

and

IMMUNOMEDICS, INC.

Dated as of: April 5, 2019





TABLE OF CONTENTS

ARTICLE 1 DEFINITIONS 1

ARTICLE II BRAND PLAN 10 2.1 Brand Plan Generally 10 2.2 Contents of Brand Plan 10

ARTICLE III PROMOTION 12 3.1 Scope 12 3.2 Detailing Requirements 13 3.3 Sales Representatives 14 3.4 Promotional Materials 15 3.5 Product Sales 16 3.6 Product Recall 16 3.7 Product Return 17

ARTICLE IV GOVERNANCE 17 4.1 Authority 17 4.2 Joint Commercial Team 17 4.3 BALVERSA Sales Advisory Team 18

ARTICLE V COMPENSATION 18 5.1 Definitions 18 5.2 Service Fees 18 5.3 Milestones 19 5.4 Costs 20 5.5 Reports and Payments 20

ARTICLE VI REGULATORY MATTERS 21 6.1 Regulatory Approvals 21 6.2 Pharmacovigilance Procedures 22 6.3 Product Complaints 22 6.4 Post-Marketing Surveillance 22 6.5 Product Medical Inquiries 22 6.6 Companion Diagnostic Inquiries 22 6.7 Access, Affordability and Patient Support Inquiries 23

ARTICLE VII BOOKS, RECORDS AND AUDIT RIGHTS 23 7.1 Books and Records 23 7.2 Books and Records Audits 23

ARTICLE VIII TERM AND TERMINATION 24 8.1 Term; Termination 24 8.2 Effect of Termination or Expiration 26 8.3 Suspension of Product Promotion 28





ARTICLE IX CONFIDENTIALITY; RESTRICTIVE COVENANTS 28 9.1 Confidentiality 28 9.2 Exclusivity 31 9.3 Restrictions on Promotions 31 9.4 Limitation on Soliciting Employees 31

ARTICLE X INTELLECTUAL PROPERTY 32 10.1 Use of Trademarks 32 10.2 Ownership of Intellectual Property Rights 32 10.3 Prosecution and Maintenance 33 10.4 Enforcement against Infringement 33 10.5 Third Party Infringement Claims 33

ARTICLE XI REPRESENTATIONS AND WARRANTIES; CERTAIN COVENANTS 33 11.1 Representations of Authority 33 11.2 Consents 33 11.3 No Conflict 33 11.4 Enforceability 33 11.5 Sales Representatives and Other Company Employees 34 11.6 Other Compliance Matters 34 11.7 Infringement of Third Party Intellectual Property; Clinical Trial Data 36 11.8 Disclaimer 36

ARTICLE XII INDEMNIFICATION; LIMITS ON LIABILITY 37 12.1 Scope of Indemnification 37 12.2 Notice and Control of Actions 38 12.3 Limitations on Liability 39

ARTICLE XIII DISPUTE RESOLUTION 39 13.1 Disputes 39 13.2 Negotiation 39 13.3 Mediation 40 13.4 Arbitration 40 13.5 Confidentiality 42

ARTICLE XIV MISCELLANEOUS 42 14.1 Press Announcements 42 14.2 Force Majeure Event 42 14.3 Independent Contractors 43 14.4 Performance by Affiliates 43 14.5 Notices 43 14.6 Entire Agreement 44 14.7 Amendments; Assignment 44





14.8 Non-Waiver of Rights 14.9 Further Assurances and Cooperation 14.1 Severability 14.11 Binding Effect 14.12 Counterparts; Facsimile Signatures 14.13 Third Party Beneficiaries 14.14 Governing Law 14.15 Construction

Schedule 1.16 Janssen Universal Calendar

Schedule 6.2 Pharmacovigilance Provisions

Exhibit A Brand Plan

Exhibit B Detailing Requirements

Exhibit C Records and Information Management Requirements

Exhibit D Health Care Compliance Provisions





PROMOTION AGREEMENT

This PROMOTION AGREEMENT (this Agreement) dated as of April 5, 2019 (the Effective Date), is entered into by and between Janssen Biotech, Inc., a corporation organized under the laws of Pennsylvania (Janssen) and Immunomedics, Inc., a corporation organized under the laws of Delaware (Company).

WHEREAS, before the Effective Date, Janssen submitted an application for approval to market and/or sell the Product (defined below) for the Initial Indication (defined below) in the Territory (defined below); and

WHEREAS, Janssen now wishes to engage Company to Promote (defined below) the Product for the Initial Indication in the Territory and Company wishes to be so engaged, subject to and upon the terms and conditions set forth in this Agreement;

NOW, THEREFORE, in consideration of the mutual representations, warranties, covenants and undertakings contained in this Agreement, and for other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the Parties, intending to be legally bound, agree as follows:

ARTICLE I DEFINITIONS

Unless otherwise defined herein, capitalized terms used in this Agreement have the meanings set forth in this Article I.

1.1 Acquirer has the meaning set forth in Section 9.2.

1.2 Acquisition has the meaning set forth in Section 9.2.

1.3 Action means any claim, action, cause of action or suit (whether in contract or tort or otherwise), litigation (whether at law or in equity, whether civil or criminal), assessment, arbitration, investigation, hearing, charge, complaint, demand, notice or proceeding from, by or before any Governmental Authority.

1.4 Affiliate means with respect to a Party, any Person that is directly or indirectly controlling, controlled by or under common control with such Party at the time that the determination of affiliation is made. For the purposes of this definition, control of a Person means (a) beneficial ownership of at least fifty percent (50%) of the voting securities or other comparable equity interests of such Person (whether directly or pursuant to any option, warrant or other similar arrangement) or (b) the possession, directly or indirectly, of the power to direct the management and policies of such Person, whether through the ownership of voting securities, by contract, declaration of trust or otherwise, and the terms controlling and controlled shall have meanings correlative to the foregoing.

1.5 Agreement has the meaning set forth in the preamble to this Agreement.

1.6 Approval Date means the date upon which Marketing Approval is received for





the Product for the Initial Indication.

1.7 Audit Report has the meaning set forth in Section 7.2.2.

1.8 Audited Party has the meaning set forth in Section 7.2.1.

1.9 Auditing Party has the meaning set forth in Section 7.2.2.

1.10 Balversa-only Target has the meaning set forth in Exhibit B.

1.11 Baseline has the meaning set forth in Section 5.1.1.

1.12 Books and Records has the meaning set forth in Section 7.1.

1.13 Brand Plan has the meaning set forth in Section 2.1.

1.14 BSAT has the meaning set forth in Section 4.3.1.

1.15 Business Day means any day other than a Saturday or a Sunday or other day on which commercial banks are authorized or required to be closed in New York, New York.

1.16 Calendar Quarter means a calendar quarter based on that certain universal calendar system used by Janssen and each of its Affiliates for internal business purposes (a copy of which calendar for 2019 and 2020 is attached hereto as Schedule 1.16), such that each Calendar Quarter ends on the last date of the calendar quarter indicated on Schedule 1.16 (the Quarter End Date) and begins on the date following the Quarter End Date of the preceding Calendar Quarter.

1.17 Calendar Year means a calendar year based on that certain universal calendar system used by Janssen and each of its Affiliates for internal business purposes (a copy of which calendar for 2019 and 2020 is attached hereto as Schedule 1.16), such that each Calendar Year ends on the fourth Quarter End Date for such year and begins on the date following the fourth Quarter End Date of the preceding Calendar Year.

1.18 Call means an in-person visit by an adequately trained sales representative to the office of a health care professional in the Territory for the purpose of promoting or presenting one or more pharmaceutical products.

1.19 Call Plan has the meaning set forth in Section 2.2.3.

1.20 CPR Mediation Procedure has the meaning set forth in Section 13.3.1.

1.21 CPR Rules has the meaning set forth in Section 13.4.

1.22 Companion Diagnostic means the diagnostic test approved by FDA concurrently with the Product for use in conjunction with the Product.





1.23 Company has the meaning set forth in the preamble to this Agreement.

1.24 Company Indemnified Parties has the meaning set forth in Section 12.1.1.

1.25 Company Internal Detail Reporting System means the data and records collected by Company and its Affiliates, in accordance with its standard business practice, to monitor Details made by Sales Representatives, which, with respect to the Product, include the date a Detail was made, the name of the Target to whom the Detail was made, the indication(s) for which the Product was presented, and the identity of the Sales Representative who delivered the Detail.

1.26 Company Product means the drug that is being developed by Company on the Effective Date, known as IMMU- 132 or sacituzumab govitecan.

1.27 Company Product Approval Date means the date upon which Marketing Approval is first received in the Territory for the Company Product.

1.28 Company Trademark means any Trademark owned by Company or any of its Affiliates.

1.29 Competing Product means any pharmaceutical product that is (a) approved specifically for use, in the treatment of urothelial cancer in any patient population in the Territory or (b) a fibroblast growth factor receptor inhibitor. If the Parties agree to extend the Term beyond the Expiration Date, Competing Product shall not include Company Product after the Expiration Date.

1.30 Confidential Information of a Party means (a) all non-public or proprietary information and data (including clinical data, technology, trade secrets, design specifications, dossiers, manufacturing formulae, manufacturing procedures and instructions, methods and processes, formats, designs, applications and programs, raw material supply arrangements, projections, prescriber and target data, pharmacy data, sales data, analyses, rebate agreements, promotion plans, detailing information, financial statements, customer and target lists, marketing plans, budgets, Third Party contracts, market research data, pricing, reimbursement and costs relating to the Product) that is disclosed by or on behalf of such Party or any of its Affiliates to the other Party, any of its Affiliates or any of their respective employees, agents or contractors pursuant to or in connection with this Agreement and (b) any other non- public or proprietary information and data that is expressly deemed in this Agreement to be Confidential Information of such Party, whether or not disclosed by or on behalf of such Party to the other Party, any of its Affiliates or any of their respective employees, agents or contractors, in each case ((a) and (b)) without regard to whether any of the foregoing is marked confidential or proprietary, or in oral, written, graphic or electronic form.

1.31 Cumulative Net Sales has the meaning set forth in Section 5.1.1.

1.32 Cure Period has the meaning set forth in Section 8.1.4.





1.33 Detail means an in-person presentation of the Product and its uses for the Initial Indication made by an adequately trained sales representative during a Call to one or more Health Care Professionals in the Territory during which the sales representative describes the Product and such use(s) in a fair and balanced manner consistent with (a) the Product Label and Insert and any Promotional Materials approved in accordance with this Agreement, and (b) the other requirements of this Agreement, the Promotion Rules and applicable Laws, but shall not include reminder details or e-details, as such terms are generally understood in the pharmaceutical industry in the Territory, or any presentations made at conventions, consulting programs or similar gatherings, other than a pre-arranged or scheduled meeting at such gathering between the sales representative and a Health Care Professional. When used as a verb, Detail means to deliver the presentation described in this definition. Detailing shall have a corresponding meaning.

1.34 Detailing Period means each of the following periods: (a) the period beginning on the Start Date and ending on September 30, 2019; (b) October 1, 2019 through December 31, 2019; and (c) January 1, 2020 through March 31, 2020.

1.35 Diligent Efforts means, with respect to an activity to be undertaken by a Party pursuant to this Agreement, the level of efforts and resources normally used by such Party with respect to a pharmaceutical product owned or controlled by such Party, or to which such Party has similar rights, which product is of similar market potential and strategic value and is at a similar stage in its development or life as is the Product, taking into account all relevant factors, including issues of safety, efficacy, product profile, the competitiveness of the marketplace, the proprietary position of the Product, regulatory matters, profitability of the Product and other relevant commercial factors.

1.36 Disclosing Party has the meaning set forth in Section 9.1.3.

1.37 Disputes has the meaning set forth in Section 13.1.

1.38 Dual Target has the meaning set forth in Exhibit B.

1.39 Effective Date has the meaning set forth in the preamble to this Agreement.

1.40 Expiration Date means March 31, 2020.

1.41 FDA means the United States Food and Drug Administration or any successor agency thereto.

1.42 Fee Notice has the meaning set forth in Section 5.5.1.

1.43 First Position Detail means, with respect to any product, a detail or presentation that is dedicated solely to such product and constitutes at least 70% of the total presentation time for all products presented during a Call in which such product is the first product presented to the health care professional.





1.44 Force Majeure has the meaning set forth in Section 14.2.

1.45 GAAP means United States generally accepted accounting principles applied on a consistent basis. Unless otherwise defined or stated, financial terms shall be calculated by the accrual method under GAAP.

1.46 Governmental Authority means any government (including any national, federal, state or local government), or political subdivision thereof, or any multinational or other organization, authority, agency or commission entitled to exercise any administrative, executive, judicial, legislative, police, regulatory or taxing authority or power, any court or tribunal, or any governmental arbitrator or arbitral body (or any department, bureau or division of any of the foregoing).

1.47 Health Care Professional means a health care professional with prescribing authority who treats urothelial cancer.

1.48 Indemnified Party has the meaning set forth in Section 12.2.1.

1.49 Indemnifying Party has the meaning set forth in Section 12.2.1.

1.50 Initial Indication means the first indication for which the Product receives Marketing Approval in the Territory, which the Parties expect to be treatment of adult patients with locally advanced or metastatic urothelial carcinoma which has (a) susceptible FGFR 3 or 2 genetic alterations and (b) progressed during or following at least one line of prior platinum-containing chemotherapy including within 12 months of neoadjuvant or adjuvant platinum-containing chemotherapy, where patients are selected for therapy based on an FDA-approved companion diagnostic for the Product; provided, however, that, with respect to any such indication for which the Product receives Marketing Approval from the FDA, Initial Indication shall be defined by the exact wording used in the Product Label and Insert as so approved.

1.51 Janssen has the meaning set forth in the preamble to this Agreement.

1.52 Janssen Brand Usage Guidelines means Janssen's group guidelines on the Janssen brand visual and verbal identity as they apply to the Trademarks of Janssen and its Affiliates and the use of other companies' names and logos, as notified to Company by Janssen from time to time.

1.53 Janssen Indemnified Parties has the meaning set forth in Section 12.1.2.

1.54 Joint Commercial Team has the meaning set forth in Section 4.2.1.

1.55 Launch Date means the date of the commercial launch of the Product in the Territory selected by Janssen. As of the Effective Date, the Parties expect that the Launch Date shall be on or about May 1, 2019.





1.56 Laws means all laws, statutes, rules, regulations, ordinances and other pronouncements having the effect of law in any country, state, province, county, city or other political subdivision, and includes any rule or regulation of any Governmental Authority that may be in effect from time to time in the Territory.

1.57 License Agreement means that certain Collaboration and License Agreement between Janssen Pharmaceutica N.V. and Astex Therapeutics Limited executed in June 2008, as amended, pursuant to which Janssen was granted a license under one or more patents covering the Product.

1.58 Losses has the meaning set forth in Section 12.1.1.

1.59 Marketing Approval means, with respect to any product, approval by the FDA of an NDA for such product. 1.60 Milestone Event has the meaning set forth in Section 5.3.

1.61 Milestone Payment has the meaning set forth in Section 5.3.

1.62 Minimum Number of Details Requirement has the meaning set forth in Exhibit B.

1.63 Minimum PDE Requirement has the meaning set forth in Exhibit B.

1.64 Minimum Reach Requirement has the meaning set forth in Exhibit B.

1.65 Minimum Top Target Requirement has the meaning set forth in Exhibit B.

1.66 NDA means, with respect to any product, a New Drug Application for such product and all supplements to such New Drug Application filed pursuant to the requirements of the FDA.

1.67 Net Sales means [***].

1.68 Other Company Employees has the meaning set forth in Section 2.2.2(a).

1.69 Party means each of Janssen and Company, which together are referred to as the Parties.

1.70 Passing Score has the meaning set forth in Section 2.2.2(c).

1.71 Payee Party means, with regards to a payment pursuant to this Agreement, the Party that receives such payment from the other Party under this Agreement.

1.72 Paying Party means, with regards to a payment pursuant to this Agreement, the Party that makes such payment to the other Party under this Agreement.





1.73 PDE shall mean, with respect to any product, a primary detail equivalent, which consists of either a First Position Detail of such product or two Second Position Details of such product, such that a First Position Detail shall count as [***] PDE and a Second Position Detail shall count as [***] PDE. 1.74 Performance Failure Notice has the meaning set forth in Section 3.2.4(b). 1.75 Person means, as applicable, an individual, sole proprietorship, partnership, limited partnership, limited liability partnership, corporation, limited liability company, business trust, joint stock company, trust, incorporated association, joint venture or similar entity or organization, including a Governmental Authority.

1.76 PMS has the meaning set forth in Section 6.4.

1.77 Product means any or each of the tablets containing erdafitinib as its sole active ingredient in a dosage amount of 3 mg, 4 mg or 5 mg and that is currently expected to be approved by the FDA for the Initial Indication, as currently manufactured by or on behalf of Janssen or its Affiliate and planned to be marketed under the trademark BALVERSA™.

1.78 Product Complaint means an oral, written or electronic communication from any Person that implies dissatisfaction regarding the identity, purity, quality or stability of the Product.

1.79 Product Label and Insert means (a) all labels and other written, printed or graphic material affixed to any container, packaging or wrapper utilized with the Product; and (b) any written material physically accompanying the Product, including the Product package inserts.

1.80 Product-Specific Training means training with respect to (a) sales and scientific materials regarding the disease state information on urothelial cancer, (b) currently available clinical data supporting use of the Product for the treatment of urothelial cancer, and (c) clinical data for products that compete with the Product.

1.81 Product Trademarks means any Trademarks as may be selected by Janssen and its Affiliate, in their sole discretion, for use in connection with the Product in the Territory, including any Trademark owned or controlled by Janssen or its Affiliates that includes the name BALVERSA. For purposes of clarity, the term Product Trademark shall not include the corporate names and logos of either Party.

1.82 Promotion means the (a) Detailing of the Product in the Territory for the Initial Indication and (b) performance of the other promotional activities for the Product set forth in the Brand Plan. Promote and Promoting, when used as a verb, means to engage in such Promotion.

1.83 Promotion Rules means: (a) the PhRMA Code on Interactions with Health Care Professionals; and (b) upon reasonable notice by Janssen to Company, any other similar rules,





policies or procedures with respect to the promotion of pharmaceutical products in the Territory that Janssen deems necessary or advisable to follow (including Janssen's compliance policies).

1.84 Promotional Materials has the meaning set forth in Section 3.4.2.

1.85 Quarter End Date has the meaning set forth in Section 1.16.

1.86 Receiving Party has the meaning set forth in Section 9.1.3.

1.87 Regulatory Approval means all technical, medical and scientific licenses, registrations, authorizations and approvals (including Marketing Approvals and labeling approvals) of all applicable Regulatory Authorities necessary for the commercial distribution, marketing, promotion, offer for sale, use, import and sale of a pharmaceutical product in a regulatory jurisdiction.

1.88 Regulatory Authority means any authority, agency, commission, official or other instrumentality inside or outside the Territory, including the FDA, having jurisdiction over the manufacture of Product for sale in the Territory, or over the commercial distribution, marketing, promotion, offer for sale, use, import or sale of the Product in the Territory.

1.89 Remediation Plan has the meaning set forth in Section 3.2.4(b).

1.90 Sales Force has the meaning set forth in Section 3.3.2(a).

1.91 Sales Representative means a sales representative used by Company to perform Details of the Product for the Initial Indication to Health Care Professionals in the Territory. Sales Representative shall not include any key account manager, medical science liaison or regional sales manager.

1.92 Second Position Detail means, with respect to any product, a detail or presentation that is dedicated solely to such product and constitutes at least 30% of the total presentation time for all products presented during a Call in which such product is the second product presented to the health care professional.

1.93 Service Fee has the meaning set forth in Section 5.1.

1.94 Start Date means the first date upon which Sales Representatives are able to Detail the Product in accordance with this Agreement and as approved by Janssen, which may be before, on or after the Launch Date.

1.95 Supplementary Training means supplemental training relating to a Product, including refresher training, training regarding any emerging Product safety information, or new Promotional Materials or Product messaging.

1.96 Target means a Health Care Professional who treats patients for locally advanced





or metastatic urothelial cancer and is included in the Target List in accordance with this Agreement.

1.97 Target List has the meaning set forth in Section 2.2.1.

1.98 Tax or Taxes means any present or future taxes, levies, imposts, duties, charges, assessments or fees of any nature (including interest, penalties and additions thereon or thereto) that are imposed upon a Party by a Governmental Authority or other taxing authority under any applicable Laws.

1.99 Term has the meaning set forth in Section 8.1.1.

1.100 Territory means the United States of America, including its territories and possessions.

1.101 Third Party means any Person other than a party to this Agreement or any of its Affiliates.

1.102 Trademark means any trademark, trade dress, trade name, brand name, logo, corporate name or service mark, used in connection with any product or service.

1.103 Training Activities Plan has the meaning set forth in Section 2.2.2(a). ARTICLE II BRAND PLAN 2.1 Brand Plan Generally. A written plan for the marketing and promotion of the Product for the Initial Indication in the Territory pursuant to this Agreement for Calendar Year 2019 is attached to this Agreement as Exhibit A (the Brand Plan). If the Launch Date is delayed beyond May 1, 2019, Janssen shall update the Brand Plan to adjust the Parties' obligations appropriately to reflect such delay. Janssen shall have the sole authority and responsibility for updating the Brand Plan for Calendar Year 2020. Janssen shall use reasonable efforts to deliver the Brand Plan for Calendar Year 2020 to the Joint Commercial Team by no later than November 30, 2019.

2.2 Contents of Brand Plan. The Brand Plan shall include: (a) a description of the Target List; (b) the Training Activities Plan; (c) a description of the Call Plan; and (d) a description of the sales and promotional materials (including Health Care Provider and patient education sales materials and, where applicable, non-personal promotional materials) to be used during the relevant year in connection with the Product. The Brand Plan shall also include plans for other non-Detailing activities, if any, to be conducted in relation to the Product during the period covered by the Brand Plan, such as attendance at medical conferences and Janssen sales meetings, marketing plans for advisory boards and publication plans.





2.2.1 Target List. Prior to the Launch Date, Janssen shall provide to Company, in electronic form, a list that sets forth: (x) the name of each Target to which the Sales Representatives will perform Details; and (y) the priority classification of each such Target (high, medium or low). Such list, as amended from time to time by Janssen, shall be the Target List. Janssen shall furnish with or as part of the Target List the claims data upon which the Target priority classification was based if (a) Janssen is able to obtain an agreement with the relevant Third Party to provide such data to Company and (b) the Parties agree on which Party will bear the costs of providing such data to Company.

2.2.2 Training Activities Plan.

(a) Training Activities Plan. The Brand Plan includes a plan that sets forth all of the training that Janssen deems necessary or advisable for the Sales Representatives and any other employees of Company conducting activities under this Agreement (such other employees, the Other Company Employees) to complete prior to conducting activities under this Agreement (the Training Activities Plan). The Training Activities Plan shall indicate which Party is responsible for providing such training, when such training will be provided and how such training will be provided (e.g., in person or remotely, which may include live audio/video conference calls, or electronically such as via learning management systems). The initial Training Activities Plan includes a plan for conducting and completing the Product-Specific Training and (as applicable) state Law compliance training of the Sales Representatives before the Launch Date. The initial Training Activities Plan also includes a plan for conducting and completing before the Launch Date compliance training of the Sales Representatives and the Other Company Employees in a manner consistent with all applicable pharmaceutical industry standards. Janssen may update the Training Activities Plan from time to time to include any additional training that Janssen deems necessary or advisable to refresh or update the knowledge of the Sales Representatives and the Other Company Employees.

(b) Training Responsibilities. Janssen shall conduct all Product-Specific Training to the Sales Representatives and Other Company Employees. Company shall at all times ensure that each Sales Representative and Other Company Employee (including Sales Representatives and Other Company Employee that are engaged after Launch Date) has received the Product- Specific Training and any other training set forth in the Training Activities Plan.

(c) Examination. Janssen shall administer to each Sales Representative an examination of the Product- Specific Training topics and any other training topics that Janssen deems necessary or advisable. The first such examination of the Sales Representatives shall occur no later than the Launch Date. Janssen shall determine the minimum score that is considered a minimum passing score for each examination (the Passing Score). Company shall ensure that, before conducting any Detailing of the Product pursuant to this Agreement, each Sales Representative has completed the Product-Specific Training and other training described in the Training Activities Plan and has achieved a Passing Score on such examination. Upon Company's request, Janssen shall provide, as soon as reasonably practicable, additional remedial training and re-testing of Sales Representatives who fail to achieve a Passing Score. Any Sales Representative





who does not obtain a Passing Score on such an examination shall not be permitted by Company to perform in-person presentations of the Product unless and until such Sales Representative is re-tested and achieves a Passing Score.

2.2.3 Call Plan. Janssen shall develop and provide to Company an annual plan that describes the amount, frequency and reach of Detailing to be performed by the Sales Representatives to the Targets on the Target List (the Call Plan).

ARTICLE III PROMOTION

3.1 Scope.

3.1.1 Engagement; Obligations.

(a) Janssen hereby engages Company on a non-exclusive basis to Promote the Product for the Initial Indication in the Territory on the terms, and subject to the conditions, set forth in this Agreement, and Company hereby accepts such engagement. Company shall not Promote the Product for any indication other than the Initial Indication. Company shall not conduct any promotion or marketing activities with respect to the Product that are not set forth in the Brand Plan without the prior written consent of Janssen. Janssen and its Affiliates retain the right to Detail and otherwise promote the Product in the Territory.

(b) Each Party shall perform the obligations and activities assigned to it in, and comply with the applicable provisions of, the Brand Plan and this Agreement.

3.1.2 Retained Rights. Any rights of Janssen or any of its Affiliates related to the Product that are not expressly granted to Company hereunder shall be retained by Janssen or such Affiliate, including all decision-making and other authority relating to Product development, regulatory matters, medical affairs, distribution, manufacturing and supply, Product strategy, marketing, sales, pricing, discounting, reimbursement, life cycle management, positioning, marketing messages and other commercialization matters. Janssen shall book sales of the Product in the Territory and shall have the sole right and responsibility to manufacture the Product and to distribute the Product in the Territory. Company shall not distribute or sell the Product in the Territory, and nothing herein shall be construed to provide Company with any rights to develop, manufacture, supply, distribute or sell the Product in the Territory.

3.1.3 Compliance with Laws. Company shall ensure that all of its personnel involved in the activities set forth under this Agreement comply with all applicable Laws and the Promotion Rules. Company shall ensure that the Sales Representatives and Other Company Employees Promote the Product at all times in accordance with applicable Laws and the Promotional Materials provided and approved by Janssen, refrain from making any false or misleading statements about the Product and refrain from discussing any unapproved uses of the Product.





3.2 Detailing Requirements.

3.2.1 General. Subject to Janssen fulfilling its obligations under Section 2.2.2(b) to provide the initial training and under Section 3.4 to deliver the Promotional Materials, Company shall begin promoting and Detailing the Product for the Initial Indication to the Targets on the Start Date. Company shall perform Detailing during the Term in accordance with this Section 3.2, the Call Plan and the Detailing requirements set forth on Exhibit B. For reference, the term Detail is defined in Section 1.33.

3.2.2 Minimum Detailing Requirements. At a minimum, Company shall cause its Sales Force to satisfy the Minimum Number of Details Requirement, the Minimum Reach Requirement and, if applicable, the Minimum PDE Requirement and the Minimum Top Target Requirement set forth in Exhibit B in each Detailing Period. Company shall ensure that the Sales Force satisfies the Positioning Requirements set forth on Exhibit B. Details that do not satisfy the Positioning Requirements set forth on Exhibit B will not be counted for purposes of determining whether the Minimum Number of Details Requirement, the Minimum Reach Requirement, the Minimum PDE Requirement or the Minimum Top Target Requirement has been satisfied.

3.2.3 Effects of Failure to Meet Minimum Detailing Requirements. If Company fails to achieve the Minimum Number of Details Requirement, the Minimum Reach Requirement or, if applicable, the Minimum PDE Requirement or the Minimum Top Target Requirement in any Detailing Period, Janssen shall have the right to terminate this Agreement by giving thirty (30) days' notice, unless:

(a) Company complied with and performed its Detailing activities in accordance with any Remediation Plans developed by Company and approved by Janssen during such Detailing Period; or

(b) if (i) neither Party provided a Performance Failure Notice under Section 3.2.4 during such Detailing Period and (ii) Company performs additional Details in the first month after such Detailing Period such that, if such Details had been performed during such Detailing Period, they would have been sufficient to cure the failure to achieve the Minimum Number of Details Requirement, the Minimum Reach Requirement, the Minimum PDE Requirement or the Minimum Top Target Requirement, as applicable. To avoid double-counting, such additional Details will not be taken into account when determining whether Company satisfies the Minimum Number of Details Requirement, Minimum Reach Requirement or, if applicable, the Minimum PDE Requirement or the Minimum Top Target Requirement in the then-current Detailing Period.

For clarity, (i) Company must achieve all of the applicable foregoing minimum requirements in order to avoid giving rise to Janssen's rights and remedies under this Section 3.2.3, and (ii) such rights shall be in addition to any other rights and remedies that may be available to Janssen under applicable Laws in the event of any such failure on the part of Company.

3.2.4 Monthly Detailing Reports.





(a) No later than [***] ([***]) Business Days following the end of each month during the Term, Company shall report to Janssen the number of Details performed (and any other information necessary to determine whether the requirements set forth in Section 3.2.2 and Exhibit B have been satisfied) during such month by the Sales Representatives in accordance with this Agreement and the Call Plan, as reported by the Company Internal Detail Reporting System. The Joint Commercial Team shall review and discuss Company's performance of its Detailing obligations on a monthly basis.

(b) In the event that either Party believes, based on such reports, review or discussion, that Company will fail to achieve the Minimum Number of Details Requirement, the Minimum Reach Requirement or, if applicable, the Minimum PDE Requirement or the Minimum Top Target Requirement under Section 3.2.2 for the then-current Detailing Period, such Party will promptly notify the other Party in writing (a Performance Failure Notice) and Company shall develop a plan to avoid such a failure within fifteen (15) Business Days after the end of the applicable month, which plan will be subject to Janssen's approval, not to be unreasonably withheld or delayed (as so approved, a Remediation Plan).

(c) For clarity, the Joint Commercial Team shall have no authority to extend the time for performance or reduce the Minimum Number of Details Requirement, the Minimum Reach Requirement or, if applicable, the Minimum PDE Requirement or the Minimum Top Target Requirement without an amendment to this Agreement.

3.2.5 Ride-Alongs. Members of Janssen's team shall have the right to conduct ride-alongs with the Sales Representatives for purposes of monitoring the Details delivered by the Sales Representatives upon Janssen's request. Janssen will give reasonable notice to Company sales management of each request.

3.3 Sales Representatives.

3.3.1 Qualifications. Company shall ensure that each Sales Representative: (i) is a full-time employee of Company and a full-time member of its sales force; (ii) possesses skills, training and experience that are consistent with industry standards applicable to the promotion of an oncological pharmaceutical product; (iii) has completed the Product-Specific Training and other sales training described in this Agreement and the Brand Plan and achieved a Passing Score on an examination in accordance with Section 2.2.2(c); and (iv) has become adequately equipped and knowledgeable with respect to the Product, as determined in accordance with Company's then-current standards for sales personnel selling pharmaceutical products in the Territory. No sales representative or other individual may be used by Company to perform in-person presentations of





the Product in the Territory unless and until such individual satisfies the conditions described in clauses (i) - (iv) above.

3.3.2 Size of Sales Force.

(a) At all times during the Term, Company shall use reasonable efforts to deploy and maintain a sales force (the Sales Force) of at least [***] ([***]) Sales Representatives who satisfy the conditions described in Section 3.3.1.

(b) Company shall notify Janssen (i) at least [***] ([***]) days in advance of any planned reduction by Company in the size of the Sales Force to less than [***] ([***]) Sales Representatives and (ii) promptly if the number of Sales Representatives on the Sales Force decreases to less than [***] ([***]). In either event, Company shall provide Janssen with a plan to continue meeting the Minimum Number of Details Requirements, Minimum Reach Requirements, Minimum PDE Requirements and, if applicable, Minimum Top Target Requirements under Section 3.2.2.

(c) If the average number of Sales Representatives on the Sales Force is less than twenty-five (25) over any forty-five (45)-day period, Janssen will have the right to terminate this Agreement by giving thirty (30) days' notice.

3.3.3 Subcontracting. Company may not subcontract with or otherwise use any Affiliate or Third Party to perform any Detailing or any of its other obligations under this Agreement without the prior written consent of Janssen.

3.3.4 Compensation of Sales Force. In the event Company elects to provide incentives to Sales Representatives, such incentives will be appropriate, in accordance with the applicable Laws, and, in the aggregate, competitive in the marketplace with respect to the products promoted by the Sales Representatives. Janssen shall not have any responsibility for or authority over the hiring, supervision, termination or compensation of the Sales Representatives or any other Company employees or for any employee benefits of such employees.

3.3.5 Additional Obligations. Company shall ensure that the Sales Representatives do not identify or represent themselves as employees or agents of Janssen or any Affiliate of Janssen.

3.4 Promotional Materials.

3.4.1 Positioning and Messages. Janssen shall develop and, as deemed advisable or necessary by Janssen from time to time, update product positioning and core selling messages for the Promotion of the Product. Janssen agrees to consider in good faith Company's feedback in the development of any such updates to such messaging.

3.4.2 Promotional Materials Development and Approval. Janssen shall be solely responsible for developing and providing to Company (at Janssen's cost) all promotional materials





for use in connection with the Promotion of the Product (the Promotional Materials) and agrees to provide Company with sufficient quantities of the materials based on market demand and expected levels of Detailing efforts. Janssen agrees to consider in good faith Company's feedback in the development of any new promotional materials during the Term. Such Promotional Materials shall comply with all applicable Laws and may include written sales and advertising materials, detail aids, brochures, hand-outs, reprints, booth panels and any other promotional support items. Company shall use only the Promotional Materials provided by Janssen and the Product Label and Insert in its Promotion of the Product in the Territory. Company shall not add any Company Trademark to the Promotional Materials or otherwise alter the Promotional Materials in any way. Company shall not develop or use any other promotional materials in its Promotion of the Product.

3.4.3 Janssen Right to Use Promotional Materials. Nothing in this Agreement shall restrict Janssen's right to use any Promotional Materials for the purposes of promoting the Product in the Territory.

3.4.4 Revisions. Janssen may revise, update or develop additional Promotional Materials from time to time during the Term, as deemed necessary and appropriate by Janssen, including based on: (i) changes in the Product Label and Insert; (ii) requirements or mandates of the FDA or other Regulatory Authorities or any Laws; or (iii) changes in the Promotion Rules.

3.4.5 Revocation of Approval. If, at any time, Janssen notifies Company in writing that it no longer approves the use of specified Promotional Materials, Company shall immediately take action to remove the Promotional Materials from use by Sales Representatives and either (i) destroy such materials or (ii) return them to Janssen. The cost of such return shall be borne by Janssen.

3.5 Product Sales. Janssen shall have sole authority and responsibility for sale and distribution of the Product in the Territory. Company shall not, and shall not permit the Sales Representatives or Other Company Employees to, solicit or accept orders for the Product or otherwise engage in any distribution, sale or offer for sale of the Product, any Product samples or any other product containing erdafitinib, but rather shall promptly direct any orders that it receives for Product or Product samples, and cause the Sales Representatives and Other Company Employees to direct promptly any such orders they may receive, to Janssen or any Third Party designated by Janssen.

3.6 Product Recall. Janssen shall have sole authority and responsibility for any recall or withdrawal of the Product in the Territory. Following a decision by Janssen to conduct any such recall or withdrawal of the Product: (a) Janssen shall immediately notify Company of such decision, (b) Company shall immediately cease Detailing and all other promotion of the Product and (c) as soon as reasonably practicable, Janssen provide Company with a prepared statement for use in response to any inquiries regarding such recall or withdrawal. Company shall use such prepared statement to respond to any inquiries received with regard to the recall or withdrawal and shall not make any other statement regarding such recall or withdrawal except as required by





applicable Law. In the event of a recall or withdrawal, the obligations of the Parties under this Agreement (other than Janssen's obligation to pay Service Fees or Milestone Payments to Company) will be suspended solely to the extent and for so long as necessary until the circumstances that were the reasons for the recall or withdrawal have been resolved.

3.7 Product Return. Janssen shall have the sole authority, right and responsibility to accept and handle, either directly or indirectly, any request to return Product in the Territory. Company shall not solicit the return of any Product and shall promptly direct any attempted returns and cause the Sales Representatives and Other Company Employees to direct promptly any attempted returns to Janssen or any Third Party designated by Janssen.

ARTICLE IV GOVERNANCE

4.1 Authority. Janssen shall have sole decision-making authority with respect to all matters relating to the promotion and Detailing of the Product in the Territory under this Agreement (including making changes to the Brand Plan), but Janssen may not exercise such decision-making authority with respect to a change to the Brand Plan that would materially increase Company's Detailing obligations or materially increase Company's non-Detailing obligations.

4.2 Joint Commercial Team.

4.2.1 Formation; Purpose. Simultaneously with the execution of this Agreement the Parties shall establish a joint commercial team (the Joint Commercial Team) solely as a forum for the Parties' representatives to discuss Company's execution of the Brand Plan, potential changes to the Brand Plan and the promotion and Detailing of the Product to the Targets in the Territory. The Joint Commercial Team will have no decision-making authority. During the meetings of the Joint Commercial Team, the Parties may make recommendations to one another with respect to Company's execution of the Brand Plan, potential changes to the Brand Plan and the promotion and Detailing of the Product to the Targets in the Territory.

4.2.2 Membership. The Joint Commercial Team shall consist of at least three (3) representatives of each Party, appointed by such Party from among its (or its Affiliates') employees that have a level of experience customary for a committee of this type. Either Party may remove and replace any member that it appointed, with or without cause, at any time by prior notice to the other Party. The Joint Commercial Team shall at all times be chaired by a representative of Janssen. The chairperson shall be responsible for calling meetings, preparing and circulating an agenda in advance of each meeting, and preparing and issuing minutes of each meeting within thirty (30) days thereafter or within a timeframe agreed by the Parties.

4.2.3 Meetings. The Joint Commercial Team shall meet monthly. Meetings of the Joint Commercial Team may be held in person or by audio or video teleconference with the consent of each Party. Each Party shall bear its own costs associated with the attendance of its appointees at such meetings. Each Party shall ensure that at least two (2) of its appointed members





(or their alternates) attend each meeting. Other employee representatives of each Party may attend meetings of the Joint Commercial Team.

4.3 BALVERSA Sales Advisory Team.

4.3.1 Formation; Purpose. Upon request by Janssen, the Parties shall establish a BALVERSA Sales Advisory Team (the BSAT). The BSAT will serve solely as an advisory forum and will have no decision-making authority.

4.3.2 Membership. The BSAT shall consist of at least one Sales Representative per region, at least two (2) regional managers of Company and at least one representative of Janssen's BALVERSA marketing team. Either Party may remove and replace any member that it appointed, with or without cause, at any time by prior notice to the other Party. The BSAT shall at all times be chaired by a representative of Janssen. The chairperson shall be responsible for calling meetings.

4.3.3 Meetings. The BSAT shall meet every other week during the first sixty (60) days after the Launch Date and monthly for the rest of the Term, with each meeting not to exceed ninety (90) minutes in duration. Meetings of the BSAT shall be held by audio or video teleconference and the parties agree to make reasonable efforts to ensure the meetings do not interfere with territory detailing time. Each Party shall bear its own costs associated with the attendance of its appointees at such meetings. Other employee representatives of each Party may attend meetings of the BSAT.

ARTICLE V COMPENSATION

5.1 Definitions.

5.1.1 Baseline means (i) with respect to Calendar Year 2019, [***] Dollars ($[***]); and (ii) with respect to Calendar Year 2020, [***]Dollars ($[***]).

5.1.2 Cumulative Net Sales means, with respect to any Calendar Quarter, the aggregate amount of Net Sales that were made during such Calendar Quarter and any prior Calendar Quarter(s) during the same Calendar Year.

5.2 Service Fee. In partial consideration of Company's Promotion of the Product in accordance with the terms of this Agreement, and subject to the terms and conditions of this Agreement, with respect to each Calendar Quarter during Calendar Year 2019 and Calendar Year 2020, Janssen shall pay Company a service fee (the Service Fee), as follows:

(a) with respect to each Calendar Quarter during Calendar Year 2019, an amount equal to (i) [***] percent ([***]%) of that portion of Cumulative Net Sales that is greater than the Baseline for Calendar Year 2019, less (ii) the total Service Fees that have been invoiced by Company to Janssen for all preceding Calendar Quarters of Calendar Year 2019; and





(b) with respect to each Calendar Quarter during Calendar Year 2020, an amount equal to (i) [***] percent ([***]%) of that portion of Cumulative Net Sales that is greater than the Baseline for Calendar Year 2020, less (ii) the total Service Fees that have been invoiced by Company to Janssen for all preceding Calendar Quarters of Calendar Year 2020.

Unless and until the Cumulative Net Sales exceed the Baseline for a particular Calendar Year, the Service Fee shall be zero. The foregoing calculation method is intended to ensure that each Service Fee for a Calendar Quarter includes a true-up amount of all Service Fees earned year-to-date in the same Calendar Year.

5.3 Milestones.

5.3.1 In partial consideration of Company's Promotion of the Product in accordance with the terms of this Agreement, and subject to the terms and conditions of this Agreement, Janssen shall pay Company milestone payments in accordance with this Section 5.3. Janssen shall notify Company in the applicable Fee Notice the first time the Cumulative Net Sales in the applicable Calendar Year exceed the amounts set forth in the following table (each, a Milestone Event). Janssen shall pay to Company the applicable milestone payments set forth in the table below (each, a Milestone Payment) within [***] ([***]) days after receipt of an invoice from Company with respect to achievement of each Milestone Event. Each Milestone Payment shall be non-refundable and non-creditable.

Milestone Event Milestone Payment Upon the first occasion that Cumulative Net Sales in Calendar Year 2019 exceed US$[***] US$[***] Upon the first occasion that Cumulative Net Sales in Calendar Year 2019 exceed US$[***] US$[***] Upon the first occasion that Cumulative Net Sales in Calendar Year 2019 exceed US$[***] US$[***] Upon the first occasion that Cumulative Net Sales in Calendar Year 2020 exceed US$[***] US$[***]

5.3.2 Each Milestone Payment shall be payable only once upon the first occurrence of the relevant Milestone Event, even if the Milestone Event occurs multiple times.

In the event Regulatory Approval of the Product for the Initial Indication in the Territory is delayed beyond May 18, 2019, or in the event commercial availability of the Product is delayed beyond June 1, 2019, Janssen agrees to make proportional adjustments to the Milestone Events in 2019, Milestone Payments in 2019 and the Baseline for 2019





consistent with the period of delay in Regulatory Approval or commercial availability, whichever is greater, as shown in the following sample calculation.

Sample Calculation:

Example: Regulatory Approval date is June 18, 2019 - 30 days delayed approval

New Baseline for Calendar Year 2019: $[***] - ($[***] X [***] days / [***] days) = $[***]

New Milestone Event and Payment for First 2019 Milestone: Cumulative Net Sales: $[***] - ($[***]X [***] days / [***] days) = $[***] Payment: $[***] - ($[***] X [***] days / [***] days) = $[***]

5.4 Costs. Unless otherwise expressly stated in this Agreement, each Party shall bear and be responsible for all internal and out-of-pocket costs and expenses incurred by such Party in the performance of this Agreement.

5.5 Reports and Payments.

5.5.1 After the end of each Calendar Quarter of Calendar Year 2019 and 2020, Janssen shall calculate in good faith, based on Janssen's Books and Records and in accordance with Janssen's customary and consistently-applied accounting practices, the Net Sales in such Calendar Quarter and for such Calendar Year in the aggregate, as well as the Cumulative Net Sales and the Service Fee for such Calendar Quarter. Janssen shall deliver to Company, within thirty (30) days following the last day of such Calendar Quarter, a report setting forth the Cumulative Net Sales, the Service Fee and, if applicable, the Milestone Payment for such Calendar Quarter (the Fee Notice).

5.5.2 Following receipt of a Fee Notice from Janssen pursuant to Section 5.5.1, Company shall invoice Janssen for the amount of the Service Fee payable with respect thereto, if any.

5.5.3 Subject to Janssen obtaining appropriate consents from its Third Party specialty pharmacy partner, and the Parties reaching mutual agreement on the allocation between them of the associated costs, if any, Janssen shall provide prescriber level unit sales data generated from the specialty pharmacy partner on a weekly basis for the Company to track business trends, direct resources, measure sales force effectiveness, detailing sensitivity, and to design an effective sales incentive program.

5.5.4 If a Party incurs any costs that are the responsibility of the other Party under this Agreement, such Party shall invoice the other Party for such costs promptly following the





Calendar Quarter during which such costs were incurred. Such invoice shall include reasonable documentation of the costs for which the invoicing Party is seeking reimbursement.

5.5.5 All invoices delivered in accordance with Section 5.5.2 or 5.5.4 shall be paid by the Paying Party within [***] ([***]) days after receipt of such invoice.

5.5.6 All payments hereunder will be paid in U.S. Dollars and made available by bank wire transfer, in immediately available funds, to the account designated in writing by the Payee Party from time to time. Any changes to such account designation shall be made at least thirty (30) Business Days before the due date of the applicable payment.

5.6 Tax Matters. The Paying Party shall make all payments to the Payee Party under this Agreement without deduction or withholding for any Taxes except to the extent that any such deduction or withholding is required by any Law in effect at the time of payment. Each Party shall otherwise be responsible for its own income taxes and corporate taxes and any other Taxes payable by such Party arising under or in connection with this Agreement and shall pay all such Taxes and file any applicable tax returns on a timely basis. Any Tax required to be withheld on amounts payable under this Agreement shall timely and promptly be paid by the Paying Party on behalf of the Payee Party to the appropriate Governmental Authority, and the Paying Party shall furnish the Payee Party with proof of payment of such Tax. Any such Tax required to be withheld shall be an expense of and borne by the Payee Party. If any such Tax is assessed against and paid by the Paying Party, then the amount of such Tax withheld shall be treated as paid by the Paying Party to the Payee Party and the Payee Party shall indemnify and hold harmless the Paying Party from and against such Tax. Both Parties will cooperate with respect to all documentation required by any taxing authority or reasonably requested by the Paying Party to secure a reduction in the rate of applicable withholding Taxes.

ARTICLE VI REGULATORY MATTERS

6.1 Regulatory Approvals.

6.1.1 Obligations of Janssen. Janssen, either itself or through one of its Affiliates, shall use Diligent Efforts to obtain Regulatory Approval of the Product for the Initial Indication in the Territory and to maintain the validity of such Regulatory Approval throughout the Term, including the submission of any additional information requested by any Regulatory Authority in connection with such Regulatory Approval. Janssen shall have no obligation to file any application for Regulatory Approval for the Product in respect of any indication other than the Initial Indication.

6.1.2 Rights of Janssen. Janssen shall be the holder of any and all Regulatory Approvals for the Product in the Territory and shall retain sole authority over all regulatory matters relating to the Product in the Territory.





6.1.3 Communications with Regulatory Authorities. As between Janssen and Company, Janssen shall have the sole authority and responsibility for communicating with any Regulatory Authority regarding any Regulatory Approval of the Product in the Territory or any application or filing therefor, or regarding any other obligation to any Regulatory Authority in relation to the Product. Except as expressly set forth herein or as required by applicable Law or as approved in advance by Janssen in writing, Company shall not communicate directly with any Regulatory Authority regarding the Product or otherwise take any action concerning any application, registration, authorization or approval under which the Product is manufactured, imported, maintained, marketed, reimbursed or sold in the Territory.

6.2 Pharmacovigilance Procedures. The Parties shall comply, and Company shall cause the Sales Representatives and Other Company Employees to comply, with the provisions set forth on Schedule 6.2, which govern the reporting of adverse events/adverse drug reactions associated with the Product, Product quality complaints associated with adverse events and other information concerning the safety of the Product within the Territory.

6.3 Product Complaints. Janssen shall have the sole right and responsibility to accept and handle any Product Complaint associated with the use of the Product. Company shall, and shall cause each of its Sales Representatives and Other Company Employees to, notify Janssen as soon as possible, but no later than 24 hours after the time he or she becomes aware of any Product Complaint associated with the Product, which notice shall include the name of the person making such Product Complaint, the Target that prescribed the Product (if any), and the date the relevant Sales Representative or Other Company Employee received such Product Complaint. Details regarding the process for notifying Janssen of any such Product Complaints shall be as set forth in product complaints standard operating procedures, a copy of which Janssen will provide to Company promptly following the Effective Date.

6.4 Post-Marketing Surveillance. Janssen shall have the sole right to conduct any post marketing surveillance with respect to the Product (PMS), whether such PMS is elected by Janssen or required by applicable Law.

6.5 Product Medical Inquiries. Janssen shall handle all medical questions from members of the medical profession regarding the Product in the Territory. Company shall refer all medical inquiries regarding the Product to Janssen through the established process outlined by Janssen for reporting of medical information requests, a copy of which Janssen will provide to Company promptly following the Effective Date.

6.6 Companion Diagnostic Inquiries. Company shall direct all inquiries relating to the Companion Diagnostic in accordance with the procedures established by Janssen, a copy of which Janssen will provide to Company promptly following the Approval Date.

6.7 Access, Affordability and Patient Support Inquiries. Company shall direct all inquiries relating to access, affordability, or patient support for the Product to the dedicated specialty pharmacy responsible for addressing such questions, in accordance with the procedures





established by Janssen, a copy of which Janssen will provide to Company promptly following the Effective Date.

ARTICLE VII BOOKS, RECORDS AND AUDIT RIGHTS

7.1 Books and Records. Janssen and Company shall each maintain true and complete books and records with respect to the performance of its obligations hereunder, including the Company Internal Detail Reporting System and items underlying all payment obligations and invoices related to this Agreement (the Books and Records). Company shall maintain and manage its Books and Records in accordance with the records and information management requirements set forth on Exhibit C.

7.2 Books and Records Audits.

7.2.1 Right to Audit. Upon [***] ([***]) days prior notice from a Party (the Auditing Party), the other Party (the Audited Party) will permit an independent certified public accounting firm of internationally recognized standing selected by the Auditing Party and reasonably acceptable to the Audited Party, to examine the relevant Books and Records of the Audited Party, as may be reasonably necessary to verify the accuracy of the reports provided by the Audited Party pursuant to Section 3.2.4 or Section 5.5.1, as applicable, and the payments made or invoiced under this Agreement. An examination by each Auditing Party under this Section shall occur not more than once with respect to the Term and will be limited to the pertinent Books and Records for Calendar Year 2019 and Calendar Year 2020.

7.2.2 Scope of Audit. The independent certified public accounting firm will be provided access to the Books and Records of the Audited Party, and such examination will be conducted during the Audited Party's normal business hours. The Audited Party may require the accounting firm to sign a standard non-disclosure agreement before providing the accounting firm access to the Audited Party's facilities or Books and Records. The draft report of the accounting firm will be provided to the Audited Party so that justifying remarks can be included in the final report to be shared with the Auditing Party. Upon completion of the audit, the accounting firm will provide both Parties a final copy of the written report disclosing any discrepancies in the reports submitted by the Audited Party or the payments made or owed by the Audited Party, if any, and shall not include any confidential information (or additional information that is ordinarily not included in the Fee Notice or Detailing reports, as applicable) disclosed to the auditor during the course of the audit (such report, an Audit Report).

7.2.3 Results of Audit. If an Audit Report shows that the Audited Party underpaid or failed to pay any amount due to the Auditing Party, then the Audited Party will pay to the Auditing Party the amount of such underpayment or non-payment. Such payment shall be made within [***] ([***]) days after the Audited Party's receipt of the Audit Report. If an Audit Report shows that Company overstated or otherwise misreported any information relating to Calls and Details, then Janssen shall be entitled to exercise any rights and seek any remedies it would have





had if such information had been accurately reported. If the Audited Party disagrees with the findings of the Audit Report, the Parties will first seek to resolve the matter between themselves, and in the event they fail to reach agreement the dispute resolution provisions outlined in Article XIII shall be followed to resolve the dispute. Any unpaid Service Fees or Milestone Payments finally determined by such resolution to be payable shall be paid within [***] ([***]) days after such final resolution. If an Audit Report shows any overpayment by either Party, such Party will be entitled to receive, at its option, either a refund of such overpayment or a credit equal to such overpayment against the amounts otherwise payable by such Party to the other Party under this Agreement.

7.2.4 Costs of Audit. If an Audit Report shows unpaid Service Fees or Milestones that exceeds [***] percent ([***]%) of the total amount owed by the Audited Party for the period being audited, then the reasonable and documented fees and expenses of such independent public accountant performing the examination shall be paid by the Audited Party, subject to reasonable substantiation thereof. Otherwise, the costs of the examination shall be solely borne by the Auditing Party.

7.3 Compliance Audits. Janssen or an authorized representative of Janssen, and any governmental agency that regulates a Party, may, at reasonable times during the Term and upon reasonable notice to Company, inspect and audit the Books and Records of Company with respect to Company's obligations under this Agreement for the sole purpose of evaluating Company's compliance with Sections 3.1.3, 3.4.2, 11.5 and 11.6 of this Agreement, applicable Laws and the Promotion Rules. The costs of any such audit shall be borne by Janssen, unless such audit reveals noncompliance by Company due to a failure by Company that is not excused by Janssen under this Agreement, in which case Company shall reimburse Janssen for any out-of-pocket costs reasonably incurred in connection with the audit.

ARTICLE VIII TERM AND TERMINATION

8.1 Term; Termination.

8.1.1 Term. This Agreement shall commence on the Effective Date and, unless earlier terminated, shall expire on the Expiration Date (the Term). For the avoidance of doubt, the Parties agree that Janssen's obligations under Section 5.2 (subject to Section 8.2.5) and Section 5.3 (subject to Section 8.2.5) shall remain in effect beyond the Expiration Date.

8.1.2 Failure or Delay in Obtaining Regulatory Approval. This Agreement may be terminated by either Party, before the date that Marketing Approval has been obtained for the Product for the Initial Indication in the Territory, in the event that Janssen withdraws its application for Marketing Approval for the Product for the Initial Indication in the Territory or is notified by FDA that Janssen's application for such Marketing Approval in the Territory has been or will be denied. Further, this Agreement may be terminated by either Party in the event that Marketing Approval for the Product in the Territory is not obtained before June 30, 2019. Any such





termination pursuant to this Section 8.1.2 shall be effective thirty (30) days following written notice of such termination being given to the non-terminating Party.

8.1.3 Termination Scenarios Following Regulatory Approval. Without limiting either Party's rights under Section 8.3, this Agreement may be terminated by either Party with thirty (30) days' prior written notice to the other, in the event that (a) a Governmental Authority requires Janssen to withdraw permanently the Product from the market in the Territory for the Initial Indication or Regulatory Approval for the Product for the Initial Indication is otherwise withdrawn, (b) Janssen permanently withdraws the Product from the market in the Territory for the Initial Indication for safety reasons or (c) promotion and sale of the Product in the Territory for the Initial Indication has been suspended for more than three (3) months or is permanently suspended, in either case, as a consequence of and pursuant to Section 8.3. To the extent practicable, each Party will consult with the other Party before terminating this Agreement pursuant to this Section and will consider the other Party's input in good faith; provided, however, that the decision to withdraw the Product pursuant to clause (b) above will be made by Janssen in its sole discretion, acting in good faith.

8.1.4 Material Breach. This Agreement may be terminated by either Party in the event that the other Party commits a material breach of this Agreement and (a) such breach shall not have been cured within thirty (30) days after the giving of notice of such material breach, unless (i) the specific provision to which such breach relates expressly provides for a different period, or (ii) the Parties mutually agree in writing to an extension of such period (the Cure Period); or (b) such breach, by its nature, is not curable. Unless such breach in clause (a) is cured during the Cure Period, such termination will be effective immediately upon the expiration of the Cure Period without any further action or notice by the non-breaching Party. In the case of a breach in clause (b), such termination will be effective thirty (30) days following written notice of such breach being given to the breaching Party.

8.1.5 Performance Failure. This Agreement may be terminated by Janssen in accordance with Section 3.2.3 or 3.3.2(c).

8.1.6 Competing Products. In the event that Company commits a breach of Section 9.2 or Section 9.3, then Janssen shall have the right to terminate this Agreement in its entirety at any time immediately upon written notice to Company.

8.1.7 Insolvency Proceeding. This Agreement may be terminated by either Party, immediately and without notice, if the other Party at any time (a) commences a voluntary case or other proceeding seeking liquidation, reorganization or other relief with respect to itself or its debts under any bankruptcy, insolvency or other similar Law or seeking the appointment of a trustee, receiver, liquidator, custodian or similar official of it or of any substantial part of its property, or consents to any such relief or to the appointment of or taking possession by any such official in an involuntary case or other proceeding commenced against it, or makes a general assignment for the benefit of creditors, or takes any corporate action to authorize any of the foregoing, (b) has an involuntary case or other proceeding commenced against it seeking liquidation, reorganization or





other relief with respect to it or its debts under any bankruptcy, insolvency or other similar Law or seeking the appointment of a trustee, receiver, liquidator, custodian or other similar official of it or any substantial part of its property, and such involuntary case or other proceeding remains undismissed and unstayed for a period of ninety (90) days; or an order for relief is entered against such Party under applicable bankruptcy Laws, or (c) is insolvent or is generally unable to pay its debts as they become due.

8.1.8 Force Majeure. This Agreement may be terminated by either Party in accordance with Section 14.2.

8.1.9 Health Care Compliance. This Agreement may be terminated by Janssen in accordance with Section 2(d) of Exhibit D.

8.1.10 Third Party Agreement. This Agreement may be terminated by Janssen with effect on December 31, 2019 or January 31, 2020, in either case with fifteen (15) days' advance written notice, and only in the event that Janssen has entered into an agreement with a Third Party that provides for (a) a license, sublicense, assignment, divestiture or other transfer or disposition of substantial rights or assets relating to the Product in the Territory, or (b) a collaboration involving the development and/or commercialization in the Territory of the Product or any other pharmaceutical product that contains erdafitinib. If Janssen terminates this Agreement pursuant to this Section 8.1.10, then Janssen shall, within [***] ([***]) days following the effective date of such termination, pay Company an amount equal to $[***] and, if the Milestone Event listed in the first line of the table in Section 5.3.1 has occurred, Janssen shall pay to Company an additional amount of $[***] (which shall be in addition to the Milestone Payment earned in respect of such Milestone Event).

8.1.11 Company Product Additional Indication. This Agreement may be terminated by Janssen with thirty (30) days' prior written notice in the event that the Company Product is approved by the FDA for use in the treatment of urothelial cancer in any patient population in the Territory.

8.2 Effect of Termination or Expiration.

8.2.1 Materials. Upon the effective date of termination or expiration of this Agreement, Company shall immediately (a) cease, and cause the Sales Representatives and Other Company Employees to cease, all Promotion of the Product, (b) discontinue the use of any Promotional Materials, and (c) discontinue the use of any Janssen sales data, Target List and other documents and data related to the Product provided to Company by Janssen hereunder. As requested by Janssen, Company shall either maintain (subject to the provisions of Section 9.1 and Exhibit C) or promptly destroy (and certify to Janssen the destruction) or return to Janssen all Promotional Materials, all training materials and all other materials related to the Product provided by Janssen pursuant to this Agreement or the Brand Plan. With respect to any information, data, or reports provided by Janssen to Company under this Agreement, including Janssen sales data, that Janssen requests Company to destroy or return, Company shall upon the effective date of





termination or expiration of this Agreement remove such information from its internal systems and certify to Janssen to such removal; provided, however, that such information shall not be required to be removed from inactive back-up computer files created pursuant to standard, automated archiving procedures.

8.2.2 Confidential Information. Following the effective date of termination or expiration of this Agreement, without prejudice to Section 8.2.1, each Party shall use reasonable efforts to return, destroy or maintain (subject to the provisions of Section 9.1 and Exhibit C), at the Disclosing Party's election, all Confidential Information of the other Party (provided that the Receiving Party may keep one copy of such Confidential Information subject to an ongoing obligation of confidentiality for archival purposes only).

8.2.3 Transition Plan. The Parties shall reasonably cooperate in good faith to effect the transition to Janssen of all Product promotional activities to minimize disruptions to customers and patients. In furtherance of the foregoing, and at the request of either Party, the Joint Commercial Team, reasonably in advance of the expected end of the Term shall develop and approve a transition plan that contains, among other things, a plan for notifying Targets and other customers or health care providers of such termination or expiration and transition, and, if applicable, provides for the completion of any events set forth in a Brand Plan which are already scheduled but will take place after the effective date of termination or expiration.

8.2.4 Non-Exclusive Remedies. The consequences set forth in this Section 8.2 are not intended to be the exclusive remedies of the Parties in connection with the breach of or termination of this Agreement.

8.2.5 Compensation in Certain Termination Events. If this Agreement is terminated pursuant to any of the following Sections, Janssen shall not be obligated to pay to Company (a) any Service Fees with respect to any period after the effective date of termination of this Agreement or (b) any Milestone Payments with respect to any Milestone Events that are achieved after the effective date of termination of this Agreement: Section 8.1.4 (if terminated by Janssen for breach by Company), 8.1.5, 8.1.6, 8.1.7 (if terminated by Janssen for the insolvency of Company), 8.1.8 (if terminated by Janssen for Force Majeure applicable to Company), 8.1.9, 8.1.10 (except that this Section 8.2.5 shall not affect Janssen's obligation to pay the amounts set forth in Section 8.1.10 as being payable in accordance with and subject to the conditions set forth in such Section 8.1.10) or 8.1.11.

8.2.6 Survival. Termination or expiration of this Agreement shall not relieve a Party of any liability for any breach that occurred, or of any obligation to make payment that accrued, before or on the effective date of such termination or expiration, nor prejudice either Party's right to obtain performance of any obligation provided for in this Agreement that survives termination or expiration. All provisions of this Agreement which, in accordance with their terms, are intended to have effect after the expiration or termination of this Agreement shall survive such termination or expiration, including: Sections 3.1.2, 3.2.4(a) (with respect to the last month of the Term), 5.2 (subject to Section 8.2.5), 5.3 (subject to Section 8.2.5), 5.5.1, 5.5.2, 5.5.5, 5.5.6, 5.6,





7.1, 7.2, 8.1.1 (last sentence only), 8.1.10 (only if the Agreement is terminated pursuant to Section 8.1.10), 8.2, 9.1, 10.2, 11.8, and Articles XII, XIII and XIV.

8.3 Suspension of Product Promotion

8.3.1 Right to Suspend. Janssen shall have the right to require that both Parties suspend the promotion of the Product in the Territory for the Initial Indication if Janssen decides, in its sole discretion, acting in good faith, that it is necessary to do so due to safety reasons, or to comply with applicable Law or a request or mandate of a Regulatory Authority, or because of any Third Party's claim or potential claim of intellectual property infringement in relation to the Product. In any such event, Company shall cease promoting the Product in the Territory immediately upon Company's receipt of notice from Janssen directing it to do so, and Janssen shall have the right to cease the sale and/or distribution of the Product for so long as promotion thereof is suspended. Janssen shall discuss its decision with Company as soon as it is practicable to do so and consider Company's input in good faith; provided, however, that all decisions regarding such matters shall be made by Janssen in its sole discretion. If Janssen decides to end any such suspension of the promotion, sale or distribution of the Product in the Territory, Janssen shall immediately notify Company of its decision.

8.3.2 Adjustments Due to Suspension. In the event Janssen suspends the promotion and/or sale of the Product in the Territory for the Initial Indication pursuant to Section 8.3.1, and such suspension results in any restriction or prohibition on Detailing activities by Company for a period of one week or more, then the Parties will discuss and attempt to agree upon an appropriate adjustment to Company's Detailing obligations under the Brand Plan and/or the Baselines.

ARTICLE IX CONFIDENTIALITY; RESTRICTIVE COVENANTS

9.1 Confidentiality.

9.1.1 Non-Disclosure and Non-Use. Except to the extent expressly authorized by this Agreement or otherwise agreed in writing, each of Janssen and Company agrees that, during the Term and until the conclusion of the [***] ([***]) year period beginning upon the expiration or earlier termination of this Agreement, such Party shall: (a) maintain in confidence the Confidential Information of the other Party using not less than the efforts such Party uses to maintain in confidence its own confidential or proprietary information of similar kind and value (but not less than reasonable efforts); (b) not disclose the Confidential Information of the other Party to any Third Party; and (c) not use the Confidential Information of the other Party for any purpose other than as provided for in this Agreement.

9.1.2 Certain Information. The Brand Plan (including the Training Activities Plan and Call Plan), the Target List and all information and data contained within such documents is deemed to be the Confidential Information of Janssen. The reports of Details provided by Company pursuant to Section 3.2.4 and all data in the Company Internal Detailing System relating





to the Product are deemed to be (a) the Confidential Information of both Parties during the Term and (b) the Confidential Information of Janssen after the Term.

9.1.3 Exceptions. The obligations of Section 9.1.1 do not apply to any portion of the Confidential Information of a Party (the Disclosing Party) that the other Party (the Receiving Party) can show by competent written evidence:

(a) is already known to the Receiving Party before the time of disclosure by the Disclosing Party, as evidenced by the Receiving Party's written records made or obtained before the date of disclosure; provided, however, that this clause (a) shall not apply to the reports and data described in the second sentence of Section 9.1.2;

(b) is disclosed to the Receiving Party on a non-confidential basis by a Third Party who, to the knowledge of the Receiving Party, is under no obligation to the Disclosing Party (or any of its Affiliates) with respect to confidentiality, secrecy or restriction on the use of such information or data;

(c) is now, or hereafter becomes, through no act or failure of the Receiving Party or any of its Affiliates in violation of this Agreement, generally known or available to the public;

(d) is independently discovered or developed by or on behalf of the Receiving Party or any of its Affiliates (i) not pursuant to or in connection with this Agreement and (ii) without the use of or reference to the Confidential Information of the Disclosing Party as evidenced by the Receiving Party's written records; or

(e) is publicly disclosed by the Disclosing Party, either before or after it is disclosed to the Receiving Party under this Agreement.

9.1.4 Permitted Disclosure. The Receiving Party may disclose the Disclosing Party's Confidential Information only to the extent such disclosure is reasonably necessary in the following instances, or to the extent permitted under the other applicable provisions of this Agreement:

(a) to those of the Receiving Party's Affiliates and its and their respective officers, directors, employees, agents, advisors and consultants who (a) are bound in writing (or, with respect to counsel to the Receiving Party, by professional or ethical obligations) by obligations of confidentiality and non-use substantially similar to and consistent with those of this Section 9.1, (b) need to receive the Confidential Information in order for the Receiving Party to exercise its rights, conduct the activities required by or fulfill its other obligations under this Agreement and (c) are made aware of the confidential nature of the information, and then only to the extent required for the Receiving Party to exercise its rights under, conduct the activities required by or fulfill its other obligations under this Agreement; provided that the Receiving Party shall be responsible and liable for any breach of the provisions of this Section 9.1 by any Person who receives Confidential Information pursuant to this Section 9.1.4(a);





(b) with respect to Janssen as the Receiving Party, to the FDA or other applicable Regulatory Authority where such disclosure is required in connection with any filing, application, or request for any Regulatory Approval of the Product in the Territory;

(c) to the extent that such disclosure is necessary to prosecute litigation for the protection, preservation, or return of Confidential Information or to enforce its rights under this Agreement;

(d) to comply with applicable Law or the rules of any stock exchange on which such Party's securities (or the securities of a Party's Affiliate) are traded, subject to the terms of Section 9.1.5;

(e) with respect to Janssen as the Receiving Party, to counterparties under the License Agreement to the extent such disclosure is required under the License Agreement or is advisable for the purpose of carrying out more fully Janssen's obligations under this Agreement or otherwise increasing Net Sales of the Product in the Territory; or

(f) to comply with court orders or administrative orders pursuant to Law.

