Product Version Support Terms

Last updated: July 2, 2024

1.1. Date Based Versioning

Date based versions use the month and year for the release name in the format of, “[Month Year] Release”. For example, the “June 2022 Release.”

1.2. Semantic Versioning

Fairmarkit uses a Semantic versioning scheme that is based on a release number which has 3 components: Major release number, Minor release number, Patch release number.

A Major version release means modifications or enhancements to the same Software product as designated by a change in the Major release number. Major version releases do not maintain backwards compatibility.

A Minor version release means modifications or enhancements to the same Software product as designated by a change in the Minor release number. Major versions maintain backwards compatibility.

A Patch version release means backwards compatible bug fixes are introduced. Patch versions maintain backwards compatibility.

1.3. Standard Product Support

Standard Support includes:

• Technical support on the use of the software, and assistance with application configuration.

• Fairmarkit will attempt to provide patches for customers upon request, and where technically possible, for the following: S1 issues; Critical Security Vulnerabilities.

• Customers may also request patches or fixes for non-S1 issues, although Fairmarkit makes no guarantees about its ability to provide a patch.

• Access to product documentation.

1.4. Extended Product Support

Extended Support is provided for products which exist under previous support policies (see below) and can be granted on an exception basis for a product at Fairmarkit’s discretion.

Extended Support includes:

• Technical support on and around the software for production environments, including troubleshooting, diagnosis and resolution of issues which do not require source code patches.

• Fairmarkit will attempt to provide patches for customers upon request, and where technically possible, for the following: S1 issues; Critical Security Vulnerabilities.

• Access to product documentation.

1.5. End of Life Product Support

Products that are not covered by Standard Support or Extended Support shall be considered End of Life. End of life support will be provided for an additional 6 months after Standard Support or Extended Support ends. End of Life support will be limited to technical assistance only with no source code patches or new patch level releases. Support will provide recommendations on what is possible for the Customer, including professional services and references to documentation. Patches will not be provided.

After End of Life support expires for a product, Fairmarkit will not provide support of any kind.

1.6. Critical Security Vulnerabilities

Critical Security Vulnerabilities means any vulnerability defined as critical by Fairmarkit according to the following:

For vulnerabilities discovered in third party libraries that are embedded within Fairmarkit’s Software or vulnerabilities discovered in third party software that is in use within Fairmarkit’s Cloud Offerings, the vulnerability will be typically shared and classified for criticality via public advisories, or otherwise identified by scanning tools as part of Fairmarkit’s Vulnerability Management Process (VMP). Fairmarkit evaluates each such disclosure and either accepts or alters (either higher or lower) the criticality based on its internal assessment.

For those vulnerabilities that are ultimately classified as critical (or high), Fairmarkit will update embedded libraries as required, and patch Fairmarkit’s Cloud Offerings as required. The targeted timeline for such updates will be 30 days or less.

For vulnerabilities discovered in Fairmarkit’s Cloud Offerings, Fairmarkit will respond to any incoming report of discovered vulnerabilities from the security research community by evaluating the report and assessing its impact and exploitability, calculating and assigning an appropriate CVSS score. Once the score has been derived, Fairmarkit will determine the appropriate course of action for developing and disseminating a fix. When such a vulnerability is assigned a “high” score (>7.0), Fairmarkit will treat the issue as critical, and where possible, will prioritize the fix ahead of the existing development schedule.

2. Product Version Support Terms

2.1. Cloud Offerings

Fairmarkit’s Cloud Offerings use date based versioning. For Fairmarkit’s Cloud Offerings, there is one current version that is supported at all times, for all customers. Upgrades to Fairmarkit’s Cloud Offerings are conducted by Fairmarkit on behalf of all our users. Cloud Offerings are backward compatible.

2.2. Fairmarkit API

Fairmarkit’s API uses semantic versioning.

• Fairmarkit provides Standard Support for the latest Major version and the latest Minor version of the Fairmarkit API.

• Once a Minor version for a Major version is released, the previous Minor of the same Major version will receive Extended Support for 6 months. All new Minor versions are backwards compatible.

• Previous Patch versions are obsolete the moment a new patch version is released by Fairmarkit. All new Patch versions are backwards compatible.

• It is expected that Customers upgrade Minor versions and Patch versions of the Fairmarkit API periodically to receive enhancements and bug fixes.

• Once a new Major version of the Fairmarkit API is released, Fairmarkit will continue to offer Standard Support for the most recent Minor version of the previous Major version for 6 months.

• Once a Major version or Minor version of the Fairmarkit API is outside of the Standard support or the Extended Support window, Fairmarkit may offer End of Life Support based on its internal assessment.