WithSecure™ Cloud Protection for Salesforce Terms of Service

November 2025 

Background

These terms of service (“Terms”) cover the WithSecure™ Cloud Protection for Salesforce solution of WithSecure Corporation and/or any entity that controls, is controlled by, or is under common control with WithSecure Corporation (together “WithSecure”) licensed or made available to you and to the Organization (as defined below) that you represent (together “you”), including support tools, web portals and applications, firmware, hardware, and services directly supporting your use thereof, related documentation and any updates and upgrades to any of the above (together the ”Solution”). These Terms form an integral part of the WithSecure™ Cloud Protection for Salesforce order form between you and WithSecure (“Order Form”). In case you have agreed deviations to these Terms in the Order Form, those deviations shall prevail over the respective clause of these Terms. In case there are discrepancies between the different language versions of these Terms, the English language version shall prevail. WithSecure expressly objects to and rejects any terms and conditions included or referred to in your purchase order or other similar document. You and WithSecure may both be referred to in these Terms individually as a “Party” and together as “Parties”.  

IMPORTANT – Before deploying or using the Solution, carefully read these Terms. By opting to accept, or by deploying or using the Solution, you accept and agree to adhere to these Terms on behalf of your company, organization or other legal entity (collectively, “Organization”) and you agree that you have read these Terms, understand them, have the legal authority to bind the Organization and agree to be legally bound by these Terms. If you do not agree to these Terms, do not deploy or use the Solution.

2 Subscription and Payment

2.1 Subject to these Terms and the payment of applicable subscription fees specified in the Order Form, WithSecure grants you a non-exclusive, non-transferable, non-assignable, revocable right to use the Solution, for the specified scope and specified subscription period, as separately agreed upon between you and WithSecure in the Order Form (or if applicable, between you and WithSecure’s partner). WithSecure and its licensors reserve all rights not expressly granted to you.  

2.2 Additionally, upon your request and WithSecure’s approval, WithSecure may grant you a limited, non-exclusive, non-transferable, non-assignable, revocable right to evaluate the Solution for non-commercial purposes in a sandbox environment. You must purchase a subscription to the Solution to use the Solution after the evaluation period ends.  

2.3 You may:  

(i) deploy and use the Solution solely for the number of users and/or scans and solely within the Salesforce Organization ID(s)that you have subscribed to and are listed on the Order Form; and

(ii) extend the number of users, scans or Salesforce Organization IDs entitled to use the Solution by purchasing additional subscriptions.

2.4 WithSecure has the right to invoice you for any usage in excess of the usage specified in the Order Form.  

2.5 The fees for Solution are set out in the Order Form and they exclude all applicable taxes and duty. The fees apply for initial and additional purchases during the subscription term. Notwithstanding the foregoing, WithSecure will submit a new proposal on request for renewals or increased scope with the latest fees.  

2.6 The fees for Solution shall be invoiced, in advance, after signing of the Order Form. The payments shall be made to WithSecure’s account as indicated on the invoice issued by WithSecure and are due from the date of invoice according to the payment term set out in Order Form. In case of delays in the payment exceeding 90 days from the due date, WithSecure reserves the right to withhold availability or cease delivery of Solution at its discretion until such payment has been made.  

3 Delivery

3.1 WithSecure provides the Solution in accordance with these Terms, the Order Form and the Solution overview. The Solution is deployed by you by downloading the Solution from Salesforce AppExchange and you are responsible for the proper deployment and configuration of the Solution. Once you have deployed and configured the Solution, you shall notify WithSecure for WithSecure to activate the subscription. Updates to the Solution are also deployed from Salesforce AppExchange either manually or automatically as set out in the WithSecure™ Cloud Protection for Salesforce Lifecycle Policy. Any updates to WithSecure’s backend related to the Solution are deployed automatically by WithSecure.  

3.2 The support available for you is set out in the Order Form and described further in the applicable support description.  

