Contract analysis

I. Executive Summary The purpose of this memorandum is to provide Lumos Analytics Inc. ("Lumos") with a comprehensive analysis of the indemnification framework and liability cap structure negotiated in the Channel Reseller Program Agreement (the "Agreement") between Lumos and Meridian Data Solutions GmbH ("Meridian"). The Agreement governs the distribution and resale of the Lumos Prism™ AI-driven financial analytics

II. Background and Deal Structure A. The Parties Lumos Analytics Inc. Lumos is a Delaware C-Corporation with its principal offices located at 4700 Sandhill Road, Suite 300, Palo Alto, California 94304 (EIN: 84-3291056). Lumos is the developer and licensor of the Lumos Prism™ platform, a proprietary AI-driven financial analytics and risk-modeling SaaS solution designed for enterprise-grade financial institutions, asse

III. Lumos's Indemnification Obligations A. Scope of Indemnification Pursuant to Section 10.1 of the Agreement, Lumos shall indemnify, defend, and hold harmless Meridian, its affiliates, and their respective officers, directors, employees, and agents (collectively, the "Meridian Indemnified Parties") against all losses, damages, liabilities, costs, and expenses (including reasonable attorneys' fees and costs of litig

1. Intellectual Property Infringement. Lumos is obligated to indemnify the Meridian Indemnified Parties against any third-party claim alleging that the Lumos Prism™ platform, as provided by Lumos under the Agreement and used by Meridian in accordance with the terms of the Agreement, infringes upon or misappropriates any third-party intellectual property rights, including patents, copyrights, trade secrets, and tradem

2. Data Protection Breach. Lumos is obligated to indemnify the Meridian Indemnified Parties against third-party claims arising from Lumos's breach of applicable data-protection laws, including Regulation (EU) 2016/679 (the "GDPR") and the UK General Data Protection Regulation (the "UK GDPR"), but only to the extent that such breach is solely caused by Lumos's acts or omissions. This "sole causation" limitation is a c

3. Death or Bodily Injury. Lumos is obligated to indemnify the Meridian Indemnified Parties against third-party claims for death or bodily injury caused by Lumos's gross negligence. While the likelihood of death or bodily injury claims arising from a SaaS financial analytics platform is low, this provision is included as a standard risk-allocation measure. The gross negligence threshold is higher than ordinary neglig

IV. Meridian's Indemnification Obligations A. Scope of Indemnification Pursuant to Section 10.2 of the Agreement, Meridian shall indemnify, defend, and hold harmless Lumos, its affiliates, and their respective officers, directors, employees, and agents (collectively, the "Lumos Indemnified Parties") against all losses, damages, liabilities, costs, and expenses (including reasonable attorneys' fees and costs of litiga

1. Marketing and Misrepresentation. Meridian is obligated to indemnify the Lumos Indemnified Parties against third-party claims arising from Meridian's marketing, promotion, or misrepresentation of the Lumos Prism™ platform to end users in the EMEA Territory. This obligation encompasses claims resulting from false, misleading, inaccurate, or unauthorized statements made by Meridian or its personnel regarding the capa

2. Breach of Agreement or Applicable Law. Meridian is obligated to indemnify the Lumos Indemnified Parties against third-party claims arising from Meridian's breach of the Agreement or applicable law, including any local laws, regulations, directives, or administrative requirements applicable to Meridian's distribution and resale activities in the EMEA Territory. This is a broad catch-all indemnification that provide

3. Unauthorized Modifications. Meridian is obligated to indemnify the Lumos Indemnified Parties against third-party claims arising from Meridian's unauthorized modifications, reverse-engineering, decompilation, disassembly, or creation of derivative works of the Lumos Prism™ platform. The Agreement's IP provisions expressly prohibit Meridian from engaging in any of these activities, and this indemnification obligatio

4. Export Control and Sanctions Violations. Meridian is obligated to indemnify the Lumos Indemnified Parties against third-party claims arising from Meridian's failure to comply with applicable export-control and sanctions regulations. The scope of this obligation encompasses compliance with the following regulatory regimes: (i) U.S. Export Administration Regulations (EAR), 15 C.F.R. Parts 730–774; (ii) EU Dual-Use R

V. Indemnification Liability Cap A. Aggregate Cap: $15,000,000

Section 10.4 of the Agreement establishes an aggregate indemnification liability cap of $15,000,000 for each party. This cap represents 50% of the Total Contract Value ($30,000,000 × 50% = $15,000,000) and limits the maximum aggregate liability of each party for indemnification claims (other than claims falling within the uncapped carve-out categories described in Section V.B below) over the entire term of the Agreem

Section 10.5 of the Agreement expressly excludes the following categories of liability from the $15,000,000 aggregate cap. Liabilities falling within these categories are uncapped and are not subject to any aggregate limitation:

1. Willful Misconduct or Fraud. Any losses, damages, or liabilities arising from the intentional acts or fraudulent conduct of either party are excluded from the aggregate cap and are therefore uncapped. This carve-out is essential to prevent moral hazard — i.e., to ensure that a party cannot engage in deliberate wrongdoing and then rely upon the cap to limit its financial exposure. The willful misconduct and fraud c

2. Breaches of Confidentiality. Any losses, damages, or liabilities arising from the unauthorized disclosure, use, or misuse of confidential information by either party are excluded from the aggregate cap and are therefore uncapped. This carve-out reflects the heightened sensitivity of the information exchanged under the Agreement, which includes proprietary technology, financial analytics data, pricing structures, c

3. Intellectual Property Infringement. Third-party claims of intellectual property infringement by the Lumos Prism™ platform are excluded from the aggregate cap and are therefore uncapped. This carve-out is appropriate because IP infringement claims are inherently unpredictable in magnitude — a single patent infringement verdict or settlement can result in damages that far exceed the TCV of any individual commercial

VI. Escrow Holdback Mechanism A. Structure. Section 10.6 of the Agreement establishes a 5% escrow holdback mechanism designed to provide a readily accessible fund for the satisfaction of indemnification claims without requiring Meridian to make additional out-of-pocket payments at the time a claim is asserted. Under this mechanism, 5% of each quarterly payment made by Meridian pursuant to the MAC schedule is held bac

VII. Indemnification Procedural Requirements A. Notice Requirement

Section 10.7(a) of the Agreement requires the indemnified party to provide written notice to the indemnifying party within 30 days of becoming aware of a claim or potential claim giving rise to an indemnification obligation. The notice must include a reasonably detailed description of the claim, the facts and circumstances giving rise to the claim, the legal basis for the claim (to the extent known), and an estimate

Section 10.7(b) of the Agreement grants the indemnifying party the right to assume control of the defense of any third-party claim for which indemnification is sought, including the right to select defense counsel, direct the litigation strategy, and manage all aspects of the defense. This right is subject to the following conditions: (i) The indemnifying party must notify the indemnified party in writing of its elec

Section 10.7(c) of the Agreement provides that consent to any settlement of an indemnification claim shall not be unreasonably withheld, conditioned, or delayed by either party. This standard is consistent with the implied covenant of good faith and fair dealing under California law, which requires contracting parties to exercise their contractual discretion in good faith and in a manner that does not deprive the oth

VIII. Interaction with Insurance Requirements The indemnification framework operates in conjunction with the insurance requirements set forth in Section 8 of the Agreement. Both parties are required to maintain specified minimum insurance coverage throughout the term of the Agreement, which provides a secondary layer of financial protection in the event of indemnification claims. Lumos Insurance. Lumos maintains erro

IX. Interaction with Limitation of Liability The Agreement contains a separate general limitation of liability provision in Section 11, which is distinct from the indemnification cap set forth in Section 10.4. The general limitation of liability provision excludes each party's liability for consequential, incidental, special, indirect, exemplary, and punitive damages, regardless of whether such damages are foreseeabl

X. Post-Termination Considerations A. Survival of Indemnification Obligations

Section 10.8 of the Agreement provides that the indemnification obligations set forth in Sections 10.1 and 10.2 survive the expiration or termination of the Agreement for any reason, regardless of the cause or manner of termination. This survival provision ensures that indemnification protection remains available for claims arising from events that occurred during the term of the Agreement, even if such claims are no

XI. Risk Assessment and Recommendations A. Overall Assessment In our assessment, the indemnification framework negotiated in the Agreement is commercially balanced and consistent with market standards for enterprise SaaS channel reseller agreements of comparable size and complexity. The $30,000,000 TCV places this Agreement squarely within the range of significant enterprise technology transactions, and the indemnifi

1. Sole-Causation Limitation on Data Protection Indemnification. Lumos's data-protection indemnification obligation is limited to scenarios in which the breach is solely caused by Lumos's acts or omissions. This is a favorable limitation that shields Lumos from shared-fault claims, which are the most common type of data-protection claim in SaaS distribution arrangements.

2. Escrow Holdback. The 5% escrow holdback provides a readily accessible liquidity pool for indemnification claims, reducing the practical risk associated with pursuing direct indemnification from a counterparty domiciled in a foreign jurisdiction.

3. Prejudice-Based Notice Exception. The 30-day notice requirement is coupled with a prejudice-based exception (rather than a strict forfeiture rule), which reduces the risk that a party will lose its indemnification rights due to a procedural technicality. This is a borrower-friendly formulation that benefits whichever party is in the indemnified position.

4. Non-Exclusivity. Lumos's retention of the right to appoint additional resellers and to sell directly in the EMEA Territory limits channel concentration risk and ensures that Lumos is not unduly dependent on Meridian for EMEA market access. C. Recommendations. Based on our analysis, we recommend the following actions to optimize Lumos's position under the indemnification framework and to mitigate identified risks:

1. Monitor Meridian's Marketing Materials and Co-Branded Content. Lumos should establish a systematic process for reviewing Meridian's marketing materials, presentations, website content, and co-branded collateral for compliance with the Trademark License & Brand Guidelines set forth in Exhibit D to the Agreement. Given the AI-driven and financial-technology nature of the Lumos Prism™ platform, there is a heightened

2. Require Quarterly Export-Control and Sanctions Certifications. Given the breadth of the EMEA Territory and the proximity of certain EMEA sub-regions to the restricted territories identified in the Agreement (Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine), Lumos should require Meridian to provide quarterly certifications confirming its continued compliance with all applicab

3. Inform Financial Advisors and Auditors. Lumos should ensure that its financial advisory and audit teams are informed of the indemnification and escrow structure for purposes of financial reporting and transfer pricing documentation. Specifically, Caldwell & Pryce Advisory LLC (Ingrid Svensson, engagement lead) and Whitmore Paige & Co. LLP (Gregory Chen, Audit Partner) should be provided with copies of the relevant

4. Coordinate GDPR/UK GDPR Compliance Monitoring. Lumos should coordinate with Thornbridge Whitaker LLP (Alistair Drummond, lead partner) on ongoing monitoring of GDPR and UK GDPR compliance in connection with the Lumos Prism™ platform's processing of EMEA end-user data. While Lumos's data-protection indemnification is limited to sole-causation scenarios, proactive compliance monitoring will minimize the likelihood o

5. Consider Requesting a Parent or Affiliate Guarantee. As noted in Section II.C above, the Agreement authorizes Meridian to engage two pre-approved sub-distributors: Meridian Data Solutions UK Ltd and Meridian Data Solutions SARL. However, these sub-distributors are not direct parties to the Agreement and are not directly bound by the indemnification provisions of the master Agreement. If sub-distributor activities

6. Calendar Key Post-Termination Dates. Lumos should calendar the following key dates to ensure timely assertion of any indemnification claims in connection with the expiration or termination of the Agreement: (a) Escrow Release Date: 12 months after expiration or termination of the Agreement. Any indemnification claims that Lumos intends to satisfy from escrow funds must be formally asserted before this date. (b) In

XII. Conclusion Based on our analysis, the indemnification and liability cap framework in the Channel Reseller Program Agreement between Lumos Analytics Inc. and Meridian Data Solutions GmbH is well-structured, commercially reasonable, and consistent with the requirements of California law. The key structural features — the $15,000,000 aggregate indemnification cap (50% of TCV), the uncapped carve-outs for intellectu

XIII. Contact Information Howard Bellamy Partner, Antitrust & Competition Calderwood & Harkness LLP 801 South Figueroa Street, Suite 4200 Los Angeles, California 90017 Leila Nazari Associate, Tax Calderwood & Harkness LLP 801 South Figueroa Street, Suite 4200 Los Angeles, California 90017 Matter No.: 1008-00010 This memorandum is protected by the attorney-client privilege an