Legal Addendum

Last Updated: January 15, 2026

Introduction

This Legal Addendum contains additional terms, conditions, and supplementary agreements that complement our primary legal documents. These provisions provide additional clarity, address specific scenarios, and establish supplementary legal frameworks for our software development services and business operations.

Purpose of Addendum

This Legal Addendum serves to:

• Provide additional legal clarity and specificity
• Address specific business scenarios and requirements
• Establish supplementary legal frameworks and protections
• Ensure comprehensive legal coverage for all aspects of our services
• Maintain compliance with evolving European business regulations

Additional Service Terms

Service-Specific Provisions

Additional terms specific to different service categories:

Custom Software Development:

• Intellectual Property Rights: All custom-developed software remains the property of the client upon full payment
• Source Code Access: Clients receive full source code access upon project completion
• Documentation: Comprehensive technical and user documentation is provided
• Training: Initial training and knowledge transfer sessions are included
• Warranty Period: 90-day warranty period for custom software solutions
• Maintenance Options: Extended maintenance and support agreements available

AI and Automation Services:

• Algorithm Ownership: AI algorithms developed remain Alfares property unless specifically negotiated
• Data Training Rights: Alfares retains rights to use anonymized data for algorithm improvement
• Performance Guarantees: Specific performance metrics and guarantees are defined per project
• Ethical AI Standards: All AI solutions comply with European AI ethics guidelines
• Transparency Requirements: AI decision-making processes are documented and explainable
• Bias Prevention: Measures implemented to prevent algorithmic bias

Cloud Migration Services:

• Migration Planning: Comprehensive assessment and planning phase included
• Downtime Minimization: Zero-downtime migration strategies implemented
• Data Security: Enhanced security measures during migration process
• Rollback Procedures: Detailed rollback procedures in case of issues
• Performance Optimization: Post-migration performance optimization included
• Compliance Verification: GDPR and regulatory compliance verification

Quality Assurance Provisions

Additional quality and testing requirements:

Testing Standards:

• Unit Testing: Minimum 80% code coverage for all custom development
• Integration Testing: Comprehensive integration testing for all system components
• User Acceptance Testing: Client participation in UAT process required
• Security Testing: Penetration testing and security audits included
• Performance Testing: Load testing and performance optimization
• Accessibility Testing: WCAG 2.1 AA compliance verification

Quality Metrics:

• Code Quality: Static code analysis and quality gates implemented
• Documentation Standards: Comprehensive technical and user documentation
• Review Processes: Peer code reviews and architectural reviews
• Continuous Integration: Automated testing and deployment pipelines
• Monitoring: Application performance monitoring and alerting
• Maintenance: Regular updates and security patches

Additional Business Terms

Project Management Provisions

Enhanced project management and communication requirements:

Communication Protocols:

• Weekly Status Reports: Regular project status updates and progress reports
• Issue Tracking: Comprehensive issue tracking and resolution procedures
• Change Management: Formal change request and approval processes
• Risk Management: Proactive risk identification and mitigation strategies
• Stakeholder Management: Regular stakeholder communication and updates
• Escalation Procedures: Clear escalation paths for issues and concerns

Timeline and Milestone Management:

• Project Planning: Detailed project planning with clear milestones
• Resource Allocation: Transparent resource allocation and availability
• Dependency Management: Identification and management of project dependencies
• Buffer Time: Appropriate buffer time for unexpected challenges
• Critical Path Analysis: Regular critical path analysis and optimization
• Contingency Planning: Backup plans for critical project components

Financial and Payment Provisions

Additional financial terms and payment conditions:

Payment Terms:

• Milestone Payments: Payment tied to project milestones and deliverables
• Retention Amount: 10% retention until final acceptance and deployment
• Late Payment Penalties: 2% monthly penalty for payments over 30 days late
• Currency Fluctuations: Protection against significant currency fluctuations
• Tax Compliance: All applicable taxes and duties included in pricing
• Expense Reimbursement: Reasonable expenses reimbursed with prior approval

Pricing Adjustments:

• Scope Changes: Pricing adjustments for significant scope changes
• Technology Changes: Pricing adjustments for technology stack changes
• Timeline Extensions: Additional costs for client-requested timeline extensions
• Resource Changes: Pricing adjustments for resource requirement changes
• Third-Party Costs: Pass-through of third-party licensing and service costs
• Travel Expenses: Travel expenses for on-site work when required

