Artificial Intelligence Addendum

Last updated: October 9, 2025

This Security Scorecard Artificial Intelligence Addendum (“AI Addendum”) is made by and between SecurityScorecard, Inc. and its Affiliates (“SSC” or “we”) and you, as an individual, company, corporate or other entity (“Customer”, “you”, or “your”).

This AI Addendum explains how we handle artificial intelligence in our services. It is a supplement to and is incorporated into your main End User Services Agreement (“Agreement”) and applies when you use any of our AI Features.

1. How We Keep Your Data Safe and Private

• 1.1. Your data privacy is our priority. We do not use your Customer Data, including any Inputs or Outputs, to train underlying AI Models or any third-party AI systems.
• 1.2. When we work with third-party AI providers, we make sure they’re also prohibited from using your Customer Data to train their AI systems.
• 1.3. You stay in complete control of what Customer Data you choose to submit as Inputs to our AI Features.
• 1.4. Our AI Features are completely optional. You choose when and how to use them, and they don’t change or interfere with your existing Service functionality.

2. Ownership and Your Responsibilities

• 2.1. You own your data. This includes all Customer Data, as well as Inputs and Outputs.
• 2.2. You are solely responsible for the following:
• 2.2.1. Reviewing, verifying, and validating all Outputs, such as security recommendations or vendor insights, before you act on them or share them with others;
• 2.2.2. Ensuring that your use of the AI Features and any Outputs complies with all applicable laws, including Applicable Data Privacy Laws, and third-party rights, as well as any agreements you have with third parties; and
• 2.2.3. Maintaining the confidentiality and integrity of any personal or sensitive information you provide as Input to SSC’s platform. This includes, but is not limited to, data about your vendors or internal security posture.
• 2.3. If you don’t follow the responsibilities in Section 2.2, we reserve the right to suspend your access to AI Features or terminate your Agreement. We’ll notify you promptly and work with you in good faith to cure any breach of Section 2.2 prior to (where reasonable to do so) suspending your access to the AI Features. The liability limits in your Agreement don’t apply to breaches of your responsibilities in Section 2.2.
• 2.4. We own the AI Features technology, including all intellectual property rights and any improvements we make to it.
• 2.5. You grant SSC the right to access, use, process, aggregate and anonymize your Input and usage data for the sole purposes of: (a) maintaining, improving and developing SSC’s features, products and/or services, including the AI Features; (b) track usage against your plan limits; and (c) other activities described in our Documentation or that you authorize.

3. Our Commitment to Responsible AI

• 3.1. We take AI governance seriously. We maintain a detailed inventory of how AI is used across our products, and our internal AI Governance Committee, with representatives from across our company, reviews and approves all AI applications before they go live.
• 3.2. Our AI Governance Committee ensures we use AI responsibly and securely. We actively work to minimize bias and promote fairness in our AI systems while managing data properly and staying compliant with regulations.
• 3.3. We use AI to help automate compliance activities, like mapping security insights to frameworks such as SOC2. This helps both us and our customers manage vendor risk and security more efficiently.

4. AI Features We Offer

• 4.1. Smart Answer AI: This feature analyzes your previous questionnaire responses, security data, and documents to suggest answers for new questionnaires. It speeds up your workflow, but you always maintain full control and must review all AI suggestions before using them.
• 4.2. ChatSSC: This feature provides quick insights about domains in your security portfolios and their related entities. The information is for reference purposes, and you’re responsible for verifying its accuracy before making business decisions.
• 4.3. HyperComply: This feature automates security questionnaire responses, manages Trust Centers, converts uploaded questionnaires into structured data, and maintains knowledge base accuracy by detecting conflicts.

5. Important Disclaimers

Our AI Features are provided “as is.” While we work hard to make them reliable, we cannot guarantee they will be error-free, uninterrupted or completely free of biases. We also cannot warrant the accuracy of all AI-generated results. We disclaim all warranties, whether express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement. You are solely responsible for verifying the accuracy and applicability of any AI-generated content before relying on it.

6. Complete Agreement.

By using our AI Features, you agreed to be bound by this AI Addendum. If there is a conflict between this AI Addendum and your Agreement, this addendum controls with respect to the AI Features. By accepting this AI Addendum, you confirm you have the authority to agree to these terms on behalf of your organization. All other terms in your Agreement not expressly modified by this AI Addendum remain in full force and effect.

7. Definitions. All capitalized terms used but not defined in this AI Addendum have the meanings ascribed to them in the Agreement.

• 7.1. “AI Feature(s)” means any products, features, or functionality within the Services that use artificial intelligence technology to analyze data, generate insights, or provide recommendations. This includes tools powered by generative AI, machine learning, or similar technologies.
• 7.2. “AI Model” means the underlying mathematical construct, algorithm, or model used to power the AI Features.
• 7.3. “Customer Data” Means any Customer Services Data Customer provides or makes available to the Services, including any data used as Input for the AI Features.
• 7.4. “Input” means any prompts, queries, files, documents, or other content Customer provides or makes available to an AI Feature.7.5. “Output” means the information, content, summaries, or recommendations generated and returned by an AI Feature based on the Input.