Master Services Agreement

Technology Continuity, Backup and Disaster Recovery Services

Provider	Rockley Consulting Pty Ltd
ABN	78 673 819 773
Trading As	ROCKAXIOM
Effective Date	As at the date of acceptance through the ROCKAXIOM onboarding process
Governing Law	Tasmania, Australia

This document is accepted electronically as part of the ROCKAXIOM onboarding process. By accepting this agreement through the onboarding portal, you confirm that you have read, understood, and agreed to the terms set out below.

---

1. Agreement Structure and Order of Precedence

This Master Services Agreement ("Agreement") establishes the legal framework governing the provision of technology continuity, backup, disaster recovery, and related services delivered under the ROCKAXIOM platform.

Operational and service-specific details are contained in associated documents including:

• Order Forms or Quotes
• Product Schedules
• Service Level Agreements (SLA)
• Shared Responsibility Schedules

If any inconsistency arises between contractual documents, the following order of precedence applies:

• Signed Order Form or Quote
• Product Schedule
• Service Level Agreement (SLA)
• Shared Responsibility Schedule
• This Master Services Agreement

2. Definitions

Agreement: This Master Services Agreement and all associated schedules.

Business Hours: 09:00 to 17:00 AEST Monday to Friday excluding public holidays in Tasmania.

After Hours: Any time outside Business Hours.

Backup Infrastructure: Cloud storage platforms, backup agents, storage repositories, and associated infrastructure used to store protected Customer Data.

Confidential Information: Any information disclosed by one party to the other that is designated as confidential, or that reasonably should be understood to be confidential given the nature of the information and the circumstances of its disclosure. This includes but is not limited to business plans, pricing, technical specifications, customer lists, and Customer Data.

Continuity Event: An incident where a Customer system becomes unavailable due to hardware failure, software corruption, human error, cyber incident, power disruption, or other operational interruption.

Customer: The organisation purchasing services under this Agreement.

Customer Data: Any data, files, databases, or information stored within the Customer Environment and protected by the Services.

Customer Environment: The Customer's systems, devices, infrastructure, and software platforms connected to or protected by the Services.

GST: Has the meaning given in the A New Tax System (Goods and Services Tax) Act 1999 (Cth).

Intellectual Property: All patents, trademarks, service marks, trade names, copyright, moral rights, trade secrets, know-how, methodologies, tools, scripts, processes, and all other intellectual property rights, whether registered or unregistered.

Personal Information: Has the meaning given in the Privacy Act 1988 (Cth).

Services: Technology continuity services delivered under the ROCKAXIOM platform including backup, monitoring, restore assistance, and disaster recovery support.

Supported Systems: Operating systems, applications, and environments defined as supported in the Product Schedule.

3. Scope of Services

Rockley Consulting will provide the Services described in the applicable Product Schedule. Services may include:

• Automated backups
• Database backup protection
• File and folder protection
• System state protection
• Monitoring and alerting
• Restoration assistance
• Disaster recovery support
• Continuity advisory services

The exact scope of Services is defined in the applicable Product Schedule and Order Form.

4. Independent Contractor Relationship

Rockley Consulting provides Services as an independent contractor. Nothing in this Agreement creates an employment relationship, partnership, joint venture, or agency between the parties.

5. Use of Subcontractors and Technology Providers

Rockley Consulting may use subcontractors and technology providers to deliver the Services. These may include backup platform vendors, cloud infrastructure providers, monitoring platforms, hardware vendors, and specialist contractors.

Rockley Consulting remains responsible for managing such subcontractors and will ensure that any subcontractors engaged are bound by obligations equivalent to those imposed on Rockley Consulting under this Agreement, including obligations relating to confidentiality, data security, and privacy.

6. Customer Responsibilities

The Customer agrees to:

• Maintain supported operating systems and infrastructure
• Provide required system access credentials
• Ensure devices remain connected to the network
• Maintain appropriate system security practices
• Notify Rockley Consulting of system incidents or changes

Failure to meet these responsibilities may affect service delivery or recovery outcomes. Detailed responsibilities are defined in the Shared Responsibility Schedule.

7. Customer Environment Changes

The Customer must notify Rockley Consulting of any material changes to the Customer Environment that may impact the Services, including changes to operating systems, database platforms, network architecture, or hardware infrastructure.

Rockley Consulting is not responsible for service interruptions, backup failures, or failed recovery outcomes caused by changes to the Customer Environment that were not notified to Rockley Consulting prior to implementation.

8. Customer Endpoint Security

The Customer remains responsible for maintaining appropriate endpoint security measures within the Customer Environment, including:

• Antivirus and anti-malware protection
• Operating system and application patching
• Access controls and user privilege management
• Network perimeter security

Rockley Consulting is not responsible for security incidents, data compromise, or recovery failures arising from inadequate endpoint security practices within the Customer Environment.

9. Acceptable Use

The Customer must not use the Services in violation of applicable law, to store illegal or prohibited content, to intentionally distribute malicious software, or in a manner that threatens platform security. Rockley Consulting may suspend Services where misuse is identified.

10. Customer Data Ownership

The Customer retains full ownership of all Customer Data. Rockley Consulting obtains no ownership rights over Customer Data other than those necessary to provide the Services. Rockley Consulting may access Customer Data only for service delivery, troubleshooting, and restoration operations.

11. Intellectual Property

All Intellectual Property in the ROCKAXIOM platform, tools, scripts, methodologies, software, systems, and any pre-existing materials used in the delivery of the Services remain the sole property of Rockley Consulting.

The Customer is granted a limited, non-exclusive, non-transferable licence to use the Services during the term of this Agreement solely for the Customer's internal business purposes.

Nothing in this Agreement transfers ownership of any Intellectual Property to the Customer. The Customer must not reverse engineer, copy, or attempt to replicate any component of the ROCKAXIOM platform.

12. Confidentiality

Each party agrees to hold the other party's Confidential Information in strict confidence and not to disclose it to any third party without the prior written consent of the disclosing party, except as required by law or with the prior written approval of the other party.

Each party agrees to use the other party's Confidential Information only for the purposes of performing obligations or exercising rights under this Agreement.

These obligations do not apply to information that:

• Was already publicly known at the time of disclosure
• Becomes publicly known through no fault of the receiving party
• Was independently developed by the receiving party without reference to the Confidential Information
• Was received from a third party without restriction on disclosure
• Is required to be disclosed by law, regulation, or court order, provided the receiving party gives prompt written notice to the disclosing party where lawful to do so

The obligations in this clause survive termination or expiry of this Agreement for a period of three (3) years.

