Provider: Scientific Steps for Programming LLC
Last updated: [●]
Version: [●]
Key points (summary only — the full Terms below govern)
- We are a technology provider, not a publisher. Peerline is a hosted platform that lets universities, research centres and other academic institutions run their own peer-reviewed journals. Each Institution is the publisher of its journals and is solely responsible for their content, peer review, editorial decisions, ethics, licensing and any article processing charges (APCs).
- No indexing guarantee. The platform is built around recognised indexing and metadata standards, but we do not and cannot guarantee that any journal will be accepted by Web of Science, Scopus, DOAJ, Google Scholar or any other index or database.
- Your data is yours. Institutions own their content and data. We process it only to provide the Service, as a data processor, under Annex A (Data Processing Terms) and our Privacy Policy. You can download backups and request a full export in standard formats at any time.
- The AI assistant is advisory only. Its outputs may be inaccurate; editorial decisions always remain with humans; each journal can switch it off.
- Fees are charged per journal per year, annually in advance, as set out in your Order Form. Prices exclude applicable taxes unless stated. APCs are collected by the Institution through its own payment accounts; we never collect or hold them.
- Subscriptions renew automatically each year unless either party gives notice at least [30/60] days before the renewal date.
- On termination you have a 90-day transition period with read-only access to export your data, after which it is deleted.
- Our liability is capped at the fees paid in the 12 months before the claim, with the usual exclusions and the exceptions required by law.
- Jordanian law governs these Terms.
1. Introduction and acceptance
1.1 These Terms and Conditions (the "Terms") govern access to and use of the Peerline platform and related services (the "Service") provided by Scientific Steps for Programming LLC, a limited liability company registered in the Hashemite Kingdom of Jordan (the "Provider", "we", "us" or "our").
1.2 These Terms apply to two relationships:
(a) the contractual relationship between the Provider and each Institution that subscribes to the Service (Parts A to D and Annex A); and
(b) the use of the Service by End Users (authors, reviewers, readers, subscribers and other individuals who visit or use a journal site), who are bound in particular by Sections 5 (Accounts and Users), 15 (Acceptable Use), 17 (AI Assistant), 21 (Warranties and Disclaimers) and 23 (Limitation of Liability), and Part D, as applicable.
1.3 Institutions. An Institution accepts these Terms by signing an Order Form that references them, by accepting them electronically when creating an account or starting a trial, or by using the Service. The individual accepting on behalf of an Institution represents that he or she has authority to bind it.
1.4 End Users. An End User accepts these Terms by creating an account on, or otherwise using, any journal site hosted on the Service. If you do not agree, do not use the Service.
1.5 Journal policies. Each journal hosted on the Service has its own editorial, ethical, publication, copyright, privacy and fee policies, which are adopted and published by the Institution that operates it. Those policies govern the relationship between the journal and its authors, reviewers and readers. The Provider is not a party to that relationship. If there is a conflict between a journal policy and these Terms regarding use of the platform itself (for example, security or acceptable use), these Terms prevail.
1.6 Electronic acceptance. The parties agree that acceptance by electronic means (including clicking an acceptance button, an electronic signature on an Order Form, or exchange of emails) is valid and binding to the extent permitted by applicable electronic transactions law, and that electronic records of acceptance may be used as evidence.
2. Definitions
In these Terms:
- "Agreement" means, for each Institution, the Order Form, Annex A (Data Processing Terms), these Terms and the policies referenced in them, read together in the order of precedence set out in Section 30.6.
- "AI Assistant" means the optional artificial-intelligence-based features of the Service described in Section 17.
- "Authorised Staff" means the Institution's employees, contractors and volunteers to whom the Institution grants staff roles on the Service (such as journal managers, editors, section editors, copyeditors, production staff and accountants).
- "Customer Content" means all content, data and materials submitted to, uploaded to, created in or published through the Service by or on behalf of the Institution or its End Users, including manuscripts, reviews, editorial correspondence, metadata, images, files, policies, user records and statistics derived from them.
- "End User" means any individual, other than Authorised Staff acting in that capacity, who registers on or uses a journal site, including authors, reviewers, readers and newsletter subscribers.
- "Fees" means the subscription fees and any fees for Optional Services set out in an Order Form or quotation.
- "Institution" or "Customer" means the university, research centre, academic institution or other organisation that subscribes to the Service and is identified in the Order Form or account registration.
- "Journal" means each journal that the Institution operates on the Service and for which a subscription has been purchased.
- "Optional Services" means the services described in Section 9.
- "Order Form" means the order form, quotation, proposal or online sign-up that is accepted by both parties and references these Terms, specifying the Journals, subscription term, Fees and any special terms.
- "Platform" means the Provider's hosted, multi-tenant software platform, including its software, interfaces, templates, themes, documentation and updates.
- "Subscription Term" means the initial term stated in the Order Form and each renewal term.
- "Third-Party Services" means services not provided by the Provider, as described in Section 18.
PART A — THE SERVICE
3. Description of the Service
3.1 The Service is a hosted, multi-tenant software-as-a-service platform enabling Institutions to launch and operate peer-reviewed journals. Depending on the subscription plan selected in the Order Form, the Service may include:
(a) a journal launch wizard with template policies and documents;
(b) online submission, peer-review management and editorial decision workflows;
(c) production tools, including conversion of manuscripts (e.g. Word) into HTML, PDF and JATS XML;
(d) publication of issues and articles on the journal website;
(e) tools for depositing DOIs and metadata with Crossref using the Journal's own Crossref membership and DOI prefix;
(f) integration with similarity-checking services using the Journal's own account;
(g) ORCID integration;
(h) exposure of metadata for Google Scholar and through OAI-PMH;
(i) optional exports to indexing and digital-preservation services;
(j) newsletters to opted-in subscribers;
(k) issuance of certificates (e.g. for reviewers or authors) with public online verification;
(l) usage and editorial statistics;
(m) an optional AI Assistant;
(n) themes, and optional bespoke custom theme design; and
(o) an institution portal for managing multiple Journals.
3.2 Domains. Each Journal is served on a domain or subdomain obtained, owned and controlled by the Institution. The Institution is responsible for registering and renewing its domain and for configuring its DNS records as reasonably instructed by the Provider. The Provider is not responsible for any unavailability caused by domain expiry, DNS misconfiguration or acts of the Institution's registrar. Where available, the Provider will arrange TLS (HTTPS) certificates for correctly configured domains.
3.3 Templates. Template policies, guidelines, forms and documents supplied through the launch wizard or otherwise are provided as general starting points only. They do not constitute legal, ethical or professional advice. The Institution is solely responsible for reviewing, adapting, adopting and complying with any policy it publishes, and for ensuring that it is appropriate to its Journal, discipline and jurisdiction.
3.4 Third-party memberships. Features that depend on external memberships or accounts (such as Crossref, similarity-checking services, ORCID membership features, DOAJ or preservation services) require the Institution or Journal to hold and maintain its own membership or account and to pay any related fees directly to the relevant third party, unless the Order Form expressly states otherwise.
3.5 Updates. The Provider may update and improve the Platform from time to time. Changes are subject to Section 28.
4. Roles and responsibilities
4.1 The Provider is an operational technology platform, not a publisher. The Provider supplies and hosts software. It does not publish, edit, peer-review, select, approve or endorse any Customer Content, and it does not act as an editor, publisher, sponsor or owner of any Journal.
4.2 The Institution is the publisher. As between the parties, the Institution is the publisher of each of its Journals and is solely responsible for:
(a) all Customer Content, including its accuracy, originality, lawfulness and quality;
(b) the conduct, integrity and confidentiality of peer review and all editorial decisions;
(c) publication ethics and adherence to the standards it adopts (for example, the guidelines of the Committee on Publication Ethics (COPE));
(d) compliance with all laws applicable to its publishing activity, including copyright, defamation, data-protection and research-integrity rules;
(e) copyright arrangements and licensing of published works (for example, Creative Commons licences such as CC BY), and obtaining all necessary rights and consents from authors and other rights holders;
(f) corrections, expressions of concern, retractions and removals;
(g) APCs and any other charges to authors, including their amount, collection, waivers, discounts and refunds (see Section 8);
(h) compliance with the requirements of any indexing service, database, funder or ethical standard it seeks to meet;
(i) the accuracy of all claims made on or about its Journals, including claims about indexing, metrics, impact factors, peer-review procedures and editorial board membership; and
(j) the acts and omissions of its Authorised Staff and the administration of their accounts.
4.3 The Provider's responsibilities. The Provider will: (a) provide the Service materially in accordance with the Agreement and its documentation; (b) implement the security measures described in Annex A; (c) provide support as described in Section 10; and (d) process Customer Content only in accordance with the Agreement and the Institution's documented instructions.
4.4 No editorial interference. The Provider will not access Customer Content except as needed to provide, secure, support or maintain the Service, to comply with law, or as instructed by the Institution, and will not intervene in editorial matters, except to the limited extent permitted by Sections 15 and 24 (acceptable use and suspension).
5. Accounts, users and eligibility
5.1 Institution account. The Institution must provide accurate registration and billing information and keep it up to date. The Institution designates one or more administrators who may create Journals, assign roles and manage Authorised Staff.
5.2 Credentials. Each user must keep his or her login credentials confidential and must not share accounts. The Institution is responsible for all activity under its Authorised Staff accounts. Users must notify the Provider (and, for End Users, the relevant Journal) promptly of any suspected unauthorised access. The Provider recommends, and may require, multi-factor authentication for staff roles.
5.3 End User accounts. End User accounts are created on a particular Journal and are administered by that Journal. Requests concerning an End User's submissions, reviews, editorial decisions, publication or personal data held by a Journal should be addressed first to that Journal. The Provider will assist the Institution as described in Annex A.
5.4 Minimum age. Individual users must be at least 16 [●] years old, or the age of digital consent in their country if higher. The Service is not directed to children.
5.5 Eligibility. Users must not use the Service if they are prohibited from doing so under applicable law, including sanctions laws (Section 20).
6. Free trial and demonstration accounts
6.1 Free trial. The Provider may offer a free trial of 14 days on a temporary subdomain. Trials are provided "as is", without any service-level commitment, and may be subject to feature or usage limits.
6.2 Conversion. If the Institution purchases a subscription, Customer Content created during the trial will be retained and carried over to the subscription.
6.3 Expiry. If no subscription is purchased by the end of the trial, the trial account will be suspended (not deleted) and retained for [●] days, after which it and its Customer Content may be permanently deleted without further notice.
6.4 Trial content. The Institution should not publish live content, accept real submissions or upload sensitive personal data during a trial unless it intends to subscribe.
6.5 Demonstration accounts. Demo accounts are for evaluation only, are shared or sandboxed, and are reset periodically. Any data entered into a demo account may be visible to others and will be erased on reset. Do not enter real or personal data into demo accounts.
PART B — COMMERCIAL TERMS
7. Fees, invoicing and payment
7.1 Fees. Subscription Fees are charged per Journal per year as specified in the Order Form or quotation. Fees for Optional Services are as quoted separately.
7.2 Invoicing. The Provider will invoice subscription Fees annually in advance, at the start of each Subscription Term, unless the Order Form states otherwise. Invoices are issued by Scientific Steps for Programming LLC.
7.3 Payment. Unless otherwise stated on the invoice, invoices are payable within [●] days of the invoice date by bank transfer or by any other payment method stated on the invoice (including approved local payment methods). The Institution bears its own bank and transfer charges, and payments must be made in the invoiced currency, in full, without set-off or deduction except as required by law.
7.4 Taxes. All Fees are exclusive of applicable taxes, duties and levies (including general sales tax in the Hashemite Kingdom of Jordan where applicable) unless expressly stated otherwise. Any applicable taxes will be added to the invoice, or treated under any applicable zero-rating or exemption, in accordance with applicable law. If the Institution is required by law to withhold any tax from a payment, it will gross up the payment so that the Provider receives the full invoiced amount, unless otherwise agreed in writing [confirm], and will provide official evidence of the withholding.
7.5 Purchase orders and procurement. Where an Institution's procurement rules require a purchase order, supplier registration or other formalities, the Institution is responsible for completing them promptly. Pre-printed terms on purchase orders or procurement portals do not apply and do not amend the Agreement.
7.6 Late payment. If any undisputed amount is overdue, the Provider may send payment reminders and, if the amount remains unpaid [●] days after the due date and after at least [●] days' written notice, suspend access to the Service (Section 24) until payment is received. Suspension for non-payment does not relieve the Institution of its payment obligations. [Optional: Overdue amounts bear late interest at [●]% per month or the maximum permitted by law, whichever is lower.] [confirm]
7.7 Disputed invoices. The Institution must notify the Provider in writing of any good-faith dispute about an invoice within [●] days of receipt, with supporting details. The parties will work together to resolve the dispute promptly; undisputed portions remain payable.
7.8 No refunds. Except as expressly provided in these Terms (Sections 26.4, 27 and 28.4) or in the Order Form, Fees are non-cancellable and non-refundable, and no refund or credit is given for partial periods, unused features or downgrades.
7.9 Price changes. The Provider may change its Fees for any renewal term by giving the Institution at least [60] days' written notice before the end of the then-current Subscription Term. Fees will not change during a paid Subscription Term, except for additional Journals, upgrades or Optional Services ordered by the Institution.
7.10 Additional Journals. Journals added during a Subscription Term will be invoiced as stated in the Order Form or, if not stated, on a pro-rata basis to align with the Institution's Subscription Term [confirm].
8. Article processing charges (APCs) and payments by authors
8.1 Any APC, submission fee, page charge or other fee charged to authors or End Users by a Journal is set by the Institution and paid to the Institution, through payment gateways or methods configured by the Institution using its own accounts.
8.2 The Provider does not collect, receive, hold or process the funds of APCs, is not a party to any transaction between a Journal and its authors, and is not a payment service provider, merchant of record or agent of the Institution for that purpose.
8.3 The Institution is solely responsible for its APC policy, invoicing and receipts to authors, taxes on APC income, waivers, discounts, refunds, chargebacks and disputes with authors, and for complying with the terms of its payment-gateway providers.
8.4 Authors and other End Users with questions about APCs must contact the relevant Journal.
9. Optional services
9.1 The Provider may offer, on separate quotation, Optional Services including: migration of back issues; setup of digital-preservation arrangements; production and formatting; language editing; assistance with DOI and metadata deposit; preparation of applications to indexing services; training; and bespoke theme design.
9.2 Each Optional Service is governed by these Terms and by the scope, deliverables, timeline and Fees in the relevant quotation or Order Form. Unless the quotation states otherwise, Optional Service Fees are payable [in advance / [●]% on order and the balance on delivery] [confirm].
9.3 Indexing-application preparation consists of advice and preparation of documentation only. The application remains the Institution's application; the outcome rests with the relevant index (Section 16) and no Fees are refundable on the basis of an index's decision.
9.4 Language editing and formatting do not include verification of scientific content, data or citations, and do not transfer any editorial responsibility to the Provider. The Institution remains responsible for approving final versions before publication.
9.5 The Institution will provide timely access to materials, information and decisions reasonably required for Optional Services. Delays caused by the Institution may extend timelines and, where they cause additional work, may be charged at the rates in the quotation.
10. Service levels and support
10.1 Availability target. The Provider aims to make the Service available 99% of the time in each calendar month, measured by the Provider's monitoring, excluding: (a) planned maintenance; (b) emergency maintenance needed to address security or stability risks; (c) Force Majeure Events; (d) problems with Third-Party Services, the Institution's domain, DNS, networks or equipment; (e) suspension under these Terms; and (f) trial and demo accounts.
10.2 Planned maintenance. The Provider will give reasonable advance notice of planned maintenance (normally at least [●] hours) by email, in-app notice or on a status page, and will try to schedule it outside peak hours in Jordan time.
10.3 Support. Support is provided in Arabic and English by WhatsApp or phone on +962 79 127 0283 and by email at [●], during [●] hours (Jordan time) on business days in Jordan. The Provider's target is to respond to support requests by the next business day. Response targets are targets, not guarantees of resolution times.
10.4 Support partners. Support may be provided by the Provider's personnel or by authorised support partners acting on its behalf (Section 30.2).
10.5 Service credits. [Owner to choose one option and delete the other:]
- [Option 1 — default] The availability target is a service objective. No service credits or other remedies apply to a failure to meet it, unless service credits are expressly set out in the Order Form.
- [Option 2] If availability in a calendar month falls below 99% (calculated under Section 10.1), the Institution may request, within 30 days after the end of that month, a credit equal to [5]% of the monthly equivalent of the subscription Fees for the affected Journal(s) for each full [1]% below the target, up to a maximum of [25]% of that monthly equivalent. Credits are applied to the next invoice, have no cash value, and are the Institution's sole and exclusive remedy for failure to meet the availability target.
10.6 The Institution is responsible for first-line support to its own Authorised Staff and End Users unless the Order Form provides otherwise.
PART C — DATA, INTELLECTUAL PROPERTY AND USE
11. Customer Content, backups and export
11.1 Ownership. As between the parties, the Institution (or its End Users or licensors, as applicable) owns all rights in Customer Content. Nothing in the Agreement transfers ownership of Customer Content to the Provider.
11.2 Licence to the Provider. The Institution grants the Provider a non-exclusive, worldwide, royalty-free licence, for the Subscription Term and any transition period, to host, store, copy, process, format, convert, display, transmit and back up Customer Content solely to provide, secure and support the Service and as the Institution directs through its configuration of the Service (for example, depositing metadata with Crossref, exposing metadata to Google Scholar and OAI-PMH harvesters, sending newsletters, or exporting to indexing and preservation services). The Institution represents that it has all rights and consents needed to grant this licence. Where Customer Content is published under an open licence chosen by the Institution, third parties' rights to reuse it derive from that licence, not from the Provider.
11.3 Backups. The Provider performs daily backups of Customer Content. The Institution may download its backups through the Service [in the manner and retention period described in the documentation: [●] days of backup retention] [confirm]. Backups are intended for disaster recovery and do not replace the Institution's own record-keeping.
11.4 Export. At any time during the Subscription Term and the transition period, the Institution may export its Customer Content, and may request a full export, which the Provider will deliver within 7 days of the request, in standard formats, including JATS XML, PDF, CSV and, where available, formats compatible with Open Journal Systems (OJS). Routine exports are free of charge [confirm]; the Provider may charge reasonable fees, as quoted in advance, for custom migrations or conversions into formats not supported by the Service.
11.5 Aggregated data. The Provider may compile anonymised and aggregated statistics about use of the Service (which do not identify the Institution, any Journal or any individual) to operate, secure and improve the Service. The Provider will not sell Customer Content or use it to train general-purpose artificial-intelligence models.
12. Data protection
12.1 Roles. For personal data contained in Customer Content, the Institution (or each Journal it operates) is the controller and the Provider is the processor. The Provider processes such personal data only on the Institution's documented instructions, in accordance with Annex A (Data Processing Terms), which forms part of the Agreement.
