Security Awareness Training Agreement

1Parties and summary

This Security Awareness Training Agreement (the "Agreement") is made on ____________ (the "Effective Date") between Trust AI Online, a Florida company headquartered at 715 Pinellas St, Suite 5, Clearwater, FL 33756, serving clients in all 50 states, phone (833) 365-7047 (the "Provider"), and ______________________ (the "Client").

Security Awareness Training (SAT) teaches the Client's employees to recognize and report cyber threats through short lessons and safe practice phishing emails.

2Services

The Provider will deliver the following for the Client:

1. Practice phishing emails. Safe, realistic test emails sent at least monthly. Clicking a test link opens a short lesson, never anything harmful.
2. Training lessons. Short online lessons, 5 to 10 minutes each, on phishing, passwords, safe browsing and reporting.
3. Report button guidance. Help setting up an easy way for staff to report suspicious email.
4. Progress reports. Monthly reports of click rates, report rates and lesson completion, by team.
5. New-hire training. New employees are enrolled within 5 business days of being added.

3Client responsibilities

• Approve the practice emails through Microsoft 365 or Google Workspace so they reach inboxes.
• Give employees time to finish lessons.
• Share the employee list and keep it current.
• Use results to coach, in line with the Client's own HR policies.

4Fees, billing and term

Billing. Invoices are due within 15 days. Monthly plans are billed in advance. After 30 days past due, service may be paused with 10 days' written notice.

Term. The first term is 12 months, then renews month to month. After the first term, either party may cancel with 30 days' written notice.

Price changes. 30 days' written notice before any price change.

5Data, privacy and confidentiality

Only employee names, work emails and training results are kept. Results are shared only with the Client's named contact.

Client data is used only to provide this service and is never sold. It is stored on access-restricted U.S. servers and sent over encrypted connections. Each party keeps the other's business information private during this Agreement and for 2 years after it ends.

6Limits of service and liability

Training greatly lowers the chance an employee falls for a scam. It cannot guarantee every employee will spot every attack.

Each party's total liability is limited to the fees paid in the 3 months before a claim. Neither party is liable for lost profits or indirect damages.

7General terms

Nationwide service. The Provider serves clients in all 50 states and Washington, D.C. Services may be delivered remotely or on site, by the Provider's team or by qualified, vetted partners bound by the same confidentiality terms.

Governing law. This Agreement is governed by the laws of the State of Florida, where the Provider is incorporated, without regard to conflict-of-law rules. Any dispute will be resolved in the state or federal courts of Florida, unless both parties agree in writing to another venue or to binding arbitration. Where the law of the Client's state requires otherwise, that law applies to the extent required.

Whole agreement. This Agreement and Schedule A are the full agreement; changes must be in writing and signed by both parties. If any part is found unenforceable, the rest stays in effect.

Assignment. Neither party may transfer this Agreement without the other's written consent, except to a successor of its business.

Independent parties. The Provider acts as an independent contractor.

Schedule A: Service details

Signatures

More sample contracts

• Malware Removal
• Managed EDR
• InboxTrustGuard