13. Data Protection and Storage

Customer Data protected by the Services may be stored in secure cloud infrastructure operated by third-party providers. Where possible, Customer Data will be stored in Australian data centres.

Backup data may be encrypted both in transit and at rest using industry standard encryption technologies.

14. Privacy

Each party agrees to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) to the extent they apply to that party in connection with this Agreement.

Rockley Consulting will only collect, use, and disclose Personal Information as necessary for the performance of the Services. Rockley Consulting will not use Personal Information for any other purpose without the prior written consent of the Customer.

In the event of a notifiable data breach involving Personal Information, Rockley Consulting will notify the Customer as soon as practicable and cooperate with the Customer to manage its obligations under the Notifiable Data Breaches scheme.

15. Security and Platform Integrity

Rockley Consulting will implement reasonable administrative, technical, and organisational measures to protect backup infrastructure and Customer Data. However, the Customer acknowledges that no technology system can guarantee absolute protection against all security threats.

16. Infrastructure Dependencies

The Services depend on multiple external systems including cloud infrastructure providers, telecommunications networks, power infrastructure, and third-party software platforms. Rockley Consulting is not responsible for outages or failures caused by these external dependencies.

17. Backup Failure

The Customer acknowledges that backup systems may fail due to factors outside Rockley Consulting's control, including software faults, hardware failures, corruption of source data, or third-party platform issues.

Rockley Consulting will use commercially reasonable efforts to identify and remediate backup failures. Rockley Consulting does not guarantee uninterrupted backup success and is not liable for data loss resulting from backup failures caused by factors outside its reasonable control.

18. Ransomware and Corrupted Source Data

Rockley Consulting is not responsible for corruption, encryption, or deletion of Customer Data that occurs prior to the backup process, including incidents caused by malware, ransomware, or user actions within the Customer Environment.

If encrypted or corrupted data is successfully backed up prior to detection, restoration of that data may reproduce the corrupted or encrypted state. Rockley Consulting will use reasonable efforts to assist the Customer in identifying clean recovery points where available, but does not guarantee the availability of unaffected backup data in such circumstances.

19. Disaster Recovery Limitations

The Customer acknowledges that disaster recovery services depend on multiple factors including system integrity, availability of backup data, infrastructure availability, network connectivity, and third-party service availability. Accordingly:

• Rockley Consulting does not guarantee that all data will be recoverable or that systems can be restored to a specific point in time
• Recovery services are performed on a best efforts basis using reasonable skill and care

20. Service Availability

Rockley Consulting will use commercially reasonable efforts to maintain availability of the Services. Service response targets and operational procedures are defined in the Service Level Agreement (SLA).

21. Warranties

Rockley Consulting warrants that Services will be delivered with reasonable skill and care consistent with industry practice. Except as expressly stated in this Agreement, all other warranties are excluded to the maximum extent permitted by law.

Nothing in this Agreement is intended to exclude, restrict, or modify any right or remedy the Customer may have under the Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010 (Cth)) or any other applicable legislation that cannot be excluded by agreement.

22. Limitation of Liability

To the maximum extent permitted by law, Rockley Consulting's total liability arising out of or in connection with this Agreement is limited to the total fees paid by the Customer for the Services during the twelve (12) months preceding the event giving rise to the claim.

23. Exclusion of Consequential Loss

To the maximum extent permitted by law, Rockley Consulting is not liable for indirect or consequential losses including:

• Loss of profit or revenue
• Business interruption or operational downtime
• Reputational damage or loss of goodwill
• Loss of business opportunity
• Loss of data

24. Service Credits

Where applicable, service credits described in the Service Level Agreement represent the Customer's sole and exclusive remedy for service level failures.

25. Insurance

Rockley Consulting maintains the following insurance coverage:

• Public Liability Insurance: AUD $10,000,000
• Professional Indemnity Insurance: AUD $5,000,000

Certificates of currency may be provided upon reasonable request.

The Services provided under this Agreement do not constitute insurance against data loss, business interruption, or cyber incidents. Customers should maintain appropriate cyber and business interruption insurance coverage independent of the Services.

26. Fees, GST and Payment

Fees are defined in the applicable Order Form, Quote, or Product Schedule.

Unless otherwise stated, all fees are exclusive of GST. Where GST is payable on a taxable supply made under or in connection with this Agreement, the Customer must pay an additional amount equal to the GST payable on that supply, at the same time as the fee is payable.

Rockley Consulting will issue valid tax invoices in accordance with GST legislation. Invoices are payable within 14 days of the invoice date unless otherwise agreed in writing.

Rockley Consulting may suspend Services where payment obligations are not met within the payment period and a further 7 days written notice has elapsed without resolution.

27. Term and Termination

This Agreement begins on the Effective Date and continues until terminated. Minimum service terms are defined in the applicable Product Schedule.

Either party may terminate this Agreement by providing 30 days written notice to the other party, subject to any minimum term commitments in the applicable Product Schedule.

28. Termination for Cause

Either party may terminate this Agreement immediately upon written notice if the other party:

• Commits a material breach and fails to remedy the breach within 14 days of receiving written notice of the breach
• Becomes insolvent, is placed into administration or receivership, or ceases to carry on business

29. Post-Termination Data Handling

Upon termination or expiry of this Agreement:

• Rockley Consulting will retain Customer Data in the backup infrastructure for a period of 30 days following the effective date of termination (the Retention Period)
• During the Retention Period, the Customer may request a copy of their data in a format reasonably determined by Rockley Consulting
• At the end of the Retention Period, Rockley Consulting will securely delete or destroy all Customer Data from the backup infrastructure
• Upon request, Rockley Consulting will provide written confirmation that Customer Data has been deleted

The Customer remains responsible for obtaining any required data exports prior to the effective date of termination. Rockley Consulting is not obligated to retain Customer Data beyond the Retention Period.

Rockley Consulting may charge reasonable professional service fees for assistance with data export or recovery requests following termination. Any such fees will be communicated to the Customer in advance.

30. Suspension of Services

Rockley Consulting may suspend Services where payment obligations are not met, where systems pose a security risk to the platform or other customers, or where Services are being misused. Rockley Consulting will provide reasonable written notice prior to any suspension where it is safe to do so.

31. Dispute Resolution

If a dispute arises out of or in connection with this Agreement, the parties agree to the following process before commencing legal proceedings:

• The party claiming the dispute must issue a written notice to the other party setting out the nature of the dispute in reasonable detail
• The parties must meet (in person, by telephone, or by video conference) within 10 Business Days of the notice to attempt to resolve the dispute in good faith
• If the dispute is not resolved within 20 Business Days of the written notice, either party may refer the dispute to mediation administered by the Australian Disputes Centre
• If the dispute is not resolved through mediation, either party may commence legal proceedings

This clause does not prevent either party from seeking urgent injunctive or other interlocutory relief from a court where necessary to protect their rights.

32. Notices

Any notice or other communication required or permitted under this Agreement must be in writing and delivered by:

• Email with delivery and read receipt requested
• Registered post
• Hand delivery

Notices to Rockley Consulting must be directed to the following contact details, or as otherwise notified in writing:

• General: info@rockaxiom.au
• Support: support@rockaxiom.au
• Phone: 0432 30 76 25
• Website: https://rockaxiom.au

Notices to the Customer must be addressed to the contact details set out in the applicable Order Form.

A notice is deemed received: if by email, at the time of confirmed delivery (provided no error or bounce message is received); if by post, three Business Days after posting; if by hand, at the time of delivery.

33. Variation of Agreement

Rockley Consulting may amend this Agreement by providing 30 days written notice to the Customer. Continued use of the Services after the notice period constitutes acceptance of the amended terms.

Any variation agreed between both parties must be recorded in writing and confirmed by authorised representatives of each party.

34. Force Majeure

Neither party will be liable for failure to perform obligations due to events beyond reasonable control including natural disasters, major infrastructure failures, cyber incidents, government actions, or telecommunications outages. The affected party must notify the other party as soon as practicable.

35. Assignment

Rockley Consulting may assign this Agreement to a related entity, successor organisation, or acquiring entity without the Customer's consent, provided that the assignee assumes all obligations under this Agreement. The Customer may not assign this Agreement without prior written consent from Rockley Consulting.

36. Governing Law

This Agreement is governed by the laws of Tasmania, Australia. The parties submit to the non-exclusive jurisdiction of the courts of Tasmania. Nothing in this clause prevents either party from seeking relief from a Federal Court where appropriate.

37. Entire Agreement

This Agreement and all associated schedules represent the entire agreement between the parties with respect to the subject matter and supersede all prior communications, representations, and agreements, whether oral or written.

No party has relied on any representation or warranty in entering into this Agreement other than as expressly set out in this Agreement.

38. Severability

If any provision of this Agreement is found to be invalid, illegal, or unenforceable, that provision will be severed from the Agreement and the remaining provisions will continue in full force and effect.

39. Acceptance

This Agreement is entered into as of the Effective Date. Acceptance of this Agreement is recorded electronically through the ROCKAXIOM onboarding process.

---

Clause Index

Area	Clause
Agreement Structure and Order of Precedence	Clause 1
Definitions	Clause 2
Scope of Services	Clause 3
Independent Contractor Relationship	Clause 4
Use of Subcontractors and Technology Providers	Clause 5
Customer Responsibilities	Clause 6
Customer Environment Changes	Clause 7
Customer Endpoint Security	Clause 8
Acceptable Use	Clause 9
Customer Data Ownership	Clause 10
Intellectual Property	Clause 11
Confidentiality	Clause 12
Data Protection and Storage	Clause 13
Privacy and Australian Privacy Principles	Clause 14
Security and Platform Integrity	Clause 15
Infrastructure Dependencies	Clause 16
Backup Failure	Clause 17
Ransomware and Corrupted Source Data	Clause 18
Disaster Recovery Limitations	Clause 19
Service Availability	Clause 20
Warranties	Clause 21
Limitation of Liability	Clause 22
Exclusion of Consequential Loss	Clause 23
Service Credits	Clause 24
Insurance	Clause 25
Fees, GST and Payment	Clause 26
Term and Termination	Clause 27
Termination for Cause	Clause 28
Post-Termination Data Handling	Clause 29
Suspension of Services	Clause 30
Dispute Resolution	Clause 31
Notices	Clause 32
Variation of Agreement	Clause 33
Force Majeure	Clause 34
Assignment	Clause 35
Governing Law	Clause 36
Entire Agreement	Clause 37
Severability	Clause 38
Acceptance	Clause 39

---

ROCKAXIOM is a trading name of Rockley Consulting Pty Ltd | ABN 78 673 819 773 | Tasmania, Australia | rockaxiom.au

Document version: v2 2026.03.04

Schedule A: Product Schedule

Continuity Services

Provider	Rockley Consulting Pty Ltd (trading as ROCKAXIOM)
ABN	78 673 819 773
Document Reference	Schedule A · Product Schedule
Governing Law	Tasmania, Australia
Effective Date	As at the date of acceptance through the ROCKAXIOM onboarding process

This document is accepted electronically as part of the ROCKAXIOM onboarding process. By accepting this agreement through the onboarding portal, you confirm that you have read, understood, and agreed to the terms set out below.

---

1. Purpose

This Product Schedule (Schedule A) defines the features, service scope, and commercial structure of the ROCKAXIOM continuity service tiers.

The services described in this Schedule form part of the ROCKAXIOM Master Services Agreement (MSA) and are supported by the Service Level Agreement (SLA) and Shared Responsibility Schedule.

Unless otherwise stated, all service features apply per protected system. A protected system may be either a workstation or a server.

Note: This Schedule should be read in conjunction with the MSA, SLA, and Shared Responsibility Schedule. In the event of any inconsistency, the order of precedence set out in Clause 1 of the MSA applies.

2. Supported Systems

ROCKAXIOM services support the following environments:

• Windows 10 Professional
• Windows 11 Professional
• Windows Server (supported versions)
• Microsoft SQL Server environments used by hospitality POS platforms

Where SQL backup protection is provided, this applies to Microsoft SQL Server databases supported by the backup platform vendor. Compatibility with specific database versions should be confirmed at the time of onboarding.

Note: Systems must meet the supported environment requirements defined by the backup platform vendor. Unsupported operating systems may not be protected under the Services. The Customer is responsible for maintaining supported and patched operating environments.

3. Service Plans

ROCKAXIOM continuity services are available in the following tiers:

• ROCKAXIOM Core: Essential continuity protection for smaller hospitality venues.
• ROCKAXIOM Enhanced: Expanded monitoring and recovery support for most hospitality venues.
• ROCKAXIOM Continuity+: High availability continuity with local virtualisation capabilities.

The applicable service tier is specified in the Customer's Order Form or Quote.

Feature Comparison

Feature	Core	Enhanced	Continuity+
Backup Protection
SQL database backup frequency	15 min	15 min	15 min
File and folder backup frequency	6 hours	4 hours	1 hour
System state backup frequency	6 hours	4 hours	1 hour
Backup retention	365 days	365 days	365 days
Monitoring
Backup job monitoring	✓	✓	✓
Backup failure alerting	✓	✓	✓
Failure investigation	✓	✓	✓
Weekly restore verification	N/A	✓	✓
DR readiness monitoring	N/A	N/A	✓
Recovery
Business hours recovery support	Standard	Priority	Priority
Included recovery labour	N/A	1 hr/mo	Unlimited†
After-hours emergency recovery	N/A	N/A	1 per year
Quarterly DR simulation testing	N/A	N/A	✓
Virtualisation support	N/A	N/A	✓
Infrastructure
Cloud backup storage	✓	✓	✓
DR appliance (local virtualisation)	Add-on	Add-on	Included
Commercial
Workstation pricing	$99/mo	$149/mo	$199/mo
Server pricing	$159/mo	$199/mo	$269/mo
Minimum term	30 days	30 days	24 months

† Unlimited restoration requests subject to reasonable fair use. ROCKAXIOM reserves the right to review excessive restoration requests that materially exceed normal operational usage. All pricing is exclusive of GST.

Note: Unused recovery labour under ROCKAXIOM Enhanced does not roll over between billing periods.

4. ROCKAXIOM Core

ROCKAXIOM Core provides essential continuity protection suitable for smaller hospitality venues or where budget is a primary consideration.

4.1 Backup Protection

Backup Type	Frequency
SQL database backups	Every 15 minutes
File and folder backups	Every 6 hours
System state backups	Every 6 hours
Backup retention	365 days

4.2 Infrastructure

• Cloud-based backup storage
• Encryption of backup data in transit and at rest

4.3 Monitoring

• Backup job monitoring
• Backup failure alerting
• Investigation of backup failures where detected

Note: Monitoring under ROCKAXIOM Core is limited to backup activity only. System performance, hardware health, and network monitoring remain the Customer's responsibility.

4.4 Recovery Assistance

Business hours restoration assistance is included. Restoration services are performed on a commercially reasonable efforts basis.

4.5 Optional Add-ons

Add-on	Price
Disaster Recovery Appliance: Local virtualisation device for rapid system recovery.	$39 / month per protected system
Backup Frequency Upgrade: File and system state backups upgraded to 4-hour intervals.	$25 / month per protected system

5. ROCKAXIOM Enhanced

ROCKAXIOM Enhanced provides expanded monitoring and recovery support suitable for most hospitality venues where operational continuity is a key priority.

5.1 Backup Protection

Backup Type	Frequency
SQL database backups	Every 15 minutes
File and folder backups	Every 4 hours
System state backups	Every 4 hours
Backup retention	365 days

5.2 Monitoring

• Backup job monitoring
• Backup failure alerting
• Investigation of backup failures
• Weekly restore verification

5.3 Recovery Assistance

Priority business hours recovery support is included.

• 1 hour per month of recovery labour included

Note: Unused recovery labour does not roll over between billing periods. Additional recovery labour is available and will be quoted on request.

5.4 Optional Add-ons

Add-on	Price
Disaster Recovery Appliance: Local virtualisation device for rapid system recovery.	$39 / month per protected system
Backup Frequency Upgrade: File and system state backups upgraded to 1-hour intervals.	$35 / month per protected system

6. ROCKAXIOM Continuity+

ROCKAXIOM Continuity+ provides high availability continuity capabilities including local virtualisation, suitable for venues where minimising downtime is critical.

6.1 Backup Protection

Backup Type	Frequency
SQL database backups	Every 15 minutes
File and folder backups	Every 1 hour
System state backups	Every 1 hour
Backup retention	365 days

6.2 Infrastructure

• Cloud backup storage
• Local virtual images via Disaster Recovery appliance
• Disaster Recovery appliance included as standard

6.3 Monitoring

• Backup job monitoring
• Weekly restore verification
• Disaster recovery readiness monitoring

6.4 Disaster Recovery

• Quarterly disaster recovery simulation testing
• Virtualisation support during continuity events
• Unlimited restoration requests subject to reasonable fair use. ROCKAXIOM reserves the right to review excessive restoration requests that materially exceed normal operational usage.

6.5 Emergency Support

One after-hours emergency recovery incident per year is included under ROCKAXIOM Continuity+.

Note: After-hours emergency incidents beyond the one included annually are available and will be quoted on request.

6.6 Minimum Term

ROCKAXIOM Continuity+ requires a 24-month minimum service term. Early termination provisions are governed by Clause 27 and 28 of the MSA.

7. Disaster Recovery Appliance

The Disaster Recovery appliance is a local infrastructure device designed to support rapid virtualisation of protected systems.

Where deployed, the appliance may enable:

• Rapid system virtualisation
• Local restore capability
• Continuity operations during hardware failure events

Note: The appliance remains the property of Rockley Consulting Pty Ltd unless otherwise agreed in writing. Upon termination of services, the appliance must be returned in accordance with the terms of the MSA.

Note: Hardware warranty and replacement of the Disaster Recovery appliance may be subject to manufacturer warranty terms unless otherwise specified in the applicable Order Form.

8. Monitoring Scope

Unless otherwise stated within a service plan, monitoring is limited to:

• Backup job success
• Backup job failure alerts
• Backup infrastructure availability

The following items are outside ROCKAXIOM's monitoring scope and remain the Customer's responsibility:

• System performance monitoring (CPU, disk, RAM)
• Hardware health monitoring (SMART, RAID)
• Network performance and connectivity monitoring
• UPS and power monitoring
• POS application monitoring and uptime

Note: Refer to the Shared Responsibility Schedule for a complete breakdown of monitoring responsibilities between ROCKAXIOM, the Customer, and Third Party Providers.

9. Reporting

Reporting is available upon request unless explicitly included within the applicable service plan.

Reports may include:

• Backup activity summaries
• Incident response summaries
• Service activity reports

Note: Reporting is provided on request unless otherwise included within the selected service plan. Frequency and format of reports will be agreed between the parties.

