CyArt's TERMS AND CONDITONS

TERMS OF SERVICE

THESE SUBSCRIPTION TERMS AND CONDITIONS (TOGETHER WITH THE ADDITIONAL TERMS OF ANY ORDER, THE “AGREEMENT”) ARE ENTERED INTO BETWEEN YOU, AS AN INDIVIDUAL, COMPANY, CORPORATION, OR OTHER ENTITY (“CUSTOMER”), AND CYART TECH (“CYART”) ON THE DATE OF ACCEPTANCE (THE “EFFECTIVE DATE”). “CUSTOMER” MAY ALSO INCLUDE A VENDOR OF A CUSTOMER REQUESTING INFORMATION VIA THE CYART SERVICES WHO ACCEPTS THESE TERMS AND CONDITIONS. YOU ACCEPT THIS AGREEMENT BY USING THE CYART SERVICES OR OTHERWISE ACKNOWLEDGING YOUR ACCEPTANCE (FOR EXAMPLE, BY CLICKING THE “ACCEPT” BUTTON OR SIGNING AN ORDER REFERRING TO THESE TERMS). IF YOU ARE ACCEPTING THIS AGREEMENT ON BEHALF OF A CUSTOMER ENTITY AS DESCRIBED ABOVE, YOU AND SUCH ENTITY REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO BIND SUCH ENTITY TO THIS AGREEMENT, AND THE TERMS “YOU” OR “YOUR” AND “CUSTOMER” WILL REFER TO SUCH ENTITY. ACCEPTANCE OF THIS AGREEMENT IS A CONDITION OF YOUR ACCESS TO THE CYART SERVICES. IF YOU DO NOT AGREE TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS AGREEMENT, YOU MAY NOT ACCESS OR USE THE CYART SERVICES.

BACKGROUND

CyArt Tech has crafted unique strategies and technology specifically for evaluating the cybersecurity risk borne by organizations, inclusive of their ability to manage risks presented by vendors (termed the “CyArt Technology”). The customer expresses an interest in acquiring, accessing, or subscribing to the services offered by CyArt, as detailed in an Order (as defined further along), which could encompass the management and continuous monitoring of vendor risk (accessible via the CyArt customer portal or the CyArt application programming interface), along with corresponding customer support, customer success, and facilitation services (collectively known as the “CyArt Services”). CyArt agrees to provide such services to the customer in accordance with the stipulations outlined in this Agreement. Each entity involved in this contract is referred to as a “Party” within this document, or collectively as the “Parties.” Acknowledging the aforementioned and the mutual agreements and terms described below, and in return for other beneficial and valuable consideration, the receipt and adequacy of which is recognized, the Parties agree as detailed below:

SECTION 1 — SERVICES

#1.1 Provision of Services: CyArt shall grant the Customer admittance to the CyArt Services throughout the duration of the subscription. CyArt may also incorporate into the CyArt Services specific data, services, or integrations derived from external third-party sources (“Third-Party Services”), which may necessitate the acceptance of separate or additional terms imposed by such third parties for access.

#1.2 Service Utilization: Conforming to the terms and conditions of this Agreement, CyArt bestows upon the Customer a non-exclusive and non-transferable privilege to access and utilize the CyArt Services as follows: (i) access and employ the CyArt Services purely for its internal operational needs; (ii) reproduce and preserve the information and data contained in the CyArt Services made accessible to and accessed by the Customer (the “CyArt Data”) within one or more databases under its control or possession for analysis, manipulation, report generation, or other legitimate activities, all for the purposes mentioned in the preceding clause; (iii) distribute internally, in the normal course of the Customer’s operations, reports, presentations and other materials that incorporate, utilize, or display the CyArt Data of rated organizations or derivatives thereof; (iv) share with any third party, including publicly, any CyArt Data that pertains solely to the Customer and the Customer’s CyArt-assigned industry sector rating; and (v) share the CyArt Data that pertains solely to a rated organization with such organization via functionality embedded in the CyArt Service for the purpose of initiating or maintaining a business relationship, provided that such rated organization is a current or prospective vendor/service provider, regulator, insured, or affiliate (including any portfolio companies or potential acquisition or investment targets) of the Customer.

