Trust Center and Reviewer Access Terms

NOTICE: TRUST CENTER MATERIALS ARE CONFIDENTIAL, MAY BE WATERMARKED AND LOGGED, AND ARE PROVIDED FOR LIMITED INFORMATIONAL REVIEW ONLY.

1. Scope and Acceptance

These Trust Center and Reviewer Access Terms (“Trust Center Terms”) govern access to and use of any Borealis Security, Inc. (“Borealis”) trust center, reviewer portal, evidence room, downloadable package, sample reviewer package, or other controlled disclosure environment made available by Borealis or through Aurora Command (collectively, the “Trust Center”).
By clicking to accept, opening a protected Trust Center link, authenticating into a Trust Center workspace, downloading a Trust Center artifact, or otherwise accessing protected Trust Center materials, you (“Reviewer”) agree to these Trust Center Terms on behalf of yourself and the company, firm, fund, insurer, broker, customer, prospect, auditor, advisor, or other organization you represent (“Reviewing Entity”). If Reviewer lacks authority to bind the Reviewing Entity, Reviewer must not access the Trust Center.
These Trust Center Terms supplement any separate nondisclosure agreement, customer agreement, or procurement process between Borealis and the Reviewing Entity. If a Borealis-signed written agreement expressly governs Trust Center access, that signed agreement controls to the extent of a direct conflict; otherwise, these Trust Center Terms apply.

2. Eligibility; Limited Purpose; No General License

The Trust Center is offered only for legitimate business review purposes such as security review, procurement diligence, renewal review, insurance underwriting support, partner diligence, or customer-authorized reviewer access. Trust Center access is not offered for consumer, personal, household, academic, benchmarking, or competitive-intelligence use.
Reviewer receives only a limited, revocable, non-exclusive, non-transferable, non-sublicensable right to access the specific Trust Center materials Borealis elects to make available to Reviewer for the specific review purpose approved by Borealis or the applicable customer. No ownership rights and no implied rights are granted.

3. Confidentiality and Access Control

All non-public Trust Center content, including policies, evidence, questionnaires, reports, screenshots, exports, architecture materials, retention summaries, subprocessor information, customer-facing artifacts, package structures, and related metadata, constitutes Borealis confidential information and may also include confidential information of Borealis customers or third parties.
Reviewer will: (a) use Trust Center content solely for the authorized review purpose; (b) restrict access within the Reviewing Entity to personnel who have a need to know for that purpose and are bound by confidentiality obligations at least as protective as these Trust Center Terms; (c) not share credentials, deep links, downloaded files, screenshots, exports, or summaries except as necessary for the authorized review purpose and under equivalent confidentiality restrictions; and (d) protect the content using reasonable care and no less than the care used to protect comparable confidential information.
Reviewer is responsible for all activity occurring under Reviewer credentials or access invitations, including activity by anyone to whom Reviewer improperly discloses access.

4. Use Restrictions

Reviewer will not, and will not permit any third party to: (a) use the Trust Center or its contents to build, train, fine-tune, evaluate, or improve a model, dataset, benchmark, or competing product; (b) scrape, harvest, mirror, crawl, systematically download, or bulk-export Trust Center content except through functionality Borealis expressly permits; (c) benchmark, reverse engineer, decompile, disassemble, or attempt to derive source code, system design, control matrices, or reusable commercial methodology from Trust Center content; (d) remove or obscure confidentiality legends, watermarks, tracking controls, or access controls; (e) share access with unauthorized recipients; (f) conduct security testing, vulnerability scanning, or denial-of-service activity against any Trust Center resource without Borealis’s prior written approval; or (g) use the Trust Center for any unlawful, defamatory, infringing, fraudulent, or improper purpose.

5. Monitoring, Logging, Watermarking, and Revocation

Borealis may monitor, log, timestamp, watermark, attribute, limit, throttle, filter, or record Trust Center access, views, approvals, downloads, exports, link activity, and other usage for security, compliance, audit, product, or evidentiary purposes. Borealis may revoke or suspend access at any time, with or without notice, including if Borealis suspects misuse, security risk, expired review purpose, change in customer authorization, or any violation of these Trust Center Terms.
Borealis may require separate authentication, multifactor authentication, re-verification, or renewed acceptance of these Trust Center Terms to continue access. Downloads, if permitted, may remain subject to confidentiality, watermarking, and usage restrictions after download.

6. Customer-Directed Sharing and No Duty to Update

Some Trust Center content may be shared at the direction of a Borealis customer. Borealis may rely on the customer’s instructions regarding whether, what, and with whom to share. Borealis is not responsible for verifying that a customer-authorized reviewer has internal authority, and Borealis is not responsible for downstream handling of content by authorized recipients after access is granted.
Trust Center content reflects the state of materials made available at a point in time. Borealis does not undertake a duty to update Reviewer about changes, later events, or superseding information unless Borealis expressly agrees in writing to do so. A customer may withdraw or modify access at any time.