12.2 Provider as controller. The Provider acts as controller only of limited personal data that it processes for its own purposes, such as Institution contact and billing information, account security logs and support communications. That processing is described in the Provider's Privacy Policy at [●].
12.3 Institution's obligations. The Institution is responsible for: having a lawful basis and giving any required notices for its processing; publishing a privacy notice on each Journal; responding to data-subject requests; and ensuring that its instructions to the Provider comply with applicable data protection laws.
12.4 Applicable law. Each party will comply with data protection laws applicable to it, which may include the Personal Data Protection Law of the Hashemite Kingdom of Jordan [confirm current law and implementing regulations] and, where they apply to the Institution or its End Users, other laws such as the EU General Data Protection Regulation.
13. Intellectual property
13.1 Provider IP. The Platform, including its software, source and object code, design, user interface, templates, themes, theme frameworks, documentation, and all improvements and derivative works of them, and all intellectual property rights in them, belong to the Provider or its licensors. Except for the rights expressly granted in the Agreement, no rights are granted to the Institution or End Users, by implication or otherwise.
13.2 Subscription right. Subject to the Agreement and payment of the Fees, the Provider grants the Institution a non-exclusive, non-transferable, non-sublicensable right, during the Subscription Term, to access and use the Service, and to allow its Authorised Staff and End Users to do so, for the purpose of operating its Journals.
13.3 Restrictions. Except as permitted by Section 14 or by mandatory law, the Institution and End Users must not: (a) copy, modify, or create derivative works of the Platform; (b) reverse-engineer, decompile or attempt to extract source code of the proprietary parts of the Platform; (c) resell, sublicense, rent, or provide the Service to third parties on a service-bureau basis (other than operating the Institution's own Journals); (d) remove proprietary notices; or (e) use the Service to build a competing product.
13.4 Institution branding. The Institution owns, and grants the Provider a limited licence to use solely to provide the Service, its names, logos, trademarks and brand materials, and the names and marks of its Journals.
13.5 Bespoke theme design. [confirm] Where the Provider designs a bespoke custom theme for the Institution:
(a) the Institution's logos, brand assets and Customer Content incorporated in it remain the Institution's property;
(b) the Provider retains all rights in the underlying code, components and theme framework, and in any generic elements, know-how and tools;
(c) the visual design as delivered will be made available for the Institution's exclusive use on the Platform, and the Provider will not offer that same distinctive design to another customer [for so long as the Institution maintains an active subscription / for [●] years] [confirm]; and
(d) any right to use the design outside the Platform requires a separate written agreement.
13.6 Feedback. If the Institution or any user provides suggestions, ideas or feedback about the Service, the Provider may use them freely and without obligation, without identifying their source publicly without consent.
13.7 Reference. The Provider may identify the Institution as a customer (by name and logo) in customer lists and marketing materials, unless the Institution opts out by written notice [confirm].
14. Open-source software
14.1 The Platform includes open-source software components, some of which are licensed under the GNU General Public License, version 3 (GPL v3), including components derived from Open Journal Systems (OJS) developed by the Public Knowledge Project (PKP). Other components are licensed under other open-source licences.
14.2 The Service is provided as a hosted service. Open-source components are subject to their respective licences and notices, which are available at [●] or on request. Nothing in these Terms restricts, or is intended to restrict, any rights that a user has under an applicable open-source licence, and in the event of conflict the open-source licence prevails in respect of the relevant component.
14.3 The Provider's proprietary components, branding, hosted infrastructure and services are not licensed under those open-source licences except to the extent such licences require.
14.4 "Open Journal Systems", "OJS" and "PKP" are names of the Public Knowledge Project. The Service is offered independently by the Provider and is not endorsed by, affiliated with or supported by the Public Knowledge Project, unless otherwise stated.
15. Acceptable use
15.1 The Institution, its Authorised Staff and all End Users must not use the Service to:
(a) upload, publish or transmit content that is unlawful, infringing of intellectual property or privacy rights, defamatory, obscene, hateful, or that incites violence;
(b) upload or transmit viruses, malware or other harmful code;
(c) attempt to gain unauthorised access to the Service, other tenants' data, accounts or systems, to breach or test tenant isolation or security controls (except under a written security-testing authorisation from the Provider), or to circumvent usage limits;
(d) interfere with or disrupt the Service, including by denial-of-service attacks or excessive automated requests;
(e) scrape, crawl or harvest data from the Service other than through OAI-PMH, published APIs, or in accordance with generally accepted norms for indexing and harvesting public metadata and any limits stated by the Provider;
(f) send spam or unsolicited messages; newsletters may be sent only to subscribers who have opted in and must include a working unsubscribe mechanism;
(g) impersonate any person or institution, or misrepresent affiliation, credentials or editorial-board membership;
(h) engage in predatory or deceptive publishing practices, including false or misleading claims about indexing, impact factors or other metrics; invented or "fake" metrics; fabricated, manipulated or bypassed peer review; listing individuals as editors or reviewers without their consent; hijacking or imitating another journal; or facilitating paper-mill activity, citation manipulation or the sale of authorship;
(i) collect personal data of users other than as permitted by the Journal's privacy policy and applicable law; or
(j) violate any applicable law, including sanctions laws.
15.2 Peer-review integrity. Reviewers and editors must keep manuscripts and reviews confidential and use them only for the review process, in accordance with the Journal's policies (see also Section 19.4).
15.3 Enforcement. The Provider does not monitor Customer Content as a matter of course. If the Provider becomes aware of a suspected violation, it may notify the Institution and request remedial action. Where the Institution does not act within a reasonable time, or where the violation is serious (for example, a security threat, malware, clearly unlawful content, a binding order from a competent authority, or a risk of serious harm to the Service, other customers or third parties), the Provider may remove or disable access to the specific content or suspend the affected account or Journal under Section 24, after notice where practicable.
15.4 Notices of infringing or unlawful content. Third parties may report content on any Journal to the Journal directly and to the Provider at [●]. The Provider will forward reports to the relevant Institution and may act under Section 15.3.
16. Indexing disclaimer
16.1 The Platform is designed with reference to recognised indexing and metadata standards and best practices (for example, structured metadata, persistent identifiers, OAI-PMH, JATS XML and transparent policy pages).
16.2 The Provider does not guarantee, and nothing in the Agreement or in the Provider's marketing should be read as promising, that any Journal will be included in, accepted by or remain listed in any index, database or directory, including Web of Science, Scopus, DOAJ, Google Scholar, or any regional or national database. Decisions on inclusion rest solely with each index or database and depend on factors outside the Provider's control, including the Journal's content, editorial quality, ethical practices and publishing record.
