Office Timeline Licensing, Policies and Statements

Office Timeline Add-in - Free Edition

Office Timeline Add-in Free is a basic timeline maker plugin for PowerPoint. Licenses are perpetually granted to any employee, individual or company who downloads and installs the software. It can be used for personal or business purposes. The Free Edition of the Office Timeline Add-in can be deployed centrally by any company or organization, and users can download the latest version at any time without charge. The license may be transferred and redistributed without restriction.

Office Timeline Online - Free Edition

Office Timeline Online Free is a limited online timeline maker. Licenses are granted to any employee, individual or company who registers for a Free account. The tool can be used without restriction for any personal or business purposes. Office Timeline Online Free accounts must be accessed once every 90 days to remain active. Any user data created with an Office Timeline Online Free account will be deleted if the account remains idle for more than 90 days.

Office Timeline Add-in – Pro Edition

Office Timeline Pro is a PowerPoint add-in that comes with all the functionalities available in Basic Edition and unlocks additional features that may be required by project professionals. Each individual who uses the Pro Edition needs their own license, and a license can be deployed on two of the user's devices. To get access to the Pro features, users can either purchase a Pro Edition license directly or upgrade from their current Basic license by paying the price difference.

Pro Edition licenses are available to enterprises and project professionals in any quantity, as annual subscriptions. The software reverts to Office Timeline Free Edition if the subscription is not renewed by expiration. After expiration, any work created with Office Timeline Pro Edition will be downgraded until the subscription is renewed.

Office Timeline Add-in - Pro+ Edition

Office Timeline Pro+ is a feature-rich add-in for PowerPoint that has all functionalities available in the Pro Edition and unlocks additional features useful – but not limited - to project, program, and portfolio managers. Each individual who uses the Pro+ Edition needs their own license, and a license can be deployed on two of the user's devices. To get access to the Pro+ features, users can either purchase a Pro+ license directly or upgrade from their current license plan by paying the price difference.

Pro+ Edition licenses are available to enterprises and project professionals in any quantity, as annual subscriptions. The software reverts to Free Edition if the subscription is not renewed by expiration. After expiration, any work created with Office Timeline Pro+ Edition will be downgraded until the subscription is renewed.

Office Timeline Add-in – Expert Edition

Office Timeline Expert is a powerful, full-featured PowerPoint add-in that has all functionalities available in the Pro+ Edition and unlocks additional features for project, program, and portfolio managers, as well as enterprise teams. Each individual who uses the Expert Edition needs their own license, and a license can be deployed on two of the user's devices. To get access to the Expert features, users can either purchase an Expert license directly or upgrade from their current license plan by paying the price difference.

Expert Edition licenses are available to enterprises and project professionals in any quantity as annual subscriptions. The software reverts to Free Edition if the subscription is not renewed by expiration. After expiration, any work created with Office Timeline Expert Edition will be downgraded until the subscription is renewed.

Office Timeline Online

Office Timeline Online is a feature-rich, collaborative online PowerPoint timeline creator. Office Timeline Online licenses are sold in any quantity as an annual subscription. Subscriptions grant each user an unrestricted license to access and use the application from multiple devices. Each user needs to have their own Office Timeline Online account, and accounts cannot be shared. Office Timeline Online licenses revert to Free Edition if the subscription is not renewed by expiration. After expiration, any work created with the paid version of Office Timeline Online will be downgraded until the subscription is renewed. If the subscription is not renewed and the user does not log in to their account within 90 days after expiration, all work saved in the account will be deleted.

***Legacy*** Office Timeline Add-in - Basic Edition

Office Timeline Add-in Basic Edition was a timeline maker add-in for PowerPoint. Each person who used Office Timeline Basic Edition needed their own license, and a license could only be deployed on one personal device. Legacy licenses (purchased before November 1, 2022) are limited to one user per subscription and are still accessible for as long as the subscription is not allowed to expire. After expiration, legacy Basic Edition subscriptions can no longer be renewed.

Can I transfer the Office Timeline Add-in to another user?

Pro, Pro+ and Expert licenses can be transferred. If a named user leaves the company, freeing up a license key, companies may transfer that license key to another named user within the organization. Basic licenses cannot be transferred.

Can I transfer Office Timeline Online to another user?

If an Office Timeline Online user leaves the organization, freeing up a license, the designated license manager may reassign it to a different member of the team.

How does licensing work for Office Timeline Add-in?

When you purchase the Pro, Pro+ or Expert Edition of the Office Timeline Add-in, you receive a unique Product Key. Your product keys are automatically set for the number of users you purchased them for. Download and install Office Timeline Free Edition from the Office Timeline website and use the Product key to activate the license you purchased. During this activation process, the software will automatically contact our Product Key Service, validate your license, and activate the premium features for the duration of your subscription period.

Users who already have a license activated can upgrade to Pro, Pro+ or Expert by clicking the Upgrade button from the Subscriptions page in their account and paying the price difference for the desired edition.

You will be notified prior to expiration when your license is nearing the end of its term. If the subscription is renewed prior to expiration, your Product Key will be extended for 1 year. If you choose not to renew the subscription, the premium features of Office Timeline will expire and the software will revert to Office Timeline Free Edition.

How does licensing work for Office Timeline Online?

When you purchase an Office Timeline Online subscription, you are provisioned with a user account that can access the premium features of the application. Simply log in to Office Timeline Online and begin using the service. If you purchase Office Timeline Online for multiple users, you will become a license manager or have the option to designate one at the time of purchase. The license administrators’ account will have the additional capability of assigning (and revoking) Office Timeline Online licenses to other users based on the number of licenses purchased. As the purchaser of the subscription, you can also revoke a designated license administrator and assign a new one.

All Office Timeline Online license owners will be notified in advance of upcoming expiration dates, and subscriptions must be renewed to avoid service disruption. If a subscription is not renewed, the premium features offered in Office Timeline Online will no longer be available and the application will revert to Free Edition.

Auto-renewal service

We offer uninterrupted access to the premium versions of Office Timeline Add-in and Online through an optional auto-renewal service which bills your account and renews your subscription. If auto-renewal is ON at the time your subscription expires, the auto-renew service will charge the annual subscription fee and your license will be extended for 1 year. Prior to automatically charging for any subscription renewal, you will receive three notifications requesting you to confirm your automatic renewal settings. You can change these settings at any time by logging in to your account.

Thank you for choosing Office Timeline. Please read these Terms of Service (“Terms”) carefully before accessing or using the website at www.officetimeline.com and all related websites, software, apps, and/or plug-ins (together the “Service”) made available by Office Timeline LLC (“Office Timeline” or “we,” “our,” or “us”).

