SERVICE LEVEL AGREEMENT

This document is an addendum to the Panther Enterprise Subscription Agreement executed by Panther and Customer (the “Agreement”). Capitalized terms used but not defined in this document have the meanings assigned to them in the Agreement.

Section 1: Support Services

1. Primary Coverage Hours. Panther provides Support Services between 9:00 am to 5:00 pm Pacific Time (PT), Monday through Friday (the “Primary Coverage Hours”). Additionally, Panther will make commercially reasonable efforts to provide Support Services during non-business hours and on weekends.
2. Support Services. Panther will provide the following Support Services during the Subscription Term in accordance with this document:
   1. Technical Support. Assist Customer during the Primary Coverage Hours to identify, analyze, and resolve challenges with the Panther Subscription Service.
   2. Service Management. Security monitoring, change control, problem management, and escalation procedures.
   3. Panther Subscription Service Administration. Installation and system setup, support, monitoring, response, repair, tuning, and capacity planning.
   4. Data backup and retention. Backups of Customer Data stored within the Panther Subscription Service.
3. Exclusions. Panther’s obligations with respect to the other service measures set forth herein may be subject to limitations, delays, and other problems inherent to the general use of the Internet and other public networks, or caused by Customer, Users, or third parties including underlying cloud services provider(s) like Amazon Web Services (AWS) and Snowflake. Panther is not responsible for any Support Services delays or other damage resulting from problems outside of Panther’s control; however, Panther is responsible for the conduct of its third-party agents and contractors.
4. Issue Resolution. If the Panther Subscription Service is not accessible during the Subscription Term, except during Scheduled Maintenance described below (an “Issue”) then Panther and Customer will comply with the following resolution procedures for all Issues reported by Customer:
   1. Reporting an Issue. Customer may report an Issue through the Panther Support Portal or Chat. When reporting an Issue, Customer will include a detailed description of the Issue.
   2. Issue Classification. When reporting an Issue, the severity of the Issue will be classified based on the impact to Customer's business operations in accordance with the severity classification table below.
   3. Response Time. Panther will use reasonable efforts to respond to Customer's reported Issues within the Primary Coverage Hours and within the timeframe designated below.

      Severity Level	Definition	Response Time
      Critical	The entire Panther Subscription Service is inaccessible or unusable.	1 Hour
      High	The issue causes a significant loss of service or is a significant error.	4 Hours
      Medium	The issue causes a minor reduction of service or is a minor error. The impact is an inconvenience that may require a workaround to restore functionality or is a minor error, incorrect behavior, or a documentation error that does not impede the operation of a System.	24 Hours
      Low	Minor defects and errors that do not impede system operation in a normal manner.	48 Hours

5. Updates. During the Subscription Term, Panther will provide Customer with all Updates (including updated Documentation) that Panther may, in its sole discretion, make generally available to its licensees at no additional charge. All Maintenance Releases, on being provided by Panther to Customer hereunder, are deemed Subscription Service subject to all applicable terms and conditions in this Agreement. Customer does not have any right hereunder to receive any new versions of the software included in the Panther Subscription Service that Panther may, in its sole discretion, release from time to time. “Updates” means any update, upgrade, release or other adaptation or modification of software included in the Panther Subscription Service, including any updated Documentation, that Panther may provide to Customer from time to time during the Subscription Term, which may contain, among other things, error corrections or other changes to the user interface, functionality, compatibility, capabilities, performance, efficiency or quality of the Panther Subscription Service.
6. Routine Maintenance. Panther periodically repairs and upgrades the Panther Subscription Service and shall use commercially reasonable efforts to accomplish this without affecting the Customer’s access to the Panther Subscription Service; however, repairs of an emergency or critical nature may result in the Panther Subscription Service not being available for the Customer’s usage during the course of such repairs. Panther reserves the right to conduct routine maintenance to the Panther Subscription Service according to the following protocols:

   Item	Description	Commitment
   Scheduled Maintenance	Routine, scheduled maintenance performed as needed.	Panther will use commercially reasonable efforts to notify Customer before performing such Maintenance.
   Preventative Maintenance	Non-scheduled maintenance that needs to be promptly conducted.	Panther will use commercially reasonable efforts to notify Customer before performing such Maintenance.
   Emergency Maintenance	Non-scheduled maintenance required to be performed immediately.	Panther will use commercially reasonable efforts to notify Customer before performing such Maintenance.

7. Compatibility with Third Party Software. Customer consents and acknowledges that prior to adding third-party software, the Customer is solely responsible to verify and ensure that such third-party software is compatible with its current or future versions of the Panther Subscription Service. Panther will not be responsible for any failures or malfunctions resulting from such upgrade, change, or addition of third-party software.
8. Customer Responsibilities
   1. Trained Contacts. Customer will designate at least two (2) individuals within Customer’s organization to serve as its primary contacts with regards to Customer’s instance of the Panther Subscription Service (each, a “Primary Technical Contact”). The Primary Technical Contact should have sufficient technical knowledge of Customer’s application environment to enable effective communication with Panther.
   2. Reasonable Assistance. Customer will provide Panther with (i) reasonable access to all necessary personnel to answer questions regarding Issues reported by Customer, and (ii) all relevant and available diagnostic information (including product or system information). In addition, Customer will make reasonable efforts to fix Issues identified during troubleshooting.
9. Limitation of the Support Services. The scope of coverage under this document expressly excludes the following:
   1. Data migration
   2. Training
   3. Technical support, consultation, or problem resolution pertaining to software or applications other than those supplied by Panther and described in the Agreement
   4. Resolution of problems resulting from the negligence of users of the Panther Subscription Service, including specifically incorrect data entry, use of altered data, and failure to use the Panther Subscription Service according to the Documentation

Section 2: Service Level Availability

1. Availability. Panther shall make the Panther Subscription Service available 99.9% of the time, except as provided below.
   
   

   “Covered Services” means AWS Lambda, AWS Athena, AWS S3, AWS Glue, AWS SQS, AWS DynamoDB, AWS SNS, AWS Cognito, AWS ECS.

   Availability for Covered Services will be calculated per calendar month, as follows:
   

   Where:

   • “total” means the total number of minutes in the calendar month;
   • “non-excluded” means downtime that is not excluded; and
   • “excluded” means:
   1. Any downtime during planned maintenance (not to exceed 10 hours in any calendar month) for which Panther gives 2 business days or more hours’ notice in accordance with the Agreement or via the Panther shared slack channel.
   2. Any unavailability caused by circumstances beyond Panther’ reasonable control, including, without limitation, acts of God, acts of government, flood, fire, earthquakes, civil unrest, acts of terror, strikes or other labor problems (other than those involving Panther employees), third-party Internet Panther failures or delays (other than those Internet Suppliers under contract with Panther),
   3. Amazon Web Services (“AWS”) or Snowflake outages in Customer’s specific region or that otherwise affect Panther’ ability to provide the Panther Subscription Service, or unavailability caused by Customer’s conduct or error.
   4. Dropped logs, provided the Covered Services meet the 99.9% or other applicable availability amounts.
   
   

   Notwithstanding the foregoing, for any availability that is reliant on AWS or Snowflake, availability shall be calculated based on the applicable availability provided by AWS or Snowflake with the same exclusions above.

   For any partial month during which Customer subscribes to the Panther Subscription Service, availability will be calculated based on the entire month, not just the portion for which Customer subscribed.

2. Service Availability Remedies. Should Panther fail to make the Panther Subscription Service available as set forth above, Customer may continue to use the Panther Subscription Service but receive a refund of 1/30th the monthly fee for each day the Panther Subscription Service is affected by making a claim in writing to Panther as described below. All claims of unavailability will be verified against Panther’ system records. Should Panther dispute any period of unavailability alleged by Customer, Panther will provide to Customer a record of Panther Subscription Service availability for the applicable period.
3. Reporting, Claims and Notices. Panther will provide Customer SLA reports showing Panther Subscription Service availability upon Customer request and at most once per calendar year. To claim a remedy under this SLA, Customer shall send Panther a notice, via email addressed to [email protected] within 15 business days after the end of each calendar quarter. Claims may be made on a calendar-quarter basis only and must be submitted within 20 business days after the end of the applicable quarter, except where a Services subscription ends on a date other than the last day of a calendar quarter, in which case any claim related to that subscription must be submitted within 20 business days after the subscription end date. All claims will be verified against Panther’ system records. Should Panther dispute any period of unavailability alleged by Customer, Panther will provide to Customer a record of Panther Subscription Service availability for the applicable period. Panther will provide such records only in response to claims made by Customer in good faith.