Artificial Intelligence Addendum

(a) Conga may collect, use, and disclose quantitative and other usage information, including data derived from Customer Data, (“Service Attributes”) for industry benchmarking, analytics, general industry trend reports, and other business purposes. Service Attributes will be considered in the aggregate form only and will be anonymized, so as not to identify Customer or its Users, or its content. Conga retains all rights, title, and interest in and to Service Attributes. 

(b) Conga’s Subscription Services may include features that utilize Artificial Intelligence (“AI”) technologies to provide certain functionalities or enhance performance, automation, analytics, and user experience. For the purpose of this Agreement, “Artificial Intelligence” or “AI” means a digital business application or feature thereof, that uses machine learning techniques to generate insights, automate tasks, or perform actions for business. Artificial Intelligence includes generative AI and agentic AI.  

Customer acknowledges and agrees that such features may generate outputs based on Customer inputs and other contextual data. Conga shall be solely responsible, under this Agreement for selecting, retaining, and managing any AI systems provisioned with the Subscription Services. Conga has established a cross-functional AI Governance Committee responsible for oversight and use of AI within the Subscription Services, with a focus on risk management, accountability, and compliance.  

Conga retains all right, title, and interest in its artificial intelligence and machine learning models, algorithms, training data, and any pre-built prompts, templates, or configurations provided by Conga (“Conga AI Materials”). As between the parties, Customer retains all right, title, and interest in any data, prompts, or content provided by Customer in connection with the AI or machine learning features of the Subscription Services (“AI Inputs”) and any content generated therefrom (“AI Outputs”), excluding any underlying Conga AI Materials. Customer grants Conga a limited, non-exclusive license to use AI Inputs and AI Outputs (a) as reasonably necessary to provide, maintain, or improve the Subscription Services for Customer’s benefit, or (b) as expressly authorized in writing by Customer. Except for the foregoing, Conga shall not use AI Inputs or AI Outputs to train or improve any AI or machine learning model. For clarity, this restriction does not limit Conga’s rights to Service Attributes as set forth in Section (c) herein. 

(c) Conga shall not use Customer Data to train global or foundational models that serve multiple customers. Any model training using Customer Data shall be limited to models specific to Customer’s instance or tenant. Conga does not use Customer Data to train third-party foundational models (e.g., Azure OpenAI GPT). Conga may use Service Attributes for the purposes of improving its Subscription Services, training and refining AI models, conducting analytics, and developing new features, but shall not be used to replicate or disclose Customer Data to other customers and, more broadly, to third parties. 

Conga implements technical and organizational measures designed to protect the confidentiality, integrity, and security of data processed by AI systems and to ensure such data is used only for intended and authorized purposes. 

(d) Conga shall maintain transparency in the deployment of AI, providing clear and comprehensible information about AI’s capabilities, limitations, and decision-making processes. Conga shall not replicate or disclose any Customer Data, including Customer’s proprietary content and user input, to any third party (except as otherwise permitted in this Agreement concerning Conga’s subprocessors), including other customers. Conga will not permit any third party to use, either directly or indirectly, any Customer Data or AI Output to train, fine-tune, validate, test, or otherwise develop any AI system or model.  

In furtherance of transparency and explainability, Conga strives to design AI-enabled features such that users can understand, at an appropriate level, how AI-generated insights, recommendations, or outputs are produced, including material limitations of such features. The AI Governance Committee periodically reviews AI-related risks, controls, and mitigation measures, including risks relating to data protection, security, and appropriate human oversight. 

(e) Customer acknowledges that AI-generated outputs may be inaccurate, incomplete, or misleading. Conga makes no warranty, express or implied, regarding the accuracy, completeness, non-infringement, or fitness for a particular purpose of any AI-generated output. Conga shall ensure accountability by implementing robust governance frameworks and oversight mechanisms. Customer shall be solely responsible for evaluating and validating AI-generated outputs prior to use. Customer acknowledges and agrees that it shall not rely on AI-generated outputs as the sole basis for any decision that may have legal, financial, regulatory, or other material impact, and that appropriate human review and independent judgment should be exercised by Customer. 

AI agents use or incorporate AI technology that perform actions based on Customer’s direction and configuration. Customer’s users may direct AI agents to take certain actions on behalf of Customer. Customer shall be solely responsible for its use of AI agents, including without limitation determining whether the actions by AI agents are appropriate, authorizing and supervising actions performed by AI agents, and reviewing and validating all outputs generated by AI agents. 

To the maximum extent permitted by applicable law, Conga shall not be liable for any losses, damages, or claims — including third-party claims — arising from Customer's use of, reliance on, or actions taken based on AI-generated outputs or actions performed by agentic AI capabilities. 

Conga maintains human oversight over AI-enabled features and remains accountable for the design and operation of such features, which are intended to support, and not replace, human decision-making. Conga does not monitor or review AI-generated outputs, and Customer is responsible for evaluating any such output before relying on it. 

Conga’s AI governance and risk management practices are informed by, and are evolving to align with, the National Institute of Standards and Technology (NIST) Artificial Intelligence Risk Management Framework (AI RMF), including its core functions of Govern, Map, Measure, and Manage.  

(f) Conga shall maintain internal policies and procedures for the ethical and responsible use of AI, including but not limited to oversight of training data, bias mitigation, and human interpretability. Conga’s use of AI shall comply with applicable laws and reflect industry standards for transparency, fairness, and data protection. Conga shall provide full and prompt cooperation with and assistance to Customer with respect to any AI-related transparency obligations, AI impact assessments, or other AI-related regulatory obligations that may be required by Customer under applicable laws.  

Conga provides internal training and guidance to relevant personnel on the ethical use of AI and responsible development and deployment practices. Where applicable, Conga may provide Customer with configuration options or controls relating to AI-enabled features, including the ability to limit or disable certain AI-driven functionality. Conga’s AI governance program is subject to ongoing review and improvement to address emerging risks, regulatory developments, and evolving industry best practices.