These Terms and any order form or other agreement expressly incorporated into these Terms in writing and signed by both parties constitute the entire agreement (“Agreement”) between the party that downloads, installs, and/or uses Office Timeline (“Customer” or “you”) and Office Timeline regarding your use of the Service. You may authorize your employees (collectively, “Authorized Users”) to use the Service. You agree that you are fully responsible with respect to any use of the Service by an Authorized User, including any breach by an Authorized User of these Terms.

1. The Service

The Service is a project reporting solution that helps customers turn project data into timelines and other visuals for stakeholder engagement and management. The Service is provided electronically through user interfaces on third-party platforms, for example through an add-in or add-on functionality, and through interfaces hosted by Office Timeline.

Any software that is made available to download from the Service is the copyrighted work of Office Timeline and/or its suppliers and it is protected by intellectual property laws. Any downloadable software provided by Office Timeline is licensed, not sold, and subject to Office Timeline’s End User License Agreement.

2. Eligibility

You must be at least sixteen (16) years of age to use the Service. If you are over 16 years of age, but under the age of majority in your jurisdiction, you must obtain permission from a parent or guardian. You represent and warrant that any information you submit is true and accurate and that you are fully able and competent to enter into and abide by these Terms. Accounts registered by automated methods are not permitted. Each login may only be used by one person, and each user is responsible and liable for maintaining the security of their login credentials and password. Office Timeline reserves the right to refuse service to anyone at any time without notice for any lawful reason.

3. Account Registration

All Authorized Users must register to use the Service. You agree to, and cause all Authorized Users to: (a) provide accurate, current and complete information as may be prompted by registration forms on the Service (“Registration Data”); (b) maintain the security of, and not share with any third party, any logins, passwords, or other credentials that you or any Authorized User selects or that are provided to you or any Authorized User for use on the Service; (c) maintain and promptly update the Registration Data, and any other information you or any Authorized User provides to us, and to keep all such information accurate, current, and complete; and (d) notify us immediately of any unauthorized use of any Authorized User account or any other breach of security by emailing us at security@officetimeline.com. Any activity on an Authorized User’s account shall be the sole responsibility of the Customer.

4. Free Trial

We may at our sole discretion offer you free plans for selected features of the Service or a limited time trial period of the entire Service. Once your free trial period ends, your ability to access the Service will terminate unless you elect for a subscription plan. Office Timeline reserves the right to determine if you are eligible for a free trial and to discontinue any free trial without notice at our sole discretion.

5. Fees and payment

Access to selected features of the Service may be provided to you free of charge. We will charge fees for certain features, either on a one-time or a subscription basis (“Paid Services”). Office Timeline reserves the right to implement fees or change the fees at any time, provided that Customers are notified of such changes through the Service or otherwise. If you have signed an order form with Office Timeline for Paid Services and the subscription is automatically renewable, Office Timeline reserves the right to increase the fees which shall apply at each renewal date of subscription.

When you purchase any Paid Services, you authorize Office Timeline or its third-party payment processors to charge the credit card identified by you all applicable fees for your purchase, including all applicable taxes, and you agree that our payment provider can store your credit card information. In doing so, you represent and warrant that you are an authorized user of the credit card. If Office Timeline does not receive payment from your credit card provider, you agree to pay all amounts due upon demand and Office Timeline may terminate your access to the Services until full payment is received. All sales are final, and Office Timeline will not issue refunds, including for prepaid fees, unless you meet the requirements of the 30-day money back guarantee as described in Section 10.4. If you choose an automatic recurring payment and later decide to end your subscription, cancelling the subscription prior to your next billing date is your responsibility. Office Timeline does not refund automatic payments not cancelled in time.

6. Access; Use Restrictions

Office Timeline hereby grants you the right to access and use the Service, subject to your compliance with these Terms at all times, including timely payment of all applicable fees. Your right to access and use the Service is personal, limited to your business purposes, non-transferable, non-exclusive, and revocable. Notwithstanding the foregoing, if you are a marketing or other agency: (a) you may use the Service on behalf of your clients pursuant to these Terms and (b) you may share visuals generated by the Service with your clients, provided that such clients agree to only use such visuals for their business purposes.

Without limiting the generality of the foregoing, you will not, will not attempt to, and will not permit or encourage any third party to:

1. reverse engineer, disassemble, decompile, decode, or otherwise attempt to derive or gain improper access to any software component of the Service, in whole or in part;
2. modify or create derivative works of the Service, in whole or in part;
3. use the Service in any manner or for any purpose that infringes, misappropriates, or otherwise violates any intellectual property right or other right of any third party;
4. interfere with or disrupt the integrity of the Service or any content or data contained therein or transmitted thereby;
5. bypass or circumvent other measures employed to prevent or limit access to the Service;
6. take any action that imposes, or may impose, in our discretion, an unreasonable or disproportionately large load on our infrastructure;
7. “frame”, “mirror,” sell, resell, rent, or lease any portion of the Service or otherwise incorporate any part of the Service into any other website without our prior written authorization;
8. input any virus, malware, or other harmful code into the Service; or
9. violate any applicable local, provincial national, or international law or regulation in relation to your use of the Service.

We may at any time suspend or terminate your or any Authorized User’s access to the Service if we have reason to believe that you are not complying with the Terms or you are otherwise abusing the Service.

7. Third-party services, data and content

7.1 The Service allows you to gather data from multiple third-party data sources and services, including various third-party websites (jointly “Third-Party Services”). The Third-Party Services from which the data can be gathered are selected by Office Timeline at its sole discretion and Office Timeline may, during the Term, change the Third-Party Services that are compatible with the Service. In addition, Office Timeline may discontinue the compatible Third-Party Services if the applicable service providers of the Third-Party Services discontinue the relevant services or discontinue making such services available to Office Timeline.

7.2 Office Timeline assumes no liability whatsoever for the data or other content collected from Third-Party Services, such as Microsoft Excel, Microsoft Project or other integrations. You are solely responsible for ascertaining that you have the right to use the Service for gathering and processing any such data by using the Service, and you must obtain any such consents and authorizations as may be needed from time to time in relation to such data or other content and their processing by using the Service. We do not assume any liability for such Third-Party Services, and you are exclusively responsible for obtaining any necessary licenses or consents needed for their use. You must familiarize yourself with the applicable terms and conditions, including any restrictions on use, in relation to any such Third-Party Services and you agree to comply with the third-party terms and conditions applicable to the Third-Party Services in addition to the terms of the Agreement.

