General terms and conditions of sale and use

Courtesy translation. The General Terms and Conditions of My audit corner are drafted in French and governed by French law. Only the French version has contractual force; in the event of any discrepancy, the French version prevails. The French text is available at myauditcorner.com/fr/conditions-generales.

Version of 1 October 2026

Contents

1. Who we are
2. Definitions
3. Scope and contractual documents
4. Part A: subscription to the Solution
5. Part B: Services
6. Part C: common provisions

1. Who we are

My audit corner ("M.A.C") is a French simplified joint-stock company (SAS) with share capital of €47,219, whose registered office is at 14 rue de la Cressonnière, 31270 Cugnaux, France, registered with the Toulouse Trade and Companies Register under number 991 016 791 (EU VAT FR94991016791). Its President is InLineDots, represented by Mr Sébastien Risler.

Contact: contact@myauditcorner.com. Professional indemnity insurance policy: C-ST-68D69C81D9C1.

2. Definitions

3. Scope and contractual documents

These general terms and conditions ("GTC") apply to any order placed with M.A.C by a business customer (the "Customer"). The agreement (the "Agreement") consists of, in decreasing order of priority: the Order Form, the personal data processing agreement, and these GTC. They prevail over the Customer's general purchasing conditions unless otherwise agreed in writing. Signing an Order Form constitutes acceptance of the GTC in force on that date.

Part A: subscription to the Solution

A1. Description of the Solution

The Solution connects to the Customer's document repositories (for example SharePoint, OneDrive, Google Drive, TraceX, Odoo, Confluence, Jira) or receives the documents it uploads. In particular, it allows the Customer to:

• assess the quality management system and technical files, requirement by requirement, and identify inconsistencies between documents;
• produce action plans and suggested content;
• support internal audits and responses to audit nonconformities;
• analyse the impact of a change, track post-market commitments and consistency with EUDAMED;
• monitor regulations and standards on the references chosen by the Customer;
• answer Users' questions from Customer Data, citing sources, and draft documents.

The Solution is provided on a SaaS basis. M.A.C continuously improves it; such changes may not remove an essential feature of the subscribed Plan during the Subscription.

A2. Plans, Users and Credits

• Every Plan gives access to all features of the Solution, for an unlimited number of Users.
• Plans differ by the volume of Credits included, specified in the Order Form. Consumption is visible at any time in the Solution.
• If the included volume is insufficient, the Customer may obtain additional capacity on demand, under the terms of the Order Form, without changing Plan. The Customer may also upgrade to a higher Plan at any time.
• Unless otherwise stated in the Order Form, Credits not used by the end of a period are neither carried over nor refunded.

A3. Term and renewal

• Monthly commitment (default): the Subscription is entered into for one month and renewed tacitly each month. The Customer may terminate it at any time with thirty (30) days' notice.
• Annual commitment (optional): the Subscription is entered into for twelve (12) months in return for the discount stated in the Order Form, and renewed tacitly for successive twelve-month periods unless either Party gives notice at least thirty (30) days before the end of the term. It may not be terminated before its term, except for breach by M.A.C (article C6).

A4. Prices, invoicing and payment

Prices are those in the Order Form, expressed in euros excluding tax; VAT is charged in addition. The Subscription is invoiced in advance, monthly or annually depending on the commitment chosen. Invoices are payable by bank transfer within thirty (30) days of their issue date.

Any late payment automatically incurs late-payment interest at three (3) times the French statutory interest rate and a fixed indemnity of €40 for recovery costs (Article L. 441-10 of the French Commercial Code). If a formal notice remains without effect for fifteen (15) days, M.A.C may suspend access to the Solution until payment.

M.A.C may revise its prices at each renewal by informing the Customer at least two (2) months before the end of the term; the Customer may then decide not to renew.

A5. Availability and support

M.A.C uses reasonable endeavours to ensure the availability and quality of the Solution (obligation of means). Maintenance is, as far as possible, scheduled outside business hours and announced. Support is provided by email on business days.

A6. Customer obligations

• Use the Solution for its intended purpose and in accordance with the Agreement, and keep credentials confidential.
• Hold the necessary rights over the documents and references it connects or uploads, in particular standards, the licensed texts of which it provides itself.
• Not attempt to copy, modify, decompile or circumvent the security measures of the Solution.

A7. Nature of the results

The Solution relies on artificial intelligence. Its analyses, assessments, answers and content are for information and support decision-making: they are not a certified audit, legal advice or a notified body assessment, and may contain errors. Each result cites the documents it is based on so that the Customer can check it. The Customer remains solely responsible for its decisions and for the compliance of its products. M.A.C provides a software validation file so that the Customer can qualify the Solution within its quality system.