16.3 The rejection, delay, delisting or removal of a Journal from any index does not constitute a breach of the Agreement and does not entitle the Institution to any refund or credit.
16.4 The Institution must not state or imply on its Journal sites that a Journal is indexed, or that the Provider has certified or endorsed its indexing status, unless that statement is true and verifiable.
17. AI Assistant
17.1 The AI Assistant is an optional feature. Each Journal may enable or disable it, and configure which roles may use it, at any time.
17.2 Advisory only. Outputs of the AI Assistant (for example, suggestions, summaries, checks, translations or draft text) are generated automatically, are advisory only and may be inaccurate, incomplete, biased or inappropriate. Users must review all outputs critically before relying on them.
17.3 Human decisions. The AI Assistant must not be used as the sole basis for any editorial decision, peer-review recommendation, acceptance, rejection or ethical determination. All such decisions remain the responsibility of the Journal's human editors and reviewers.
17.4 Journal policies on AI. The Institution is responsible for adopting and publishing policies on the use of AI by its editors, reviewers and authors, and for ensuring that use of the AI Assistant complies with those policies, including any confidentiality expectations for manuscripts under review.
17.5 Processing. Content submitted to the AI Assistant may be processed by a third-party AI provider acting as the Provider's sub-processor (Annex A). The Provider will configure the AI Assistant so that Customer Content is not used by that provider to train its general models, to the extent such configuration is offered by that provider [confirm with the AI provider's terms].
17.6 Usage limits. Use of the AI Assistant is subject to usage caps described in the plan or the Order Form. The Provider may limit, throttle or modify the AI Assistant to manage cost, security or quality.
17.7 The Provider makes no warranty regarding AI Assistant outputs and, to the maximum extent permitted by law, accepts no liability for decisions taken on the basis of them.
18. Third-party services
18.1 The Service interoperates with, or relies on, services provided by third parties, including Crossref, ORCID, similarity-checking providers (such as iThenticate), DOAJ, indexing and preservation services, payment gateways, AI providers, hosting and infrastructure providers, and email delivery providers ("Third-Party Services").
18.2 Use of Third-Party Services is governed by their own terms and policies, and, where the Institution uses its own account (for example, Crossref membership, a similarity-checking account or a payment gateway), by the contract between the Institution and that third party. The Institution is responsible for complying with those terms and for any fees payable to those third parties.
18.3 The Provider is not responsible for the availability, accuracy, performance, changes or discontinuation of Third-Party Services, or for any act or omission of their providers. If a Third-Party Service changes in a way that materially affects an integration, the Provider will use reasonable efforts to adapt the integration but does not guarantee that it can do so.
18.4 Where the Provider engages a third party as a sub-processor to provide the Service (e.g. hosting or email delivery), Annex A applies.
19. Confidentiality
19.1 Definition. "Confidential Information" means non-public information disclosed by one party to the other in connection with the Agreement that is marked confidential or would reasonably be understood to be confidential, including Customer Content that is not published, the Provider's non-public technical information, and the terms and pricing of the Order Form.
19.2 Obligations. The receiving party will: (a) use the disclosing party's Confidential Information only to perform or exercise its rights under the Agreement; (b) not disclose it except to its employees, contractors, sub-processors and professional advisers who need to know it and who are bound by confidentiality obligations at least as protective; and (c) protect it with at least reasonable care.
19.3 Exceptions. These obligations do not apply to information that: (a) is or becomes public without breach; (b) was lawfully known to the receiving party before disclosure; (c) is lawfully received from a third party without a duty of confidentiality; or (d) is independently developed. The receiving party may disclose Confidential Information where required by law or by a competent court or authority, after giving the disclosing party prompt notice where legally permitted.
19.4 Peer-review confidentiality. The Provider recognises the particular sensitivity of unpublished manuscripts, reviewer identities, review reports and editorial deliberations. The Provider will treat them as Confidential Information of the Institution, will restrict access by its personnel to what is needed for support, security and maintenance, and will configure the Platform to support the review model (e.g. single-anonymous, double-anonymous or open review) selected by each Journal. Correct configuration of the review model and access rights is the Journal's responsibility.
19.5 This Section survives for [five (5)] years after termination of the Agreement, and indefinitely for unpublished manuscripts, review content and trade secrets.
20. Sanctions and export compliance
20.1 Each party will comply with economic sanctions and export-control laws applicable to it in connection with the Agreement.
20.2 The Institution represents that neither it nor, to its knowledge, any of its Authorised Staff is subject to sanctions that would prohibit the Provider from providing the Service to it.
20.3 The Provider may refuse to provide, restrict or suspend the Service (in whole or for a particular user, Journal or territory) where providing it would, in the Provider's reasonable opinion, breach applicable sanctions or export-control laws or expose the Provider or its sub-processors to sanctions, and will give notice where legally permitted. Such action does not constitute a breach of the Agreement. [Where a suspension under this Section is expected to be permanent, the Institution may terminate and receive a refund of prepaid Fees for the unused period, unless prohibited by law.] [confirm]
PART D — RISK ALLOCATION AND TERM
21. Warranties and disclaimers
21.1 Mutual. Each party warrants that it is duly organised and has the power and authority to enter into the Agreement.
21.2 Provider. The Provider warrants that, during the Subscription Term: (a) the Service will perform materially in accordance with its documentation; and (b) it will not materially reduce the overall security of the Service. The Institution's remedy for breach of this Section 21.2 is for the Provider to use reasonable efforts to correct the non-conformity and, if the Provider cannot do so within a reasonable time, for the Institution to terminate the affected subscription and receive a refund of prepaid Fees for the unused period.
21.3 Institution. The Institution warrants that: (a) it has all rights, licences and consents needed for the Customer Content and for the Provider to process it under the Agreement; and (b) its Journals and editorial practices comply with applicable law and these Terms.
21.4 Disclaimer. Except as expressly stated in the Agreement and to the maximum extent permitted by applicable law, the Service (including templates, the AI Assistant, trial and demo accounts) is provided "as is" and "as available", and the Provider disclaims all other warranties, conditions and representations, express or implied, including any implied warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation. The Provider does not warrant any academic, reputational or indexing outcome.
