Mutual non-disclosure agreement
v0.1-draft · effective 2026-06-12 · accepted by click-through in the Commitment Review upload flow; acceptance is timestamped and a copy is emailed to the signer.
1. Parties
This Mutual Non-Disclosure Agreement (the “Agreement”) is entered into between Generation AI LLC, a Florida limited liability company operating the soc2doc.ai service (“soc2doc”), and the individual accepting this Agreement on behalf of the organization identified in the upload form (the “Company”). Each party may disclose (“Discloser”) or receive (“Recipient”) Confidential Information under this Agreement.
2. Confidential Information
“Confidential Information” means non-public information disclosed by one party to the other, including, for the Company, the uploaded SOC 2 report and all of its contents — system descriptions, control activities, auditor findings, subservice organizations, and personnel information — and, for soc2doc, the contents and methodology of the Commitment Review delivered to the Company.
3. Permitted use
Recipient will use Confidential Information solely to prepare, deliver, and discuss the Commitment Review and any follow-on services the Company requests. soc2doc's use includes analysis by automated systems and review by vetted assessors under written confidentiality obligations no less protective than this Agreement, as separately authorized by the Company's consent in the upload flow.
4. Protection
Recipient will protect Confidential Information with at least the degree of care it uses for its own confidential information, and no less than reasonable care. soc2doc encrypts uploaded reports in transit and at rest and restricts access to personnel working the Company's review.
5. Exclusions
Confidential Information does not include information that is or becomes public through no fault of Recipient, was known to Recipient without restriction before disclosure, is independently developed without use of Confidential Information, or is rightfully received from a third party without duty of confidentiality.
6. Compelled disclosure
Recipient may disclose Confidential Information to the extent required by law, provided Recipient gives Discloser prompt notice (where legally permitted) and reasonable assistance to contest or limit the disclosure.
7. Term and return
This Agreement applies to Confidential Information disclosed within one year of acceptance, and obligations survive for three years from each disclosure. Upon the Company's written request, soc2doc will delete the uploaded report and derived confidential materials, subject to any retention the Company has separately authorized and to records soc2doc must keep by law (including the consent record itself).
8. No license; no obligation
No license or other rights are granted under this Agreement except the limited use rights above. Neither party is obligated to disclose information or enter any further agreement. The free Commitment Review is provided for informational purposes and is not an audit, attestation, legal advice, or gap analysis.
9. General
This Agreement is governed by the laws of the State of Florida, without regard to conflicts of law. It is the parties' entire agreement on confidentiality for the Commitment Review, and may be accepted electronically; click-through acceptance, with the timestamp and network address logged at acceptance, constitutes a binding signature by a person authorized to act for the Company.