In the case of disclosure pursuant to Section 9.1.4(c), 9.1.4(d) or 9.1.4(f), the Receiving Party (i) shall, to the extent reasonably practicable under the circumstances, give reasonable advance notice of the disclosure requirement to the Disclosing Party, so as to provide the Disclosing Party with the opportunity to secure, to the extent available, a protective order (or similar remedy) or other assurance of confidential treatment of the Confidential Information to be disclosed, and (ii) shall reasonably cooperate with the Disclosing Party, at its expense and request, in seeking such protective orders or other relief.

Any permitted use of the Disclosing Party's Confidential Information by the Receiving Party for purposes of its performance hereunder will not be deemed a license or other right of the Receiving Party to use any such Confidential Information for any other purpose. The Receiving Party shall not acquire any right, title, or interest in or to any Confidential Information (including copies and summaries thereof and extracts therefrom, whether tangible or in electronic or other form) of the Disclosing Party by virtue of its disclosure hereunder.

9.1.5 Terms of this Agreement. The terms of this Agreement are deemed to be, and shall be treated by each Party as, Confidential Information of each Party. Either Party may disclose the terms of this Agreement and other information relating to this Agreement or the transactions contemplated by this Agreement to the extent required, in the reasonable opinion of such Party's counsel, to comply with the rules and regulations promulgated by the United States Securities and Exchange Commission, New York Stock Exchange, Nasdaq Stock Market or similar security regulatory authorities or stock market in other countries. If a Party intends to disclose this Agreement or any of its terms or other Confidential Information of the other Party pursuant to this Section 9.1.5, such Party will, except where impracticable or not legally permitted, give reasonable advance notice to the other Party of such disclosure and seek confidential treatment





of portions of this Agreement or such terms or information, as may be reasonably requested by the other Party in a timely manner.

9.1.6 Prior Non-Disclosure Agreement. As of the Effective Date, the terms of this Section 9.1 supersede any prior non-disclosure, secrecy or confidentiality agreement between the Parties (or their Affiliates) relating to the subject matter of this Agreement, including the Mutual Confidentiality Agreement between the Parties dated February 1, 2019. Any information disclosed pursuant to any such prior agreement shall be deemed Confidential Information under this Agreement.

9.2 Exclusivity. During the Term, neither Company nor any of its Affiliates (including, for the avoidance of doubt, any Third Party that becomes an Affiliate of Company after the Effective Date) shall, alone or in collaboration with any Third Party, market, promote, sell, distribute or otherwise commercialize in the Territory any Competing Product without the prior written consent of Janssen. In the event that, after the Effective Date, a Third Party (an Acquirer) either (a) merges with Company, (b) acquires control (as defined in Section 1.4) of Company or (c) acquires substantially all the assets of the Company (each of (a), (b) and (c), an Acquisition), and such Acquirer or any of its Affiliates immediately prior to such Acquisition is commercializing a Competing Product in the Territory, then either Party shall have the right to terminate this Agreement on [***] ([***]) days written notice delivered within [***] ([***]) days of the closing of such Acquisition, and Company shall not be deemed to be marketing, promoting, selling, distributing or commercializing a Competing Product in breach of this Section for so long as it is conducting such activities solely through personnel who are not involved in any activities under this Agreement and do not have access to Janssen's Confidential Information hereunder.

9.3 Restrictions on Promotion. During the Term, Company and its Affiliates (including, for the avoidance of doubt, any Third Party which becomes an Affiliate of Company after the Effective Date) (a) will not, whether alone or in collaboration with any Third Party or for itself or any Third Party, during the promotion of any product, compare such product (other than the Product) with the Product in any aspect nor disparage the Product in any manner, and (b) with respect to any such product that is a product of Company or its Affiliates and that Company or its Affiliates promotes, sells, distributes, or otherwise commercializes using or through a Third Party, will (i) cause any such Third Party, during the promotion of such product, not to compare such product with the Product in any aspect nor disparage the Product in any manner and (ii) not authorize any Third Party to make any such comparison or disparagement.

9.4 Limitation on Soliciting Employees. During the Term, Janssen shall not directly or indirectly solicit for employment any Sales Representative who is an employee of Company, and Company shall not directly or indirectly solicit for employment any employee of Janssen with whom Company has had contact in the course of the evaluation or negotiation of this Agreement or with whom Company interacts during the Term; provided, however, that the foregoing provision will not prohibit either Party from (a) conducting general solicitations of employment in publications (including but not limited to websites, newspapers and/or journals) available to the public, or solicitations through the use of search firms, and which, in any case, are not directed





specifically toward such employees of the other Party or (b) any contact with any such employee of the other Party (i) that was initiated by such employee without any solicitation prior thereto by the contacting Party (other than solicitation permitted by clause (a) of this sentence) or (ii) with whom the contacting Party is already in employment discussions as of the Effective Date, or (iii) by any person other than (A) one who was introduced to, or became aware of, the relevant employee of the other Party solely in connection with this Agreement, and (B) one who is acting at the direction or suggestion of a person described in (A).

ARTICLE X INTELLECTUAL PROPERTY

10.1 Use of Trademarks. Janssen and its Affiliates shall retain all right, title and interest in and to its and their respective Trademarks. Company shall Promote pursuant to this Agreement only under the Product name and other Product Trademarks used by Janssen in the Territory. Janssen hereby grants to Company, during the Term, a non-exclusive, royalty free right to use such Product name and Product Trademarks, and Janssen corporate names and logos, solely to the extent they are included on the Promotional Materials and solely for the purpose of using the Promotional Materials to Promote in the Territory under this Agreement. Company shall not, without the express, prior written consent of Janssen, alter or modify in any manner any Product Trademark or any other Trademark of Janssen. Company agrees to comply with such Janssen standard guidelines regarding the use of the Product Trademarks and any other Trademarks of Janssen, and any amendments thereto, as Janssen provides to Company from time to time after the Effective Date (including the Janssen Brand Usage Guidelines).

10.2 Ownership of Intellectual Property Rights. Company acknowledges and agrees that Janssen or one of its Affiliates (a) is the sole and exclusive owner of all rights in and to the Product Trademarks and any other Trademarks of Janssen, including any form or embodiment thereof, and the goodwill now or hereafter associated therewith, (b) shall own the copyrights to all Promotional Materials and the Product Label and Insert, and (c) has the sole right to assert or control any action to enforce its rights in or to any of the Product Trademarks, any other Trademarks of Janssen or such copyrights and to receive the proceeds of any such action. Company further acknowledges and agrees that it does not, by virtue of this Agreement or its activities hereunder, obtain or acquire any right or interest in the Product Trademarks, any other Trademarks of Janssen, such copyrights, or any other intellectual property right of Janssen or its Affiliates. To the extent that Company, by operation of Law or otherwise, acquires any right (other than pursuant to this Agreement) to any of the Product Trademarks, any other Trademarks of Janssen, such copyrights or such other intellectual property rights, Company shall assign to Janssen all such rights at Janssen's cost and will not claim ownership. Company agrees that it shall not seek to register or obtain ownership rights in any of Janssen's corporate names, logos, or Product Trademarks (or any confusingly similar trademark).

10.3 Prosecution and Maintenance. Janssen will have the right (and not the obligation) to prepare, file, prosecute and maintain any intellectual property right of Janssen or its Affiliates claiming or covering the Product or its use in its sole discretion and at its own cost.





10.4 Enforcement against Infringement. Janssen and Company will each promptly notify the other in writing of any alleged or threatened infringement by a Third Party in the Territory of any intellectual property right of Janssen or its Affiliates claiming or covering the Product or its use in treating urothelial cancer, or any alleged or threatened assertion by a Third Party of invalidity of any of the intellectual property rights of Janssen or its Affiliates claiming or covering the Product or its use in treating urothelial cancer in the Territory, of which such Party becomes aware. Janssen and its Affiliates shall have the sole right (but not the obligation) to prosecute any such infringement in its sole discretion and at its sole cost.

10.5 Third Party Infringement Claims. In the event that Janssen or its Affiliate(s) decides to obtain a license to intellectual property from a Third Party in the Territory in order to commercialize the Product, whether or not due to a Third Party claim, notice, or suit or other inter partes proceeding against Janssen, Company and/or their Affiliates alleging that the commercialization of the Product in the Territory infringes or misappropriates any intellectual property rights of such Third Party, Janssen and its Affiliate(s) shall be solely responsible for the costs associated with such license and Company shall provide reasonable cooperation to Janssen or its applicable Affiliate(s) in procuring and complying with such license.

ARTICLE XI REPRESENTATIONS AND WARRANTIES; CERTAIN COVENANTS

11.1 Representations of Authority. Janssen and Company each represents and warrants to the other Party that, as of the Effective Date, it has full right, power and authority to enter into this Agreement and to perform its respective obligations under this Agreement and that it has the right to grant to the other Party the rights granted pursuant to this Agreement as set forth herein.

11.2 Consents. Janssen and Company each represents and warrants to the other Party that all necessary consents, approvals, and authorizations of all Government Authorities and other Persons required to be obtained by it as of the Effective Date in connection with the execution, delivery, and performance of this Agreement have been obtained by the Effective Date.

11.3 No Conflict. Janssen and Company each represents and warrants to the other Party that the execution and delivery of this Agreement by it and the performance of its obligations hereunder (a) do not conflict with or violate any Laws existing as of the Effective Date as applicable to such Party and (b) do not conflict with, violate, breach, or constitute a default under any of its material contractual obligations existing as of the Effective Date.

11.4 Enforceability. Janssen and Company each represents and warrants to the other Party that, as of the Effective Date, this Agreement is a legal and valid obligation binding upon it and is enforceable against it in accordance with its terms, subject to the laws of bankruptcy, insolvency, and creditors' rights.





11.5 Sales Representatives and Other Company Employees.

11.5.1 Company covenants to Janssen that:

(a) with respect to the Product, the Sales Representatives and Other Company Employees in the Territory shall make no statements, claims, or undertakings to any health care provider with whom they discuss or promote the Product that are not consistent with, nor provide nor use any labeling, literature, or other materials other than, the Product Label and Insert and those Promotional Materials provided and approved for use pursuant to this Agreement; and

(b) it shall ensure that all statements, comments and claims made by the Sales Representatives and Other Company Employees (i) about the Product, including as to efficacy and safety, are truthful and accurate and are consistent with and in strict compliance with the Product Label and Insert and all applicable Laws, and (ii) about Janssen in relation to the Product are truthful, accurate, and in strict compliance with all applicable Laws.

Any statement, claim or comment that is contained in the Promotional Materials or the Product Label and Insert, in each case, as in effect when such statement, claim or comment is made, shall be deemed not to violate this Section 11.5.1.

11.5.2 Company shall perform all Detailing and other promotional activities with respect to the Product in compliance with applicable Laws and the Promotion Rules.

11.6 Other Compliance Matters.

11.6.1 Company represents and warrants that it has established, and covenants that it will maintain during the Term, a compliance program consistent with the Compliance Program Guidance for Pharmaceutical Manufacturers published by the Office of Inspector General, U.S. Department of Health and Human Services.

11.6.2 Company represents and warrants that it has implemented, and covenants that it will maintain during the Term, adequate systems, policies, and procedures governing (1) interactions with health care professionals, (2) material that can be distributed or discussed with health care professionals, (3) the manner in which personnel should handle unsolicited requests for off- label information, and (4) the review and approval of all marketing, promotion, and sales materials, call plans, and incentive compensation structures. Company represents and warrants that such policies and procedures are and will be consistent with applicable Law and with this Agreement. 11.6.3 Company represents and warrants that neither Company, nor any of its employees, officers, directors, or agents, has been debarred by the FDA, is the subject of a conviction described in 21 U.S.C. 335a, or is subject to any similar sanction. Company represents and warrants that it has not, and covenants that it will not engage, in any capacity in connection with this Agreement, any person who has been debarred by FDA, is the subject of a conviction





described in 21 U.S.C. 335a, or is subject to any similar sanction. Company shall promptly inform Janssen in writing if it or any person performing services under this Agreement is debarred or is the subject of a conviction described in 21 U.S.C. 335a, or if any action, suit, claim, investigation, or legal or administrative proceeding is pending or threatened relating to the debarment or such conviction of Company or any such person performing services in connection with this Agreement. Upon written request from Janssen, Company shall, within ten (10) days, provide written confirmation that it has complied with the foregoing obligation.

11.6.4 Company represents and warrants that it is in compliance, and covenants that it will continue to comply during the Term, with all applicable Laws, rules and regulations, including the federal anti-kickback statute (42 U.S.C. § 1320a-7b), the related safe harbor regulations, and the Limitation on Certain Physician Referrals, also referred to as the Stark Law (42 U.S.C. § 1395nn).

11.6.5 Company shall conduct activities in accordance with applicable state and federal Laws and any applicable regulations regarding Medicare, Medicaid, and other third party-payer programs, if any. Company represents and warrants that (1) it is not excluded from, and has not been convicted of any crime or engaged in any conduct that could result in exclusion from, participation in any state or federal healthcare program, as defined in 42 U.S.C. §1320a-7b(f), for the provision of items or services for which payment may be made by a federal healthcare program; (2) it has not contracted, and will not contract, with any employee, contractor, agent, or vendor to perform work under the Agreement who is excluded from participation in any state or federal healthcare program; and (3) it is not subject to a final adverse action, as defined in 42 U.S.C.§ 1320a-7a(e) and 42 U.S.C. § 1320a- 7a(g), and has no adverse action pending or threatened against it. Company shall notify Janssen of any final adverse action, discovery of contract with an excluded entity or individual, or exclusion within thirty (30) days of such action.

11.6.6 Company will comply with Exhibit D.

11.6.7 Janssen represents and warrants that neither Janssen, nor any of its employees, officers, directors, or agents, has been debarred by the FDA, is the subject of a conviction described in 21 U.S.C. 335a, or is subject to any similar sanction. Janssen represents and warrants that it has not, and covenants that it will not engage, in any capacity in connection with this Agreement, any person who has been debarred by FDA, is the subject of a conviction described in 21 U.S.C. 335a or is subject to any similar sanction. Janssen shall promptly inform Company in writing if it or any person performing services under this Agreement is debarred or is the subject of a conviction described in 21 U.S.C. 335a, or if any action, suit, claim, investigation, or legal or administrative proceeding is pending or threatened relating to the debarment or such conviction of Janssen or any such person performing services in connection with this Agreement.





11.6.8 Janssen represents and warrants that it has established, and covenants that it will maintain during the Term, Promotional Materials which are truthful, accurate, and in strict compliance with all applicable Laws.

11.6.9 Janssen represents and warrants that it is in compliance, and covenants that it will continue to comply during the Term, with all applicable Laws, rules and regulations, including the federal anti-kickback statute (42 U.S.C. § 1320a-7b), the related safe harbor regulations, and the Limitation on Certain Physician Referrals, also referred to as the Stark Law (42 U.S.C. § 1395nn).

11.6.10 Janssen shall conduct all activities hereunder in accordance with applicable state and federal Laws, including any applicable regulations regarding Medicare, Medicaid, and other third party-payer programs, if any. Janssen represents and warrants that (1) it is not excluded from, and has not been convicted of any crime or engaged in any conduct that could result in exclusion from, participation in any state or federal healthcare program, as defined in 42 U.S.C. §1320a-7b(f), for the provision of items or services for which payment may be made by a federal healthcare program; (2) it has not contracted, and will not contract, with any employee, contractor, agent, or vendor to perform work under the Agreement who is excluded from participation in any state or federal healthcare program; and (3) it is not subject to a final adverse action, as defined in 42 U.S.C.§ 1320a-7a(e) and 42 U.S.C. § 1320a-7a(g), and has no adverse action pending or threatened against it.

11.7 Infringement of Third Party Intellectual Property; Clinical Trial Data. Janssen represents and warrants to Company that, to its knowledge, as of the Effective Date, the manufacture, use, import, or sale of the Product in the Territory for the Initial Indication does not, and will not during the Term, infringe or misappropriate any intellectual property rights of any Third Party. Janssen represents and warrants to Company that, as of the Effective Date, [***].

11.8 Disclaimer. EXCEPT AS OTHERWISE EXPRESSLY SET FORTH IN THIS ARTICLE XI, NEITHER JANSSEN NOR COMPANY, NOR ANY OF THEIR AFFILIATES, MAKES ANY REPRESENTATION OR EXTENDS ANY WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, TO THE OTHER PARTY IN CONNECTION WITH THE PRODUCT, AND HEREBY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT WITH RESPECT TO THE PRODUCT. EACH PARTY HEREBY DISCLAIMS ANY REPRESENTATION OR WARRANTY THAT THE EXPLOITATION OF THE PRODUCT PURSUANT TO THIS AGREEMENT WILL BE SUCCESSFUL OR THAT ANY PARTICULAR SALES LEVEL WITH RESPECT TO THE PRODUCT WILL BE ACHIEVED.





ARTICLE XII INDEMNIFICATION; LIMITS ON LIABILITY

12.1 Scope of Indemnification.

12.1.1 Janssen shall indemnify and hold harmless Company, its Affiliates and its and their respective directors, officers, employees, and agents (collectively, the Company Indemnified Parties), from, against, and in respect of any and all liabilities, costs, fines, penalties, orders of any Governmental Authorities, Taxes, expenses, or amounts paid as damages or in settlement (in each case, including reasonable attorneys' and experts fees and expenses), involving an Action asserted by a Third Party (collectively, Losses), incurred or suffered by the Company Indemnified Parties or any of them and arising out of or resulting from:

(a) any breach by Janssen or any of the other Janssen Indemnified Parties of any representation, warranty or covenant under this Agreement;

(b) the negligence or willful misconduct of Janssen or any of the other Janssen Indemnified Parties in connection with Janssen's performance under this Agreement;

(c) any claim of death or bodily injury resulting from the use of the Product sold in the Territory; or

(d) any recall, withdrawal, product return or suspension of product promotion under Section 3.6, 3.7 or 8.3.

except, in each case ((a), (b) (c), and (d)), to the extent caused by the negligence or willful misconduct of Company or any of the other Company Indemnified Parties or the breach by Company of any of its representations, warranties or covenants set forth herein.

12.1.2 Company shall indemnify and hold harmless Janssen, its Affiliates, and its and their respective directors, officers, employees, and agents (collectively, the Janssen Indemnified Parties), from, against and in respect of any and all Losses incurred or suffered by the Janssen Indemnified Parties or any of them and arising out of or resulting from:

(a) any breach by Company or any of the other Company Indemnified Parties of any representation, warranty or covenant under this Agreement; or

(b) the negligence or willful misconduct of Company or any of the other Company Indemnified Parties in connection with Company's performance under this Agreement;

except in each case ((a) and (b)), to the extent caused by the negligence or willful misconduct of Janssen or any of the other Janssen Indemnified Parties or the breach by Janssen of any of its representations, warranties or covenants set forth herein.





12.2 Notice and Control of Actions.

12.2.1 A Person entitled to indemnification under this Article XII (an Indemnified Party) shall give prompt written notification to the Person from whom indemnification is sought (the Indemnifying Party) of the assertion of any Action by a Third Party for which indemnification may be sought (it being understood and agreed, however, that the failure by an Indemnified Party to give such notice of a Third Party Action as provided in this Section 12.2.1 shall not relieve the Indemnifying Party of its indemnification obligation under this Agreement except and only to the extent that such Indemnifying Party is actually prejudiced as a result of such failure to give notice).

12.2.2 Within thirty (30) days after delivery of such notification, the Indemnifying Party may, upon written notice thereof to the Indemnified Party, assume control of the defense of such Action with counsel reasonably satisfactory to the Indemnified Party; provided, however, that the Indemnifying Party shall not have the right to control the defense of any Action against any Indemnified Party involving criminal charges or tax matters. If the Indemnifying Party does not assume control of the defense of an Action, the Indemnified Party shall control such defense.

12.2.3 The Party not controlling such defense shall reasonably cooperate with the other Party at such other Party's request and expense, and may participate therein at its own expense; provided, however, that if the Indemnifying Party assumes control of such defense and the Indemnified Party reasonably concludes, based on advice from counsel, that the Indemnifying Party and the Indemnified Party have conflicting interests with respect to such Action, the Indemnifying Party shall be responsible for the reasonable fees and expenses of counsel to the Indemnified Party solely in connection with such Action; provided further, however, that in no event shall the Indemnifying Party be responsible for the fees and expenses of more than one counsel for all Indemnified Parties.

12.2.4 The Party controlling such defense shall keep the other Party advised of the status of such Action and the defense thereof and shall consider recommendations made by the other Party with respect thereto.

12.2.5 The Indemnified Party shall not agree to any settlement of such Action, consent to any judgment in respect thereof or admit any liability with respect thereto, without the prior written consent of the Indemnifying Party, which shall not be unreasonably withheld or delayed.

12.2.6 The Indemnifying Party shall not agree to any settlement of such Action or consent to any judgment in respect thereof without the prior written consent of the Indemnified Party, which shall not be unreasonably withheld or delayed; provided, however, that no such consent shall be required with respect to any such settlement, compromise or consent to judgment that (a) involves solely the payment of money damages as to which the Indemnifying Party has acknowledged its obligation to indemnify hereunder, (b) does not involve any claim for injunctive





or other equitable relief, and (c) effects a full and unconditional release of the Indemnified Party with respect to all claims related to the Action.

12.3 Limitations on Liability. SUBJECT TO AND WITHOUT LIMITING THE INDEMNIFICATION OBLIGATIONS OF EACH PARTY WITH RESPECT TO THIRD PARTY ACTIONS UNDER SECTIONS 12.1 AND 12.2, AND EXCEPT WITH RESPECT TO LIABILITY ARISING FROM BREACH OF SECTION 9.1 BY A PARTY, NO PARTY OR ANY OF ITS AFFILIATES WILL BE LIABLE TO THE OTHER PARTY OR ITS AFFILIATES UNDER ANY CONTRACT, WARRANTY, NEGLIGENCE, TORT, STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY SPECIAL, INDIRECT, INCIDENTAL, PUNITIVE, MULTIPLIED OR CONSEQUENTIAL DAMAGES, OR OTHER DAMAGES FOR LOSS OF PROFIT, SALES OR FEES, ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT OR ITS SUBJECT MATTER. FURTHER, SUBJECT TO AND WITHOUT LIMITING THE INDEMNIFICATION OBLIGATIONS OF EACH PARTY WITH RESPECT TO THIRD PARTY ACTIONS UNDER SECTIONS 12.1 AND 12.2, AND EXCEPT WITH RESPECT TO LIABILITY ARISING FROM BREACH OF SECTION 9.1 BY A PARTY OR ARISING FROM THE GROSS NEGLIGENCE OR WILLFUL MISCONDUCT OF A PARTY, EACH PARTY'S AGGREGATE LIABILITY TO THE OTHER PARTY FOR ALL CASES AND CONTROVERSIES ARISING OUT OF THE SUBJECT MATTER OF THIS AGREEMENT, REGARDLESS OF THE CAUSE OF ACTION AND WHETHER BROUGHT IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, WILL BE LIMITED TO $[***]. THE AMOUNT OF SERVICE FEES AND MILESTONE PAYMENTS PAID OR DUE TO COMPANY UNDER THIS AGREEMENT WILL NOT BE INCLUDED IN THE CALCULATION OF SUCH AGGREGATE LIABILITY AMOUNT.

12.4 Insurance. Company agrees to comply with Exhibit E attached hereto, which is incorporated herein by this reference.

ARTICLE XIII DISPUTE RESOLUTION

13.1 Disputes. All disputes, claims or controversies (other than matters that are expressly stated herein to require the consent of either or both Parties) arising from or related to this Agreement, or to the interpretation, application, breach, termination or validity of this Agreement, whether based on contract, tort, statute, or other theory of liability (Disputes), shall be resolved in accordance with this Article XIII. It is the intent of the Parties that all Disputes relating in any way to this Agreement should be resolved in accordance with this Article, including Disputes that may involve the parent companies, subsidiaries, and other Affiliates of any Party.

13.2 Negotiation. Before any Dispute may be submitted to mediation or arbitration as provided below, the Dispute shall be referred to the President of Janssen and the Chief Executive Officer of Company for discussion and attempted resolution. No statements made by either Party during such discussions will be used by the other Party or admissible in arbitration or any other





subsequent proceeding for resolving the dispute. If such executives do not resolve the Dispute within thirty (30) days of such referral by either Party, then either Party may, upon written notice to the other Party, submit the Dispute to mediation pursuant to Section 13.3 and binding arbitration pursuant to Section 13.4.

13.3 Mediation.

13.3.1 The Parties shall first attempt in good faith to resolve any Dispute that is not resolved pursuant to Section 13.2 by confidential mediation in accordance with the then current Mediation Procedure of the International Institute for Conflict Prevention and Resolution (CPR Mediation Procedure) (http://www.cpradr.org) before initiating arbitration. The CPR Mediation Procedure shall control, except where the CPR Mediation Procedure conflicts with these provisions, in which case these provisions control. The mediator shall be chosen pursuant to the CPR Mediation Procedure. The mediation shall be conducted in English in New York, New York. At the request of either Party (and at the shared expense of the Parties), the mediation shall have simultaneous translation from and into English.

13.3.2 Either Party may initiate mediation with respect to any Dispute that is not resolved pursuant to Section 13.2 by written notice to the other Party. The Parties agree to select the mediator within twenty (20) days of the notice and the mediation will begin promptly after the selection. The mediation will continue until the mediator or either Party, declares in writing, no sooner than after the conclusion of one full day of a substantive mediation conference attended on behalf of each Party by a senior business person with authority to resolve the Dispute, that the Dispute cannot be resolved by mediation. In no event, however, shall mediation continue more than sixty (60) days from the initial notice by a Party to initiate meditation unless the Parties agree in writing to extend that period.

13.3.3 Any period of limitations that would otherwise expire between the initiation of mediation and its conclusion shall be extended until twenty (20) days after the conclusion of the mediation.

13.4 Arbitration. If the Parties fail to resolve a Dispute by mediation under Section 13.3 and either Party desires to pursue resolution of the Dispute, the Dispute shall be submitted by either Party for resolution in arbitration pursuant to the then current CPR Rules for Non-Administered Arbitration of International Disputes (CPR Rules) (http://www.cpradr.org), except where they conflict with these provisions, in which case these provisions control. CPR is designated as the Neutral Organization for all purposes.

13.4.1 Language/Location. The arbitration shall be conducted in English in New York, New York.

13.4.2 Selection of Arbitrators.

(a) The arbitrators will be chosen from the CPR Panels of Distinguished Neutrals, unless a candidate not on the CPR Panels of Distinguished Neutrals is approved by both





Parties. Each arbitrator shall be a lawyer with at least fifteen (15) years' experience with a law firm or corporate law department of over twenty-five (25) lawyers or who was a judge of a court of general jurisdiction. To the extent that the Dispute requires special expertise, the Parties will so inform CPR prior to the beginning of the selection process.

(b) The arbitration tribunal shall consist of three (3) arbitrators, chosen in accordance with Rules 5.3 and 6 of the CPR Rules. If, however, the aggregate award sought by the Parties is less than five million United States dollars (USD $5,000,000) and equitable relief is not sought, a single arbitrator shall be chosen in accordance with Rules 5.3 and 6 of the CPR Rules.

(c) Candidates for the arbitrator position(s) may be interviewed by representatives of the Parties in advance of their selection, provided that all Parties are represented.

(d) The Parties agree to select the arbitrator(s) within forty-five (45) days of initiation of the arbitration.

13.4.3 Conduct of Proceedings.

(a) The hearing will be concluded within nine (9) months after selection of the arbitrator(s) and the award will be rendered within 60 days of the conclusion of the hearing, or of any post hearing briefing, which briefing will be completed by both sides within 45 days after the conclusion of the hearing. In the event the Parties cannot agree upon a schedule, then the arbitrator(s) shall set the schedule following the time limits set forth above as closely as practical.

(b) The arbitrator(s) shall be guided, but not bound, by the IBA Rules on the Taking of Evidence in International Commercial Arbitration (www.ibanet.org).

(c) The hearing will be concluded in ten hearing days or less. Multiple hearing days will be scheduled consecutively to the greatest extent possible. A transcript of the testimony adduced at the hearing shall be made and shall be made available to either Party.

13.4.4 Applicable Law. The arbitrator(s) shall decide the merits of any Dispute in accordance with the law governing this Agreement, without application of any principle of conflict of laws that would result in reference to a different law. The arbitrator(s) may not apply principles such as amiable compositeur or natural justice and equity.

13.4.5 Award.

(a) The arbitrator(s) shall render a written opinion stating the reasons upon which the award is based. The arbitrator(s) may award the costs and expenses of the arbitration as provided in the CPR Rules, but each Party shall bear its own attorney fees.

(b) The award may be entered and enforced in any court of competent jurisdiction. If a court is called upon to enforce an award in a court proceeding, the Parties consent





to the court's requiring the Party resisting enforcement to pay the reasonable attorneys' fees and costs incurred in that proceeding by the Party seeking enforcement.

13.4.6 Provisional Relief. Any Party may seek emergency, interim, or provisional relief prior to the appointment of the arbitrator(s) from any court of competent jurisdiction, without waiver of the agreements to mediate and arbitrate. After appointment of the arbitrator(s), any request for emergency, interim, or provisional relief shall either be addressed to the arbitrator(s), which shall have the power to enter an interim award granting relief using the standards provided by applicable law, or to a court, but only with the permission of the arbitrator(s). Any interim award of the arbitrator(s) may be enforced in any court of competent jurisdiction.

13.4.7 WAIVER. EACH PARTY HERETO WAIVES: (A) ITS RIGHT TO TRIAL OF ANY ISSUE BY JURY, (B) WITH THE EXCEPTION OF RELIEF MANDATED BY STATUTE, ANY CLAIM FOR THE TYPES OF DAMAGES EXCLUDED BY SECTION 12.3 (SUBJECT TO THE EXCEPTIONS SPECIFIED IN SUCH SECTION), AND (C) ANY CLAIM FOR ATTORNEY FEES, COSTS AND PREJUDGMENT INTEREST.

13.5 Confidentiality. All proceedings and decisions of the mediator(s) and/or arbitrator(s) shall be deemed Confidential Information of each of the Parties and shall be subject to Section 9.1.

ARTICLE XIV MISCELLANEOUS

14.1 Press Announcements. Neither Party, nor any of its Affiliates, shall issue any press release or make any other public statement relating to the terms and conditions of this Agreement or the relationship contemplated hereunder without the prior written consent of the other Party. Notwithstanding the foregoing, each Party (or its applicable Affiliate) may make any disclosure relating to the Product or the terms and conditions of this Agreement that such Party (or Affiliate), in the opinion of its counsel, is obligated to make pursuant to Laws applicable to publicly-traded companies, including, inter alia, regulations of the Securities and Exchange Commission, the New York Stock Exchange or the Nasdaq Stock Market. In such event, the announcement shall be brief and factual (to the extent consistent with applicable Laws), and the Party required to make such disclosure shall, to the extent practicable, notify the other Party of the method and content of such disclosure a reasonable period of time (at least five (5) Business Days if possible) in advance thereof, so as to allow such other Party to review it for the use of its name and disclosure of Confidential Information.

14.2 Force Majeure Event. All incidents of force majeure, being circumstances beyond the reasonable control of either Party and which have, or may have, a material effect on the ability of such Party to perform under this Agreement, including, failure of power or other utility or sanitary supplies; fire; flood; earthquake; other natural disaster; explosion; riot; strike or lock-out of such Party's workforce; civil insurrection or unrest; terrorist activity; war (whether declared or not); and regulations of any Governmental Authority, in each case, to the extent beyond the





reasonable control of such Party (Force Majeure), shall, for the duration and to the extent of the effects caused thereby, release such Party from the performance of its contractual obligations hereunder. The Party who has suffered the Force Majeure shall notify the other Party without delay of any such incident(s) occurring, and the Parties shall discuss the effects and extent of such incident(s) on this Agreement and the measures to be taken. Each Party shall use Diligent Efforts to avoid or restrict Force Majeure and to mitigate any loss therefrom. In the event of an incident or incidents of Force Majeure, the Party whose performance has been affected thereby shall as soon as reasonably possible resume performance of its obligations hereunder. If any Force Majeure substantially prevents, hinders, or delays performance by a Party in a manner and to an extent that would, but for this Section, constitute a material breach or give rise to a right of termination hereunder, and the performance is not materially restored within one hundred eighty (180) days, the other Party may terminate this Agreement upon written notice to such Party.

14.3 Independent Contractors. Nothing in this Agreement shall create or imply an association, partnership, or joint venture between the Parties, it being agreed and understood that the Parties are independent contractors; and neither Party, with respect to a Third Party, shall have the power or authority to bind or obligate the other Party in any way. Neither Party shall have any responsibility for the hiring, termination or compensation of the other Party's employees or for any employee benefits of such employee. No employee or representative of a Party shall have any authority to bind or obligate the other Party to this Agreement for any sum or in any manner whatsoever, or to create or impose any contractual or other liability on the other Party without said Party's approval.

14.4 Performance by Affiliates. To the extent that this Agreement purports to impose obligations on the Affiliates of a Party, such Party agrees to cause its Affiliates to perform such obligations. Company shall not use an Affiliate to exercise any of its rights or perform any of its obligations or duties hereunder without Janssen's prior written consent. Janssen may use an Affiliate to exercise its rights or perform its obligations and duties hereunder with prior written notice to Company. If either Janssen or Company uses an Affiliate to exercise any of its rights or perform any of its obligations or duties hereunder, as the case may be, such Party shall remain liable hereunder for the prompt payment and performance of all of its obligations hereunder.

14.5 Notices.

14.5.1 All notices, statements, requests or other documents that either Party shall be required or shall desire to give to the other hereunder shall be in writing and shall be given by the Parties only as follows: (a) by personal delivery; (b) by facsimile, receipt confirmed; (c) by addressing it as indicated below, and by depositing it certified mail, postage prepaid, in the mail, first class (airmail if the address is outside of the country in which such notice is deposited); or (d) by addressing it as indicated below, and by delivering it toll prepaid to a recognized courier service (e.g., Federal Express or DHL).

14.5.2 If so delivered, transmitted by facsimile, mailed, or couriered, each such notice, statement, request or other document shall, except as herein expressly provided, be





conclusively deemed to have been given when personally delivered or faxed during a Business Day, or on the fifth (5th) Business Day after the date of mailing, or on the second (2nd) Business Day after delivery to a courier service, as the case may be. The address of a Party shall be the address of which the other Party actually receives written notice pursuant to this Section 14.5 and until further notice such addresses are:

If to Janssen, to:

Janssen Biotech, Inc. 800 Ridgeview Dr. Horsham, PA 19044 Attention: President, Oncology Facsimile: [***]

With a copy (which shall not constitute notice) to:

Office of the General Counsel Johnson & Johnson One Johnson & Johnson Plaza New Brunswick, NJ 08933 Attn: General Counsel, Pharmaceuticals Fax No.: [***]

If to Company, to:

Immunomedics, Inc. 300 The American Road Morris Plains, NJ 07950 Attn: General Counsel

14.6 Entire Agreement. This Agreement, including the exhibits and schedules attached hereto (which are hereby incorporated by reference), sets forth the entire agreement and understanding between the Parties as to the subject matter hereof and supersedes all agreements or understandings, oral or written, made between the Parties before the Effective Date with respect to the subject matter hereof. 14.7 Amendments; Assignment. This Agreement may not be revised, amended, supplemented, or varied except by an instrument in writing signed by Janssen and Company. Neither this Agreement nor any rights or obligations of a Party may be assigned, delegated or otherwise transferred by such Party without the prior written consent of the other Party; provided, however, that Janssen may, without such consent but with prior written notice to Company, assign, delegate and transfer this Agreement or all or any of its rights and obligations under this Agreement to (a) any Third Party that acquires substantially all Janssen's assets relating to the Product in the





Territory or (b) any Affiliate of Janssen. Any attempted assignment, transfer or delegation not in accordance with this Section shall be void.

14.8 Non-Waiver of Rights. Failure of a Party to enforce any of the provisions of or any rights with respect to this Agreement shall in no way be considered a waiver of such provisions or rights or in any way affect the validity of this Agreement. The failure of either Party to enforce any of such provisions or rights shall not preclude or prejudice such Party from later enforcing or exercising the same or any other provisions or rights which it may have under this Agreement. The waiver of any provision, right or obligation under this Agreement shall be effective only if in a written instrument signed by the Party to be bound thereby.

14.9 Further Assurances and Cooperation. Each Party agrees that after the Effective Date it will execute and deliver, or cause its Affiliates to execute and deliver, such further documents and instruments as may be reasonably necessary or proper to fully effectuate this Agreement and the transactions contemplated hereby.

14.10 Severability. This Agreement is intended to be valid and effective under any Laws and, to the extent permissible under Law, shall be construed in a manner to avoid violation of or invalidity under any Laws. Should any provisions of this Agreement be or become invalid, illegal, or unenforceable under any Laws, the other provisions of this Agreement shall not be affected and shall remain in full force and effect, and, to the extent permissible under the Laws, any such invalid, illegal, or unenforceable provision shall be deemed amended lawfully to conform with the intent of the Parties.

14.11 Binding Effect. This Agreement shall be binding upon and inure to the benefit of the Parties hereto and their respective successors and permitted assigns.

14.12 Counterparts; Facsimile Signatures. This Agreement may be executed in counterparts, each of which counterparts, when so executed and delivered, will be deemed to be an original, and all of which counterparts, taken together, will constitute one and the same instrument even if all parties have not executed the same counterpart. Signatures provided by any photocopy and transmitted by facsimile or other electronic means will be deemed to be original signatures.

14.13 Third Party Beneficiaries. The provisions of this Agreement are not intended legally to benefit or be enforceable by any Person who is not a party to this Agreement, and no such Person shall obtain any right under any such provisions or shall by reason of such provisions make any claim against a party to this Agreement.

14.14 Governing Law. The interpretation, construction and performance of this Agreement, and the rights granted and obligations arising hereunder, shall be governed in accordance with the substantive laws of the State of New York, without regard to its conflicts of law rules.





14.15 Construction. Except where expressly stated otherwise in this Agreement, the following rules of interpretation apply to this Agreement: (a) include, includes, and including are not limiting and mean include, includes, and including, without limitation; (b) definitions contained in this Agreement are applicable to the singular as well as the plural forms of such terms; (c) references to an agreement, statute, regulation, or instrument mean such agreement, statute, regulation, or instrument as from time to time amended, modified, or supplemented; (d) references to a Person are also to its successors and permitted assigns; (e) references to an Article, Section, Exhibit, or Schedule refer to an Article or Section of, or any Exhibit or Schedule to, this Agreement unless otherwise indicated; (f) the word will shall be construed to have the same meaning and effect as the word shall; (g) the use of any gender shall be applicable to all genders; and (i) the words hereof and hereunder, and words of similar import, shall be construed to refer to this Agreement as an entirety and not to any particular provision. The captions of this Agreement are for convenience of reference only and in no way define, describe, extend, or limit the scope or intent of this Agreement or the intent of any provision contained in this Agreement. Any reference in this Agreement to a matter or action being subject to the mutual agreement or mutual consultation of the Parties, or words of similar import, shall not be construed as an agreement that the Parties shall agree to such matter or action. The language of this Agreement shall be deemed to be the language mutually chosen by the Parties and no rule of strict construction shall be applied against either Party on the basis that such Party drafted this Agreement or any portion hereof.

[The remainder of this page is intentionally left blank.]





IN WITNESS WHEREOF, the Parties have executed this Agreement as of the Effective Date.

JANSSEN BIOTECH, INC. By: /s/Reshema Keups-Polanco Name: Reshema Keups-Polanco Title: VP, Sales and Marketing, Solid Tumor

IMMUNOMEDICS, INC. By: /s/Jared Freedberg Name: Jared Freedberg Title: General Counsel





Schedule 1.16

Janssen Universal Calendar









Schedule 6.2

Pharmacovigilance Provisions

1 Definitions

1.1 Adverse Event (AE) means any untoward medical occurrence in a patient or a clinical-trial subject administered a medicinal product and which does not necessarily have to have a causal relationship with this treatment. An adverse event can therefore be any unfavourable and unintended sign (for example, an abnormal laboratory finding), symptom, or disease temporally associated with the use of a medicinal product, whether or not considered related to this medicinal product.

1.2 Agreement means the Promotion Agreement to which this Schedule is attached.

1.3 Applicable Law means the applicable laws, rules, regulations, including any guidelines or other requirements of any Regulatory Authority in the relevant country of the Territory, and industry guidelines or codes of conduct that may apply to the review and analysis of safety information, the reporting of safety information to Regulatory Authorities and the maintenance of records thereof.

1.4 Company Employee means any employee of Immunomedics, Inc. or any of its Affiliates conducting activities under the Agreement.

1.5 Date of First Receipt means the date of receipt or coming into possession or control of safety information, which contains at a minimum a suspect medicinal product and a suspect event i.e. an incomplete case. Unless otherwise indicated in the Applicable Law the Regulatory Clock Start Date or Day Zero for regulatory reporting, is the date the minimum criteria for reporting as defined by the Applicable Law becomes available (i.e., an identifiable subject/ patient, identifiable reporter, suspect product, and event).

1.6 Incomplete Case means a case that does not contain minimum criteria for reporting (as defined by the Applicable Law) to a Regulatory Authority (i.e., an identifiable subject/ patient, identifiable reporter, suspect medicinal product, and event), but at a minimum contains a suspect medicinal product and a suspect event. Such reports are entered on the safety database maintained by Janssen as potential cases of value for signal detection purposes.





1.7 Personal Data means any information relating to an identified or identifiable natural person.

1.8 Product has the meaning set forth in Section 1.77 of the Agreement.

1.9 Product Quality Complaint (PQC) Any written, electronic or oral communication that alleges deficiencies related to the identity, quality, durability, reliability, safety, effectiveness or performance of a product after it is released for distribution.

1.10 Regulatory Authority means any applicable federal, national, regional, state, provincial or local regulatory agencies, departments, bureaus, commissions, councils or other government entities regulating or otherwise exercising authority with respect to the Product in the relevant Territory.

1.11 Special Situation Occurrences or reports that may not contain an adverse event, which must still be collected and reported in order to meet regulatory safety reporting requirements and Janssen policies:

• Overdose of Product, • Pregnancy exposure (maternal and paternal), • Exposure to the Product from breastfeeding, • Suspected abuse/misuse of the Product, • Inadvertent or accidental exposure to the Product (including occupational exposure), • Any failure of expected pharmacological action (i.e. lack of effect) of the Product, • Unexpected therapeutic or clinical benefit from use of the Product, • Medication error (includes potential, intercepted or actual) involving the Product with or without patient/consumer exposure to the Product, (e.g. name confusion) OR that caused an unintended effect or could cause an intended effect (e.g. adult medicine given to a young child), • Suspected transmission of an infectious agent via Product, • Expired drug use and falsified medicine,





• Off-label use - situations where the Product is intentionally used for a medical purpose not in accordance with the authorized product information.

Off-label use without an associated AE, Special Situation, UE or AEPQC should be collected only when it is specifically and voluntarily brought to the attention of a Company Employee in an unsolicited manner by a reporter e.g., Health Care Professional or data obtained from databases where off-label use may be systematically collected (e.g., reimbursement database in US), and in accordance with local procedure in compliance with local laws and regulations. Follow-up of off-label use is not required.

1.12 Territory means the United States of America, including its territories and possessions.

1.13 Undesirable Effect (UE) shall mean an adverse reaction for human health attributable to the normal or reasonably foreseeable use of a cosmetic product.

Note: All capitalized terms used but not defined in this Schedule shall have the meanings ascribed to them (if any) in the Agreement.

2 Reporting Requirements

2.1 If any Company Employee receives or otherwise comes into possession or control of any information about the Product, regardless of source, relating to an Adverse Event (AE), Special Situation, AE associated with a Product Quality Complaint (AEPQC), Undesirable Effect (UE) or an Incomplete Case, such Company Employee shall provide such information immediately, but in no case later than twenty-four (24) hours from the Date of First Receipt by the Company Employee, to Janssen by using the Janssen Online Complaint Form available at Janssensafety.com. For the avoidance of doubt, all information regarding Incomplete Cases should also be provided immediately, but in no case later than twenty-four (24) hours from the date the Company Employee receives such information.

3 Training

4.1 Company shall ensure that all Company Employees are trained in the reporting of AEs, Special Situations, AEPQC or UEs, prior to the start of performing services under the Agreement and at least annually thereafter if such services remain in effect, to ensure





compliance with this Schedule and the Applicable Law. This includes, but is not limited to, monitoring applicable AE, Special Situation, AEPQC and UE training, and maintaining documentation of such training. Such training shall be conducted in the manner set forth in the Agreement using materials to be provided by Janssen. Janssen may require Company Employees to complete additional training provided by Janssen when there is a change in the governing contracts and/or processes or changes in Company's personnel.

5 [Intentionally Omitted.]

5 Retention Policy

5.1 Company shall maintain and archive records of all source documentation generated by the activity (records, questionnaires, reports), personnel training records and other relevant information relating to its obligations under this Schedule for a period consistent with Section 7.1 of the Agreement (including Exhibit C thereto) and Applicable Law. Company must have appropriate storage capabilities (e.g., preventing accidental damage of physical records and appropriate back up of electronic storage systems) if storing original AE, Special Situations, AEPQC and UE documentation. Notwithstanding the above, before Company destroys any safety records it will notify Janssen of its intention to do so, affording Janssen the opportunity to retain such records if it so wishes.

6 Audit

6.1 Without prejudice to Section 7.5 of the Agreement, Janssen or its designee shall have the right to audit Company to verify Company's compliance with this Schedule and the Applicable Law, provided that Janssen provides Company with at least [***] ([***]) calendar days prior written notice. The Parties shall agree upon the scope of the audit with a written audit plan to be submitted by Janssen [***] ([***]) calendar days prior to the audit. Company will allow such access to its facilities, systems, personnel and records, in whatever form and in any location (including locations owned or operated by a third party) as may reasonably be necessary to enable Janssen or its designee to evaluate and ensure compliance with this Schedule and the Applicable Law. Janssen shall communicate audit findings in a written audit report in a timely manner. The Parties undertake to cooperate with each other to diligently investigate and resolve any such audit findings.

7 Data Privacy





7.1 In the performance of the above safety activities, both Parties will comply with all Applicable Laws in respect of data privacy in order to protect Personal Data.

7.2 Each Party shall collect, use and disclose any Personal Data obtained in the course of performing the safety activities under this Schedule solely for the purposes of complying with the regulatory obligations as described in this Schedule, or as otherwise required by Applicable Law or by a court order. Both Parties will use electronic, physical and any other safeguards appropriate to the nature of the information to prevent any use or disclosure of Personal Data other than as provided for above. Both Parties will also take reasonable precautions to protect the Personal Data from accidental, unauthorised, or unlawful alteration or destruction.

7.3 Each Party shall notify the other Party promptly of any accidental, unauthorised, unlawful destruction, loss, alteration, or disclosure of, or access to the Personal Data, and take immediate steps to rectify any such security breach.

8 Follow Up

8.1 Janssen will be responsible to diligently follow up on safety information.

9 Miscellaneous

9.1 Notwithstanding the above, in the event any Company Employee is informed of AE, Special Situations, AEPQC or UE related to the use of any other products of Janssen or its Affiliates that such Company Employee is aware of, such Company Employee shall report these to Janssen (in the same manner as any such report relating to the Products) within twenty-four (24) hours of the Date of First Receipt of such information by such Company Employee.





CONTACT DETAILS

For Janssen Name: Company: Telephone: Fax: Email:

For Company Name: Company: Telephone: Fax: Email:





EXHIBIT A

Brand Plan

[***]





EXHIBIT B

Detailing Requirements

[***]





EXHIBIT C

Records and Information Management (RIM) Requirements

1. Maintenance. Company shall maintain and manage all paper and electronic records, files, documents, work papers and other information in any form provided by Janssen or generated pursuant to this Agreement (the Files and Work Papers): (a) in accordance with Janssen's records management policies (which may be changed by JBI from time to time and communicated to Company), including as set forth in RIM Requirements below, (b) separately from files generated, managed or maintained by Company under agreements with other customers, (c) as required by applicable statutes and regulations, and (d) as set out in any preservation request issued to Company by Janssen.

2. Preservation. Company shall comply promptly and fully with any request from Janssen, for any reason, to preserve Files and Work Papers or to promptly deliver such materials to Janssen. Steps to comply include, when requested by Janssen, periodic meetings to identify and implement documented procedures to preserve or deliver such data. Files and Work Papers created or modified by Company in electronic format must be delivered to Janssen in the same electronic format or as otherwise directed by Janssen.

3. Third Party Requests. Upon receipt from Third Parties of any request, demand, notice, subpoena, order, or other legal information- request for any Files and Work Papers, Company shall take all reasonable steps to protect Janssen's legal rights in any response to such request and, to the extent that Company legally may do so, shall immediately notify Janssen, shall provide Janssen with a copy of such request, and shall meet and cooperate with Janssen in the implementation of procedures to comply with the request.

4. RIM Requirements. This section specifies RIM requirements applicable to Files and Work Papers that Company personnel create, maintain, manage or manipulate on behalf of Janssen. Company is responsible for understanding and complying with Janssen's RIM requirements.

a. Records and Information Management requirements shall be applied consistently and regularly.

b. Company's Files and Work Papers:

i) shall be created, stored and managed throughout their lifecycle using proper protection;

ii) shall be protected and access controlled according to their value as described in the Johnson & Johnson Supplier Information Security Requirements;

iii) shall be retained in accordance with the Johnson & Johnson





Enterprise Retention Schedule, which defines retention requirements for business, legal, regulatory and privacy purposes; and

iv) relevant to litigation or an investigation and subject to a legal hold shall be retained and preserved, regardless of the retention requirement set forth in the Johnson & Johnson Enterprise Retention Schedule.

c. Company shall ensure that the Files and Work Papers are retained upon the departure of personnel employed by Company.

d. Janssen or the applicable Janssen Affiliate shall provide written approval prior to the disposition (disposal or deletion) of any Files and Work Papers.

e. Company personnel with access to Janssen's network shall annually complete Records and Information Management training as specified by Janssen.





EXHIBIT D

Health Care Compliance Provisions

1. HCP is defined as (i) any person who is licensed by a state to provide health care services directly or indirectly to patients, such as a physician, a nurse, a technician, a psychologist, or a lab specialist and/or (ii) any person or organization to whom a Party markets its products and services that is in a position to influence the selection of the products furnished or purchased, including but not limited to hospitals and health systems, administrators, procurement personnel, group purchasing organizations, pharmacy benefit managers, and business people.

2. Company shall, with respect to each HCP engaged under this Agreement:

a. Ensure that the HCP's services are provided in compliance with all applicable laws and regulations, including but not limited to laws and regulations pertaining to the promotion of products regulated by the United States Food and Drug Administration (FDA); laws, regulations and guidance pertaining to federal and state anti-kickback and submission of false claims to governmental or private health care payors (collectively, Health Care Compliance or HCC); state and federal laws and regulations relating to the protection of individual and patient privacy; and any other laws and regulations applicable to such services.

b. Ensure that HCP's services are provided in compliance with Janssen's written policies and procedures of which Company is provided notice, including, but not limited to, policies and procedures related to FDA and Health Care Compliance and the protection of individual and patient privacy (collectively, Janssen Policies). The requirements of this Agreement and any additional policies attached to this Agreement shall constitute Janssen Policies of which Janssen provides notice to Company.

c. Comply with professional and/or employment rules (such as conflicts of interest or ethics policies) established by Company or a professional organization or institution with which HCP is affiliated when the provision of services by an HCP is subject to such rules, including, as applicable, obtaining any required approval(s) prior to providing services and making any required reports.

3. Company shall provide notice to each HCP of the following:

The Physician Payments Transparency Requirements of the Patient Protection and Affordable Care Act of 2010 (codified at 42 U.S.C. 1320a-7h) and implementing regulations, require certain pharmaceutical, medical device, and other companies to annually report to the Centers for Medicare and Medicaid Services (CMS) certain information about payments and transfers of value provided directly or indirectly to U.S. physicians and teaching hospitals, which CMS will make publicly available. This includes any payments or transfers of value that Janssen provides indirectly through Company to U.S. physicians and teaching hospitals. As required by law, Janssen will report to CMS information about payments and transfers of value that Company





provides to U.S. physicians and teaching hospitals pursuant to this Agreement. This includes any portion of any payment or transfer of value that Janssen furnishes to Company which Company then provides directly or indirectly to U.S. physicians or teaching hospitals, including its employees, agents, or contractors. Information that Janssen must report includes the identity and business address of each relevant U.S. physician or teaching hospital, the value and purpose of any payments or transfers of value that are furnished, and any other information as may be required by law. To enable Janssen to comply with its legal obligations, Company shall track, maintain, and provide Janssen information and data related to any payments or transfers of value that Company provides to U.S. physicians and teaching hospitals under this Agreement. Company shall provide such information and data in the form and manner that Janssen requests in a timely manner. Janssen may also report information about compensation, payments or transfers of value that Company provides to U.S. physicians and teaching hospitals as otherwise required by law and Janssen reserves the right to post on a website accessible to the public such information, whether or not required by law.

4. In accordance with Janssen's request, Company shall, within thirty (30) days thereafter, provide or upload to Janssen's health care compliance data system (the Totality Third Party Company Portal) or any similar system, all compliance documents and data templates related to services. Data requirements regarding Totality Third Party Company Portal can be found at https://totalitygateway.jnj.com. Compliance documents and data templates include the following:

a. Copies of written agreements including compensation terms, with each HCP providing services.

b. Documentation indicating that each HCP providing services is not excluded or debarred and, for any health care practitioner, duly licensed under state law, as set forth above. Company shall obtain such documentation prior to engaging such HCP to provide services.

c. Documentation of services provided by such HCP (e.g., a written report, comments collected at a meeting, presentation materials, etc.).

d. HCP data templates capturing details on HCP value exchange. Value exchanges shall include, without limitation, any gifts, meals, compensation, travel reimbursement and patient-related materials provided to HCPs in connection with this Agreement.

e. Documentation that shows that Company provided notice to each HCP that information provided pursuant to this Agreement may be made publicly available at any time at the sole discretion of Janssen.

f. Electronic report of overall expenses paid to or on behalf of each HCP and electronic copies of all original receipts documenting such expenses; and





g. Written evidence of any required ethics or other authorizations allowing HCPs employed by federal, state or local government agencies, including but not limited to pharmacy and therapeutics committees, to provide services under this Agreement.

5. In the event that Janssen is charged any fee or penalty because Company failed to comply with the requirements set forth in this Exhibit, Company agrees to reimburse Janssen for such fees or penalties. Janssen reserves the right to reduce or not pay any invoice in the event that Company fails to comply with the requirements set forth in this Exhibit.

6. Company shall produce and send to Janssen electronic reports each month in which payments were made or gifts or meals were provided to HCPs by Company on behalf of Janssen, listing the following:

a. value of any gifts, meals, compensation paid, and/or entertainment provided to HCPs, whether their services were obtained through a written agreement or not;

b. nature, purpose and date of payments or other items of value provided; and

c. names, addresses, and federal Tax I.D. number of HCPs who were paid remuneration for services relating to Janssen.

7. Company shall report any violations of the compliance obligations set forth in this Agreement to Janssen at the name and address listed in Section 14.5 (Notices) or through the Vendor & Distributor Hotline at 1-800-556-2496.

8. Company, at its expense, shall ensure that all personnel and subcontractors involved in providing services attend and participate in training and educational programs reasonably scheduled by Janssen. Company, at its expense, agrees to train and periodically provide refresher training to all its new and current personnel and subcontracted personnel providing services regarding the compliance obligations set forth in this Agreement, including any Janssen Policies applicable to services. Company shall, upon request, provide Janssen with a record of the training provided and the dates training was attended by any Company personnel and subcontractors.





EXHIBIT E

Insurance Requirements

[***] 
Question: Highlight the parts (if any) of this contract related to Covenant Not To Sue that should be reviewed by a lawyer. Details: Is a party restricted from contesting the validity of the counterparty’s ownership of intellectual property or otherwise bringing a claim against the counterparty for matters unrelated to the contract?
answer:
Company agrees that it shall not seek to register or obtain ownership rights in any of Janssen's corporate names, logos, or Product Trademarks (or any confusingly similar trademark).


question:
Exhibit 10.16

[***] = CERTAIN CONFIDENTIAL INFORMATION CONTAINED IN THIS DOCUMENT, MARKED BY BRACKETS, HAS BEEN OMITTED AND FILED SEPARATELY WITH THE SECURITIES AND EXCHANGE COMMISSION PURSUANT TO RULE 406 OF THE SECURITIES ACT OF 1933, AS AMENDED.

 Software License, Customization and Maintenance Agreement     Agreement Number:  CW251207

Effective Date:  11/4/10

Company Name:  Cardlytics, Inc.

Company Address:  621 North Avenue NE  Suite C-30  Atlanta, GA 30308

Company Telephone:  888.798.5802     This SOFTWARE LICENSE, CUSTOMIZATION AND MAINTENANCE AGREEMENT (Agreement) is entered into as of the Effective Date by and between Bank of America, N.A. (Bank of America), a national banking association, and the above-named Supplier, a corporation, and consists of this signature page and the attached Terms and Conditions, Schedules, and all other documents attached hereto, which are incorporated in full by this reference.   (Supplier)   Bank of America, N.A.

By:  /s/ Scott Grime   By:  /s/ Chandra Torrence Name: Scott Grime   Name: Chandra Torrence Title:  Chief Executive Officer   Title:  V.P., Sourcing Manager Date:  11/8/10   Date:  11/4/10

Address for Notices:

Cardlytics, Inc. 621 North Ave NE Suite C-30 Atlanta, GA 30030 ATTN: Scott Grimes Telephone: 888.798.5802 Email: [***]



Address for Notices: (Supply Chain Management Contact) Mailcode NC1-023-09-01 Bank of America 625 N Tryon St Charlotte, NC 28255 ATTN: Chandra Torrence Telephone: [***] Email: [***]

With a copy to:

Bank of America Legal Department 101 S. Tryon Street Charlotte, NC 28255    Proprietary to Bank of America   vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





 Software License, Customization and Maintenance Agreement  Table of Contents       Page  1.0  DEFINITIONS   1  2.0  LICENSE   4  3.0  RELATIONSHIP MANAGER   6  4.0  TERM   7  5.0  TERMINATION   7  6.0  ORDERING, DELIVERY AND INSTALLATION   8  7.0  CUSTOMIZATIONS   9  8.0  SOURCE CODE CUSTODY   10  9.0  DOCUMENTATION   11  10  ACCEPTANCE   11  11.0  MAINTENANCE SERVICES   12  12.0 UPGRADES   12  13.0 NON-MAINTENANCE SERVICES SUPPORT   12  14.0 TRAINING   12  15.0 PRICING/FEES   13  16.0 INVOICES TAXES/PAYMENT   13  17.0 EXPORT LAWS   15  18.0 MUTUAL REPRESENTATIONS AND WARRANTIES   15  19.0 REPRESENTATIONS AND WARRANTIES OF SUPPLIER   15  20.0 DELETION OF FUNCTIONS   17  21.0 DISABLEMENT OF SOFTWARE AND HARDWARE   17  22.0 FINANCIAL RESPONSIBILITY   17  23.0 BUSINESS CONTINUITY   17  24.0 RELATIONSHIP OF THE PARTIES   18  25.0 SUPPLIER PERSONNEL   18  26.0 INSURANCE   19  27.0 CONFIDENTIALITY AND INFORMATION PROTECTION   20  28.0 INDEMNITY   23  29.0 LIMITATION OF LIABILITY   24  30.0 DAMAGE TO BANK OF AMERICA SYSTEMS   24  31.0 SUPPLIER DIVERSITY   25  32.0 ENVIRONMENTAL INITIATIVE   26  33.0 AUDIT   26  34.0 NON-ASSIGNMENT   27  35.0 GOVERNING LAW   27  37.0 MEDIATION/ARBITRATION   28  38.0 NON-EXCLUSIVE NATURE OF AGREEMENT   29  39.0 OWNERSHIP OF WORK PRODUCT   29  40.0 MISCELLANEOUS   30  41.0 ENTIRE AGREEMENT   32    SCHEDULE A  PRODUCT LICENSE SCHEDULE TEMPLATE SCHEDULE B  CUSTOMIZATION SCHEDULE SCHEDULE C  CHANGE ORDER REQUEST FORM SCHEDULE D  MAINTENANCE SERVICES SCHEDULE E  INFORMATION SECURITY SCHEDULE F  BACKGROUND CHECKS SCHEDULE G  RECOVERY    Proprietary to Bank of America  ii  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





1.0 DEFINITIONS

1.1 All defined terms In this Agreement not otherwise defined in this Section shall have the meanings assigned in the part of this Agreement in which they are defined.

1.2 Acceptance Date - the first Business Day after the day Bank of America accepts the Software or it is deemed accepted pursuant to the Section entitled Acceptance.

1.3 Acceptance Period - the period commencing on the Installation Date and continuing for the number of days specified in each Product License Schedule, as such period may be extended pursuant to the Section entitled Acceptance.

1.4 Affiliate - a business entity now or hereafter controlled by, controlling or under common control with a Party. Control exists when an entity owns or controls directly or indirectly 50% or more of the outstanding equity representing the right to vote for the election of directors or other managing authority of another entity.

1.5 Associate Information - any non-public information about a Bank of America Representative, whether in paper, electronic, or other form that is maintained by or on behalf of Bank of America for a business purpose.

1.6 Bank of America Customizations - Customizations listed on a Customization Schedule, which shall be owned by Bank of America and subject to the Marketing Restrictions outlined in the Section entitled Customizations.

1.7 Bank Security Requirements- all bank security requirements as described in SCHEDULE E and the Bank of America Service Provider Security Requirements document provided separately.

1.8 Business Continuity Plan - the policies and procedures that describe contingency plans, recovery plans, and proper risk controls to ensure Supplier's continued performance under this Agreement.

1.9 Business Day - Monday through Friday, excluding days on which Bank of America is not open for business in the United States of America.

1.10 Consumer Information - any record about an individual, whether in paper. electronic. or other form, that is a consumer report as such term is defined in the Fair Credit Reporting Act (15 USC 1681 et seq.) or is derived from a consumer report and that is maintained or otherwise possessed by or on behalf of Bank of America for a business purpose. Consumer Information also means a compilation of such records. The term does not include any record that does not identify an individual.

1.11 Correction - a modification to Software to resolve one (1) or more Errors.

1.12 Customer Information - any record containing information about a customer, its usage of Bank of America's services, or about a customer's accounts, whether in paper, electronic, or other form that is maintained by or on behalf of Bank of America for a business purpose.

1.13 Customizations - modifications to the Licensed Programs and new coding made at the request or Bank of America.

1.14 Customization Schedule - a document substantially In the form of SCHEDULE B attached hereto.

1.15 Customization Status Report - a written report prepared by Supplier that describes the status of the development and implementation, describes problems and the steps underway to resolve them, provides a report of hours expended to date for each Customization, and reports all other information necessary or desirable for Bank of America management to understand the status of the project to develop Customizations.    Proprietary to Bank of America  Page 1  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





1.16 Delivery Date - the date on which Bank of America actually receives the Software from Supplier.

1.17 Documentation - any and all: (i) materials created by or on behalf of Supplier that describe or relate to the functional, operational or performance capabilities of the Software, regardless of format; (ii) user, operator, system administration, technical, support and other manuals, including but not limited to functional specifications, help files, flow charts, logic diagrams, programming comments, acceptance plan, if any, and portions of licensor's web site that in any way describe the Software; (iii) responses and other materials submitted by Supplier in response to any Bank of America Request for Information (RFI), Request for Proposal (RFP) or Request for Quotation (RFQ); and (iv) updates, changes and corrections to any of the forgoing that may be made during the Term of this Agreement.

1.18 Effective Date - the date set forth on the signature page on which this Agreement takes effect.

1.19 Error - an instance of failure of Software to be Operative. An Error is a Class 1 Error if it renders the Software unusable for its intended purpose. An Error is a Class 2 Error if the Software is still usable for its intended purpose, but such use is seriously inconvenient and the value to Bank of America of the use of the Software is substantially reduced. All other Errors are Class 3 Errors.

1.20 Information Security Program - the documents that describe how Supplier will provide services to Bank of America in a manner that complies with the confidentiality and information security requirements of this Agreement and all pertinent Schedules and Exhibits hereto. Such information security program must be approved by Supplier's board of directors or equivalent executive management prior to the Effective Date thereof and annually thereafter. It must describe Supplier's network infrastructure and security procedures and controls that protect Confidential Information on a basis that meets or exceeds the Bank Security Requirements.

1.21 Installation Date - the date the Software has been properly installed.

1.22 Installation Site - the building or complex of buildings at which Bank of America installs the Software.

1.23 Intellectual Property Rights - all intellectual property rights throughout the world, including copyrights, patents, mask works, trademarks, service marks, trade secrets, inventions (whether or not patentable), know how, authors' rights, rights of attribution, and other proprietary rights and all applications and rights to apply for registration or protection of such rights.

1.24 Licensed Programs - the computer programs and all Documentation for such computer programs described in each Product License Schedule (including Source Code for such computer programs unless expressly stated otherwise in such Product License Schedule).

1.25 Maintenance Fees - the fees for Maintenance Services set forth in each Product License Schedule.

1.26 Maintenance Period - unless otherwise specified in a Product License Schedule, the Maintenance Period shall be twenty-four (24) hours per day, seven (7) per week, including Bank of America holidays.

1.27 Maintenance Services - the services described in SCHEDULE D or in any Product License Schedule or Order with respect to any Licensed Program including telephone consultation, online and on-site technical support, Error correction and the provision of Updates.    Proprietary to Bank of America  Page 2  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





1.28 Object Code - machine-readable computer instructions that can be executed by a computer.

1.29 Operative - conforming in all material respects to performance levels and functional specifications described in the Program Materials and in this Agreement.

1.30 Order - Product License Schedule, purchase order, work order, Customization Schedule or other written instrument executed, or electronic transmissions originated by, an authorized officer of Bank of America Supply Chain Management directing Supplier in the provision of services substantially conforming to a form provided to Supplier by Bank of America. Unless otherwise provided in writing, the business terms in each Order relating to description of the Licensed Program, pricing, and performance standards shall apply only to such Order.

1.31 Party - Bank of America or Supplier.

1.32 Platform - the computer equipment and operating system which can execute the Object Code.

1.33 Product or Products equipment, Software, firmware, system designs, Program Materials, Customizations, Maintenance Services, Documentation, training and any other goods or services this Agreement calls for Supplier to furnish or Supplier furnishes. Unless expressly otherwise provided, Product or Products shall also mean any separate portion or part of the Product or Products that Supplier furnishes.

1.34 Product License Schedule - a document substantially in the form of SCHEDULE A attached hereto.

1.35 Production Installation Date - the fifth consecutive Business Day upon which the Software has been used successfully to process Bank of America's work commercially in production.

1.36 Program Materials - Supplier's proposals to Bank of America, Documentation, specifications and any other Documentation delivered in connection with the Software, including without limitation materials described in each Product License Schedule.

1.37 Records - documentation of facts that include normal and customary documentation of facts or events for an industry, specific deliverables as designated, emails determined to be records because of the business or litigation purpose, any records documenting legal, regulatory, fiscal or administrative requirements.

1.38 Relationship Manager(s) -the employee designated by a Party to act on its behalf with regard to matters arising under this Agreement who shall be the person the other Party shall contact in writing regarding matters concerning this Agreement.

1.39 Repair Period - the time period commencing when Bank of America reports an Error to Supplier and continuing for four (4) hours or such other period as may be specified In a Product License Schedule.

1.40 Representative an employee, officer, director, or agent of a Party.

1.41 Software - the Licensed Programs and Object Code licensed by Supplier pursuant to a Product License Schedule that produces the results described in the Program Materials, together with the Documentation, all Corrections, Customizations and Updates and any Upgrades acquired by Bank of America pursuant to this Agreement, and, if licensed to Bank of America in this Agreement, the Source Code or other software programs offered by Supplier to the public on Supplier's Web site and used by Bank of America, notwithstanding any associated EULA, GPL or other license terms, any Updates thereto, and any related user manuals or Documentation.    Proprietary to Bank of America  Page 3  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





1.42 Source Code - the human-readable code from which a computer can compile or assemble the Object Code of a computer program, together with a description of the procedure for generating the Object Code.

1.43 Subcontractor - a third party to whom Supplier has delegated or subcontracted any portion of its obligations set forth herein.

1.44 Supplier Customizations - Customizations listed on a Customization Schedule, which Supplier shall own and license to Bank of America under the terms of this Agreement.

1.45 Supplier Security Controls those controls implemented by Supplier as part of its Information Security Program that address each of the Bank Security Requirements, as modified from time to time.

1.46 Term - the initial term of the Agreement or any renewal or extension.

1.47 Time and Materials Rates - the rates specified in each Product License Schedule [or Order] that Supplier may charge for services provided under this Agreement which are not covered by the Maintenance Fee, or if not so specified, supplier's standard rates for such services.

1.48 Update - a set of procedures or new program code that Supplier implements to correct Errors and which may include modifications to improve performance or a revised version or release of the Software which may incidentally improve its functionality, together with related Documentation.

1.49 Upgrade - a new version or release of computer programs licensed hereunder which Supplier makes generally available to its customers to improve the functionality of, or add functional capabilities to such computer programs, together with related Documentation. Upgrades shall include new programs which replace, or contain functionality similar to, the Software already licensed to Bank of America hereunder.

1.50 Warranty Period - the time period specified in each Product License Schedule commencing on the Acceptance Date of the applicable Software component as extended pursuant to the Section entitled Acceptance.

1.51 Work in Progress - all plans, systems designs, Documentation, working materials, specifications, flow charts source code, documented test results and other Work Product prepared by Supplier pursuant to this Agreement or during development of the Customizations.

1.52 Work Product all information, data. materials, discoveries, inventions, drawings, works of authorship, documents, documentation, models, software, computer programs, software (including source code and object code), firmware, designs, specifications, processes, procedures, techniques, algorithms, diagrams, methods, and all tangible embodiments of each of the foregoing (in whatever form and media) conceived, created, reduced to practice or prepared by or for Supplier at the request of Bank of America within the scope of services provided under this Agreement, whether or not prepared on Bank of America's premises and all Intellectual Property Rights therein.

  2.0 LICENSE

2.1 Supplier hereby grants Bank of America a nonexclusive, worldwide, irrevocable, perpetual license to install, use, execute and copy the Software described in each Product License Schedule as necessary to conduct Bank of America business in accordance with the terms and restrictions of this Section and any special terms and restrictions stated on the applicable Product License Schedule.    Proprietary to Bank of America  Page 4  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





2.2 In addition, Bank of America may, at no additional charge other than the Software license fees specified in each Product License Schedule, (i) install, use, execute and copy the Software for any backup, archival and emergency purposes and any internal, non-production Bank of America purpose including for test, development, and training; (ii) allow a third party outsourcer or service provider to install, use, execute and copy the Software solely in connection with its provision of services to Bank of America, provided that such use does not extend to providing services to others; and (iii) transfer the Software to any other Platform or Installation Site replacing that on which it was previously installed.

2.3 Bank of America may transfer the Software to other server operating systems or database platforms, whether or not in existence as of the effective date of this Agreement, but on which the Software is subsequently certified to operate, and Supplier shall provide Bank of America with any generally available versions of the Software, including required passwords or keys, that are reasonably necessary to accomplish such transfer, all at no additional charge.

2.4 Bank of America may for a reasonable period of time after the sale of a Affiliate of Bank of America or a division of Bank of America, provide to such divested entity, processing services and/or similar activities which are or become incidental to Bank of America's business, at no additional charge or fee. All restrictions set forth in this Agreement on Bank of America's use of the Software shall be deemed also to apply to any divested entity's use of the Software.

2.5 The license is subject to the following restrictions: (a) Title to and ownership of the Software (except the Bank of America Customizations) shall remain with Supplier or its licensors; (b) Bank of America shall not reverse engineer, reverse compile or disassemble any part of the Software without the prior written consent of Supplier: and (c) Bank of America shall not remove, obscure or deface any proprietary legend relating to the Software and shall include in each copy all proprietary notices contained in the Software.

2.6 The licenses set forth above shall include the right to install, use, execute and copy the Source Code for test and development purposes. to modify it, to compile it into Object Code and to prepare from it derivative works for internal use only. Bank of America must keep the Source Code at the Source Code Installation Site named in SCHEDULE A. Bank of America may transfer Source Code to an alternate source code installation site if Supplier is notified promptly after such relocation. Other copies may be made for backup and archival purposes and may be transferred to Bank of America's off-site backup storage and contingency operations sites only. Any additional charge for the Source Code Is specified in SCHEDULE A.

2.7 If Bank of America is not in default of its obligations under this Agreement or the General Services Agreement of even date between Supplier and Bank of America, then at Bank of America's request, Supplier shall deliver the then existing compiled and Source Code Software for the Cardlytics Software and any Improvements of thereto subject to the payment schedule to Supplier as outlined in Schedule A, Section B. Upon delivery, Bank of America will have all license right outlined in Section 2.7.1:

2.7.1 Supplier hereby grants Bank of America a nonexclusive, worldwide, irrevocable, perpetual license to: (a) any patents related to or necessary or desirable to use the Software to the extent such patents are now held, licensed to or hereafter acquired by Supplier, for the purpose of allowing Bank of America and its Affiliates and permitted assigns to install, copy, use, execute, modify, distribute (as necessary or useful for Bank of America and its Affiliates and permitted assigns to enjoy their rights as set forth in the Agreement), make, have made, enhance, improve and alter the Software (both in Object Code and Source Code form) as necessary to conduct Bank of America business in accordance with the terms and restrictions or this Section; (b) any Copyrights now held, licensed to or hereafter acquired by Supplier in the Software for the purpose of allowing Bank of America and its Affiliates an permitted assigns to install, copy, use, execute, modify, distribute (as necessary or useful for Bank of America and its Affiliates and permitted assigns to enjoy their fights as set forth In the Agreement, produce derivative works from and    Proprietary to Bank of America  Page 5  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







display such Software (both in Object Code and Source Code for ); any (c) other Intellectual Property Rights or Supplier in the Software as are necessary or useful for Bank of America, its Affiliates and permitted assigns to install, copy, use, execute, modify, distribute, enhance, improve and alter and copy the Software (both in Object Code and Source Code form) for the purpose of conducting Bank of America business in accordance with the terms and restrictions of this Section. Without limiting the foregoing, but subject to the restrictions set forth in Section 2.5 hereof, Bank of America may: (x) sublicense its rights granted herein to its third party contractors for the purpose of their performing services for Bank of America and its Affiliates (which services may include, without limitation, altering, modifying, enhancing and improving the Software and creating derivatives to the Software), provided that such third party contractors have entered into a written agreement containing commercially standard confidentiality provisions requiring them to maintain the Source Code to the Licensed Programs securely and in confidence (subject to commercially standard exceptions), prior to having access to the Source Code for the Software: (y) sublicense its rights in the Software excluding any rights in the Source Code, to its end user customers as necessary for Bank of America to provide services to such end user customers; and (z) host the Software on its systems (or allow a third party to host the Software on its behalf) and make the Software available for use by its end user customers through the internet or other similar means. Any derivative works of or alterations, enhancements, modifications, or improvements to the Software created by Bank of America, its Representatives and Affiliates or their third party contractors shall be owned, and be freely assignable, by Bank of America, and Supplier shall have no rights therein (subject to Supplier's ownership of the underlying software). Without limiting the foregoing, Bank of America may freely transfer such Software to any other Platform or Installation Site replacing that on which it was previously installed.

2.8 Supplier expressly acknowledges and agrees that the rights of Bank of America set forth in this Agreement shall inure to all Bank of America Affiliates, provided that Bank of America shall be responsible for the obligations of its Affiliates under this Agreement. Such Affiliates may execute Orders and purchase Licensed Programs hereunder.

2.9 No Shrink Wrap Licenses. Supplier and Bank of America agree that no so-called shrink wrap or click wrap license terms shall apply to any Licensed Programs licensed to Bank of America hereunder. In the event that licenses or versions of the Licensed Programs that are packaged with any such shrink wrap or click wrap license are delivered to Bank of America hereunder. the terms and conditions of this Agreement and the applicable Order shall apply and not the terms of the shrink wrap or click wrap license.

  3.0 RELATIONSHIP MANAGER

3.1 Each Party shall designate an employee Relationship Manager(s) to act on its behalf with regard to matters arising under this Agreement and shall notify the other Party in writing of the name of its Relationship Manager; however, the Relationship Manager shall have no authority to alter or amend any term, condition, or provision of this Agreement. Either Party may change its Relationship Manager(s) by providing the other Party prior written notice. The Relationship Manager must be identified in a writing delivered to the other Party at least one (1) week prior to the commencement of any work under this Agreement.

3.2 The Relationship Manager(s) shall meet via conference call with such frequency as Bank of America's Relationship Manager shall reasonably request. Bank of America may require meetings in person at a site designated by Bank of America.

3.3 Supplier shall provide the Bank of America Relationship Manager a Customization Status Report by the first and fifteenth day of each month until all Customizations are accepted.    Proprietary to Bank of America  Page 6  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





4.0 TERM

4.1 This Agreement shall apply and remain in effect from the Effective Date and perpetually thereafter unless terminated pursuant to the Section entitled Termination.

  5.0 TERMINATION

5.1 Bank of America may terminate this Agreement, an Order and/or any Customization Schedule(s) for its convenience, without cause, at any time without further charge or expense upon at least forty-five (45) calendar days prior written notice to Supplier. Termination of one Order shall not cause a termination of this Agreement or any other Order, unless otherwise specified by Bank of America.

5.2 In addition to any other remedies available to either Party, upon the occurrence of a Termination Event (as defined below) with respect to either Party, the other Party may immediately terminate this Agreement, the applicable Order or any Customization Schedule that is subject of the Termination Event by providing written notice of termination. A Termination Event shall have occurred if: (a) a Party materially breaches its obligations under this Agreement, an Order or any Customization Schedule under this Agreement and the breach is not cured within thirty (30) calendar days after written notice of the breach and intent to terminate is provided by the other Party; (b) a Party becomes insolvent (generally unable to pay its debts as they became due) or the subject of a bankruptcy, conservatorship, receivership or similar proceeding, or makes a general assignment for the benefit of its creditors; (c) Supplier either: (i) merges with another entity, (ii) suffers a transfer involving fifty (50%) percent or more of any class of its voting securities or (iii) transfers all, or substantially all, of its assets; (d) in providing services hereunder, Supplier violates any law or regulation governing the financial services Industry, or causes Bank of America to be in material violation of any law or regulation governing the financial services industry; (e) Bank of America has the right to terminate under the Section entitled Pricing/Fees; or (f) a Party attempts to assign this Agreement in breach of the Section entitled Non-Assignment. In the event of a Termination Event described in item (a) above with respect to an Order, only the applicable Order shall be subject to termination. Breach of one Order shall not constitute a default of any other Order, unless otherwise agreed in writing between the Parties.

5.3 In addition to the Termination Events above, if the Services Schedule A of the General Services Agreement of even date between the parties to this Agreement expires, does not renew or terminates for any reason within the initial term and the Parties have not reached agreement on the delivery of the Software herein, then Cardlytics may terminate this Software License, Customization and Maintenance Agreement, including without limitation the Term License, shall terminate at the same time.

5.4 The Parties agree that all Software delivered pursuant to this Agreement and the documentation therefore constitute intellectual property under Section 101(35A) of the Code (11 U.S.C. section 101(35A)). Supplier agrees that if it, as a debtor-in-possession, or if a trustee in bankruptcy for Supplier, in a case under the Code, rejects this Agreement, Bank of America may elect to retain its rights under this Agreement as provided in Section 365(n) of the Code. Bank of America, and any Intellectual Property Rights, licenses or assignments from Supplier of which Bank of America may have the benefit, shall receive the full protection granted to Bank of America by applicable bankruptcy law.

5.5 The licenses granted in this Agreement with respect to any Licensed Program shall not terminate for any reason unless Supplier terminates the applicable Product License Schedule pursuant to Section 5.2 after Bank of America fails to pay in full the undisputed portion of license fees payable with respect to such Licensed Program under such Product License Schedule.

5.6 In addition to the rights of Bank of America set forth in this Section, (a) If Bank of America terminates any Product License Schedule for material default by Supplier prior to the Acceptance Date of the Software, Bank of America shall be entitled to a full refund, within thirty (30) calendar days after notice of termination, of all license fees, Maintenance Fees and other fees paid    Proprietary to Bank of America  Page 7  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







hereunder; and (b) Bank of America may terminate Maintenance Services under any Product License Schedule or Order for convenience at any time, and Bank of America shall then have no obligation to pay any additional Maintenance Fees, other than for Maintenance Services performed through the date of termination. Bank of America may terminate the Maintenance Services under any Product License Schedule or Order for material default by Supplier, upon Bank of America's termination of such Maintenance Services for default, Bank of America shall be entitled to a pro rata refund of all prepaid Maintenance Fees for the period after the date of termination.

5.7 Supplier shall deliver all Work in Progress relating to Bank of America Customizations to Bank of America within five (5) calendar days after the effective date of termination under Sections 5.1, 5.2, and 5.3 above. All right, title and interest in such Work in Progress relating to Bank of America Customizations (including copyright) shall be deemed assigned to and vested in Bank of America.

5.8 In the event of expiration or termination of this Agreement, an Order or of Maintenance Services under this Agreement, Supplier agrees that upon the request of Bank of America, Supplier will, at no additional cost to Bank of America and through the period of paid up Maintenance Services, continue uninterrupted operations, conclude and cooperate with Bank of America in the transition of the business at Bank of America's direction and in a manner that causes no material disruption to Bank of America business and operations. The fees associated with such transition shall be in accordance with the fees in effect at the expiration or termination of this Agreement. In no event shall the transition exceed one hundred eighty [180] calendar days from the date of termination unless the Parties otherwise agree in writing. For the avoidance of doubt, Bank of America agrees to pay Supplier all undisputed fees for Maintenance Services rendered up to the date of termination or expiration pursuant to the related terms hereunder. Reimbursement of all extraordinary costs and expenses incurred outside of the Agreement terms and conditions will be agreed upon by Supplier and Bank of America in writing prior to their incurrence.

5.9 The rights and obligations of the Parties which by their nature must survive termination or expiration of this Agreement in order to achieve its fundamental purposes including, without limitation, the provisions of the following Sections, AUDIT, CONFIDENTIALITY AND INFORMATION PROTECTION, INDEMNITY, LICENSE,'' LIMITATION OF LIABILITY. MEDIATION/ARBITRATION, OWNERSHIP OF WORK PRODUCT and MISCELLANEOUS shall survive in perpetuity any termination of this Agreement.

  6.0 ORDERING, DELIVERY AND INSTALLATION

6.1 To order Product(s), Bank of America or any of its Affiliates shall Issue Supplier an Order or other written authorization delivered in hard copy, via facsimile or other form of electronic communication referring to this Agreement. Bank of America shall not be obligated to pay for Product in the absence of such an Order. Supplier shall not deliver software not licensed to Bank of America.

6.2 Supplier shall, at Bank of America's election, either (i) electronically deliver the Software and Documentation to Bank of America premises from a remote location via electronic transmission, such as over telecommunications networks (e.g., file transfer protocol), by granting Bank of America downloading access through a secured web site, without Bank of America receiving or retaining possession of the Software and Documentation in the form of tangible personal property, such as tapes, disks or printed materials (Electronic Delivery), or (ii) deliver to and install the Software and Documentation at a Bank of America facility and depart the facility with all storage devices and resources used to deliver and install the Software and Documentation (Load and Leave). If the Software and Documentation are received through Electronic Delivery or through a Load and Leave exchange, no tangible personal property will transfer to or come into the possession of Bank of America from Supplier in fulfillment of Bank of America's entitlements to the Software and Documentation. Shipment and delivery of the Software shall be deemed    Proprietary to Bank of America  Page 8  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







complete upon Supplier transmitting the Software to Bank of America or Supplier making it accessible by Bank of America for downloading, whichever Is applicable. Any other delivery method shall be by exception only and shall be clearly documented in the applicable Product License Schedule. If there is not a preference to delivery in such Product License Schedule, then ii is assumed that all Software and all Updates are by Electronic Delivery or by Load and Leave delivery to Bank of America.

6.3 Supplier shall be responsible for and shall bear any and all risk of loss or disclosure of, or damage to, Software until delivery to the Installation Site.

6.4 After delivery of Software, Bank of America shall attempt diligently to install it on the Platform using adequate numbers of technically skilled personnel, and shall notify Supplier promptly after the Software has been properly installed. Alternatively, Bank of America may request Supplier in writing to install the Software at the Time and Material Rates, unless otherwise expressly agreed in an Order.

6.5 Supplier shall provide at, no additional charge, installation Documentation and reasonable telephonic off site consultation and assistance as necessary for Bank of America to install the Software, together with the installation support, if any, described in an Order.

  7.0 CUSTOMIZATIONS

7.1 Supplier shall provide Bank of America, within twenty-one (21) calendar days after receipt of the Bank of America's request setting forth the relevant requirements, with a written estimate of the cost of the Customizations. Bank of America may direct Supplier to provide such written estimate on a time and materials basis or a fixed price basis, and Supplier shall comply with such direction. Supplier's response shall set forth the Delivery Target Date for such Customizations.

7.2 Bank of America may submit to Supplier an Order or other written authorization for Customizations, stating Bank of America's preferred Delivery Target Date for Customizations and the terms for the Customizations, as proposed by Supplier pursuant to the preceding paragraph. Unless Supplier notifies Bank of America of its rejection of Bank of America's written order within five (5) Business Days after its receipt, it shall be deemed accepted. Bank of America shall not be obligated to pay for Customizations or time and materials supplied in the absence of an Order or written authorization. The parties shall execute a Customization Schedule for each Customization.

7.3 Bank of America and Supplier shall agree in writing on the functional, technical and performance specifications of any Customizations. The specifications for each customization shall be described in a Customization Schedule. Such specifications shall be subject to the Section entitled Acceptance and Supplier shall make such reasonable changes to the specifications or such preliminary documents as Bank of America may request. In accordance with Section 7.4, if applicable, at Bank of America's written request, accompanied by an Order or other written authorization. Supplier shall prepare functional. technical and performance specifications for Customizations prior to undertaking Customizations. Supplier shall deliver to Bank of America the Source Code and Object Code for Bank of America Customizations.

  7.4 Change Orders;



A. If Bank of America requests a material change in the Customization specifications prior to acceptance of the Customizations, Supplier shall prepare revised specifications within fifteen (15) calendar days reflecting the price effect of Bank of America's request. Bank of America shall accept or reject Supplier's proposal within fifteen (15) calendar days after receipt thereof. The Parties shall make any appropriate amendment to the Customization Schedule.    Proprietary to Bank of America  Page 9  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







B. Unless otherwise directed by Bank of America, Supplier shall continue to develop the Customizations using the Customization specifications in effect at the time Bank of America requests the change. Supplier may amend Customization specifications at no charge at its option, provided that Supplier shall obtain Bank of America's written consent to such amendment. At Supplier's option, Supplier may use the Change Order form to obtain Bank of America's consent.

7.5 Supplier shall provide Bank of America sufficient access to the development site and Supplier personnel so that Bank of America may have a reasonable opportunity to evaluate the status of any Customizations. Suppler shall notify Bank of America of, and Bank of America may at its request participate in, alpha, beta and quality assurance tests for the Customizations.

7.6 Commencing upon the Customization Delivery Date, Bank of America shall perform acceptance tests on the Customizations, following the procedure set forth in the Section entitled Acceptance. If Bank of America rejects Customizations in accordance with the procedure set forth in the Section entitled Acceptance, Bank of America has no further obligation to pay Supplier for them and shall receive a full refund of all amounts previously paid for that Customization.

7.7 Marketing Restrictions. Unless specified in the applicable customization Schedule or otherwise agreed, all Customizations shall be deemed Bank of America Customizations. Bank of America shall own all right, title, and interest in and to the Bank of America Customizations as Work Product in accordance with Section 39.0. Supplier shall not provide a Bank of America Customization to any third party. In the event that any Bank of America Customization is furnished or plan, design or specification for producing the same has been specifically designed, developed or modified for or by Bank of America, then no such Bank of America Customization, plan, design or specification shall be duplicated or furnished to others by Supplier without the prior written consent of Bank of America.

  8.0 SOURCE CODE CUSTODY

8.1 The provisions of this Section shall apply only to the Source Code for the Licensed Programs. The Source Code for the Bank of America Customizations may be use by Bank of America without any of the restrictions set forth in this Section.

8.2 With each delivery of Software to Bank of America hereunder, Supplier shall deliver to Bank of America the Source Code for all Software and for all Updates, Upgrades and new releases of the Software. Until a Release Condition (as defined in Section 8.6) occurs and the conditions of Section 8.7 have been satisfied, Bank of America shall not permit access to or use of the Source Code, except as expressly provided herein.

8.3 Bank of America shall establish a secure receptacle in which it shall place the Source Code and shall put the receptacle under supervision of one or more of its officers, whose identity shall be available to Supplier at all times. Bank of America shall exercise the degree of care in carrying out its obligations hereunder that Bank of America then exercises with respect to Bank of America proprietary data of a similar nature, but not less than reasonable care. Bank of America acknowledges that the Source Code is proprietary data, and Bank of America shall have an obligation to preserve and protect the confidentiality of the Source Code.

8.4 Supplier grants Bank of America the right to duplicate the Source Code only as necessary to preserve and safely store the Source Code and as expressly permitted in this Section. Bank of America shall reproduce in all copies of the Source Code made by Bank of America any proprietary or confidentiality notices contained in the Source Code when originally delivered by Supplier.    Proprietary to Bank of America  Page 10  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





8.5 Upon delivery of the Source Code to Bank of America by Supplier, including in connection with any Upgrade, Update or new release, Bank of America shall have the right to verify the Source Code for accuracy, completeness and sufficiency, and to confirm that it compiles to the pertinent object code of the Software. Bank of America shall notify Supplier of the dates on which any such verification will be conducted, and the results thereof. Bank of America may temporarily release the Source Code for this purpose only, but all copies of the Source Code shall be returned to the designated storage location as soon as the verification is completed. Supplier may elect to observe the verification process at its own expense.

8.6 Any or the following events shall be Release Conditions for purposes of this Section: (a) Supplier defaults on any of its maintenance obligations herein; (b) Supplier ceases to provide maintenance for the Software; (c) Supplier ceases doing business in the ordinary course, files or has filed against it a petition under bankruptcy Code, becomes insolvent or has a receiver appointed for all or a substantial part of its business; or (d) Bank of America terminates this Agreement for cause pursuant to the terms hereof.

8.7 If a Release Condition has occurred, Bank of America may immediately release the Source Code for the purposes described in Section 8.8, following the issuance of a written statement to Supplier by Bank of America's executive management, stating that a Release Condition has occurred.

8.8 Supplier hereby grants to Bank of America a nonexclusive, fully paid, irrevocable, royalty-free, world-wide license to use, modify, copy, produce derivative works from, display, disclose to persons who have entered into a written agreement containing substantially the same confidentiality provisions as in this Agreement for the purpose of maintaining the Software for Bank of America, and otherwise to utilize the Software and the Source Code and other materials necessary to maintain and improve the Software for use by Bank of America, subject always to the limitations In this Agreement on reproduction and use of the Software.

  9.0 DOCUMENTATION

9.1 At no additional charge and in accordance with the delivery method specified in each Product License Schedule, Supplier shall deliver a complete set of Documentation for the Software at the same time as the Software is delivered and for every Customization and Upgrade delivered to Bank of America. The Documentation shall describe fully the proper procedure for using the Software and provide sufficient information to enable Bank of America to operate all features and functionality of the Software on the Platform. Supplier shall deliver reasonable Documentation to allow Bank of America to install and use each Update. Except as otherwise provided in Section 39.0, Ownership of Work Product, Bank of America may use and reproduce for internal purposes all Documentation furnished by Supplier, including displaying the Documentation on Bank of America's intranet or other internal electronic distribution system, in part or in whole. Documentation for Customizations, Updates and Upgrades shall meet or exceed the level of quality, form and completeness of the Documentation for the Licensed Programs.

9.2 Supplier shall, in accordance with the delivery method specified in each Product License Schedule, deliver updated Documentation to Bank of America concurrently with delivery of any Upgrades or Customizations or any other occasion of issuance of updated Documentation.

  10.0 ACCEPTANCE

10.1 During the Acceptance Period, Bank of America shall perform whatever acceptance tests on the Software it may wish to confirm that the Software is Operative. If Bank of America discovers during the Acceptance Period that any Software is not Operative, Bank of America shall notify Supplier of the deficiencies. Supplier, at its own expense, shall modify, repair, adjust or replace the Software to make it Operative within fifteen (15) calendar days after the date of Bank of America's deficiency notice. Bank of America may perform additional acceptance tests during a    Proprietary to Bank of America  Page 11  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







period commencing when Supplier has delivered revised Software correcting all the deficiencies Bank of America has noted. This restarted Acceptance Period shall have a duration equal to that of the initial Acceptance Period, unless Bank of America earlier accepts the Software in writing. If the Software, at the end of the Acceptance Period as so extended, still is not Operative in Bank of America's judgment after consultation with Supplier, Bank of America may reject the Software and terminate this Agreement for material breach or, at its option, repeat the procedure of this paragraph as often as it determines is necessary. If Bank of America does not notify Supplier of acceptance or rejection of the Software, it shall be deemed accepted at the end of the Acceptance Period extended pursuant to this paragraph. If not previously accepted, the Software shall also be deemed accepted upon the Production Installation Date.

10.2 Bank of America shall use the procedure in this Section to determine acceptance of Customizations and Upgrades. If Bank of America finds an Upgrade not to be Operative and rejects it, Bank of America shall have no obligation to pay for such Upgrade if Supplier provided the Upgrade to Bank of America for an additional charge above Maintenance Services, and Supplier shall continue to support the version or release of the Software that Bank of America has installed.

  11.0 MAINTENANCE SERVICES

11.1 Supplier shall provide the Maintenance Services attached hereto as SCHEDULE D.

  12.0 UPGRADES

12.1 Supplier shall offer Upgrades to Bank of America whenever Supplier makes Upgrades generally available to its other customers. Unless otherwise agreed to in a Product License Schedule, Supplier shall deliver by Electronic Delivery or by Load and Leave delivery each Upgrade to Bank of America at no additional charge as part of Maintenance Services.

12.2 Supplier shall notify Bank of America as far in advance as reasonably possible, but in no event less than six (6) months prior to release, of all Upgrades and Software replacements/ phase-outs, and shall provide Bank of America all relevant release notes and other Documentation as soon as possible after notification.

12.3 Supplier shall continue to provide Maintenance Services on the terms and conditions of this Agreement for the version of Software Bank of America has installed for at least twenty-four (24) months after Supplier makes an Upgrade generally available to its customers.

  13.0 NON-MAINTENANCE SERVICES SUPPORT

13.1 If Supplier agrees to perform non-Maintenance Services support services at Bank of America's request in connection with the implementation of the Software, such services shall be performed in a workmanlike and professional manner by qualified personnel at the Time and Materials Rates set forth in SCHEDULE A.

  14.0 TRAINING

14.1 Supplier shall provide, at the rates and fees specified in an Order, if any, the training classes called for in an Order in use, operation and maintenance of the Software for Bank of America personnel on Bank of America premises on dates to be specified by Bank of America. Supplier shall provide training Documentation for each attendee at any classes Supplier conducts. Prices for additional classes, if any, shall be specified in an Order. If Supplier agrees to allow Bank of America to train Bank of America personnel, Supplier shall provide Bank of America, at the rates and fees specified in an Order, if any, all trainer/class leadership materials Supplier has available or used in connection with the classes conducted for Bank of America. Bank of America may duplicate these materials for Bank of America's use exclusively and use them to conduct other classes at Bank of America's convenience.    Proprietary to Bank of America  Page 12  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





15.0 PRICING/FEES

15.1 Software license fees, Maintenance Fees and the method of payment shall be set forth in each Order or the applicable Order. Fees for additional services not listed on an Order shall be as mutually agreed in writing between Bank of America and Supplier prior to performance.

15.2 If the Order is for Customizations, fees and the method of payment are set forth in the applicable Customization Schedule.

15.3 Fees for services, other than Maintenance Services listed in SCHEDULE A, B and D or an Order are subject to the standard of measurement or evaluation applicable to the commercial production and sale of similar Products and services provided by Supplier under this Agreement (Industry Benchmarking) at any time at Bank of America's option, and may be reduced based on the results. Bank of America shall give notice to Supplier of any proposed fee reduction including the effective date of such fee reduction. Supplier shall notify Bank of America of its acceptance or rejection of the proposed fee reduction within fifteen (15) calendar days of Supplier's receipt of notice. If Supplier does not give notice to Bank of America, such fee reduction shall be deemed accepted and invoices shall be adjusted accordingly. If Supplier rejects a proposed fee reduction, Bank of America may terminate the services engagement with no further liability.

  16.0 INVOICES TAXES/PAYMENT

16.1 Supplier shall submit invoices, in accordance with the timeframes specified in SCHEDULE A, to the address set forth in SCHEDULE A or the applicable Order. Bank of America requires Suppliers to accept payment through electronic media in one of the following agreed upon methods; credit card using the Bank of America ePayables process, ACH, or electronic check. In the event that the agreed upon method of payment is through the Bank of America ePayables process using purchase cards, the Supplier shall, at no additional cost to Bank of America, ensure Supplier has the capability to process purchasing cards, prior to submitting invoices to Bank of America. Supplier shall electronically invoice Bank of America using the Bank of America designated e-Procurement tool. Each invoice shall specify the amount for each item on the invoice and include the following: (i) the slate where Supplier will electronically deliver the Software and Documentation to Bank of America, (ii) the method of electronic delivery, (iii) the state where services are to be performed, (iv) the Agreement reference number as Indicated on the signature page of this Agreement), and (v) the Order number if applicable.

16.2 The items listed on Supplier's invoice must appear in the same sequence as listed on the Order.

16.3 Invoices that omit the state of Electronic Delivery. the method of Electronic Delivery, the state where services are to be performed, the Agreement reference number and Order number of applicable, or that fail to list Products and services separately, or that are incorrect, incomplete or list Products or services that were not requested in writing by Bank of America will not be paid. The Relationship Manager for Bank of America will contact the Supplier Relationship Manager to address the situation informally prior to initiating the dispute resolution process under this Agreement.

16.4 Bank of America shall pay Supplier for all services and applicable taxes invoiced In arrears in accordance with the terms of this Agreement, within sixty (60) calendar days of the date of receipt of a valid and correct invoice by Bank of America. Bank of America reserves the right to pay prior to the expiration of the sixty (60) day period. If Bank of America pays within thirty (30) calendar days of receipt of a valid invoice by Bank of America, a discount of two percent (2%) will be subtracted from the total invoice amount for Services.    Proprietary to Bank of America  Page 13  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





16.5 Unless otherwise agreed upon by Bank of America, (i) all charges for Maintenance Services shall be invoiced in accordance. with the terms specified in the applicable Order, (ii) charges for Software shall be invoiced on the Acceptance Date, and (iii) all other charges shall be invoiced when incurred. Invoices shall contain such detail as Bank of America may reasonably require from time to time. Amounts not invoiced by Supplier to Bank of America within three (3) months after such amounts could first be invoiced under this Agreement may not thereafter be invoiced, and Bank of America shall not be required to pay such amounts.

16.6 Invoices shall include and list all applicable sales, use, or excise taxes that are a statutory obligation of Bank of America as separate line items identifying each separate tax category and taxing authority. Bank of America will reimburse Supplier for all sales, use or excise taxes levied on amounts payable by Bank of America to Supplier pursuant to this Agreement, however, Bank of America shall not be responsible for remittance of such taxes to applicable tax authorities.

16.7 Bank of America shall not be responsible for any ad valorem, income, gross receipts, franchise, privilege, value added or occupational taxes of Supplier. Bank of America and Supplier shall each bear sole responsibility for all taxes, assessments and other real or personal property- related levies on its owned or leased real or personal property.