4 Limitations on Use  

4.1 You are not allowed to:  

(i) access, use, copy, exploit, disclose or distribute the Solution except as expressly set out in these Terms;

(ii) demonstrate, sell, offer to sell, distribute or transfer the Solution or any portion thereof to any third party;  

(iii) create derivative works based on the Solution or any part thereof;  

(iv) decompile, reverse engineer, disassemble, or otherwise attempt to derive, obtain or modify the source code of the Solution or any portion thereof;  

(v) sublicense any of the rights granted to you in these Terms;  

(vi) use the Solution or any portion thereof to implement any product or service to operate on or in connection with the Solution for any other purpose than for which the Solution is provided;  

(vii) in any event use the Solution for the following purposes: (a) harvesting or distributing any private information, copyrighted content, or trade secrets that you do not have rights to harvest or distribute; (b) distributing content that is unlawful, libelous, pornographic, abusive, harassing, threatening, or that contains content or code with destructive features; (c) accessing or distributing child pornography or bestiality; (d) spamming; (e) malware, botnets, phishing, denial-of-service attacks, illegal hacking, unauthorized port scanning, or unauthorized access; (f) impersonating another person; (g) violating other persons’ legal rights; (h) violating applicable laws; (i) other invasive or fraudulent purposes, or uses that may interfere with the operation of the Solution or other users’ ability to use the Solution; or (j) managing any content that is against the permissible content guidelines maintained by third parties from whom you have acquired the Solution, if any.  

4.2 You agree to ensure that no unauthorized parties have access to or use the Solution and agree to notify WithSecure promptly of any unauthorized access or use the Solution.

5 Intellectual Property

5.1 WithSecure and its licensors retain all right, title, and interest in the Solution and detection data as well as any tools provided by WithSecure. Except as expressly set forth in Section 2 (Subscription and Payment), nothing in these Terms shall be construed as conferring on you any express or implied license, option to license, or other right to any confidential information, technology, software or intellectual property rights embodied in the Solution. You acknowledge that WithSecure may freely use any suggestions, comments or other feedback about the Solution.  For clarity, product telemetry, object reputation, object prevalence and other scanning and detection related information are considered as WithSecure’s detection data. The Solution also relies on product analytics, that is, information about how WithSecure’s clients have used and configured the Solution. Such product analytics and configuration information are also considered as WithSecure’s detection data.

6 Warranty

6.1 To the fullest extent permitted by law, WithSecure makes no warranties, either express, implied or statutory, about the Solution. The Solution is provided “as is” and “as available”. WithSecure does not guarantee the completeness or accuracy of the results or that the Solution will detect all malware or other harmful software. WithSecure also disclaims any warranties of merchantability, fitness for a particular purpose, title, non-infringement, or that use of the Solution will be uninterrupted or error-free.  

6.2 Where the Solution interacts with the services of any third parties and/or where any third-party information systems or components are used, any warranties or services provided by WithSecure are only provided for the Solution and not to any adjoining services or components. The Solution is not warranted by such third parties. To the extent data is transmitted out of the system of a third party to the Solution, the third party is not responsible for the privacy, security, or integrity of that data.  

6.3 No oral or written information or instructions given by WithSecure, its resellers, distributors, agents, or employees shall create a warranty and you may not rely on any such information or instructions. Some jurisdictions do not allow the disclaimers in this paragraph, so they may not apply to you.

7 WithSecure’s Liability

7.1 In no event and under no legal theory, including but not limited to tort or contract, shall WithSecure, its officers, directors, employees, affiliates, licensors, resellers, distributors or suppliers (the “WithSecure Parties”) be liable to you for any special, exemplary, consequential, incidental, indirect or punitive damages, including, but not limited to, loss of revenue or profit, lost or damaged data, files or devices, application failure or malfunction, network impairment, or other commercial or economic loss, or goodwill arising out of the use of, or inability to use the Solution, even if WithSecure has been advised of the possibility of such damages. The WithSecure Parties’ maximum aggregate liability to you shall in no event exceed the total amounts paid by you for the Solution for a period of twelve (12) months immediately preceding the event causing the liability.  

