[{"data":1,"prerenderedAt":1681},["ShallowReactive",2],{"navigation":3,"hamburger-docs-nav":108,"legal-pages":141},[4],{"title":5,"path":6,"stem":7,"children":8,"page":44},"Docs","/docs","docs",[9,45],{"title":10,"path":11,"stem":12,"children":13},"Introduction","/docs/getting-started","docs/00.getting-started/index",[14,15,19],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Quickstart","/docs/getting-started/quickstart","docs/00.getting-started/00.quickstart",{"title":20,"path":21,"stem":22,"children":23,"page":44},"Core Concepts","/docs/getting-started/core-concepts","docs/00.getting-started/core-concepts",[24,28,32,36,40],{"title":25,"path":26,"stem":27},"What is an Organisation?","/docs/getting-started/core-concepts/what-is-an-org","docs/00.getting-started/core-concepts/01.what-is-an-org",{"title":29,"path":30,"stem":31},"What is a Service?","/docs/getting-started/core-concepts/what-is-a-service","docs/00.getting-started/core-concepts/02.what-is-a-service",{"title":33,"path":34,"stem":35},"Routing Traffic","/docs/getting-started/core-concepts/routing-traffic","docs/00.getting-started/core-concepts/03.routing-traffic",{"title":37,"path":38,"stem":39},"Securing your content","/docs/getting-started/core-concepts/securing-content","docs/00.getting-started/core-concepts/04.securing-content",{"title":41,"path":42,"stem":43},"Invalidating Cache","/docs/getting-started/core-concepts/invalidating-cache","docs/00.getting-started/core-concepts/05.invalidating-cache",false,{"title":10,"path":46,"stem":47,"children":48},"/docs/configuration","docs/01.configuration/index",[49,50,95],{"title":10,"path":46,"stem":47},{"title":51,"path":52,"stem":53,"children":54,"page":44},"Configuration","/docs/configuration/configuration","docs/01.configuration/configuration",[55,59,63,67,71,75,79,83,87,91],{"title":56,"path":57,"stem":58},"Domains","/docs/configuration/configuration/domains","docs/01.configuration/configuration/00.domains",{"title":60,"path":61,"stem":62},"Origins","/docs/configuration/configuration/origins","docs/01.configuration/configuration/01.origins",{"title":64,"path":65,"stem":66},"General","/docs/configuration/configuration/general","docs/01.configuration/configuration/02.general",{"title":68,"path":69,"stem":70},"High Availability","/docs/configuration/configuration/high-availability","docs/01.configuration/configuration/03.high-availability",{"title":72,"path":73,"stem":74},"Query Parameters","/docs/configuration/configuration/query-parameters","docs/01.configuration/configuration/04.query-parameters",{"title":76,"path":77,"stem":78},"Headers","/docs/configuration/configuration/headers","docs/01.configuration/configuration/05.headers",{"title":80,"path":81,"stem":82},"Cookies","/docs/configuration/configuration/cookies","docs/01.configuration/configuration/06.cookies",{"title":84,"path":85,"stem":86},"Security","/docs/configuration/configuration/security","docs/01.configuration/configuration/07.security",{"title":88,"path":89,"stem":90},"Image Handling","/docs/configuration/configuration/image-handling","docs/01.configuration/configuration/08.image-handling",{"title":92,"path":93,"stem":94},"Overrides","/docs/configuration/configuration/overrides","docs/01.configuration/configuration/09.overrides",{"title":96,"path":97,"stem":98,"children":99,"page":44},"Global Configuration","/docs/configuration/global-configuration","docs/01.configuration/global-configuration",[100,104],{"title":101,"path":102,"stem":103},"Managing TLS Certificates","/docs/configuration/global-configuration/tls","docs/01.configuration/global-configuration/TLS",{"title":105,"path":106,"stem":107},"Purge Tokens","/docs/configuration/global-configuration/purge-tokens","docs/01.configuration/global-configuration/purge-tokens",[109],{"title":5,"path":6,"stem":7,"children":110,"page":44},[111,122],{"title":10,"path":11,"stem":12,"children":112},[113,114,115],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},{"title":20,"path":21,"stem":22,"children":116,"page":44},[117,118,119,120,121],{"title":25,"path":26,"stem":27},{"title":29,"path":30,"stem":31},{"title":33,"path":34,"stem":35},{"title":37,"path":38,"stem":39},{"title":41,"path":42,"stem":43},{"title":10,"path":46,"stem":47,"children":123},[124,125,137],{"title":10,"path":46,"stem":47},{"title":51,"path":52,"stem":53,"children":126,"page":44},[127,128,129,130,131,132,133,134,135,136],{"title":56,"path":57,"stem":58},{"title":60,"path":61,"stem":62},{"title":64,"path":65,"stem":66},{"title":68,"path":69,"stem":70},{"title":72,"path":73,"stem":74},{"title":76,"path":77,"stem":78},{"title":80,"path":81,"stem":82},{"title":84,"path":85,"stem":86},{"title":88,"path":89,"stem":90},{"title":92,"path":93,"stem":94},{"title":96,"path":97,"stem":98,"children":138,"page":44},[139,140],{"title":101,"path":102,"stem":103},{"title":105,"path":106,"stem":107},[142,691,1152,1365],{"id":143,"title":144,"archived":44,"body":145,"description":681,"extension":682,"meta":683,"navigation":684,"path":685,"seo":686,"stem":687,"updated":688,"version":689,"__hash__":690},"legal/legal/privacy-policy.md","Privacy policy",{"type":146,"value":147,"toc":669},"minimark",[148,156,161,167,173,179,183,188,239,243,269,273,299,303,310,316,322,325,329,336,339,428,431,437,444,571,575,578,603,614,618,621,625,628,639,642,653,657,660,664],[149,150,151,155],"p",{},[152,153,154],"strong",{},"Varnish Software AB"," (org. number 556805-6203), Wallingatan 12, 111 60 Stockholm, Sweden (\"we\", \"us\", \"our\") respects your privacy and is committed to protecting your personal data.\nThis Privacy Notice explains how we collect, use, store, and share personal data when you visit our website, create an account, or purchase our services. We are the data\ncontroller for our services and comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).",[157,158,160],"h2",{"id":159},"_1-roles-responsibilities-gdpr","1. Roles & Responsibilities (GDPR)",[149,162,163,166],{},[152,164,165],{},"As Data Controller:","\nWe act as the Controller for Administrative Data, such as account and billing information. We determine how and why this data is processed to manage accounts, provide support,\nand meet contractual and legal obligations.",[149,168,169,172],{},[152,170,171],{},"As Data Processor:","\nWe act as the Processor for Traffic Data on behalf of our customers in accordance with the applicable Data Processing Agreement (DPA). Traffic Data includes content\ndelivered through our CDN and limited technical metadata, such as end-user IP addresses, that is necessary to operate and secure the service. Traffic Data is processed\nsolely for the purpose of providing the contracted services. Where feasible, Traffic Data is processed and retained within our European infrastructure.",[149,174,175,178],{},[152,176,177],{},"Data Segregation & Security:","\nAdministrative and Traffic Data are strictly separated and processed only for their defined purposes. We use encryption, access controls, and DDoS protection to safeguard data.",[157,180,182],{"id":181},"_2-categories-of-personal-data-purposes-and-lawful-basis","2. Categories of personal data, purposes, and lawful basis",[184,185,187],"h4",{"id":186},"_21-administrative-data-varnish-is-the-controller","2.1 Administrative Data (Varnish is the Controller)",[189,190,191,207],"table",{},[192,193,194],"thead",{},[195,196,197,201,204],"tr",{},[198,199,200],"th",{},"Categories of Personal Data",[198,202,203],{},"Purpose of Processing",[198,205,206],{},"Lawful Basis (GDPR)",[208,209,210,225],"tbody",{},[195,211,212,219,222],{},[213,214,215,218],"td",{},[152,216,217],{},"Account Information"," — Name, email address, company name",[213,220,221],{},"To set up your account, verify your identity, and let you log in",[213,223,224],{},"Art. 6(1)(b) – Performance of a contract",[195,226,227,233,236],{},[213,228,229,232],{},[152,230,231],{},"Billing Data"," — billing address, billing contact",[213,234,235],{},"To manage your subscription and calculate usage (e.g., TBs of traffic)",[213,237,238],{},"Art. 6(1)(b) – Performance of a contract; Art. 6(1)(c) – Legal obligation",[184,240,242],{"id":241},"_22-traffic-data-varnish-is-the-processor","2.2 Traffic Data (Varnish is the Processor)",[189,244,245,256],{},[192,246,247],{},[195,248,249,252,254],{},[198,250,251],{},"Traffic Data: Categories of Personal Data",[198,253,203],{},[198,255,206],{},[208,257,258],{},[195,259,260,263,266],{},[213,261,262],{},"IP addresses, request headers, traffic and security logs",[213,264,265],{},"To route your website traffic, block malicious bots, and stop DDoS attacks",[213,267,268],{},"Determined by the Customer as Data Controller (Art. 6 GDPR)",[184,270,272],{"id":271},"_23-usage-and-service-operation-data-varnish-is-the-controller","2.3 Usage and Service Operation Data (Varnish is the Controller)",[189,274,275,286],{},[192,276,277],{},[195,278,279,282,284],{},[198,280,281],{},"Usage Data: Categories of Personal Data",[198,283,203],{},[198,285,206],{},[208,287,288],{},[195,289,290,293,296],{},[213,291,292],{},"Access logs, device and browser information related to the management interface",[213,294,295],{},"To see how you use our dashboard so we can improve the experience.",[213,297,298],{},"Art. 6(1)(f) – Legitimate interests (service security and improvement)",[157,300,302],{"id":301},"_3-data-sharing-and-sub-processors","3. Data Sharing and Sub-processors",[149,304,305,306,309],{},"We engage a limited number of ",[152,307,308],{},"sub-processors"," under strict contracts to support service delivery. Sub-processors fall into two categories:",[149,311,312,315],{},[152,313,314],{},"Traffic Data Sub-processors (\"Sovereign Layer\")"," – process Traffic Data to deliver, secure, and operate services, generally within the EU/EEA.",[149,317,318,321],{},[152,319,320],{},"Administrative Data Sub-processors (\"Business Layer\")"," – support internal operations like billing, CRM, and customer support.",[149,323,324],{},"All sub-processors are bound by written agreements requiring them to follow strict data protection, confidentiality, and processing rules in line with GDPR and\nthis Privacy Notice. We keep an up-to-date list of sub-processors and notify customers of significant changes.",[184,326,328],{"id":327},"_31-categories-of-sub-processors","3.1 Categories of Sub-processors",[330,331,333],"h5",{"id":332},"_311-the-sovereign-layer-traffic-data-sub-processors",[152,334,335],{},"3.1.1 The Sovereign Layer / Traffic Data Sub-processors",[149,337,338],{},"Sub-processors involved in the processing of Traffic Data solely for the purpose of delivering, securing, and operating the Services. Such processing is limited to what is necessary\nto perform the contracted services and is subject to data residency and transfer restrictions as contractually agreed. These partners facilitate the content delivery, security,\nand routing of your website traffic. We have selected them specifically to ensure that the processing of end-user data remains within the EU/EEA to the fullest extent possible.",[189,340,341,356],{},[192,342,343],{},[195,344,345,348,350,353],{},[198,346,347],{},"Subprocessor",[198,349,203],{},[198,351,352],{},"Location of Processing",[198,354,355],{},"Legal Safeguard (if outside EU/EEA)",[208,357,358,376,394,411],{},[195,359,360,365,368,373],{},[213,361,362],{},[152,363,364],{},"Varnish Software AS",[213,366,367],{},"Performance of the contract",[213,369,370],{},[152,371,372],{},"Norway",[213,374,375],{},"N/A (within the EU/EEA)",[195,377,378,383,386,392],{},[213,379,380],{},[152,381,382],{},"DataPacket",[213,384,385],{},"Physical hosting, server infrastructure, and network routing",[213,387,388,391],{},[152,389,390],{},"European Union"," (EU-based Data Centers)",[213,393,375],{},[195,395,396,401,404,409],{},[213,397,398],{},[152,399,400],{},"Scaleway",[213,402,403],{},"Hosting of the Control Plane, API, and dashboard infrastructure",[213,405,406],{},[152,407,408],{},"France",[213,410,375],{},[195,412,413,419,422,426],{},[213,414,415,418],{},[152,416,417],{},"DataDome","*",[213,420,421],{},"Advanced Bot Protection and threat mitigation",[213,423,424],{},[152,425,408],{},[213,427,375],{},[149,429,430],{},"* DataDome may analyze traffic on their infrastructure located in the EU, although DataDome is a US-based entity.",[330,432,434],{"id":433},"_312-the-business-layer-admin-data-sub-processors",[152,435,436],{},"3.1.2 The Business Layer / Admin Data Sub-processors:",[149,438,439,440,443],{},"These Sub-processors support internal business functions, such as billing, accounting, customer support, and communications, and process ",[152,441,442],{},"Administrative Data"," only.\nData processed here is limited to your business contact details and account information, not your website's traffic or content.",[189,445,446,456],{},[192,447,448],{},[195,449,450,452,454],{},[198,451,347],{},[198,453,203],{},[198,455,352],{},[208,457,458,470,486,501,515,529,543,557],{},[195,459,460,464,466],{},[213,461,462],{},[152,463,364],{},[213,465,367],{},[213,467,468],{},[152,469,372],{},[195,471,472,477,480],{},[213,473,474],{},[152,475,476],{},"Salesforce",[213,478,479],{},"Customer Relationship Management (CRM) and sales pipeline",[213,481,482,485],{},[152,483,484],{},"EU"," (Hyperforce EU OZ Instance)",[195,487,488,493,496],{},[213,489,490],{},[152,491,492],{},"HubSpot",[213,494,495],{},"Marketing automation, lead generation, and website analytics",[213,497,498],{},[152,499,500],{},"USA",[195,502,503,508,511],{},[213,504,505],{},[152,506,507],{},"Slack",[213,509,510],{},"Internal team messaging and ChatOps",[213,512,513],{},[152,514,500],{},[195,516,517,522,525],{},[213,518,519],{},[152,520,521],{},"Zendesk",[213,523,524],{},"Customer support ticketing system",[213,526,527],{},[152,528,500],{},[195,530,531,536,539],{},[213,532,533],{},[152,534,535],{},"Google Workspace",[213,537,538],{},"Internal team communication (Email, Calendar)",[213,540,541],{},[152,542,500],{},[195,544,545,550,553],{},[213,546,547],{},[152,548,549],{},"Google",[213,551,552],{},"Website usage analytics and performance monitoring. Delivery of typography for our website and dashboard",[213,554,555],{},[152,556,500],{},[195,558,559,564,567],{},[213,560,561],{},[152,562,563],{},"Deltek Maconomy",[213,565,566],{},"Enterprise Resource Planning (ERP) and accounting",[213,568,569],{},[152,570,500],{},[157,572,574],{"id":573},"_4-your-rights-as-a-data-subject-in-line-with-gdpr","4. Your