Vendor Agreement

VENDOR / OFFSHORE PROCESSING AGREEMENT

Last Updated: April 2, 2026

This Agreement is between Zero 1 Solution LLC ("Company") and the Vendor ("Processor").

For Pakistan / Philippines / third-party processors

1

Scope

Vendor provides processing, support, or operational services for mortgage files using 1smtg.com.

2

Data Security (CRITICAL)

Vendor agrees:

All work must be performed داخل 1smtg.com system only

No documents may be:

Downloaded

Stored locally

Saved on personal devices

No use of external storage or unauthorized systems

3

Confidentiality

Vendor agrees:

All borrower and company data is confidential

Data may not be shared, copied, or reused

Obligation continues after termination

4

System Usage Requirement

All loan activity must remain داخل 1smtg.com

No parallel tracking systems allowed

No external communication without approval

5

Compliance Responsibility

Vendor must comply with:

U.S. mortgage privacy standards

Data protection expectations (SOC2-level practices)

6

No Data Ownership

Vendor has:

No ownership of any data

No rights to reuse or retain information

7

Liability & Indemnification

Vendor agrees:

Any breach, data leak, or misuse is Vendor's responsibility

Vendor will indemnify Company against all damages, claims, or penalties

8

Access Control

Access is limited and monitored

Company may revoke access at any time

9

Termination

Immediate termination allowed for:

Security concerns

Policy violations

Misuse of data

10

Governing Law

This Agreement is governed by the laws of the State of Texas.

Jurisdiction: Fort Bend County, Texas.

11

ACCEPTABLE USE POLICY (AUP)

Vendor agrees to comply with the Company's Acceptable Use Policy (AUP).