16.8 Supplier shall be responsible for the payment of all taxes, interest and penalties related to any assessment by a taxing authority as contemplated by Section 16.6 to the extent that Supplier fails to accurately and timely invoice Bank of America for such taxes and remit such taxes directly to the applicable taxing authority. In the event that a taxing authority performs a sample and projection audit on Bank of America, then Supplier shall be responsible for the payment of all projected tax amounts including all interest and penalties on any projected taxes assessed resulting from taxing errors identified by such taxing authority on Supplier's Invoices, provided however, that Supplier shall receive timely notice that such invoice is included In a tax authority's audit and Supplier has the right to produce documentation to support that the tax was satisfied. In the event Supplier voluntarily registers to collect sales tax at some future date, and wishes to remit historical taxes Supplier deems due, Bank of America will only be responsible for the taxes due for the time period that Bank of America is statutorily obligated to the tax authorities in each state.

16.9 Supplier shall fully cooperate with Bank of America's efforts to identify taxable and nontaxable portions of amounts payable pursuant to this Agreement (including segregation of such portions on invoices) and to obtain refunds of taxes paid, where appropriate. Bank of America may furnish Supplier with certificates or other evidence supporting applicable exemptions from sales, use or excise taxation. If Bank of America pays or reimburses Supplier under this Section, Supplier hereby assigns and transfers to Bank of America all of its right, title and interest in and to any refund for taxes paid. Any claim for refund of taxes against the assessing authority may be made in the name of Bank of America or Supplier, or both, at Bank of America's option. Bank of America may initiate and manage litigation brought in the name of Bank of America or Supplier, or both, to obtain refunds of amounts paid under this Section. Supplier shalt cooperate fully with Bank of America in pursuing any refund claims, including any related litigation or administrative procedures.

16.10 Supplier shall keep and maintain complete and accurate accounting Records in accordance with generally accepted accounting principles consistently applied to support and document all amounts becoming payable to Supplier hereunder. Upon request from Bank of America, Supplier shall provide to Bank of America (or a Representative designated by Bank of America) access to such Records for the purpose of auditing such Records during normal business hours. Supplier shall retain all Records required under this Section in accordance with the Section entitled Audit of this Agreement, after the amounts documented In such Records become due. Supplier shall    Proprietary to Bank of America  Page 14  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







cooperate fully with Bank of America and any taxing authority involving any audit of sales, use or excise taxes. Upon request from Bank of America, Supplier will provide copies of invoices in electronic form that have been selected for review by any taxing authority, together with documents supporting the identification of taxable and nontaxable portions of amounts reflected on such invoices as contemplated by Section 16.9..

  17.0 EXPORT LAWS

17.1 Export of Software. To the extent the Software contains any cryptographic functionality that would subject it to the provisions of the United States Export Administration Regulations (the EAR), Supplier hereby represents and warrants that: (a) the Export Control Classification Number (ECCN) for such Software is set forth on the applicable Product License Schedule; and (b) Supplier has obtained all necessary licenses, if any, and submitted all necessary prior notifications and review requests (without receipt of any objection) to the Bureau of Industry and Security (BIS'') and the National Security Agency (the NSA), which are required to be made under the EAR in order for Bank of America to be able to use such Software as contemplated hereunder and in accordance with (and subject to) the provisions of the Agreement and the applicable Product License Schedule, outside of the United States, subject to the following: (i) Bank of America may not export such Software to any countries (or the nationals thereof) in Country Group E:1 on Supplement No. 1 to Part 740 of the EAR (as such provision may be hereafter amended); (ii) Bank of America may not export such Software in violation of any prohibitions of EAR Parts 744 and 746 (as such provisions may be amended from time to time); and (iii) Bank of America may have obligations to make periodic reports to BIS and/or the NSA (unless such exports are made to Bank of America Affiliates which are classified as U.S. Subsidiaries under Part 772 of the EAR), and to the extent such reports are required, Supplier has provided, or will provide, a brief summary of such requirements, as given to the best of its knowledge, on the applicable Product License Schedule. Supplier will hereafter communicate to Bank of America any additional laws and regulations relevant to Bank of America's export, reexport, sale or other disposition of Product pursuant to this Agreement

  18.0 MUTUAL REPRESENTATIONS AND WARRANTIES

18.1 Each Party represents and warrants the following: (a) the Party's execution, delivery and performance of this Agreement (i) have been authorized by all necessary corporate action, (ii) do not violate the terms of any law, regulation, or court order to which such Party is subject or the terms of any material agreement to which the Party or any of its assets may be subject and (iii) are not subject to the consent or approval of any third party; (b) this Agreement is the valid and binding obligation of the representing Party, enforceable against such Party in accordance with its terms; and (c) such Party is not subject to any pending or threatened litigation or governmental action which could interfere with such Party's performance of its obligations hereunder.

  19.0 REPRESENTATIONS AND WARRANTIES OF SUPPLIER

19.1 In rendering its obligations under this Agreement, without limiting other applicable performance warranties, Supplier represents and warrants to Bank of America as follows: (a) Supplier is in good standing in the state of its incorporation and is qualified to do business as a foreign corporation in each of the other states in which it is providing Products or services hereunder; (b) Supplier shall secure or has secured all permits, licenses, regulatory approvals and registrations required to deliver Products or render services set forth herein, including without limitation, registration with the appropriate taxing authorities for remittance of taxes; and (c) Supplier shall, and shall be responsible for ensuring that Supplier's Representatives and Subcontractors shall, perform all obligations of Supplier under this Agreement in compliance with all laws, rules, regulations and other legal requirements.    Proprietary to Bank of America  Page 15  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





19.2 Supplier represents and warrants that it shall perform the Maintenance Services in a timely and professional manner using competent personnel having expertise suitable to their assignments. Supplier represents and warrants that the services shall conform to or exceed, in all material respects, the specifications described herein, as well as the standards generally observed in the industry for similar services. Supplier represents and warrants that neither performance nor functionality of the services, Products or systems is or will be affected by dates prior to, during and after the year 2000. Supplier represents and warrants that services supplied hereunder shall be reasonably free of defects in workmanship, design and material. Supplier represents and warrants that sale, licensing or use of any Product, Work Product and service furnished under this Agreement, including but not limited to Software, system design, equipment or Documentation, do not and shall not infringe, misappropriate or otherwise violate any Intellectual Property Rights or any other rights of any third party.

19.3 As of the Effective Date, there are no actions, suits or proceedings pending, or to the knowledge of Supplier threatened, against Supplier, Supplier's Representatives and Subcontractors alleging infringement, misappropriation or other violation of any Intellectual Property Rights related to any product, Work Product or Service contemplated by this Agreement.

19.4 Supplier warrants that it shall develop any Customizations in a professional workmanlike manner, using qualified personnel familiar with the Software and its operation.

19.5 Supplier hereby represents and warrants that the Software shall be and shall remain Operative, from the Delivery Date through the end of the Warranty Period. Following expiration of the Warranty Period and for so long as Bank of America has contracted Supplier to provide Maintenance Services, Supplier represents and warrants that the Software shall remain Operative. If the Software is not Operative at the expiration of the initial Warranty Period, the Warranty Period shall be extended until Supplier makes the Software Operative. This warranty shall not be affected by Bank of America's modification of the Software so long as Supplier can discharge its warranty obligations notwithstanding such modifications or following their removal by Bank of America.

19.6 Supplier warrants that during the term of this Agreement, Bank of America may use Product without disturbance, subject only to Bank of America's obligations to make the payments required by this Agreement. Supplier represents that this Agreement, the Products and the Intellectual Property Rights in the Products are not subject or subordinate to any right of Supplier's creditors, or if such subordination exists, the agreement or instrument creating it provides for non-disturbance of Bank of America.

19.7 Supplier represents and warrants that it is familiar with all applicable domestic and foreign antibribery or anticorruption laws, including those prohibiting Supplier, and, if applicable, its officers, employees, agents and others working on its behalf, from taking corrupt actions in furtherance of an offer, payment, promise to pay or authorization of the payment of anything of value, including but not limited to cash, checks, wire transfers, tangible and Intangible gifts, favors, services, and those entertainment and travel expenses that go beyond what is reasonable and customary and of modest value, to: (i) an executive, official, employee or agent of a governmental department, agency or instrumentality, (ii) a director, officer, employee or agent of a wholly or partially government-owned or -controlled company or business, (iii) a political party or official thereof, or candidate for political office, or (iv) an executive, official, employee or agent of a public international organization (e.g., the International Monetary Fund or the World Bank) (Government Official'); while knowing or having a reasonable belief that all or some portion will be used for the purpose of: (a) influencing any act, decision or failure to act by a Government Official In his or her official capacity, (b) inducing a Government Official to use his or her influence with a government or instrumentality to affect any act or decision of such government or entity, or (c) securing an Improper advantage; in order to obtain, retain, or direct business.

19.8 Supplier represents and warrants that it would now be in compliance with all applicable domestic or foreign antibribery or anticorruption laws, including those prohibiting the bribery of Government Officials, and will remain in compliance with all applicable laws; that it will not authorize, offer or    Proprietary to Bank of America  Page 16  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





 make payments directly or indirectly to any Government Official; and that no part of the payments received by it from Bank of America willbe used for any purpose that could constitute a violation of any applicable laws.

19.9 THE WARRANTIES CONTAINED IN THIS AGREEMENT ARE IN LIEU OF ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THOSE OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

  20.0 DELETION OF FUNCTIONS

20.1 In the event that Supplier deletes functions from the Software and transfers or offers those functions in other or new products (whether directly or Indirectly or through an agreement with a third party), the portion of those other or new products that contain the functions in question, or the entire product, if the functions cannot be separated out, shall be provided to Bank of America under the terms of this Agreement, at no additional charge and shall be covered under Maintenance Services for such Software.

  21.0 DISABLEMENT OF SOFTWARE AND HARDWARE

21.1 Except during and in conjunction with maintenance or any other authorized servicing or support, in no event shall Supplier, its Representatives or Subcontractors or anyone acting on its behalf, disable (or permit or cause any embedded mechanism to disable) the Software or hardware owned or utilized by Bank of America without the prior written permission of an officer of Bank of America. Disablement shall also apply to all instances of Software installed, used, and executed in support of disaster recovery activities or the non-emergency tests of such activities.

  22.0 FINANCIAL RESPONSIBILITY

22.1 Upon Bank of America's request, Supplier shall promptly furnish its financial statements as prepared by or for Supplier in the ordinary course of its business. If Supplier is subject to laws and regulations of the U.S. Securities & Exchange Commission (SEC), the financial reporting and notification requirements contained herein shall be limited to all information that can be provided and in accordance with timelines which are legally permitted. Financial information provided hereunder shall be used by Bank of America solely for the purpose of determining Supplier's ability to perform its obligations under this Agreement. To the extent any such financial information ls not otherwise publicly available, it shall be deemed Confidential Information (as defined in Section 27.1) of Supplier. If Bank of America's review of financial statements causes Bank of America to question Supplier's ability to perform its duties hereunder, Bank of America may request, and Supplier shall provide to Bank of America, reasonable assurances of Supplier's ability to perform its duties hereunder. Failure by Supplier to provide such reasonable assurances to Bank of America shall be deemed a material breach of this Agreement. Furthermore, Supplier shall notify Bank of America immediately In the event there is a change of control or material adverse change in Supplier's business or financial condition.

  23.0 BUSINESS CONTINUITY

23.1 Supplier agrees to establish, maintain and implement per the terms thereof, a Business Continuity Plan. The Business Continuity Plan must be in place and delivered to Bank of America within forty-five (45) calendar days after the Effective Date of this Agreement. The Business Continuity Plan shall be delivered annually thereafter and shall include, but not be limited to, the items called for in SCHEDULE G entitled Recovery, as applicable. If Bank of America objects in writing to any provision of such plans and controls, Supplier shall respond in writing within thirty (30) calendar days, explaining, among other matters Supplier wishes to include in its response, the actions Supplier intends to take to cure Bank of America's objection.    Proprietary to Bank of America  Page 17  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





24.0 RELATIONSHIP OF THE PARTIES

24.1 The Parties are independent contractors. Nothing in this Agreement or in the activities contemplated by the Parties hereunder shall be deemed to create an agency, partnership, employment or joint venture relationship between the Parties or any of their Subcontractors or Representatives.

  25.0 SUPPLIER PERSONNEL

25.1 Bank of America shall provide Supplier, if necessary and at a mutually agreed upon time, reasonable access to Bank of America to provide its services, subject to the existing security regulations at Bank of America.

25.2 Supplier's personnel are not eligible to participate in any of the employee benefit or similar programs of Bank of America. Supplier shall inform all of its personnel providing services pursuant to this Agreement that they will not be considered employees of Bank of America for any purpose, and that Bank of America shall not be liable to any of them as an employer for any claims or causes of action arising out of or relating to their assignment.

25.3 Upon the request of Bank of America, Supplier shall immediately remove any of Supplier's Representatives or Subcontractors performing services under this Agreement and replace such Representative or Subcontractor as soon as practicable. Upon the request of Bank of America, Supplier shall promptly, and after consultation with Bank of America, address any concerns or issues raised by Bank of America regarding any of Supplier's Representatives or Subcontractors performing services under this Agreement which may include, as appropriate, replacing such Representative or Subcontractor from the Bank of America account.

25.4 The engagement of a Subcontractor by Supplier shall be subject to Bank of America's prior written consent, which shall not be unreasonably withheld, and shall not relieve Supplier of any of its obligations under this Agreement. Supplier shall be responsible for the performance or nonperformance of its Subcontractors as if such performance or nonperformance were that of Supplier. Supplier shall require all Subcontractors, as a condition to their engagement, to agree to be bound by provisions substantially the same as those included in this Agreement particularly the Sections entitled Supplier Personnel, Insurance, Confidentiality and Information Protection, Audit and Business Continuity.

25.5 Supplier shall comply and shall cause its Representatives and Subcontractors to comply with all personnel, facility, safety and security policies, rules and regulations and other instructions of Bank of America, when performing work at a Bank of America facility or accessing any Bank of America systems or data, and shall conduct its work at Bank of America facilities or on Bank of America systems in such a manner as to avoid endangering the safety, or interfering with the convenience of, Bank of America Representatives or customers. Supplier understands that Bank of America operates under various laws and regulations that are unique to the security-sensitive banking industry. As such, persons engaged by Supplier to provide services under this Agreement are held to a higher standard of conduct and scrutiny than in other industries or business enterprises. Supplier agrees that its Representatives and Subcontractors providing services hereunder shall possess appropriate character, disposition and honesty. Supplier shall, to the extent permitted by law, exercise reasonable and prudent efforts to comply with the security provisions of this Agreement.

25.6 Supplier shall not knowingly permit a Representative or Subcontractor to have access to the Confidential Information, premises, records or data of Bank of America when such Representative or Subcontractor: (a) has been convicted of a crime or has agreed to or entered into a pretrial diversion or similar program in connection with: (i) a dishonest act or a breach of trust, as set forth in Section 19 of the Federal Deposit Insurance Act, 12 U.S.C. 1829(a); or (ii) a felony: or (b) uses illegal drugs. Notwithstanding anything in this Agreement to the contrary,    Proprietary to Bank of America  Page 18  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







Supplier shall conduct at its expense background checks on its employees and those of its Subcontractors who will have access (whether physical, remote, or otherwise and whether on or off Bank of America premises) to Bank of America facilities, equipment, systems or data and such background checks shall comply with Bank of America procedures and requirements as set forth in SCHEDULE F to this Agreement and updated in writing delivered to Supplier from time to time. Supplier shall report to Bank of America on background checks done, in accordance with the requirements of SCHEDULE F and prior to such employee being granted such access.

25.7 Supplier represents that it maintains comprehensive hiring policies and procedures which include, among other things, a background check for criminal convictions, and if requested by Bank of America, drug testing, all to the extent permitted by law. Supplier further represents that through its hiring policies and procedures including background checks, it endeavors to hire the best candidates with appropriate character, disposition, and honesty. In the event that supplier employs non-U.S. citizens to provide services hereunder, Supplier shall ensure that all such persons have and maintain appropriate visas to enable them to provide the services.

25.8 Bank or America shall notify Supplier of any act of dishonesty or breach of trust committed against Bank of America. which may involve a Supplier Representative, or Subcontractor of which Bank of America becomes aware, and Supplier shall notify Bank of America if it becomes aware of any such offense. Following such notice, at the request of Bank of America and to the extent permitted by law, Supplier shall cooperate with investigations conducted by or on behalf of Bank of America.

  26.0 INSURANCE

26.1 Supplier shall at its own expense secure and continuously maintain, and shall require its Subcontractors to secure and continuously maintain, throughout the Term, the following insurance with companies qualified to do business in the jurisdiction in which the services will be performed and rating A-VII or better in the current Best's Insurance Reports published by A M. Best Company and shall, upon Bank of America's request, be furnished to Bank of America certificates and required endorsements evidencing such insurance. Bank of America shall be named as an ''Additional Insured to the coverages described in Sections 26.2.3, 26.2.4, and 26.2.5 below for the purpose of protecting Bank of America from any expense and/or liability arising out of, alleged to arise out of, related to or connected with the Products provided by Supplier and/or its Subcontractors. The certificates shall state the amount of all deductibles and self-insured retentions and shall contain evidence that the policy or policies shall not be canceled or materially altered without at least thirty (30) calendar days prior written notice to Bank of America. Supplier and its Subcontractors shalt pay any and all costs which are incurred by Bank of America as a result of any such deductibles or self-insured retentions to the extent that Bank of America is named as an Additional Insured, and to the same extent as if the policies contained no deductibles or self-insured retention. The insurance coverages and limits required to be maintained by Supplier and its Subcontractors shall be primary and non-contributory to insurance coverage, if any, maintained by Bank of America. Supplier and Proprietary to Bank of America its Subcontractors and their underwriters shall waive subrogation against Bank of America and shall cause their insurer(s) to waive subrogation against Bank of America.

26.2 Insurance Coverages

26.2.1 Worker's Compensation Insurance which shall fully comply with the statutory requirements of all applicable state and federal laws.

26.2.2 Employers' Liability Insurance which limit shall be $1,000,000 per accident for Bodily injury and $1,000,000 per employee/aggregate for disease.    Proprietary to Bank of America  Page 19  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





26.2.3 Commercial General Liability Insurance with a minimum combined single limit of liability of $1,000,000 per occurrence and $2,000,000 aggregate for bodily Injury, death, property damage and personal injury, and specifically covering infringement of Intellectual Property Rights. This policy shall include products/completed operations coverage and shall also include contractual liability coverage.

26.2.4 Business Automobile Liability Insurance covering all owned, hired and non-owned vehicles and equipment used by Supplier with a minimum combined single limit of liability of $1,000,000 for injury and/or death and/or property damage.

26.2.5 Excess coverage with respect to Sections 26.2.2, 26.2.3 and 26.2.4 above with a per occurrence limit of $5,000,000. The limits of liability required In subsections 26.2.2, 26.2.3 and 26.2.4 may be satisfied by a combination of those policies with an Umbrella/Excess Liability policy.

26.2.6 Technology Errors and Omissions Insurance with minimum limits of not less than $5,000,000, covering liabilities arising from errors, omission, etc., in rendering computer or information technology services including but not limited to (1) systems analysis (2) systems programming (3) data processing (4) systems integration (5) outsourcing including outsourcing development and design (6) systems design, consulting, development and modification (7) training services relating to computer software or hardware (8) management, repair and maintenance of computer products, networks and systems (9) marketing, selling, servicing, distributing, installing and maintaining computer hardware or software (10) data entry, modification, verification, maintenance, storage, retrieval or preparation of data output.

26.2.7 Supplier shall be responsible for loss to bank property and customer property, directly or indirectly, and shall maintain Fidelity Bond or Crime coverage for the dishonest acts of its employees in a minimum amount of $5,000,000. Supplier shall endorse such policy to include a Client Coverage or Joint Payee Coverage endorsement Bank of America shall be named as Loss Payee, As Their Interest May Appear'' in such Fidelity Bond.

26.3 The failure of Bank of America to obtain certificates, endorsements, or other forms of insurance evidence from Supplier and its Subcontractors is not a waiver by Bank of America of any requirements for the Supplier and its Subcontractors to secure and continuously maintain the specified coverages. Supplier shall notify and shall advise its Subcontractors to notify insurers of the coverages required hereunder. Bank of America's acceptance of certificates and/or endorsements that in any respect do not comply with the requirements of this Section does not release the Supplier and its Subcontractors from compliance herewith. Should Supplier and/or its Subcontractors fail to secure and continuously maintain the insurance coverage required under this Agreement, Supplier shall itself be responsible to Bank of America for all the benefits and protections that would have been provided by such coverage, including without limitation, the defense and indemnification protections.

  27.0 CONFIDENTIALITY AND INFORMATION PROTECTION

27.1 The term Confidential Information shall mean this Agreement and all data, trade secrets, business information and other information of any kind whatsoever that a Party (Discloser'') discloses, in writing, orally, visually or in any other medium, to the other Party (Recipient) or to which Recipient obtains access and that relates to Discloser or, in the case of Supplier, to Bank of America or its Representatives, customers, third-party vendors or licensors. Confidential Information includes Associate Information, Customer information and Consumer information, as defined in the Section entitled ''Definitions. A writing shall include an electronic transfer of information by e-mail, over the internet or otherwise.

27.2 Supplier acknowledges that Bank of America has a responsibility to its customers and other consumers using Its services to keep Associate Information, Customer Information and Consumer Information strictly confidential. Each of the Parties, as Recipient, hereby agrees that it will not, and will cause its Representatives, consultants, Affiliates and independent contractors not to disclose Confidential Information of the other Party, including Associate Information,    Proprietary to Bank of America  Page 20  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







Customer Information and Consumer Information, during or after the Term of this Agreement, other than on a need to know basis and then only to: (a) Affiliates of Bank of America; (b) Recipient's employees or officers; (c) Affiliates of Recipient, its independent contractors at any level, agents and consultants, provided that all such persons are subject to a written confidentiality agreement that shall be no less restrictive than the provisions of this Section; (d) pursuant to the exceptions set forth in 15 U.S.C 6802(e) and accompanying regulations, which disclosures are made in the ordinary course of business and (e) as required by law or as otherwise expressly permitted by this Agreement. Recipient shall not use or disclose Confidential Information of the other Party for any purpose other than to carry out this Agreement. Recipient shall treat Confidential Information of the other Party with no less care than it employs for its own Confidential Information of a similar nature that it does not wish to disclose, publish or disseminate, but not less than a reasonable level of care. Upon expiration or termination of this Agreement for any reason or at the written request of Bank of America during the Term of this Agreement. Supplier shall promptly return to Bank of America or destroy according to the Information Destruction Requirements described within SCHEDULE E, Information Security . at Bank of America's election, all Bank of America Confidential Information in the possession of Supplier or Supplier's Subcontractors, subject to and in accordance with the terms and provisions of this Agreement.

27.3 To the extent legally permitted, Recipient shall notify Discloser of any actual or threatened requirement of law to disclose Confidential Information promptly upon receiving actual knowledge thereof and shall cooperate with Discloser's reasonable, lawful efforts to resist, limit or delay disclosure. Nothing in this Section shall require any notice or other action by Bank of America in connection with requests or demands for Confidential Information by bank examiners.

27.4 Supplier shall not remove or download from Bank of America's premises or systems, the original or any reproduction of any notes, memoranda, files, records, or other documents, whether in tangible or electronic form, containing Bank of America's Confidential Information or any document prepared by or on behalf of Supplier that contains or is based on Bank of America's Confidential Information, without the prior written consent of an authorized Representative of Bank of America. Any document or media provided by an authorized Bank of America Representative or notes taken to document discussions with Bank of America Representatives pertaining to the Products provided hereunder will be deemed to fall outside this consent requirement unless otherwise stated by the Bank of America Representative.

27.5 With the exception of Associate Information, Customer Information and Consumer Information, the obligations of confidentiality in this Section shall not apply to any information that (i) Recipient rightfully has in its possession when disclosed to it, free of obligation to Discloser to maintain its confidentiality; (ii) Recipient independently develops without access to Discloser's Confidential Information; (iii) is or becomes known to the public other than by breach of this Section or (iv) is rightfully received by Recipient from a third party without the obligation of confidentiality. Any combination of Confidential Information disclosed with information not so classified shall not be deemed to be within one of the foregoing exclusions merely because individual portions of such combination are free of any confidentiality obligation or are separately known in the public domain.

27.6 Bank of America may disclose Confidential Information of Supplier to independent contractors for the purpose of further handling, processing, modifying and adapting the Products for use by or for Bank of America, provided that such independent contractors have agreed to observe in substance the obligations of Bank of America set forth in this Section.

27.7 All Confidential Information disclosed by Bank of America and any results of processing such Confidential Information or derived in any way therefrom shall at all times remain the property of Bank of America. Supplier shall have the responsibility for and bear all risk of loss or damage to Confidential Information and damages resulting from improper or inaccurate processing of such data arising from the negligence or willful misconduct of Supplier, its Representatives or Subcontractors.    Proprietary to Bank of America  Page 21  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





27.8 Supplier acknowledges that Bank of America is required to comply with the information security standards required by the Gramm-Leach- Bliley Act (15 U.S.C. 6801, 6805(b)(1)) and the regulations issued thereunder (12 C.F.R. Part 40), the Fair and Accurate Credit Transactions Act (15 U.S.C. 1681, 1681w) and the regulations issued thereunder (12 C.F.R. Parts 30 and 41) and with other statutory, legal and regulatory requirements (collectively, Privacy Laws'') If applicable, Supplier shall make commercial best efforts to assist Bank of America to so comply and shall comply and conform with applicable Privacy Laws, as amended from time to time, and with the Bank of America policies for information protection as modified by Bank of America from time to time.

27.9 Bank of America may, in its sole discretion and at any time during the Term of this Agreement, suspend, revoke or terminate Supplier's right to receive Confidential Information upon written notice to Supplier. Upon receipt of that notice, Supplier shall (i) immediately stop accessing and/or accepting Confidential Information and (ii) promptly return to Bank of America or destroy according to the Information Destruction Requirements described within SCHEDULE E, Information Security, at Bank of America's election, all Bank of America Confidential Information in the possession of Supplier or Suppliers Subcontractors, subject to and in accordance with the terms and provisions of this Agreement.

27.10 As a condition of access to the Confidential Information of Bank of America, Supplier shall make available to Bank of America a copy of its written Information Security Program for evaluation. The program shall be designed to:

 A. Ensure the security, integrity and confidentiality of Confidential Information;

 B. Protect against any anticipated threats or hazards to the security or integrity of such Confidential Information;

 C. Protect against unauthorized access to or use of such Confidential Information that could result in substantial harm orinconvenience to the person or entity that is the subject of such Confidential Information; and

 D. Ensure the proper disposal of such Confidential Information.

27.11 At the request of Bank of America, Supplier shall make commercially reasonable modifications to its Information Security Program or to the procedures and practices thereunder to conform at least to the Bank Security Requirements. Supplier shall require any Subcontractors and other persons or entities who provide services to Supplier for delivery to Bank of America directly or indirectly or who hold Confidential Information to implement and administer an information protection program and plan that complies with Bank Security Requirements. Supplier shall include or shall cause to be included in written agreements with such Subcontractors or other persons or entities substantially the terms of this Section and the provisions of SCHEDULE E.

27.12 One aspect of the determination of Supplier compliance with Bank Security Requirements is a review of Supplier Security Controls. As a condition precedent to performance under this Agreement, Supplier agrees to satisfy the following validation requirements:

 A. Participation in Bank of America's Supplier testing and assessment process including the completion of online and/or on-siteassessment(s), as appropriate, and remediation of any findings;    Proprietary to Bank of America  Page 22  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





 B. Periodic discussions between Bank of America personnel and Supplier Information Technology security personnel to reviewSupplier Security Controls; and

  C. Delivery to Bank of America of network diagrams depicting Supplier perimeter controls and security policies and processes relevant to the protection of Confidential Information. Examples of these policies include, but are not limited to, access control, physical security, patch management. password standards, encryption standards, and change control.

27.13 During the course of performance under this Agreement, Supplier shall ensure the following:

  A. Adequate governance and risk assessment processes are in place to maintain controls over Confidential Information. A security awareness program must be in place or implemented that communicates security policies to all Supplier (and Supplier Subcontractor(s)) personnel having access to Confidential Information.



B. Notification to Bank of America of changes that may impact the security of Confidential Information. Such changes requiring notification include, by way of example and not limitation, outsourcing of computer networking, data storage, management and processing or other information technology functions or facilities and the implementation of external web-enabled (internet) access to Confidential Information.

 C. Use of strong, industry-standard encryption of Confidential Information transmitted over public networks (e.g. internet,non-dedicated leased lines) and backup tapes residing at off-site storage facilities.

27.14 Bank of America reserves the right to monitor Supplier-maintained platforms that reside on the Bank of America network. The Supplier may be required, at the expense of Bank of America, to assist with installation, support and problem resolution of Bank of America owned equipment or processes, or to provide an information feed from the Supplier Platform to the Bank of America monitoring processes.

27.15 Supplier shall deliver an updated information Security Program or confirm that no changes have been made to the Information Security Program annually.

27.16 Supplier understands and acknowledges its obligation to adhere to the Payment Card Industry Data Security Standards (PCI DSS) for the protection of cardholder data throughout the Term of the contract and any Renewal Terms. The PCI DSS may be found at www.pcisecuritystandards.org. Supplier further understands that it is responsible for the security of cardholder data In its possession or control or in the possession or control of any Subcontractors that it engages to perform under this contract. Such Subcontractors must be identified to and approved by Bank of America in writing prior to sharing cardholder data with the Subcontractor. In support of this obligation, Supplier shall provide appropriate documentation to demonstrate compliance with PCI DSS standards by Supplier and all identified Subcontractors. Failure to discharge this obligation may be considered by Bank of America to be a Termination Event under (a) of subsection 5.2.

  28.0 INDEMNITY

28.1 Supplier shall indemnify, defend, and hold harmless Bank of America and its Representatives, successors, permitted assigns and customers from and against any and all claims or legal actions of whatever kind or nature that are made or threatened by any third party and an related losses, expenses, damages, costs and liabilities, including reasonable attorneys' fees and expenses incurred in investigation, defense or settlement (Damages), which arise out of, are alleged to arise out of, or relate to the following: (a) any negligent act or omission or willful misconduct by    Proprietary to Bank of America  Page 23  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





 Supplier, its Representatives or any Subcontractor engaged by Supplier in the performance of Supplier's obligations under this Agreement;or (b) any breach in a representation, covenant or obligation of Supplier contained in this Agreement

28.2 Supplier shall defend or settle at its expense any threat, claim, suit or proceeding arising from or alleging infringement, misappropriation or other violation of any Intellectual Property Rights or any other rights of any third party by Products, Work Product or services furnished under this Agreement Supplier shall indemnify and hold Bank of America, its Affiliates and each of their Representatives, successors, permitted assigns and customers harmless from and against and pay any Damages. including royalties and license fees attributable to such threat, claim, suit or proceeding.



A. If any Product, Work Product or service furnished under this Agreement, including, without limitation, software, system design, equipment or Documentation, becomes, or in Bank of America's or Supplier's reasonable opinion is likely to become, the subject of any claim, suit, or proceeding arising from or alleging facts that if true would constitute infringement, misappropriation or other violation of, or in the event of any adjudication that such Work Product or Product infringes, misappropriates or otherwise violates any Intellectual Property Rights or any other rights of a third party, Supplier shall promptly notify Bank of America and, at Supplier's expense, Supplier shall take the following actions in the listed order of preference: (i) secure for Bank of America the right to continue using the Work Product or Product; or if commercially reasonable efforts are unavailing, (ii) replace or modify the Work Product or Product to make it noninfringing; provided, however, that such modification or replacement shall not degrade the operation or performance of the Work Product or Product.

 B. The indemnity in the preceding provision shall not extend to any claim of infringement resulting solely from Bank of America'sunauthorized modification or use of the Work Product or Product.

28.3 Bank of America shall give Supplier notice of, and the Parties shall cooperate in, the defense of any such claim, suit or proceeding, including appeals, negotiations and any settlement or compromise thereof, provided that Bank of America must approve the terms of any settlement or compromise that may impose any unindemnified or nonmonetary liability on Bank of America.

  29.0 LIMITATION OF LIABILITY

29.1 Neither Party shall be liable to the other for any special, indirect, incidental, consequential, punitive or exemplary damages, including, but not limited to, lost profits, even if such Party alleged to be liable has knowledge of the possibility of such damages, provided, however, that the limitations set forth in this Section shall not apply to or in any way limit the obligations of the Section entitled Indemnity, the Section entitled Confidentiality and Information Protection, or Supplier's gross negligence or willful misconduct.

  30.0 DAMAGE TO BANK OF AMERICA SYSTEMS

30.1 Supplier represents and warrants that the Product and any media used to distribute it contain no computer instructions, circuitry or other technological means (Harmful Code) whose purpose is to disrupt, damage or interfere with Bank of America's use of its computer and telecommunications facilities for their commercial, test or research purposes. Harmful Code shall include, without limitation, any automatic restraint, time-bomb, trap-door, virus, worm, Trojan horse or other harmful code or instrumentality that will cause the Products or any other Bank of America software, hardware or system to cease to operate or to fail to conform to its specifications. Supplier shall indemnify Bank of America and hold Bank of America harmless from all claims, losses, damages and expenses, including attorneys' fees, arising from the presence of Harmful Code in or with the Product or contained on media delivered by Supplier. Supplier further represents and warrants that it will not introduce any Harmful Code, into any computer or electronic data storage system used by Bank of America.    Proprietary to Bank of America  Page 24  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





31.0 SUPPLIER DIVERSITY

31.1 Supplier acknowledges and supports the Bank of America Supplier Diversity efforts supporting minority, woman and disabled-owned business enterprises and its commitment to the participation of minority, woman and disabled-owned business enterprises in its procurement of goods and services.

31.2 Definitions: For purposes of this Agreement, the following are the definitions of Minority-Owned Business Enterprise, Minority Group, Woman-Owned Business Enterprise, Disabled-Veteran-Owned Business Enterprise and Disabled-Owned Business Enterprise.

  A. Minority-Owned Business Enterprise is recognized as a for profit enterprise, regardless of size, physically located in the United States or its trust territories, which is at least fifty-one (51%) percent owned, operated and controlled, by one or more member(s) of a Minority Group who maintain United States citizenship.

  B. Minority Group means African Americans, Hispanic Americans, Native Americans (American Indians, Eskimos, Aleuts, and native Hawaiians), Asian-Pacific Americans, and other minority group as recognized by the United States Small Business Administration Office of Minority Small Business and Capital ownership Development.

 C. Woman-Owned Business Enterprise is recognized as a for profit enterprise, regardless of size, located in the United States or itstrust territories, which is at least fifty-one (51%) percent owned, operated and controlled by a female of United States citizenship.



D. Disabled Veteran-Owned Business Enterprise is recognized as a for profit enterprise, regardless of size, located In the United States or its trust territories, which is at least fifty-one (51%) percent owned, operated, and controlled by a disabled veteran. The disabled veteran's ownership and control shall be real and continuing and not created solely to take advantage of special or set aside programs aimed at supplier diversity. The Association of Service Disabled Veterans, www.asdv.org provides certification for this category of business owners throughout the United States.



E. Disabled-Owned Business Enterprise is recognized as a for profit enterprise, regardless of size, located in the United States or its trust territories, which is at least fifty-one (51%) percent owned, operated and controlled, by an individual of United States citizenship with a permanent mental or physical impairment that substantially limits one or more of the major life activities and which has a significant negative impact upon the company's ability to successfully compete. The ownership and control shall be real and continuing and not created solely to take advantage of special or set aside programs aimed at supplier diversity. Due to the absence of a certifying agency for this category of business owners, the Disabled-Owned Business Enterprise must complete an affidavit and provide supporting documentation to be eligible for consideration towards diverse supplier participation.

31.3 In addition to the above criteria to qualify as a Minority, Woman or Disabled-Owned Business Enterprise under this Agreement, the diverse supplier must be certified by an agency acceptable to Bank of America.

31.4 Participation Representation: Supplier represents it is not a Minority-, Woman-, Disabled- or Veteran- Disabled Owned Business Enterprise.    Proprietary to Bank of America  Page 25  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





32.0 ENVIRONMENTAL INITIATIVE

32.1 Supplier acknowledges that Bank of America encourages each supplier with which it enters into an agreement for the provision of goods or services to use, consistent with the efficient performance of such agreements, recycled paper goods and other environmentally preferable products, and to implement and adhere to other environmentally beneficial policies and practices. Supplier represents and warrants that Supplier uses environmentally beneficial practices specific to its industry that meet at least the minimum standard recommended for its industry. Upon Bank of America's request, Supplier will provide written information on its environmental policies and procedures.

  33.0 AUDIT

33.1 Supplier shall maintain at no additional cost to Bank of America, in a reasonably accessible location, all Records pertaining to its Products and services provided to Bank of America under this Agreement for a period of seven (7) years or as required by law, if longer. Such Supplier Records referenced above may be inspected, audited and copied by Bank of America, its Representatives or by federal or state agencies having jurisdiction over Bank of America, during normal business hours and at such reasonable times as Bank of America and Supplier may determine. Records available for review shall exclude any records pertaining to Supplier's other customers deemed proprietary and confidential and Supplier confidential and proprietary records not associated with the Products and services provided under this Agreement. Supplier will give prior notice to Bank of America of requests by federal or state authorities to examine Supplier's Bank of America Records. At Bank of America's written request, Supplier shall reasonably cooperate with Bank of America in seeking a protective order with respect to such Records.

33.2 Supplier shall provide at its expense on an annual basis, a copy of the latest SAS70 (Statement on Auditing Standards No. 70, Service Organizations) Type II independent audit firm report for facilities not managed by Bank of America that are used to provide Products under this Agreement. If not available, Supplier, at its sole cost and expense, will engage a nationally recognized certified public accounting firm to conduct the audit and prepare applicable reports. Each report will cover a minimum six (6) calendar month period each calendar year during the Term. Bank of America reserves the right to expand the scope of the controls to be covered in any SAS70-Type II audit report prepared during the Term. Supplier shall provide Bank of America with the scope of the audit and a complete copy of each report prepared in connection with each such audit within thirty (30) calendar days after it receives such report.

33.3 Supplier shall provide a copy of the latest operational audit for facilities not managed by Bank of America that are used to provide services under this Agreement. If necessary, Supplier, at its sole cost and expense, will engage a nationally recognized certified public accounting firm to conduct the audit and prepare applicable reports. Each report will cover a minimum six (6) calendar month period each calendar year during the Term. Such audits may be on a rotating site basis where operations and procedures of Supplier services provided to Bank of America are in multiple locations in order to confirm that Supplier is in compliance in all aspects of the Agreement Supplier shall provide Bank of America with a copy of each report prepared in connection with each such audit within thirty (30) calendar days after it receives such report.

33.4 During regular business hours but no more frequently than once a year, Bank of America may, at Its sole expense, perform a confidential audit of Supplier's operations as they pertain to the Products or services provided under this Agreement. Such audits shall be conducted on a mutually agreed upon date (which shall be no more than ten (10) Business Days after Bank of America's written notice of time, location and duration), subject to reasonable postponement by Supplier upon Supplier's reasonable request, provided, however, that no such postponement shall exceed twenty (20) Business Days. Bank of America will provide Supplier a summary of the findings from each report prepared in connection with any such audit and discuss results, including remediation plans. If audit results find Supplier Is not in substantial compliance with the    Proprietary to Bank of America  Page 26  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







requirements of this Agreement, then Bank of America shall be entitled, at Supplier's expense, to perform up to two (2) additional such audits in that year in accordance with the procedure set forth in this Section. Supplier agrees to promptly take action at Its expense to correct those matters or items identified in any such audit that require correction. Failure to correct such matters shall be considered a material breach of this Agreement.

33.5 Supplier will provide reasonable access to Bank of America's federal and state governmental regulators (at a minimum, to the extent required by law), at Bank of America's expense, to Bank of America's Records held by Supplier and to the procedures and facilities of Supplier relating to the Products and services provided under this Agreement Pursuant to 12 U.S.C. 1867(c), the performance of such services will be subject to regulation and examination by the appropriate federal banking agency to the same extent as if the services were being performed by Bank of America itself. Supplier acknowledges and agrees that regulatory agencies may audit Supplier's performance at any time during normal business hours and that such audits may include both methods and results under this Agreement.

33.6 Upon prior written notice and at a mutually acceptable time, Bank of America personnel or its Representatives (e.g., external audit consultants) may audit, test or inspect Supplier's Information Security Program and its facilities to assure Bank of America's data and Confidential Information are adequately protected. This right to audit is in addition to the other audit rights or assessments granted herein. Bank of America will determine the scope of such audits, tests or inspections, which may extend to Supplier's Subcontractors and other Supplier resources (other systems, environmental support, recovery processes, etc.) used to support the systems and handling of Confidential Information. Supplier will inform Bank of America of any internal auditing capability it possesses and permit Bank of America's personnel to consult on a confidential basis with such auditors at all reasonable times. Bank of America may provide Supplier a summary of the findings from each report prepared in connection with any such audit and discuss results, including any remediation plans. Without limiting any other rights of Bank of America herein, if Supplier is In breach or otherwise not compliant with any of the provisions set forth in the Section of this Agreement entitled Confidentiality and Information Protection and/or SCHEDULE E, then Bank of America may conduct additional audits.

33.7 In addition to the requirements under this Section 33.0 and upon Bank of America's request, Supplier shall deliver to Bank of America, within thirty (30) calendar days after its receipt by its board of directors or senior management. a copy of any preliminary or final report of audit of Supplier by any third-party auditors retained by Supplier, including any management letter such auditors submit, and on any other audit or inspection upon which Bank of America and Supplier may mutually agree.

  34.0 NON-ASSIGNMENT

34.1 Neither Party may assign this Agreement or any of the rights hereunder or delegate any of its obligations hereunder, without the prior written consent of the other Party, and any such attempted assignment shall be void, except that Bank of America or any permitted Bank of America assignee may assign any of its rights and obligations under this Agreement (including, without limitation, any individual Order) to any Bank of America Affiliate, the surviving corporation with or into which Bank of America or such assignee may merge or consolidate or an entity to which Bank of America or such assignee transfers all, or substantially all, of its business and assets. Bank of America may not unreasonably withhold its consent of assignment in the event the supplier merges or consolidates with another entity.

  35.0 GOVERNING LAW

35.1 This Agreement shall be governed by the internal laws, and not by the laws regarding conflicts of laws, of the State of North Carolina. Each Party hereby submits to the exclusive jurisdiction of the courts of such state, and waives any objection to venue with respect to actions brought in such courts. This provision shall not be construed to conflict with the provisions of the Section entitled Mediation/Arbitration.    Proprietary to Bank of America  Page 27  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





36.0 DISPUTE RESOLUTION

36.1 The following procedure will be adhered to in all disputes arising under this Agreement which the Parties cannot resolve informally through their Relationship Managers. The aggrieved Party shall notify the other Party in writing of the nature of the dispute with as much detail as possible about the deficient performance of the other Party. The Relationship Managers shall meet (in person or by telephone) within seven (7) calendar days (or other mutually agreed upon date) after the date of the written notification to reach an agreement about the nature of the deficiency and the corrective action to be taken by the respective Parties. If the Relationship Managers do not meet or are unable to agree on corrective action, senior managers of the Parties having authority to resolve the dispute without the further consent of any other person (Management) shall meet or otherwise act to facilitate an agreement within fourteen (14) calendar days (or other mutually agreed upon date) of the date of the written notification. If Management do not meet or cannot resolve the dispute or agree upon a written plan of corrective action to do so within seven (7) calendar days (or other mutually agreed upon date) after their initial meeting or other action, or if the agreed-upon completion dates in the written plan of corrective action are exceeded, either Party may request mediation and/or arbitration as provided for in this Agreement. Except as otherwise specifically provided, neither Party shall initiate arbitration, mediation or litigation unless and until this dispute resolution procedure has been substantially compiled with or waived. Failure of a Party to fulfill its obligations in this Section, including failure to meet timely upon the other Party's notice, shall be deemed such a waiver.

  37.0 MEDIATION/ARBITRATION

37.1 If the Parties are unable to resolve a dispute arising out of or relating to this Agreement in accordance with the Section entitled Dispute Resolution, the Parties will in good faith attempt to resolve such dispute through non-binding mediation. The mediation shall be conducted before a mediator acceptable to both sides, who shall be an attorney or retired judge practicing in the areas of banking and/or information technology law. The mediation shall be held In Charlotte, N.C., provided, however, a dispute relating to infringement of Intellectual Property Rights or the Section entitled Confidentiality and Information Protection shall not be subject to this Section entitled Mediation/Arbitration.

37.2 Any controversy or claim, other than those specifically excluded, between or among the Parties not resolved through mediation under the preceding provision, shall at the request of a Party be determined by arbitration. The arbitration shall be conducted by one independent arbitrator who shall be an attorney or retired judge practicing in the areas of banking and/or Information technology law. The arbitration shall be held in Charlotte, N.C. in accordance with the United States Arbitration Act (9 U.S.C. 1 et seq.), notwithstanding any choice of law provision in this Agreement, and under the auspices and the Commercial Arbitration Rules of the American Arbitration Association.

37.3 Consistent with the expedited nature of arbitration, each Party will, upon the written request of the other Party, promptly provide the other with copies of documents relevant to the issues raised by any claim or counterclaim on which the producing Party may rely in support of or in opposition to any claim or defense. At the request of a Party, the arbitrator shall have the discretion to order examination by deposition of witnesses to the extent the arbitrator deems such additional discovery relevant and appropriate. Depositions shall be limited to a maximum of three (3) per Party and shall be held within thirty (30) calendar days of the making of a request. Additional depositions may be scheduled only with the permission of the arbitrator, and for good cause shown. Each deposition shall be limited to a maximum of three (3) hours duration. All objections are reserved for the arbitration hearing except for objections based on privilege and proprietary or confidential information. Any dispute regarding discovery, or the relevance or scope thereof, shall be determined by the arbitrator, which determination shall be conclusive. All discovery shall be completed within sixty (60) calendar days following the appointment of the arbitrator.    Proprietary to Bank of America  Page 28  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





37.4 The arbitrator shall give effect to statutes of limitation in determining any claim, and any controversy concerning whether an issue is arbitrable shall be determined by the arbitrator. The arbitrator shall follow the law in reaching a reasoned decision and shall deliver a written opinion setting forth findings of fact, conclusions of law and the rationale for the decision. The arbitrator shall reconsider the decision once upon the motion and at the expense of a Party. The Section of this Agreement entitled Confidentiality and Information Protection shall apply to the arbitration proceeding, all evidence taken, and the arbitrator's opinion, which shall be Confidential Information of both Parties. Judgment upon the decision rendered by the arbitrator may be entered in any court having jurisdiction.

37.5 No provision of this Section shall limit the right of a Party to obtain provisional or ancillary remedies from a court of competent jurisdiction before, after, or during the pendency of any arbitration. The exercise of a remedy does not waive the right of either Party to resort to arbitration. The institution and maintenance of an action for judicial relief or pursuit of a provisional or ancillary remedy shall not constitute a waiver of the right of either Party to submit the controversy or claim to arbitration if the other Party contests such action for judicial relief.

  38.0 NON-EXCLUSIVE NATURE OF AGREEMENT

38.1 Supplier agrees that it shall not be considered Bank of America's exclusive provider of any goods or services provided hereunder. Bank of America retains the unconditional right to utilize other vendors in the provision of services and products whether or not similar to the services and Products described in this Agreement.

  39.0 OWNERSHIP OF WORK PRODUCT

39.1 Bank of America will own exclusively all Work Product and Supplier hereby assigns to Bank of America all right, title and interest (including all Intellectual Property Rights) in the Work Product. Work Product, to the extent permitted by law, shall be deemed works made for hire (as that term is defined in the United States Copyright Act). Supplier shall provide Bank of America upon request with all assistance reasonably required to register, perfect or enforce such right, title and interest, including providing pertinent information and, executing all applications, specifications, oaths, assignments and all other instruments that Bank of America shall deem necessary. Supplier shall enter into agreements with all of its Representatives and Subcontractors necessary to establish Bank of America's sole ownership in the Work Product. Bank of America acknowledges Supplier's and its licensors' claims of proprietary rights in preexisting works of authorship and other intellectual property (Pre-existing IP) Supplier uses in its work pursuant to this Agreement. Bank of America does not claim any right not expressly granted by this Agreement in such Pre-existing IP, which shall not be deemed Work Product, even if incorporated with Work Product in the Product Supplier delivers to Bank of America. Unless otherwise agreed in an Order, Supplier grants Bank of America a perpetual, worldwide, irrevocable, nonexclusive royalty free license to any Pre-existing IP embedded in the Work Product, which shall permit Bank of America and any transferee or sublicensee of Bank of America, subject to the restrictions in this Agreement, to make, use, import, reproduce, display, distribute, make derivative works and modify such Pre-existing IP as necessary or desirable for the use of the Work Product.

39.2 Supplier shall promptly notify Bank of America in writing, of any threat, or the filing of any action, suit or proceeding, against Supplier, its Affiliates, Subcontractors or Representatives, (i) alleging infringement, misappropriation or other violation of any Intellectual Property Right related to any Product, Work Product or service furnished under this Agreement, or (ii) in which an adverse decision would reasonably be expected to have a material adverse effect on the Supplier or the use by Bank of America of the Products, Work Product or services furnished under this Agreement.    Proprietary to Bank of America  Page 29  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





39.3 At all times during the Term, upon request from Bank of America and upon termination of this Agreement for any reason, Supplier shall provide immediately to Bank of America the then-current version of any Work Product in Supplier's possession.

39.4 Supplier understands and acknowledges that Bank of America may (i) manage, modify, maintain and update pre-existing data and information, and (ii) generate, manage, modify, maintain and update additional data and information (collectively, Bank of America Data) using the Software. Bank of America Data will be treated as Bank of America Confidential Information and Bank of America shall retain all right, title and interest in and to all Bank of America Data.

39.5 Bank of America shall have the right to interface the Software and to use it in conjunction with other software, programs, routines and subroutines developed or acquired by Bank of America. Supplier shall have no ownership interest in any other software, program, routine or subroutine developed by Bank of America or acquired by Bank of America from a third party by virtue of its having been interfaced with or used in conjunction with any Software.

  40.0 MISCELLANEOUS

40.1 Bank of America and Supplier represent that they are equal opportunity employers and do not discriminate in employment of persons or awarding of subcontracts because of a person's race, sex, age, religion, national origin, veteran or handicap status. Supplier is aware of and fully informed of Supplier's responsibilities and agrees to the provisions under the following: (a) Executive Order 11246, as amended or superseded in whole or in part, and as contained in Section 202 of the Executive Order as found at 41 C.F.R. § 60-1.4(a)(1-7); (b) Section 503 of the Rehabilitation Act of 1973 as contained in 41 C.F. R. § 60- 741.4; and (c) The Vietnam Era Veterans' Readjustment Assistance Act of 1974 as contained in 41 C.F.R. § 60-250.4.

40.2 Section headings are included for convenience or reference only and are not intended to define or limit the scope of any provision of this Agreement and should not be used to construe or interpret this Agreement.

40.3 No delay, failure or waiver of either Party's exercise or partial exercise of any right or remedy under this Agreement shall operate to limit, impair, preclude, cancel, waive or otherwise affect such right or remedy. Any waiver by either Party of any provision of this Agreement shall not imply a subsequent waiver of that or any other provision of this Agreement.

40.4 If any provision of this Agreement is held invalid, illegal or unenforceable, the validity, legality or enforceability of the remaining provisions shall in no way be affected or impaired thereby.

40.5 No amendments of any provision of this Agreement shall be valid unless made by an instrument in writing signed by both Parties specifically referencing this Agreement. Notwithstanding anything therein to the contrary, the terms of any Order to this Agreement shall supplement and not replace or amend the terms or provisions of this Agreement and the terms and provisions of this Agreement shall control in the event of any conflict between such terms thereof and the terms and provisions of this Agreement and such conflict shall be resolved in favor of the express terms and provisions of this Agreement. The terms and provisions of this Agreement shall be incorporated by reference into any Order to this Agreement.

40.6 Anything in this Agreement to the contrary notwithstanding, the Parties hereby agree that thirty (30) calendar days after written notice by Bank of America of any amendment to this Agreement for compliance with a change in federal law, rule or regulation affecting financial services companies or the suppliers of financial services companies, this Agreement shall be amended by such notice and the amendment contained therein and without need for further action of the Parties, and the Agreement as amended thereby, shall be enforceable against the Parties, their successors and assigns. The notice provided hereunder shall set forth such change and provide    Proprietary to Bank of America  Page 30  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





 the relevant amendment to the Agreement. Bank of America shall have the right to terminate immediately the Agreement, without furtherliability to Supplier, in the event of Supplier's failure to comply with the terms and conditions of any such amendment to the Agreement.

40.7 This Agreement may be executed by the Parties in one or more counterparts, and each of which when so executed shall be an original but all such counterparts shall constitute one and the same instrument.

40.8 The remedies under this Agreement shall be cumulative and are not exclusive. Election of one remedy shall not preclude pursuit of other remedies available under this Agreement or at law or in equity. In arbitration a Party may seek any remedy generally available under the governing law.

40.9 To the maximum extent permitted by the governing law, this Agreement and the transactions called for herein shall not be governed or affected by any version of the Uniform Computer Information Transactions Act enacted in any jurisdiction.

40.10 Notwithstanding the general rules of construction, both Bank of America and Supplier acknowledge that both Parties were given an equal opportunity to negotiate the terms and conditions contained in this Agreement, and agree that the identity of the drafter of this Agreement is not relevant to any interpretation of the terms and conditions of this Agreement.

40.11 All notices or other communications required under this Agreement shall be given to the Parties in writing to the applicable addresses set forth on the signature page, or to such other addresses as the Parties may substitute by written notice given in the manner prescribed in this Section as follows: (a) by first class, registered or certified United States mail, return receipt requested and postage prepaid, (b) over-night express courier or (c) by hand delivery to such addresses, Such notices shall be deemed to have been duly given (i) five (5) Business Days after the date of mailing as described above, (ii) one (1) Business Day after being received by an express courier during business hours, or (iii) the same day if by hand delivery.

40.12 Wherever this Agreement requires either Party's approval or consent such approval or consent shall not be unreasonably withheld or delayed.

40.13 Unless the Parties otherwise agree in writing, all services to be provided hereunder shall be processed and/or provided, whether in part or in whole, by Supplier, its employees, Representatives and/or Subcontractors on and from a location or locations in one (1) or more of the fifty (50) states of the United States of America only, all subject to applicable laws and regulations.

40.14 This Agreement shall be binding upon, and inure to the benefit of, the Parties and their respective permitted successors and assigns. Except as expressly set forth in this Agreement and with the exception of the Affiliates of Bank of America, the Parties do not intend the benefits of this Agreement to inure to any third party, and nothing contained herein shall be construed as creating any right, claim or cause of action in favor of any such other third party, against either of the Parties hereto.

40.15 Neither Party shall issue any media releases, public announcements and public disclosures, relating to this Agreement or use the name or logo of the other Party, including, without limitation, in promotional or marketing material or on a list of customers, provided that nothing in this paragraph shall restrict any disclosure required by legal, accounting or regulatory requirements beyond the reasonable control of the releasing Party.    Proprietary to Bank of America  Page 31  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





41.0 ENTIRE AGREEMENT

41.1 This Agreement, the Schedules, and other documents Incorporated herein by reference, is the final, full and exclusive expression of the agreement of the Parties and supersedes all prior agreements, understandings, writings, proposals, representations and communications, oral or written, of either Party with respect to the subject matter hereof and the transactions contemplated hereby. The Parties agree to accept a digital image of this Agreement, as executed, as a true and correct original and admissible as best evidence to the extent permitted by a court with proper jurisdiction.    Proprietary to Bank of America  Page 32  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





Software License, Customization and Maintenance Agreement

SCHEDULE C

Bank of America Change Order Request Form   Bank of America -   Change number: Project

Software and Hardware Change Order Request and Authorization



Requested by: (please print)  Date of request: Name:  Date required: Dept. #:  Priority: Phone #:  ○ Low ○ Medium ○ High

Description of change:    -    -



  See Attachment ○   Response: ○ Bank of America or ○ Supplier Enhancement          See Attachment ○ Estimated effort (to be filled in by Systems Analyst)    Estimate for CO Request Only ○

  Function   Hours required   Estimated Cost   Target date  Comments      Analysis/Design                  Programming                  Testing                  Implementation

  Estimated by:        Date:       Approved by:

        Bank of America Project Manager  Date



  Supplier Project Manager    Date



   Proprietary to Bank of America  C-1  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





Change Control Procedures

The procedure steps In Table 1 shall be employed to achieve the desired objectives for this Change Order.

Table 1 Change Control Procedure Steps

Step Individual   Sub- step  Action 1)  Originator  a)  Fills out Change Order Request & Authorization Form   b)  Submits form to Bank of America Project Administrator

2)   Bank of America Project Administrator   a)   Assign unique Change number to form log.

  b)  Logs from into CO log.   c)  Make one copy of form and attachments.   d)  File copy in In Process-Review CO file.   e)  Deliver form (with attachments, if any) to Supplier Project Manager

3)  Supplier Project Manager  a)  Reviews form   b)  Arranges for Analyst to review form

4)



Analyst



a)



Reviews form and analyzes changes required. If time to evaluate CO is more than four hours, returns form to Supplier Project Manager with estimate of number of hours required (including expected additional participants and their respective hours) to evaluate the CO Request. Check Estimate for CO Request Only box on form. (Supplier Project Manager will get prior approval for Bank of America funding cost of CO Request evaluation, before Systems Analyst begins actual review.)   b)  Fills out Responses section of form including Estimated effort   c)  Returns form to Supplier Project Manager.

5)  Supplier Project Manager  a)  Review form for completeness of response, evaluates available resources.   b)  Signs & dates form at bottom signifying approval.   c)  Returns form to Project Administrator.    Proprietary to Bank of America  C-2  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





6)   Bank of America Project Administrator   a)   Makes two copies of CO form



b) c) d) e)

Files one copy in CO Returned file. Removes and destroys In Process copy. Returns a copy to Supplier Project Manager. Returns originals CO form to Originator.

7)   Bank of America Project Manager   a)   Evaluates CO Response.

  b) Negotiates with Supplier any differences regarding licensing status of deliverables.

   c)   Signs & dates form at bottom signifying approval. If declined, writes Cancelled in Bank of America Project Manager signature area of form.   d) Makes appropriate copies for Bank of America use (to TAM, etc.)   e) Returns original signed copy to Project Administrator.

8)   Project Administrator   a)   If CO approved, makes two copies: one to Supplier Project Manager, one for person to be assigned. Delivers both to Supplier Project Manager. Updates log.

   b)   If CO cancelled, original from is filed in CO Cancelled file, updates log, removes copy from Returned to Bank of America file.

9)   Supplier Project Manager   a) b)  Reviews form, arranges for Supplier to assign Systems Analyst Updates project plan (may be done by Implementation Manager)

10) Supplier's Analyst   When CO completed, form is returned to Supplier Project Manager

11) Supplier Project Manager  a) Reviews the results of the CO (deliverables, activities …) and concurs that CO was completed. Signs form.   b) Returns form to Project Administrator.

12)



Project Administrator



a) b) c) d) e)

Makes two copies of completed form. Sends one copy to Supplier Accounting. Files one copy in CO Completed file. Sends original back to Bank of America Project Manager. Updates log.

13)



Bank of America Project Manager

a)

b)

Reviews form and results.

Files in Bank of America's CO Completed file.    Proprietary to Bank of America  C-3  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





SCHEDULE D Maintenance Services

MAINTENANCE SERVICES

A. During the Warranty Period, Supplier shall provide Bank of America Maintenance Services at no additional charge, provided that if a Customization is not Operative at the end of the applicable Warranty Period, Maintenance Services shall continue to be provided without additional charge until the Customization is Operative.

B. Supplier shall provide the Maintenance Services described in this for Software, Updates and Upgrades provided to Bank of America pursuant to this Agreement.

C. As part of Maintenance Services, Supplier shall provide the following:

  (1) help desk support available twenty-four (24) hours a day, seven (7) days a week via toll-free telephone number with help desk technicians sufficiently trained and experienced to identify or resolve most support issues and who shall respond to all Bank of America requests for support within fifteen (15) minutes after receiving a request for assistance;

  (2) a current list of persons and telephone numbers. including pager numbers, (the Calling List) for Bank of America to contact to enable Bank of America to escalate its support requests for issues that cannot be resolved by a help desk technician or for circumstances where a help desk technician does not respond within the time specified.

D. Supplier shall deliver to Bank of America and keep current a list of persons and telephone numbers (Calling List) for Bank of America to contact in order to obtain answers to questions about the Equipment or to obtain Corrections. The Calling List shall include (1) the first person to contact if a question arises or problem occurs and (2) the persons in successively more responsible or qualified positions to provide the answer or assistance desired. If Supplier does not respond promptly to any request by Bank of America for telephone consultative service, then Bank of America may attempt to contact the next more responsible or qualified person on the Calling List until contact is made and a designated person responds to the call.

ERROR CORRECTION

A. Supplier shall make reasonable efforts to respond within two (2) hours to Bank of America's initial request for assistance in correcting or creating a workaround for an Error. Supplier's response shall include assigning fully-qualified technicians to work with Bank of America to diagnose and correct or create a workaround for the Error and notifying the Bank of America Representative making the initial request for assistance of Supplier's efforts, plans for resolution of the Error, and estimated time required to resolve the Error. Supplier shall correct Errors caused by the Object Code by modifying Source Code and distributing the modified Software to Bank of America on the schedule called for in this Section.

B. For Class 1 Errors, Supplier shall provide a Correction or workaround reasonable in Bank of America's judgment within the Repair Period after Bank of America reports the Error, or within four (4) hours after Bank of America first reports the Error if no other Repair Period is specified. These steps shall include assigning fully-qualified technicians to work with Bank of America without interruption or additional charge, twenty-four (24) hours per day, until Supplier provides a Correction or workaround reasonable in Bank of America's judgment.

C. For Class 2 Errors, Supplier shall take reasonable steps to provide a Correction or a workaround reasonable in Bank of America's judgment by the opening of business on the second Business Day after Bank of America reports the Error. These steps shall include assigning fully- qualified    Proprietary to Bank of America  D-4  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018







technicians to work with Bank of America during Bank of America's regular business hours until Supplier provides a workaround reasonable in Bank of America's judgment or a Correction or Bank of America determines after consultation with Supplier that such a workaround or Correction cannot be produced by Supplier's technicians. Supplier shall provide a Correction within thirty (30) calendar days after Bank of America's report of the Error.

D. For Class 3 Errors, Supplier shall correct the Errors by all reasonable means. Supplier shall correct the Errors and distribute the modified Software to Bank of America no later than the next Update, unless Supplier has scheduled release of such Update less than thirty (30) calendar days after Bank of America's notice, in which case Supplier shall correct the Error no later than the following Update.

E. Without limiting Supplier's obligations under this Section, if Supplier does not deliver a Correction for an Error within the times allowed by this Section (whether Supplier has delivered a reasonable workaround or not), Supplier shall provide a written analysis of the problem and a written plan to supply Bank of America with a Correction.

PRODUCTION ERRORS

Notwithstanding the previous Section, Error Correction, if an Error prevents Bank of America from making productive use of the Software, Supplier shall use its best efforts to provide an effective workaround or a Correction by the time Bank of America opens for business on the Business Day after the Business Day on which Bank of America first reports the Error.

REMEDIES

A. Without limitation of Supplier's obligations above, Bank of America may fall back, at its option, to any previous version or release of the Software in which a Class 1 or Class 2 Error does not occur or can be worked around, and Supplier shall provide Maintenance Services at no charge, with respect to that version until Supplier provides a Correction.

DIAGNOSTIC INFORMATION

Bank of America shall submit to Supplier a listing of output and such other data as Supplier reasonably may request in order to reproduce operating conditions similar to those present when Bank of America detected the Error.

BANK OF AMERICA MODIFIED SOFTWARE

If Bank of America modifies the Software under the terms hereof, any additional maintenance costs or expenses to Supplier which result directly from such modification may be billed to Bank of America at the Time and Materials Rates.

UPDATES

Supplier shall provide all Updates to Bank of America at no additional charge when Updates are made generally available to Supplier's other customers.

Supplier will complete two (2) dedicated releases/year for Bank of America during the initial Term. The parties will work together every 6 months during the Term to define and agree upon the timelines and features for the next dedicated release. During the Term, six (6) weeks prior to each release. Cardlytics will provide Bank of America with code release notes or other technical documentation (describing features and functionality).    Proprietary to Bank of America  D-5  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





Supplier's TMS provides marketing services across multiple financial Institutions in addition to Bank of America. For the TMS service to function properly, the OPS system must be upgraded periodically. The supplier will provide no more than two major code releases of OPS during a calendar year without Bank of America's consent. Bank of America may implement these releases when appropriate and convenient for Bank of America. However, The TMS will support the current and previous release of OPS. If Bank of America does not upgrade to the current or previous release of OPS, some or all of TMS functionality may be impacted.    Proprietary to Bank of America  D-6  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





SCHEDULE E Information Security

INFORMATION SECURITY PROGRAM

Bank of America shall have the opportunity to evaluate the Supplier's Information Security Program and Supplier Security Controls to ensure Supplier's Compliance with the Section entitled Confidentiality and Information Protection. The Supplier's Information Security Program (the Program) shall address the Bank Security Requirements described below. This Program shall, at a minimum, prescribe the architecture of Supplier's system, Confidential Information placement within the system, the security controls in place (e.g. firewalls, web page security, intrusion detection, incident response process, etc.) and contain the information called for in the Subsection entitled Security Program Features below. The Program shall also describe physical security measures in place to protect Confidential Information received or processed by Supplier, including those that will protect Confidential Information that has been printed or otherwise displayed in forms perceptible with or without the aid of equipment. Bank of America shall provide Supplier with the Service Provider Security Requirements document outlining such Bank Security Requirements and Supplier Security Controls which shall be deemed a part of Bank of America's Confidential Information under this Agreement Supplier acknowledges that upon request in order to be allowed continued access to Confidential Information, it will make modifications to its Information Security Program to add additional measures necessary to retain Information Security standards consistent with the Bank Security Requirements.

PRIVACY POLICY

With respect to Confidential Information and the services provided to or on behalf of Bank of America, Supplier promptly shall conform its publicly available privacy and security policies, in Bank of America's reasonable judgment, to those of Bank of America, as they may exist from time to time.

PROTECTION

Supplier shall install and use a reasonable change control process to ensure that access to its systems and to Confidential Information is controlled and recorded. Supplier shall notify Bank of America of any planned system configuration changes or other changes affecting the Program applicable to Confidential Information, setting forth how such change will impact the security and protection of Confidential Information. No such change, which could reasonably be expected by Bank of America to have a material adverse impact on the security and protection of Confidential Information, may be implemented without the prior written consent of a Bank of America security representative. Bank of America may approve these types of changes prior to their becoming effective, such approval not to be unreasonably withheld or delayed.

Supplier shall permit Bank of America, at the election of Bank of America, to conduct security vulnerability (penetration) testing on those portions of the Supplier network, and any application servers that Supplier hosts on behalf of Bank of America, on which Confidential Information is stored or processed. Such vulnerability testing shall be conducted in a non-production environment with production equivalent security controls and with prior notice to Supplier. Supplier also agrees to make available to Bank of America the results of any vulnerability testing conducted by Supplier or a qualified third party provider of this service.

Supplier shall permit Bank of America to inspect the physical system equipment, operational environment, and Confidential Information handling procedures. Supplier's agreement with any independent contractor to provide services to Bank of America in support of this Agreement shall likewise permit Bank of America to conduct the same inspections.    Proprietary to Bank of America  E-1  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





Subject to the terms of this Agreement and the Schedules attached hereto, Supplier will take commercial best measures to prevent the unintended or malicious loss, destruction or alteration of Bank of America's files, Confidential Information, software and other property received and held by Supplier. Supplier shall maintain back-up files (including off-site back-up copies) thereof and of resultant output to facilitate their reconstruction in the case of such loss, destruction or alteration, in order to ensure uninterrupted services in accordance with the terms of this Agreement, its Schedules, Bank of America's written policies and Supplier's disaster recovery plans.

DETECTION AND RESPONSE

Supplier shall notify Bank of America immediately (within 24 hours or as soon thereafter as practicable) following discovery of any suspected breach or compromise of the security, confidentiality, or integrity of nonpublic personal information of any current or former Bank of America employee or customer (''Affected Persons) or otherwise provided to Supplier by Bank of America under this agreement through the defined security escalation channel of Bank of America, the Bank of America Incident Response Team (InfoSafe) by calling (800) 207-2322, option 1. Callers will be asked to identify themselves as Supplier. Such notification to Bank of America shall precede notifications to any other party. Supplier shall cooperate fully with all Bank of America security investigation activities consistent with the lnfoSafe guidelines for escalation and control of significant security incidents.

Bank of America reserves the right in its sole discretion to make appropriate privacy breach notifications to Affected Persons and regulators pursuant to federal or state guidelines, including but not limited to the Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice. To assist Bank of America in such notifications, Supplier shall include a brief summary of the available facts, the status of any investigation, and, if known, the potential number of Affected Persons. Supplier agrees to provide at no charge, to Affected Persons appropriate credit monitoring services for two years. All costs associated with any security breach, including but not limited to, the costs of the notices to, and credit monitoring for, Affected Persons shall be the sole responsibility of Supplier. Supplier agrees that it shall not communicate with any third party, including, but not limited to the media, vendors, consumers. and Affected Persons regarding any security breach without the express written consent of Bank of America.

Supplier shall maintain for a mutually agreed-upon length of time, and afford Bank of America reasonable access to, all records and logs of that portion of Supplier's network that stores or processes Confidential Information. Bank of America may review and Inspect any record of system activity or Confidential Information handling upon reasonable prior notice. Supplier acknowledges and agrees that records of system activity and of Confidential Information handling may be evidence (subject to appropriate chain of custody procedures) in the event of a Security Breach or other inappropriate activity. Upon the Bank of America, Supplier shall deliver the original copies of such records to Bank of America for use in any legal, investigatory or regulatory proceeding.

Supplier shall monitor industry-standard information channels (bugtraq, CERT, OEMs, etc.) for newly identified system vulnerabilities regarding the technologies and services provided to Bank of America and fix or patch any identified security problem in an adequate and timely manner. Unless otherwise expressly agreed in writing, timely shall mean that Supplier shall Introduce such fix or patch as soon as commercially reasonable after Supplier becomes aware of the security problem. This obligation extends to all devices that comprise Supplier's system, e.g., application software, databases, servers, firewalls, routers and switches, hubs, etc., and to all of Supplier's other Confidential Information handling practices.

Bank of America may perform vulnerability testing of Supplier's system to test the remediation measures implemented after a security incident or event to protect Confidential Information.

SECURITY PROGRAM FEATURES

At the request of Bank of America, Supplier shall meet with the Bank of America information security team to discuss information security issues In much greater detail at mutually agreeable times and locations.    Proprietary to Bank of America  E-2  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





Bank of America acknowledges and agrees that the information Supplier so provides is Supplier's Confidential Information, as defined In this Agreement, and is valuable proprietary information of Supplier. Supplier shall provide detailed information including, but not limited to, the following topics, which also shall be addressed in Supplier's Program.



1. Diagrams. The diagrams shall show the detail of the system architecture including, without limitation, the logical topology of routers, switches, internet firewalls, management or monitoring firewalls, servers (web, application and database), intrusion detection systems, network and platform redundancy. The diagrams shall include all hosting environments including those provided by Supplier's Subcontractors.

 2. Firewalls. Slate the specifications of the firewalls in use and who manages them. Specify the services, tools and connectivity requiredto manage the firewalls.

  3. Intrusion Detection Systems. Describe the intrusion detection system (lDS) environment and the Security Breach and event escalation process. Indicate who manages the IDS environment. Specify the services, tools and connectivity required to manage the IDS environment, and if the IDS network is host based.

 4. Change Management. Describe the change management process for automated systems used to provide services. Describe theprocess for information handling policies and practices.

 5. Business Continuity. Describe the business and technical disaster recovery management process.



6. System Administration Access Control. Describe the positions that perform administration functions on servers, firewalls or other devices within the application and network infrastructure. Detail level of access needed to perform functions. Explain the access control mechanisms. Describe the process by which recurring access of the system(s) is conducted to ensure permissions are granted on a need to know basis. Detail access reports generated and when reports are reviewed periodically. Describe methods used to track/log the usage of each account.



7. Customer Access Control. Describe each logon process to be followed by Bank of America Customers (including Bank of America employees) to obtain access to services Supplier provides to Bank of America. Describe the initial enrollment process for such Customers. Describe the password policies and procedures Supplier's system enforces, including, without limitation, password expiration, length of password, password revocation, invalid logon attempt threshold, etc. Describe methods used to track/log the usage of each account Supplier shall demonstrate how a customer or end user authenticates to each application.

  8. Access to Confidential Information in Human-Perceptible Forms. Describe policies, procedures and controls used to protect Confidential Information when it is printed or in other perceptible forms; how and how often these policies and procedures are reviewed and tested; and what methods are used to ensure destruction of Confidential Information on hard copy.

  9. Operating System Baselines. Describe Supplier's operating system security controls and configurations. Examples: Operating system services that have been removed because not required by Supplier's services to Bank of America. Identify and provide current operating system fixes that have not been applied, if any.    Proprietary to Bank of America  E-3  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





 10. Encryption. Describe in detail the technology and usage of encryption for protecting Confidential Information, including passwordsand authentication information, during transit and in all forms and locations where it may be stored.

 11. Application and Network Management. Specify the services, tools and connectivity required to manage the application and networkenvironments: who carries out the management functions; and what level of physical security applies to managed devices.

 12. Physical Security. For each location where Confidential Information will be processed or stored or services for Bank of Americaproduced by Supplier, describe in detail the arrangements in place for physical security.

 13. Privacy: Describe Supplier's privacy and security policies; indicate if they are in writing; and whether they are compatible with Bankof America's policies.

 14. Location of Servers. Are web servers on a separate segment of the network from the application and database servers? If not, explainthe reason this has not been done. At Bank of America's request, Supplier shall make reasonable efforts to create this separation.

  15. Portable Media and Devices. Bank of America's Confidential Information shall not be stored on any portable media or devices to include notebook/laptop computers, USB storage devices, approved by Bank of America and security precautions such as encryption of data and remote network connectivity will be addressed in the Supplier's Information Security Program.    Proprietary to Bank of America  E-4  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





INFORMATION DESTRUCTION REQUIREMENTS

Overall Requirements

At Bank of America's direction, Supplier shall destroy all Confidential Information at all locations where it is stored after it is no longer needed for performance under this Agreement or to satisfy regulatory requirements. Supplier must have in place or develop information destruction schedules and processes that meet Bank of America standards and that must be used in all cases when Confidential Information is no Longer needed. These information destruction requirements are to be applied to paper, microfiche, disks, disk drives, tape and other destroyable electronic or digital media containing Confidential Information.

Paper and Other Shreddable Media

Paper and other shreddable media includes paper, microfiche, microfilm, compact disks (CDs) and any other media that can be shredded. This media must be shredded using shredding techniques or machines such that Confidential Information in this media is completely destroyed as set forth herein when Supplier is finished with the Confidential Information contained thereon and it is no longer needed. This media may be shredded immediately or temporarily stored In a highly secured, locked container. The media may be shredded at a location other than Supplier's facilities; however it must be transferred in a highly secured. locked container. Supplier is responsible for supervising the shredding regardless of where the shredding activity occurs and by whom the shredding is performed. Confidential Information In this media must be completely destroyed by shredding such that the results are not readable or useable for any purpose.

Electronic Media

Electronic media includes, but Is not limited to, disk drives, diskettes. tapes, universal serial bus (USB) and other media that is used for electronic recording and storage. This media is to be wiped or degaussed using a Bank of America approved wipe or degaussing tool. Wiping uses a program that repeatedly writes data to the media and thereby destroys the original content. Degaussing produces an electronic field that electronically eliminates the original data and clears the media. These techniques must meet Bank of America standards and baselines. The resulting media must be free from any machine or computer content readable for any purpose.

Certification

These processes must be documented as a procedure by Supplier and should outline the techniques and methods to be used. The procedure must also indicate when and where Confidential Information is to be destroyed. Supplier shall keep records of all Confidential Information destruction completed and provide such records to Bank of America upon demand.    Proprietary to Bank of America  E-5  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





SCHEDULE F Background Checks

BACKGROUND SCREENING GUIDELINES

In accordance with and subject to the terms and conditions of this Agreement, prior to any person being assigned and beginning work for Bank of America under this Agreement, the following background screening guidelines must be administered and successfully passed by that person (Contract Person):

 1. Search of the Contract Person's social security number to verify the accuracy of the individual's identity and current and previousaddresses.

 2. A criminal background search of all court records in each venue of the Contract Person's current and previous addresses over thepast ten (10) years.

 3. A minimum of at least two (2) confirmed work references prior to assignment at Bank of America.

 4. Verification of any post high school education or degrees, i.e. B.A.. B.S., Associate, or professional certifications.

  5. Validate authorization to work in the United States in compliance with I-9 requirements.6. Where required by state and/or federal law. enroll in and participate in a federal work authorization program and process employee information according to all applicable E-Verify rules and procedures.

Supplier shall keep copies of background screening documentation and provide certification of their completion to Bank of America when requested.    Proprietary to Bank of America  F-1  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018





SCHEDULE G Recovery

1. Supplier shall establish, maintain and implement per the terms thereof, a Business Continuity Plan. The Business Continuity Plan must be in place within forty-five (45) calendar days after the assumption of Service and shall include, but not be limited to, recovery strategy, loss of critical personnel, documented recovery plans covering all areas of operations necessary to delivering Supplier's services pursuant to this Agreement, vital records protection and testing plans. The plans shall provide, without limitation, for off-site backup of critical data files, Confidential Information, software, documentation, forms and supplies as well as alternative means of transmitting and processing Confidential Information.

2. The recovery strategy shall provide for recovery after both short and long term disruptions in facilities, environmental support, workforce availability, and data processing equipment. Although short term outages can be protected with redundant resources and network diversity, the long term strategy must allow for total destruction of Supplier's business operations for a period of six (6) months or longer and set forth a recovery strategy.

3. Supplier's recovery objectives shall not exceed the following during any recovery period:

 A. Time to Full Restoration from time of disruption event: 4 hours

 B. Maximum Data Loss (stated in hours) from time of disruption event: 24 hours

 C. Percentage Reduction of Service levels: 50% during the 24 hour recovery period

In the event of a change, Bank of America agrees to work with Supplier to determine a mutually agreeable date for Supplier to match the new objectives if necessary.

4. Supplier shall continue to provide service to Bank of America if Bank of America activates its contingency plan or moves to an interim site to conduct its business, including during tests of Bank of America's contingency operations plans.

5. Supplier shall furnish contingency recovery plans, contingency exercise and testing schedules annually or upon request. Supplier shall provide to Bank of America, annually, or upon request, copies of all contingency exercise final reports and shall Include, but not be limited to, disaster scenario description, exercise scope and objectives, detailed tasks, exercise issues list and remediation, and exercise results. If requested, Supplier shall allow Bank of America, at its own expense, to observe a contingency test.

6. If Supplier provides electronic interchange of data with Bank of America, Supplier shall participate, if requested, in the recovery exercise of Bank of America to validate recovery capability.

7. Supplier must provide evidence of capability to meet any applicable regulatory requirements concerning business continuity.

8. Supplier shall be required to participate, if requested by Bank of America, in recovery testing of a mutually agreed upon scope and frequency.    Proprietary to Bank of America  G-1  vTIP2010

Source: CARDLYTICS, INC., S-1, 1/12/2018 
Question: Highlight the parts (if any) of this contract related to Third Party Beneficiary that should be reviewed by a lawyer. Details: Is there a non-contracting party who is a beneficiary to some or all of the clauses in the contract and therefore can enforce its rights against a contracting party?
answer:
Except as expressly set forth in this Agreement and with the exception of the Affiliates of Bank of America, the Parties do not intend the benefits of this Agreement to inure to any third party, and nothing contained herein shall be construed as creating any right, claim or cause of action in favor of any such other third party, against either of the Parties hereto.


question:
Exhibit 6.1 DISTRIBUTOR AGREEMENT THIS DISTRIBUTOR AGREEMENT (this Agreement) is made and effective as of1 August 2019, by and between, B & C General Warehouse Corporation LLC , a USA Limited Liability Company (LLC), with an address located at 7405 SW 11th CT, North Lauderdale, FL, 33068, USA, (Company), and XXXXXXXXXXXXXXXXXXXXX (Distributor). Company Import the products from Brazil Farm origin (Arte Café - Prescafe Torrefação e Comercio de Cafe, a Brazil company, with an address located at 1 Fazenda Sao Gabriel, Guaxupé, Cep 37800-000, Minas Gerais, Brazil), and sells the products listed in Section 1.c below (the Products). Distributor desires to purchase the Products from Company for resale in the territories or geographic areas as defined in Section 1.b (the Territory). Company desires to appoint Distributor as its exclusive distributor of the Products to all Clients that Distributor introduce, and upon confirmed the first order, this client come to be exclusive of Distributor, every new customer introduced by Distributor, must be approved by the company prior to any sale. After official approval from the Company, the customer introduced by Distributor, will appear on an official list in this contract, and will only be met by the Distributor and will follow the rules of this agreement. Distributor desires such appointment subject to the terms and conditions set forth in this Agreement, including any exhibits or schedules attached hereto. Now, Therefore, in consideration of the foregoing, and of the mutual benefit contained herein, the Parties, intending to be legally bound, agree as follows: AGREEMENT OF THE PARTIES 1. APPOINTMENT, ACCEPTANCE & SCOPE. (a) Exclusive Appointment. Subject to the terms and conditions of this Distributor Agreement, Company hereby appoints and grants Distributor the exclusive right to sell and distribute the Products to customers that Distributor introduce and confirmed by Company, (in all territory of United State of America (USA) and to render other services as a distributor for Company as set forth herein. Distributor shall limit its activities with respect to the Products to Customers located within the Territory and refrain from selling or otherwise transferring, directly or indirectly, the Products to any person outside the Territory, without the express written consent of Company. Company shall not sell or otherwise supply, directly or indirectly, the Products to any Distributor's Customer's, except by sale through the Distributor. The Company shall not contact any of Distributor's Customer's for any reason, without the prior written approval of Distributor.

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





(b) Territory. The rights granted Distributor hereunder are granted for the following geographical areas and markets. USA. (c) Products. The Products manufactured and sold by Company to Distributor for distribution hereunder are as follows: ● Arte Café Especial ● Arte Café Gourmet ● Arte Café Laurina ● Arte Café Organico ● And all another new brand and or kind of coffee. (d) Subagents. Distributor may appoint, with prior approval of the Company, sub-agents, sub-distributors, sub-representatives or other persons to act on Distributor's behalf or to otherwise perform any of Distributor's obligations under this Agreement within the Territory; provided that (i) any compensation to such sub-agent, sub-distributor, sub-representative or other person to act on Distributor's behalf or to otherwise perform any of Distributor's obligations shall be solely Distributor's responsibility, and (ii) such appointment does not deprive Company of the essential rights to which it is entitled under this Agreement. Any agreement with such sub-agent, sub-distributor, sub-representative or other person shall not extend beyond the term of this Agreement.

2

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





(e) Relationship of Parties. Distributor is an independent contractor and is not and shall not be deemed to be an employee, legal representative, dealer, general agent, joint venture or partner of Company for any purpose. Distributor acknowledges that Company has not granted it any authority to make changes to Company's terms and conditions of sale, grant any warranties in excess of those extended by Company or limit its liabilities or remedies less than Company limits its liabilities and remedies, sign quotations, incur obligations (expressed or implied), or in general enter into contracts on behalf of Company or bind Company in any transaction with customers, governmental agencies or third parties. 2. ORDERS, PRICE, TERMS OF SALE & PAYMENT. (a) Communications Pursuant to this Distributor Agreement and Orders. Orders shall be made with Company. Company understands that its timely acceptance of orders from Distributor hereunder is an important element of this Agreement. Company shall have Seven (7) business days after its receipt to accept (or reject for a legitimate business reason) any order submitted by Distributor. All the negotiations between Company and Distributor will be by INCOTERMS Ex-works, in origin farm, in Brazil. So will must be respected the Transite Time to destiny delivery. Should Company fail to timely accept or reject an order from Distributor in accordance with this Section, such order shall be deemed accepted and shall become binding on Company. All orders shall be fulfilled by Company within Seven (7) business days of order acceptance. (b) Prices and Shipment. Company agrees to sell, and Distributor agrees to purchase, the Products in accordance with the Prices and Volume Discount Prices set forth in Schedule A. Such Prices and Volume Discount Prices shall only be subject to increase once per year on each anniversary date of this Agreement, provided (i) Company provides Distributor with at least Ninety (90) days prior written notice of any such increase, and (ii) such increase does not exceed 5% of the preceding year's Prices, except for reasons of force majeure, (Chapter 10), and Volume Discount Prices nor the lowest price charged to others for the same Product. Any such change shall not apply for any order(s) accepted prior to the effective date of the increase.

3

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





(c) Company shall package the Products for shipment in accordance with Distributor's instructions. All shipments of Products for Customers in the Territory, and any freight and shipping costs related thereto, will be Distributor's responsibility. All shipments will be prepared and shipped from Company's facility. Distributor will promptly inspect the Products upon receipt at Distributor's facility to determine whether any Products included in the shipment are in short supply, defective, or otherwise not in conformance with this Agreement. Within Seven (7) days of receipt of such Products, Distributor will notify Company of any shortages, defects, non-conformance, and Company will promptly replace such Products free of charge. Title to the Products shall pass to Distributor upon delivery. (d) Terms of Sale. All sales by Company shall be in accordance with the terms and conditions of this Agreement. (e) Payment. Upon Customer's acceptance of any order, Distributor shall submit to Customer via wire transfer at least Twenty-Five Percent (25%) of the total order price. Distributor shall submit to Customer via wire transfer the remaining balance upon receipt Packing List and Bill of landing documents, from origin in Brazil Farm. (f) Resale of the Products. Distributor shall be free to resell the Products for such prices and upon such terms and conditions as Distributor may see fit in its sole discretion. Company shall have no control over or any liability in connection with the price at which Distributor resells the Products, and Distributor shall hold Company harmless and indemnify and defend Company from and against any liability resulting therefrom. 3. REPRESENTATIONS. The Distributor and Company, as applicable, make the following representations, warranties and covenants: (a) Distributor is a company duly organized, validly existing and in good standing in the United States of America (USA) , is qualified to do business and in good standing in each jurisdiction located within the Territory and is and will remain in compliance with all applicable laws and regulations in the conduct of its business and, specifically, in its sale of the Products and provision of any services hereunder.

4

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





(b) Company is a corporation, duly organized, validly existing and in good standing in the State of Florida, and is and will remain in compliance with all applicable laws and regulations in the conduct of its business and, specifically, in its sale of the Products. (c) Company warrants and represents that the Products will be free from defects in design, materials and workmanship and conform with any specifications provided. (d) Company has all rights, power, and authority to enter into this Agreement. (e) Company's execution of this Distributor Agreement, and Company's performance of its obligations and duties hereunder, do not and will not violate any agreement to which Company is a party or by which it is otherwise bound, and (f) Neither Party is subject to any pending or threatened litigation or governmental action that could interfere with its performance of this Agreement. (g) This Agreement is the binding legal obligation of each Party and is enforceable in accordance with its terms. 4. RESPONSIBILITIES OF DISTRIBUTOR. Distributor agrees that it will diligently perform the services and obligations detailed in this Agreement. The operations of Distributor are under its sole and exclusive control, including without limitation supervision of, and liability for expenses incurred with respect to, employees. The Distributor will use best reasonable efforts to distribute the Products in the Territory. 5. RESPONSIBILITIES OF COMPANY. In addition to any other responsibilities stated in this Agreement, Company will: (a) Provide, at Distributor's reasonable request and without charge, up to 10 hours of training with regard to any characteristics of the Products that Distributor deems reasonably necessary for Distributor and its employees and agents to fulfill the purposes of Distributor's appointment,

5

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





(b) provide to Distributor, without charge, reasonable quantities of promotional literature, brochures and commercial and technical information regarding the Products; (c) provide sales support and technical training to Distributor and its personnel as deemed reasonably appropriate by Company. 6. CONFIDENTIAL & PROPRIETARY INFORMATION. (a) As used herein, the term Proprietary Information means any information, technical data, or know-how (including, but not limited to, information relating to products, software, services, development, inventions, processes, techniques, customers, pricing, internal procedures, business and marketing plans or strategies, finances, employees and business opportunities) disclosed by one Party (the Disclosing Party) to the other (the Recipient Party) either directly or indirectly in any form whatsoever, including, but not limited to, in writing, in machine readable or other tangible form, orally or visually. (b) Unless otherwise expressly authorized by the Disclosing Party, the Recipient Party agrees that it and any of its personnel receiving Proprietary Information under this Agreement shall treat such Proprietary Information in strict confidence with the same degree of care applied to its own Proprietary Information of like importance, which it does not wish to disclose, publish, or disseminate to third parties. (c) In no event will the Recipient Party divulge, in whole or in part, such information to any third party without the prior written consent of the Disclosing Party; provided, further, that any third party must also agree in writing to restrictions comparable to those provided in this Section 6. The Recipient Party may disclose the Proprietary Information to the extent required by a valid order by a court or other governmental body or by applicable law; provided, however, that the Recipient Party will use all reasonable efforts to notify Disclosing Party of the obligation to make such disclosure in advance of the disclosure so that Disclosing Party will have a reasonable opportunity to object to such disclosure.

6

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





(d) Notwithstanding any other provisions of this Agreement, each party acknowledges that Proprietary Information shall not include any information that: (i) is already known to the Recipient Party at the time of disclosure, or becomes publicly known through no wrongful act of the Recipient Party's part; (ii) is rightfully received by the Recipient Party from a third party without breach of this Agreement; (iii) is independently developed by the Recipient Party without benefit of information received under this Agreement; (iv) is furnished to a third party by the Disclosing Party without a restriction on the third party's right to disclose it; or (v) is explicitly approved for release by written authorization by the Disclosing Party. (e) It is understood that all Proprietary Information disclosed under this Agreement, is, and shall remain, the property of the Disclosing Party. Upon completion of this Agreement, or upon written notice from the Disclosing Party, the Recipient Party agrees to return all Proprietary Information in its possession. (f) The Recipient Party acknowledges that the Disclosing Party, because of the unique nature of the Proprietary Information, would suffer irreparable harm in the event that the Recipient Party breaches its obligation under this Agreement and that monetary damages would be inadequate to compensate the Disclosing Party for such a breach. The Parties agree that, in such a circumstance, the Disclosing Party shall be entitled, in addition to such monetary relief as may be applicable, to injunctive relief as may be necessary to restrain any continuing or further breach by the Recipient Party, without showing or proving any actual damages sustained by the Disclosing Party. (g) The obligations of the Recipient Party under this Section 6 shall survive termination or nonrenewal of this Agreement for a period of thee (3) years. For the avoidance of doubt, the customer and sub-distributor lists of Distributor shall be deemed to constitute Proprietary Information under this agreement.

7

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





7. DURATION & TERMINATION. (a) Effective Date and Duration. This Agreement shall become effective on the date first written above and shall continue in effect for a period of Three (3) years. (b) Distributor Option to Renew. Distributor shall have the option to renew this Agreement for an additional Three (3) year period by providing prior written notice to Company within Ninety (90) days of the end of the initial period of this Agreement. (c) Termination. Either Party may terminate this Agreement prior to its expiration upon the occurrence of either of the following: (i) the other Party becomes insolvent, or institutes (or there is instituted against it) proceedings in bankruptcy, insolvency, reorganization or dissolution, makes an assignment for the benefit of creditors or becomes nationalized or has any of its material assets confiscated or expropriated; or (ii) the other Party (in this case, the breaching Party) fails to perform any of its obligations hereunder and fails to correct such failure within Ninety (90) calendar days after receiving written demand therefore from the non-breaching Party, specifying the failure in sufficient detail for the breaching Party to correct such failure; provided, however, that upon a second breach of the same obligation by such Party, the other Party may forthwith terminate this Agreement upon notice to the breaching Party. 8. RIGHTS OF PARTIES AT TERMINATION. (a) Obligations After Termination. In the event that this Agreement is terminated or expires on its own terms, Company shall have no further responsibilities to Distributor except that in the event the Agreement terminates for any reason other than a breach hereof by Distributor, Company shall be obligated to process orders accepted by Company prior to the effective date of such termination or expiration or within Ninety (90) days thereafter. (b) Survival. Notwithstanding anything to the contrary set forth herein, no termination of this Agreement shall relieve any Party from any obligations hereunder which are outstanding on, or relate to matters or claims occurring or arising prior to, the date of such termination or which survive such termination by their own terms or nature.

8

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





9. INDEMNIFICATION & LIMITATION OF LIABILITY. (a) Indemnification. Each Party (Indemnifying Party) shall indemnify, hold harmless and defend the other Party (Indemnified Party) and its officers, directors, agents, employees, and affiliates, from and against any and all claims, demands, actions, costs, expenses, liabilities, judgments, causes of action, proceedings, suits, losses and damages of any nature, which are threatened or brought against, or are suffered or incurred by, the Indemnified Party or any such person to the extent caused directly by acts or omissions of the Indemnifying Party relating to this Agreement, including without limitation (i) any negligent or tortious conduct, (ii) any breach of any of the representations, warranties, covenants or conditions of the Indemnifying Party contained in this Agreement, (iii) any violation of applicable laws or regulations, (iv) infringement or violation of any patent, copyright, trade secret, or other proprietary interest of any third party, and (v) any breach of any express or implied warranties relating to the Products, including implied warranties of merchantability and fitness for a particular purpose. (b) Limitation of Liability.IN NO EVENT SHALL EITHER PARTY BE LIABLE TO THE OTHER FOR ANY SPECIAL, INDIRECT, EXEMPLARY OR CONSEQUENTIAL DAMAGES ARISING OUT OF THIS AGREEMENT OR PURCHASE OR USE OF THE PRODUCTS. 10. FORCE MAJEURE. Neither Party shall be held liable for any failure to perform that is due to any cause or circumstance beyond the reasonable control of such Party, including without limitation a demand for such Products and other products manufactured by Company which exceeds Company's ability to supply them, earthquakes, fire, accidents, floods, storms, other Acts of God, riots, wars, rebellions, strikes, lockouts or other labor disturbances, national or international emergencies, failure to secure materials or equipment from usual sources of supply, failure of carriers to furnish transportation, government rules, regulations, acts, orders, world financial crisis, restrictions or requirements or any other cause or circumstance beyond the reasonable control of such Party. No such inability to deliver or delay in delivery shall invalidate the remainder of this Agreement.

9

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





11. TRADEMARKS. Distributor shall not dispute or contest for any reason whatsoever, directly or indirectly, during the term of this Agreement and thereafter, the validity, ownership or enforceability of any of the trademarks of Company, nor directly or indirectly attempt to acquire or damage the value of the goodwill associated with any of the trademarks of Company, nor counsel, procure or assist any third Party to do any of the foregoing. Distributor will not institute any proceedings with respect to the trademarks of Company either in Distributor's own name or on behalf of Company without express written permission of Company. Distributor shall assign to Company, without charge, any rights in the trademarks of Company that may inure to the benefit of Distributor pursuant to this Agreement or otherwise. Distributor shall execute any documents or do any acts that may be required to accomplish the intent of this Section. 12. GENERAL PROVISIONS. (a) Amendments. This Agreement may be amended only by a writing signed by each of the Parties, and any such amendment shall be effective only to the extent specifically set forth in such writing. (b) Governing Law. This Agreement is a contract under the laws of the State of Florida and for all purposes shall be governed by and construed in accordance with the substantive laws of the State of Florida, without regard to its principles of conflicts of laws provisions. (c) Disputes. The Parties shall seek to resolve any dispute, controversy or claim arising out of or in connection with this Agreement, including without limitation, any dispute regarding the enforceability of any provision, through good faith negotiations between them within Thirty (30) days of any notice of dispute being served or such longer period of time as may be mutually agreed between the Parties. If the Parties are unable to resolve the dispute within this timeframe, and one or both parties one or both parties desire to pursue the dispute, the complaining party must submit the dispute to binding arbitration in accordance with the rules and regulations of the American Arbitration Association. The Parties will share equally the cost of arbitrating such dispute. The arbitrator(s) shall not be empowered to award punitive or other damages in excess of compensatory damages, and both parties irrevocably waive the right to any such damages. Judgment on the award rendered by the arbitrator(s) may be entered by any court having jurisdiction over the dispute. In the event that the parties cannot agree upon an arbitrator within a Thirty (30) day period, each party shall designate an arbitrator and those two arbitrators shall choose a third arbitrator, with that third arbitrator serving as the sole arbitrator of the dispute.

10

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





(d) Assignment. Neither Party shall assign, pledge or otherwise transfer any of its rights, interest or obligations hereunder, whether by operation of law or otherwise, without the prior express written consent of the other Party. (e) Counterparts; Email Execution. This Agreement may be executed in any number of counterparts, and by each of the Parties on separate counterparts, each of which, when so executed, shall be deemed an original, but all of which shall constitute but one and the same instrument. Delivery of an executed counterpart of this Agreement by email shall be equally as effective as delivery of a manually executed counterpart of this Agreement. Any Party delivering an executed counterpart of this Agreement by email shall also deliver a manually executed counterpart of this Agreement, but the failure to deliver a manually executed counterpart shall not affect the validity, enforceability or binding effect of this Agreement. (f) Cumulative Remedies. The rights and remedies of the Parties hereunder are cumulative and not exclusive of any rights or remedies which the Parties would otherwise have. No single or partial exercise of any such right or remedy by a Party, and no discontinuance of steps to enforce any such right or remedy, shall preclude any further exercise thereof or of any other right or remedy of such Party. (g) Entire Agreement. This Agreement contains the entire agreement of the Parties with respect to the transactions contemplated hereby and supersedes all prior written and oral agreements, and all contemporaneous oral agreements, relating to such transactions. (h) Exhibits and Schedules.The exhibits or schedules attached hereto are an integral part hereof and all references herein to this Agreement shall include such exhibits and schedules.

11

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





(i) Notices. Unless otherwise specifically provided herein, all notices, consents, requests, demands and other communications required or permitted hereunder: (i) shall be in writing; (ii)) shall be sent by email, certified or registered U.S. mail, or reliable express delivery service (with a copy sent by one of the foregoing means), charges prepaid as applicable, to the appropriate address(es) or number(s) set forth below; and (iii) shall be deemed to have been given on the date of receipt by the addressee, as evidenced by (A) a receipt executed by the addressee (or a responsible person in his or her office), the records of the Person delivering such communication or a notice to the effect that such addressee refused to claim or accept such communication, if sent by messenger, U.S. mail or express delivery service, or (B) a receipt generated by the sender's email showing that such communication was sent to the appropriate number on a specified date, if sent by email. All such communications shall be sent to the addresses for each Party as first set forth above, or to such other addresses or numbers as any Party may inform the others by giving Seven (7) days prior notice. (j) Severability. Any provision of this Agreement which is prohibited or unenforceable in any jurisdiction shall, as to such jurisdiction, be ineffective to the extent of such prohibition or unenforceability without invalidating the remaining portions hereof or affecting the validity or enforceability of such provision in any other jurisdiction. (k) Successors and Assigns. This Agreement shall be binding upon and shall inure to the benefit of each of the Parties and their respective successors and permitted assigns.

12

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





IN WITNESS WHEREOF, this Agreement was signed by the Parties under the hands of their duly authorised officers and made effective as of the date first written above. Luiz Augusto Matavelli Bacetti B & C General Warehouse Corporation LLC Date: 04th, August, 2019. xxxxxxxx xxxxxxxx Date:

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019





SCHEDULE A PRICES AND DISCOUNT VOLUME PRICES Subject to Company's right to increase the price only once per year per the terms and restrictions contained in the Agreement, and Company's right to decrease the price at any time upon notice, the Products shall be sold by Company to Distributor at the following Prices and Volume Discount Prices. Prices are in US Dollars. ● $9 (US) per kilogram Ex-work Incoterms. (Brazil Farm). Distributor will be appropriately credited should Distributor make payment related to an order and later determine that it had achieved a greater discount per the above.

Source: GENTECH HOLDINGS, INC., 1-A, 8/8/2019 
Question: Highlight the parts (if any) of this contract related to Covenant Not To Sue that should be reviewed by a lawyer. Details: Is a party restricted from contesting the validity of the counterparty’s ownership of intellectual property or otherwise bringing a claim against the counterparty for matters unrelated to the contract?
answer:
Distributor shall not dispute or contest for any reason whatsoever, directly or indirectly, during the term of this Agreement and thereafter, the validity, ownership or enforceability of any of the trademarks of Company, nor directly or indirectly attempt to acquire or damage the value of the goodwill associated with any of the trademarks of Company, nor counsel, procure or assist any third Party to do any of the foregoing