A8. End of Subscription and reversibility

Connected documents remain in the Customer's own tools. At the end of the Subscription, the Customer has thirty (30) days to export the results produced by the Solution (reports, action plans, drafted documents). M.A.C then deletes Customer Data within a further thirty (30) days, unless required by law to retain it.

Part B: Services

B1. Ordering

Each Service is covered by an Order Form specifying its scope, deliverables, price (generally fixed), schedule and any specific terms. Work outside the scope requires a new Order Form.

B2. Performance

Services are performed by M.A.C's experts, using the Solution as their working tool, under an obligation of means. The Customer provides the necessary documents, access and contacts in good time; agreed timeframes are subject to these. The Solution used for a Service is provided and operated by M.A.C for its duration, without a separate Subscription.

B3. Price and payment

Unless otherwise stated in the Order Form, Services are invoiced 50% on order as a deposit and the balance on delivery, payable by bank transfer within thirty (30) days. Article A4 applies to late payment.

B4. Deliverables

Once the price has been paid in full, the Customer may freely use the deliverables provided to it. M.A.C retains ownership of its methods, tools, templates and know-how, as well as of the Solution.

B5. Limits

Services help the Customer prepare for and achieve compliance; they do not guarantee the outcome of an audit, certification or assessment by a notified body or authority, which alone make those decisions. The outsourced PRRC Service is governed by a specific agreement setting out the responsibilities under Article 15 of the MDR or IVDR.

B6. Launch Pack

The Launch Pack is a one-off onboarding Service, in addition to a Plan: set-up of the Solution, connection of the documentation, transfer of the regulatory context and configuration of the applicable references.

Part C: common provisions

C1. Customer Data and artificial intelligence

• The Customer remains the sole owner of Customer Data. It authorises M.A.C to host and process it only to the extent necessary to perform the Agreement.
• No training on your data: Customer Data is never used to train or improve any artificial intelligence model, whether by M.A.C or by its providers.
• Customer Data is hosted on Google Cloud Platform in the European Union. The artificial intelligence models used (Gemini, via Vertex AI) run in the European Union (Belgium).
• Exchanges are encrypted in transit and data is encrypted at rest. Each Customer's Data is isolated from that of other customers.
• M.A.C's staff access Customer Data only at the Customer's request, to perform a Service, or where technically necessary for maintenance.

C2. Personal data

For personal data contained in Customer Data, the Customer is the controller and M.A.C acts as processor within the meaning of Article 28 GDPR. The terms of this processing (instructions, security, sub-processors, breach notification, assistance, return and deletion of data) are set out in the data processing agreement, which forms part of the Agreement. The main sub-processor is Google Cloud (hosting and artificial intelligence, European Union). Personal data of the Customer's contacts is processed in accordance with our Privacy policy. Contact: dpo@myauditcorner.com.

C3. Confidentiality

Each Party keeps confidential the information of the other Party that it learns in connection with the Agreement, for its duration and five (5) years after it ends, and uses it only to perform the Agreement.

C4. Intellectual property

M.A.C holds all rights in the Solution. The Agreement grants the Customer a personal, non-exclusive and non-transferable right of use for the duration of the Subscription or Service, with no transfer of ownership.

C5. Liability

M.A.C's liability is limited to direct and foreseeable damage proven by the Customer. M.A.C is not liable for indirect damage, including loss of revenue, opportunity or data, nor for decisions made by the Customer on the basis of results from the Solution or Services. For all causes combined, M.A.C's liability is capped: for the Subscription, at the amounts paid over the last six (6) months; for a Service, at the price of that Service. These limits do not apply in the event of gross negligence or wilful misconduct.

C6. Termination for breach

In the event of a serious breach by a Party of its obligations, not remedied ten (10) days after formal notice by registered letter, the other Party may terminate the Agreement automatically. Sums due for the elapsed period remain payable; article A8 applies.

C7. References

M.A.C only cites the Customer's name or logo as a commercial reference with its prior written consent.

C8. Miscellaneous

• Neither Party is liable for a failure caused by force majeure within the meaning of Article 1218 of the French Civil Code.
• M.A.C may use subcontractors, for whom it remains responsible.
• The Customer may not assign the Agreement without M.A.C's written consent.
• The invalidity of one clause does not affect the others. Failure to enforce a clause does not constitute a waiver.
• M.A.C may amend the GTC; the new GTC apply from the next renewal, after the Customer has been informed.

C9. Governing law and disputes

The Agreement is governed by French law and drafted in French, which prevails over any translation. The Parties first seek an amicable solution. Failing that, any dispute shall be submitted to the competent courts under ordinary rules of jurisdiction.