SiteTrust Terms and Conditions

SITE TRUST, LLC dba SITETRUST

Terms and Conditions of Service

Version 3.0 - Effective Date: July 1, 2026

1. Definitions

2. The Trusted Site Plans

SiteTrust's services are delivered through three subscription plans plus custom Enterprise engagements. Each plan addresses the hidden risks a website carries, undisclosed AI and tracking without consent, and produces documented evidence of the reduction. Every plan benefit is delivered by SiteTrust. Current pricing and full inclusion lists are published in the Pricing Schedule, which controls as to amounts and inclusions; the summary below describes plan mechanics for contractual purposes.

• Additional websites. Each plan covers the number of websites stated above; additional websites may be added at the per-site annual fee stated in the Pricing Schedule, as revised and published from time to time.

• Billing options. Plans are billed annually in advance, or monthly at one-tenth of the annual price. Annual billing therefore saves the equivalent of two months. All plans are paid via credit card at point of sale, and Client authorizes SiteTrust to charge the card on file for the recurring fees described in Section 2.1 until Client cancels.

• Plan changes. Clients may upgrade at any time, with a prorated credit for the unused portion of the current term. Downgrades take effect at the next renewal.

2.1 Automatic Renewal and Cancellation

Plans renew automatically at the end of each billing term (annual or monthly) at the then-current rate in the Pricing Schedule, which may be lower than the rate previously paid. SiteTrust will send a renewal reminder before each annual renewal, and before any renewal at a higher rate, identifying the renewal rate and the cancellation method. Clients may cancel automatic renewal at any time through the Trust Center account settings or by written notice to wecare@sitetrust.com. Cancellation is recognized when submitted; the period already paid for runs to completion and the plan terminates at the end of that period, as described in Section 6.4. Where a Client's state of residence grants additional automatic-renewal rights, those rights apply as required by law.

3. Certification, Seal, and Registry

3.1 Seal Display Requirements

• The Seal must be displayed in the form provided by SiteTrust, without modification to colors, proportions, or text.

• Seal display must link to the Client's SiteTrust certificate view, which shows the Client's current certification status and plan benefits; Registry listing begins at the Verify plan and above.

• Clients may not use the Seal or SiteTrust name to imply endorsement of any product, service, or claim not covered by their certification, and may not state or imply that certification constitutes insurance, legal compliance, or immunity from liability.

• Clients may not represent plan benefits they do not subscribe to (for example, describing their listing as independently verified while on the Disclose plan).

• Clients may not reproduce the Seal for use in any other manner without the express written consent of SiteTrust.

• Upon expiration, suspension, or revocation of certification, the Client must remove all Seal displays within 5 business days.

3.2 Registry Publication

By purchasing a plan that includes Registry listing, Client consents to publication of its Registry entry, including Client's name, certification status, plan cadence, and verification dates. Registry entries and certificate views are updated to reflect current status, including suspension or revocation. Clients may request removal of their Registry entry upon termination of their plan.

3.3 Certification Renewal

Renewal requires completion of an updated assessment reflecting material changes in the Client's AI systems, operations, or applicable regulations since the prior certification; payment of the applicable renewal fee under Section 2.1; and confirmation of continued compliance with the certified plan requirements. SiteTrust will provide renewal notice no earlier (in most cases) than 90 days before expiration of an annual certification, and will use best efforts to offer a minimum 30-day notice of any annual renewal. Failure to renew by the expiration date results in automatic Seal suspension pending renewal. Certifications lapsed for more than 6 months require a new application.

3.4 Suspension and Revocation

SiteTrust may suspend or revoke certification upon: material misrepresentation in an application or assessment; material breach of these Terms that remains uncured for 30 days following written notice; a regulatory finding, enforcement action, or court order establishing that the Client's AI or consent practices are inconsistent with the certified standard; failure to renew within the applicable period; or voluntary withdrawal. Upon suspension, Seal display rights are immediately suspended. SiteTrust will provide written notice with a 30-day cure period where the breach is curable. Revocation is permanent and requires a new application. Certification decisions, including suspension and revocation made in accordance with these Terms, are within SiteTrust's sole discretion and create no liability of SiteTrust to the Client or any third party.

4. SiteTrust Consent

4.1 Service Description

• Consent-first banner configuration: non-essential categories default to off, with accept and decline options of equal prominence and a persistent mechanism to change or withdraw consent.

• Automatic tracker blocking and script control, including manual control of hardcoded scripts where auto-blocking does not reach them.

• Timestamped consent records retained as evidence, accessible to the Client through the Trust Center.

• Evidence reports documenting tracker behavior before and after consent, produced at implementation and on the cadence included in the Client's plan.

• At the plan levels stated in the Pricing Schedule: geo consent modes, Google Consent Mode v2 integration, consent analytics, continuous tracker scanning, and the exportable evidence archive.

4.2 Consent Records and Data Processing

In operating SiteTrust Consent, SiteTrust processes visitor consent records on the Client's behalf. That processing is governed by the SiteTrust Consent Data Processing Agreement, which is incorporated into these Terms for Clients using SiteTrust Consent. Retention periods, sub-processors, and security measures are stated in the DPA and the sub-processor summary available in the Trust Center.

4.3 No Guarantee of Compliance or Outcomes

SiteTrust Consent reduces exposure and produces the evidence courts have credited, but no product or configuration can guarantee compliance with any law or prevent litigation. The Client remains responsible for its own sites, tools it adds or changes outside SiteTrust's control, and the accuracy of information it provides. Evidence reports are technical testing documentation, not legal advice and not a legal opinion.

5. AI Risk Coverage: Insurance Is Separate From Certification

5.1 Producer Status

Site Trust, LLC dba SiteTrust is a licensed insurance producer, currently licensed in the State of Ohio, and pursues additional licensing, appointments, and broker relationships as needed to serve Clients lawfully in other jurisdictions. Insurance products are offered only where SiteTrust holds the applicable license or works through appropriately licensed partners or brokers.

5.2 Eligibility and Quoting

Clients at the Verify plan and above may apply for AI Risk Coverage: errors and omissions coverage for professionals, and directors and officers coverage for companies. Eligibility to apply is not a guarantee of coverage, pricing, or terms; underwriting decisions belong to the applicable carrier. Quotes are provided under a separate application, and any resulting coverage is governed solely by the issued policy. Nothing in these Terms modifies, extends, or interprets any insurance policy.

6. Fees and Payment

6.1 Fees and Pricing Schedule

Fees are set forth in the applicable Order Form or the Pricing Schedule, as published and updated from time to time. SiteTrust may update the Pricing Schedule at any time; decreases may take effect immediately. Fee changes do not affect an active billing term already paid. Renewals occur at the then-current Pricing Schedule rate as described in Section 2.1. In the event of an increase in pricing, current and existing customers shall be notified prior to any billing at the increased rate.

6.2 Payment Terms

• Plan fees are billed in advance on the applicable billing cycle (annual, or monthly at one-tenth of annual), by charge to the credit card provided at point of sale.

• Advisory and professional services are invoiced upon milestone delivery or monthly as specified in the SOW; invoices are due net 30 days.

• Late payments accrue interest at 1.5% per month or the maximum rate permitted by law, if lower.

6.3 Taxes

Fees are exclusive of applicable taxes. Client is responsible for all applicable taxes, levies, or duties imposed on Services, excluding taxes based on SiteTrust's net income. Where SiteTrust is required by law to collect taxes, they will be added to Client's invoice.

6.4 Refunds, Cancellation, and Chargebacks

6.4(a) Annual Plans

A Client purchasing any Trusted Site Plan on annual billing may request a full refund within 30 days of the initial purchase date by written notice to wecare@sitetrust.com. After 30 days, all sales are final: no full, partial, or prorated refund is available for the remainder of the term, upon cancellation, or otherwise. Because plan benefits, including Seal issuance, policy generation, SiteTrust Consent deployment, verification scheduling, and Registry processing, are made available to the Client beginning at purchase, the parties agree that the annual fee is fully earned 30 days after purchase and that SiteTrust's obligations for the purchased term are, for refund purposes, deemed fulfilled at that point.