Additional Legal Provisions

Intellectual Property Enhancements

Enhanced intellectual property protections and rights:

Proprietary Technology:

• Alfares IP: Alfares retains rights to proprietary tools, frameworks, and methodologies
• Client IP: Client retains rights to their existing intellectual property
• Joint IP: Joint intellectual property rights for collaborative innovations
• Open Source: Proper attribution and compliance with open source licenses
• Patent Rights: Patent rights and protection for innovative solutions
• Trade Secrets: Protection of trade secrets and confidential information

Licensing and Usage Rights:

• Perpetual Licenses: Perpetual licenses for custom-developed software
• Territorial Rights: Territorial restrictions and expansion rights
• User Limits: User and usage limitations as specified in agreements
• Modification Rights: Rights to modify and customize software solutions
• Resale Rights: Restrictions on resale and redistribution
• Sublicensing: Sublicensing rights and restrictions

Data Protection Enhancements

Enhanced data protection and privacy provisions:

Data Processing Agreements:

• DPA Requirements: Comprehensive Data Processing Agreements (DPAs)
• Data Minimization: Strict data minimization principles
• Purpose Limitation: Clear purpose limitation for data processing
• Retention Policies: Specific data retention and deletion policies
• Security Measures: Enhanced security measures and protocols
• Breach Notification: Rapid breach notification procedures

International Data Transfers:

• Adequacy Decisions: Reliance on adequacy decisions where available
• Standard Contractual Clauses: Use of approved SCCs for transfers
• Binding Corporate Rules: BCR implementation where applicable
• Transfer Impact Assessments: Regular transfer impact assessments
• Local Law Compliance: Compliance with local data protection laws
• Cross-Border Cooperation: Cooperation with supervisory authorities

Additional Compliance Provisions

Regulatory Compliance

Enhanced regulatory compliance requirements:

European Regulations:

• GDPR Compliance: Full GDPR compliance for all data processing activities
• ePrivacy Directive: Compliance with ePrivacy and cookie regulations
• Digital Services Act: Compliance with DSA requirements
• Digital Markets Act: Compliance with DMA requirements
• NIS2 Directive: Compliance with cybersecurity requirements
• AI Act: Compliance with European AI regulations

Industry-Specific Compliance:

• Financial Services: PCI DSS compliance for financial applications
• Healthcare: HIPAA and medical data protection compliance
• Education: FERPA and educational data protection compliance
• Government: Government security and compliance requirements
• Manufacturing: Industry-specific safety and compliance standards
• Retail: E-commerce and consumer protection compliance

Security and Cybersecurity

Enhanced security and cybersecurity provisions:

Security Standards:

• ISO 27001: Information security management system compliance
• SOC 2: Service organization control compliance
• Penetration Testing: Regular security assessments and testing
• Vulnerability Management: Proactive vulnerability identification and remediation
• Incident Response: Comprehensive incident response procedures
• Business Continuity: Business continuity and disaster recovery planning

Access Control and Authentication:

• Multi-Factor Authentication: MFA implementation for all systems
• Role-Based Access: RBAC implementation and management
• Privileged Access: Privileged access management and monitoring
• Session Management: Secure session management and timeout
• Audit Logging: Comprehensive audit logging and monitoring
• Encryption: End-to-end encryption for data in transit and at rest

Additional Dispute Resolution

Enhanced Dispute Resolution

Additional dispute resolution mechanisms and procedures:

Mediation Requirements:

• Mandatory Mediation: Mandatory mediation before legal proceedings
• Mediator Selection: Neutral mediator selection process
• Mediation Timeline: Specific timeline for mediation process
• Confidentiality: Strict confidentiality of mediation proceedings
• Good Faith Participation: Requirement for good faith participation
• Cost Sharing: Equitable sharing of mediation costs

Arbitration Provisions:

• Arbitration Agreement: Binding arbitration for unresolved disputes
• Arbitrator Selection: Neutral arbitrator selection process
• Arbitration Rules: Applicable arbitration rules and procedures
• Arbitration Location: Neutral arbitration location and venue
• Arbitration Timeline: Specific timeline for arbitration process
• Arbitration Awards: Binding and enforceable arbitration awards

Escalation Procedures

Enhanced escalation and resolution procedures:

Issue Escalation:

• Level 1 Support: Initial support and issue resolution
• Level 2 Escalation: Technical escalation for complex issues
• Level 3 Escalation: Management escalation for critical issues
• Executive Escalation: Executive-level escalation for major issues
• Response Times: Specific response time commitments
• Resolution Targets: Clear resolution targets and timelines

Crisis Management:

• Crisis Definition: Clear definition of crisis situations
• Crisis Response Team: Dedicated crisis response team
• Communication Protocols: Crisis communication procedures
• Business Continuity: Business continuity during crisis
• Recovery Procedures: Post-crisis recovery procedures
• Lessons Learned: Post-crisis analysis and improvement

Additional Performance Standards

Service Level Agreements

Enhanced service level agreements and performance standards:

Availability Standards:

• Uptime Guarantees: 99.9% uptime guarantee for production systems
• Maintenance Windows: Scheduled maintenance windows with advance notice
• Emergency Maintenance: Emergency maintenance procedures and notifications
• Performance Monitoring: Continuous performance monitoring and alerting
• Capacity Planning: Proactive capacity planning and scaling
• Backup and Recovery: Comprehensive backup and recovery procedures

Response Time Standards:

• Critical Issues: 1-hour response time for critical issues
• High Priority: 4-hour response time for high priority issues
• Medium Priority: 24-hour response time for medium priority issues
• Low Priority: 72-hour response time for low priority issues
• Resolution Targets: Specific resolution targets for each priority level
• Escalation Triggers: Automatic escalation for missed targets

Quality Standards

Enhanced quality standards and continuous improvement:

Quality Metrics:

• Customer Satisfaction: Regular customer satisfaction surveys
• Defect Rates: Low defect rates and quality metrics
• Performance Benchmarks: Performance benchmarking and optimization
• Security Metrics: Security metrics and compliance monitoring
• Compliance Audits: Regular compliance audits and assessments
• Continuous Improvement: Continuous improvement processes and metrics

Training and Certification:

• Team Training: Regular team training and skill development
• Certification Requirements: Professional certification requirements
• Knowledge Sharing: Internal knowledge sharing and documentation
• Best Practices: Adoption of industry best practices
• Innovation: Innovation and research and development
• Technology Updates: Regular technology updates and modernization

Additional Termination Provisions

Enhanced Termination Rights

Additional termination rights and procedures:

Termination for Cause:

• Material Breach: Termination for material breach of agreement
• Non-Payment: Termination for non-payment of fees
• Insolvency: Termination for insolvency or bankruptcy
• Illegal Activities: Termination for illegal or unethical activities
• Security Breaches: Termination for security breaches or violations
• Compliance Failures: Termination for compliance failures

Termination for Convenience:

• Notice Period: 30-day notice period for termination for convenience
• Transition Services: Transition services and knowledge transfer
• Data Return: Return or destruction of client data
• Intellectual Property: Intellectual property transfer procedures
• Final Payments: Final payment and settlement procedures
• Post-Termination Support: Post-termination support and assistance

Transition and Handover

Enhanced transition and handover procedures:

Transition Planning:

• Transition Timeline: Detailed transition timeline and milestones
• Resource Allocation: Transition resource allocation and planning
• Knowledge Transfer: Comprehensive knowledge transfer procedures
• Documentation Transfer: Transfer of all project documentation
• System Access: Transfer of system access and credentials
• Third-Party Relationships: Transfer of third-party relationships

Post-Transition Support:

• Support Period: Post-transition support period and services
• Consultation Services: Post-transition consultation and advice
• Troubleshooting: Post-transition troubleshooting and assistance
• Documentation Updates: Post-transition documentation updates
• Training Support: Post-transition training and support
• Final Review: Post-transition final review and sign-off

Additional Miscellaneous Provisions

Force Majeure Enhancements

Enhanced force majeure provisions and procedures:

Force Majeure Events:

• Natural Disasters: Comprehensive coverage of natural disasters
• Government Actions: Government actions and regulatory changes
• Technology Failures: Widespread technology failures and outages
• Pandemic Events: Pandemic and public health emergencies
• Labor Disputes: Labor disputes and work stoppages
• Supply Chain Disruptions: Supply chain and vendor disruptions

Force Majeure Procedures:

• Notification Requirements: Immediate notification of force majeure events
• Mitigation Efforts: Required mitigation efforts and alternatives
• Duration Limits: Maximum duration for force majeure relief
• Compensation: Compensation and adjustment procedures
• Termination Rights: Termination rights for extended force majeure
• Resumption Procedures: Procedures for resuming normal operations

Notices and Communications

Enhanced notice and communication requirements:

Notice Requirements:

• Written Notice: All notices must be in writing
• Delivery Methods: Acceptable delivery methods and addresses
• Receipt Confirmation: Confirmation of notice receipt
• Electronic Notices: Electronic notice requirements and validity
• Urgent Notices: Special procedures for urgent notices
• Notice Templates: Standard notice templates and formats

Communication Standards:

• Response Times: Required response times for communications
• Escalation Procedures: Communication escalation procedures
• Language Requirements: Language requirements for communications
• Translation Services: Translation services when required
• Cultural Considerations: Cultural considerations in communications
• Accessibility: Accessibility requirements for communications

Integration with Primary Documents

Relationship to Other Documents

How this addendum relates to other legal documents:

Primary Documents:

• Terms of Service: This addendum supplements and enhances the Terms of Service
• Privacy Policy: This addendum provides additional privacy and data protection provisions
• Cookie Policy: This addendum includes additional cookie and tracking provisions
• GDPR Compliance: This addendum enhances GDPR compliance requirements
• Legal Disclaimers: This addendum provides additional disclaimers and limitations

Document Hierarchy:

• Primary Documents: Primary legal documents take precedence
• Addendum Provisions: Addendum provisions supplement primary documents
• Conflicts: Conflicts resolved in favor of primary documents
• Updates: Updates to primary documents may affect addendum provisions
• Consistency: All documents must be consistent and complementary
• Comprehensive Coverage: Combined documents provide comprehensive legal coverage

Amendment and Updates

Procedures for amending and updating this addendum:

Amendment Process:

• Written Amendments: All amendments must be in writing
• Mutual Agreement: Amendments require mutual agreement
• Notice Requirements: Advance notice of proposed amendments
• Review Period: Reasonable review period for amendments
• Effective Date: Clear effective date for amendments
• Notification: Notification of amendment effectiveness

Update Procedures:

• Regular Reviews: Regular review and update procedures
• Regulatory Changes: Updates for regulatory changes
• Business Changes: Updates for business changes
• Technology Changes: Updates for technology changes
• Version Control: Version control and tracking
• Archive: Archive of previous versions

Contact Information

Legal Inquiries

For legal inquiries about this addendum:

Contact Details:

• Email: [email protected]
• Phone: [Legal Contact Number]
• Address: Cetechovice 70, 768 02 Czech Republic
• Online: Legal inquiry form

Clarification Requests

For clarification of any addendum provisions:

Request Process:

• Written Requests: Clarification requests should be in writing
• Response Time: We will respond within reasonable time
• No Legal Advice: Clarifications do not constitute legal advice
• Professional Consultation: Legal advice should be sought from qualified professionals

Amendment Requests

For requests to amend this addendum:

Amendment Process:

• Written Requests: Amendment requests must be in writing
• Justification: Clear justification for requested amendments
• Impact Assessment: Assessment of impact on both parties
• Negotiation: Good faith negotiation of amendment terms
• Documentation: Proper documentation of agreed amendments
• Implementation: Implementation of agreed amendments

Acknowledgment and Acceptance

Client Acknowledgment

By using our services, clients acknowledge:

Understanding:

• Read and Understood: Clients have read and understood this addendum
• Acceptance: Clients accept this addendum
• Binding Agreement: This addendum is binding
• Integration: This addendum integrates with other legal documents

Ongoing Acceptance:

• Continued Use: Continued use constitutes ongoing acceptance
• Updates: Acceptance extends to updates and modifications
• No Waiver: Acceptance does not waive client rights
• Severability: Acceptance is severable from other agreements

Alfares Rights

Alfares reserves the following rights:

Enforcement Rights:

• Enforce Addendum: We may enforce this addendum
• Modify Services: We may modify services as permitted
• Terminate Services: We may terminate services as permitted
• Legal Action: We may take legal action to protect our rights

Protection Rights:

• Defend Claims: We may defend against claims
• Limit Liability: We may limit our liability
• Seek Indemnification: We may seek indemnification
• Protect Interests: We may take action to protect our interests

---

This Legal Addendum is effective as of January 15, 2026. For questions about this addendum, please contact us at [email protected].