“Users” are individuals who receive authorization from the Customer to utilize the CyArt Services as permitted herein and who have been assigned user identifications and passwords either by a Customer’s administrative users or CyArt (upon the Customer’s request). Users can be Customer’s employees, contractors or consultants provided that the CyArt Services are employed for the sole advantage of the Customer and that such Users adhere to confidentiality obligations no less restrictive than those in this Agreement. The CyArt Services allow administrative Users to customize access levels on a per-User basis to ensure that each User possesses the desired level of access to the CyArt Data. The Customer bears responsibility and liability for maintaining the secrecy and security of logins and passwords for the CyArt Services, for ensuring the appropriate configuration of access levels in the CyArt portal, and for enforcing compliance with this Agreement, including Sections 1.2, 1.3, and 6, by any Users or other individuals it grants access to the CyArt Services.

#1.3 Limitations: The CyArt Services, the CyArt Data, the databases that store the CyArt Data, and the selection, arrangement, structure, organization, and source code of all the aforementioned elements constitute precious trade secrets of CyArt and its licensors and suppliers. Regardless of any conflicting provision in this Agreement, the Customer shall not, and shall not allow any third party or any Users to: (i) provide or make the CyArt Services or CyArt Data accessible to any third party, either free of charge or for a fee, except as explicitly allowed by this Agreement, including Section 1.2; (ii) remove or alter any copyright, trademark, or other notices contained in the CyArt Services or the CyArt Data; (iii) utilize the CyArt Services or the CyArt Data except as expressly permitted in this Agreement; (iv) employ the CyArt Services to publish or disclose any competitive benchmarking tests or analysis; (v) utilize the CyArt Services or CyArt Data in a manner that breaches applicable law, including, without limitation, using it to deliberately defame, denigrate, or malign any third party, or to participate in or enable, whether on behalf of the Customer, the User, or any other person or entity, any transactions that are prohibited by the U.S. economic sanctions managed by the Office of Foreign Assets Control, U.S. Department of the Treasury or use it to unlawfully access any third party’s network or systems or to compromise the security, integrity, or performance of the same; (vi) utilize the CyArt Services or CyArt Data to initiate or back any legal proceedings or arbitration against any third party, except as expressly permitted by Section 6.2; (vii) interfere with or disrupt the security, integrity, or performance of the CyArt Services or CyArt Data; (viii) attempt to gain unauthorized access to the CyArt Services or its related systems or networks; (ix) access or use the CyArt Services or CyArt Data or any associated documentation to construct or offer a competitive product or service or to divulge such information for the purpose of generating revenue from security products or services; (x) attempt to reverse engineer or decompile the CyArt Services; or (xi) use the CyArt Services in relation to any document associated with the offering of securities (for instance, a prospectus or a “road show” presentation).

SECTION 2 — REMUNERATION AND PAYMENT PROCEDURES

#2.1 Charges: Unless the Customer has procured the CyArt Services through an accredited partner or reseller, the Customer will compensate the fees (the “Fees”) delineated in a quotation or an order form furnished by CyArt (the “Order”). Except as otherwise indicated herein or in an Order, financial obligations to CyArt are non-rescindable and payments rendered are non-reimbursable. Any refunds provided under this Agreement will be made to the entity that transferred the relevant Fee to CyArt and, if applicable, the Customer will solely pursue the authorized partner or reseller to recover such a refund.

#2.2 Tax Obligations: The Customer will bear the burden for all sales, usage, and other analogous taxes stemming from the Customer’s purchase or utilization of the CyArt Services, excluding taxes based on CyArt’s income or revenues. The Customer will not deduct any taxes from any amounts payable to CyArt.

#2.3 Terms of Payment: The Customer will settle in full the amounts stated in any Order within thirty (30) days of receiving the invoice unless otherwise stipulated in the Order. Unless otherwise consented to in writing by CyArt (including in an Order), (i) all remittances will be made by bank wire transfer conforming to CyArt’s directives or by check issued by a bank in India, and (ii) all remittances will be devoid of all setoffs and made in Indian Rupees (INR). If CyArt does not receive payment within the allotted time, it will be deemed a material breach.

SECTION 3 — REPRESENTATIONS, WARRANTIES, AND COVENANTS; INTELLECTUAL PROPERTY INDEMNIFICATION

#3.1 Representations, Warranties, and Covenants: Each Party hereby affirms, guarantees, and promises to the other that: (a) it possesses and will continue to possess the complete right, power, and authority to enter into and fulfill this Agreement and all of the transactions envisioned by this Agreement; (b) no approval, consent, permit, or order from any government authority or other entity is mandated for the conclusion, delivery, and fulfillment of this Agreement by such Party; and (c) it will abide by all relevant laws and regulations in the provision of the CyArt Services and in the utilization and access of the CyArt Services, respectively. The Customer further affirms, guarantees, and promises that: (y) all account and other information provided by the Customer is and will remain accurate in all significant aspects and if there are any substantial changes in such information during the Term, the Customer will notify CyArt of such changes in writing; and (z) it possesses all necessary consents and permissions to provide any information it uploads or otherwise supplies to CyArt in relation to the CyArt Services.

#3.2 Disclaimer of Warranties: EXCEPT FOR WHAT IS EXPLICITLY STATED IN SECTION 3.1:

CYART HEREBY REFUTES ALL EXPRESS AND IMPLIED WARRANTIES OF ANY TYPE, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, TITLE, SUITABILITY FOR A PARTICULAR PURPOSE, ACCURACY, PUNCTUALITY, COMPLETENESS, RELIABILITY, ERROR-FREE OPERATION, SECURITY AGAINST UNAUTHORIZED ACCESS SUCH AS HACKING OR OTHER SIMILAR MEANS, AND NON-INFRINGEMENT. THE CYART SERVICE AND THE CYART DATA (INCLUDING ANY SUGGESTIONS OR FORECASTS) AND ANY THIRD-PARTY SERVICES PROVIDED IN CONJUNCTION WITH THEM, ARE OFFERED ON AN “AS IS” BASIS ONLY, WITHOUT ANY WARRANTIES WHATSOEVER, AND ARE SUBJECT TO MODIFICATIONS AT ANY TIME. THE CUSTOMER ASSUMES ALL RISKS OF DAMAGE OR LOSS FROM DEPENDING UPON OR UTILIZING THE CYART SERVICE, THE CYART DATA, ANY RESULTANT DATA, AND ANY THIRD-PARTY SERVICES PROVIDED IN CONJUNCTION WITH THEM FOR DECISION-MAKING PURPOSES. THE CUSTOMER ACKNOWLEDGES THAT CERTAIN CYART SERVICES DEMAND A SUPPORTED BROWSER AND THAT ACCESS TO THIRD-PARTY SERVICES PROVIDED WITH THE CYART SERVICES MAY HAVE ADDITIONAL REQUIREMENTS. THE CYART SERVICES AND CYART DATA DO NOT CONSTITUTE INVESTMENT OR FINANCIAL COUNSEL, NOR RECOMMENDATIONS TO ACQUIRE, SELL, OR MAINTAIN SPECIFIC SECURITIES.

#3.3 Indemnification for Intellectual Property: CyArt will defend, at its own cost and with lawyers of its choosing, against any lawsuit brought against the Customer and its respective directors, officers, employees, and representatives, collectively referred to as (the “Indemnified Parties”) by a third party, if the lawsuit is predicated on a claim that the CyArt Technology infringes any patents, trademarks, or copyright of a third party (the “Claim”). CyArt will cover those costs and damages that are ultimately awarded to such third-party claimants in any such lawsuit, or in a settlement of such lawsuit, which are specifically attributable to the Claim.

The aforementioned indemnification obligations are contingent on the Customer: (i) immediately providing CyArt with written notice of any such lawsuit; (ii) granting CyArt exclusive control of the defense of any such claim and all related settlement discussions; and (iii) offering assistance and full cooperation in such defense, upon CyArt’s request and at CyArt’s cost.

If the CyArt Technology becomes, or in CyArt’s opinion is likely to become the subject of an infringement claim, then CyArt may, at its sole discretion and expense, either (i) replace or modify the CyArt Technology so that it is non-infringing; (ii) secure for the Customer the right to continue using the allegedly infringing CyArt Technology; or (iii) terminate the Customer’s right to use the CyArt Technology and/or terminate this Agreement, in whole or in part, as appropriate, upon written notice to the Customer and refund the Customer (or authorized partner or reseller if the initial payment was made by such partner or reseller) any prepaid fees attributable to the remainder of the term of the Customer’s subscription to the applicable CyArt Technology. The Customer will have the right to participate, at its expense, in the defense of any claim covered under this Section with counsel of its own choosing.

Notwithstanding the foregoing, CyArt shall have no obligation under this Section or otherwise with respect to any infringement claim based on any use of the CyArt Technology not in accordance with this Agreement; any use of the CyArt Technology in combination with equipment, software, or data not supplied by CyArt if such infringement would have been avoided but for the combination with other equipment, software, or data; any modification of the CyArt Technology by any person other than CyArt or as authorized by CyArt in writing; or the Customer’s continued use of the allegedly infringing CyArt Technology after receiving written notice to cease such use.

THIS SECTION ESTABLISHES CYART’S TOTAL LIABILITY AND THE CUSTOMER’S EXCLUSIVE REMEDY FOR ANY CLAIMS OF INFRINGEMENT OF ANY INTELLECTUAL PROPERTY RIGHT BY CYART’S PRODUCTS, TECHNOLOGY, OR SERVICES OR BY THEIR DISTRIBUTION, OPERATION, USE, OR RECEIPT.

SECTION 4 — LIMITATION OF LIABILITY

#4.1 TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL EITHER PARTY OR ITS AFFILIATES, SUPPLIERS, PARTNERS, RESELLERS, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, SHAREHOLDERS, INSURERS OR CONTRACTORS (“RELATED PARTIES”) BE LIABLE UNDER THIS AGREEMENT FOR ANY INDIRECT, CONSEQUENTIAL, INCIDENTAL, SPECIAL, PUNITIVE OR EXEMPLARY DAMAGES (INCLUDING BUT NOT LIMITED TO LOST REVENUES, PROFITS OR DATA OR OTHER ECONOMIC LOSS) ARISING FROM ANY CAUSE OF ACTION OR LEGAL THEORY, INCLUDING BUT NOT LIMITED TO BREACH OF WARRANTY, BREACH OF CONTRACT, TORT, STRICT LIABILITY OR FAILURE OF ESSENTIAL PURPOSE EVEN IF THE PARTY OR A RELATED PARTY HAS BEEN ADVISED, KNEW, OR SHOULD HAVE KNOWN OF THE POSSIBILITY OF SUCH DAMAGES.

#4.2 THE MAXIMUM LIABILITY OF EITHER PARTY UNDER THIS AGREEMENT, TAKEN AS A WHOLE, FOR ANY AND ALL CLAIMS IN CONNECTION WITH THIS AGREEMENT, INCLUDING BUT NOT LIMITED TO CLAIMS FOR INDEMNIFICATION, BREACH OF WARRANTY, BREACH OF CONTRACT, TORT, STRICT LIABILITY, FAILURE OF ESSENTIAL PURPOSE OR OTHERWISE, WILL IN NO CIRCUMSTANCE EXCEED THE FEES PAID OR OWED TO CYART IN THE PAST TWELVE (12) MONTHS UNDER THIS AGREEMENT.

#4.3 NOTWITHSTANDING THE FOREGOING, SECTIONS 4.1 AND 4.2 WILL NOT APPLY WITH RESPECT TO ANY CLAIMS BASED ON A PARTY’S OBLIGATIONS UNDER SECTION 1.2 (USE OF SERVICES), SECTION 1.3 (RESTRICTIONS), SECTION 3.3 (INTELLECTUAL PROPERTY INDEMNIFICATION), OR SECTION 6 (CONFIDENTIALITY), OR ANY OTHER CLAIMS FOR WHICH LIABILITY CANNOT BE EXCLUDED OR LIMITED BY LAW.

SECTION 5 — TERM AND TERMINATION

#5.1 Duration: This Agreement takes effect on the Effective Date and continues until all under this Agreement outlined subscriptions have either expired or been terminated and access to the CyArt Services has been discontinued (such a period will be referred to as the “Term”).

#5.2 Duration of Procured Subscriptions: The tenure of each subscription will be as specified in the applicable Order or as agreed upon between the Customer and the applicable authorized partner or reseller. Once a subscription concludes, access may be rescinded. Unless otherwise specified in an Order, subscriptions procured directly from CyArt will auto-renew for additional periods equivalent to the expiring subscription term or one year (whichever is longer) at the prevailing list prices, unless either Party notifies the other of non-renewal at least thirty (30) days before the end of the relevant subscription term.

#5.3 Termination for Cause: Either Party may instantly conclude this Agreement and any active Orders upon written notice if the other Party: (a) fails to rectify a significant breach of this Agreement within thirty (30) calendar days after receiving written notice of such breach (if capable of cure); (b) becomes insolvent or commits an affirmative act of insolvency; (c) initiates an assignment for the benefit of creditors or takes similar action; (d) submits a voluntary bankruptcy or similar petition; (e) assents to any involuntary bankruptcy or similar petition and such involuntary petition is not dismissed within ninety (90) days; or (f) is adjudged bankrupt or to a similar effect. If the Customer terminates this Agreement for cause only, CyArt will provide the Customer with a pro rata refund of the pre-paid Fees actually paid to CyArt, as of the effective date of termination

#5.4 Effects of Termination: All provisions of this Agreement that reasonably may be interpreted or construed as surviving the Termination of this Agreement will endure the termination of this Agreement, including but not limited to the obligation to pay any accrued but unpaid fees and Sections 3, 4, 5.4, 6, and 7. Furthermore, after the Term, access to the CyArt Services will be rescinded, but the Customer may retain and store, in any medium (including, but not limited to, electronic storage) any reports that include any CyArt Data that was lawfully acquired under this Agreement prior to the expiration or termination of this Agreement, for use by the Customer only as permitted in Sections 1.2 and 1.3.”

SECTION 6 — CONFIDENTIALITY

#6.1 Confidential Information: “Confidential Information” refers to all information of either Party, whether technical, business, or of another nature (including trade secrets, know-how, technology, strategic partners, customers, business plans, promotional and marketing activities, finances, and other business affairs), disclosed by the disclosing Party to the receiving Party or learned by the receiving Party in the course of its discussions, business dealings, or physical or electronic access to the premises or services of the disclosing Party. This information is identified as being proprietary and/or confidential, or the receiving Party should reasonably know to treat it as

SECTION 7 — INTERNSHIP COMMITMENTS AND INFORMATIONS

#7.1 Agreement to Terms

By accepting an internship position at CyArt Tech ("Company"), the intern ("Intern") enters into a legally binding agreement governed by these Terms and Conditions ("Terms"). These Terms outline the professional relationship, use of Company resources, intellectual property, and confidentiality obligations. By accepting the internship, the Intern acknowledges having read, understood, and agreed to comply with these Terms. The internship at CyArt Tech is designed to provide hands-on professional experience and foster skill development in a real-world setting. While educational in nature, Interns will contribute to meaningful projects. The internship does not constitute employment, and any resources or benefits provided are intended to support professional growth and project involvement. 

#7.2 Internship Structure

#7.2.1 Duration and Nature The internship is a remote learning opportunity designed to provide practical experience while meeting educational objectives. The standard duration is a minimum of six months and three days, as specified in the individual Internship Agreement. The Company may extend or modify this duration based on performance, project needs, or learning goals. Interns must demonstrate self-discipline, time management, and professional communication skills, maintaining regular connectivity during designated hours and meeting technical infrastructure requirements.

#7.2.2 Learning Phase Upon onboarding, Interns enter a Learning Phase where daily or weekly tasks will be assigned, each with specific deadlines for submission. The first week consists of general tasks relevant to the field, after which a specific domain will be assigned, and domain-related tasks will be provided. Tasks not submitted by the deadline during the Learning Phase will not be accepted afterward. The schedule during this phase is flexible, but Interns must contact their manager between 10:30 AM and 5:30 PM IST for support. If a meeting is scheduled, attendance is mandatory, and details will be shared in advance. Meetings during the Learning Phase are held as needed.

#7.2.3 Work Schedule Outside the Learning Phase, Interns must adhere to an assigned schedule, committing to a minimum of 35 productive hours per week unless otherwise specified. Schedule deviations require advance notice to supervisors, and backup communication channels must be established for emergencies. The schedule balances professional commitments with educational goals. During the Project Development Phase, the team of Interns will collectively decide the work schedule.

#7.2.4 Performance Expectations Performance is evaluated based on task and project completion, quality of work, and professional conduct. Interns must meet deadlines, provide regular updates, and produce work that meets professional standards, including thorough review and documentation. Professional interactions with team members, supervisors, and clients must reflect appropriate etiquette. Regular performance reviews will assess skills and professional growth, with constructive feedback to be incorporated. Meeting these expectations is essential for program completion and future opportunities.

#7.3 Intellectual Property Rights

#7.3.1 Company Ownership All intellectual property created during the internship, including designs, documents, research, and other work products, is exclusively owned by CyArt Tech. This includes modifications to existing projects and extends to all rights to use, modify, or monetize the work. Interns must document all creations thoroughly, and ownership persists indefinitely beyond the internship.

#7.3.2 Pre-existing Intellectual Property Interns must declare any pre-existing intellectual property before incorporating it into Company projects, providing documentation of its creation and any licenses. The Company receives a non-exclusive, perpetual license to use such IP within Company projects, while the Intern retains ownership for other uses. Clear documentation must distinguish pre-existing IP from new work to avoid disputes.

#7.3.3 Documentation and Disclosure Interns must maintain detailed records of all work, including task logs, notes, and project details. Documentation must follow Company standards, including project specifications and reports, and becomes Company property. Records must clearly separate pre-existing and new work.

#7.4 Confidentiality Obligations

#7.4.1 Scope of Confidential Information Confidential information includes all non-public data accessed or created during the internship, such as project details, client information, business strategies, and internal communications. This applies regardless of how the information is obtained or whether it is explicitly marked confidential.

#7.4.2 Duration of Confidentiality Confidentiality obligations extend indefinitely beyond the internship. Interns must not use or disclose confidential information for any purpose, even if it becomes publicly available through other means, as the obligation is tied to its original confidential nature.

#7.4.3 Security Measures Interns must use encryption, secure passwords, and follow Company security protocols to protect confidential information. Physical security measures include a clean desk policy and secure document disposal. Security breaches must be reported immediately, and regular audits ensure compliance.

#7.4.4 Financial Implications of Breach Unauthorized disclosure causing financial loss may result in intern liability for damages, including lost business, legal costs, and remedial expenses. The Company may pursue legal action to recover damages, based on documented losses.

#7.5 System Usage and Security

#7.5.1 Technical Infrastructure Requirements Interns must maintain a workspace with a reliable internet connection (minimum 10 Mbps download, 5 Mbps upload), a computer with at least 8GB RAM, a modern multi-core processor, 256GB SSD, and 1080p display. Backup systems and supported operating systems with automatic updates are required. Mobile devices must support security protocols. The Company may audit setups and require upgrades.

#7.5.2 Access Control and Authentication Interns receive unique credentials protected by two-factor authentication and strong passwords (minimum 12 characters, mixed case, numbers, special characters, no reuse). Passwords rotate every 60 days, and credentials must not be shared. Compromised credentials must be reported immediately.

#7.5.3 Data Protection and Storage Work data must be stored in approved storage solutions or version control systems, with local copies encrypted. Regular backups and secure deletion methods are mandatory. Personal cloud storage is prohibited.

#7.5.4 Security Incident Response Interns must report potential security incidents (e.g., malware, unauthorized access) within 30 minutes via designated channels. The response includes system isolation, documentation, and cooperation with investigations. Regular training and mock incidents ensure preparedness.

#7.6 Project and Work Standards

#7.6.1 Project Assignment Project assignments are provided only after all Learning Phase tasks are submitted. Projects may be product-based (potentially requiring minor development) or service-based. Weekly or bi-weekly meetings will be held to discuss project updates, with mandatory attendance and prior notification of meeting details.

#7.6.2 Development Methodology Interns must follow the Company’s Agile methodology, participating in daily stand-ups, sprint planning, and retrospectives. Sprints last two weeks, with tasks tracked daily in the project management system. Delays or blockers must be communicated immediately.

#7.6.3 Work Quality and Standards All work must be clear, well-organized, and meet professional standards. Tasks and deliverables should be easy to understand, with clear explanations where needed. Work should be thoroughly reviewed to ensure accuracy and quality, with documentation to support it.

#7.6.4 Version Control Practices Git is used with a specific workflow: branch names follow type/ticket-number/description (e.g., feature/CYA-123/user-authentication), commits follow conventional commits, and no direct commits to main branches are allowed. Pull requests require two reviews, and commits should be focused (<200 lines).

#7.6.5 Testing Requirements Work requires thorough review and testing to ensure it meets requirements, covering typical and edge cases. Issues must be addressed based on severity.

#7.6.6 Documentation Standards Projects require clear documentation, including project details, reports, and user guides in Markdown. Architecture Decision Records are mandatory. Documentation must include troubleshooting guides and be updated with project changes.

#7.6.7 Quality Assurance Process Work undergoes review and testing to ensure quality. Issues must include detailed steps for resolution. Critical issues require resolution within 24 hours. Accessibility must meet WCAG 2.1 AA standards for user-facing work.

#7.6.8 Project Management and Tracking Tasks must be tracked with detailed cards, status updates, and time logs. Dependencies, risks, and resource needs must be documented. Weekly reports and metrics are required per Company templates.

#7.7 Termination and Refund Policy

#7.7.1 Internship Termination Conditions The Company may terminate the internship for unauthorized absence (>5 days), confidentiality breaches, IP violations, consistent missed deadlines, inappropriate conduct, or actions harming the Company’s reputation. Performance-based termination follows warnings, but severe misconduct results in immediate termination.

#7.7.2 Refund Eligibility Period Refunds are considered only after completing six months and three days from the official joining date. Attempts to circumvent this period result in termination and loss of refund eligibility.

#7.7.3 Qualifying Conditions for Refund Refunds are considered for:

• Medical Emergencies: Serious conditions preventing work, supported by medical reports.
• Family Emergencies: Critical situations involving immediate family, with official documentation.
• Higher Compensation Opportunity: Full-time job offer (>4 LPA) with verified offer letter.
  
  * The Company will review documentation and, based on severity, may extend the internship duration or approve early termination with a refund.

#7.7.4 Refund Process and Timeline

• Initial Request: Submit in writing with documentation stating the qualifying condition.
• Review Period: Company reviews within 15 business days, possibly requesting more documentation.
• Decision and Processing: Approved refunds are issued within 7 business days after internship completion, to the original payment method, with possible processing fees.
• If a refund is approved, it will be released only after the completion of the internship duration, within 7 business days, to the original payment method, with possible processing fees.

#7.7.5 Company Discretion and Appeals The Company has final authority on termination and refund decisions and may make exceptions. One appeal per refund request is allowed within 7 days, requiring new documentation. The appeal decision is final.

#7.8 Leave Policy

#7.8.1 Casual Leave Interns are entitled to one casual leave per month, which must be requested with at least 2 days' prior notice to HR for approval. Leave requests must be submitted through proper channels with adequate justification.

#7.8.2 Sick Leave For sick leave of two or more days, a medical certificate with proper dates must be submitted within 48 hours of returning to work. A single sick day may be granted without a medical certificate at the discretion of management.

#7.8.3 University Examination Leave Interns requiring leave for university examinations must submit official documentation, such as an examination schedule or university notice, at least one week in advance when possible. A copy of the exam timetable or official university correspondence must be provided. If the examination schedule includes significant gaps (e.g., 5-10 days between exams), the Company will only approve leave for the actual exam days and not for the intervening periods.