Master Subscription & Enterprise User Agreement
IMPORTANT LEGAL NOTICE: THIS MASTER AGREEMENT GOVERNS ALL ACCESS TO AND USE OF THE NEXTRACE GLOBAL PLATFORM, DETERMINISTIC GRAPH TRAVERSAL ENGINES, ALLIED MULTI-JURISDICTION COPROCESSORS, DEFENSE PRIME & SUPPLY CHAIN SHIELD, SEC EDGAR EXHIBIT 21 INGESTION PIPELINES, FASTAPI SCREENING APIS, AND EAR § 762 / FRE 902(13) WORM AUDIT RECORD GENERATORS. BY CREATING AN ACCOUNT, EXECUTING AN ORDER FORM, OR TRANSMITTING API CALLS, CUSTOMER UNCONDITIONALLY ASSENTS TO THESE TERMS.
1.0 Scope, Platform Architecture, and Non-Advisory Status
1.1 Deterministic Computational Tool: NexTrace Global, Inc. ("NexTrace", "Company", "we", or "us") provides a deterministic corporate graph traversal engine, multi-jurisdiction sanctions coprocessor, defense supply chain analyzer, and export compliance verification platform (the "Platform"). The Platform executes recursive network walks using Python NetworkX libraries, aggregates sovereign screening lists (OFAC, BIS, DDTC, EU CFSP, UK OFSI, UN), parses SEC EDGAR Form 10-K Exhibit 21 corporate hierarchies under 17 CFR § 229.601(b)(21), and computes statutory algebraic formulations under the OFAC 50% Rule (31 CFR § 501 / FAQ 401).
1.2 No Legal Advice or Official Agency Determination: NexTrace is an independent software technology provider. The Platform, its outputs, API responses, risk tier classifications (CLEARED, MANUAL_REVIEW, CONSTRUCTIVELY_BLOCKED, DIRECT_MATCH_DENIED, CRITICAL_PROHIBITION), and cryptographic PDF certificates do NOT constitute legal counsel, an irrevocable export authorization, or an official advisory opinion from OFAC, BIS, DDTC, CBP, the European Commission, the UK Foreign, Commonwealth & Development Office, or any other government authority. Customer acknowledges that full legal compliance under applicable export control and sanctions statutes remains Customer's non-delegable operational obligation.
1.3 Unauthorized Practice of Law (UPL) Disclaimer: NexTrace is not a law firm, does not employ attorneys acting in a representative capacity for Customer, and is not a licensed customs broker. Neither the delivery of the Platform, the generation of audit dossiers, nor any communication with NexTrace personnel constitutes legal representation or forms an attorney-client relationship. All calculations, risk badges, graph walks, and reports are algorithmic assessments derived from public government datasets and user-supplied parameters. For binding commodity classifications, license applications, or legal representation, Customer must consult qualified export control counsel, the Bureau of Industry and Security (BIS SNAP-R), or the Office of Foreign Assets Control (OFAC).
2.0 Statutory Export Control Liability Allocation
2.1 Strict Liability Regimes: Export and sanctions violations under the International Emergency Economic Powers Act ("IEEPA", 50 U.S.C. § 1705), the Export Control Reform Act ("ECRA", 50 U.S.C. § 4801 et seq.), the Arms Export Control Act ("AECA", 22 U.S.C. § 2778), and allied statutes are strict liability offenses. Statutory civil penalties exceed $356,579 per violation (or twice the gross transaction value) under U.S. law without regard to intent or negligence.
2.2 Principal Party in Interest Warranty: Customer represents and warrants that as the U.S. Principal Party in Interest ("USPPI") or Foreign Principal Party in Interest ("FPPI") pursuant to 15 CFR § 758.1, Customer maintains an affirmative, independent Internal Compliance Program ("ICP"). Customer shall not rely exclusively on automated software outputs to authorize the physical export, intangible transfer, software release, or deemed export of commodities, software, technology, or defense articles without human verification of red flags.
2.3 Red Flag Deconfliction Duty: If the Platform assigns an escalated risk status indicating minority blocked equity, address deconfliction matches, supply chain taint, or transatlantic divergence, Customer covenants to freeze the transaction until its designated Export Compliance Officer ("ECO") executes an affirmative end-use/end-user deconfliction check.
