FirmTrack User Agreement

1. Acceptance of Terms

This User Agreement ("Agreement") governs your organization's access to and use of FirmTrack (the "Service"), operated by [COMPANY LEGAL NAME] ("FirmTrack," "we," "us"). By creating an account, you confirm that you are authorized to accept this Agreement on behalf of your organization, and that your organization agrees to be bound by it.

2. Description of Service

FirmTrack is a practice management platform for legal practices, providing tools including time and billing tracking, accounting, human resources, calendaring, and related administrative modules.

3. Security Guaranty

FirmTrack understands that legal practices handle sensitive client information and hold that data to a high standard of care. As part of this Agreement, FirmTrack commits to the following technical safeguards for every account, at no additional cost:

• Encryption in transit. All traffic between your browser and FirmTrack is encrypted using HTTPS/TLS.
• Security audit logging. Sign-ins, sign-in failures, password resets, and administrative actions (role changes, account deactivation, session revocation) are logged and visible to your organization's administrators.
• Automated lockout. Accounts and IP addresses are automatically, temporarily locked out after repeated failed sign-in attempts.
• Session revocation. An administrator can immediately sign a user out of every active session, on every device, if a device or account is lost or compromised.
• Multi-factor authentication. FirmTrack supports authenticator-app-based multi-factor authentication (TOTP) and, by default, requires it for every user. Your organization's administrator may disable this default only after confirming your organization's own identity provider independently enforces multi-factor authentication.
• Single sign-on. Organizations may allow their members to sign in with their existing Microsoft or Google account, relying on that provider's own security controls (e.g., Conditional Access policies).
• Tenant data isolation. Each organization's data is logically separated from every other organization's and is accessible only to authorized members of that organization.
• Role-based access control. Access to sensitive administrative functions is restricted by role within your organization.

[ADDITIONAL COMMITMENTS -- e.g. data breach notification timeline, backup/retention policy, sub-processor list, security incident response process, cyber insurance -- to be added by FirmTrack's counsel before this Agreement is relied upon by customers.]

4. Your Account and Data

You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. You retain ownership of all data you submit to the Service. [DATA RETENTION / EXPORT / DELETION TERMS.]

5. Acceptable Use

You agree not to use the Service to violate any applicable law, infringe any third party's rights, or attempt to gain unauthorized access to any part of the Service or any other organization's data.

6. Fees and Subscription

[FEES, BILLING CYCLE, AND REFUND TERMS.]

7. Confidentiality

FirmTrack will not access, use, or disclose data you submit to the Service except as necessary to provide the Service, comply with law, or as you otherwise direct. [ADDITIONAL CONFIDENTIALITY TERMS.]

8. Disclaimer of Warranties

Except as expressly stated in Section 3 (Security Guaranty), the Service is provided "as is" without warranties of any kind, whether express or implied. [JURISDICTION-SPECIFIC WARRANTY DISCLAIMER LANGUAGE.]

9. Limitation of Liability

[LIABILITY CAP AND EXCLUSIONS -- TO BE SET BY FIRMTRACK WITH COUNSEL.]

10. Termination

Either party may terminate this Agreement as described at [TERMINATION TERMS AND NOTICE PERIOD].

11. Changes to this Agreement

We may update this Agreement from time to time. [NOTICE PERIOD AND METHOD FOR MATERIAL CHANGES.]

12. Governing Law

This Agreement is governed by the laws of [GOVERNING LAW JURISDICTION].

13. Contact

Questions about this Agreement can be sent to [CONTACT EMAIL].