7.3 Furthermore, the Service may contain links to web pages and content of third parties as a service to those interested in this information. We do not monitor, endorse, or adopt, or have any control over any third-party web pages or content. We undertake no responsibility to update or review any such web pages or third-party content and can make no guarantee as to its accuracy or completeness. Additionally, if you follow a link or otherwise navigate away from the Service, please be aware that these Terms will no longer govern. You should review the applicable terms and policies, including privacy and data gathering practices, of any web page, third-party content or service provider to which you navigate from the Service. You access and use third-party content at your own risk.

8. Modifications to the Service

You acknowledge that Office Timeline may make modifications to the Service during the Term without prior notice to you. In the event of material changes to the Service, Office Timeline may provide further instructions to you with respect to any actions required by you in order to continue access and use of the Service, if necessary.

9. Subcontractors

Office Timeline may engage subcontractors to perform the Service under the Agreement. Notwithstanding the foregoing, Office Timeline shall not be liable for the acts or omissions of any of its hosting service or data communication service providers.

10. Term and Termination

10.1 Your account and subscription of the Service remains in effect unless you terminate it or Office Timeline terminates your account for any reason as provided by these Terms. Your account and subscription of the Service may, depending on your choice, be automatically renewable or valid for a fixed period. If your subscription is automatically renewable, your subscription to the Service will remain in effect and will be renewed automatically at the end of each subscription period unless you terminate your subscription or we terminate it.

If your subscription is made for a fixed period and/or not automatically renewable, your subscription will automatically revert to a free version of the Service at the end of the agreed subscription period unless you elect to renew the subscription.

10.2 Office Timeline may terminate this Agreement or terminate or suspend any Authorized User’s access or use of the Service in the following circumstances:

• (a) If Customer’s or any Authorized User’s continued use of the Service may, in our sole discretion, result in material harm to Office Timeline, its subcontractors, affiliates, or another customer of the Service, Office Timeline may reasonably block or restrict Customer’s access to the Service;
• (b) if Customer or any Authorized User has (i) submitted information to the Service in violation of applicable law; or (ii) otherwise used the Service in breach of these Terms, including the restrictions set forth in Section 6 above;
• (c) any fees due by Customer remain unpaid fifteen (15) days after the applicable due date as set forth in the Agreement; or
• (d) if Customer commits a material breach of its obligations under the Agreement and does not remedy such breach within thirty (30) days of receiving notice of breach from Office Timeline.

10.3 Either party may terminate the Agreement upon written notice to the other party if the other party enters into bankruptcy, becomes insolvent or makes an assignment for the benefit of creditors.

10.4 All first-time purchases come with a 30-day satisfaction guarantee. A first-time purchase is defined as Customer’s first subscription purchase of record by a new customer. This guarantee allows Customer to cancel their annual subscription if they are not satisfied with the product. To request a refund, Customer must reply to the invoice email or email their request to sales@officetimeline.com. This request must be made within the thirty (30) day period following the initial purchase, and eligibility for a refund is at Company’s sole discretion based on the criteria above.

11. Feedback

Any feedback, comments, suggestions, ideas, or other information provided by you in the form of email or other submissions to us (collectively “Feedback”), are non-confidential, and you hereby grant to us and our subcontractors and affiliates a nonexclusive, royalty-free, perpetual, irrevocable, and fully sublicensable right to use your Feedback for any purpose without compensation or attribution to you.

12. Copyrights and Publicity

12.1 The “Office Timeline” name, the Office Timeline logos, and any other product or service name or slogan contained on the Service may not be copied, imitated or used, in whole or in part, without the prior written permission of Office Timeline. All other trademarks, registered trademarks, product names and company names or logos mentioned on the Service are the property of their respective owners. Reference to any products, services, processes or other information, by trade name, trademark, manufacturer, supplier or otherwise, does not constitute or imply endorsement, sponsorship, or recommendation thereof by us, or vice versa.

12.2 With your consent, Office Timeline may use your company name(s) and logo(s) for marketing purposes, including on the Office Timeline website and in press releases, promotional and sales literature, customer/prospect presentations, and customers lists.

13. Ownership and intellectual property rights

13.1 As between you and Office Timeline, Office Timeline owns all right, title, and interest, including all intellectual property rights, in and to the Service, and any services available in connection with the Service. Except for those rights expressly granted in these Terms, no other rights are granted, either express or implied, to you and all other rights are hereby reserved.

14. Confidential information

If we share non-public information about the Service with you, you must keep it confidential and use reasonable security measures to prevent unauthorized disclosure of or access to that information.

15. Privacy Policy and processing of data

15.1 Office Timeline will process personal data when you sign up for the Service or when you otherwise provide personal information to us in the context of this Agreement. Our collection and use of this information, which we process as the data controller, is described in the Privacy Policy, available at https://www.officetimeline.com/license-and-privacy#privacy-statement.

16. Customer Data

16.1 Customer retains all rights pertaining to all data, personal data or other information that Customer, or another party on Customer’s behalf, provides to Office Timeline for the purpose of providing the Service (“Customer Data”). Where permitted by Data Privacy Laws, Office Timeline may use Customer Data or other data derived from the operation of the Service: (i) to detect security incidents; (ii) to protect against fraudulent or illegal activity; (iii) to improve, enhance and support the Service; and (iv) to determine which other service offerings may be relevant to the Customer and inform the Customer of such offerings.

16.2 Notwithstanding the termination of this Agreement and provided that the Customer Data is in aggregated form, Office Timeline may use the data for its business purposes including to create public statistics, for example, to enable Customers to benchmark their performance against industry level statistics. In no event does the aggregated data include any personally identifiable information or company level data.

17. Disclaimer of Warranties

YOUR USE OF THE SERVICE, INCLUDING, WITHOUT LIMITATION, YOUR USE OF ANY CONTENT ACCESSIBLE THROUGH THE SERVICE AND YOUR INTERACTIONS AND DEALINGS WITH ANY SERVICE USERS, IS AT YOUR SOLE RISK. OFFICE TIMELINE DOES NOT WARRANT UNINTERRUPTED USE OR OPERATION OF THE SERVICE OR YOUR ACCESS TO ANY CONTENT. NO ADVICE OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED BY YOU FROM THE SERVICE WILL CREATE ANY WARRANTY REGARDING OFFICE TIMELINE THAT IS NOT EXPRESSLY STATED IN THESE TERMS.

EXCEPT FOR ANY EXPRESS WARRANTIES INCLUDED HEREIN, WE DISCLAIM ALL WARRANTIES, TO THE MAXIMUM EXTENT PERMITTED BY LAW, EXPRESS OR IMPLIED, WITH RESPECT TO THE SERVICE, INCLUDING ANY WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, OR FITNESS FOR A PARTICULAR PURPOSE AND WE DO NOT WARRANT THE ACCURACY OF ANY DATA PROVIDED IN CONNECTION WITH THE SERVICE, OR THAT THE SERVICE IS FREE OF BUGS OR ERRORS.