2.4 Anti-Circumvention, Anti-Structuring & Red-Line Probing Prohibition: Customer expressly represents, warrants, and covenants that it will NOT utilize the Platform, its screening sandboxes, or API endpoints to: (a) reverse-engineer, probe, fuzz, or map algorithmic boundary thresholds (including the OFAC 50% Rule corridor, EAR § 734 de minimis limits, or BIS Entity List match scores) for the purpose of structuring corporate holdings, shell entities, or routing pathways to evade detection; (b) assist, facilitate, or enable transactions for any designated, blocked, or debarred party; or (c) test synthetic corporate permutations on behalf of sanctioned foreign entities. Any such activity constitutes an immediate, incurable material breach of this Agreement, authorizing NexTrace to terminate service without notice or refund, preserve immutable forensic telemetry, and make voluntary disclosures to the BIS Office of Export Enforcement (OEE) and OFAC Enforcement Division pursuant to 15 CFR § 764.5 and 31 CFR § 501.603.
3.0 Specialized Module Covenants & Operational Restraints
Customer explicitly covenants to adhere to the specialized statutory covenants governing each active module:
3.1 Aerospace, Defense, & Munitions (ITAR / EAR 600-Series)
For transactions involving articles enumerated on the United States Munitions List ("USML", 22 CFR Part 121) or Commerce Control List 600-series (e.g., 9A610, 0A606):
- Customer shall screen all direct counterparties and upstream intermediaries against the DDTC Debarred Parties List.
- Customer warrants that no defense articles or technical data shall be transferred to entities affiliated with proscribed destinations under 22 CFR § 126.1.
- Customer warrants compliance with DoD Section 1260H Chinese Military Company restrictions and NDAA Section 889 telecommunications prohibitions.
3.2 Advanced Semiconductors, Compute & EDA (ECCN 3A090 / 4A090)
For transactions involving advanced integrated circuits, total processing performance (TPP ≥ 4800), and GAAFET architectures:
- Customer shall independently evaluate Foreign Direct Product ("FDP") rules under 15 CFR § 734.9(h), (i), and (j).
- Customer warrants strict adherence to Executive Order 14105 and 31 CFR Part 850 governing outbound investment in covered foreign technologies.
- Customer covenants that no items shall be supplied to support advanced compute development at facilities located in Country Group D:5 without a specific BIS license.
3.3 Allied Multi-Jurisdiction Engine & Transatlantic Divergence (Add-On 01)
For screening across the Quad-Authority Matrix (US OFAC/BIS, EU CFSP, UK OFSI, UN):
- Regulatory Divergence: Sovereign sanctions regimes frequently diverge. NexTrace computes mathematical concordance and identifies asymmetric designations, but Customer remains solely responsible for resolving conflicts of law (including the EU Blocking Statute, Council Regulation (EC) No 2271/96).
- UK Beneficial Control: Evaluations under UK SAMLA 2018 Regulation 7 (Conditions of Control) require human validation of corporate directorships and power-to-appoint provisions.
- EU 50% Aggregate Ownership: Customer covenants to verify aggregate multi-party majority holdings pursuant to Council Regulation (EU) No 269/2014 and 833/2014 Article 2.
3.4 Defense Prime & Supply Chain Shield (Add-On 02) & Customs Detention Disclaimers
For supply chain multi-tier screening (DoD 1260H, DHS UFLPA 19 U.S.C. § 1307, BIS CHPL Tiers 1–4):
- DFARS Mandatory Flowdown: Customer shall enforce mandatory DFARS 252.225-7072 subcontractor barring across all covered defense prime contracts.
- EXCLUSION OF CUSTOMS SEIZURE & DETENTION DAMAGES: The Platform identifies upstream rebuttable presumption taint and calculates detention probabilities. NEXTRACE DOES NOT WARRANT THAT U.S. CUSTOMS AND BORDER PROTECTION (CBP) WILL RELEASE DETAINED CARGO, CANCEL WITHHOLD RELEASE ORDERS (WROs), OR GRANT UFLPA STATUTORY EXCEPTIONS. ALL EXPENSES RELATING TO DEMURRAGE, WAREHOUSING, PORT DETENTIONS, SEIZURE OF MERCHANDISE, AND RESPONSES TO CBP FORM 28 / FORM 29 ARE CUSTOMER'S SOLE FINANCIAL RESPONSIBILITY.
3.5 SEC EDGAR Exhibit 21 & Beneficial Ownership Graph (Add-On 03)
For corporate hierarchy and beneficial ownership graph resolution:
- Item 601(b)(21) Filing Basis: Corporate trees are parsed from official SEC Form 10-K Exhibit 21 filings submitted under penalty of federal perjury (18 U.S.C. § 1001). Customer acknowledges that reporting registrants may omit immaterial or exempt non-significant subsidiaries pursuant to 17 CFR § 229.601(b)(21)(ii). NexTrace models the official disclosure "as filed."
