Enterprise API Agreement / Order Form

This Enterprise API Agreement / Order Form (“Agreement”) establishes the contractual framework under which BANI GLOBAL INDUSTRIES LLP (“BANI GLOBAL INDUSTRIES LLP”, “StampMitra”, “we”, “us”, or “our”) may provide enterprise API access, higher-volume usage, customized commercial arrangements, enterprise support, implementation assistance, enhanced operational coordination, or other enterprise services to an eligible enterprise customer (“Customer”, “you”, or “your”).

This document is intended to operate as a master enterprise contractual framework and Order Form structure.

Commercial, technical, service-level, security, implementation, volume, support, pricing, or other terms shall become binding only to the extent expressly completed and accepted in an applicable Order Form, Schedule, Statement of Work, Enterprise Addendum, or other written commercial document.

Blank fields, optional provisions, or unselected alternatives do not create a contractual commitment.

No specific pricing, minimum volume, service credit, uptime percentage, support response time, implementation timeline, liability cap, RTO, RPO, arbitration seat, or other commercial commitment is created unless expressly completed in the applicable executed Order Form or Agreement.

This Agreement must be read together with the applicable StampMitra Developer Terms of Service and other policies identified herein.

1.1 This Agreement establishes the general terms applicable to Enterprise API Services.

1.2 Each Enterprise customer transaction shall ordinarily be documented through an Order Form.

1.3 An Order Form may specify:

• (a) Customer legal identity;
• (b) authorized signatory;
• (c) services;
• (d) API products;
• (e) environments;
• (f) API versions;
• (g) commercial pricing;
• (h) subscription fees;
• (i) usage charges;
• (j) minimum commitments;
• (k) implementation charges;
• (l) support arrangements;
• (m) service levels;
• (n) security requirements;
• (o) data-processing requirements;
• (p) effective dates;
• (q) term;
• (r) renewal;
• (s) payment terms;
• (t) special conditions; and
• (u) other agreed commercial terms.

2.1 Enterprise access is subject to StampMitra's verification and eligibility requirements.

2.2 StampMitra may require reasonable information concerning:

• (a) Customer identity;
• (b) registered legal name;
• (c) registered address;
• (d) authorized representative;
• (e) business purpose;
• (f) intended API usage;
• (g) expected volume;
• (h) jurisdictions;
• (i) data categories;
• (j) security requirements; and
• (k) other information reasonably necessary for onboarding.

2.3 Enterprise access may be refused, delayed, restricted, or made subject to additional conditions where required by law, security requirements, commercial risk, service capacity, or eligibility requirements.

3.1 An Order Form becomes binding when duly accepted by authorized representatives of the parties or through another legally valid acceptance mechanism expressly identified by StampMitra.

3.2 Each Order Form shall identify the applicable Customer and services.

3.3 An Order Form may incorporate this Agreement by reference.

3.4 Multiple Order Forms may exist between the same parties.

3.5 Each Order Form shall be interpreted together with this Agreement.

4.1 The following information may be completed for each Enterprise engagement:

5.1 The applicable Order Form shall identify the StampMitra services authorized for the Customer.

5.2 Services may include, where expressly agreed:

• (a) API access;
• (b) verification services;
• (c) e-Stamp services;
• (d) e-Sign services;
• (e) legal-document-related services;
• (f) enterprise API access;
• (g) higher-volume access;
• (h) implementation support;
• (i) technical integration support;
• (j) dedicated operational coordination;
• (k) reporting;
• (l) other authorized API services; or
• (m) other services expressly described in the Order Form.

5.3 No service is included merely because it appears in public Documentation.

6.1 The Order Form should identify the relevant API or service.

7.1 Enterprise access may include API entitlements expressly identified in the Order Form.

7.2 Entitlements may be limited by:

• (a) API;
• (b) environment;
• (c) volume;
• (d) account;
• (e) project;
• (f) geography;
• (g) use case;
• (h) technical configuration;
• (i) security requirements; or
• (j) commercial plan.

7.3 An enterprise entitlement does not create unrestricted access to all StampMitra APIs.

8.1 Enterprise Customers may receive Sandbox access where applicable.

8.2 Sandbox is intended for development, testing, integration, and validation.

8.3 Sandbox must not be used to process Production personal data or Production transactions unless expressly authorized.

8.4 Sandbox access does not constitute authorization to conduct uncontrolled load testing or security testing against StampMitra infrastructure.

9.1 Production access is subject to applicable verification, security, technical, and commercial requirements.

9.2 StampMitra may require successful testing before Production activation.

9.3 Production credentials must be securely managed by the Customer.

9.4 Production access may be restricted or suspended in accordance with this Agreement and applicable policies.

10.1 StampMitra may issue API credentials to authorized Customer applications.

10.2 Credentials remain security-sensitive information.

10.3 Customer must:

• (a) restrict access;
• (b) store credentials securely;
• (c) rotate credentials when required;
• (d) immediately report compromise;
• (e) avoid public disclosure; and
• (f) maintain appropriate internal access controls.

10.4 Customer must not sell, publish, share, or transfer credentials except where expressly authorized.

11.1 Enterprise access may be organized through workspaces, projects, applications, environments, or equivalent structures.

11.2 Customer is responsible for assigning appropriate internal permissions.

11.3 Customer must promptly remove access for personnel who no longer require it.

12.1 Customer may authorize its employees, contractors, and service providers to use Enterprise API Services for the Customer's authorized purposes.

12.2 Customer remains responsible for its Authorized Users' compliance with applicable terms to the extent permitted by law and contract.

12.3 Customer must maintain reasonable internal access controls.

13.1 Unless expressly authorized, Enterprise API credentials are intended for the Customer's own authorized applications.

13.2 Use for client applications may be permitted where expressly approved.

13.3 A Customer must not represent that a client is itself the contracting party unless the applicable arrangement provides otherwise.

13.4 Separate credentials or projects may be required for separate customers, applications, or use cases.

14.1 Resale, sublicensing, white-label distribution, API aggregation, or embedding StampMitra services into a third-party commercial product may require express written authorization.

14.2 The applicable Order Form shall identify any approved resale or white-label rights.

14.3 No such right shall be implied merely because the API technically supports the relevant functionality.

15.1 An Order Form may establish:

• (a) minimum monthly volume;
• (b) annual volume;
• (c) committed API calls;
• (d) committed transactions;
• (e) reserved capacity;
• (f) minimum spend; or
• (g) other commercial commitments.

15.2 No minimum volume exists unless expressly stated in the applicable Order Form.

16.1 Enterprise access remains subject to documented technical limits.

16.2 Limits may include:

• (a) requests per second;
• (b) concurrent requests;
• (c) transaction volume;
• (d) payload size;
• (e) storage;
• (f) webhook throughput;
• (g) connection limits; or
• (h) other service-specific restrictions.

16.3 Enterprise-specific limits shall apply only where expressly agreed.

17.1 Customer shall provide reasonable advance information regarding material expected increases in volume where such information is relevant to capacity planning.

17.2 StampMitra may require additional commercial or technical arrangements for substantial volume increases.

17.3 Unplanned extreme traffic may be subject to protective controls.

18.1 High-volume usage may require:

• (a) capacity review;
• (b) architecture review;
• (c) rate-limit adjustments;
• (d) commercial amendments;
• (e) implementation planning;
• (f) additional security controls; or
• (g) other reasonable measures.

18.2 StampMitra shall not be required to provide unreserved capacity merely because a Customer previously used lower volumes.

19.1 Enterprise implementation services shall be included only if expressly identified in the Order Form or Statement of Work.

19.2 Unless expressly agreed, Customer is responsible for its own application development and implementation.

19.3 StampMitra may provide reasonable technical documentation and support according to the applicable commercial arrangement.

20.1 Where required, the parties may establish an implementation plan covering:

• (a) technical integration;
• (b) Sandbox testing;
• (c) security review;
• (d) Production readiness;
• (e) go-live;
• (f) monitoring;
• (g) support; and
• (h) post-launch activities.

20.2 Target dates are not guaranteed unless expressly identified as binding contractual milestones.

21.1 Customer shall provide information and cooperation reasonably necessary for implementation.

21.2 Delays caused by Customer dependencies may extend corresponding implementation timelines.

22.1 Enterprise support shall be provided according to the applicable Order Form.

22.2 Support may include:

• (a) technical assistance;
• (b) API integration guidance;
• (c) incident coordination;
• (d) service-status information;
• (e) troubleshooting;
• (f) documentation guidance; and
• (g) other expressly agreed support.

22.3 Custom software development is not included unless expressly agreed.

23.1 Enterprise support channels may be specified in the Order Form.

23.2 Customer must keep designated contacts reasonably current.

24.1 An Enterprise SLA may be attached to the applicable Order Form.

24.2 Unless an Enterprise SLA expressly states otherwise, the general StampMitra API SLA & Service Availability Policy shall apply.

24.3 No specific uptime commitment is created by this Agreement alone.

25.1 Service credits shall apply only where expressly provided in the applicable Enterprise SLA or Order Form.

25.2 No service credit is automatically due merely because an outage or degradation occurs.

25.3 Any agreed service-credit methodology shall be stated expressly.

26.1 Customer shall comply with the StampMitra API Security Policy.

26.2 Additional enterprise security requirements may be specified in a Security Addendum or Order Form.

26.3 Customer shall notify StampMitra of material security incidents affecting the integration where required by applicable law or contract.

27.1 Enterprise Customers may request reasonable security information.

27.2 Security questionnaires, assessments, audits, or certifications shall be subject to reasonable scope, confidentiality, security, and resource limitations.

27.3 StampMitra does not represent that it holds a particular certification unless expressly stated in an authorized commercial document.

28.1 Customer must not conduct penetration testing, vulnerability scanning, load testing, denial-of-service testing, or other intrusive testing against StampMitra infrastructure without prior written authorization.

28.2 Authorized testing must follow the applicable security rules and scope.

29.1 The parties shall comply with applicable data protection law.

29.2 Where StampMitra processes Customer Data as a processor or equivalent role, the applicable Data Processing Addendum shall govern that processing.

29.3 The parties shall cooperate reasonably concerning applicable data protection obligations.

30.1 A DPA may be incorporated into the Enterprise relationship where required.

30.2 The DPA shall identify, where appropriate:

• (a) processing subject matter;
• (b) duration;
• (c) nature;
• (d) purpose;
• (e) categories of data;
• (f) categories of Data Principals;
• (g) security measures;
• (h) subprocessors;
• (i) incident obligations; and
• (j) deletion or return requirements.

31.1 Customer Data remains subject to the ownership and rights allocation specified in the applicable Agreement and DPA.

31.2 Customer grants StampMitra the rights reasonably necessary to provide the contracted services.

31.3 StampMitra shall not acquire ownership of Customer Data merely by processing it.

32.1 Customer is responsible for ensuring that data submitted through the API is lawfully collected, accurate where required, and appropriate for the requested service.

32.2 Customer shall not submit unnecessary personal data.

33.1 Customer remains responsible for providing End Users with appropriate notices and obtaining required permissions, consents, authorizations, or instructions.

33.2 StampMitra does not assume responsibility for Customer's independent relationship with its End Users.

34.1 Customer shall not submit sensitive or high-risk information unless the relevant StampMitra service expressly supports such information.

34.2 Additional safeguards may be required for high-risk data categories.

35.1 Customer must comply with applicable requirements concerning children's data.

35.2 Customer must not use Enterprise API Services for unlawful tracking, profiling, or processing of children.

36.1 Where a specific data-location commitment is required, it must be expressly stated in the applicable Order Form or DPA.

36.2 No particular geographic hosting location is guaranteed by this Agreement alone.

37.1 Cross-border processing may occur where legally permitted and operationally necessary.

37.2 Additional contractual mechanisms may apply where required by applicable law.

38.1 StampMitra may use Authorized Underlying Service Providers, external systems, data sources, infrastructure providers, payment systems, verification systems, government-related systems, or other third parties.

38.2 StampMitra may route requests dynamically through appropriate external systems.

38.3 Customer acknowledges that enterprise services may depend on such external systems.

38.4 Specific upstream provider identities are not required to be disclosed unless legally or contractually required.

39.1 Customer shall not attempt to discover, circumvent, bypass, contract around, or interfere with confidential upstream provider relationships.

39.2 This does not restrict lawful regulatory rights or mandatory disclosures.

40.1 Certain services may depend upon third-party infrastructure or external systems.

40.2 StampMitra shall not be liable for an external system failure except to the extent liability is expressly allocated under the applicable Agreement.

40.3 The Third-Party & Underlying Services Policy applies.

41.1 Certain services may involve government-related systems, authorities, registries, verification systems, stamping systems, or regulatory processes.

41.2 StampMitra does not guarantee that a government authority will approve, accept, process, or complete a transaction.

42.1 Where e-Stamp services are included, the applicable Verification, e-Stamp & e-Sign Service Terms shall apply.

42.2 Customer remains responsible for providing accurate transaction information.

42.3 StampMitra does not provide legal advice concerning stamp duty, instrument classification, execution, registration, or jurisdiction.

43.1 Where e-Sign services are included, the applicable Service Terms shall apply.

43.2 Customer is responsible for ensuring that the signer has appropriate authority and that required consent and instructions have been obtained.

44.1 Verification results may depend on external data sources and service availability.

44.2 StampMitra does not warrant that every verification request will produce a successful or definitive result.

45.1 Where document-related services are provided, Customer is responsible for the accuracy and legality of submitted documents and instructions.

45.2 StampMitra does not assume responsibility for the underlying legal validity of Customer-generated documents unless expressly agreed.

46.1 Customer shall use the current applicable API Documentation.

46.2 API Documentation & Developer License Terms apply to the Customer's use of technical documentation.

47.1 API versioning, deprecation, suspension, and retirement shall be governed by the StampMitra API Versioning, Suspension & Deprecation Policy.

47.2 Enterprise Customers may receive an agreed migration arrangement where expressly documented.

48.1 Any specific backward-compatibility commitment must be expressly identified in the applicable Order Form or Enterprise SLA.

48.2 No indefinite backward compatibility is created by this Agreement.

49.1 StampMitra may make changes required for:

• (a) security;
• (b) legal compliance;
• (c) regulatory requirements;
• (d) infrastructure;
• (e) performance;
• (f) external dependency changes;
• (g) API evolution; or
• (h) service improvement.

49.2 Material contractual changes shall be handled according to the applicable agreement and notice requirements.

50.1 StampMitra may make immediate changes where reasonably necessary to address:

• (a) security vulnerabilities;
• (b) active attacks;
• (c) fraud;
• (d) legal requirements;
• (e) regulatory directions;
• (f) infrastructure emergencies;
• (g) external service failures; or
• (h) threats to service integrity.

50.2 StampMitra may provide notice after implementation where advance notice is not reasonably practicable.

51.1 Customer shall promptly notify StampMitra of a material security incident affecting StampMitra credentials, API access, or Customer systems connected to the services where notification is required by applicable law or contract.

51.2 Customer shall cooperate reasonably in containment and remediation.

52.1 StampMitra shall handle security incidents in accordance with its applicable security and incident-response framework.

52.2 Notification shall be provided where required by applicable law, contract, or applicable incident procedures.

53.1 Customer shall maintain an operational security contact where required by the Order Form.

54.1 Any Customer audit rights must be expressly stated in the applicable Agreement or Order Form.

54.2 Audits shall be:

• (a) reasonable in scope;
• (b) conducted during reasonable business periods;
• (c) subject to confidentiality;
• (d) subject to security requirements;
• (e) designed to minimize service disruption; and
• (f) subject to reasonable cost allocation where applicable.

55.1 StampMitra may reasonably cooperate with Customer security questionnaires.

55.2 Repetitive, disproportionate, or technically unreasonable requests may be addressed through available security documentation or other reasonable evidence.

56.1 Where available and appropriate, StampMitra may provide relevant security, privacy, or compliance documentation.

56.2 StampMitra does not warrant that any particular certification or attestation is available unless expressly stated.

57.1 Each party shall protect the other's Confidential Information.

57.2 Confidential Information may include:

• (a) technical information;
• (b) pricing;
• (c) commercial arrangements;
• (d) security information;
• (e) Customer Data;
• (f) API credentials;
• (g) business plans;
• (h) non-public documentation; and
• (i) other information reasonably understood to be confidential.

58.1 Confidentiality obligations do not apply to information that the receiving party can demonstrate:

• (a) was already lawfully known;
• (b) becomes public without breach;
• (c) is independently developed;
• (d) is lawfully received from another source; or
• (e) must be disclosed by law, subject to applicable requirements.

59.1 A party may disclose information where legally required.

59.2 Where legally permitted, the receiving party may provide reasonable notice before disclosure.

60.1 StampMitra retains all rights in its APIs, Documentation, software, platforms, Marks, systems, technical architecture, and other intellectual property except rights expressly granted to Customer.

60.2 Customer retains its rights in its own materials and Customer Data.

61.1 Customer grants StampMitra the limited rights necessary to process Customer materials to provide the contracted services.

61.2 Customer represents that it has the necessary rights and permissions to submit such materials.

62.1 Customer may provide feedback concerning Enterprise API Services.

62.2 StampMitra may use feedback for service improvement without transferring Customer Data or Confidential Information.

63.1 Enterprise fees shall be stated in the applicable Order Form.

63.2 Fees may include:

• (a) onboarding fees;
• (b) subscription fees;
• (c) API usage fees;
• (d) transaction charges;
• (e) implementation fees;
• (f) support fees;
• (g) reserved-capacity fees;
• (h) professional-service fees; or
• (i) other agreed charges.

63.3 No fee exists unless expressly stated or otherwise incorporated into the applicable commercial arrangement.

64.1 The applicable Order Form may contain:

65.1 Applicable taxes shall be charged in accordance with law.

65.2 Customer is responsible for taxes applicable to its purchases except taxes imposed on StampMitra's income to the extent required by law.

65.3 GST and other applicable indirect taxes may be charged separately where legally applicable.

66.1 StampMitra shall issue invoices according to the applicable commercial arrangement.

66.2 Customer shall provide accurate billing information.

66.3 Customer shall promptly notify StampMitra of material billing discrepancies.

67.1 Payment terms shall be specified in the applicable Order Form.

68.1 Late payment may result in:

• (a) interest or charges where expressly agreed or legally permitted;
• (b) service restriction;
• (c) suspension;
• (d) withholding of new transactions; or
• (e) termination,

subject to the applicable Agreement and law.

69.1 StampMitra may retry or request an alternative payment method following a failed payment.

69.2 Continued payment failure may result in suspension in accordance with the applicable Billing Policy and Agreement.

70.1 Refunds shall be governed by the Billing, API Credits & Refund Policy and applicable Order Form.

70.2 No automatic refund is created merely because a service was not used.

70.3 Transaction-specific refunds may depend on transaction status, underlying service rules, applicable law, and commercial terms.

71.1 Enterprise Customers may purchase or receive API credits if expressly offered.

71.2 Credit validity, consumption, refundability, transferability, and expiration shall be governed by the applicable commercial terms.

72.1 Discounts, coupons, credits, trials, waivers, or promotional pricing shall apply only according to their stated conditions.

72.2 Promotional terms shall not modify unrelated contractual provisions.

73.1 StampMitra may measure API usage for billing, capacity planning, security, reporting, and service management.

73.2 System records shall ordinarily be used to determine billable usage unless an error is demonstrated through a reasonable reconciliation process.

74.1 Customer must notify StampMitra of material billing disputes within the period specified in the applicable Order Form or, if none is specified, within a reasonable period after the relevant invoice.

74.2 The parties shall cooperate in good faith to reconcile disputed usage.

75.1 Customer shall not set off undisputed amounts against disputed claims unless expressly agreed or legally permitted.

76.1 The term of each Enterprise engagement shall be stated in the applicable Order Form.

77.1 Renewal shall occur only according to the applicable Order Form.

77.2 Renewal may be automatic or manual only where expressly stated.

78.1 Either party may terminate for convenience only where such right is expressly provided in the applicable Order Form or Agreement.

78.2 Any required notice period shall be stated in the applicable commercial document.

79.1 Either party may terminate for material breach where the breach remains uncured after any applicable contractual cure period.

79.2 Immediate termination may be permitted where the breach is incapable of cure or where immediate termination is otherwise permitted by law or contract.

80.1 StampMitra may immediately restrict or suspend access where reasonably necessary to address:

• (a) security threats;
• (b) fraud;
• (c) unauthorized access;
• (d) API abuse;
• (e) material legal risk;
• (f) serious data-protection risk;
• (g) payment default where permitted;
• (h) material service risk;
• (i) unlawful use; or
• (j) threats to other customers or infrastructure.

81.1 Where appropriate, StampMitra may review a suspension after receiving relevant remediation information.

81.2 Reinstatement is subject to security, legal, technical, and commercial considerations.

82.1 Upon termination:

• (a) API access may be disabled;
• (b) credentials may be revoked;
• (c) outstanding amounts remain payable;
• (d) applicable data-retention requirements continue;
• (e) confidential information shall continue to be protected; and
• (f) surviving provisions remain effective.

83.1 Where contractually agreed, Customer may receive a reasonable opportunity to export Customer Data before termination.

83.2 Export may be subject to security, technical, legal, and operational limitations.

84.1 Customer Data shall be handled according to the applicable DPA, retention schedule, service terms, and legal requirements.

84.2 Legal, accounting, security, audit, and dispute records may be retained after termination.

85.1 StampMitra may maintain reasonable business-continuity and disaster-recovery arrangements.

85.2 No specific RTO or RPO is created unless expressly stated in an Enterprise SLA or Order Form.

86.1 Neither party shall be liable for failure caused by circumstances beyond reasonable control, including:

• (a) natural disasters;
• (b) war;
• (c) civil disturbance;
• (d) governmental action;
• (e) telecommunications failure;
• (f) major infrastructure failure;
• (g) widespread cyberattack;
• (h) external service failure;
• (i) epidemic or public-health emergency; or
• (j) other comparable events.

86.2 Financial obligations accrued before the event are not automatically excused.

87.1 If a change in law or regulation materially affects an Enterprise Service, StampMitra may modify, restrict, suspend, or discontinue the affected functionality as reasonably necessary.

87.2 The parties may negotiate appropriate amendments where commercially appropriate.

88.1 StampMitra may discontinue a service where reasonably necessary due to:

• (a) legal requirements;
• (b) security;
• (c) external dependency;
• (d) commercial viability;
• (e) technical retirement;
• (f) regulatory requirements; or
• (g) other legitimate business reasons.

88.2 Notice shall be provided where required by applicable law or contract.

89.1 Where practical, StampMitra may provide migration guidance following a service or API change.

89.2 Customer remains responsible for implementing migration within the applicable timeline.

90.1 StampMitra may need to modify services due to changes in external systems, regulatory interfaces, verification systems, payment systems, or other dependencies.

90.2 Such changes may occur without Customer control over the external system.

91.1 Pricing, negotiated discounts, capacity arrangements, implementation plans, support arrangements, and other commercial terms may constitute Confidential Information.

91.2 Customer shall not publicly disclose confidential commercial terms except as permitted by the Agreement or law.

92.1 Neither party may publicly announce the commercial relationship using the other party's name or Marks without appropriate authorization, except where legally required.

93.1 StampMitra shall not use Customer Marks in marketing materials without appropriate authorization, except where permitted under an agreed publicity arrangement.

94.1 Customer case studies, testimonials, logos, and public references require appropriate Customer authorization unless otherwise agreed.

95.1 No non-solicitation obligation shall apply unless expressly agreed in a separate written commercial arrangement.

96.1 No exclusivity obligation exists unless expressly stated in an executed Order Form or Agreement.

97.1 Customer may use other service providers unless an enforceable exclusivity arrangement expressly states otherwise.

97.2 Customer must not use StampMitra services to violate another provider's rights or contractual obligations.

98.1 Each party shall comply with laws applicable to its respective activities under the Agreement.

98.2 Customer is responsible for determining the laws applicable to its own business and End Users.

99.1 Customer shall not use StampMitra services for unlawful activities, fraud, prohibited financial activity, sanctions evasion, terrorism, credential theft, malware, or other prohibited purposes.

99.2 The API Acceptable Use Policy applies.

100.1 Each party shall comply with applicable anti-bribery and anti-corruption laws.

100.2 Neither party is authorized to make improper payments on behalf of the other.

101.1 The parties shall comply with applicable trade-control and export laws to the extent applicable to their respective activities.

102.1 StampMitra may maintain records reasonably necessary to administer the Enterprise relationship.

102.2 Customer shall maintain appropriate records demonstrating authorized use of the services.

103.1 Electronic records, logs, invoices, acceptance records, API records, and electronic communications may be used as evidence of transactions and instructions, subject to applicable law.

104.1 The parties may execute this Agreement and Order Forms electronically.

104.2 Electronic signatures and electronic acceptance shall have effect to the extent permitted by applicable law.

105.1 Each person executing an Order Form represents that they have appropriate authority to bind the relevant party.

106.1 Customer represents that:

• (a) it is validly existing where applicable;
• (b) it has authority to enter into the Agreement;
• (c) its use case is lawful;
• (d) it has appropriate rights to submit Customer Data;
• (e) it will comply with applicable law; and
• (f) it will comply with applicable StampMitra policies.

107.1 StampMitra represents that it has authority to enter into this Agreement.

107.2 Except as expressly stated, StampMitra does not make additional warranties concerning uninterrupted availability, specific transaction outcomes, third-party systems, or regulatory approvals.

108.1 Except to the extent expressly stated in the Agreement and permitted by applicable law, services are provided subject to the applicable service terms and without implied warranties.

108.2 Nothing excludes warranties or rights that cannot lawfully be excluded.

109.1 StampMitra does not provide legal, tax, accounting, regulatory, financial, or other professional advice merely by providing API Services.

109.2 Customer shall obtain appropriate professional advice for its business and legal obligations.

110.1 Customer indemnification obligations, if any, shall be governed by the applicable Developer Terms or expressly agreed Enterprise Agreement.

110.2 No additional indemnity is created by this clause unless expressly stated.

111.1 Any StampMitra indemnification obligation shall apply only where expressly stated in the applicable Agreement or Order Form.

112.1 Any limitation of liability shall be governed by the applicable Developer Terms or Enterprise Agreement.

112.2 If an Enterprise-specific liability cap is negotiated, it must be expressly stated below:

112.3 No amount is deemed agreed merely because the field is included in this template.

113.1 Any exclusion of indirect, incidental, special, consequential, exemplary, or similar damages shall be governed by the applicable executed agreement and mandatory law.

113.2 Nothing in this template independently creates such an exclusion.

114.1 Nothing in this Agreement shall exclude or limit liability to the extent such exclusion or limitation is prohibited by applicable law.

115.1 Any insurance requirement shall apply only if expressly stated in the applicable Order Form or Enterprise Agreement.

116.1 Any enhanced business-continuity requirement must be expressly stated in the applicable Enterprise SLA or Order Form.

116.2 No specific RTO or RPO is created by this Agreement alone.

117.1 StampMitra may maintain disaster-recovery procedures appropriate to its services.

117.2 Specific Customer recovery commitments require express agreement.

118.1 Customer shall maintain reasonable continuity plans for its own systems, including appropriate handling of StampMitra service interruptions.

119.1 StampMitra is not responsible for failures caused solely by Customer systems, Customer networks, Customer applications, Customer credentials, Customer configurations, or other Customer-controlled dependencies.

120.1 Customer is responsible for third-party systems integrated into its own application unless StampMitra expressly assumes responsibility.

121.1 StampMitra may monitor API usage for:

• (a) security;
• (b) performance;
• (c) billing;
• (d) capacity;
• (e) abuse prevention;
• (f) troubleshooting;
• (g) compliance; and
• (h) service management.

121.2 Customer shall not interfere with legitimate monitoring.

122.1 StampMitra may maintain operational, security, billing, and audit logs.

122.2 Customer shall maintain logs reasonably necessary to investigate material incidents affecting the integration.

123.1 Customer shall not use Enterprise access to:

• (a) circumvent limits;
• (b) conduct unauthorized scanning;
• (c) enumerate data;
• (d) harvest information;
• (e) attack systems;
• (f) interfere with services;
• (g) reverse engineer confidential systems; or
• (h) otherwise violate the Acceptable Use Policy.

124.1 Automated systems may be used for authorized API purposes.

124.2 Automation must respect authentication, rate limits, idempotency, security, privacy, and other applicable controls.

125.1 Customer may integrate StampMitra into AI-enabled applications where lawful and expressly supported.

125.2 Customer remains responsible for:

• (a) prompts;
• (b) agent actions;
• (c) user authorization;
• (d) output handling;
• (e) security;
• (f) privacy;
• (g) human oversight where required; and
• (h) compliance.

126.1 High-risk automated uses may require additional review or restrictions.

126.2 StampMitra may decline use cases that create disproportionate legal, security, privacy, or operational risk.

127.1 Retention shall be governed by the StampMitra Developer Data Retention & Deletion Schedule, applicable DPA, service terms, and law.

127.2 Enterprise-specific retention requirements must be expressly stated.

128.1 Deletion shall be performed according to applicable contractual, technical, legal, and operational requirements.

128.2 Immediate deletion from every system, backup, external service, or legally preserved record is not guaranteed.

129.1 Any Enterprise data-export right shall be specified in the applicable Order Form or DPA.

129.2 Export shall be subject to security and technical safeguards.

130.1 Material service incidents shall be managed according to the applicable StampMitra incident procedures and SLA.

130.2 Customer cooperation may be required during incident investigation.

131.1 StampMitra may communicate service status through authorized channels.

131.2 Enterprise Customers may receive additional communications where expressly agreed.

132.1 StampMitra may perform planned or emergency maintenance.

132.2 Maintenance shall be handled according to the applicable SLA and operational procedures.

133.1 Where an Enterprise SLA expressly provides service credits, the SLA shall specify whether such credits constitute the exclusive remedy for the relevant service-level failure.

133.2 No such limitation applies unless expressly agreed.

134.1 Enterprise escalation procedures may be specified in the Order Form.

135.1 Enterprise Customers may raise grievances through the applicable StampMitra grievance mechanism.

135.2 The StampMitra Developer Grievance Redressal Policy applies where applicable.

136.1 Each party may retain reasonable evidence concerning:

• (a) acceptance;
• (b) usage;
• (c) billing;
• (d) security;
• (e) incidents;
• (f) support;
• (g) contractual amendments; and
• (h) other relevant events.

137.1 Records shall be retained according to applicable law, the Retention Schedule, DPA, and contractual requirements.

138.1 Formal contractual notices shall be sent through the notice mechanism specified in the applicable Order Form or Agreement.

StampMitra Notice Contact: [email protected]

138.2 Technical support notices do not necessarily constitute formal legal notices.

139.1 Customer may not assign this Agreement in a manner prohibited by applicable law or contract without required consent.

139.2 StampMitra may assign the Agreement as part of a restructuring, reorganization, merger, acquisition, or transfer of business, subject to applicable law and contractual requirements.

140.1 StampMitra may use affiliates, contractors, processors, subprocessors, and service providers to perform services, subject to applicable contractual and legal requirements.

141.1 The parties are independent contracting parties.

141.2 Neither party has authority to bind the other except as expressly authorized.

142.1 This Agreement does not create an agency, partnership, joint venture, employment relationship, or fiduciary relationship.

143.1 Unless otherwise expressly stated:

• (a) mandatory applicable law prevails;
• (b) executed Order Form or Enterprise Agreement prevails over general commercial terms to the extent of conflict;
• (c) DPA governs processor-specific data-processing matters;
• (d) Enterprise SLA governs expressly agreed service levels;
• (e) Developer Terms govern general platform matters;
• (f) service-specific terms govern their respective services;
• (g) applicable policies govern their subject matter; and
• (h) general Documentation is subordinate to binding contractual terms.

144.1 Material amendments to an Enterprise Agreement shall be documented in writing or through an authorized electronic acceptance mechanism.

144.2 An Order Form may amend applicable commercial terms without rewriting the entire Agreement.

145.1 Failure to enforce a contractual right does not constitute a waiver.

146.1 If any provision is invalid or unenforceable, the remaining provisions shall remain effective to the maximum extent permitted by law.

147.1 The executed Enterprise Agreement, applicable Order Forms, incorporated Schedules, DPA, SLA, and expressly incorporated documents constitute the agreement between the parties concerning the Enterprise Services.

147.2 Prior discussions are superseded only to the extent expressly covered by the executed contractual documents.

148.1 The parties may communicate through electronic means.

148.2 Electronic communications may constitute contractual or operational records where applicable.

149.1 The English version shall be authoritative for contractual interpretation unless the parties execute another legally binding version.

150.1 This Agreement shall be governed by and interpreted consistently with the laws of India, subject to mandatory applicable law.

151.1 The parties shall first attempt in good faith to resolve contractual disputes through authorized representatives.

151.2 If the applicable Enterprise Agreement or Order Form specifies a particular escalation, mediation, arbitration, or jurisdiction mechanism, that mechanism shall apply.

151.3 No specific arbitration seat, venue, tribunal composition, or dispute forum is created by this template unless expressly completed in the applicable executed Agreement.

152.1 Nothing prevents a party from seeking urgent interim, injunctive, protective, or statutory relief where legally available.

153.1 Provisions concerning:

• (a) payment;
• (b) confidentiality;
• (c) intellectual property;
• (d) data protection;
• (e) security;
• (f) audit;
• (g) liability;
• (h) indemnification;
• (i) dispute resolution;
• (j) retention; and
• (k) other provisions intended by their nature to survive

shall survive termination to the extent applicable.

154.1 This Agreement does not create rights for third parties unless expressly stated or required by law.

155.1 Neither party receives publicity rights over the other party merely because an Enterprise relationship exists.

156.1 StampMitra does not guarantee that Enterprise API Services will produce a particular commercial, regulatory, financial, customer-acquisition, transaction, or business outcome.

157.1 StampMitra's provision of API Services does not constitute legal, financial, governmental, regulatory, or professional representation of the Customer.

158.1 Customer remains responsible for obtaining licenses, registrations, permissions, approvals, consents, and authorizations required for its own business activities.

159.1 The following policies are incorporated by reference to the extent applicable:

• (a) Developer Terms of Service;
• (b) Developer Privacy Policy;
• (c) Data Processing Addendum;
• (d) API Acceptable Use Policy;
• (e) Third-Party & Underlying Services Policy;
• (f) API Security Policy;
• (g) API SLA & Service Availability Policy;
• (h) Billing, API Credits & Refund Policy;
• (i) Verification, e-Stamp & e-Sign Service Terms;
• (j) API Versioning, Suspension & Deprecation Policy;
• (k) Developer Grievance Redressal Policy;
• (l) Security Vulnerability Disclosure Policy;
• (m) Cookie & Tracking Policy;
• (n) Developer Data Retention & Deletion Schedule; and
• (o) API Documentation & Developer License Terms.

159.2 The Order Form may specify additional incorporated documents.

160.1 General platform policies may be updated according to their respective change procedures.

160.2 An executed Enterprise Agreement shall not be materially modified solely by an online policy update where the Agreement expressly requires written amendment.

161.1 The parties acknowledge that the applicable Order Form identifies the commercial terms intended to govern the specific Enterprise engagement.

STAMPMITRA

BANI GLOBAL INDUSTRIES LLP

CUSTOMER

163.1 Any negotiated commercial term must be expressly recorded below or in an executed Schedule or Order Form.

164.1 Any enterprise-specific technical arrangement shall be recorded below or in an incorporated technical schedule.

165.1 Any negotiated security requirement shall be documented separately or below.

166.1 Any enterprise-specific data-processing requirement shall be recorded in the applicable DPA or written Schedule.

167.1 Any enterprise-specific support or escalation arrangement shall be recorded below or in the applicable SLA.

168.1 The existence of fields, examples, options, or schedules in this Agreement does not constitute a commercial offer, quotation, commitment, discount, service-level promise, volume reservation, or guaranteed capacity.

168.2 Only completed and duly accepted commercial terms shall become binding.

169.1 The Enterprise relationship may proceed through:

• (a) commercial discussion;
• (b) customer verification;
• (c) use-case assessment;
• (d) technical assessment where required;
• (e) Order Form preparation;
• (f) security and data-processing review where applicable;
• (g) authorized acceptance;
• (h) onboarding;
• (i) Sandbox integration;
• (j) Production approval; and
• (k) go-live.

169.2 Not every Enterprise Customer will require every step.

170.1 This Enterprise API Agreement / Order Form constitutes the official enterprise contractual framework of the StampMitra Developer Platform as of its Effective Date.

170.2 It is intentionally structured so that commercial variables are not invented or implied.

170.3 Enterprise-specific pricing, capacity, SLA, support, liability, security, implementation, data-processing, and other negotiated obligations must be expressly recorded in the applicable executed Order Form, Agreement, Schedule, SLA, DPA, or Addendum.

170.4 Nothing in this document requires StampMitra to publicly disclose confidential upstream service-provider identities, commercial arrangements, routing architecture, or other confidential infrastructure information.

170.5 Nothing in this Agreement limits any mandatory right or obligation under applicable law.

• Policy Name: StampMitra Enterprise API Agreement / Order Form
• Policy Number: 16 of 19
• Version: 1.0
• Status: FINAL — PUBLISHED POLICY
• Effective Date: 05 October 2026
• Last Updated: 05 October 2026
• Operator: BANI GLOBAL INDUSTRIES LLP
• LLPIN: ACI6373
• Prepared by: Legal Team, BANI GLOBAL INDUSTRIES LLP
• Legal Contact: [email protected]