7.2 Some jurisdictions do not allow the limitation or exclusion of liability for incidental or consequential damages so the above limitation or exclusion may not apply to you or may apply to you only in part. WithSecure is acting also on behalf of the WithSecure Parties to disclaim, exclude and restrict obligations, warranties, and liability as provided in these Terms, but in no other respects and for no other purpose.  

7.3 The limitations and exclusions above shall not apply to breach of a Party’s confidentiality obligations set forth in Section 11 (Confidentiality) or breach caused by gross negligence or willful misconduct. The limitations and exclusions shall not limit your payment obligations under any Order Form.

8 Indemnification

8.1 WithSecure agrees to defend you from any third party claims that your use of Solution in accordance with these Terms and the Order Form infringes any patent rights or copyrights of any third party and compensate the damages finally awarded as a result of such claim in a binding judgment or other proceedings, unless such claim arose as a result of any modifications or changes you made to the Solution, the combination of the Solution with hardware or software not provided or approved by WithSecure, or the failure to install any update provided by WithSecure. The indemnification obligations above are subject to you promptly notifying WithSecure of such claim in writing, tendering to WithSecure the right to defend or settle the claim and provide reasonable assistance to WithSecure, at WithSecure’s expense, in defending and settling the claim.  

8.2 If as a result of any binding settlement among the Parties or a final determination by a court of competent jurisdiction the Solution is held to infringe the patent rights or copyright of any third party and use of such Solution is enjoined or likely to become enjoined in WithSecure’s judgment, or if WithSecure reasonably determines that the Solution may become subject to a patent or copyright infringement claim, WithSecure shall have the option to (i) obtain the right for you to continue to use the Solution, (ii) replace or modify the Solution so that it is no longer infringing, or (iii) terminate the Order Form and provide you a prorated refund of the amount of fees paid for the remaining subscription term.

9 Your Responsibility

9.1 You are solely responsible and assume the entire risk and liability for your use of Solution and your actions based on the results provided by the Solution.  

9.2 Notwithstanding anything to the contrary set out in these Terms, you shall defend, indemnify and hold the WithSecure Parties harmless from damages, liabilities, costs and expenses (including reasonable attorneys’ fees) incurred by the WithSecure Parties in relation to claims and actions arising out of or relating to your use of the Solution and/or the services you provide to third parties through your use of the Solution.

10 Privacy

10.1 WithSecure shall comply with all applicable data protection laws and with the privacy policy. WithSecure shall process your personal data, if any, only to provide the Solution and shall process your personal data only in accordance with these Terms, the Order Form and the applicable privacy policy. To the extent WithSecure processes personal data as a data processor, the WithSecure Data Processing Agreement applies.  

10.2 WithSecure hereby guarantees to introduce or already have implemented technical and organizational security measures that are appropriate to prevent unauthorized access, modification, destruction or loss, unauthorized transmission or other unlawful processing or misuse of personal data by its officers, directors, representatives, employees or any third party acting on its behalf.

11 Confidentiality

11.1 “Confidential Information” shall mean any information disclosed by WithSecure or you to the other Party in connection with the Solution that the disclosing Party characterizes as confidential at the time of its disclosure either in writing or orally, or that, given the nature of the information or the circumstances surrounding its disclosure, reasonably should be considered as confidential, except for information which the receiving Party can demonstrate: (a) is previously rightfully known to the receiving Party without restriction on disclosure; (b) is or becomes, from no act or failure to act on the receiving Party’s part, generally known in the relevant industry or public domain; (c) is disclosed to the receiving Party by a third party and without restriction on disclosure; or (d) is independently developed by the receiving Party without access to the Confidential Information..  

11.2 If either Party is required to disclose Confidential Information to any government authority or court of law as a result of a court order or pursuant to law, it shall notify the other Party, unless prevented by law from doing so, of the required disclosure prior to disclosure and shall (i) limit its disclosure to only the Confidential Information it is required by law to provide; and (ii) exercise reasonable efforts to obtain protective treatment of the Confidential Information.  

11.3 Each Party shall disclose or use Confidential Information only as is necessary for the purpose for which it was disclosed and in accordance with the provisions of these Terms and to take all reasonable measures to avoid unauthorized disclosure or use of Confidential Information, no less stringent than the measures it takes to protect its own confidential information.  

11.4 In case of discovery of unauthorized disclosure or use of Confidential Information, the receiving Party shall notify the disclosing Party immediately and use all reasonable efforts to prevent any further unauthorized disclosure or use thereof.

12 Changes

12.1 WithSecure is constantly improving the Solution and related services. WithSecure reserves the right to upgrade and make changes to the Solution and modify features or functionality of the Solution from time to time. Such changes may include, but are not limited to, adding new features or removing existing features. Where such an upgrade or change is not automated but provided to you as a voluntary option, you should use the latest version of the Solution for optimized security and usability. WithSecure further reserves the right to end the maintenance and support for certain versions of the Solution (including versions designed to be used in certain operation systems) in accordance with the WithSecure™ Cloud Protection for Salesforce Lifecycle Policy, which may lead to the Solution becoming inoperable. Use of the Solution, for which the maintenance is discontinued, is not recommended and such use is entirely your own responsibility. For more information on the product lifecycle, please see the WithSecure™ Cloud Protection for Salesforce Lifecycle Policy. As the Solution is likely to evolve during your subscription, WithSecure may need to revise these Terms from time to time. WithSecure shall publish the revised Terms on WithSecure’s website and/or at another interaction point where it has previously been made available. Once published, the revised Terms shall automatically cover the Solution and installations of your subscription upon the next renewal of your subscription. You accept the revised Terms by continuing to use the Solution. If any part of these Terms is found void and unenforceable, it will not affect the validity of the rest of the Terms, which shall remain valid and enforceable.

13 General Terms

13.1 Access 

WithSecure Cloud Protection for Salesforce application runs in your Salesforce.com environment and access to your Salesforce.com environment and the WithSecure Cloud Protection for Salesforce application is authenticated in accordance with the multi-factor authentication requirements of Salesforce.com. You are solely responsible for managing the access rights to the Solution and WithSecure is not responsible for any loss or damage resulting from any unauthorized access to the Solution.  

13.2 Suitability

The Solution is subject to specific limitations such as purpose of use and certain technical requirements, including but not limited to operating system, storage space, geographical location, and network connectivity, as informed by WithSecure or its reseller or distributor from time to time. You hereby acknowledge and confirm that you have checked the Solution’s suitability for your own requirements before using the Solution.  

13.3 Open-source Licenses

To the extent any component of the Solution is made available to you under an open-source license, a list of applicable open-source licenses is available in the product user interface and the provisions of that license may expressly override some of these Terms with respect to such component.  

13.4 Availability

You are informed and hereby accept that all or part of the Solution may be temporarily unavailable or non-operational for repairs, upgrades, maintenance, or for reasons beyond WithSecure’s reasonable control (force majeure). WithSecure Parties shall not be held liable for the consequences of such interruptions and shall undertake to restore the availability and operation of the Solution as rapidly as reasonably possible, depending on the technical constraints encountered.  

13.5 Assignment

These Terms and the Order Form shall be binding upon and will inure to the benefit of the legal successors of WithSecure and WithSecure has the right to assign the Order Form, these Terms or any of their rights or obligations under the Order Form or these Terms to an affiliate or in connection with a merger, acquisition, corporate reorganization, or sale of its assets not involving your direct competitor. You may not, without the prior written consent of WithSecure, assign the Order Form, these Terms or any rights or obligations under the Order Form or these Terms to any third party.  

13.6 Notices

Any and all notices or information, other than information or proposals of purely a technical nature, shall be given to the other in writing in the English language at the address specified in the Order Form, or as informed separately in writing by the Parties, and delivered (i) personally; (ii) by a recognized courier service to the specified address; or (iii) sent by email by an authorized official; or (iv) with prepaid (return receipt requested) first-class or registered post. Your notices to WithSecure shall be marked for the attention of CPSF Legal with a copy to cpsf-legal@withsecure.com. Any notice will be deemed received on the delivery date reflected by the courier or mail service receipt or in case of email, when the sender of the email has received an automated or manual message confirming email delivery.  

13.7 Compliance

WithSecure is committed to ethical and responsible business practices. For more information, please see WithSecure’s Code of Conduct. Each Party shall comply with all applicable anti-bribery and anti-corruption laws. Both Parties represent that it has not received or been offered any illegal or improper bribe, kickback, payment, gift, or thing of value from an employee or agent of the other Party in connection with these Terms or the Order Form.  

13.8 Export Restrictions

When using the Solution, you agree to: i) comply with all applicable EU, US and other applicable national export control laws, regulations, administrative acts or executive orders and any amendments thereof regarding export, distribution and/or use of Solution, ii) have and maintain all permits and licenses required by any governmental unit or agency, and iii) comply with all applicable laws and regulations, in performing its obligations under these Terms and the Order Form and with respect to the Solution. You shall not directly or indirectly export or re-export the Solution (i) to persons or entities subject EU or US sanctions or (ii) to any country or region subject to a comprehensive EU or US embargo. You represent and warrant that you are not a government end user located in, or owned or controlled by, a government of any country or region subject to U.S. sanctions or export restrictions and you shall not permit access to the Solution by any such government end user. If these Terms or the Order Form or any transaction or act contemplated herein is legally required to be approved, registered, notified or recorded with or by any government agency, you will assume all such obligations, indemnify and hold WithSecure Parties harmless from and against any claim, proceeding, action, fine, loss, cost and damage arising out of or relating to any non-compliance with export control regulations by you, and notify WithSecure thereof prior to taking any such action. WithSecure shall in no case be liable for any illegal or unauthorized export and/or use of the Solution by you.  

13.9 Reference Right  

You hereby grant WithSecure the right to use your name and logo in WithSecure’s sales and marketing materials, including but not limited to digital content on WithSecure’s websites.  

13.10 Governing Law and Dispute Resolution  

Unless otherwise stated below, these Terms and the Order Form shall be governed under the laws of Finland. With the sole exception of any application for injunctive relief, any dispute, controversy or claim arising out of or relating to these Terms or the Order Form, or the breach, termination or validity thereof that cannot be solved amicably or through mediation, shall be finally settled by arbitration in accordance with the Arbitration Rules of the Finland Chamber of Commerce. The number of arbitrators shall be one. The seat of arbitration shall be Helsinki, Finland. The language of the arbitration shall be English.  

For subscriptions purchased within or on behalf of users residing within the United States or operating under the laws of the United States, the governing law of these Terms shall be the laws of the State of New York. In such case, with the sole exception of any application for injunctive relief, any dispute, controversy or claim arising out of or relating to these Terms or the Order Form that cannot be solved amicably or through mediation, shall be finally settled by one arbitrator in accordance with the JAMS Rules. The place of arbitration is New York, USA.  

13.11 Other  

These Terms and the Order Form constitute the entire agreement between the Parties with respect to the subject matter hereof. If any provision of these Terms and/or the Order Form is held by a court of competent jurisdiction to be illegal, invalid, or unenforceable, the remaining provisions shall remain in full force and effect. Both Parties are independent contractors and agree that no partnership, joint venture, or agency relationship exists between the Parties. Each Party will be solely responsible for its respective obligations as an employer, including paying any employment-related taxes and insurance of its own employees. The Parties will undertake their obligations under these Terms and the Order Form at their own expense, unless otherwise expressly agreed in these Terms and/or the Order Form. The failure to enforce any of the provisions of these Terms and/or the Order Form will not constitute a waiver. The terms of these Terms and the Order Form control the relationship between WithSecure and you and do not create any third-party beneficiary rights.

