Mandatory Legal Notices — Willis Brown Inc. (MSA-v2026.12)

1. Contracting Parties: This Master Subscription Agreement ("Agreement") is entered into between Willis Brown Inc., a Canadian corporation operating as Codein Cybersecurity via https://codein.ca ("Provider"), and the subscribing legal entity identified above ("Customer") for the DetectMonkey platform.

2. Detection & Alerting Scope Only — No Unilateral Remediation: DetectMonkey is strictly a security telemetry ingestion, threat detection, and alerting service. Unless explicitly contracted under a separate written Incident Response Addendum, Provider does not perform unilateral or automated remediation, host isolation, process termination, firewall modification, active threat eradication, or disaster recovery on Customer systems.

3. No Guarantee of Prevention or Complete Detection: Cybersecurity threats evolve continuously. Provider does not warrant, guarantee, or ascertain that malicious threats, unauthorized users, ransomware, data exfiltration, or security incidents will not take place, nor that every malicious event will be detected or alerted prior to impact.

4. Not Business Insurance & Mandatory Customer Backups: DetectMonkey is a technical monitoring tool and is not a policy of cyber insurance. Customer remains solely responsible for maintaining verified, offline/immutable backups (3-2-1 rule) and appropriate cyber insurance.

5. Limitation of Liability Cap (6 Months' Fees) & Damages Waiver: To the maximum extent permitted by Canadian law, neither Willis Brown Inc. nor its officers shall be liable for indirect, consequential, punitive, business-interruption, data-loss, or ransomware-extortion damages. Willis Brown Inc.'s total aggregate liability under this Agreement is strictly capped at the total subscription fees actually paid by Customer for DetectMonkey during the six (6) months immediately preceding the event giving rise to the claim.