END USER LICENSE AGREEMENT CloudNestle BedrockWise - AWS Marketplace SaaS Product Effective Date: Upon Subscription Activation Last Updated: May 9, 2026 This End User License Agreement ("Agreement") is a legal agreement between you ("Customer," "you," or "your") and CloudNestle ("Provider," "we," "us," or "our") governing your use of the CloudNestle BedrockWise service ("Service") purchased through AWS Marketplace. By subscribing to the Service through AWS Marketplace, you agree to be bound by the terms of this Agreement. 1. DEFINITIONS 1.1 "Service" means the CloudNestle BedrockWise SaaS application, including all features, APIs, documentation, and updates provided during the subscription term. 1.2 "Customer Data" means AWS configuration metadata collected from your AWS account(s) through the cross-account IAM role you provision for the Service. 1.3 "Scan" means a single execution of the Amazon Bedrock usage analysis and cost optimization against your AWS account configuration. 1.4 "Remediation" means a single automated fix applied to your AWS account configuration through the Service. 1.5 "Subscription Term" means the period during which you have an active subscription through AWS Marketplace. 2. LICENSE GRANT 2.1 Subject to the terms of this Agreement and payment of applicable fees through AWS Marketplace, Provider grants you a non-exclusive, non-transferable, revocable license to access and use the Service during the Subscription Term. 2.2 The license is limited to your internal business purposes and the AWS account(s) you have connected to the Service. 3. USAGE AND RESTRICTIONS 3.1 You may use the Service to: (a) Conduct Well-Architected security reviews of your AWS accounts (b) Apply automated remediations to your AWS configurations (c) Generate reports and improvement plans (d) Access the Service dashboard and APIs 3.2 You may NOT: (a) Reverse engineer, decompile, or disassemble the Service (b) Sublicense, resell, or redistribute the Service or its output (c) Use the Service to provide a competing product or service (d) Attempt to gain unauthorized access to the Service infrastructure (e) Use the Service in violation of applicable laws or regulations (f) Remove or modify any proprietary notices or labels (g) Exceed the usage limits of your subscription plan 4. DATA HANDLING 4.1 Data Collected: The Service collects AWS configuration metadata from your account(s) through a read-only cross-account IAM role that you provision. This includes resource configurations, security settings, and compliance status. No personally identifiable information (PII) is collected. 4.2 Data Storage: Customer Data is stored in encrypted Amazon DynamoDB tables, isolated by customer account ID. Data is encrypted at rest using AWS-managed encryption keys. 4.3 Data Retention: Customer Data is retained for the duration of your subscription plus 30 days. After subscription termination, data is permanently deleted within 30 days. 4.4 Data Deletion: You may request deletion of your data at any time by contacting support@cloudnestle.com. Deletion will be completed within 14 business days. 4.5 Data Isolation: Each customer's data is logically isolated using partition keys in DynamoDB. No customer can access another customer's data. 4.6 Data Sharing: We do not sell, share, or transfer your data to third parties. Data is processed solely to provide the Service. 5. BILLING AND PAYMENT 5.1 All billing is handled exclusively through AWS Marketplace. You will be charged according to the pricing dimensions displayed on the AWS Marketplace listing. 5.2 Usage-based charges (reviews and remediations) are metered hourly and reported to AWS Marketplace for billing. 5.3 We do not collect any payment information directly from you. 6. SERVICE AVAILABILITY 6.1 We target 99.9% uptime for the Service, excluding scheduled maintenance and AWS infrastructure outages. 6.2 The Service depends on AWS infrastructure services. Outages in underlying AWS services (Bedrock, DynamoDB, Lambda) may affect Service availability. 6.3 We will provide reasonable notice of scheduled maintenance when possible. 7. SUPPORT 7.1 Support is available via email at support@cloudnestle.com. 7.2 We aim to respond to support requests within 24 business hours. 7.3 Critical security issues will be addressed with highest priority. 8. INTELLECTUAL PROPERTY 8.1 The Service, including all software, algorithms, documentation, and trademarks, is and remains the intellectual property of CloudNestle. 8.2 You retain all rights to your Customer Data and AWS account configurations. 8.3 Reports and recommendations generated by the Service are provided for your use but the underlying methodology remains our intellectual property. 9. LIMITATION OF LIABILITY 9.1 TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL PROVIDER BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL. 9.2 PROVIDER'S TOTAL AGGREGATE LIABILITY UNDER THIS AGREEMENT SHALL NOT EXCEED THE FEES PAID BY CUSTOMER IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM. 9.3 The Service provides recommendations based on automated analysis. Provider is not liable for any damages resulting from actions taken based on Service recommendations. You are responsible for reviewing and approving all changes to your AWS environment. 10. DISCLAIMER OF WARRANTIES 10.1 THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. 10.2 Provider does not warrant that the Service will be uninterrupted, error-free, or that all security issues will be identified. 11. TERMINATION 11.1 Either party may terminate this Agreement at any time by canceling the subscription through AWS Marketplace. 11.2 Upon termination: (a) Your access to the Service will be revoked (b) Customer Data will be retained for 30 days, then permanently deleted (c) Any pending metering charges will be finalized and billed through AWS Marketplace 11.3 Sections 8, 9, 10, and 12 survive termination. 12. GENERAL PROVISIONS 12.1 Governing Law: This Agreement is governed by the laws of India, without regard to conflict of law principles. 12.2 Entire Agreement: This Agreement, together with the AWS Marketplace Terms and Conditions, constitutes the entire agreement between the parties. 12.3 Modifications: We may update this Agreement with 30 days notice. Continued use after the notice period constitutes acceptance. 12.4 Severability: If any provision is found unenforceable, the remaining provisions remain in full force. 12.5 Assignment: You may not assign this Agreement without our prior written consent. 13. CONTACT INFORMATION CloudNestle Email: support@cloudnestle.com Website: https://cloudnestle.com For security incidents: security@cloudnestle.com