22. Indemnities
22.1 By the Institution. The Institution will defend and indemnify the Provider, its officers, employees and subcontractors against third-party claims, and resulting losses, damages, fines, costs and reasonable legal fees, arising from: (a) Customer Content (including claims of copyright infringement, defamation, breach of privacy or research misconduct); (b) the Institution's editorial, peer-review, publication, ethical or APC practices; (c) claims by authors, reviewers or readers concerning the Institution's Journals; or (d) the Institution's breach of Sections 15 or 20.
22.2 By the Provider. The Provider will defend and indemnify the Institution against third-party claims alleging that the Platform software, as provided by the Provider and used in accordance with the Agreement, infringes that third party's intellectual property rights, and will pay the resulting damages and costs finally awarded or agreed in settlement.
22.3 Exceptions. Section 22.2 does not apply to claims arising from: (a) Customer Content, Institution branding or materials supplied by the Institution; (b) modifications not made by or for the Provider; (c) combination with products, services or data not supplied by the Provider; (d) Third-Party Services; (e) open-source components used in accordance with their licences; or (f) use in breach of the Agreement or after the Provider has offered a non-infringing alternative.
22.4 Remedies. If the Platform is, or the Provider reasonably believes it is likely to be, subject to an infringement claim, the Provider may: (a) obtain the right for the Institution to continue using it; (b) modify it to be non-infringing without material loss of functionality; or (c) if neither is commercially reasonable, terminate the affected subscription and refund prepaid Fees for the unused period. This Section 22 states the Provider's entire liability for third-party IP claims.
22.5 Procedure. The indemnified party must: notify the indemnifying party promptly in writing of the claim; give it sole control of the defence and settlement (provided no settlement imposes liability or admission on the indemnified party without its consent); and provide reasonable cooperation at the indemnifying party's expense.
23. Limitation of liability
23.1 Cap. To the maximum extent permitted by applicable law, each party's total aggregate liability arising out of or in connection with the Agreement, whether in contract, tort or otherwise, will not exceed the total Fees paid and payable by the Institution to the Provider in the twelve (12) months preceding the event giving rise to the claim.
23.2 Excluded losses. To the maximum extent permitted by applicable law, neither party will be liable for any indirect, incidental, special, consequential or punitive loss or damage, or for any loss of profits, revenue (including APC revenue), business, goodwill, reputation, or anticipated savings, or for any loss of indexing status, whether or not foreseeable.
23.3 Data. The Provider's liability for loss or corruption of Customer Content is limited to using reasonable efforts to restore it from the most recent available backup.
23.4 Exceptions. Sections 23.1 and 23.2 do not limit: (a) the Institution's obligation to pay Fees; (b) either party's indemnity obligations under Section 22 [confirm — some clients cap indemnities at a multiple of the cap]; (c) liability for breach of Section 19 (Confidentiality) arising from wilful misconduct; or (d) liability for fraud, wilful misconduct, gross negligence, death or personal injury, or any other liability that cannot be limited or excluded under applicable law.
23.5 End Users. To the maximum extent permitted by law, the Provider has no liability to End Users for the content, policies, decisions or conduct of any Journal, and End Users' claims concerning a Journal must be directed to the Institution that operates it.
23.6 The parties acknowledge that the Fees reflect the allocation of risk in this Section 23.
24. Suspension
24.1 The Provider may suspend all or part of the Service, for the Institution as a whole or for a specific Journal or user, if: (a) undisputed Fees are overdue as described in Section 7.6; (b) there is a serious violation of Section 15 or Section 20; (c) suspension is necessary to prevent a security threat or serious harm to the Service, other customers or third parties; or (d) suspension is required by law or by a binding order of a competent authority.
24.2 Except where immediate action is required to address a security threat, legal requirement or serious harm, the Provider will give prior notice and a reasonable opportunity to remedy the cause. The Provider will limit any suspension to the extent and duration reasonably necessary, and will restore the Service promptly once the cause is resolved.
24.3 During suspension, Customer Content will be retained and not deleted, except where deletion of specific content is required by law.
25. Term and renewal
25.1 Term. The Agreement starts on the earlier of the Order Form effective date or the Institution's acceptance of these Terms, and continues for the initial Subscription Term stated in the Order Form (or, if none is stated, one year).
25.2 Automatic renewal. Each subscription renews automatically for successive periods of one (1) year, unless either party gives written notice of non-renewal at least [30/60] days before the end of the then-current Subscription Term.
25.3 Termination for convenience. Either party may terminate a subscription for convenience with effect at the end of the current Subscription Term by giving non-renewal notice under Section 25.2. Termination for convenience during a Subscription Term does not entitle the Institution to a refund.
26. Termination for cause and effects of termination
26.1 For cause. Either party may terminate the Agreement, or the affected subscription, by written notice if the other party:
(a) commits a material breach and fails to remedy it within thirty (30) days after receiving written notice describing the breach; or
(b) becomes insolvent, enters liquidation, bankruptcy or administration, makes an arrangement with its creditors, or ceases to carry on business, to the extent such termination is permitted by applicable law.
26.2 Effects. On termination or expiry:
(a) the Institution's right to use the Service ends, subject to the transition period below;
(b) all undisputed Fees accrued up to the date of termination become payable; and
(c) each party will return or destroy the other's Confidential Information, subject to Section 26.3 and legal retention obligations.
26.3 Transition period. For ninety (90) days after termination or expiry (the "Transition Period"), the Provider will keep Customer Content and provide the Institution with read-only access and export functionality, and will deliver a full export on request under Section 11.4. During the Transition Period, at the Institution's written request, the Provider will [keep the public Journal site online in read-only form / display a notice on the Journal site] [confirm, and whether this is charged]. The Provider will cooperate reasonably in migrating Customer Content to a successor platform. Updating DOI resolution URLs with Crossref remains the Institution's responsibility as holder of the DOI prefix. Additional migration assistance is an Optional Service.
26.4 Refund on Provider breach. If the Institution terminates for the Provider's uncured material breach under Section 26.1, the Provider will refund prepaid Fees for the unused portion of the Subscription Term.
26.5 Deletion. After the Transition Period, the Provider will delete Customer Content, including from backups, within [●] days, except to the extent retention is required by law, in which case the Provider will continue to protect it under the Agreement. On request, the Provider will confirm deletion in writing.
26.6 Survival. Sections 4.2, 7 (as to amounts due), 8, 11.1, 11.5, 13, 14, 16, 19, 22, 23, 26, 30 and 31 and Annex A (for so long as the Provider holds Customer Content) survive termination.
27. Discontinuation of the Service
If the Provider decides to discontinue the Service generally, it will give Institutions at least ninety (90) days' written notice, provide a full export of Customer Content under Section 11.4, and refund any prepaid Fees for the period after discontinuation.
28. Changes to the Service and to these Terms
28.1 Service changes. The Provider may modify the Service, including adding, changing or removing features, provided that it does not materially reduce the core functionality of the Service for a subscribed Journal during a paid Subscription Term. The Provider will give reasonable notice of material changes.
28.2 Changes to Terms. The Provider may update these Terms from time to time. The Provider will publish the updated Terms with a new "Last updated" date and, for changes that materially affect Institutions, will notify Institution administrators by email or in-app notice at least [30] days before they take effect, except where a change is required by law or relates to security, in which case it may take effect sooner.
28.3 Acceptance. Continued use of the Service after the effective date constitutes acceptance of the updated Terms. Changes do not apply retroactively and do not alter the Fees during a paid Subscription Term.
28.4 Right to terminate. If a change to the Service or to these Terms is materially adverse to the Institution, the Institution may terminate the affected subscription by written notice given within thirty (30) days after notification of the change, and the Provider will refund prepaid Fees for the unused portion of the Subscription Term.
28.5 Where an Order Form contains negotiated terms, those terms prevail over later changes to these Terms for the duration of that Order Form's Subscription Term.
29. Force majeure
29.1 Neither party is liable for delay or failure to perform its obligations (other than payment obligations) caused by events beyond its reasonable control, including natural disasters, epidemics, war, hostilities, terrorism, civil unrest, government action, sanctions imposed after the date of the Agreement, widespread internet or power failures, failures of hosting or telecommunications providers not caused by the affected party, and cyber-attacks despite reasonable security measures ("Force Majeure Events").
29.2 The affected party must notify the other promptly, use reasonable efforts to mitigate the effects, and resume performance as soon as practicable.
29.3 If a Force Majeure Event prevents performance of a material part of the Agreement for more than [sixty (60)] consecutive days, either party may terminate the affected subscription by written notice, and the Provider will refund prepaid Fees for the unused period.
30. General
30.1 Assignment. Neither party may assign or transfer the Agreement without the other's prior written consent, which may not be unreasonably withheld, except that either party may assign it to a successor in connection with a merger, reorganisation or sale of all or substantially all of its relevant business or assets, by written notice, provided the successor assumes all obligations.
30.2 Subcontracting. The Provider may use subcontractors, sub-processors and authorised support or implementation partners to perform the Service, provided that the Provider remains responsible for their performance and, for sub-processors, complies with Annex A.
30.3 Independent contractors. The parties are independent contractors. Nothing in the Agreement creates a partnership, joint venture, agency or employment relationship.
30.4 Notices. Formal notices (including notices of breach, termination or non-renewal) must be in writing and sent by email to the address designated in the Order Form (for the Provider: [●]) and, for notices of breach or termination, also by [courier or registered mail to the party's registered address] [confirm]. Notices sent by email are effective on the next business day after sending, unless a delivery failure is received. Operational communications may be sent through the Service, by email or by WhatsApp.
30.5 Entire agreement. The Agreement constitutes the entire agreement between the parties on its subject matter and supersedes all prior proposals, negotiations and understandings. Each party acknowledges that it has not relied on any statement not set out in the Agreement. Nothing in this Section limits liability for fraud.
30.6 Order of precedence. In the event of conflict, the following order applies: (1) the Order Form (including any negotiated special terms); (2) Annex A (Data Processing Terms); (3) these Terms; (4) policies and documentation referenced in these Terms.
30.7 Severability. If any provision is held invalid or unenforceable, it will be enforced to the maximum extent permissible and the remaining provisions will continue in full force.
30.8 No waiver. Failure or delay in exercising any right is not a waiver of it, and a single or partial exercise does not prevent further exercise.
30.9 Language. These Terms are made in English and Arabic. Both versions are intended to have the same meaning. In the event of any inconsistency, the [English / Arabic] version prevails [●]. [Drafting note: where the Institution is a Jordanian public entity, or the Terms may be relied on before Jordanian courts, consider the Arabic version prevailing.]
30.10 Third-party rights. No person other than the parties has any right to enforce the Agreement, except as expressly stated.
30.11 Publicity. Except as stated in Section 13.7, neither party will issue press releases about the Agreement without the other's prior written consent.
31. Governing law and dispute resolution
31.1 Governing law. The Agreement and any dispute arising out of or in connection with it are governed by the laws of the Hashemite Kingdom of Jordan.
31.2 Amicable negotiation. The parties will first attempt to resolve any dispute amicably through good-faith negotiation between senior representatives for a period of thirty (30) days after one party notifies the other of the dispute in writing.
31.3 Forum. [Owner to choose one option [●] and delete the other:]
- [Option A — Courts] If the dispute is not resolved within that period, the courts of Amman, the Hashemite Kingdom of Jordan, have exclusive jurisdiction.
- [Option B — Arbitration] If the dispute is not resolved within that period, it will be finally settled by arbitration seated in Amman, Jordan, in accordance with the arbitration law in force in the Hashemite Kingdom of Jordan [and the rules of [●]], by [one/three] arbitrator(s), in the [Arabic/English] language. The award is final and binding.
31.4 Nothing in this Section prevents either party from seeking urgent interim or protective relief from a competent court, or the Provider from bringing proceedings to recover unpaid Fees.
32. Contact
Scientific Steps for Programming LLC
Address: [●]
Phone / WhatsApp: +962 79 127 0283
Email: [●]
Legal notices: [●]
Annex A — Data Processing Terms
This Annex forms part of the Agreement between the Provider (as processor) and the Institution (as controller). Capitalised terms have the meaning given in the Terms. "Personal Data" means any information relating to an identified or identifiable natural person contained in Customer Content. "Data Protection Laws" means all laws on the protection of personal data that apply to the processing, which may include the Personal Data Protection Law of the Hashemite Kingdom of Jordan and, where applicable to the Institution or its End Users, the EU General Data Protection Regulation and other laws.
A1. Subject matter, duration, nature and purpose
A1.1 Subject matter: processing of Personal Data in Customer Content in connection with provision of the Service.
A1.2 Duration: the Subscription Term, the Transition Period, and the deletion period in Section 26.5 of the Terms.
A1.3 Nature of processing: hosting, storage, backup, retrieval, organisation, conversion, display, transmission (including to Third-Party Services as configured by the Institution), and deletion.
A1.4 Purpose: to provide, secure, maintain and support the Service and to perform any Optional Services, in accordance with the Institution's instructions.
A2. Categories of data subjects and Personal Data
A2.1 Data subjects: Authorised Staff; authors and co-authors; reviewers; editors and editorial board members; readers, registered users and newsletter subscribers; persons named in Customer Content; and certificate holders.
A2.2 Categories of Personal Data: identification and contact details (name, email, phone, postal address); affiliation, title, country and academic profile information; ORCID iD and other identifiers; account credentials (stored in hashed form) and role assignments; submission, review and editorial records and correspondence; certificate data; newsletter preferences and consent records; billing details for APCs where entered by the Institution (excluding card data, which is handled by the Institution's payment gateway); technical data (IP addresses, logs, device and browser information); and usage statistics.
A2.3 Special categories. The Service is not designed for special categories of personal data (such as health data). The Institution must not instruct the processing of such data through the Service except where it is inherent in published research and the Institution has ensured a lawful basis and appropriate safeguards (for example, anonymisation of research participants).
A3. Controller's instructions
A3.1 The Provider will process Personal Data only on the Institution's documented instructions, which consist of the Agreement and the Institution's configuration and use of the Service, unless required to do otherwise by applicable law (in which case the Provider will inform the Institution before processing, unless the law prohibits this).
A3.2 The Provider will inform the Institution if, in its opinion, an instruction infringes Data Protection Laws.
A4. Confidentiality of personnel
The Provider will ensure that personnel and subcontractors authorised to process Personal Data are bound by appropriate obligations of confidentiality, receive appropriate training, and access Personal Data only as needed to perform the Service.
A5. Security measures
A5.1 The Provider will implement and maintain appropriate technical and organisational measures to protect Personal Data, taking into account the state of the art, costs, and the nature, scope, context and purposes of processing and the risks to individuals. These include, as appropriate:
(a) logical separation of each tenant's data and access controls preventing cross-tenant access;
(b) encryption of data in transit (TLS) and [at rest] [confirm];
(c) role-based access controls and least-privilege access for Provider personnel; multi-factor authentication for administrative access;
(d) secure password hashing;
(e) daily backups, stored [in a separate location] [confirm], with periodic restoration testing;
(f) logging and monitoring of administrative access and security events;
(g) timely application of security patches and updates to the Platform and its components;
(h) vulnerability management and periodic security reviews; and
(i) business-continuity and incident-response procedures.
A5.2 The Provider may update these measures provided that the overall level of protection is not reduced.
A6. Sub-processors
A6.1 The Institution grants general authorisation for the Provider to engage sub-processors. The current list of sub-processors (name, service, location of processing) is maintained at [●] and as of the date of these Terms comprises:
| Sub-processor | Service | Location of processing |
|---|---|---|
| [●] | Cloud hosting / infrastructure | [●] |
| [●] | Transactional and newsletter email delivery | [●] |
| [●] | AI Assistant model provider | [●] |
| [●] | Backup storage | [●] |
| [●] | Support partner(s) [if any, e.g. UAE-based support] | [●] |
A6.2 The Provider will give the Institution at least [30] days' notice of any intended addition or replacement of a sub-processor (by email or by updating the list with a subscription mechanism). The Institution may object on reasonable data-protection grounds within that period. The parties will discuss the objection in good faith; if it is not resolved, the Institution may terminate the affected subscription and receive a refund of prepaid Fees for the unused period.
A6.3 The Provider will impose on each sub-processor data-protection obligations substantially equivalent to those in this Annex and remains responsible for its sub-processors' performance.
A6.4 Third-Party Services that the Institution chooses to connect using its own account (e.g. Crossref, its similarity-checking account, ORCID, DOAJ, its payment gateway) are not sub-processors of the Provider; the Institution engages them directly and the transmission of data to them is made on the Institution's instruction.
A7. International transfers
Personal Data may be processed in the locations listed in A6.1. Where Data Protection Laws restrict transfers of Personal Data outside a country, the Provider will cooperate with the Institution to put in place the transfer mechanism or safeguards required by those laws [confirm hosting location(s) and any Jordanian transfer requirements].
A8. Assistance
A8.1 Data-subject requests. Taking into account the nature of the processing, the Provider will assist the Institution, through the Service's functionality or otherwise by reasonable means, in responding to requests from data subjects to exercise their rights (access, rectification, erasure, restriction, objection, portability). If the Provider receives such a request directly, it will refer the data subject to the relevant Journal and notify the Institution without undue delay, without responding itself except as instructed or required by law.
A8.2 Other assistance. The Provider will provide reasonable assistance to the Institution with data-protection impact assessments, consultations with supervisory authorities, and the security of processing, taking into account the information available to it. Assistance beyond what is reasonably included in the Service may be charged at agreed rates.
A9. Personal Data breach
A9.1 The Provider will notify the Institution without undue delay, and where feasible within 72 hours, after becoming aware of a Personal Data breach affecting Customer Content.
A9.2 The notice will include, to the extent then known: the nature of the breach, categories and approximate numbers of data subjects and records concerned; likely consequences; measures taken or proposed; and a contact point. Information may be provided in phases.
A9.3 The Provider will take reasonable steps to contain and remediate the breach and cooperate with the Institution. The Institution is responsible for any notifications to authorities and data subjects required of a controller. Notification by the Provider is not an acknowledgement of fault or liability.
A10. Deletion or return
At the end of the Agreement, the Provider will make Customer Content available for export during the Transition Period and then delete it in accordance with Section 26.5 of the Terms, unless retention is required by law.
A11. Audits and information
A11.1 The Provider will make available to the Institution, on reasonable request, information necessary to demonstrate compliance with this Annex, primarily through: (a) documentation describing its security measures; (b) responses to reasonable security and data-protection questionnaires (no more than [once per year] unless following a Personal Data breach or required by a regulator); and (c) any available third-party certifications or audit reports.
A11.2 If the information provided is insufficient to demonstrate compliance, or if required by a competent authority, the Institution may conduct an audit, on at least [30] days' written notice, during business hours, at its own cost, no more than once in any twelve-month period, subject to confidentiality obligations and in a manner that does not compromise the security or confidentiality of other customers' data.
A12. Liability
Each party's liability under this Annex is subject to the limitations and exclusions in Section 23 of the Terms, to the extent permitted by Data Protection Laws.
End of Terms.