10. Service Limits

Service features are subject to reasonable fair use. ROCKAXIOM may review excessive restoration activity or service usage and may recommend plan adjustments where usage materially exceeds typical service patterns.

ROCKAXIOM will provide reasonable written notice to the Customer before any plan adjustment is applied.

Backup services assume reasonable data volumes typical of hospitality environments. ROCKAXIOM may review unusually large backup datasets and may propose revised pricing where storage requirements materially exceed expected service parameters.

11. Plan Changes

Customers may upgrade service plans at any time. Upgrades take effect at the next billing cycle unless otherwise agreed.

Downgrades may be subject to minimum term commitments. Changes will be documented via a revised Order Form or written agreement between the parties.

12. Pricing

Pricing is defined in the applicable Order Form or Quote. Indicative pricing as at the document version date is set out below. All pricing is exclusive of GST.

12.1 Standard Plan Pricing

Plan	Workstation	Server	Minimum Term
ROCKAXIOM Core	$99 / month	$159 / month	30 days
ROCKAXIOM Enhanced	$149 / month	$199 / month	30 days
ROCKAXIOM Continuity+	$199 / month	$269 / month	24 months

12.2 Optional Add-on Pricing

Add-on	Core	Enhanced	Price
Disaster Recovery Appliance	Available	Available	$39/mo per system
Backup Frequency Upgrade (4-hour intervals)	Available	N/A	$25/mo per system
Backup Frequency Upgrade (1-hour intervals)	N/A	Available	$35/mo per system

Note: Pricing is subject to change in accordance with Clause 33 of the MSA. Customers will receive 30 days written notice of any pricing changes.

13. Acceptance

This Schedule forms part of the ROCKAXIOM Master Services Agreement and is subject to the terms and conditions contained therein. Acceptance of this Schedule is recorded electronically through the ROCKAXIOM onboarding process.

---

ROCKAXIOM is a trading name of Rockley Consulting Pty Ltd | ABN 78 673 819 773 | Tasmania, Australia | rockaxiom.au

Document version: v1 2026.03.04

Service Level Agreement

Hospitality Continuity, Backup and Disaster Recovery Services

Provider	Rockley Consulting Pty Ltd (trading as ROCKAXIOM)
ABN	78 673 819 773
Document Reference	Service Level Agreement (SLA)
Governing Law	Tasmania, Australia
Effective Date	As at the date of acceptance through the ROCKAXIOM onboarding process

Schedule to the Master Services Agreement

This document is accepted electronically as part of the ROCKAXIOM onboarding process. By accepting this agreement through the onboarding portal, you confirm that you have read, understood, and agreed to the terms set out below.

---

1. Purpose

This Service Level Agreement (SLA) defines the operational service commitments associated with ROCKAXIOM continuity services.

This SLA describes:

• support availability
• incident response targets
• escalation procedures
• service credit entitlements
• service level expectations and exclusions

This SLA forms part of the ROCKAXIOM Master Services Agreement and must be read together with the applicable Product Schedule and Shared Responsibility Schedule.

If there is any inconsistency between documents, the order of precedence defined in the Master Services Agreement applies.

2. Support Hours

ROCKAXIOM provides the following support availability:

Support Type	Details
Business Hours	09:00 to 17:00 AEST, Monday to Friday, excluding public holidays in Tasmania
Business Hours Coverage	Incident response, recovery assistance, backup investigation, service enquiries
After-Hours Support	Available for critical continuity events. Includes evenings, weekends, and public holidays. Additional fees may apply unless included in the applicable Product Schedule.

Note: After-hours emergency recovery support is included for ROCKAXIOM Continuity+ customers (one incident per calendar year). Refer to the applicable Product Schedule for details.

3. Incident Classification

Service incidents are categorised according to their operational impact. Response targets represent the time between incident notification or detection and the commencement of active investigation and response by ROCKAXIOM.

Priority	Classification	Description	Response Target
Priority 1	Critical Incident	Complete loss of access to a protected system, or inability to recover from backup where recovery is required for venue operations, causing significant operational disruption	1 Business Hour
Priority 2	High Impact	Significant issue affecting continuity services where partial functionality remains	4 Business Hours
Priority 3	Moderate Impact	Non-critical issue affecting service performance or requiring investigation	1 Business Day
Priority 4	Low Impact	General service requests or administrative enquiries	2 Business Days

Note: Response targets apply during Business Hours unless after-hours support is included within the applicable Product Schedule. An incident is deemed notified when it is received and acknowledged by ROCKAXIOM through the approved support channels defined in the Master Services Agreement.

4. Backup Monitoring

ROCKAXIOM continuously monitors backup activity across all protected systems under the applicable service plan.

4.1 Monitoring Activities

Monitoring includes:

• verification of backup job completion
• detection of backup job failures
• investigation of failed backup jobs
• escalation where failures indicate systemic risk
• weekly restore verification (ROCKAXIOM Enhanced and Continuity+ plans)
• disaster recovery readiness monitoring (ROCKAXIOM Continuity+ plan)

4.2 Monitoring Dependencies

Backup success may depend on factors outside the direct control of ROCKAXIOM, including:

• system availability and online status at the time of scheduled backup
• venue internet connectivity
• operating system and software integrity
• database health and accessibility

Note: Refer to the Shared Responsibility Schedule for a full breakdown of monitoring responsibilities between ROCKAXIOM, the Customer, and Third Party Providers.

Note: ROCKAXIOM verifies backup job completion and the availability of recovery points but does not guarantee the integrity of application data contained within backups where corruption existed in the source system prior to backup. This includes corrupted databases, damaged files, or data encrypted by ransomware prior to the backup process.

5. Incident Response Process

When a service incident is reported by the Customer or detected by ROCKAXIOM monitoring, the following process applies:

1. The incident is logged in the service management system.
2. The incident priority is assessed against the classification criteria defined in Section 3.
3. An initial response is provided within the applicable SLA response target.
4. Investigation and remediation actions commence.
5. Status updates are provided to the Customer where appropriate and practical.
6. The incident is closed upon resolution or stabilisation and confirmed with the Customer.

Note: Incidents should be reported via support@rockaxiom.au or by calling 0432 30 76 25 during Business Hours. Critical incidents (Priority 1) should be reported by phone where possible to ensure the fastest possible response.

