Revision Date: January 6^th, 2025

Purpose

This Disclaimer applies where Nozomi Networks, Inc. and its affiliates (“Nozomi”, “we”, “us”, or “our”) provide services or features that involve Artificial Intelligence (“AI Services”). Its purpose is to promote transparency, protect customer data, and ensure compliance with applicable laws, regulations, and ethical standards.

Scope of Services

AI Services include any use, integration, or deployment of models, platforms, systems, software, or other tools reasonably understood to constitute “artificial intelligence” or defined as such by applicable law. AI Services are limited to those offered by Nozomi Networks as part of our products. AI Policy and Code of Conduct.

• Nozomi commits to responsible AI development and deployment, prioritizing safety, fairness, privacy, and transparency.
• Nozomi maintains robust governance, documentation, and auditability for all AI/ML features.
• Nozomi continuously assesses and mitigates risks, ensures human-in-the-loop validation, and upholds customer trust.
• Nozomi maintains internal governance and training programs to ensure ethical AI use.

Requirements & Commitments

1. Legal and Ethical Compliance

• Nozomi designs and delivers AI Services in compliance with applicable laws, regulations, and recognized ethical standards relevant to their scope of use. Nozomi’s AI solutions are designed as decision-support tools, not autonomous systems, and are not intended to process Personal Information (PI) or Personally Identifiable Information (PII). To the extent that limited technical or system data may incidentally contain personal identifiers, Nozomi will process such information in accordance with applicable privacy laws and this Disclaimer.
• Nozomi will conduct risk and conformity assessments as required by law and make results available to the customer upon request.
• Nozomi will secure all necessary licenses and permissions for third-party tools and datasets, ensuring compliance with intellectual property laws.

2. Data Privacy and Security

• Customer data processed by AI Services is treated as Confidential Information under the applicable Agreement.
• Customer data is not used for model training or fine-tuning, is processed on a session basis, and is never shared between customers.
• Customers may opt for local processing, ensuring no data leaves their environment. This configuration option is a self-managed function within the Vantage instance. If external processing is enabled, Nozomi ensures that data is transient, encrypted in transit and at rest, and processed only in jurisdictions offering adequate privacy protections.
• Role-Based Access Control (RBAC) and SAML integration restrict access to authorized users only.

3. Human Oversight

Nozomi’s AI Services provide analytical insights and recommendations only. They are not autonomous decision-making systems. Customers are responsible for reviewing AI outputs and making all final operational or business decisions. Quality Assurance and Continuous Improvement

Nozomi implements regular testing, user feedback collection, and performance analytics to monitor and improve AI Services. Models are updated, retrained, or rolled back as needed to address new data, regulatory requirements, or performance issues.

4. Explainability and Transparency

Nozomi makes reasonable efforts to ensure that AI models are explainable and interpretable and will, upon request, provide information sufficient to understand the primary factors influencing outputs, consistent with applicable law and protection of Nozomi’s proprietary methods. In the event Nozomi makes material changes to the AI Services which affect the operation or the categories of data that are processed, Nozomi will notify affected customers.

5. Incident Response

Nozomi Networks maintains a robust incident response process that applies uniformly across all products and services, including AI-powered features. In the event of any confirmed security incident that directly impacts customer data, this established process will be followed without exception. Specifically, Nozomi Networks will:

• Notify the customer as soon as possible, and no later than 72 hours from confirmation of the incident, unless a shorter timeframe is required by law.
• Make any additional notifications required under applicable regulations or contractual obligations.
• Take immediate steps to contain, mitigate, and remediate the impact of the incident.

Notifications will be made through the contact methods specified in the Agreement. Nozomi will cooperate with the customer’s incident response process as reasonably necessary.

6. Use of Customer Data

Nozomi will use customer data solely for purposes necessary to provide the AI Services as outlined in this Disclaimer. Customer data will not be used for model training, improvement, or shared with third parties or subcontractors without such consent.

Nozomi confirms that no customer data is used to train or enhance any third-party AI models.

‍