Terms of Service

These Terms of Service ("Terms") govern your access to and use of the MuniVEX platform ("Service"), operated by Sasor Enterprises, LLC, a New Jersey limited liability company ("Sasor," "we," "our," or "us"). MuniVEX is a product of Sasor Enterprises, LLC. By accessing or using the Service, you agree to be bound by these Terms. If you do not agree to these Terms, you may not use the Service.

When you accept these Terms in the Service, we record the date, time, and version of the Terms you accepted. If we publish a new version, the Service will ask you to accept it the next time you sign in.

1. Service Description

MuniVEX is a secure file-exchange platform designed for municipal government agencies. The Service enables authorized users to upload, manage, share, and download files through encrypted channels with audit logging. The Service includes user management, role-based access controls, file-integrity verification, malware scanning, multi-factor authentication, session management, and notification capabilities.

The Service is provided on an "as is" and "as available" basis. We use commercially reasonable efforts to maintain the availability and reliability of the Service, but we do not guarantee uninterrupted or error-free operation.

MuniVEX is a delivery mechanism, not a system of record. Files placed on the Service are expected to expire and be deleted on the schedule your agency configures. Your agency must keep its own authoritative copy of every file it uploads.

2. Beta Program

The Service is currently offered as a free beta. During the Beta Program:

• No fees are charged. Because no fees are paid, the liability limit in Section 16 may be zero.
• The Service is provided strictly "as is." There is no service-level agreement, no uptime commitment, and no guarantee that any file will remain available for any period. Files may be lost, corrupted, or deleted.
• We may change, suspend, limit, or end the Service or any feature at any time, with or without notice. Where practical we will give agency administrators advance notice and a window to export files.
• You must keep your own authoritative copy of every file you upload. Do not rely on the Service as your only copy of any record.
• Any feedback, suggestions, or bug reports you give us may be used by Sasor without restriction or obligation to you.
• Beta features may be incomplete or change without notice.

We will tell agency administrators when the Beta Program ends and what terms apply afterward.

3. Eligibility

The Service is intended for use by municipal government agencies, their authorized employees, and designated external parties who receive access through the platform. By using the Service, you represent that you are authorized by your organization to access the platform and that you are at least 18 years of age.

4. Account Responsibilities

You are responsible for:

• Maintaining the confidentiality of your login credentials, access codes, and multi-factor authentication (MFA) devices.
• All activity that occurs under your account, whether or not authorized by you.
• Notifying your agency administrator immediately if you suspect unauthorized access to your account.
• Using a strong, unique password and enabling multi-factor authentication when available.
• Changing your password upon first login when required by the system.
• Complying with your own organization's legal and regulatory obligations when using the Service.

Agency administrators are responsible for managing user accounts within their organization, including provisioning, role assignment, department assignment, and deactivation of accounts.

5. Customer Responsibilities and Shared Responsibility

Files placed on the Service are expected to include criminal justice information, public records, evidence, and other sensitive material. Security is shared: Sasor provides and documents the controls described on our Security page, and your agency is responsible for how the Service is used. Specifically, your agency, and not Sasor, is solely responsible for:

• Compliance determinations. Deciding whether its use of the Service is permitted under the FBI CJIS Security Policy, its state CJIS agreements and audits, court rules, discovery rules, records-retention statutes, the New Jersey Open Public Records Act (OPRA), and its own policies. Sasor does not make this determination for you and does not certify, warrant, or imply that your use is compliant.
• Every file it uploads. Its contents, its accuracy, your right to possess and share it, any redaction it requires, and any legal hold or preservation duty that applies to it.
• Who receives it. Choosing recipients, verifying the identity and authority of requesters and attorneys before granting access, and protecting access codes and links once issued. A download link or access code is like a key: anyone who holds it can use it until it expires or is revoked.
• Retention and expiration settings. Configuring file expiration, download windows, and link options so they match your agency's retention schedule and the requirements of the matter.
• Its own records. Keeping an authoritative copy of every file outside the Service, and exporting any audit records it needs before they are no longer available to it.
• Its users. Training its users, assigning appropriate roles, and promptly deactivating users who leave.

6. Our Responsibilities

Subject to Sections 2, 15, and 16, we operate the Service as follows:

• We implement reasonable security measures to protect the confidentiality and integrity of your data, including encryption at rest and in transit.
• We use commercially reasonable efforts to keep the Service available.
• We compute a SHA-256 integrity hash for each uploaded file and make it available so recipients can verify what they received.
• We scan uploaded files for malware before they can be downloaded. Files flagged as infected, and files that could not be scanned, are blocked from download. Scanning reduces risk but no scanner detects every threat.
• We will notify affected agency administrators without undue delay if we become aware of a security incident affecting your data.
• We keep an append-only audit log of security-relevant platform activity. The database rejects changes to or deletion of audit entries, including by our own administrators.

These describe what the Service does. They are not guarantees of a particular outcome and do not expand the warranties in Section 15.

7. Acceptable Use

You agree not to:

• Upload files containing malware, viruses, or other malicious code.
• Attempt to gain unauthorized access to other users' accounts, files, or system resources.
• Use the Service for any purpose that violates applicable local, state, or federal law.
• Share access codes or authentication credentials with unauthorized individuals.
• Circumvent or attempt to circumvent rate limits, access controls, or other security measures.
• Interfere with or disrupt the integrity or performance of the Service.
• Reverse engineer, decompile, or attempt to extract the source code of the Service.
• Use automated tools, bots, or scrapers to access the Service without prior written consent.
• Store or transmit content that infringes on the intellectual property rights of any third party.