7. No Professional Advice; No Reliance; Informational Nature

The Trust Center is not legal advice, regulatory advice, audit advice, underwriting advice, investment advice, accounting advice, or a certification environment. Borealis is not acting as Reviewer’s or Reviewing Entity’s attorney, auditor, consultant, fiduciary, insurer, broker, or advisor through Trust Center access.
Policies, evidence summaries, framework mappings, governance packages, questionnaires, status indicators, control narratives, and other materials may be incomplete, stale, generalized, or context-specific. Reviewer must make its own independent evaluation and must not treat Trust Center content as a promise that Borealis, any Borealis customer, or any control environment is compliant, complete, secure, or suitable for Reviewer’s purpose.
Trust Center artifacts may be labeled “Contractually Incorporated,” “Informational Only — Not Contractually Binding,” or “Internal Only — Do Not Publish.” Unless Borealis expressly identifies a specific artifact as contractually incorporated in an executed customer agreement or in a Borealis-controlled access notice, Reviewer must treat Trust Center content as informational only.

8. Intellectual Property and Feedback

As between the parties, Borealis and its licensors retain all right, title, and interest in and to the Trust Center, its layout, workflow, taxonomy, presentation, software, and the Borealis-owned content made available through it. Reviewer acquires no ownership interest by accessing the Trust Center.
If Reviewer provides comments, corrections, suggestions, or feedback regarding the Trust Center, Borealis may use that feedback without restriction or obligation.

9. Disclaimers

THE TRUST CENTER, ALL MATERIALS MADE AVAILABLE THROUGH IT, AND ALL DOWNLOADS, SUMMARIES, AND EXTERNAL LINKS ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, BOREALIS DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, COMPLETENESS, QUIET ENJOYMENT, AVAILABILITY, AND COURSE OF DEALING.
WITHOUT LIMITING THE FOREGOING, BOREALIS DOES NOT WARRANT THAT THE TRUST CENTER WILL BE AVAILABLE WITHOUT INTERRUPTION; THAT ANY ARTIFACT IS CURRENT, COMPLETE, OR ERROR-FREE; THAT ANY SECURITY CONTROL, RETENTION SUMMARY, SUBPROCESSOR LIST, OR REVIEWER PACKAGE FULLY DESCRIBES CURRENT PRACTICES; OR THAT ANY MATERIAL WILL SATISFY A REVIEWER, CUSTOMER, AUDITOR, INSURER, OR REGULATOR.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, BOREALIS AND ITS AFFILIATES WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE, OR ENHANCED DAMAGES, OR FOR ANY LOSS OF PROFITS, BUSINESS, REVENUE, OPPORTUNITY, GOODWILL, OR DATA, ARISING OUT OF OR RELATING TO THE TRUST CENTER OR THESE TRUST CENTER TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE AGGREGATE LIABILITY OF BOREALIS AND ITS AFFILIATES ARISING OUT OF OR RELATING TO THE TRUST CENTER OR THESE TRUST CENTER TERMS WILL NOT EXCEED ONE HUNDRED U.S. DOLLARS (US $100).

11. Indemnity

Reviewer and the Reviewing Entity will defend, indemnify, and hold harmless Borealis and its affiliates, and their respective officers, directors, employees, and agents, from and against any third-party claim, demand, action, or proceeding arising out of or relating to Reviewer’s misuse of the Trust Center, breach of these Trust Center Terms, unauthorized disclosure of Trust Center content, or violation of law or third-party rights by Reviewer or the Reviewing Entity.

12. Termination; Return or Destruction

These Trust Center Terms apply from first access and continue until Borealis terminates Reviewer’s access and all confidentiality, limitation-of-liability, intellectual-property, use-restriction, and dispute provisions expire according to their nature. Upon request by Borealis or upon completion of the review, Reviewer will cease use and, to the extent reasonably practicable, delete or destroy non-public Trust Center downloads and summaries, except where retention is required by law or bona fide internal recordkeeping policies subject to continuing confidentiality obligations.

13. Governing Law; Venue; Jury Waiver

These Trust Center Terms and any dispute arising out of or relating to them or the Trust Center will be governed by the laws of the State of Alaska and applicable United States federal law, without regard to conflict-of-laws rules. Exclusive jurisdiction and venue will lie in the state or federal courts located in Anchorage, Alaska, and each party irrevocably submits to those courts. EACH PARTY KNOWINGLY WAIVES ANY RIGHT TO A JURY TRIAL TO THE MAXIMUM EXTENT PERMITTED BY LAW.

14. Miscellaneous

Borealis may modify these Trust Center Terms from time to time by posting an updated version in the Trust Center or related legal page. Updated terms apply prospectively upon the next access or other assent mechanism Borealis requires. If any provision is held unenforceable, the remaining provisions remain in effect. Reviewer may not assign these Trust Center Terms. Borealis may assign them freely. No waiver is effective unless in writing. Nothing herein creates a partnership, agency, fiduciary, or employment relationship.
These Trust Center Terms are solely for the benefit of Borealis and the accepting Reviewer. No Reviewing Entity affiliate, Borealis customer, prospect, counterparty, insured, insurer, broker, regulator, auditor, or other third party is an intended beneficiary of these Trust Center Terms.

15. Contact

Questions about Trust Center access or these Trust Center Terms may be directed to Borealis through the trust, security, or legal contact channels Borealis designates on its website or in the Trust Center.