rights as a data subject in line with GDPR",[149,576,577],{},"Depending on where you are based, you may have a number of rights set out in applicable laws. You can make a request for any and all of the following:",[579,580,581,585,588,591,594,597,600],"ul",{},[582,583,584],"li",{},"To access and obtain a copy of your personal data;",[582,586,587],{},"To have updated any incorrect or incomplete personal data;",[582,589,590],{},"To delete / erase your personal data;",[582,592,593],{},"To restrict the processing of your personal data (in certain circumstances);",[582,595,596],{},"To request your personal data in a portable format;",[582,598,599],{},"To object to the processing of your personal data; and",[582,601,602],{},"To withdraw your consent (where the legal basis of processing personal data was based on consent).",[149,604,605,606,613],{},"To make such a request, please send an email to ",[152,607,608],{},[609,610,612],"a",{"href":611},"mailto:compliance@varnish-software.com","compliance@varnish-software.com",". You may also have the right to lodge a complaint with your local or national data protection\nregulatory or supervisory authority.",[157,615,617],{"id":616},"_5-cookies","5. Cookies",[149,619,620],{},"We use cookies to make our dashboard work (like keeping you logged in) and to keep it secure. We also use HubSpot cookies to understand how people find our website.\nYou can turn off non-essential cookies in your browser or via our cookie banner.",[157,622,624],{"id":623},"_6-data-retention","6. Data Retention",[149,626,627],{},"We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically, personal data is retained for:",[579,629,630,633,636],{},[582,631,632],{},"Providing and operating the Services",[582,634,635],{},"Compliance with legal obligations, including tax, accounting, and regulatory requirements",[582,637,638],{},"Resolving disputes and enforcing agreements",[149,640,641],{},"Retention periods for key categories of data are as follows:",[579,643,644,647,650],{},[582,645,646],{},"Account Data: Retained for the duration of the customer relationship.",[582,648,649],{},"Billing and Payment Records: We retain billing and payment records for the period required to comply with applicable local laws and tax regulations,\nwhich may vary depending on the country of operation. For example, in Sweden, accounting and tax records are typically retained for 7 years.",[582,651,652],{},"Traffic Data / Logs: Retained for 12 months for security auditing and operational purposes, after which they are permanently deleted.",[157,654,656],{"id":655},"_7-changes-to-this-privacy-notice","7. Changes to this Privacy Notice",[149,658,659],{},"We may update this Privacy Notice from time to time. The latest version will always be available on our website.",[157,661,663],{"id":662},"_8-contact-us","8. Contact us",[149,665,666,667],{},"You may contact us at ",[609,668,612],{"href":611},{"title":670,"searchDepth":671,"depth":671,"links":672},"",2,[673,674,675,676,677,678,679,680],{"id":159,"depth":671,"text":160},{"id":181,"depth":671,"text":182},{"id":301,"depth":671,"text":302},{"id":573,"depth":671,"text":574},{"id":616,"depth":671,"text":617},{"id":623,"depth":671,"text":624},{"id":655,"depth":671,"text":656},{"id":662,"depth":671,"text":663},"Varnish Software AB (org. number 556805-6203), Wallingatan 12, 111 60 Stockholm, Sweden (\"we\", \"us\", \"our\") respects your privacy and is committed to protecting your personal data.\nThis Privacy Notice explains how we collect, use, store, and share personal data when you visit our website, create an account, or purchase our services. We are the data\ncontroller for our services and comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).","md",{},true,"/legal/privacy-policy",{"title":144,"description":681},"legal/privacy-policy","24 March 2026","2026:01","sScP5CXcO-puU0ZBHjJGKGeNjKSGd-36C7Gw3H8x2gQ",{"id":692,"title":144,"archived":684,"body":693,"description":1144,"extension":682,"meta":1145,"navigation":684,"path":1146,"seo":1147,"stem":1148,"updated":1149,"version":1150,"__hash__":1151},"legal/legal/privacy-policy-2025-01.md",{"type":146,"value":694,"toc":1134},[695,700,702,707,712,716,718,722,767,771,798,802,829,831,835,840,845,847,849,854,857,935,938,942,948,1072,1074,1076,1092,1098,1100,1102,1104,1106,1114,1116,1124,1126,1128,1130],[149,696,697,699],{},[152,698,154],{}," (556805-6203), Wallingatan 12, 111 60 Stockholm, Sweden (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.\nThis Privacy Notice explains how we collect, use, store, and share personal data when you visit our website, create an account, or purchase our services. We are the data\ncontroller for our services and comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).",[157,701,160],{"id":159},[149,703,704,706],{},[152,705,165],{},"\nWe act as a controller for Administrative Data, such as account and billing information. We determine how and why this data is processed to manage accounts, provide support,\nand meet contractual and legal obligations.",[149,708,709,711],{},[152,710,171],{},"\nWe act as a processor for Traffic Data on behalf of our customers in accordance with the applicable Data Processing Agreement (DPA). Traffic Data includes content\ndelivered through our CDN and limited technical metadata, such as end-user IP addresses, that is necessary to operate and secure the service. Traffic Data is processed\nsolely for the purpose of providing the contracted services. Where feasible, Traffic Data is processed and retained within our European infrastructure.",[149,713,714,178],{},[152,715,177],{},[157,717,182],{"id":181},[184,719,721],{"id":720},"_21-administrative-data-controller","2.1 Administrative Data (Controller)",[189,723,724,738],{},[192,725,726],{},[195,727,728,731,734,736],{},[198,729,730],{},"Category of Personal Data",[198,732,733],{},"Description",[198,735,203],{},[198,737,206],{},[208,739,740,753],{},[195,741,742,746,749,751],{},[213,743,744],{},[152,745,217],{},[213,747,748],{},"Name, email address, company name",[213,750,221],{},[213,752,224],{},[195,754,755,759,762,764],{},[213,756,757],{},[152,758,231],{},[213,760,761],{},"Subscription plan, usage metrics, invoices, billing records, billing address, billing contact, VAT number",[213,763,235],{},[213,765,766],{},"Art. 6(1)(b) – Performance of a contract;  Art. 6(1)(c) – Legal obligation",[184,768,770],{"id":769},"_22-traffic-data-processor","2.2 Traffic Data (Processor)",[189,772,773,785],{},[192,774,775],{},[195,776,777,779,781,783],{},[198,778,730],{},[198,780,733],{},[198,782,203],{},[198,784,206],{},[208,786,787],{},[195,788,789,792,794,796],{},[213,790,791],{},"Traffic Data",[213,793,262],{},[213,795,265],{},[213,797,268],{},[184,799,801],{"id":800},"_23-usage-and-service-operation-data","2.3 Usage and Service Operation Data",[189,803,804,816],{},[192,805,806],{},[195,807,808,810,812,814],{},[198,809,730],{},[198,811,733],{},[198,813,203],{},[198,815,206],{},[208,817,818],{},[195,819,820,823,825,827],{},[213,821,822],{},"Usage Data",[213,824,292],{},[213,826,295],{},[213,828,298],{},[157,830,302],{"id":301},[149,832,305,833,309],{},[152,834,308],{},[149,836,837,315],{},[152,838,839],{},"Traffic