Service Level Agreement (SLA)

Last updated: 28 August 2026

Cloud SaaS Availability and Technical Support Commitments

99.9% MONTHLY UPTIME COMMITMENTS

Service credits for eligible Cloud Service unavailability • Severity-based response and resolution targets • Separate treatment for customer-hosted deployments

‍

Document OwnerCymph OÜVersion1.3
Effective Date28.08.2026Review CycleAnnual
Applies ToCloud SaaS and supported On-Premises deploymentsGoverning AgreementMSA / Order Form

‍

Contract hierarchy

This Service Level Agreement ("SLA") forms part of the agreement governing Customer's use of the Services (the "Agreement"). If an Order Form specifies different service levels, the Order Form will prevail solely for the conflicting service level.

‍

SLA at a Glance

‍

Cloud availability commitment99.9% Monthly Uptime Percentage
Availability credit tiers10% / 25% / 50% of the applicable monthly recurring Cloud Service fee
Critical (P1) response4 hours; 24x7 only for a Confirmed Cloud Service Outage
Critical (P1) resolution target1 Business Day to restore or provide an effective workaround
Scheduled maintenance noticeAt least 72 hours in advance where reasonably practicable
On-Premises availabilityNo Supplier uptime commitment; support service levels apply to supported deployments

‍

‍

1. Purpose and Applicability

This SLA defines the service availability commitment, service credit mechanism, technical support response targets and related conditions applicable to the Services provided by Cymph OÜ ("Supplier") to the customer identified in the applicable Order Form ("Customer").

The availability commitment in Sections 4 through 9 applies only to production instances of the Supplier-hosted cloud service (the "Cloud Service"). Customer-hosted or On-Premises deployments are governed by Section 15 and are not subject to a Supplier uptime commitment unless expressly stated in an Order Form.

‍

2. Scope

This SLA applies to paid production subscriptions that expressly include SLA coverage. Unless an Order Form states otherwise, the following are outside the scope of the availability commitment:

  • trial, proof-of-concept, sandbox, development, demonstration or beta environments;
  • non-production features, preview capabilities and experimental functionality;
  • third-party products, integrations, identity providers or connectivity not operated and controlled by Supplier; and
  • professional services, implementation services, consulting services and training.

‍

3. Definitions

Available. The Cloud Service is capable of receiving and processing valid user requests for its Core Services and is not experiencing Downtime.

Business Day. Monday through Friday, excluding public holidays observed by Supplier in the support region specified in the applicable Order Form.

Business Hours. 09:00 to 18:00 on a Business Day in the support time zone specified in the applicable Order Form. If no time zone is specified, Supplier's principal support location will apply.

Confirmed Cloud Service Outage. A production availability event affecting the Supplier-hosted Cloud Service that Supplier has validated, through production monitoring or other reasonable technical verification, as making the Core Services unavailable to substantially all users of the affected Customer tenant.

Core Services. The production web application and Supplier-operated application services required for authenticated users to access and use the principal licensed functionality. Third-party integrations and optional add-ons are excluded unless expressly identified as Core Services in the Order Form.

Downtime. A period during which the affected production Cloud Service is unavailable for normal use by substantially all users of the affected Customer tenant due to a failure within Supplier's control, excluding the circumstances listed in Section 14.

Monthly Uptime Percentage. The percentage of eligible minutes during a calendar month in which the Cloud Service was Available, calculated under Section 5.

Service Credit. A credit calculated under Section 8 and applied against future amounts payable for the affected Cloud Service.

Support Request. A technical support case submitted through an approved support channel and containing sufficient information for Supplier to begin investigation.

‍

4. Cloud Service Availability Commitment

Supplier will use commercially reasonable efforts to make the Cloud Service Available with a Monthly Uptime Percentage of at least 99.9% during each calendar month (the "Availability Commitment").

Operational interpretation

A 99.9% monthly commitment allows approximately 43 minutes and 50 seconds of counted Downtime in a 30-day month before service credits become eligible. The contractual calculation is governed by Section 5 and the exclusions in Section 14.

‍

5. Availability Measurement and Calculation

Supplier will calculate Monthly Uptime Percentage for each affected production tenant using Supplier's production monitoring and incident records, taking into account credible Customer evidence where reasonably necessary to validate an incident.

Monthly Uptime Percentage will be calculated as follows:

Monthly Uptime Percentage

(Eligible Minutes - Downtime Minutes) / Eligible Minutes x 100

"Eligible Minutes" means the total minutes in the applicable calendar month less minutes excluded under this SLA. Downtime will be measured in whole minutes and aggregated across qualifying incidents in the month.

A degradation that does not make the Core Services unavailable to substantially all users of the affected tenant will not constitute Downtime, but may qualify for technical support under Sections 10 through 13.

‍

6. Scheduled and Emergency Maintenance

6.1 Scheduled Maintenance

Supplier may perform planned maintenance to deploy upgrades, security patches, infrastructure changes or other improvements. Supplier will use reasonable efforts to provide at least 72 hours' prior notice and to schedule maintenance outside normal business hours for the majority of affected Customers. Scheduled Maintenance that satisfies these notice requirements is excluded from the availability calculation.

Supplier will use reasonable efforts to keep planned maintenance to no more than four hours in any calendar month. This is an operational objective and does not create a separate service credit entitlement.

6.2 Emergency Maintenance

Supplier may perform emergency maintenance without the standard notice period where reasonably necessary to address a material security risk, data integrity risk, regulatory requirement or imminent threat to service stability. Supplier will notify affected Customers as soon as reasonably practicable. Emergency maintenance is excluded from the availability calculation only to the extent reasonably necessary to address the relevant risk.

‍

7. Incident Communication for Cloud Availability Events

For a Confirmed Cloud Service Outage classified as P1, Supplier will use reasonable efforts to provide status updates at least every 4 hours until service is restored or an effective workaround is available. For other P1 incidents, status updates will be provided as material progress occurs during the applicable support coverage window. Supplier may provide updates through the support portal, email, a public or customer-specific status page, or another designated incident communication channel.

For material incidents, Supplier will provide a post-incident summary or root cause analysis upon reasonable Customer request where appropriate, subject to security, confidentiality and legal restrictions.

‍

8. Service Credits

If Supplier fails to meet the Availability Commitment for an eligible production Cloud Service in a calendar month, Customer may request the following Service Credit:

Monthly Uptime Percentage / Illustrative DowntimeService Credit
Less than 99.9% but at least 99.0%

More than 43.2 minutes and up to 432 minutes (7 hours 12 minutes) of downtime in a 30-day month

10%
Less than 99.0% but at least 95.0%

More than 432 minutes (7 hours 12 minutes) and up to 2,160 minutes (36 hours) of downtime in a 30-day month

25%
Less than 95.0%

More than 2,160 minutes (36 hours) of downtime in a 30-day month

50%

‍

For reference, 99.9% uptime corresponds to approximately 43.2 minutes of downtime in a 30-day month; at or above 99.9%, no Service Credit applies. All downtime equivalents are illustrative and assume a 30-day calendar month (43,200 minutes). Actual Service Credit eligibility is calculated from the actual Eligible Minutes in the applicable calendar month, so the equivalent downtime varies for 28-, 29- and 31-day months.

Service Credits are calculated against the monthly recurring subscription fee attributable to the affected Cloud Service for the month in which the failure occurred, excluding taxes, pass-through charges, professional services, usage-based third-party charges and one-time fees. For annual subscriptions, the applicable monthly fee will be one-twelfth of the annual recurring subscription fee unless the Order Form provides a different allocation.

The aggregate Service Credit for a Cloud Service in any calendar month will not exceed 50% of the applicable monthly recurring subscription fee for that Cloud Service.

Service Credits will be applied to a future invoice or renewal and have no cash value except where required by applicable law or expressly agreed in writing. Service Credits are Customer's sole and exclusive financial remedy for Supplier's failure to meet the Availability Commitment, unless the Agreement expressly provides otherwise.

‍

9. Service Credit Claim Process

Service Credits are not applied automatically. To receive a Service Credit, Customer must submit a claim within 30 calendar days after the end of the calendar month in which the alleged Availability Commitment failure occurred.

The claim must include, to the extent reasonably available:

  • Customer account or tenant identifier and the affected production environment;
  • date, start time and end time of each alleged incident;
  • a short description of the observed impact;
  • the related Support Request or incident reference, if one was opened; and
  • reasonable logs, screenshots or monitoring evidence requested by Supplier, with sensitive information removed where appropriate.

Supplier will validate the claim using its monitoring and incident records together with the information provided by Customer. Approved Service Credits will normally be applied to the next eligible invoice. Failure to submit a timely and sufficiently supported claim may result in loss of eligibility for the credit.

‍

10. Technical Support Coverage

Supplier provides technical support for the Cloud Service and supported On-Premises software in accordance with this SLA and the applicable Support Policy or Order Form. This section establishes baseline response and resolution targets; the Order Form may provide enhanced support entitlements.

24x7 coverage applies only to a Confirmed Cloud Service Outage classified as P1 and affecting the Supplier-hosted production Cloud Service. All other P1 Support Requests, including P1 incidents affecting On-Premises deployments, are handled during Business Hours unless the applicable Order Form expressly includes enhanced 24x7 support. P2, P3 and P4 Support Requests are handled during Business Hours unless the applicable Order Form expressly provides otherwise.

‍

11. Severity Classification

‍

SeverityBusiness ImpactTypical CriteriaExamples
P1 - CriticalCritical production impactProduction service unavailable or a critical security/operational function is unusable, with no reasonable workaround and broad business impact.Cloud Service unavailable; production login failure for substantially all users; material data processing failure blocking critical operations.
P2 - HighSignificant production impactMajor functionality is materially impaired, but the service remains partially usable or a limited workaround exists.Major module unavailable; sustained severe performance degradation; critical integration failure affecting a key process.
P3 - MediumModerate or limited impactA function is impaired for a subset of users or use cases, and a reasonable workaround is available.Intermittent errors; non-critical feature malfunction; isolated performance issue.
P4 - LowMinimal business impactGeneral question, cosmetic defect, documentation issue or low-impact functional problem.UI defect; configuration guidance; documentation clarification; enhancement request.

‍

‍

12. Response and Resolution Targets

Supplier will use commercially reasonable efforts to meet the Initial Response Time and Target Resolution Time below. Initial Response Time is measured from receipt of a valid Support Request through an approved support channel during the applicable coverage window.

‍

SeverityCoverageInitial ResponseTarget ResolutionStatus Update Target
P1 - Critical24x7 for Confirmed Cloud Service Outage; otherwise Business Hours4 hours1 Business DayEvery 4 hours for Confirmed Cloud Service Outage; otherwise as material progress occurs
P2 - HighBusiness Hours8 Business Hours2 Business DaysAt least once each Business Day while unresolved
P3 - MediumBusiness Hours1 Business Day5 Business DaysAs material progress occurs
P4 - LowBusiness Hours2 Business Days10 Business Days*As appropriate

‍

*For P4 issues, "Target Resolution" may consist of an answer, configuration guidance, documentation correction, confirmation that the behavior is by design, or a disposition into a future product release or roadmap. It does not guarantee delivery of an enhancement within 10 Business Days.

Resolution target, not guaranteed fix

Target Resolution Time is an operational objective, not a guaranteed time for a permanent code correction. A resolution may include service restoration, a commercially reasonable workaround, configuration change, patch, hotfix, upgrade recommendation or other action that materially restores the affected function. Permanent fixes may follow in a later maintenance release.

‍

13. Support Clock, Customer Cooperation and Escalation

13.1 Support Clock

The support clock begins when Supplier receives a Support Request containing sufficient information to begin investigation. For a Confirmed Cloud Service Outage classified as P1, the support clock runs continuously on a 24x7 basis. For all other Support Requests, including non-outage P1 incidents and On-Premises P1 incidents, time outside Business Hours does not count unless the applicable Order Form expressly provides 24x7 coverage for the relevant severity.

The resolution clock may be paused while Supplier is waiting for information, access, logs, reproduction steps, approvals, maintenance windows or other reasonable cooperation from Customer, or while resolution is materially dependent on a third party outside Supplier's reasonable control. Supplier will communicate when the clock is paused and what is required to resume work.

13.2 Severity Reclassification

Supplier may reasonably reclassify a Support Request where the reported severity does not match the actual business impact or where impact materially changes. Supplier will inform Customer of any reclassification and the reason for it.

13.3 Escalation

Customer may request escalation of a P1 or P2 Support Request through the designated support channel if business impact increases, progress is insufficient, or executive attention is reasonably required. Supplier will route escalated cases to an appropriate support or engineering lead.

‍

14. SLA Exclusions

The Availability Commitment, response targets and resolution targets do not apply to the extent an incident or delay results from any of the following:

  • events or circumstances outside Supplier's reasonable control, including force majeure events and failures of the public Internet outside Supplier's service boundary;
  • Customer systems, networks, endpoints, firewalls, proxies, DNS, identity providers, certificates, hardware, software, storage, databases or other technology not operated by Supplier;
  • Customer configuration, customisation, scripts, integrations, misuse, unauthorised changes, failure to follow documentation, or use outside supported specifications;
  • third-party products or services not under Supplier's operational control, including cloud, telecommunications, identity, messaging or integration providers, except to the extent the Agreement expressly makes Supplier responsible for that dependency;
  • Scheduled Maintenance or qualifying Emergency Maintenance under Section 6;
  • suspension or restriction of Services permitted under the Agreement, including for security, legal or non-payment reasons;
  • beta, preview, trial, sandbox, demonstration or non-production functionality;
  • Customer's failure to maintain a supported software version, supported deployment architecture or required system prerequisites; or
  • security attacks or malicious activity that could not reasonably have been prevented through Supplier's commercially reasonable security controls, provided Supplier acts promptly to mitigate the impact.

Where an excluded factor contributes to an incident together with a Supplier-controlled failure, Supplier will make a reasonable determination of the portion, if any, that qualifies for SLA treatment.

‍

15. On-Premises / Customer-Hosted Deployments

For software deployed in Customer's own data center, private cloud, virtual environment, Kubernetes cluster or other Customer-controlled environment ("On-Premises"), Supplier does not provide an uptime or availability commitment unless an Order Form expressly states otherwise. Customer controls the infrastructure and operating environment required to run the software and therefore remains responsible for the availability, redundancy, backup, capacity, connectivity and operational resilience of that environment.

15.1 Supplier Commitments for Supported On-Premises Deployments

Subject to an active support entitlement, Supplier will provide technical support for supported On-Premises deployments using the severity, applicable coverage windows, Initial Response Time and Target Resolution Time in Sections 10 through 12, provided that:

  • the issue is reproducible in, or reasonably attributable to, Supplier software running on a supported version and supported architecture;
  • Customer maintains the required operating system, database, container platform, network and infrastructure prerequisites specified in Supplier documentation;
  • Customer provides reasonable diagnostic information, logs, configuration details and remote troubleshooting access where required and permitted by Customer policy; and
  • Customer applies critical security updates, maintenance releases and supported upgrade paths within reasonable timeframes communicated by Supplier.

15.2 On-Premises Responsibility Boundary

Incidents caused by Customer infrastructure, third-party components, unsupported modifications, capacity constraints, database administration, network configuration, certificates, identity services, backup systems, high availability design or disaster recovery processes remain Customer's responsibility. Supplier may assist with diagnosis, but such assistance does not convert those components into Supplier-managed services or create an uptime commitment.

15.3 On-Premises Service Credits

Service Credits under Section 8 do not apply to On-Premises availability. If the parties wish to attach financial remedies to missed technical support response commitments for On-Premises deployments, those remedies must be expressly set out in the applicable Order Form.

‍

16. Customer Responsibilities

To receive the benefit of this SLA, Customer must:

  • use the Services in accordance with the Agreement and Supplier documentation;
  • maintain accurate support contacts and escalation contacts;
  • submit Support Requests through approved channels and provide a clear description of business impact;
  • provide timely access, information, logs and reproduction steps reasonably required for investigation;
  • maintain supported software versions and configurations; and
  • take reasonable steps to mitigate the impact of an incident, including implementing temporary workarounds where appropriate.

‍

17. Changes to this SLA

Supplier may update this SLA from time to time in accordance with the change provisions of the Agreement. No change will materially reduce an active Customer's contracted service levels during the then-current subscription term unless required by law, agreed in writing, or accompanied by a commercially reasonable alternative.

‍

18. Contact and Claims

‍

Support Email
P1 / Emergency Channelphone: +30-6987877564

support@cymph.io

SLA Credit Claims

support@cymph.io

Status Pagehttps://<your_instance>/status

‍

Appendix A - Availability Examples

The examples below are illustrative only. Actual eligibility depends on the definitions, exclusions and claim requirements in this SLA.

‍

ScenarioCalculated UptimeCredit TierIllustrative Result
30-day month; 30 minutes qualifying Downtime99.9306%No creditAvailability Commitment met
30-day month; 60 minutes qualifying Downtime99.8611%10%10% of applicable monthly recurring Cloud Service fee
30-day month; 8 hours qualifying Downtime98.8889%25%25% of applicable monthly recurring Cloud Service fee
30-day month; 36 hours qualifying Downtime95.0000%25%At exactly 95.0%, 25%; below 95.0%, 50%

‍

Appendix B - Support Severity Decision Guide‍

‍

QuestionIf YesLikely Severity
Is the production service broadly unavailable with no workaround?Treat as critical production impact.P1
Is a major production function materially impaired, with significant impact?High-impact incident with partial service or limited workaround.P2
Is impact limited, intermittent or mitigated by a reasonable workaround?Normal operational support case.P3
Is this a low-impact defect, question, documentation issue or enhancement?Low-impact support/request case.P4
Key commercial principal

Availability credits apply to Supplier-hosted Cloud Service availability only. Technical support response and resolution targets apply to both Cloud and supported On-Premises deployments, but do not create service-credit rights unless an Order Form expressly provides them.