Skip to content

Latest commit

 

History

History
558 lines (364 loc) · 24.3 KB

TAA.md

File metadata and controls

558 lines (364 loc) · 24.3 KB

Transaction Author Agreement V2

https://sovrin.org/

Summary:

This summary is provided to help you understand your obligations when writing to the Sovrin Ledger Networks-it does not have any legal effect or replace the full legal text of the agreement provided below it.

  • This agreement grants you permission to write data to the Sovrin Ledger Networks under certain terms and conditions.

  • You represent and warrant that the data you are writing does not violate any applicable laws or infringe the rights of any other party.

  • You understand the data you are writing is public and permanent and there can be no guarantee of erasure. This includes public keys and payment addresses.

  • If it is determined that the data you wrote violated this agreement, the operators of the network can take steps to block it from public access.

  • The Sovrin Foundation makes no promises about the reliability or correctness of the data being stored on the Sovrin Ledger Networks or the operation of the Sovrin Ledger Networks.


Agreement: Approved by the Sovrin Board of Trustees 04 December 2019

This Transaction Author Agreement (the "Agreement") is entered into on the date you accepted this Agreement (the "Effective Date") between the Sovrin Foundation, a nonprofit corporation organized under the laws of the State of Utah, United States of America ("Sovrin Foundation"), and you ("Transaction Author"), either an entity or a natural person acting as an Individual. Sovrin Foundation and Transaction Author are individually referred to herein as a "Party" and collectively as the "Parties". All references to "you" throughout this Agreement will include that person or entity. You represent that you are authorized to accept this Agreement on that person’s or entity’s behalf, and in the event you or the person or entity violates this Agreement, the person or entity agrees to be responsible to the Sovrin Foundation.

By clicking "Accept" or similar or writing Transactions to the Sovrin Ledger Networks, Transaction Author agrees to be bound by this Agreement and all terms incorporated by reference. If Transaction Author does not agree to this Agreement in its entirety, do not click "Accept" or write Transactions to the Sovrin Ledger Networks.

If Sovrin Foundation makes material changes to this Agreement, Sovrin Foundation will notify you by posting a notice on Sovrin Foundation’s website prior to the effective date of the changes. By continuing to act as a Transaction Author or by otherwise writing Transactions on the Sovrin Ledger Networks after Sovrin Foundation posts changes to their website, you agree to be bound by the revised Agreement.

WHEREAS, Transaction Author desires to write Transactions to the Sovrin Ledger Networks (each a "Transaction"); and

WHEREAS, subject to Transaction Author complying with the terms and conditions of this Agreement, Sovrin Foundation grants permission to Transaction Author to write Transactions to the Sovrin Ledger Networks;

FOR GOOD AND VALUABLE CONSIDERATION, THE SUFFICIENCY OF WHICH IS HEREBY ACKNOWLEDGED, THE PARTIES AGREE AS FOLLOWS:

1) Definitions

a. "Data Protection Laws" means the GDPR and any other data protection and privacy laws, regulations, and regulatory requirements applicable to a party under this Agreement.

b. "GDPR" means the General Data Protection Regulation (EU) 2016/679 on the protection of natural persons with regard to the Processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and any amendment or replacement to it.

c. "Impermissible Personal Data" means the Personal Data that Transaction Author writes to the Sovrin Ledger Networks that is not Permissible Personal Data.

d. "Personal Data Transactions" has the meaning set forth in Section 3 below.

e. "Permissible Personal Data" means Personal Data that Transaction Author writes to the Sovrin Ledger Networks that is permitted under this Agreement and the Sovrin Governance Framework (including the Sovrin Ledger Access Policies).

f. "Personal Data" means information that relates, directly or indirectly, to a data subject, including without limitation, names, email addresses, postal addresses, identification numbers, location data, online identifiers or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the data subject.

g. "Process" or "Processing" means any operation or set of operations which is performed on Transactions data, whether or not by automated means, such as the access, collection, use, storage, disclosure, dissemination, combination, recording, organization, structuring, adaption, alteration, copying, transfer, retrieval, consultation, disposal, restriction, erasure and/or destruction of Transactions data.

h. "Sovrin Governance Framework" means Sovrin Foundation’s governance policies and rules available at https://sovrin.org/governance-framework/ or any successor website.

Unless otherwise defined above, all capitalized terms used in this Agreement shall have the meanings given to them in this Agreement or in the Sovrin Governance Framework and corresponding Sovrin Glossary. The Sovrin Governance Framework and Sovrin Glossary is incorporated into this Agreement by reference only for purposes of use of such defined terms.

2) Permission to Write to the Sovrin Ledger Networks

a. Sovrin Foundation hereby grants to Transaction Author a non-exclusive, non-assignable, non-sublicensable, royalty free, revocable license to write to and use the Sovrin Ledger Networks in accordance with this Agreement and the Sovrin Governance Framework.

b. When authoring Transactions under the policy of Permissioned Write Access, a Transaction Author may only write to the Sovrin Ledger Networks by using an authorized Transaction Endorser. In the event that Sovrin Foundation enables Public Write Access to the Sovrin Ledger Networks, Transaction Author will not need a Transaction Endorser to endorse a Transaction.

c. Once an initial Transaction has been written to one of the Sovrin Ledger Networks by Transaction Author ("Initial Transaction"), the Transaction Author is granted permission to make additional Transactions to update the state of a previous Transaction ("Update Transactions"). Please note, an Update Transaction does not remove the Initial Transaction, which will remain on the Sovrin Ledger due to its immutability and may remain on Sovrin Test Networks unless they are reset. Transaction Author may make Update Transactions if and only if Transaction Author was the author of the Initial Transaction. Update Transactions are Transactions and are subject to all the terms of this Agreement.

3) Transaction Author Obligations

a. With regard to all Transactions, Transaction Author will:

  1. comply with any requirements imposed by the Transaction Endorser on the Transaction Author and any Transactions endorsed by the Transaction Endorser;

  2. not write Transactions containing Personal Data until Sovrin Foundation approves Public Write Access and permits Transactions to contain Personal Data pursuant to Section 3(b) below.

b. If Sovrin Foundation approves Public Write Access and permits Transaction Authors to write Transactions that contain Permissible Personal Data ("Personal Data Transactions"), then Transaction Author expressly agrees that:

  1. It will not write any Transactions that contain Impermissible Personal Data to the Sovrin Ledger Networks;

  2. it is an independent data controller (as defined in the GDPR) of the Personal Data Transactions and will be responsible for the lawfulness of the Processing of such data in compliance with the Data Protection Laws;

  3. it acknowledges and will notify all data subjects whose Personal Data it Processes that functions inherent in blockchain technology may render fulfilling data subject requests difficult or impossible. For example, due to blockchain’s immutability, data stored on a blockchain generally cannot be removed or altered once the data is confirmed on the blockchain;

  4. it irrevocably waives any and all claims, rights and/or obligations it may have now or in the future against Sovrin Foundation as a result of being unable to fulfill data subject requests in accordance with Data Protection Laws;

  5. it agrees to be bound by the terms and conditions applicable to Transaction Author as a controller of Personal Data Transactions under the Data Processing Agreements with Stewards and Transaction Endorsers, each in their roles as processors under the GDPR, and attached as Appendices A and B (the "DPAs");

  6. that Sovrin Foundation has the right to enter into the DPAs on its behalf and the DPAs are made a part of the Agreement in their entirety;

  7. by signing this Agreement, each Party is deemed to have signed the DPAs, including the Standard Contractual Clauses with Sovrin Foundation and Transaction Author as the "Data exporter", and with either a Steward or a Transaction Endorser as "Data importer", as applicable;

  8. at Sovrin Foundation’s request, Transaction Author will reimburse Sovrin Foundation for any costs incurred by Sovrin Foundation in enforcing Transaction Author’s rights under the GDPR, including but not limited to fulfillment of data subject rights, rights of oversight and audit, etc.; and

  9. it irrevocably waives any and all claims that it may have now or in the future that Sovrin Foundation lacks the rights to enter into the DPAs on its behalf and bind Transaction Author to the DPAs’ terms and conditions, including the limitation of liability therein.

4) Term and Termination

a. This Agreement commences on the Effective Date and shall remain in force until terminated by either Party pursuant to this Section 4 (Term and Termination).

b. Either Party may terminate this Agreement: (i) if the other Party has materially defaulted in the performance of any of its obligations under this Agreement and has not cured such default within fifteen (15) business days of receipt of written notice from the non-defaulting Party of such default or (ii) immediately in the event of any government sanctions or other legal measures that make it unlawful for Transaction Author to write Transactions to the Sovrin Ledger Networks.

c. Additionally, Transaction Author may terminate this Agreement upon 30 days' advance written notice to Sovrin Foundation and ceasing all use of the Sovrin Ledger Networks.

d. Upon termination or expiration of this Agreement for any reason the rights granted to Transaction Author by Sovrin Foundation under this Agreement automatically terminate.

5) Representations and Warranties; Disclaimer

a. By Sovrin Foundation.

  1. THE SOVRIN LEDGER NETWORKS AND THE SOVRIN NETWORK ARE PROVIDED AS-IS WITH ALL FAULTS. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE SOVRIN FOUNDATION MAKES NO REPRESENTATION OR WARRANTY CONCERNING THE ACCURACY, RELIABILITY, OR COMPLETENESS OF ANY INFORMATION OR DATA OBTAINED OR DERIVED THROUGH THE USE OF THE SOVRIN LEDGER NETWORKS AS THE SOVRIN LEDGER NETWORKS OPERATE ON A DISTRIBUTED NETWORK AND SOVRIN FOUNDATION DOES NOT CONTROL THE INFORMATION OR DATA WRITTEN TO THE SOVRIN LEDGER NETWORKS. THE SOVRIN FOUNDATION DISCLAIMS ANY OTHER REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY OR COMPLETENESS OF DATA.

  2. As the architect of the Sovrin Network and administrator of the Sovrin Governance Framework, Sovrin Foundation is an independent controller of the Personal Data Transactions. In no event will Sovrin Foundation be held liable for the actions or omissions of Transaction Author arising out any Personal Data that Transaction Author writes to the Sovrin Ledger Networks in breach of this Agreement and the Sovrin Governance Framework, including but not limited to any Impermissible Personal Data. Notwithstanding the foregoing, if Transaction Author writes Permissible Personal Data to the Sovrin Ledger Networks in express compliance with this Agreement and the Sovrin Governance Framework, Sovrin Foundation is responsible for the lawfulness of such Processing once such Permissible Personal Data is written to the Sovrin Ledger Networks.

b. By Transaction Author. Transaction Author represents and warrants:

  1. if a natural person, he or she is 16 years of age or older;

  2. it has all necessary rights and permissions to write the Transactions;

  3. the Transactions do not and will not violate any applicable law;

  4. the Transactions will not contain data or information that infringes or misappropriates the intellectual property rights of any third party;

  5. it understands that the Sovrin Ledger Networks operate on a distributed network and that Sovrin Foundation disclaims any responsibilities with respect to access of data from the Sovrin Ledger Networks;

  6. it understands and acknowledges that Sovrin Foundation does not control the transfer of data between Nodes and over communications facilities, including the internet, and that the Sovrin Ledger Networks may be subject to limitations, delays, and other problems inherent in the use of such communications facilities;

  7. it understands and acknowledges that there is regulatory uncertainty regarding the Sovrin Ledger Networks’ compliance with Data Protection Laws as it relates to Permissioned Write Access, Public Write Access, and Personal Data, including cross-border transfers of data, Processing of Personal Data, the right to effective erasure of data, as well as the scope and nature of Personal Data itself;

  8. it understands and acknowledges that Sovrin Foundation may modify, at any time, its Sovrin Ledger Access Policies and the terms of this Agreement and any other agreement or document related to the Sovrin Ledger Networks based on new information, guidance, or Data Protection Laws; and

  9. it understands and acknowledges that a Steward and/or Sovrin Foundation may obscure a Transaction if (i) the Steward or Sovrin Foundation is required to do so by a court order or applicable law or (ii) the Steward or Sovrin Foundation has evidence that the Transaction violates the terms of this Agreement or any applicable law.

6) Indemnification

a. To the fullest extent permitted by applicable law, Transaction Author will indemnify and hold harmless Sovrin Foundation, and each of its respective officers, directors, agents, partners and employees (individually and collectively, the "Sovrin Parties") from and against any losses, liabilities, claims, demands, damages, expenses or costs ("Claims") brought by a third party arising out of or related to (i) Transaction Author’s access to or use of the Sovrin Ledger Networks in violation of this Agreement; (ii) Transaction Author’s violation, misappropriation or infringement of any rights of another (including intellectual property rights or privacy rights); or (iii) Transaction Author’s violation of applicable law.

b. Transaction Author agrees to promptly notify the Sovrin Parties in writing of any Claims, cooperate with the Sovrin Parties in defending such Claims and pay all fees, costs and expenses associated with defending such Claims (including attorneys’ fees). Transaction Author also agrees that the Sovrin Parties will have sole control of the defense or settlement, at the Sovrin Foundation’s sole option, of any Claims. This indemnity is in addition to, and not in lieu of, any other indemnities set forth in a written agreement between Transaction Author and Sovrin Foundation or the other Sovrin Parties.

7) Governing Law and Forum

This Agreement is governed by the law of the State of Delaware, without reference to conflict of laws principles; provided that, if Transaction Author is a governmental entity, this Agreement is governed by the law in which such governmental entity is established. All disputes arising out of or in connection with this Agreement shall be finally settled by binding arbitration under the Rules of Arbitration of the International Chamber of Commerce (the "Rules") by a single arbitrator appointed in accordance with said Rules. Arbitration proceedings will be held in London, England. Unless the Parties otherwise mutually agree, such arbitration shall be conducted in the English language by electronic exchange of documents and by video conference. The arbitrator shall issue a reasoned decision, including findings of fact and conclusions of law. The arbitrator shall require exchange by the Parties of documents relevant to the issues raised by any claim, defense, or counterclaim or on which the producing Party may rely in support of or in opposition to any claim, defense, or counterclaim, with due regard for eliminating undue burden and expense and the expedited and lower cost nature of arbitration. At the request of a Party, the arbitrator may at his or her discretion order the deposition of witnesses. Depositions shall be limited to a maximum of three depositions per Party, each of a maximum of four hours duration, unless the arbitrator otherwise determines. Demand for arbitration may be initiated by either Party on fifteen (15) days written notice by email to the other Party’s designated representative, together with a written specification of the grounds for the dispute and the relief requested. By agreeing to binding and non-appealable arbitration, each party understands that they each forever give up and waive any right which each Party may have to resolve any such claim, difference or dispute by court or jury trial. Notwithstanding the foregoing, either Party may bring a proceeding seeking equitable or injunctive relief solely and exclusively in the state and federal courts located in Wilmington, Delaware, to prevent the infringement of intellectual property rights or the disclosure of confidential information. Each Party hereto consents to the exclusive jurisdiction of such courts for the adjudication of any such equitable or injunctive relief, as well as for any such matters that are excluded from or fall outside of this arbitration provision.

8) Limitation of Liability

EXCEPT IN THE EVENT OF EITHER PARTY’S GROSS NEGLIGENCE, WILLFUL MISCONDUCT OR FRAUD, IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, EXEMPLARY, PUNITIVE, SPECIAL, OR OTHER CONSEQUENTIAL DAMAGES UNDER THIS AGREEMENT, INCLUDING, WITHOUT LIMITATION, ANY LOST PROFITS, BUSINESS INTERRUPTION, LOSS OF PROGRAMS OR DATA, OR OTHERWISE, EVEN IF THE OTHER PARTY IS EXPRESSLY ADVISED OF THE POSSIBILITY OR LIKELIHOOD OF SUCH DAMAGES. EXCEPT IN THE EVENT OF EITHER PARTY’S GROSS NEGLIGENCE, WILLFUL MISCONDUCT OR FRAUD, IN NO EVENT SHALL EITHER PARTY’S LIABILITY UNDER THIS AGREEMENT EXCEED $250,000 USD IN THE AGGREGATE, PROVIDED THAT THERE WILL BE NO DOLLAR CAP ON LIABILITY FOR DAMAGES ARISING FROM VIOLATIONS OF DATA PROTECTION LAWS. IN THE EVENT OF EITHER PARTY’S GROSS NEGLIGENCE, SUCH PARTY’S LIABILITY UNDER THIS AGREEMENT SHALL NOT EXCEED $500,000 USD IN THE AGGREGATE. IN THE EVENT OF EITHER PARTY’S WILLFUL MISCONDUCT OR FRAUD, THERE SHALL BE NO DOLLAR CAP ON SUCH PARTY’S LIABILITY UNDER THIS AGREEMENT.

9) Miscellaneous

a. Notice. Any notice, payment, demand or communication required or permitted to be delivered or given by the provisions of this Agreement shall be deemed to have been effectively delivered or given and received on the date personally or electronically delivered to the respective Party to whom it is directed, or when deposited by registered or certified mail, with postage and charges prepaid and addressed to each respective Party. For the Transaction Author, notices will be sent to the agent service endpoint of the Transaction Author’s DID as long as Transaction Author authorizes such a connection or sent via other mechanism agreed to by the parties. For Sovrin Foundation, notices will be sent to Attn: Legal, 86 N University Ave, Suite 110, Provo, UT 84601.

b. Severability. If any provision of this Agreement is held invalid, illegal, or unenforceable, the validity, legality, and enforceability of any of the remaining provisions of this Agreement shall not in any way be affected or impaired.

c. Relationship of the Parties. This Agreement does not create a partnership, franchise, joint venture, agency, fiduciary or employment relationship between the Parties. Neither Party will represent that it has any authority to assume or create any obligation, express or implied, on behalf of the other Party, nor to represent the other Party as agent, employee, franchisee, or in any other capacity. There are no third-party beneficiaries to this Agreement. Neither Party shall make any proposals, promises, warranties, guarantees, or representations on behalf of the other Party or in the other Party’s name.

d. Assignment. Neither Party will voluntarily, or by operation of law, assign or otherwise transfer this Agreement without the other Party’s express prior written consent which will not be unreasonably withheld, provided that no such consent is required for an assignment or transfer to a wholly or majority owned subsidiary or to a successor in interest by reason of merger or consolidation or sale of all or substantially all of the assets of such Party relating to the subject matter of this Agreement.

e. Waiver. The waiver by either Party of a breach, default, delay or omission of any of the provisions of this Agreement by the other Party will not be construed as a waiver of any subsequent breach of the same or other provisions.

f. Entire Agreement. This Agreement, including all documents incorporated into this Agreement by reference, constitutes the entire agreement of the Parties with respect to the subject matter of this Agreement, and supersedes any and all prior agreements and understandings of the Parties, whether written or oral, with respect to such subject matter. This Agreement supersedes all prior Transaction Author Agreements between Sovrin Foundation and Transaction Author with respect to the subject matter hereof.

g. Modification of This Agreement. Sovrin Foundation reserves the right to modify this Agreement at any time in accordance with this provision, including, but not limited to, changes in applicable law or guidance from any jurisdiction. Sovrin Foundation will post an amended version of this Agreement on its website at least forty-five (45) days prior to the date on which all Transaction Authors must begin operating under the amendment (the "Amendment Cutover Date"). If Transaction Author continues to Author Transactions to the Sovrin Ledger Networks after the Amendment Cutover Date, such continued use will constitute acceptance of the amended Agreement.

h. Counterparts. This Agreement may be executed in two or more counterparts, each of which will be deemed an original, but all of which taken together will constitute one and the same instrument

i. Survival. Any terms that by their nature survive termination or expiration of this Agreement shall survive.

j. Governmental Entities. If Transaction Author is a governmental entity and it determines that GDPR does not apply to it and its Processing of Transactions, then:

  • a. to the extent that the GDPR requirements referenced in this Agreement are equivalent to the requirements under Data Protection Laws in its own jurisdiction, it will comply with any such requirements; and

  • b. to the extent that GDPR requirements referenced in this Agreement differ from requirements under Data Protection Laws in its own jurisdiction, it will comply with the requirements under its own legislation.

Appendix A

  • Steward Data Processing Agreement LINK AS OF THE EFFECTIVE DATE OF THIS TRANSACTION AUTHOR AGREEMENT

Appendix B

  • Transaction Endorser Data Processing Agreement LINK AS OF THE EFFECTIVE DATE OF THIS TRANSACTION AUTHOR AGREEMENT

(c) 2019 by Sovrin Foundation. This work is licensed under the Creative Commons Attribution-ShareAlike 4.0 International License (http://creativecommons.org/licenses/by-sa/4.0/).