Data Sub-processors (“Sovereign Layer”)",[149,841,842,321],{},[152,843,844],{},"Administrative Data Sub-processors (“Business Layer”)",[149,846,324],{},[184,848,328],{"id":327},[330,850,851],{"id":332},[152,852,853],{},"3.1.1 The Sovereign Layer /Traffic Data Sub-processors",[149,855,856],{},"Sub-processors involved in the processing of Traffic Data solely for the purpose of delivering, securing, and operating the Services. Such processing is limited to what is necessary\nto perform the contracted services and is subject to data residency and transfer restrictions as contractually agreed.These partners facilitate the content delivery, security,\nand routing of your website traffic. We have selected them specifically to ensure that the processing of end-user data remains within the EU/EEA to the fullest extent possible.",[189,858,859,871],{},[192,860,861],{},[195,862,863,865,867,869],{},[198,864,347],{},[198,866,203],{},[198,868,352],{},[198,870,355],{},[208,872,873,888,902,917],{},[195,874,875,879,881,885],{},[213,876,877],{},[152,878,382],{},[213,880,385],{},[213,882,883,391],{},[152,884,390],{},[213,886,887],{},"N/A (Inside EU/EEA)",[195,889,890,894,896,900],{},[213,891,892],{},[152,893,400],{},[213,895,403],{},[213,897,898],{},[152,899,408],{},[213,901,887],{},[195,903,904,908,910,914],{},[213,905,906,418],{},[152,907,417],{},[213,909,421],{},[213,911,912],{},[152,913,408],{},[213,915,916],{},"N/A (EU/Inside EEA)",[195,918,919,924,927,932],{},[213,920,921,418],{},[152,922,923],{},"Atomicorp",[213,925,926],{},"Provider of WAF security rulesets. Rules are downloaded and executed locally on our own infrastructure.",[213,928,929,931],{},[152,930,390],{}," (Rules applied locally on EU nodes)",[213,933,934],{},"N/A (No data transferred to vendor)",[149,936,937],{},"*Note: While WAF rules are applied locally on our European infrastructure, Atomicorp is a US-based entity. DataDome may analyze traffic on their infrastructure located in the EU,\nalthough DataDome is a US-based entity.",[330,939,940],{"id":433},[152,941,436],{},[149,943,944,945,947],{},"These Sub-processors that support internal business functions, such as billing, accounting, customer support, and communications, and that process ",[152,946,442],{}," only.\nData processed here is limited to your business contact details and account information, not your website’s traffic or content.",[189,949,950,960],{},[192,951,952],{},[195,953,954,956,958],{},[198,955,347],{},[198,957,203],{},[198,959,352],{},[208,961,962,977,991,1005,1015,1029,1043,1053],{},[195,963,964,971,973],{},[213,965,966],{},[609,967,476],{"href":968,"rel":969},"https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Privacy/dpia-and-salesforce-services.pdf",[970],"nofollow",[213,972,479],{},[213,974,975,485],{},[152,976,484],{},[195,978,979,985,987],{},[213,980,981],{},[609,982,492],{"href":983,"rel":984},"https://legal.hubspot.com/privacy-policy",[970],[213,986,495],{},[213,988,989],{},[152,990,500],{},[195,992,993,999,1001],{},[213,994,995],{},[609,996,507],{"href":997,"rel":998},"https://slack.com/trust/privacy/privacy-policy",[970],[213,1000,510],{},[213,1002,1003],{},[152,1004,500],{},[195,1006,1007,1009,1011],{},[213,1008,521],{},[213,1010,524],{},[213,1012,1013],{},[152,1014,500],{},[195,1016,1017,1023,1025],{},[213,1018,1019],{},[609,1020,535],{"href":1021,"rel":1022},"https://safety.google/",[970],[213,1024,538],{},[213,1026,1027],{},[152,1028,500],{},[195,1030,1031,1036,1039],{},[213,1032,1033],{},[609,1034,549],{"href":1021,"rel":1035},[970],[213,1037,1038],{},"Website usage analytics and performance monitoring Delivery of typography for our website and dashboard",[213,1040,1041],{},[152,1042,500],{},[195,1044,1045,1047,1049],{},[213,1046,563],{},[213,1048,566],{},[213,1050,1051],{},[152,1052,500],{},[195,1054,1055,1058,1066],{},[213,1056,1057],{},"Mollie",[213,1059,1060,1061],{},"Payment processing (Independent Controller) For details about how they process personal data, please refer to their  ",[609,1062,1065],{"href":1063,"rel":1064},"https://www.mollie.com/legal/privacy",[970],"privacy policy",[213,1067,1068,1071],{},[152,1069,1070],{},"Netherlands"," (European Union)",[157,1073,574],{"id":573},[149,1075,577],{},[579,1077,1078,1080,1082,1084,1086,1088,1090],{},[582,1079,584],{},[582,1081,587],{},[582,1083,590],{},[582,1085,593],{},[582,1087,596],{},[582,1089,599],{},[582,1091,602],{},[149,1093,605,1094,613],{},[152,1095,1096],{},[609,1097,612],{"href":611},[157,1099,617],{"id":616},[149,1101,620],{},[157,1103,624],{"id":623},[149,1105,627],{},[579,1107,1108,1110,1112],{},[582,1109,632],{},[582,1111,635],{},[582,1113,638],{},[149,1115,641],{},[579,1117,1118,1120,1122],{},[582,1119,646],{},[582,1121,649],{},[582,1123,652],{},[157,1125,656],{"id":655},[149,1127,659],{},[157,1129,663],{"id":662},[149,1131,666,1132],{},[609,1133,612],{"href":611},{"title":670,"searchDepth":671,"depth":671,"links":1135},[1136,1137,1138,1139,1140,1141,1142,1143],{"id":159,"depth":671,"text":160},{"id":181,"depth":671,"text":182},{"id":301,"depth":671,"text":302},{"id":573,"depth":671,"text":574},{"id":616,"depth":671,"text":617},{"id":623,"depth":671,"text":624},{"id":655,"depth":671,"text":656},{"id":662,"depth":671,"text":663},"Varnish Software AB (556805-6203), Wallingatan 12, 111 60 Stockholm, Sweden (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.\nThis Privacy Notice explains how we collect, use, store, and share personal data when you visit our website, create an account, or purchase our services. We are the data\ncontroller for our services and comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).",{},"/legal/privacy-policy-2025-01",{"title":144,"description":1144},"legal/privacy-policy-2025-01","19 December 2025","2025:01","U8h-kHFIFH5lRyDB0_INILeLrt41WNVYf4sucfCiTp4",{"id":1153,"title":1154,"archived":44,"body":1155,"description":1159,"extension":682,"meta":1358,"navigation":684,"path":1359,"seo":1360,"stem":1361,"updated":1362,"version":1363,"__hash__":1364},"legal/legal/security-and-compliance.md","Security and compliance",{"type":146,"value":1156,"toc":1350},[1157,1160,1164,1167,1191,1195,1202,1222,1226,1229,1255,1259,1262,1271,1303,1307,1310,1336,1340],[149,1158,1159],{},"At Varnish CDN, security isn't just a feature—it is the foundation of our \"Sovereign Guarantee.\" We built our service to withstand the modern threat landscape while ensuring European data sovereignty.