Confidentiality agreement for security documents 1. Parties. This agreement is made between Northwind Cloud Ltd, of 1 Example Street, London, (the "Company") and the person or company named in the access request (the "Recipient"). 2. Purpose. The Company shares security, privacy and compliance documents through its trust center so that the Recipient can assess its security practices (the "Purpose"). 3. Confidential information. Everything the Company makes available in the restricted part of its trust center, such as audit reports, penetration test results and internal policies, together with any copy, extract or note made from it. 4. Obligations. The Recipient will use the confidential information only for the Purpose; share it only with its own staff and advisers who need it for the Purpose and are bound by confidentiality duties at least as strict as these; protect it with at least reasonable care; and not publish it, sell it or use it to compete with the Company. 5. Exclusions. These obligations do not cover information that is or becomes public through no fault of the Recipient, that the Recipient already knew lawfully, that the Recipient receives lawfully from someone else without a duty of confidence, or that the Recipient develops independently. 6. Disclosure required by law. If a law, regulator or court requires disclosure, the Recipient will tell the Company first where it is allowed to and disclose only what is required. 7. Return and deletion. When access ends, or when the Company asks, the Recipient will delete or return the confidential information. Copies kept to meet a legal retention duty remain confidential. 8. No warranty or licence. The documents are provided as they are. This agreement grants no licence or other right in them. 9. Duration. These obligations last for three years after the last document is shared, and for as long as any trade secret remains a trade secret. 10. Governing law. This agreement is governed by the laws of England and Wales, and the courts of England and Wales settle any dispute about it. 11. Acceptance. The Recipient accepts this agreement by ticking the acceptance box when requesting access, on the date of the access request.