14 Term and Termination

14.1 The Order Form and these Terms remain in force and valid for the subscription period defined in the Order Form and will, thereafter, be automatically renewed for a subscription period of the same length, unless either Party notifies the other Party in writing in accordance with Section 13.6 (Notices) at the latest 30 days before the end of the subscription period that they wish not to renew. WithSecure will invoice you for renewals based on the Order Form. In case you inform WithSecure that you do not wish to renew, the Order Form and these Terms are deemed automatically terminated upon the expiry of the subscription term set out in the Order Form.  

14.2 Either Party may terminate the Order Form for cause with immediate effect if (i) the other Party materially breaches these Terms and/or the Order Form (including failure to make timely payment) and fails to remedy such breach within thirty (30) days of receiving written notice thereof, or (ii) the other Party becomes subject to any governmental action or measure that suspends or terminates its business, or becomes insolvent, bankrupt, makes an assignment for the benefit of creditors, or is otherwise subject to winding-up proceedings.  

14.3 Without prejudice to any other rights of termination or expiration in these Terms or under contract or law, WithSecure may terminate your subscription and access to the Solution immediately without notice if you are in breach of any of these Terms or the Order Form or use the Solution’s functions for purposes other than those indicated in the official documentation. Where WithSecure observes that you are using the Solution (i) in breach of these Terms and/or the Order Form, (ii) other applicable terms or (iii) its intended purpose or (iv) in a manner that could jeopardize its use by a third party (for example by monopolizing the access bandwidth) or to cause harm to a third party, WithSecure reserves the right (a) to not renew your subscription, (b) to limit your use of the Solution or part thereof, and (c) to terminate your subscription.  

14.4 In the event of termination of the Order Form, you shall no longer use any rights granted to you by these Terms or the Order Form and WithSecure shall no longer be obliged to provide the Solution or support to you. Any termination of the Order Form or these Terms shall not discharge any of your obligations to make outstanding payments of fees and no refund shall be given for any prepaid portion of the remaining subscription term. These Terms will continue to apply in full in respect of any Order Form with a fixed subscription period until said fixed subscription period has elapsed. Notwithstanding the foregoing, in the case of early termination of the Order Form due to a breach by WithSecure, the Order Form shall be deemed as terminated and WithSecure shall provide to you a pro-rated refund of any prepaid fees paid up to the date of termination.  

14.5 The following sections of these Terms shall survive the termination of these Terms and the Order Form: Section 5 (Intellectual Property), Section 6 (Warranty), Section 7 (WithSecure’s Liability), Section 8 (Indemnification), Section 9 (Your Responsibility), Section 10 (Privacy), Section 11 (Confidentiality), Section 13.8 (Export Restrictions), Section 13.10 (Governing Law and Dispute Resolution), Section 14 (Term and Termination).  

14.6 If your Organization is headquartered and billed within the European Union, the EU Data Act Addendum applies additionally.  

15 U.S. Government End User  

For subscriptions purchased within the United States or operating under the laws of the United States, the Solution and associated documentation are ‘commercial items’ as defined in FAR 2.101, consisting of ‘commercial computer software’ and ‘commercial computer software documentation,’ as such terms are used in FAR 12.212 and DFARS 227.7202, as applicable. Use, duplication, or disclosure by the U.S. Government is subject to the restrictions set forth in these Terms. The manufacturer is WithSecure Corporation, Välimerenkatu 1, FIN-00180 Helsinki, Finland.  

16 Contact  

If you have any questions regarding these Terms, please visit our Support Portal or contact your WithSecure account manager directly.