\nThis document outlines the technical and organizational measures we take to protect your data and your traffic.",[157,1161,1163],{"id":1162},"_1-certifications-compliance","1. Certifications & Compliance",[149,1165,1166],{},"We are committed to maintaining the highest standards of information security.",[579,1168,1169,1175,1185],{},[582,1170,1171,1174],{},[152,1172,1173],{},"ISO 27001 Certified:"," Varnish Software is ISO 27001 certified. This means our information security management system (ISMS) has been independently audited and\nmeets strict international standards for managing data security.",[582,1176,1177,1180,1181,1184],{},[152,1178,1179],{},"GDPR:"," We have implemented policies, processes, and contractual safeguards designed to support GDPR-aligned data protection obligations when acting as a\nController or Processor, see ",[609,1182,1183],{"href":685},"Privacy Policy"," & Data Processing Agreement.",[582,1186,1187,1190],{},[152,1188,1189],{},"NIS2:","  As a European digital infrastructure provider, we monitor and adapt to evolving EU cybersecurity regulations, including the NIS2 Directive,\nand incorporate relevant security principles into our operations where applicable.",[157,1192,1194],{"id":1193},"_2-infrastructure-sovereignty","2. Infrastructure & Sovereignty",[149,1196,1197,1198,1201],{},"We act as a ",[152,1199,1200],{},"Sovereign European Alternative"," to US-based hyperscalers. Our architecture is designed to minimize risk and maximize control.",[579,1203,1204,1210,1216],{},[582,1205,1206,1209],{},[152,1207,1208],{},"European-First Infrastructure:"," Our core traffic processing nodes (DataPacket) and our Control Plane (Scaleway) are hosted strictly within the European Union. We do not rely on US-owned\ncloud providers for our critical traffic path, shielding your end-users' data from the US CLOUD Act.",[582,1211,1212,1215],{},[152,1213,1214],{},"Physical Security:"," We utilize Tier-3+ and Tier-4 data centers that maintain strict physical security controls, including 24/7 on-site security, biometric access, and video surveillance.",[582,1217,1218,1221],{},[152,1219,1220],{},"Network Redundancy:"," Our network is built on a resilient architecture. If a node or path becomes unavailable, traffic is instantly rerouted to the nearest healthy Point of Presence (PoP)\nto ensure high availability.",[157,1223,1225],{"id":1224},"_3-network-application-security","3. Network & Application Security",[149,1227,1228],{},"We provide a multi-layered defense to protect your applications from attacks.",[579,1230,1231,1237,1243,1249],{},[582,1232,1233,1236],{},[152,1234,1235],{},"DDoS Protection:"," We deploy \"heavy-duty\" unmetered DDoS protection across Layers 3, 4, and 7. Our network is designed to absorb and mitigate volumetric attacks before they reach your origin servers.",[582,1238,1239,1242],{},[152,1240,1241],{},"Web Application Firewall (WAF):"," We utilize managed WAF rulesets provided by Atomicorp. Crucially, these rules are executed locally on our Varnish nodes. We inspect traffic at the\nedge without sending sensitive request data to third-party vendors.",[582,1244,1245,1248],{},[152,1246,1247],{},"Bot Mitigation:"," We partner with DataDome (France) to provide advanced bot detection, blocking malicious scrapers and scalpers while allowing legitimate traffic.",[582,1250,1251,1254],{},[152,1252,1253],{},"Encryption:"," All data in transit is encrypted using TLS 1.2 or 1.3. We support \"Bring Your Own Certificate\" or can manage SSL certificates for you.",[157,1256,1258],{"id":1257},"_4-data-protection-privacy","4. Data Protection & Privacy",[149,1260,1261],{},"We design and operate our services in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), and apply privacy-by-design and\nprivacy-by-default principles across our platform.",[149,1263,1264,1265,1267,1268,1270],{},"We strictly separate ",[152,1266,791],{}," (your end-users) from ",[152,1269,442],{}," (your account).",[579,1272,1273,1279,1285,1291,1297],{},[582,1274,1275,1278],{},[152,1276,1277],{},"Data Minimization:"," Traffic logs are retained only for 12 months for security auditing and troubleshooting, after which they are permanently deleted.",[582,1280,1281,1284],{},[152,1282,1283],{},"Disaster Recovery Backups:"," We perform hourly snapshots of our entire Control Plane database with a 7-day retention period to ensure system-wide disaster recovery.\nAll backups are strictly encrypted at rest. (Note: These snapshots are for system restoration; granular rollback for individual customer configurations is currently not supported.)",[582,1286,1287,1290],{},[152,1288,1289],{},"Encryption at Rest:"," Sensitive data in our Control Plane (like your configuration and hashed passwords) is encrypted at rest.",[582,1292,1293,1296],{},[152,1294,1295],{},"Sovereign Guarantee:"," We contractually guarantee that your traffic data will not be transferred to the US or other third countries without your explicit approval.",[582,1298,1299,1302],{},[152,1300,1301],{},"Security breach notification:"," In the event of a confirmed data breach that impacts your data, we will notify you without undue delay, and in any event,\nwithin 72 hours of discovery. Our notification will include a description of the nature of the breach, the categories of data affected, and the measures we are taking to mitigate any adverse effects.",[157,1304,1306],{"id":1305},"_5-corporate-operational-security","5. Corporate & Operational Security",[149,1308,1309],{},"Securing our product starts with securing our organization.",[579,1311,1312,1318,1324,1330],{},[582,1313,1314,1317],{},[152,1315,1316],{},"Access Control (RBAC):"," We operate on a principle of Least Privilege. Access to production systems is restricted to authorized engineers.",[582,1319,1320,1323],{},[152,1321,1322],{},"Internal Authentication:"," Employee access to internal tools and administrative systems is secured via Google Workspace SSO with Multi-Factor Authentication (MFA) enforced.",[582,1325,1326,1329],{},[152,1327,1328],{},"Software Development:"," We follow secure coding practices. Our core technology is built on Varnish Cache, the battle-tested engine used by the world's largest websites.",[582,1331,1332,1335],{},[152,1333,1334],{},"Vendor Risk Management:"," We review all sub-processors for security and GDPR compliance. We sign Data Processing Agreements (DPAs) with Standard Contractual Clauses (SCCs) where necessary.",[157,1337,1339],{"id":1338},"_6-vulnerability-reporting","6. Vulnerability Reporting",[149,1341,1342,1343],{},"We value the work of the security research community. If you discover a vulnerability in Varnish CDN, please report it to us responsibly at ",[152,1344,1345,1349],{},[609,1346,1348],{"href":1347},"mailto:security@varnish-software.com","security@varnish-software.com",".",{"title":670,"searchDepth":671,"depth":671,"links":1351},[1352,1353,1354,1355,1356,1357],{"id":1162,"depth":671,"text":1163},{"id":1193,"depth":671,"text":1194},{"id":1224,"depth":671,"text":1225},{"id":1257,"depth":671,"text":1258},{"id":1305,"depth":671,"text":1306},{"id":1338,"depth":671,"text":1339},{},"/legal/security-and-compliance",{"title":1154,"description":1159},"legal/security-and-compliance","December 2025",null,"fwosxBhgMAeZo4_5leTLzVBLqMQg7zpOS2-_rDVexaw",{"id":1366,"title":1367,"archived":44,"body":1368,"description":670,"extension":682,"meta":1676,"navigation":684,"path":1677,"seo":1678,"stem":1679,"updated":1362,"version":1150,"__hash__":1680},"legal/legal/terms-of-service.md","Terms of service",{"type":146,"value":1369,"toc":1666},[1370,1374,1377,1380,1384,1387,1390,1393,1396,1399,1402,1405,1408,1412,1416,1419,1423,1426,1430,1433,1437,1441,1444,1448,1451,1455,1462,1466,1469,1473,1476,1480,1483,1486,1489,1493,1497,1500,1504,1507,1511,1514,1518,1521,1525,1528,1532,1535,1539,1542,1546,1549,1553,1561,1565,1568,1572,1576,1579,1583,1586,1590,1593,1597,1603,1607,1610,1614,1617,1621,1624,1628,1631,1635,1638,1642,1645,1649,1652,1656,1659,1663],[157,1371,1373],{"id":1372},"_1-introduction","1. Introduction",[149,1375,1376],{},"1.1 