18. Indemnification

18.1 Customer will defend, indemnify and hold harmless Office Timeline from and against any costs, damages, expenses, and liabilities (including, but not limited to, reasonable attorneys’ fees) arising out of or in relation to third-party claims or actions arising out of or relating to:

• (a) any breach by Customer or any Authorized User of the restrictions set forth in Section 6 above;
• (b) any violation of applicable law by Customer;
• (c) any data, information, or content inputted into the Service or otherwise provided by Customer, including any actual or alleged infringement of third-party intellectual property rights or rights to privacy arising out of any such data, information, or content, including Customer Data and Custom Connector Services;
• (d) any of Customer’s products or services;
• (e) any material breach by Customer of this Agreement; or
• (f) any gross negligence, willful misconduct, or fraud by Customer.

19. Limitation of Liability

Neither party nor its suppliers or licensors will be liable for any indirect, incidental, special, consequential, or exemplary damages, including, without limitation, damages for loss of profits, goodwill, use, data, or other intangible losses (even if such party or any supplier or licensor has been advised of the possibility of these damages), arising out of this Agreement.

Office Timeline’s maximum total liability towards the Customer and its Authorized Users for all claims under these Terms or otherwise in relation to the Service, whether in contract, tort, or otherwise, will not exceed the GREATER OF ONE HUNDRED U.S. DOLLARS OR THE FEES PAID BY YOU TO OFFICE TIMELINE FOR THE SOFTWARE DURING THE TWELVE (12) MONTHS PRIOR TO THE DATE ON WHICH THE LIABILITY AROSE. THE EXISTENCE OF MORE THAN ONE CLAIM WILL NOT ENLARGE THIS LIMIT.

Any limitations of liability under this Section 19 shall not apply with respect to breaches of Section 14 (Confidential information) or in the event of gross negligence, willful misconduct, or fraud.

20. Governing law and dispute resolution

These Terms shall be governed and construed in accordance with the laws of Washington, without giving effect to principles of conflicts of law or to the Convention on Contracts for the International Sale of Goods. Any dispute, controversy or claim arising out of or relating to this contract, or the breach, termination or validity thereof, shall be finally settled by arbitration. The number of arbitrators shall be one. The language of the arbitration shall be English. The sole and exclusive venue for any lawsuit arising out of or relating to this agreement shall be the King County Superior Court of King County, Washington.

21. Other terms

Neither party will be responsible for any failure or delay in the performance of its obligations under this Agreement (except for any payment obligations) due to causes beyond its reasonable control (a “Force Majeure Event”), which may include, without limitation, labor disputes, strikes, lockouts, shortages of or inability to obtain energy, raw materials or supplies, denial of service or other malicious attacks, telecommunications failure or degradation, pandemics, epidemics, public health emergencies, governmental orders and acts (including government-imposed travel restrictions and quarantines), material changes in law, war, terrorism, riot, or acts of God. A Force Majeure Event suffered by a subcontractor of a party shall also be considered a Force Majeure Event in relation to the party if the work to be performed under subcontracting cannot be done or acquired from another source without incurring unreasonable costs or significant loss of time. Our failure to act in a particular circumstance does not waive our ability to act with respect to that circumstance or similar circumstances.

Any provision of these Terms that is found to be invalid, unlawful, or unenforceable will be severed from these Terms, and the remaining provisions of these Terms will continue to be in full force and effect. The section headings and titles in these Terms are for convenience only and have no legal or contractual effect.

The Customer may not assign or transfer its rights or obligations under this Agreement, without the prior written consent of Office Timeline. Office Timeline may assign this Agreement to a successor entity in connection with a merger, consolidation, or sale of all or substantially all of its assets to which this Agreement relates.

Office Timeline may change the content of this Agreement, subject to posting a notice of change in its web page.

Any notices under or in relation to the Agreement shall be sent in accordance with the notice provisions in the Agreement.

By using the Service, you consent to receiving electronic communications from us. These communications may include notices about your account and information concerning or related to the Service.

22. Insiders Program

Office Timeline may offer Customer access to the Insiders Program (“Insiders Program”), which may include beta access to the Service. The Terms are applicable to the Insiders Program and will control for any provision not addressed in this Section. Customer acknowledges and agrees that the Service provided to the Insiders Program (a) has not been commercially released for use and sale by Office Timeline; (b) may not operate properly, be in final form or fully functional; (c) may contain bugs, errors, and other problems; (d) the information obtained as part of the Insiders Program may not be accurate and may not accurately correspond to information extracted from any source; (e) Office Timeline is under no obligation to release a commercial version of the beta Service; and (f) any granted service levels or service credits are not applicable to the Insiders Program.

Office Timeline may at any time, in its sole discretion, discontinue or suspend the development of the Insiders Program without any obligation or liability to Customer. Customer acknowledges and agrees that the Service as part of the Insiders Program is made available on an “as is” basis. Customer assumes all risks and all costs associated with the use of the beta access provided to the Insiders Program. As part of the Insiders Program, you will be asked to provide Feedback regarding the use of the Service. Any such Feedback shall be subject to Section 11.

Please read this Office Timeline Downloadable Software End User License Agreement (“EULA”) carefully before downloading or using any software linking to this page or accompanying a readme file with this EULA (“Software”). The Software extends Office Timeline Inc.’s (“Office Timeline”) subscription-based project management reporting services and applications (“Service”).

BY CLICKING A BOX INDICATING ACCEPTANCE OF THIS EULA OR DOWNLOADING OR USING THE SOFTWARE, THIS EULA FORMS A BINDING LEGAL AGREEMENT BETWEEN YOU AND ANY ORGANIZATION OR OTHER ENTITY ON WHOSE BEHALF YOU ACCEPT THESE TERMS AND CONDITIONS (COLLECTIVELY “CUSTOMER” OR “YOU” OR “YOUR”) AND OFFICE TIMELINE, AND WILL GOVERN YOUR DOWNLOAD AND USE OF THE SOFTWARE. IF YOU DO NOT AGREE TO THE TERMS AND CONDITIONS OF THIS EULA, DO NOT DOWNLOAD OR USE THE SOFTWARE.

ANY INDIVIDUAL AGREEING TO BE BOUND BY THIS EULA ON BEHALF OF AN ORGANIZATION OR OTHER LEGAL ENTITY REPRESENTS THAT SUCH INDIVIDUAL HAS THE AUTHORITY TO BIND SUCH ENTITY TO THE TERMS AND CONDITIONS CONTAINED HEREIN.

YOU SHALL NOT DOWNLOAD OR USE THE SOFTWARE WITHOUT PRIOR WRITTEN CONSENT OF OFFICE TIMELINE IF YOU ARE OR BECOME A DIRECT COMPETITOR TO OFFICE TIMELINE OR ITS AFFILIATES.

1. Software

1.1 License. Office Timeline grants Customer a non-exclusive, non-transferable, limited license to download and use the Software on a device you own or lawfully control for Customer's own business purposes. The Software, including software embedded in the Software, is licensed, not sold, to Customer. This Software may include some third-party software; please see Section 1.2 for additional notices required by certain third-party licensors.

1.2 Restrictions. You shall use the Software strictly in compliance with this EULA and applicable laws and regulations, and shall promptly notify Office Timeline of any known unauthorized use. Your use of the Software is subject to Office Timeline’s Terms of Service. You shall not commercially sell, resell, license, sublicense, distribute, or frame the Software to a third party.

1.3 Updates and Support. Office Timeline may modify, upgrade or otherwise update the Software at any time. Office Timeline may provide support for the Software but has no obligation to furnish such support to Customer and may cease to offer such support at any time without notice. You acknowledge that no third party (e.g., Alphabet Inc., Microsoft Corporation, etc.) has an obligation to furnish any support in connection with the Software or your device.

1.4 Compatible Devices and OS. The Software is only available for installation and use on certain devices and operating systems. The Software and Service may identify compatible devices and operating systems, however, determining whether Customer’s device and operating system are compatible with the Software is solely Customer's responsibility.

1.5 Electronic Messaging. By downloading and using the Software, Customer authorizes Office Timeline to send Customer (including via email and push notifications) information regarding the Software and Subscription Services, including: (a) notices about Customer’s use of the Software and Subscription Services and violations of this EULA; (b) updates to the Software and Subscription Services; and (c) promotional information and materials regarding Office Timeline's products and services. As may be provided in the information sent or the settings or account information section of the Software or the Subscription Services, Customer may be able to adjust Your notification and messaging preferences, including unsubscription.

2. Privacy

In order to provide the Software and its extension or integration to the Subscription Services, Office Timeline may collect certain information about Customer and Customer’s device, including technical and telemetry data related to your use of the Software. Office Timeline uses and protects that information in accordance with the Privacy Policy available at https://www.officetimeline.com/license-and-privacy#privacy-statement.

3. DISCLAIMER

EXCEPT FOR THE REPRESENTATIONS AND WARRANTIES EXPRESSLY STATED IN THIS EULA, OFFICE TIMELINE MAKES NO REPRESENTATIONS AND DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING: (A) OFFICE TIMELINE SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, COMPLIANCE WITH LAWS, NON-INFRINGEMENT, AND ACCURACY; (B) OFFICE TIMELINE DOES NOT WARRANT THAT THE SOFTWARE WILL BE ERROR-FREE OR OPERATE WITHOUT INTERRUPTIONS OR DOWNTIME; AND (C) YOUR DOWNLOAD AND USE THE SOFTWARE IS AT YOUR OWN DISCRETION AND RISK AND YOU ARE SOLELY RESPONSIBLE FOR ANY DAMAGES TO YOUR DEVICES OR FOR LOSS OF DATA THAT RESULT FROM THE DOWNLOAD OR USE OF THE SOFTWARE.

4. LIMITATION OF LIABILITY

TO THE EXTENT PERMITTED BY LAW, IN NO EVENT WILL OFFICE TIMELINE BE LIABLE FOR ANY LOST PROFITS, GOODWILL, OR REVENUES OR FOR ANY INCIDENTAL, CONSEQUENTIAL, SPECIAL, INDIRECT, COVER, BUSINESS INTERRUPTION, OR PUNITIVE DAMAGES IN CONNECTION WITH ANY CLAIM OF ANY NATURE, WHETHER IN CONTRACT, TORT, OR UNDER ANY THEORY OF LIABILITY, ARISING UNDER THIS EULA, EVEN IF OFFICE TIMELINE HAS GIVEN YOU ADVANCE NOTICE OF SUCH POSSIBLE DAMAGES OR IF OFFICE TIMELINE’S REMEDY OTHERWISE FAILS OF ITS ESSENTIAL PURPOSE.

Office Timeline’s maximum total liability towards the Customer and its Authorized Users for all claims under these Terms or otherwise in relation to the Service, whether in contract, tort, or otherwise, will not exceed THE GREATER OF ONE HUNDRED U.S. DOLLARS OR THE FEES PAID BY YOU TO OFFICE TIMELINE FOR THE SOFTWARE DURING THE TWELVE (12) MONTHS PRIOR TO THE DATE ON WHICH THE LIABILITY AROSE. THE EXISTENCE OF MORE THAN ONE CLAIM WILL NOT ENLARGE THIS LIMIT.

5. Suspension and Termination

Office Timeline reserves the right to restrict or prohibit Customer to download or use the Software at any time based on the status of Customer’s Service account under the Terms of Service. Customer acknowledges and agrees that if Customer’s Service account is suspended or terminated, Customer will no longer download or use the Software and your access to data, information, and content that is stored within the Service may be restricted or prohibited.

6. General

6.1 Compliance. You represent and warrant that: (a) You are not located in a country that is subject to a United States Government embargo, or that is on Title 15, Part 740 Supplement 1 Country Group E of the United States Code of Federal Regulations; (b) You are not located in a country that has been designated by the United States Government as a “terrorist supporting” country; and (c) You are not listed on any United States Government list of prohibited or restricted parties. You further agree not to download or transport the Software to or use the Software in any such country. You agree to immediately notify Office Timeline if your status changes with respect to these representations and warranties.

6.2 Feedback. You grant Office Timeline a worldwide, irrevocable, perpetual, sublicensable, transferable, non-exclusive license to use and incorporate into Office Timeline’s products and services any feedback or suggestions for enhancement that Customer provides to Office Timeline (“Feedback”), without any obligation of compensation. Feedback is provided by Customer “as-is,” without representations or warranties, either express or implied, including any warranties of merchantability or fitness for a particular purpose. You also waive any moral rights you may have in the Feedback.

6.3 Governing Law. This EULA is governed by and construed in accordance with the laws governing the state of Washington as detailed in the Terms of Service.

6.4 Entire Agreement. This EULA represents the entire agreement between Office Timeline and Customer with respect to the Software. Your access to and use of the Service remains subject to the agreement between Customer and Office Timeline governing such access and use (the “Terms of Service”). With respect to Customer’s use of the Software, to the extent the Terms of Service conflicts with this EULA, the terms of this EULA will control.

