Compliance Services Addendum
This Addendum governs your use of the Compliance Services, as defined below. Use of the Compliance Services is subject to all terms and conditions of this Compliance Services Addendum, the Agreement and your Order Form. Capitalized terms not otherwise defined herein have the meaning assigned to them under the Agreement.
1. Compliance Services.
As specified in your Order Form, ModernRails shall provide you with one or more of the following Compliance Services:
1.1
Linking Users Bank Accounts. ModernRails shall provide Customer with Open Banking API, if selected as a Purchased Service, for Users to verify their accounts at third-party financial institutions (collectively, the “Account Authentication Services”). Such services shall only be used to authenticate a User’s account at a financial institution. ModernRails may also provide Customer with the ability to access and refresh the raw and analyzed transaction data, and other account data associated with the User account authenticated with account logins for certain financial institutions noted in the API Documentation (collectively, the “Account Aggregation Services”). Customer understands and acknowledges that such services do not guarantee that an account at a financial institution can be verified or that the data returned from such account will be accurate or complete, or such authentication will otherwise prevent User fraud. In the event Customer utilizes the Account Aggregation Services, Customer shall not independently screen scrape User Personal Data from financial institutions unless such financial institutions have expressly permitted Customer to screen scrape. Customer understands that there will be additional disclosures that shall be provided to Users, as instructed by ModernRails, and that in order to provide the Account Authentication or Aggregation Services to Users, User Consent of such disclosures is required.
1.2
Know Your Client Data. ModernRails may provide Customer with the ability of accessing and refreshing (i) a User’s complete identity and compliance file, including but not limited to, the Personal Information and government- issued identification numbers provided by the User; (ii) identity validation information generated by ModernRails on the User from such identity and compliance file; and (iii) the results of the sanctions screening for the User.
2. Sanctions Data.
ModernRails shall provide Customer with access to Customer Client Sanctions Data information in conformity with the Bank Secrecy Act (“BSA”), anti-money laundering (“AML”) and anti-terrorist financing provisions, and the checks required by the Office of Foreign Assets Control (“OFAC”), to be used in connection with Customer’s and its User’s use of Purchased Services. Sanctions Data do not guarantee Customer against User fraud or completeness of the Sanctions Data. The Sanctions Data Services are intended to address certain BSA, AML and OFAC risks that may arise in connection with Customer's and Users’ use of the Purchased Services, which shall assist Customer in verifying a User’s identity, performing sanction screenings, and complying with applicable AML laws. Customer is liable for the users that Customer onboards with ModernRails. ModernRails shall provide Customer with compliance monitoring and risk mitigation tools, which may flag a User or a User’s transaction requests for risk factors related to the Sanctions Data services, and ModernRails and Customer shall monitor and conduct independent risk analysis in connection with the use of services and Customer’s Users.
2.1
Customer understands and acknowledges that ModernRails may refuse to provide Services to Customer or any of Customer Client Users or customers that have not been screened and authenticated using the Sanctions Data. Customer shall have in place compliance and risk monitoring policies to screen and monitor Users and Users’ activities.
2.2
Customer understands and acknowledges that User transaction requests may be delayed for additional review and/or may be canceled by ModernRails as a result of the Sanctions Data.
2.3
Customer also understands that ModernRails may block or lock Users as a result of the Sanctions Data and other information that ModernRails may obtain regarding those Users, including related to such Users use of other Services. Customer may also request ModernRails to review Users to verify for potential risk or unusual activity.
3. Fraud Mitigation.
In connection with certain Purchased Services, ModernRails will, from time to time, provide Customer with guidelines intended to assist Customer with identifying and mitigating User fraud (“Fraud Mitigation Guidelines”). Customer shall at all times comply with the Fraud Mitigation Guidelines, which may be provided to Customer by several methods, including, but not limited to, electronic mail and phone calls.
3.1
Customer understands and acknowledges that ModernRails does not guarantee against identifying, reducing or eliminating User fraud.
3.2
Customer understands and acknowledges that ModernRails may refuse to provide or suspend certain Services to Customer or Users if ModernRails determines in its sole discretion that Customer is not complying with the Fraud Mitigation Guidelines, or addressing the changes as recommended to be made by ModernRails.
4. Chatbot Service.
ModernRails may provide Customer with an interactive online chatbot (“Chatbot Service”), which provides access to or support in connection with certain Purchased Services as informed by ModernRails from time-to-time. Customer shall enable Users to use the chatbot by hosting the chatbot on Customer’s Application.
4.1
During Customer or a User’s use of the chatbot, Customer or a User may interact with a non-human (“Bot”).
4.2
Customer understands and agrees that in accordance with the Purchased Services offered in connection with the Chatbot Service, ModernRails may from time to time provide Customer with disclosures, which Customer shall provide to Users within the timeframe delineated by ModernRails. Customer further understands and agrees that ModernRails is under no obligation to share communications received via the Chatbot Service with Customer.
4.3
Customer shall not solicit nor otherwise encourage Users under the age of thirteen (13) to use the Chat Service.
5. Use of Compliance Services.
Customer understands that the Compliance Services are not guaranteed to comply with all laws and regulations applicable to Customer Application and services that are not being provided by ModernRails.
5.1
Customer shall comply with all requirements of all applicable state and federal laws, rules, regulations, and orders or requests of any governmental authority, including, but not limited to, applicable state and/or federal registrations related to its services and Application, which shall require additional risk mitigation and compliance checks and reports to appropriate authorities other than the ones provided herein, which shall be provided exclusively by Customer.
5.2
Customer acknowledges that it is responsible for ensuring its own compliance with all applicable laws as it relates to Customer’s use of the services provided in this Addendum and its provision of such service to its Users. Customer similarly acknowledges that it is responsible for any User’s failure to comply with applicable law and regulation in connection with the services provided in this Addendum. Customer shall indemnify and hold ModernRails harmless from and against all liability of any kind of nature whatsoever, losses, or third-party claims arising from or related to (i) Customer’s violation of its obligations, representations or warranties as provided in this Addendum, (ii) information or data submitted (or not submitted) to ModernRails by Customer or by or on behalf of a User (including but not limited to incorrect, illegal, improper records, instructions or data, or Customer’s technical errors), or (iii) User’s misuse of services or violation of applicable laws and regulation, including in relationship to transactions that do not originate from Customer’s services as provided herein. This limitation of liability and indemnification provision is in addition to those found in the Agreement.
6. Relationship to Agreement.
All terms and conditions of the Agreement shall remain in full force and effect. In the event of any conflict between this Addendum and the terms and conditions of the Agreement, the terms and conditions of this Addendum shall prevail as related to the subject matter hereunder.