8. Data Ownership

Your organization retains all rights to its uploaded files and data. We do not claim ownership of, or any intellectual property rights in, your content. Sasor Enterprises, LLC acts as a custodian of your data and processes it only to provide the Service.

We do not open or read the contents of your files. File contents are processed only by automated malware scanning, and are accessed by Sasor personnel only when required to operate or troubleshoot the Service at your request, or when required by law, and such access is logged. We will not sell, license, or share your files with third parties except as described in our Privacy Policy.

9. Intellectual Property

The MuniVEX platform, including its software, design, logos, trademarks, and documentation, is the property of Sasor Enterprises, LLC and is protected by applicable intellectual property laws. These Terms do not grant you any right, title, or interest in the platform itself, except for the limited right to use the Service as described herein.

10. Service Availability

We use commercially reasonable efforts to keep the Service available. Scheduled maintenance is performed during low-usage hours with advance notice to agency administrators when possible. During the Beta Program there is no uptime commitment (see Section 2).

In the event of an unplanned outage, we will work to restore access as quickly as possible and provide status updates to affected organizations.

11. Fees and Payment

During the Beta Program the Service is provided free of charge. After the Beta Program, access to the Service will be provided under the terms of your organization's subscription agreement with Sasor Enterprises, LLC. Fees, payment terms, and billing cycles will be set forth in the applicable order form or subscription agreement. We reserve the right to modify pricing with at least 60 days' written notice prior to your next renewal period.

12. Lawful Requests and Notice-and-Takedown

Legal process. If we receive a subpoena, court order, warrant, preservation request, or other legal process seeking your files or data, we will, unless legally prohibited, notify your agency administrators promptly and before producing anything, so your agency can object or respond. We will produce only what we are legally required to produce. Where the request could be directed to your agency instead of to us, we will say so to the requesting party.

Copyright and takedown notices. If we receive a notice that content on the Service infringes a copyright or other right, we may disable access to the identified content and will forward the notice to the uploading agency. The agency may respond to the notice; we will restore access if the matter is resolved in the agency's favor or if we are legally permitted to do so.

Emergencies and abuse. We may disable access to content or accounts without prior notice where we reasonably believe doing so is necessary to prevent imminent harm, comply with law, or protect the security of the Service.

Send legal process and notices to legal@munivex.com or to the mailing address in the Contact section below.

13. Suspension

We may suspend or restrict access to your account or organization in the following circumstances:

• Non-payment of applicable fees.
• Violation of these Terms or the acceptable use policy.
• As required by law, regulation, or legal process.
• To protect the security of the Service or other users.

We will provide reasonable notice before suspending access except where immediate action is required to protect the security of the Service or comply with legal obligations.

14. Termination

Either party may terminate the agreement with 30 days' written notice. We may also terminate immediately if you materially breach these Terms. During the Beta Program, Section 2 also applies.

Upon termination, your organization will have 30 days to export its data. After this 30-day period, your data will be deleted from our storage infrastructure in accordance with our Privacy Policy, except for audit records we retain as described there. We will provide reasonable assistance to facilitate data export during this period.

15. Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE, OR THAT ANY FILE WILL BE PRESERVED.

No compliance warranty. MuniVEX is not certified, accredited, or audited under the CJIS Security Policy, FedRAMP, SOC 2, HIPAA, or any other compliance framework. The Service is hosted in commercial AWS regions in the United States, not in AWS GovCloud. Descriptions of our security controls are descriptions of what the Service does; they are not a representation that the Service satisfies any law, regulation, policy, or agreement that applies to your agency. Whether the Service is suitable for a particular use is your agency's determination alone.

16. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SASOR ENTERPRISES, LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF REVENUE, OR LOSS OF BUSINESS OPPORTUNITIES, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE.

Our total aggregate liability for any claims arising out of or related to the Service shall not exceed the amount paid by your organization for the Service during the twelve (12) months preceding the claim. During the Beta Program that amount is zero.

Nothing in these Terms limits liability for gross negligence, willful misconduct, fraud, or any liability that cannot be excluded or limited under applicable law.

17. Indemnification

To the extent permitted by the law that governs your agency, you agree to indemnify, defend, and hold harmless Sasor Enterprises, LLC and its officers, members, employees, and agents from and against any claims, losses, damages, liabilities, and expenses (including reasonable attorneys' fees) arising from:

• your violation of these Terms or misuse of the Service;
• your violation of any applicable law or regulation;
• any file or content you upload to or share through the Service, including its contents, your right to share it, and the recipients you choose;
• your agency's determination that its use of the Service is permitted under the CJIS Security Policy, records laws, court rules, or any other requirement that applies to it; and
• any claim by a requester, defendant, attorney, or other third party arising from records you released or withheld through the Service.

18. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of New Jersey, without regard to its conflict of laws principles. Any disputes arising under these Terms shall be subject to the exclusive jurisdiction of the state and federal courts located in Bergen County, New Jersey.

19. Changes to These Terms

We reserve the right to modify these Terms at any time. We will notify agency administrators of material changes at least 30 days before they take effect, except during the Beta Program, when changes may take effect when posted. Each version carries a version number and effective date, and the Service will ask you to accept a new version the next time you sign in. Continued use of the Service after changes become effective constitutes acceptance of the revised Terms. If you do not agree to the revised Terms, you must discontinue use of the Service.

Contact Us

If you have questions about these Terms of Service, or need to send a legal notice, please contact: