Master Service Agreement

REGULATORY JURISDICTION: WYOMING, USA | SECURE DISPATCH CONTRACT V4.0

This Master Service Agreement ("MSA") governs the architectural provision and operational deployment of the AnchorMaze Sovereign Execution Gateway (the "Platform"). By provisioning an automated identity node, executing code patterns via AnchorMaze Query Language (AQL), or utilizing our execution sandboxes, you explicitly agree to the zero-trust provisions outlined herein.

1. Zero-Trust Functional Scope & Determinism

AnchorMaze acts as a purely deterministic validation layer. The Platform evaluates browser states, input field readiness, and operational environments strictly as requested by Client-authored instructions. Because execution is 100% deterministic, AnchorMaze explicitly disclaims any liability for system mutations, database drifts, or access drops resulting from executing valid commands submitted by authorized Client accounts.

2. Compute Metering & Sovereign Ledger Isolation

System runtime is accounted for in Compute Minutes, synchronized with our PostgreSQL multi-tenant backend infrastructure. All payment pipelines are managed dynamically via cryptographically signed tokens integrated with Stripe. Compute records are immutable and bound strictly to the specific project cryptographic identity namespace.

3. Intellectual Property Boundaries

AnchorMaze retains all global proprietary title, trade secrets, and patents pending related to the core execution engine, the browser self-healing layer, and headless telemetry structures. The Client retains complete ownership of individual instruction decks, target environment access patterns, and uncompiled operational intent models.

4. Limitation of Liability Shield

IN NO EVENT SHALL ANCHORMAZE LLC BE LIABLE FOR ANY INDIRECT, CONSEQUENTIAL, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING COGNITIVE ARCHITECTURAL COLLAPSE, DATABASE LOSS, OR OPERATIONAL TIMEOUTS. ANCHORMAZE’S MAXIMAL LIABILITY IS AGGRESSIVELY CAPPED AT THE EXACT SUM PAID BY THE CLIENT IN THE TWELVE (12) MONTHS PRECEDING THE SYSTEM DISRUPT LOG.

Data Processing Agreement (DPA)

SOC-2 TYPE II STANDARD | GDPR & CCPA PRIVACY MATRIX

This Data Processing Agreement establishes the strict privacy controls applied when the Platform acts as a Data Processor on behalf of the Client (the Data Controller).

1. SOC-2 Ephemeral Memory Protocol

To enforce absolute compliance with SOC-2 Type II standards, AnchorMaze incorporates an Ephemeral Memory architecture. Any sensitive data inputs, enterprise authorization variables, or form credentials injected into target DOM fields are strictly bounded to volatile active execution memory. The precise millisecond the automation task terminates, all session variables are forcefully scrubbed from active backend loops. Zero target environment PII is persisted within internal datastores.

2. Verified US Data Sovereignty Residency

AnchorMaze guarantees 100% geographic boundary containment for US-based enterprise clients. All orchestration nodes, active headless validation contexts, PostgreSQL relational records, and cryptographically sealed PDF ledgers are routed and stored exclusively within secure, military-grade availability zones inside the continental United States (AWS US-East regional infrastructure). Data is never routed or cached outside US boundaries.

3. Infrastructure Sub-Processors

The Client grants permission for the following compliant components to handle platform routing: Amazon Web Services (AWS) for immutable object vaulting and Stripe, Inc. for payment token processing. Sub-processors must maintain independent SOC-2 Type II attestation frameworks.

Privacy Shield Policy

COMPLIANCE MATRICES: California Consumer Privacy Act (CCPA) / GDPR

AnchorMaze operates under an iron-clad data minimization protocol. We do not monitor user behaviors, sell digital identities, or deploy telemetry loops for tracking or profiling purposes.

1. Fragmented Footprint Telemetry

We log profile registration emails and multi-factor authentication metadata strictly to grant system authorization tokens. Execution logs measure only metric duration, step status outcomes, and cryptographic audit signatures to maintain billing verification ledger entries.

2. True "Right to Be Forgotten" Eradication

Under CCPA and GDPR rules, clients maintain absolute ownership of their historical traces. When an authorized administrator invokes an environment purge protocol, our system initializes a multi-tier wipe: the specified node records are instantly expunged from the PostgreSQL layer, and all associated ledger files are structurally incinerated across cloud object datastores.

Compute Allocation Policy

ENTERPRISE SYSTEM AVAILABILITY & DISPATCH METRICS

This Compute Allocation Policy defines the operational constraints, resource metering, and core availability baselines of the platform architecture.

1. System Core Availability Guarantee

AnchorMaze guarantees a monthly runtime uptime baseline of 99.9% for the active Citadel API architecture and validation nodes. Uptime calculation excludes globally scheduled system maintenance windows announced via the primary broadcast manager at least 48 hours in advance.

2. Support Matrix Response Windows

For certified enterprise pilot nodes, support request ticket boundaries are strictly categorized by impact:
• Severity 1 (Core Gate Blocked): Response time guaranteed within 1 hour.
• Severity 2 (General Telemetry Discrepancy): Response time guaranteed within 12 hours.