CISO Connect Terms

Effective Date: May 23, 2026

1. Program Overview

CISO Connect ("the Program") is operated by Phish Tank Digital ("we," "us," "our"). The Program connects Chief Information Security Officers ("CISOs") seeking cybersecurity solutions with vetted technology vendors ("Vendors") through facilitated introductions.

2. CISO Participants

2.1 Data Privacy

Information submitted by CISOs through the Program is stored securely and is never shared with Vendors without the explicit, affirmative consent of the CISO. We will contact CISOs to discuss potential matches before making any introduction.

2.2 No Obligation

CISOs are under no obligation to accept an introduction, take a meeting, or purchase any product or service. Participation is entirely voluntary and free of charge.

2.3 Communication

By submitting the CISO Connect form, CISOs consent to receiving communications from Phish Tank Digital regarding potential vendor matches. CISOs may opt out at any time by contacting hello@phishtankdigital.com.

3. Vendor Participants

3.1 Application & Vetting

Submission of a Vendor application does not guarantee acceptance into the Program. Phish Tank Digital reserves the right to approve or reject any Vendor application at its sole discretion. Vendors may be removed from the Program at any time.

3.2 Finder's Fee

Accepted Vendors agree to pay Phish Tank Digital a finder's fee equal to 10% of the first-year revenue generated from any customer introduced through the CISO Connect Program. This fee applies to:

• The total contract value for the first 12 months of the customer relationship
• Any upsells or expansions within the first 12 months of the initial introduction
• Both direct sales and channel sales that originated from a CISO Connect introduction

The finder's fee is due within 30 days of the Vendor receiving payment from the introduced customer. If payment is received in installments, the finder's fee is due proportionally with each installment.

3.3 Attribution Window

A deal is considered attributed to CISO Connect if the customer signs a contract within 12 months of the introduction date. Introductions that do not result in a signed contract within this window are not subject to the finder's fee.

3.4 Marketing Communications

By applying to the Program, Vendors consent to receiving marketing communications from Phish Tank Digital regarding digital marketing services. Vendors may opt out of marketing communications without affecting their Program participation.

3.5 Reporting

Vendors agree to provide accurate reporting on the status of introduced opportunities within 5 business days of request. Failure to report may result in removal from the Program.

4. Data Handling

4.1 Data Storage

All data submitted through the Program is stored on Cloudflare's infrastructure within the United States. We implement industry-standard security measures to protect submitted information.

4.2 Data Retention

Submission data is retained for the duration of active participation in the Program plus 24 months. Participants may request deletion of their data by contacting hello@phishtankdigital.com.

4.3 No Sale of Data

We do not sell, rent, or trade participant data to third parties. Data is used exclusively for the purposes of operating the CISO Connect Program.

5. Limitation of Liability

Phish Tank Digital acts solely as a facilitator of introductions. We make no guarantees regarding the quality, reliability, or suitability of any Vendor's products or services. We are not a party to any agreement between CISOs and Vendors and bear no liability for the outcome of any introduction.

6. Modifications

We reserve the right to modify these terms at any time. Active participants will be notified of material changes via email at least 14 days before they take effect.

7. Contact

Questions about these terms should be directed to:

Phish Tank Digital
214 Main Street, Suite 182
El Segundo, CA 90245
hello@phishtankdigital.com