6. Recovery Assistance

Where a continuity event requires recovery services, ROCKAXIOM will provide assistance including:

• restoration of backup data to available recovery points
• database recovery assistance (where within scope of the applicable Product Schedule)
• identification of available and suitable restore points
• guidance and coordination during recovery operations

Recovery assistance is provided on a commercially reasonable efforts basis. Recovery timeframes are influenced by multiple factors including:

• availability of backup data at a suitable restore point
• hardware availability and replacement lead times
• network bandwidth at the Customer site
• total data volume requiring restoration
• complexity of the Customer Environment

Specific recovery time objectives (RTO) and recovery point objectives (RPO) are not guaranteed unless expressly stated in the applicable Product Schedule.

Note: Included recovery labour is defined in the applicable Product Schedule. Additional recovery labour beyond what is included will be quoted and agreed prior to commencement. Recovery services beyond the included labour defined in the Product Schedule may be billed at the Provider's standard professional services rates.

Note: Restoration timeframes may increase where backup datasets exceed typical hospitality system sizes. ROCKAXIOM will use reasonable efforts to perform restorations as efficiently as possible but does not guarantee restore duration.

7. Planned Maintenance

ROCKAXIOM may perform planned maintenance on backup infrastructure, monitoring platforms, or supporting systems from time to time.

Where possible:

• maintenance will be scheduled outside Business Hours
• reasonable advance notice will be provided to affected Customers
• planned maintenance windows will be communicated via email to the Customer contact defined in the applicable Order Form

Planned maintenance may temporarily affect monitoring activity or backup job execution. ROCKAXIOM will use reasonable efforts to minimise impact on backup continuity during maintenance periods.

Note: Emergency maintenance required to address critical platform security issues or infrastructure failures may be performed without advance notice where delaying would pose a risk to the platform or Customer data.

8. Customer Responsibilities

The service levels defined in this SLA are contingent on the Customer fulfilling the responsibilities defined in the Shared Responsibility Schedule. In particular:

• maintaining operating systems and software on supported and patched versions
• maintaining reliable internet connectivity at the venue
• ensuring protected systems remain online and accessible during scheduled backup windows
• notifying ROCKAXIOM of any material changes to the Customer Environment prior to implementation
• promptly reporting known or suspected continuity events or backup failures

Failure to meet these responsibilities may impact service delivery and may result in SLA exclusions applying as described in Section 11.

9. Escalation Process

Where an incident requires escalation beyond initial investigation, the following escalation framework applies:

Level	Stage	Description
Level 1	Initial Response	Technical investigation and initial incident response. First point of contact for all reported and detected incidents.
Level 2	Senior Technical	Senior technical review, advanced diagnostics, and escalated remediation where initial investigation has not resolved the incident.
Level 3	Service Management	Service management escalation for complex, prolonged, or high-impact incidents requiring senior coordination and customer communication.

Escalation ensures that appropriate technical expertise and management attention are applied to incidents that cannot be resolved through standard investigation. The Customer may request escalation at any time by contacting ROCKAXIOM and advising that they wish to escalate the incident.

10. Service Credits

Where ROCKAXIOM fails to meet the incident response targets defined in Section 3 of this SLA, the Customer may be eligible for service credits as follows:

Credit Type	Amount
Per-incident service credit (where SLA response target is missed)	10% of the monthly service fee for the affected system
Maximum service credits per billing period	25% of the monthly service fee for the affected system

Service credits are subject to the following conditions:

• The Customer must notify ROCKAXIOM of the basis for the service credit claim in writing within 30 days of the incident.
• Service credits will not be applied where the incident falls within an SLA exclusion category as defined in Section 11.
• Service credits are applied as a credit to the next billing cycle and cannot be redeemed for cash.
• Service credits represent the Customer's sole and exclusive remedy for service level failures.

Note: Service credits do not affect any rights the Customer may have under the Australian Consumer Law. Refer to Clause 21 of the Master Services Agreement for further detail on warranties and statutory rights.

11. SLA Exclusions

Service level targets defined in this SLA do not apply to incidents caused by or arising from the following:

Exclusion Category	Example Scenarios
Customer Environment failures	Hardware failure, software misconfiguration, or system errors within the Customer's own infrastructure
Unsupported systems	Operating systems or platforms not defined within the applicable Product Schedule
Internet connectivity issues	ISP outages, venue network failures, or misconfigured network equipment
Power outages	Mains power loss or UPS failure at the Customer site
Cyber incidents affecting Customer systems	Ransomware, malware, or unauthorised access originating within the Customer Environment
Third-party infrastructure outages	Cloud provider, backup platform vendor, or telecommunications failures
Force majeure events	Natural disasters, government actions, or other events beyond reasonable control

Note: Where an incident involves both ROCKAXIOM-controlled and Customer-controlled factors, ROCKAXIOM will use reasonable efforts to assist and will apply SLA targets to the extent the incident falls within its control. Refer to the Shared Responsibility Schedule for further guidance.

12. Reporting

ROCKAXIOM may provide periodic reporting where requested by the Customer or where included within the applicable Product Schedule.

Reports may include:

• backup activity summaries
• incident response summaries
• service activity reports
• restore verification outcomes (Enhanced and Continuity+ plans)

Reporting frequency and format will be agreed between the parties. Unless expressly included within the applicable Product Schedule, reporting is available on request and is not provided automatically.

13. Changes to this SLA

ROCKAXIOM may update this SLA from time to time to reflect improvements to service delivery, changes in operational practices, or updated service capabilities.

Customers will receive not less than 30 days written notice of any material changes to this SLA. Continued use of the Services following the notice period constitutes acceptance of the updated SLA terms.

Any amendments agreed between both parties must be recorded in writing and confirmed by authorised representatives of each party, in accordance with Clause 33 of the Master Services Agreement.

14. Acceptance

This Service Level Agreement forms part of the ROCKAXIOM service framework and applies to all Customers receiving services under the Master Services Agreement.

By accepting the ROCKAXIOM Master Services Agreement through the onboarding process, the Customer confirms they have read and understood the service level commitments and exclusions contained in this document.

---

ROCKAXIOM is a trading name of Rockley Consulting Pty Ltd | ABN 78 673 819 773 | Tasmania, Australia | rockaxiom.au

Document version: v2 2026.03.04

Shared Responsibility Schedule

Schedule B to the Master Services Agreement

Technology Continuity, Backup and Disaster Recovery Services

Provider	Rockley Consulting Pty Ltd (trading as ROCKAXIOM)
ABN	78 673 819 773
Document Reference	Schedule B · Shared Responsibility Schedule
Governing Law	Tasmania, Australia
Effective Date	As at the date of acceptance through the ROCKAXIOM onboarding process

This document is accepted electronically as part of the ROCKAXIOM onboarding process. By accepting this agreement through the onboarding portal, you confirm that you have read, understood, and agreed to the terms set out below.