These Terms of Service (“Subscription Agreement”) are effective as of the date on the Order, if applicable (the “Effective Date”),\nand is between Varnish Software AB (556805-6203) Wallingatan 12, 111 60 Stockholm, Sweden,\n(“Varnish”) and the customer named in the Order (“Subscriber”). Each is a “Party” and together, the “Parties”.",[149,1378,1379],{},"1.2 Varnish provides a proprietary platform service designed to allow subscribers to deliver content to digital devices and\nproducts (“Service”), as further described in the then-current version of any technical documentation provided\nto Subscriber by Varnish or available on our website (“Documentation”).",[157,1381,1383],{"id":1382},"_2-definitions","2. Definitions",[149,1385,1386],{},"“Effective Date” means the date that the Subscriber accepted the terms of this Subscription Agreement by\ncreating an Order.",[149,1388,1389],{},"“Intellectual Property Rights” means all intellectual property rights, whether registered or unregistered,\nincluding patents, utility models, designs, copyrights, database rights, trade marks, trade secrets,\nknow-how, and all similar rights and protections in any jurisdiction.",[149,1391,1392],{},"“Order” means an online or offline order for Services, which may include service\nspecification, price, quantity and commitment for such Services.",[149,1394,1395],{},"“Permitted User” shall mean (a) an employee or independent contractor of Subscriber or (b) a Subscriber affiliate,\nprovided that, Subscriber will be jointly and severally liable with such Subscriber affiliate for all acts and\nomissions of each Subscriber affiliate while using the Service.",[149,1397,1398],{},"“Subscriber Data” means any data, information, or material provided or submitted by Subscriber to Varnish in the\ncourse of receiving the Services.",[149,1400,1401],{},"“Service Specification” means specification of Services as described on the website describing the particular\nServices that the Subscriber has purchased based on the description as it stands on the Effective Date.",[149,1403,1404],{},"“Subscription Agreement” means these terms and conditions, together with any appendices,\nOrders, and any documents incorporated by reference.",[149,1406,1407],{},"“Subscription Fee” means the recurring fee payable by the Subscriber to access and use the Subscription Services.",[157,1409,1411],{"id":1410},"_3-provision-of-the-service","3. Provision of the service",[184,1413,1415],{"id":1414},"_31-access-to-the-service","3.1 Access to the service",[149,1417,1418],{},"Subject to Subscriber’s compliance with the terms of Subscription Agreement (including any Order) and timely payment\nof all applicable Subscription Fees, Varnish hereby grants to Subscriber a limited, revocable, non-exclusive,\nnon-transferable right for Permitted Users to access and use the Service solely for Subscriber’s internal\nbusiness purposes, during the Subscription Term.",[184,1420,1422],{"id":1421},"_32-restrictions","3.2 Restrictions",[149,1424,1425],{},"Subscriber shall not, and shall not permit any Permitted User to: (a) use the Service in violation of applicable law;\n(b) permit any third party to access, resell, lease, transfer, or share the Service or rights under this Subscription\nAgreement; (c) remove, alter, or obscure Varnish trademarks, names, or logos; (d) copy, reproduce, or modify the\nService or any part thereof; (e) use the Service for the benefit of any third party, to develop competing products,\nor for any purpose not expressly permitted herein; (f) access non-public systems, data, or bypass security measures\nof the Service; (g) use the Service for benchmarking or developing competing offerings; or (h) reverse engineer,\ndecompile, disassemble, or otherwise attempt to derive source code, structure, or underlying ideas of the Service.",[184,1427,1429],{"id":1428},"_33-permitted-users","3.3 Permitted Users",[149,1431,1432],{},"Subscriber is responsible for all access to and use of the Service by its Permitted Users, including any use under\nSubscriber’s account or credentials. Subscriber must ensure Permitted Users comply with this Subscription Agreement\nand is responsible for maintaining the confidentiality of all log-in credentials. Subscriber shall promptly notify\nVarnish of any unauthorized access or use of the Service.",[157,1434,1436],{"id":1435},"_4-ownership-and-intellectual-property-rights","4. Ownership and Intellectual Property Rights",[184,1438,1440],{"id":1439},"_41-no-intellectual-property-rights-transfer","4.1 No Intellectual Property Rights transfer.",[149,1442,1443],{},"Notwithstanding anything to the contrary, nothing in this Subscription Agreement or otherwise between the Parties\nshall be construed as transferring or assigning the title or ownership of any Intellectual Property Rights.",[184,1445,1447],{"id":1446},"_42-subscriber-data","4.2 Subscriber Data",[149,1449,1450],{},"Subscriber retains ownership of all Subscriber Data and is solely responsible for its accuracy, quality, legality,\nand authorized use. Varnish assumes no liability for any deletion, correction, destruction, damage, loss, or\nfailure to store Subscriber Data. Subscriber grants Varnish a worldwide, non-exclusive, revocable, limited\nlicense to process, transmit, and store Subscriber Data during the Subscription Term, solely to provide the\nServices under this Subscription Agreement.",[184,1452,1454],{"id":1453},"_43-varnish-indemnity","4.3 Varnish Indemnity",[149,1456,1457,1458,1461],{},"Varnish shall indemnify and hold Subscriber and its affiliates harmless from any third-party claims alleging that\nthe Service infringes intellectual property rights, including related costs and attorney fees. If such a claim\nresults or is likely to result in an injunction, Varnish may, at its discretion: (a) modify the Service to be\nnon-infringing; (b) procure continued use rights for Subscriber; or if (a) and (b) are not commercially reasonable,",[1459,1460],"br",{},"\n(c) terminate the Subscription Agreement (and applicable Order) and refund any prepaid fees for the unused portion\nof the Subscription Term. This obligation does not apply if the claim arises from: (i) modifications not approved\nby Varnish; (ii) unauthorized combinations or use; (iii) misuse of the Service; (iv) third-party components\nor Subscriber Data; or (v) Varnish’s compliance with Subscriber's specifications.",[184,1463,1465],{"id":1464},"_44-subscriber-indemnity","4.4 Subscriber Indemnity",[149,1467,1468],{},"Subscriber shall indemnify and hold Varnish harmless from any and all claims, damages, losses, liabilities,\nand expenses (including attorneys’ fees) arising from Subscriber’s or any Permitted User’s use of the Service\nin violation of this Subscription Agreement.",[184,1470,1472],{"id":1471},"_45-procedure","4.5 Procedure",[149,1474,1475],{},"The indemnity obligations above apply only if the indemnified Party: (a) promptly provides written notice of\nthe claim to the indemnifying Party; and (b) grants the indemnifying Party sole control over the defense\nand settlement, provided that any settlement fully releases the indemnified Party from all liability.",[157,1477,1479],{"id":1478},"_5-warranties","5. Warranties",[149,1481,1482],{},"5.1 Varnish shall perform the Services in all material respects in accordance with this Subscription Agreement.\nVarnish warrants that Service  does not contain any viruses or other malicious code that can be detected by\nstate-of-the-art anti-virus scanners.",[149,1484,1485],{},"5.2 Varnish does not warrant that (i) Services will be error-free or accessible at all times (ii) the delivery of\nServices will be uninterrupted or without delay.Varnish shall not be responsible for unauthorized access to or\nalteration of the Subscriber’s  data.Varnish does not warrant that (i) Services will be error-free or\naccessible at all times (ii) the delivery of Services will be uninterrupted or without delay. Varnish shall\nnot be responsible for unauthorized access to or alteration of the Subscriber’s  data.",[149,1487,1488],{},"5.3 Except for the specific warranties stated in this Subscription Agreement, Varnish provides no other warranties\nfor the Services. All other implied or statutory warranties including those about quality, performance,\nfitness for a particular purpose, or merchantability—are excluded.",[157,1490,1492],{"id":1491},"_6-term-termination-and-billing","6. Term, Termination and Billing",[184,1494,1496],{"id":1495},"_61-term","6.1 Term",[149,1498,1499],{},"Services that are provided to you as Paid Services may be provided to you on a subscription basis for the length\nof term that you specified during the initial sign-up process or your first use (“Subscription Term”). All of\nyour subscriptions to Paid Services with a Subscription Term will automatically renew for periods equal to\nyour initial Subscription Term, and you will be charged at Varnish then-current Subscription Fees rates\nunless you cancel your Subscription through the Services’ account dashboard prior to your next scheduled\nbilling date.",[184,1501,1503],{"id":1502},"_62-early-termination","6.2 Early Termination",[149,1505,1506],{},"Either Party may terminate this Subscription Agreement (including any Order) with immediate effect by written\nnotice if the other Party: (a) materially breaches this Subscription Agreement and fails to remedy the breach\nwithin 30 days of written notice (if capable of remedy), or if the breach is not capable of remedy; (b)\nassigns this Subscription Agreement in breach of the Assignment clause; or (c) becomes insolvent or enters\nliquidation, administration, or a similar insolvency process. Upon termination, all rights granted to the\nSubscriber immediately cease, and the Subscriber must stop using the Services. All unpaid fees become\nimmediately due and payable.",[184,1508,1510],{"id":1509},"_63-service-suspension","6.3 Service Suspension",[149,1512,1513],{},"Varnish may suspend Services to the Subscriber without notice or liability if: (i) it reasonably believes the\nServices are being used in violation of this Subscription Agreement; (ii) suspension is necessary to protect\nits network or other customers; (iii) required by law or regulatory authority; or (iv) the Subscriber fails\nto pay Subscription Fees due.",[184,1515,1517],{"id":1516},"_64-billing","6.4 Billing",[149,1519,1520],{},"Varnish bills in advance on a monthly subscription basis, unless otherwise agreed at the time of purchase.\nTo access any Services requiring payment (“Paid Services”), Subscriber must provide valid and current credit card\ninformation (“Payment Method”). By doing so, Subscriber authorizes Varnish to charge the Payment Method on a\nmonthly basis for fees associated with the Paid Services Subscriber uses. Billing will begin on the date\nSubscriber first accesses the Paid Services, regardless of configuration status.",[184,1522,1524],{"id":1523},"_65-purchase-of-the-additional-service","6.5 Purchase of the Additional Service",[149,1526,1527],{},"The Subscriber may subscribe to additional services offered by Varnish, which shall be governed by the terms\nof this Subscription Agreement. The billing information previously provided by the Subscriber shall apply,\nand any associated Subscription Fees for the additional services may be charged separately or together with\nthe main Subscription Fee.",[184,1529,1531],{"id":1530},"_66-subscription-fee-changes","6.6 Subscription Fee Changes.",[149,1533,1534],{},"Varnish may change the Subscription Fees for the Service at any time in our sole discretion, with at least\nthirty (30) days’ prior notice to Subscriber. Unless otherwise stated in the notice, any fee changes will\ntake effect in the billing period immediately following such notice.",[184,1536,1538],{"id":1537},"_67-taxes","6.7 Taxes",[149,1540,1541],{},"Varnish’s Subscription Fees are exclusive of all value-added tax (VAT) and any similar taxes required by\napplicable law. Subscriber shall be responsible for all such taxes, except for taxes based solely on Varnish’s\nincome. If Subscriber is required by law to withhold taxes from any payment to Varnish, Subscriber shall gross\nup such payment so that Varnish receives the full invoiced amount",[184,1543,1545],{"id":1544},"_68-no-refunds","6.8 No refunds.",[149,1547,1548],{},"All fees are non-refundable. Subscriber will be billed in full for the Subscription Term in which any cancellation\noccurs, and no refunds will be issued for any unused portion of that term. Following cancellation, Subscriber\nwill retain access to the Paid Services through the end of the current Subscription Term, except for Services\nsubject to usage-based billing.",[184,1550,1552],{"id":1551},"_69-invoice-queries","6.9 Invoice Queries",[149,1554,1555,1556,1560],{},"If the Subscriber disputes the invoice, the Subscriber must notify Varnish at ",[609,1557,1559],{"href":1558},"mailto:billing@varnish-software.com","billing@varnish-software.com"," within\nten (10) calendar days of the invoice date, specifying the disputed amount, the reason for the dispute, and\nprovide any supporting documentation. If no such notice is received within this period, the invoice shall\nbe deemed accepted and binding.",[157,1562,1564],{"id":1563},"_7-limitation-of-liability","7. Limitation of liability",[149,1566,1567],{},"7.1 Neither Party’s total liability arising out of or related to this Subscription Agreement shall exceed\nthe amounts actually paid or payable by Subscriber in the twelve (12) months preceding the event giving\nrise to the claim. Neither Party shall be liable for any indirect, incidental, special, consequential,\npunitive, or exemplary damages, including loss of data, revenue, profits, use, or economic advantage,\narising from or related to the use or inability to use the Services, or from any content, data,\ninterruption, error, or omission, even if advised of the possibility of such damages. The limitations\nof liability in this Subscription Agreement do not apply to either Party’s indemnity obligations, or\nto liability arising from: (a) gross negligence or willful misconduct; (b) death or personal injury;\nor (c) breach of Confidentiality.",[157,1569,1571],{"id":1570},"_8-miscellaneous","8. Miscellaneous",[184,1573,1575],{"id":1574},"_81-data-protection-and-privacy","8.1 Data Protection and Privacy.",[149,1577,1578],{},"Each Party shall comply with their respective obligations as set out in a Data Processing Agreement (DPA).",[184,1580,1582],{"id":1581},"_82-confidential-information","8.2 Confidential Information:",[149,1584,1585],{},"Each Party (“Receiving Party”) may receive non-public, confidential, or proprietary information from the other\n(“Disclosing Party”) in connection with this Agreement. “Confidential Information” includes, without limitation:\n(a) the terms of this Agreement and any Order; (b) information relating to the Services (c) Subscriber Data;\nand (d) other non-public information disclosed in any form related to this Subscription Agreement.\nThe Receiving Party must protect Confidential Information with the same care it uses for its own,\nand no less than reasonable care, and may only use it as needed to perform under this Subscription Agreement.\nDisclosure is permitted only to employees, contractors, or affiliates with a need to know and who are bound\nby confidentiality obligations.These obligations do not apply to information that: (a) becomes public through\nno fault of the Receiving Party; (b) was known before disclosure; (c) is received lawfully from a third party;\n(d) is independently developed; or (e) must be disclosed by law or court order, provided reasonable notice\nis given to allow the Disclosing Party to seek protective measures.",[184,1587,1589],{"id":1588},"_83-components-not-embedded-in-service","8.3 Components not embedded in Service.",[149,1591,1592],{},"The Services may involve the use of or integration with third-party software or services not embedded in\nVarnish’s Service. Varnish will use commercially reasonable efforts to protect Subscriber’s interests\nwhen engaging with such third parties, but Varnish shall not be liable for the performance, availability,\nor security of any such third-party components.",[184,1594,1596],{"id":1595},"_84-manner-of-giving-notices","8.4 Manner of Giving Notices.",[149,1598,1599,1600,1602],{},"Varnish may provide notice by email or mail to Subscriber’s contact details on record. Notices are deemed\nreceived 48 hours after email is sent or 4 business days after mailing. Notices to Varnish must be sent\nto ",[609,1601,612],{"href":611}," and to the Varnish address provided in Section 1.1.",[184,1604,1606],{"id":1605},"_85-modifications","8.5 Modifications.",[149,1608,1609],{},"No terms or conditions set forth in   any purchase order, pre-printed form, or other  document provided by\nSubscriber shall modify or supplement this Subscription Agreement, and any such terms are hereby rejected\nand shall have no legal effect.",[184,1611,1613],{"id":1612},"_86-variation","8.6 Variation.",[149,1615,1616],{},"We may update the terms of this Subscription Agreement from time to time, with changes taking effect\nupon publication. For material changes, we will use reasonable efforts to provide at least 30 days’\nprior notice. What constitutes a material change will be determined at Varnish reasonable discretion.\nAny addendum signed by both Parties overrides conflicting terms in the main Subscription Agreement.",[184,1618,1620],{"id":1619},"_87-force-majeure","8.7 Force Majeure.",[149,1622,1623],{},"Neither Party is liable for delays or failures caused by events beyond reasonable control, including\ninternet or network outages, CDN failures, cloud service interruptions, power or telecommunications failures,\nor acts of government, service outages resulting from equipment and or software failure, telecommunication failure,\npower failure, or failure of third party service providers. The performance of this Subscription Agreement shall\nthen be suspended for as long as any such event prevents the affected party from performing its obligations.",[184,1625,1627],{"id":1626},"_88-trademark-usage-for-marketing","8.8 Trademark Usage for Marketing.",[149,1629,1630],{},"Subscriber shall not use Varnish names, trademarks, trade names, service marks, or logos without a prior written\nconsent. For the duration of this Subscription Agreement, Subscriber grants Varnish a non-exclusive,\nnon-transferable, royalty-free licence to use Subscriber’s trademarks and logos, without modification,\nsolely in connection with promoting and marketing the Service.",[184,1632,1634],{"id":1633},"_89-no-third-party-beneficiaries","8.9 No Third-Party Beneficiaries.",[149,1636,1637],{},"No term of this Subscription Agreement is intended to confer a benefit on, or to be enforceable by, any third party\nwho is not a party to this Subscription Agreement.",[184,1639,1641],{"id":1640},"_810-assignment","8.10 Assignment.",[149,1643,1644],{},"Neither Party may assign any of its rights, interests or obligations under this Subscription Agreement without\nthe prior written consent of the other Party.",[184,1646,1648],{"id":1647},"_811-entire-agreement","8.11 Entire Agreement.",[149,1650,1651],{},"This Subscription Agreement is the entire agreement between the Parties and overrides all other  agreements or\ncommunications, written or oral, made before or at the time of signing. In the event of any conflict or\ninconsistency among the following, the order of precedence shall be: (i) the applicable Service Order,\n(ii) this Subscription Agreement. No failure or delay by either Party in exercising any right under this\nSubscription Agreement will constitute a waiver of that right. If any part of this Subscription Agreement\nis found unenforceable, the rest remains in effect, and the invalid part will be interpreted to reflect\nthe original intent as closely as possible.",[184,1653,1655],{"id":1654},"_812-survival","8.12 Survival.",[149,1657,1658],{},"The following provisions will survive termination: confidentiality (section 8.2), intellectual property (section 4),\nlimitations of liability (section 7), payment obligations (section 6), and any other terms which by their nature\nare intended to survive.",[184,1660,1662],{"id":1661},"_813-dispute-resolution-and-applicable-law","8.13 Dispute Resolution and Applicable Law.",[149,1664,1665],{},"Any dispute, controversy or claim arising out of or in connection with this Subscription Agreement, or the breach,\ntermination or invalidity thereof, shall be finally settled by expedited arbitration in accordance with the SCC\nRules for Expedited Arbitration. The seat of arbitration shall be Stockholm, Sweden. The language to be used\nin the arbitral proceedings shall be English. Governing law is Swedish law (without recourse to any conflict\nof laws doctrine).",{"title":670,"searchDepth":671,"depth":671,"links":1667},[1668,1669,1670,1671,1672,1673,1674,1675],{"id":1372,"depth":671,"text":1373},{"id":1382,"depth":671,"text":1383},{"id":1410,"depth":671,"text":1411},{"id":1435,"depth":671,"text":1436},{"id":1478,"depth":671,"text":1479},{"id":1491,"depth":671,"text":1492},{"id":1563,"depth":671,"text":1564},{"id":1570,"depth":671,"text":1571},{},"/legal/terms-of-service",{"title":1367,"description":670},"legal/terms-of-service","jvvpGdvkfjLZyeEkSV706XBsQYtHqaZGTwlKf7Wg4Hg",1775548583407]