6.4(b) Monthly Plans

A Client purchasing on monthly billing may request a full refund within 3 days of the initial purchase only. Renewal (re-billed) monthly payments are non-refundable. To avoid a further charge, cancel before the next re-billing date through the Trust Center or by written notice to wecare@sitetrust.com.

6.4(c) Cancellation

A cancellation request submitted at any time, for annual or monthly billing, is recognized when received. The period already paid for runs to completion, the Client retains full plan benefits through the end of that period, and the plan terminates at the period's end with no further charges. Cancellation does not entitle the Client to any refund, partial or full, outside the 30-day (annual) or 3-day (monthly) windows above.

6.4(d) CTA Program Fee

The CTA program fee is subject to a 30-day refund from the date of purchase. The program's access, tools, training, and materials are delivered at enrollment; after 30 days the annual fee is not refundable, and the promises and services rendered under the enrollment are considered fulfilled for refund purposes. Refund and program service details are set forth in greater detail in the CTA Program Agreement.

6.4(e) Advisory and Professional Services

Advisory service fees for completed milestones are non-refundable. Refunds for services not yet delivered will be issued within 30 days of a valid refund request, less reasonable costs incurred. In the event of value-based billing on advisory services, the terms of the project will determine milestones, completion, and refundable versus non-refundable amounts.

6.4(f) Billing Errors and Chargebacks

SiteTrust promptly corrects billing errors: a duplicate charge, a charge after a timely cancellation, or a charge in an incorrect amount will be refunded in full upon verification. Clients agree to contact SiteTrust at wecare@sitetrust.com and allow 10 business days for resolution before initiating any card dispute. Initiating a chargeback for fees that are properly due under this Section 6.4 is a material breach of these Terms; in that event SiteTrust may suspend the Services and Seal rights during the dispute and may recover the amounts owed together with reasonable costs of collection, including reasonable attorney fees. Client's acceptance of these Terms at point of sale, the card authorization in Section 2, and the refund windows in this Section constitute the agreed billing terms for every charge.

7. Certified Trust Advisor (CTA) Program

Participation in the CTA program is governed by the CTA Program Agreement, which incorporates these Terms and contains the program's commercial terms, including program fees, the commission schedule, clawback, attribution, independent-contractor status, trademark usage, and code of conduct obligations. In the event of conflict between these Terms and the CTA Program Agreement, the CTA Program Agreement controls. CTAs are an independent sales and advisory channel; all Trusted Site Plan benefits are delivered by SiteTrust. The following terms apply to all CTAs and to Clients working with CTAs:

• Credentialing. CTA status requires completion of SiteTrust's CTA training curriculum, a passing score on the CTA assessment, and execution of the CTA Program Agreement. Continuing education is not required; any continuing education conditions, if adopted, will be addressed in the CTA Program Agreement.

• Scope of authority. CTAs advise and implement under the SiteTrust framework. CTAs do not issue, award, modify, suspend, or revoke certifications or the Seal; do not bind SiteTrust to any obligation; are not employees, agents, or officers of SiteTrust; and do not provide legal advice. Clients requiring legal advice should engage qualified legal counsel.

• Commissions. Commission rates and schedules are set forth in the CTA Program Agreement. SiteTrust reserves the right to modify commission rates with advance notice; the commission level in effect for a CTA is honored for as long as that CTA remains active and in good standing under the CTA Program Agreement.

• Endorsement disclosure. CTAs are compensated for client referrals and plan sales. CTAs are required to disclose that material connection in any endorsement or promotion, consistent with FTC endorsement guidance.

• Decertification. SiteTrust may suspend or revoke CTA status for material violation of the CTA Code of Conduct, misrepresentation of CTA scope or certification authority, unauthorized disclosure of Confidential Information, or material breach of the CTA Program Agreement, subject to the notice and cure process in the CTA Program Agreement.

8. Trust Center Terms of Use

8.1 Access, Accounts, and Current Documents

Trust Center access is granted to Clients and authorized CTAs upon execution of the applicable agreement and account setup. Account holders are responsible for maintaining the confidentiality of credentials, for all activity under their account, and for promptly reporting unauthorized access to wecare@sitetrust.com. The Trust Center customer profile provides access to the current versions of the customer-facing agreements that apply to the Client's Services; the versions published there and on sitetrust.com are the operative versions, as updated under Section 12.3.

8.2 Acceptable Use

Trust Center users may not: use tools or materials outside the scope of their engagement or authorization; attempt unauthorized access; upload malicious code or infringing materials; reverse-engineer, scrape, or systematically extract content outside authorized export functions; share credentials; or use the platform to facilitate deceptive, fraudulent, or unlawful AI or tracking practices.

8.3 Content Ownership and Data Rights

Client-uploaded content remains the property of the Client. SiteTrust's rights to Client-uploaded content are limited to processing necessary to deliver the Services, retention per the Privacy Policy's retention schedule, and use of aggregated, de-identified insights to improve SiteTrust's tools and standards, with no individual client identifiable. Trust Center templates, tools, and frameworks remain SiteTrust IP licensed under Section 10.

8.4 Usage Limits, Monitoring

Usage, storage, and seat limits are set forth in the applicable Order Form or Pricing Schedule; SiteTrust will not suspend access for overages without notice and a 15-day cure period. SiteTrust may monitor Trust Center usage for security, compliance, and performance purposes in accordance with the Privacy Policy, and will not access Client-uploaded content except as necessary to investigate a specific security or compliance concern, with notice where practicable. In the event that a Client account is suspended for overage, the Client will not be entitled to any partial or full refund. SiteTrust may modify, improve, or replace service features from time to time, provided the Services retain materially equivalent overall functionality; feature changes are not grounds for a refund outside Section 6.4. Unless stated in an Order Form, the Services carry no uptime commitment; SiteTrust uses commercially reasonable efforts to maintain availability and may perform maintenance. SiteTrust may suspend access as reasonably needed to address security risks, suspected unlawful activity, or non-payment, and suspension under this Section does not entitle the Client to any refund. Pilot, beta, and early-access features are provided as is, may change or be discontinued at any time, and carry no service commitments.

9. Confidentiality

Each party agrees to: (a) keep the other party's Confidential Information strictly confidential; (b) not disclose it to any third party without prior written consent; (c) use it only to perform or receive the Services; and (d) protect it with at least the care used for its own confidential information, and no less than reasonable care. These obligations do not apply to information that is or becomes publicly known through no breach, was rightfully known before disclosure, is independently developed, or must be disclosed by law (with prompt notice to the disclosing party where permitted). CTAs are separately bound by the confidentiality obligations of the CTA Program Agreement, both during and after any engagement.

10. Intellectual Property

All SiteTrust IP, including the SiteTrust Standard, certification methodology, assessment tools, SiteTrust Consent technology, training materials, Trust Center software, templates, and the SiteTrust brand, mark, badge, and Seal, is and remains the exclusive property of SiteTrust. Subject to compliance with these Terms and payment of fees, SiteTrust grants Client a limited, non-exclusive, non-transferable, revocable license to use Trust Center tools and templates for internal governance purposes, display the Seal during the active certification period per Section 3.1, and implement SiteTrust-provided templates within Client's own policies and programs. CTAs receive the license stated in the CTA Program Agreement. Licenses terminate with the underlying certification or agreement; upon termination the Client must cease use of SiteTrust IP and remove all Seal displays. Client retains ownership of content it uploads, with the limited processing license described in Section 8.3. Feedback or suggestions Client provides about the Services may be used by SiteTrust without restriction or compensation.

11. AI-Assisted Services: Disclaimers

11.1 AI as a Support Tool, Not a Decision-Maker

AI tools used by SiteTrust assist SiteTrust professionals in analysis, research, and content generation. They do not make final certification decisions, issue or revoke the Seal, or determine compliance findings independently. All certification determinations, assessment findings communicated to Clients, and advisory recommendations are reviewed by a qualified SiteTrust professional before delivery. We always strive to do our best with offering human oversight on all of our Services and deliverables, and we are committed to disclosing the use of AI in our Services and materials.

11.2 Templates and Policies Are Not Legal Advice

SiteTrust's templates, frameworks, checklists, policies, and model language are governance and compliance tools maintained under attorney supervision. They are not legal advice, and SiteTrust is not a law firm and does not practice law. Clients should engage qualified legal counsel to review any template before relying on it for legal compliance purposes, particularly in regulated industries or jurisdictions with active AI enforcement.

11.3 Regulatory Intelligence Limitations

The weekly regulatory briefing and related intelligence services provide informational content, not legal advice. The regulatory landscape evolves rapidly; SiteTrust makes reasonable efforts to ensure accuracy but does not guarantee that all developments are captured or that summaries are error-free. Clients in jurisdictions outside SiteTrust's monitoring scope should supplement with local counsel, as necessary.

11.4 Client-Provided Information

Assessments, verifications, and evidence reports are based on the Client's sites and the information the Client provides. SiteTrust is not responsible for certification or testing outcomes based on materially inaccurate or incomplete disclosures, or for changes the Client makes to its sites outside SiteTrust's control.

12. Limitation of Liability

SITETRUST'S SERVICES, DELIVERABLES, AND PLATFORMS ARE PROVIDED "AS IS" AND "AS AVAILABLE." SITETRUST MAKES NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR ACCURACY OF REGULATORY CONTENT. SITETRUST DOES NOT WARRANT THAT CERTIFICATION, CONSENT CONFIGURATION, OR ANY SERVICE WILL RESULT IN REGULATORY COMPLIANCE, ABSENCE OF ENFORCEMENT ACTIONS OR LITIGATION, OR IMMUNITY FROM LIABILITY UNDER ANY LAW.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SITETRUST WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS OPPORTUNITY. SITETRUST'S TOTAL CUMULATIVE LIABILITY UNDER THESE TERMS WILL NOT EXCEED THE GREATER OF (A) FEES PAID BY CLIENT IN THE 12 MONTHS PRECEDING THE CLAIM OR (B) $5,000, IN AGGREGATE ACROSS ALL CLAIMS. THIS SECTION DOES NOT APPLY TO ANY ISSUED INSURANCE POLICY, WHICH IS GOVERNED SOLELY BY ITS OWN TERMS, AND DOES NOT LIMIT LIABILITY THAT CANNOT BE LIMITED UNDER APPLICABLE LAW.

Client acknowledges that certification does not guarantee that Client's AI systems comply with all applicable laws; that certain state laws may limit the ability to disclaim liability for AI-related harm; and that Client remains solely responsible for its own AI governance and tracking practices, independent of certification status. Client will indemnify, defend, and hold harmless SiteTrust from third-party claims arising from Client's breach of these Terms, Client's websites and content, Client's misuse of templates or the Seal, inaccurate or incomplete disclosures, Client's own AI system operations, or Client's violation of applicable law. Client's indemnification obligations are not subject to the liability cap, which limits SiteTrust's liability only. TO THE MAXIMUM EXTENT PERMITTED BY LAW, ANY CLAIM AGAINST SITETRUST UNDER OR RELATING TO THESE TERMS MUST BE BROUGHT WITHIN ONE YEAR AFTER THE CLAIM ACCRUES OR IT IS PERMANENTLY BARRED.

13. Term, Termination, Disputes, and General Provisions

13.1 Term and Termination

These Terms are effective from the date Client first accesses the Services and continue until all active Order Forms, plans, certifications, and program agreements expire or are terminated.

• Plan cancellation by Client. Trusted Site Plan subscriptions are cancelled as described in Sections 2.1 and 6.4(c): cancellation is recognized when submitted, the paid period runs to completion, and the plan terminates at the end of that period. Cancellation is not grounds for a refund outside the windows in Section 6.4.

• SOW termination for convenience. Client may terminate a professional services Order Form or SOW for convenience with 60 days written notice; fees for milestones delivered or work performed through the termination date are due, and prepaid fees are treated per Section 6.4(e).

• Termination for cause. Either party may terminate for material breach uncured within 30 days of written notice, or upon the other party's insolvency. Termination by SiteTrust for Client's uncured breach does not entitle Client to any refund. SiteTrust may also discontinue a Service or terminate for convenience on 30 days written notice, in which case SiteTrust will refund the prorated unused portion of prepaid fees for the discontinued Service, as the Client's sole remedy.

• Effect of termination. Certification and Seal rights end per Section 3; Trust Center access ends on the effective date of termination; each party returns or destroys the other's Confidential Information except as required for legal compliance.

All terminations and cancellations, whatever the reason, remain subject to Section 6.4: all sales are final except as expressly provided there. Sections 6.4, 9, 10, 11, 12, 13.2, and 13.3 survive termination.

13.2 Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of Ohio, without regard to conflict of law principles. The parties will first attempt good-faith negotiation for 30 days following written notice of a dispute. Unresolved disputes shall be resolved by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, seated in Summit County, Ohio. TO THE MAXIMUM EXTENT PERMITTED BY LAW, CLIENT WAIVES PARTICIPATION IN CLASS ACTIONS AND AGREES TO RESOLVE DISPUTES ONLY ON AN INDIVIDUAL BASIS. Either party may seek injunctive or equitable relief in any court of competent jurisdiction to protect IP, Confidential Information, or against imminent harm.

13.3 Updates to These Terms; Acceptance; Electronic Agreement

SiteTrust maintains the current version of these Terms on sitetrust.com and in the Trust Center customer profile. SiteTrust may update these Terms from time to time; continued use of the Services after the stated effective date constitutes acceptance of the updated Terms. For material changes that reduce Client rights or impose significant new obligations, SiteTrust will provide at least 30 days advance notice by separate notice (email or Trust Center notification) and may require click-through acknowledgment before continued use. The parties agree that these Terms may be accepted electronically, that click-through or point-of-sale acceptance has the same force as a signature, and that SiteTrust's records of acceptance are admissible evidence of agreement. SiteTrust maintains a version history of these Terms, available upon request.

13.4 General

Entire agreement: these Terms, together with applicable Order Forms, SOWs, the CTA Program Agreement (for CTAs), the SiteTrust Consent Data Processing Agreement (where applicable), and the Privacy Policy, are the entire agreement and supersede prior agreements on this subject. Client acknowledges that it has not relied on any statement, marketing material, or representation not set forth in these Terms. Order of precedence: (1) executed Order Form or SOW; (2) CTA Program Agreement (for CTAs); (3) the DPA as to its subject matter; (4) these Terms; (5) the Privacy Policy.

• Severability. If any provision is found unenforceable, the remaining provisions continue in full force, and the unenforceable provision is modified to the minimum extent necessary to make it enforceable, consistent with the parties' intent.

• Waiver. Failure to enforce any provision is not a waiver of the right to enforce it later.

• Force majeure. Neither party is liable for delays or failures caused by events beyond its reasonable control, including natural disasters, acts of government, or telecommunications failures; the affected party must give prompt written notice and use reasonable efforts to mitigate.

• Assignment. Client may not assign these Terms without SiteTrust's prior written consent. SiteTrust may assign in connection with a merger, acquisition, or sale of substantially all assets, with notice to Client.

• Notices. In writing by email with confirmation, overnight courier, or certified mail to: SiteTrust, Attn: Legal, 2725 Abington Road, Suite 202, Fairlawn, Ohio 44333 | wecare@sitetrust.com.