Terms of Service: Connected Services

Effective Date: July 22, 2026

These Connected Accounts and Integrations Terms of Service (“Integration Terms”) apply when you connect an email, bank, accounting, identity, document-storage, or other third-party service account to the Decipher platform.

These Integration Terms are part of the agreement governing your use of Decipher Customer Terms of Service. By connecting an account or using an integration, you agree to these terms.

1. Connected Accounts

Decipher may allow you to connect services such as:

• Google Workspace and Gmail
• Microsoft 365, Outlook, and Exchange Online
• Credit Report and UCC filling services
• Accounting, document-storage, identity, and other business systems

Available integrations and features may change over time.

2. Your Authorization

When you connect an account, you authorize Decipher to access and process information from that account according to:

• The permissions shown during the authorization process;
  
• The features enabled by you or your organization;
  
• Decipher’s Privacy Policy; and
  
• These Integration Terms.
  

You may be asked to authorize access through OAuth or another secure authorization method provided by the third-party service.

You enter your login credentials directly with the third-party provider. Decipher does not receive or store your Google, Microsoft, financial institution, or other third-party account password.

3. Authorized Uses

Depending on the integration and permissions granted,

Decipher may:

• Synchronize email messages, attachments, transactions, balances, accounting records, documents, or other authorized information;
• Display connected information within Decipher;
• Send, reply to, or forward email at your direction;
• Associate information with applications, loans, borrowers, contacts, or other Decipher records;
• Search, classify, extract, validate, organize, or summarize authorized information;
• Support underwriting, verification, servicing, compliance, reporting, and customer-requested workflows; and
• Use artificial intelligence or automated processing to provide authorized Decipher features.

Decipher will use connected-account information only as described in its Privacy Policy and the permissions presented to you.

4. Your Responsibilities

You represent that:

• You are authorized to connect and use the service account;
• You have authority to grant Decipher the requested access;
• Your use of the integration complies with applicable law and your organization’s policies;
• You will not connect an account belonging to another person or organization without authorization; and
• You will not use an integration to send unlawful, fraudulent, harmful, misleading, or unauthorized communications or actions.

If you connect an account on behalf of a company or other organization, you represent that you have authority to act for that organization.

Your organization may control whether integrations are available and may manage, restrict, or revoke your access.

5. Third-Party Services

Connected services are operated by third parties and are subject to their own terms, privacy policies, availability, security practices, and service limitations.

Decipher does not control and is not responsible for:

• A third-party provider’s systems or services;
• Changes to its APIs, permissions, pricing, or policies;
• Service interruptions or loss of access caused by the provider;
• Information provided by a third-party service; or
• Actions taken directly within a connected account outside Decipher.

6. Email Communications

When you use Decipher to send an email:

• You are responsible for the message, recipients, attachments, and instructions;
• The message may be sent through your connected email account;
• A copy may be retained by your email provider and within Decipher;
• The message may become part of a credit application, company, audit, or business record; and
• You must review any automatically generated or suggested message before sending it.

Decipher is not responsible for messages sent to an incorrect recipient because of information or instructions supplied by you.

7. Artificial Intelligence

Some integrations may use artificial intelligence or automated processing to summarize information, extract data, classify documents, suggest responses, or support workflows.
AI-generated results may be incomplete or inaccurate. You are responsible for reviewing results before using them for a lending, credit, legal, compliance, or other material decision.

Decipher’s automated features are intended to assist authorized users and are not a substitute for appropriate professional judgment or human review.

8. Permissions and Security

Decipher seeks to request only permissions reasonably necessary for enabled features.

You are responsible for protecting your Decipher and connected accounts, including by:

• Using secure passwords;
• Enabling multi-factor authentication when available;
• Keeping user access and permissions current;
• Promptly removing former employees or unauthorized users; and
• Reporting suspected unauthorized access.

You must not attempt to bypass security controls, access another user’s information, interfere with an integration, or use Decipher in a way that could damage

Decipher or a third-party service.

9. Disconnecting an Account

You or an authorized administrator may disconnect an integration through Decipher or revoke Decipher’s access through the third-party provider.

After access is revoked:

• Decipher will stop obtaining new information through that authorization;
  
• Features that rely on the connection may stop working; and
  
• Previously synchronized information may remain when it is part of a customer record, communication history, audit trail, backup, or legal or contractual retention requirement.
  

Disconnecting an account does not automatically delete previously synchronized records. Deletion requests are handled according to Decipher’s Privacy Policy and applicable customer instructions.

10. Availability and Changes

Integrations may occasionally be unavailable because of maintenance, third-party outages, permission changes, technical issues, security concerns, or provider requirements.

Decipher may add, modify, suspend, or discontinue an integration when reasonably necessary, including when:

• A provider changes or discontinues its service;
  
• Continued access presents a security or compliance risk;
  
• Required permissions are withdrawn;
• The integration is being misused; or
• Continued operation is no longer commercially or technically reasonable.

Decipher does not guarantee that every integration will always be available or operate without interruption.

11. Suspension or Termination

Decipher may suspend or terminate an integration if:

• Access is unauthorized;
• These Integration Terms are violated;
• The integration creates a security, legal, or operational risk;
• A third-party provider requires suspension;
• Required fees have not been paid; or
• The underlying Decipher account or customer agreement ends.

You may stop using an integration at any time by disconnecting it.

12. Disclaimer

Connected integrations are provided on an “as available” basis, subject to the warranties and obligations contained in the applicable Decipher customer agreement.

Decipher does not guarantee the accuracy, completeness, availability, or continued compatibility of information or services supplied by third-party providers.

To the extent permitted by law, Decipher is not responsible for losses caused solely by a third-party outage, inaccurate third-party information, revoked authorization, provider policy changes, or misuse of a connected account by an unauthorized person.

13. Privacy

Decipher’s collection and use of connected-account information are described in the Decipher Privacy Policy.

Decipher’s use of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

14. Changes to These Terms

Decipher may update these Integration Terms as its integrations, services, or legal obligations change.

The updated terms will be posted with a revised effective date. Material changes will be communicated when required by law or applicable provider requirements.

Continued use of an integration after updated terms become effective constitutes acceptance of the updated terms, except where additional consent is legally required.

15. Contact Us

Questions about connected accounts or these Integration

Terms may be directed to: