# Clavenar Pilot Agreement

Version 1.0.0 · incorporated as an Order Form schedule

## 1. Purpose and scope

The pilot evaluates the use cases, environment, users, integrations, success
criteria, and exclusions written in the executed Order Form. It does not
authorize any production workload, real financial action, regulated data, or
operational credential unless the Order Form expressly marks that item
“production-approved” and records the required security, privacy,
secure-exchange, and go-live receipts.

## 2. Pilot plan

The Order Form must identify:

- accountable business, security, privacy, and technical owners for each party;
- start date, end date, evaluation stages, and dated decision point;
- supported deployment topology and exact release;
- permitted data classes and prohibited data;
- measurable success criteria and evidence source;
- support channel and response targets;
- secure-exchange recipient commitments and customer-controlled delivery
  location; and
- exit decision: stop/delete, extend by signed amendment, or convert through a
  new signed Order Form.

## 3. Access and change control

Customer will provide least-privilege access and test fixtures where possible.
No party will send secrets or production details through email or a general
form. Material scope, data-class, integration, recipient-key, or production
changes require written approval by the accountable owners and an updated
Order Form or change record.

## 4. Evaluation evidence

The parties may retain minimized results, commitments, acceptance records, and
agreed metrics. Raw customer data, credentials, and private keys are not
evaluation evidence. Neither party may identify the other publicly or publish
benchmarks, logos, quotes, or case studies without separate written
permission.

## 5. End of pilot

At pilot end Vanteguard will disable pilot access and return or delete Customer
Data as directed under the DPA and Security and Data Schedule. Customer will
revoke pilot credentials and remove Vanteguard access to customer-controlled
systems. Conversion requires a signed production Order Form; silence, continued
testing, or an expired draft does not create renewal or production approval.

The MSA, DPA, Security and Data Schedule, and executed Order Form control this
pilot. Fees and pilot length exist only in the executed Order Form.