6.5 Revisions. Office Timeline reserves the right to revise this EULA at any time and for any reason and will provide reasonable notice of any significant changes to the Customer. Office Timeline will post the most current version of this EULA on its website. Customer is responsible for complying with the updated terms posted online at Office Timeline’s website even if these updated terms appear online at Office Timeline’s website before being posted on the Software. Your continued use of the Software after Office Timeline publishes notice of changes to this EULA indicates Customer’s consent to the updated terms.

7. Third Parties

7.1 Products. If Customer separately procures services, applications, or content from a third party (“Third Party Products”) for use with the Software, any such use is subject to the end-user license or use agreement that Customer accepts from or establishes with the third party. Office Timeline has no liability with respect to your procurement or use of Third-Party Products.

Protecting your personal data is and always has been at the core of everything we do. This Privacy Policy explains what personal data Office Timeline collects from you and how we use that data. This Privacy Policy applies to you when you give your personal data directly to Office Timeline, for instance when creating an account for the Service or interacting on our websites, through a marketing campaign, or when attending an event or meetup.

Secure and Protected Privacy

Privacy is important to us, and we are committed to securing your personal data and empowering your privacy. Our data protection and privacy strategy is built on a framework made up of these fundamental customer data protection pillars:

Limit data collection: We believe that limiting the personal data collected is the very best thing we can do to protect your security and privacy. Our processes and systems have been designed to operate on a minimal amount of uniquely identifiable information, which significantly limits your privacy exposure.

Guard and protect: Personal data is kept safe at all times. Our data protection strategy has been created to guard your data throughout its entire lifecycle. Because we limit the amount of personal information collected, we are able to easily manage it at all points with the strongest encryption security methods available.

Transparency and control: We believe in giving you access to and control over your personal data, and we have built processes for updating or deleting data on demand. You can view or edit your personal data by logging into your account: https://www.officetimeline.com/login. You can also request a report of your personal data or request your personal data be deleted by emailing support@officetimeline.com.

Personal Data We Collect

We collect personal data directly from you, from third parties or publicly available data, or automatically when you use the Service through the use of technologies such as electronic communication protocols, cookies, widget buttons, or tools. We collect this personal data for the purposes outlined below in “How We Use Personal Data.”

How We Use Personal Data

We will only use your personal data if we have a lawful basis to do so. Specifically, we use your personal data at your instruction or as follows:

Providing and Personalizing our Sites. To operate and administer our websites and Service and to provide you with the content you choose to access or request; to tailor web content we display to you in order to offer location customization (e.g., setting a default language) and to otherwise personalize your experience using our websites. We use cookies and similar tracking technologies to automatically collect your personal data for this purpose.

Identifying Customer Opportunities. To identify and assess potential new users through tools (e.g., HubSpot, LinkedIn Sales Navigator, Intercom, etc.) and to engage with individuals responding to web content produced by Office Timeline or otherwise available on the Service.

Sending Marketing Communications. For direct marketing, promotional, and other non-transactional communications (e.g., newsletters, calls, SMS, or push notifications) in order to share information about special offers, promotions, and events or to otherwise contact you about Office Timeline products or information we think will interest you, and you have the right to opt out of such communications at any time.

Displaying or Analyzing Personalized Advertisements. To provide more relevant advertising to you on the Service or third-party platforms, or to conduct related marketing research (e.g., by measuring the success of targeted advertising campaigns). We use cookies and similar tracking technologies to collect your personal data for this purpose.

Managing Contests. To provide communications for and manage contests, promotions, and sweepstakes you’ve chosen to participate in or register for. Please note, contests may have additional rules relating to how we process your personal data.

Analytics and Improvement. To better understand how you access and use the Sites and Offerings, and for other research and analytical purposes, such as to evaluate and optimize the Service and to develop additional services, content, and features (e.g., if you choose to participate in a survey or user-interface study, we use your email address with your consent to reach out with follow-up questions or additional studies).

Protect Legal Rights and Prevent Misuse. To protect the Service and the rights of users and other individuals; to prevent unauthorized access and other misuse; and where we believe necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, or violations of our Terms of Service or this notice. We use machine or deep learning technologies for these purposes (e.g., for fraud prevention or detection).

Comply with Legal Obligations. To comply with the law or legal proceedings (e.g., we disclose data in response to lawful requests by public authorities, including responding to national security or law enforcement requests).

General Business Operations. Where necessary to the administration of our general business, accounting, recordkeeping, and legal functions. For instance, Office Timeline will process billing information, including personal data, to process payments, send invoices, or contact users regarding payment issues.

How We Share Personal Data

We will only share your personal data if we have a lawful basis to do so. We will not commercially exploit your personal data or disclose personal data for monetary or other valuable considerations. We share information about you with your consent, at your request, or as follows:

To Our Service Providers. We use third-party service providers to process your personal data (e.g., your contact information, billing information, account data, and device data) to assist us in business and technical operations. Office Timeline has data processing agreements with such service providers limiting their use of and access to personal data to specific purposes. These service providers include but are not limited to the following trusted vendors:

• Billing: We use Stripe to manage our credit card processing of your subscriptions.
• Customer support and engagement: Tools including Intercom, Appzi, Zendesk, Typeform, and HubSpot help us troubleshoot issues, answer your questions, and collect your feedback.
• Marketing: Services including VWO, Hotjar, Google Analytics, Microsoft Bing Ads, and Gartner Ads are leveraged to optimize our website and deliver more relevant ads to you. HubSpot, SendGrid, and Active Campaign are used to communicate with you about product updates and account notifications.

We provide these third parties with no more information than is necessary to enable them to provide the services to us.

To Infrastructure Hosting Providers. We use third parties for the infrastructure used to host content and personal data we process, including cloud providers such as Microsoft Azure. Office Timeline has data processing agreements with such service providers and their use of and access to personal data is limited to specific purposes.

As Required by Law. We disclose information about you if we believe we must do so to comply with the law or a subpoena, bankruptcy proceeding, or similar legal process. In certain situations, we are required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

To Protect Rights. We disclose information about you, such as your name, contact information, and billing information, to enforce our agreements with you or to protect the rights and safety of Office Timeline, our customers, our users, and the general public, or as evidence in litigation in which we are involved.

As Aggregate and Anonymized Information. We share aggregate or anonymized information about you with our third-party service providers for our internal business purposes which includes marketing, advertising, research, or similar purposes (e.g. we may provide information for our earnings reports, such as the number of active users.)