---

1. Purpose and Application

This Shared Responsibility Schedule (Schedule B) defines the allocation of operational responsibilities between Rockley Consulting Pty Ltd (trading as ROCKAXIOM), the Customer, and applicable Third Party Providers in the delivery of technology continuity, backup, and disaster recovery services.

This Schedule forms part of the ROCKAXIOM Master Services Agreement (MSA) and is intended to be read in conjunction with the Service Level Agreement (SLA) and applicable Product Schedules. In the event of any inconsistency between this Schedule and the MSA, the order of precedence set out in Clause 1 of the MSA applies.

The purpose of this Schedule is to:

• Clearly define the boundaries of ROCKAXIOM's responsibilities versus Customer responsibilities
• Identify where Third Party Providers operate outside the direct control of either party
• Reduce ambiguity in the event of service interruption, backup failure, or recovery incidents
• Support fair and transparent dispute resolution by establishing agreed operational ownership at the time of contracting

Note: This Schedule does not create any additional warranty, guarantee, or liability beyond what is expressly stated in the MSA. ROCKAXIOM provides technology continuity services, not managed IT services. Customer responsibilities in this Schedule are not optional.

2. Responsibility Key

The following labels are used throughout this Schedule:

Label	Party
ROCKAXIOM	Rockley Consulting
Customer	Customer / Venue
Third Party	Third Party Provider
Shared	Shared responsibility

3. Infrastructure Responsibilities

ROCKAXIOM manages and maintains the backup infrastructure platform. The Customer is responsible for the environment being protected, including all venue-side hardware, networking, and power.

Area	Responsibility
Backup infrastructure platform	ROCKAXIOM
Backup software management and configuration	ROCKAXIOM
Cloud storage platform	Third Party
Data centre infrastructure and uptime	Third Party
Venue internet connectivity	Customer
Venue network equipment (routers, switches, firewalls)	Customer
Server and workstation hardware	Customer
Server power availability and UPS	Customer
Physical security of venue equipment	Customer
Backup agent installation on new systems	Shared

Note: ROCKAXIOM manages the backup platform and its agents, but cannot control or guarantee the availability, stability, or security of the Customer's on-site environment. Service delivery depends on the Customer maintaining a stable, connected, and accessible infrastructure at all times.

4. Backup Operations

ROCKAXIOM manages all aspects of backup job configuration, scheduling, and monitoring. Customer responsibility begins at the source data level.

Area	Responsibility
Backup job configuration	ROCKAXIOM
Backup scheduling	ROCKAXIOM
Backup monitoring and alerting	ROCKAXIOM
Backup alert investigation and escalation	ROCKAXIOM
Backup storage retention management	ROCKAXIOM
Backup data encryption (in transit and at rest)	ROCKAXIOM
Backup data integrity (source data quality)	Customer
Ensuring systems are online and accessible for backup	Customer
Notification to ROCKAXIOM of backup scope changes (new servers, databases, systems)	Customer
Backup success where dependent on system availability	Shared
Periodic backup restoration testing (at ROCKAXIOM discretion or Customer request)	ROCKAXIOM
Validation of restored data following testing	Customer

Note: If a system is offline, powered down, disconnected from the network, or experiencing errors at the time a scheduled backup runs, the backup may fail. ROCKAXIOM will alert on such failures but cannot guarantee backup success where system availability is outside its control.

Note: The Customer must notify ROCKAXIOM of any new servers, databases, or systems that require backup protection. Systems not included within the agreed backup scope are not covered by the Services.

Note: Backup restoration testing may be performed periodically at ROCKAXIOM's discretion or at the Customer's request. Validation of restored data and applications remains the Customer's responsibility.

5. System Maintenance

ROCKAXIOM is not a managed IT service provider. The Customer is wholly responsible for system maintenance, patching, and security hygiene within the Customer Environment.

Area	Responsibility
Operating system updates and patching	Customer
Application updates (including POS software)	Customer
Database maintenance and integrity	Customer
Antivirus and anti-malware protection	Customer
Patch management policy and compliance	Customer
User account security and access controls	Customer
Network firewall management and rule maintenance	Customer
Supported operating systems and platforms	Customer
Notification to ROCKAXIOM of major system changes	Customer

Note: ROCKAXIOM's ability to protect and restore systems is directly dependent on the Customer maintaining supported, patched, and stable operating environments. Failure to maintain systems may result in backup failures or incomplete restoration outcomes.

6. Monitoring Responsibilities

ROCKAXIOM monitors backup infrastructure and job outcomes. System performance, hardware health, and network stability within the Customer Environment are the Customer's responsibility.

Area	Responsibility
Backup job success monitoring	ROCKAXIOM
Backup failure alerting	ROCKAXIOM
Disaster recovery readiness monitoring	ROCKAXIOM
Backup platform health and availability	ROCKAXIOM
System performance monitoring (CPU, disk, RAM)	Customer
Hardware health monitoring (SMART, RAID)	Customer
Network performance and connectivity monitoring	Customer
UPS and power monitoring	Customer
POS application monitoring and uptime	Customer

7. Disaster Recovery

ROCKAXIOM provides restoration assistance and recovery guidance. Business continuity planning, infrastructure rebuild, and operational decisions during a recovery event remain the Customer's responsibility.

Area	Responsibility
Backup restoration assistance	ROCKAXIOM
Database restore assistance (where in scope)	ROCKAXIOM
Recovery process guidance and coordination	ROCKAXIOM
Identifying available clean recovery points	ROCKAXIOM
Disaster recovery decision making	Customer
Infrastructure rebuild and configuration	Customer
Replacement hardware procurement	Customer
Business continuity planning and testing	Customer
Validation of restored data and applications	Shared
Communication with staff and stakeholders during incident	Customer
Recovery time and recovery point objectives	Shared

Note: ROCKAXIOM assists in the recovery process using commercially reasonable efforts. ROCKAXIOM does not guarantee all data will be recoverable or that systems can be restored to a specific point in time. Recovery outcomes depend on backup data availability, infrastructure condition, and Customer-controlled systems.

Note: Recovery time may be affected by hardware performance, storage speed, system capacity, and network bandwidth within the Customer Environment. These factors are outside ROCKAXIOM's control.

8. Security Responsibilities

ROCKAXIOM secures the backup platform and all backup data. Endpoint security, user access management, and cyber security practices within the Customer Environment are the Customer's responsibility.

Area	Responsibility
Backup platform security	ROCKAXIOM
Encryption of backup data (transit and at rest)	ROCKAXIOM
Secure storage of backup data in cloud infrastructure	ROCKAXIOM
Platform access controls and authentication	ROCKAXIOM
Endpoint security (antivirus, EDR)	Customer
User password management and MFA	Customer
Malware and ransomware prevention	Customer
Cyber security policies and staff training	Customer
Email security and phishing prevention	Customer
Network perimeter security	Customer
Incident response for Customer Environment breaches	Customer
Maintaining appropriate cyber and business interruption insurance	Customer

Note: ROCKAXIOM cannot prevent ransomware, malware, or security incidents that originate within the Customer Environment. The backup platform is a protective measure and does not substitute for appropriate endpoint security, cyber insurance, or a Customer incident response plan.

Note: Customers are strongly encouraged to maintain appropriate cyber security and business interruption insurance. ROCKAXIOM services do not replace insurance coverage.

9. Data Responsibilities

The Customer retains full ownership of all Customer Data. ROCKAXIOM holds a backup copy for the purpose of restoration services only.

Area	Responsibility
Ownership of Customer Data	Customer
Data integrity at source	Customer
Backup copy of Customer Data	ROCKAXIOM
Data restoration services	ROCKAXIOM
Data validation and testing after restore	Shared
Data export prior to termination	Customer
Compliance with applicable data privacy laws	Shared
Notifiable data breach management	Shared

Note: Restored data must be validated by the Customer before returning systems to production use. ROCKAXIOM provides restoration assistance but does not guarantee the completeness or accuracy of restored data where source data was already corrupted or incomplete at the time of backup.

10. Third Party Provider Dependencies

ROCKAXIOM engages Third Party Providers to deliver components of the service. These providers operate independently and their availability is outside the direct control of either ROCKAXIOM or the Customer.

Third Party Service	Responsibility
Cloud infrastructure provider (storage and compute)	Third Party
Backup platform vendor (software and licensing)	Third Party
Internet service provider (venue connectivity)	Third Party
Power and utilities provider	Third Party
POS software vendor (H&L, BePoz, SwiftPOS, other)	Third Party
Microsoft SQL Server and database platforms	Third Party
Operating system vendors (Microsoft, etc.)	Third Party
Hardware manufacturers and warranty providers	Third Party

Note: ROCKAXIOM is not responsible for service outages, failures, or limitations caused by Third Party Providers. Where Third Party Provider failures impact backup or recovery operations, ROCKAXIOM will use reasonable efforts to communicate the impact and assist where possible within its control.

11. Disaster Scenario Responsibility Reference

The following table provides a practical reference for common disaster and incident scenarios relevant to hospitality and technology continuity environments.

Scenario	Description	Primary Responsibility
Server hard drive failure	Physical failure of venue server storage	Shared
Power outage at venue	Loss of mains power at the Customer site	Customer
Internet outage at venue	Loss of venue network connectivity	Third Party
Cloud infrastructure outage	Provider-side platform availability failure	Third Party
Database corruption (pre-backup)	Data corrupted before backup process runs	Customer
Ransomware infection	Malware encrypts Customer Environment data	Customer
Backup job failure (system offline)	Scheduled backup fails due to offline system	Customer
Backup job failure (platform issue)	Scheduled backup fails due to platform fault	ROCKAXIOM
Corrupted data backed up successfully	Clean backup unavailable due to pre-existing corruption	Shared
Backup restoration	Executing restoration from available backup data	ROCKAXIOM
Replacement hardware required	Customer must source new hardware for rebuild	Customer
POS software reinstallation	Vendor application must be reinstalled post-restore	Customer
Restored data validation	Confirming restored systems operate correctly	Shared
Business interruption during recovery	Operational downtime during recovery period	Customer
Staff notifications during incident	Internal communications during continuity event	Customer

Note: This scenario table is a practical reference guide and does not override any provision of the MSA or SLA. Where a scenario is marked as Shared, refer to the relevant section of this Schedule and the applicable Product Schedule for further detail on the allocation of specific tasks.

12. Scope of Service Clarification

ROCKAXIOM provides technology continuity and backup services only. The Services do not include full IT management, infrastructure support, network administration, or cyber security management unless expressly stated in a Product Schedule.

Service Area	Included in ROCKAXIOM Services
Backup job management and monitoring	ROCKAXIOM
Restoration assistance from backup data	ROCKAXIOM
Backup platform security and encryption	ROCKAXIOM
Full IT management and helpdesk support	Customer / Third Party
Network administration and configuration	Customer / Third Party
Cyber security management and SOC services	Customer / Third Party
Hardware procurement and replacement	Customer / Third Party
POS software support and administration	Customer / Third Party
Business continuity planning and testing	Customer / Third Party

Note: Where a Customer requires services beyond the ROCKAXIOM backup and continuity scope, those services must be sourced separately and defined in an applicable Product Schedule or separate agreement. ROCKAXIOM accepts no responsibility for gaps in coverage arising from services not expressly included in the agreed scope.

13. Partner-Led Engagements

Where ROCKAXIOM services are introduced or managed through a third-party partner (including IT resellers, consultants, or integrators), the following responsibility allocation applies.

Area	Responsibility
ROCKAXIOM platform and service delivery	ROCKAXIOM
Partner relationship management with Customer	Third Party
Partner-provided scoping and recommendations	Third Party
Customer acceptance of ROCKAXIOM terms	Customer
ROCKAXIOM MSA and Schedule obligations	ROCKAXIOM
Partner advice not covered under ROCKAXIOM agreement	Third Party

Note: In partner-led engagements, ROCKAXIOM's obligations extend to the Customer as defined in the MSA. ROCKAXIOM is not responsible for representations, advice, or commitments made by partners that fall outside the scope of the ROCKAXIOM service agreements.

14. Acknowledgement and Acceptance

By accepting the ROCKAXIOM Master Services Agreement through the onboarding process, both parties confirm they have read, understood, and agreed to the responsibilities set out in this Shared Responsibility Schedule.

---

ROCKAXIOM is a trading name of Rockley Consulting Pty Ltd | ABN 78 673 819 773 | Tasmania, Australia | rockaxiom.au

Document version: v2 2026.03.04