{"reference":"SAAS-ACME-FLOWZ-2026","effective_date":"2026-05-01","provider":{"legal_name":"Flowz Automation BV","address":"Keizersgracht 240, 1016 EA Amsterdam, Netherlands","registration_number":"NL78901234","vat_id":"NL878901234B01","representative_name":"Sanne De Vries","representative_role":"Chief Executive Officer","contact_email":"contracts@flowz.io"},"customer":{"legal_name":"Acme Supplies SRL","address":"Rue de la Loi 100, 1040 Brussels, Belgium","registration_number":"BE0123456789","vat_id":"BE0123456789","representative_name":"Thomas Van den Bergh","representative_role":"IT Manager","contact_email":"it@acme-supplies.be"},"service_description":"Flowz is a multi-tenant cloud workflow-automation platform (web application plus REST API) enabling customers to design, deploy and monitor integration flows between SaaS tools, databases and custom APIs. The subscription includes the production environment, a staging environment, the UI, API, scheduler, execution runtime and observability dashboard. Professional services (onboarding, advanced integration build) are out of scope and billable under separate SOWs.","subscription_plan":{"name":"Business","included_usage":"Up to 25 named users, unlimited workflow definitions, up to 1,000,000 workflow-step executions per month, 50 GB of execution-log storage, and the US/EU region of the customer's choice. Staging environment included.","overage_rates_optional":"EUR 4 per additional 10,000 workflow-step executions, billed monthly in arrears. Named users above 25 billed at EUR 60/user/month pro rata."},"fees":{"amount":24000.0,"currency":"EUR","billing_frequency":"annual","auto_renewal_boolean":true,"price_increase_notice_days":60},"term":{"initial_months":24,"renewal_months_optional":12,"notice_days":60},"sla_summary":{"availability_target_pct":99.9,"support_response_targets":[{"severity":"P1_critical","response_time":"15 minutes, 24/7","resolution_target":"4 hours to a restoration plan; workaround within 8 hours where feasible"},{"severity":"P2_high","response_time":"1 business hour","resolution_target":"1 business day"},{"severity":"P3_medium","response_time":"1 business day","resolution_target":"5 business days"},{"severity":"P4_low","response_time":"2 business days","resolution_target":"Scheduled in the next release window"}],"service_credits_summary":"Monthly availability below 99.9%: 10% of the monthly-equivalent fee credited. Below 99.0%: 25%. Below 95.0%: 50%. Credits are the customer's exclusive remedy for availability shortfalls. Credits are applied to the next invoice; no cash-out."},"data_protection":{"dpa_reference":"Schedule 2 (Data Processing Agreement) attached to this Agreement, satisfying Article 28(3) GDPR (Regulation (EU) 2016/679).","data_location":"EU region: Amsterdam (primary) and Frankfurt (hot standby). Customer data never leaves the EEA for production workloads.","sub_processors_url":"https://flowz.io/sub-processors","international_transfer_mechanism":"Not applicable for production data. For support-access tooling, Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) apply where any Flowz personnel outside the EEA access customer data with the customer's prior approval."},"security_overview":"ISO/IEC 27001:2022 certified. Encryption in transit (TLS 1.3) and at rest (AES-256, envelope-encrypted). Customer data isolated per tenant. Annual external penetration test. SSO via OIDC and SAML supported. MFA enforced for administrator accounts. Security incident notification within 72 hours of becoming aware, per Art. 33 GDPR timelines.","ip_ownership":"The Provider retains all IP rights in the Platform, including all improvements, feedback implementations and aggregated / anonymised analytics. The Customer retains all IP rights in the Customer Data submitted to the Platform and grants the Provider only the limited licence necessary to operate the Platform for the Customer.","customer_data_export_rights":"At any time during the subscription, the Customer may export all Customer Data in a standard machine-readable format (JSON, CSV or Parquet) via the API or a self-service export tool, at no additional charge. After termination, the Customer has 90 days to retrieve its data; after that, the Provider will delete all Customer Data within 30 additional days (subject to backup retention cycles not exceeding 180 days). Provider-assisted export engagements beyond this self-service are billable at the prevailing professional-services rate card.","termination_provisions":"Either party may terminate on 60 days' written notice before the end of the then-current term for non-renewal. Either party may terminate for material breach with 30-day cure, or immediately on insolvency. The Customer may suspend or terminate immediately if the Provider materially fails to meet Art. 28 GDPR obligations. Upon termination, the Provider stops processing Customer Data, facilitates export per clause 11 and deletes remaining data per the retention schedule.","governing_law":"The laws of the Netherlands, excluding conflict-of-laws rules, with exclusive jurisdiction of the courts of Amsterdam.","signatories":[{"party":"provider","name":"Sanne De Vries","role":"CEO, Flowz Automation BV","date":"2026-04-22","place":"Amsterdam"},{"party":"customer","name":"Thomas Van den Bergh","role":"IT Manager, Acme Supplies SRL","date":"2026-04-24","place":"Brussels"}]}