In a Business Transaction. If Office Timeline is involved in a dissolution, reorganization, financing, public offering of securities, merger, acquisition, or sale of all or a portion of its assets, your information will be transferred to providers, advisors, accountants, attorneys, the acquiring entity, or other third parties as part of the transaction (provided that we inform such individuals that they must use your personal data only for the purposes disclosed in this notice), and may also be reviewed as part of the due diligence review for the transaction (e.g., we may need to provide a list of all customer accounts and payment histories).

Linked Sites; Third Party Widgets

Links to Other Websites. Our Service may include links to other websites with privacy practices that differ from ours. Any information you submit to a website not belonging to Office Timeline is governed by that site’s privacy statement.

Plugins and Social Media Widgets. Our Service may include social media features and widgets (“widgets”), such as a “share this” button or other interactive mini-programs. Widgets are used to provide you specific services from other companies (e.g., displaying the news, opinions, music, etc.). Personal data such as your email address is collected through widgets. Widgets set cookies to enable them to function properly. Widgets displayed on our Service are not hosted by Office Timeline and are therefore subject to the privacy policies of the third-party company providing the widget rather than this notice.

Security

The security and integrity of your personal information is very important to us. We follow industry-accepted standards to protect the personal information submitted to us, both during transmission and once it is received. We ensure the appropriate electronic, physical and managerial procedures are in place with a view to safeguarding and preserving all the data handled. Our infrastructure is located in top-tier data centers. Each of these locations adheres to strict physical and procedural controls which are frequently audited. Our applications are routinely scanned for vulnerabilities and an independent penetration test is conducted annually. Our employees undergo background checks (when allowed) and sign non-disclosure agreements at the time of hire. We have strict security controls in place and audit them annually to maintain SOC 2 Type II compliance.

Changes

The information provided in this policy may be modified to address new issues or changes. If we make significant changes, we may notify you by other means (for instance, by email or with a banner on the website) prior to the change becoming effective. Any changes we make will take effect 30 days after the update date noted above. If you object to the changes, you may choose to close out your account with us before the new effective date to delete your account and related information from our records.

If you have any questions about our license agreement, privacy policy, or terms of service, please don’t hesitate to contact us at feedback@officetimeline.com.

Overview

Our business runs on our software. We depend on it to manage software development sprints, roadmaps, IT projects and for all cross-organization planning. We also use it to communicate with external teams, clients, executives and other important stakeholders. As such a heavy consumer of Office Timeline ourselves, we understand how important the security of our software is to our customers.

We have focused on implementing a holistic and comprehensive security discipline across all parts of our business. The following Security FAQ will provide information on how we practice security across our business. It will cover:

• App security and infrastructure
• Data Center and Disaster Recovery
• Methodologies
• Certifications / Attestations

To help deliver the software and services our customers require, we work with a small group of trusted vendors. Each of these vendors – such as Stripe or Microsoft Azure – have been carefully selected for meeting a high-standard of security. Our Security FAQ does not address the security practices of these vendors. For a list of our trusted vendors and links to their security pages, please see our privacy statement.

App security and Infrastructure

Do sessions automatically timeout after a specified period of inactivity? If yes, how long is the session timeout?

Yes. Both on the main website and in the Office Timeline Online app, the session timeout is set at 8 hours. If the user doesn’t access the site or the web app before this period expires, they will be automatically logged out of their account.

How is the traffic between clients and servers protected?

We use SSL/TLS for communication channel encryption, and we are protected against XSS (cross-site scripting) attacks. In addition, customer data & credit card data are validated in a Stripe plugin for an additional layer of security.

Do you maintain secure coding guidelines and conduct security code reviews on the source code?

Yes. Our technical security expert maintains the security coding standards, which are applied by developers, testers, and team leaders when uploading code on the repository. Every team receives ongoing training on security code policies.

How do you detect code security defects prior to production?

We have a testing process for the source code (including automated tests, unit and integration tests and automated source code analysis tools), which is used, reviewed and maintained constantly by our developers and security manager. This process gives testing requirements the same priority as functional requirements in development cycles, so we can quickly identify any risks early.

Do you protect against Cross-Site Scripting?

Yes. Our website uses the default mechanisms from ASP.NET Core against XSS attacks. This mechanism is the safest method currently available for web applications.

Are your systems configured to log security-relevant events, such as authentication, data access, payments etc.?

Yes. We have a comprehensive internal audit system which logs all application events containing data related to users, orders, payments, invoices, emails, etc. These logs, along with errors, are saved, tracked and reported (on website and by email) via alerting and error tools from Kibana and Rollbar.

Does your website or online app require certain browser plugins to work correctly?

No. Our website and application do not require any plugin; however, you will need to have JavaScript enabled in your browser.

If any form of cryptography is used in your application, please describe the algorithms that are used.

We’re using PBKDF2 with HMAC-SHA256, 128-bit salt, 256-bit key, 10000 iterations, when storing passwords.

All data is protected at rest by Azure systems; more information, including the algorithms, can be found here: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest.

Does your Software as a Service use transport encryption?

Yes. Both the Office Timeline Online app and the main website are accessible over HTTPS, and the communication channel is encrypted with SSL/TLS, to provide high levels of integrity and confidentiality.

What type of events are logged and monitored?

We have defined and provisioned a suite of security related alerts that are triggered via Microsoft Azure’s monitoring service. For example, these events include website crashes, database availability, CPU/memory load threshold, or other services down alerts. Our administrators and security managers are notified by email and SMS whenever an alert is triggered.

Have you experienced a customer data breach in the past two years?

No. Our customer data has been safely protected since our company’s formation, and we are working hard to keep it safe.

Does your company use firewalls and/or network zoning to restrict traffic into and out of your network at strategic points?

Yes. We use Microsoft Azure's Web Application Firewall (WAF) and DDoS Protection to stop network and application layer attacks at the edge, as well as to control, log, filter and block traffic to our backend. In addition, we have a process in place to ensure only authorized personnel can access it. We also utilize network zoning to provide an additional layer of security – where each edge component is in its own network, and the internal networks communicate through VPN, allowing only desired traffic through.

Is encryption protection in place for internal network traffic that potentially carries customer-sensitive information?

Yes. Customer-sensitive data and the application credentials, SSL certificates, and encryption keys are managed, stored, and transmitted securely through the Azure Management Portal in adherence to Azure Data Security and Encryption Best Practices. Additionally, access to the management portal is restricted and requires specific permission, which is logged and recorded in a secure manner.

Does your network have protections against ARP spoofing?

All our networks leverage Azure's advanced security services, which include protection against Man-in-the-middle attacks such as Address Resolution Protocol (ARP) and Flooding. As an additional layer of security, networks can only be accessed through user authentication with strong password requirements.

How do users get and manage their passwords?

Depending on the type of license they purchase, some Office Timeline users will set up user accounts. These users can:

A) Set their password at registration from our website or inside the product, and they have several options to change it if needed:

1. Clicking the Forgot Password link at login. The system will email the user a confirmation code that will allow them to set a new password securely.
2. Changing it from their Account Settings page once logged in. To prevent unauthorized access, the user will need to confirm their email address before setting a new password.
3. Contacting our support team. In this case, our support representative will initiate the reset and create a temporary password, which the user will be requested to change as soon as they sign in to their account.

B) Choose “Continue with Microsoft” at registration. In this case, users will not create a local Office Timeline password, as they’ll use their Microsoft account credentials to log in. Password management will be handled through their Microsoft account settings.

Does the application enforce minimum password security requirements?

Yes. The minimum password security requirements we enforce are:

• 8 to 20 characters

And at least 3 of the following:

• Lowercase letters (a-z)
• Uppercase letters (A-Z)
• Digits (0-9)
• Special characters
• @ # $ % ^ & * - ! + = [ ] { } | \ : ' , . ? / ` ~ " ( ) ; < >

Passwords are hashed by Azure B2C and cannot be recovered (even in encrypted form) by our team. To avoid any issues, we strongly recommend logging in directly with your Microsoft Work account, which will allow you to use the security measures configured by your company. If you're not using a Microsoft account, consider a password management tool to store your credentials.

Data Center & Disaster Recovery

Who is your data center provider? Are they certified against a compliance theme? (e.g., TIA-942, ISO 27001, SSAE-16, etc.)

Our data center provider is Microsoft Azure, which meets a broad range of international and industry-specific compliance standards, from ISO27001, HIPAA, and FedRAMP, to SOC 1 and SOC 2. Rigorous third-party audits verify Azure's adherence to the strict security controls mandated by these standards. Azure's compliance reports are available on Microsoft's Service Trust Portal.

Do you sync data to a different environment other than the database?

Yes. We use Elasticsearch clusters to sync data for reports, to log emails sent by the system, and for internal data auditing purposes. In addition, we also use Kibana for logs and errors (please see our FAQ on logging security-relevant events).

Do you back up data?

Yes. All data is saved in the cloud and it is backed up every minute using Azure cloud back-up services. Our back-up and recovery architecture uses geo-redundant storage (RA-GRS) to ensure that the backups are preserved even if the data center is unavailable. Backups are automatically kept for 35 days.

Do you store backups on removable media or in off-site facilities?

Yes. We back up regularly and store these back-ups with Azure. Additionally, we regularly back up to removable media, which are stored at off-site facilities. All backup data is encrypted.

Do you have an auditable process in place for granting and revoking physical access to data centers?

Azure is composed of globally distributed datacenters that are strictly controlled to reduce risk of unauthorized users gaining physical access. We do not have physical access to them.

Do you have disaster recovery and business continuity procedures in place?

Yes. We have a business continuity and disaster recovery (BCDR) process that covers disaster recovery procedures and best practices to ensure business continuity. It addresses disruptions in the service we provide customers, to keep our applications running during unplanned downtimes. Additionally, it leverages Azure recovery services (auto-healing, auto-restart servers, machine replication, geo replication etc.) to ensure business recoverability during outages.

Is there a manual backup and restoration process?

Backups are done automatically through Azure and retained for 35 days. Additionally, we back up data offsite – these backups are automatic as well. As for restoration, this is done manually by authorized staff.

Do you have procedures in place for notifying clients when business disruptions occur?

Yes. Depending on the severity of the business disruption, we may send notifications explaining the issue and letting users know the impact, restoration times and any temporary alternative solutions. To ensure maximum visibility, such notifications may also be posted on all our social media channels.

Has your company ever experienced a major disruption (i.e. catastrophic natural disaster, fire, technology disruption, denial of service attack, material financial loss)?

No, we haven't experienced any major disruptions.

Methodologies

Has your company selected an individual or team to be responsible for managing the information security and privacy program?

Yes. We have a dedicated security professional who oversees secure architecture and practices, and we have a technical security expert who is responsible for specific, code-related data and secure software development processes. Both receive ongoing information security training and stay current with the latest technologies, and threats, applicable to our applications.

Is there a Software Development Life Cycle (SDLC) process?

Our development and delivery process is based on the Agile methodology. We use Continuous Integration and Continuous Delivery for our build and release process to ensure that we can deploy changes quickly and in a sustainable way. Our teams work in iterations and cycle through processes of planning, design, development, testing and deployment, and tasks are adjusted as the situation demands. This practice allows us to detect problems early, reduce risks, and easily adapt to changes in requirements.

How are changes tested?

Development teams create unit and integration tests and also perform manual testing for code changes before deploying to a Development server. Then, the testers create and execute automated and manual tests on both the Development and Testing servers. When the testing teams certify and approve code changes, they are deployed to a Staging server and re-tested simulating a Live environment. The final phase is to swap Staging with Live and re-test in the Live environment.

How are they reviewed and approved?

We have a managed development process. When a developer has finished working on a task, that work is submitted for review and approval from a reviewer board. The code will be merged into the main branch (repository) only when the work is approved.

Is production data used for development and/or testing?

No, real customer data (emails, Stripe customer ID, etc.) is never used for development or testing. We have a mock database which is used for development and testing.

Do developers have access to deploy into production?

No. Once the testing team certifies and approves code changes, a small group of key DevOps staff follow a carefully managed methodology to deploy new code into production.

Do you use an automated source-code analysis tool to detect code security defects prior to production?

Yes, we use tools for automated source-code analysis. These tools are developer productivity extensions for Microsoft Visual Studio that provide continuous code analysis and immediate detection of errors and problems. Our development teams use them to find runtime and compiler errors, code smells, and redundancies as they code. They are also used to scan existing code to ensure compliance with the most current coding standards.

Certifications / Attestations

Is Office Timeline SOC 2® compliant?

Yes, Office Timeline is SOC 2 compliant. We’ve received our SOC 2 Type 2 Report, which provides an external audit that demonstrates we are meeting the security commitments we have made to our customers. We use Drata’s automation platform to continuously monitor 100+ internal security controls across the organization against the highest possible standards. Automated alerts and evidence collection allows us to confidently prove our security and compliance posture any day of the year, while fostering a security-first mindset and culture of compliance across the organization.

If you believe you’ve discovered a bug in Office Timeline’s security, please get in touch at security@officetimeline.com. Our security team promptly investigates all reported issues.

For more information about our security policies, please contact us at security@officetimeline.com.