- Algebraic OFAC 50% Rule Calculations: Cascading constructive blocking calculations represent deterministic mathematical formulations based on published OFAC guidance (31 CFR § 501 / FAQ 401). Customer remains obligated to verify off-balance-sheet joint ventures or unfiled holding entities.
4.0 Strict Prohibition on Classified & ITAR Technical Data
4.1 Commercial Infrastructure Notice: The Platform operates on commercial unclassified cloud infrastructure designed solely for export control and trade compliance administration.
5.0 EAR § 762 Safe Harbor, WORM Merkle Vault, & FRE 902(13)
5.1 Evidentiary Admissibility (FRE 902(13)): Audit certificates generated by NexTrace (Sanctions Clearance, Defense Shield CBP Form 28, and SEC EDGAR UBO Certificates) are anchored to an immutable Merkle root ledger with SHA-256 digital seals. These records constitute self-authenticating electronic business records under Federal Rules of Evidence 902(13) and 902(14). Any hex-editing, text manipulation, or alteration of the certificate voids the seal and forfeits all safe harbor defense protections.
5.2 Voluntary Self-Disclosure ("VSD") Cooperation: In the event a screened counterparty is subsequently designated by OFAC or BIS, Customer is entitled to extract historical point-in-time WORM snapshots to substantiate a mitigating VSD submission under 15 CFR § 764.5 and the DOJ National Security Division Enforcement Policy.
5.3 Five-Year Recordkeeping Duty: Customer shall retain exported certificates for at least five (5) years in compliance with 15 CFR § 762.6 and 31 CFR § 501.601.
6.0 Commercial Add-Ons & Multi-Tenant Entitlement Gating
6.1 Modular Subscriptions: Access to specialized engines is governed by modular commercial add-ons:
- Add-On 01: Allied Multi-Jurisdiction Engine ($499/mo) — Quad-Authority Matrix, EU CFSP, UK OFSI, UN, and Transatlantic Divergence alerts.
- Add-On 02: Defense Prime & Supply Chain Shield ($499/mo) — DoD 1260H, DHS UFLPA 4-tier lineage, BIS CHPL 50 HS codes, and CBP Form 28 PDFs.
- Add-On 03: SEC EDGAR & UBO Corporate Graph ($499/mo) — Item 601(b)(21) ingestion, NetworkX ownership trees, and FRE 902(13) UBO audit certificates.
- Global Defense & Trade Suite ($1,999/mo) — Complete access to all three engines with unlimited exports and dedicated ERP coprocessors.
6.2 Prohibition on Reverse-Engineering & Data Scraping: Customer covenants not to crawl, scrape, extract, or reverse-engineer the normalized entity graph topologies, consolidated cross-reference indices, or API responses for the purpose of constructing competing sanctions or corporate intelligence databases.
6.3 Commercial Billing & Refund Policy Incorporation: Subscription payment processing, auto-renewal schedules, electronic digital fulfillment, cancellation terms, and refund eligibility standards are governed by our Commercial Billing, Digital Delivery & Refund Policy, which is expressly incorporated into this Agreement by reference.
7.0 ERP Webhook Gating, Inbound SMTP, & Service Level Agreements
7.1 Mandatory "Fail-Closed" Circuit Breaker: NexTrace targets a 99.9% uptime SLA for the /api/v1/webhooks/erp-pre-check order-gating endpoint. Customer's ERP integration (SAP, NetSuite, Oracle) MUST implement a fail-safe circuit breaker: in the event of an unreachable API response or timeout, Customer's ERP MUST default to HOLD_ORDER_FOR_REVIEW rather than automatic release. NexTrace disclaims all liability for shipments released during a network outage where Customer configured a "fail-open" release state.
7.2 Inbound Email Transmission Warranties: Where Customer utilizes Inbound SMTP (ports 25/2525) or email webhooks (Postmark/Resend), Customer warrants that it possesses all necessary corporate authorizations to route transaction payloads through the Platform.
8.0 Limitation of Liability & Exclusion of Statutory Penalties
8.1 EXCLUSION OF STATUTORY AND CONSEQUENTIAL DAMAGES:
TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL NEXTRACE GLOBAL, INC., ITS DIRECTORS, OFFICERS, EMPLOYEES, ENGINEERS, OR RESELLERS BE LIABLE TO CUSTOMER FOR ANY CIVIL PENALTIES, REGULATORY FINES (INCLUDING OFAC, BIS, DDTC, OR DOJ PENALTIES), STATUTORY FORFEITURES, LOSS OF EXPORT PRIVILEGES (DENIAL ORDERS), SEIZURE OF CARGO BY U.S. CUSTOMS AND BORDER PROTECTION, CONTRACT TERMINATIONS FOR DEFAULT UNDER DFARS/FAR, LOST PROFITS, OR INDIRECT, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES.
8.2 TOTAL AGGREGATE LIABILITY CAP:
THE TOTAL AGGREGATE LIABILITY OF NEXTRACE ARISING OUT OF OR RELATING TO THIS AGREEMENT, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), OR STRICT LIABILITY, SHALL UNDER NO CIRCUMSTANCES EXCEED THE TOTAL SUBSCRIPTION FEES ACTUALLY PAID BY CUSTOMER TO NEXTRACE IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.
8.3 CONSPICUOUS DISCLAIMER OF ALL WARRANTIES (UCC § 2-316):
THE PLATFORM, DOCUMENTATION, APIS, GRAPHS, PDF CERTIFICATES, AND ALL CONTENT ARE PROVIDED STRICTLY ON AN "AS IS," "AS AVAILABLE," AND "WITH ALL FAULTS" BASIS. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NEXTRACE DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, TIMELINESS, COMPLETENESS, CONTINUOUS AVAILABILITY, OR FREEDOM FROM PROGRAM ERRORS OR OMISSIONS. CUSTOMER ASSUMES SOLE OPERATIONAL AND LEGAL RESPONSIBILITY FOR ITS COMPLIANCE DETERMINATIONS.
9.0 Indemnification by Customer
Customer shall defend, indemnify, and hold harmless NexTrace, its affiliates, officers, and licensors from and against all third-party claims, government investigations, civil fines, administrative enforcement actions, and legal defense expenses arising out of: (a) Customer's export, re-export, or deemed export of items in violation of U.S., EU, UK, or international trade controls; (b) Customer's failure to maintain an independent Internal Compliance Program; (c) Customer's submission of classified national security data or ITAR technical data to the Platform; or (d) unauthorized alterations or modifications to cryptographic audit certificates.
10.0 Governing Law, Mandatory Arbitration, & Class Waiver
10.1 Governing Law: This Agreement is governed by the laws of the State of Delaware and the federal laws of the United States, without regard to conflict of laws principles.
10.2 Binding Commercial Arbitration: Any dispute or claim arising under this Agreement shall be resolved through confidential binding arbitration administered by the American Arbitration Association ("AAA") under its Commercial Arbitration Rules, before a single neutral arbitrator possessing at least ten (10) years of specialized experience in U.S. export control regulation. The seat of arbitration shall be Wilmington, Delaware.
10.3 Class Action Waiver: CUSTOMER AND NEXTRACE AGREE THAT CLAIMS MAY BE BROUGHT ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.
10.4 Express Waiver of Jury Trial: TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, EACH PARTY UNCONDITIONALLY AND IRREVOCABLY WAIVES ALL RIGHTS TO A TRIAL BY JURY IN ANY ACTION, SUIT, COUNTERCLAIM, OR OTHER LEGAL PROCEEDING ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE PLATFORM, OR TRANSACTIONS CONTEMPLATED HEREUNDER.
11.0 Corporate Shield, Subpoena Protocols & Legal Notices
11.1 Term and Termination: This Agreement remains effective throughout Customer's active subscription. Upon termination, Customer retains access to exported EAR § 762 WORM certificates for statutory compliance audits.
11.2 Corporate Non-Recourse & Individual Shield: All claims, obligations, and liabilities under this Agreement are solely the corporate obligations of NexTrace Global, Inc., a Delaware corporation. No recourse shall be had, whether under any statute, rule, common law, equity, or otherwise, against any incorporator, founder, shareholder, member, director, officer, employee, contractor, agent, or representative of NexTrace personally. Customer expressly waives and releases all rights to assert personal liability or pierce the corporate veil under any circumstance or legal theory.
11.3 Law Enforcement Subpoena & Compulsory Legal Process: NexTrace complies with lawful subpoenas, court orders, national security letters, and formal inquiries issued by U.S. federal courts, the Department of Justice, the Bureau of Industry and Security (OEE), OFAC, Homeland Security Investigations (HSI), and the Department of Defense. Disclosure of audit logs, search histories, or account telemetry pursuant to compulsory legal process under the Stored Communications Act (18 U.S.C. § 2701 et seq.) or applicable law shall under no circumstances constitute a breach of confidentiality, violation of trade secrecy, or give rise to civil liability.
11.4 Legal Contact & Notices: Questions or formal legal notices regarding this Agreement should be directed to NexTrace Legal Affairs at: