Messaging Compliance Addendum

The platform enables Client to send SMS/MMS messages, place calls, and send emails to Client's own contacts through third-party carriers and providers (including Twilio and connected email infrastructure). Client — not LATTICE — initiates, controls, and is solely responsible for all communications sent from Client's account. LATTICE acts solely as a technology provider and passive conduit and does not review, approve, or control the content, recipients, timing, or consent basis of Client's communications.

Client shall comply with all applicable laws, regulations, and industry rules governing its communications, including without limitation the Telephone Consumer Protection Act (TCPA), FCC regulations, applicable state telemarketing and mini-TCPA laws, the CAN-SPAM Act, the CTIA Messaging Principles and Best Practices, and all carrier and A2P 10DLC registration requirements. Without limiting the foregoing, Client shall:

2.1 Consent. Obtain and maintain legally sufficient consent from every contact before messaging or calling them — including prior express written consent for any marketing or promotional SMS/MMS or autodialed/prerecorded calls — and message contacts only within the scope of the consent given.

2.2 Consent Records. Retain verifiable records of each contact's consent (source, date, time, method, and consent language) for at least four (4) years, and produce such records to LATTICE within five (5) business days upon request in connection with any complaint, audit, or carrier inquiry.

2.3 Opt-Outs. Honor all opt-out requests immediately, maintain functioning STOP/HELP keyword handling, include required opt-out language in messages, and not message any contact who has revoked consent.

2.4 A2P 10DLC Registration. Provide truthful, accurate, and complete information for brand and campaign registration, use messaging only for the registered use cases, and promptly update registrations when Client's use changes. Client is responsible for all registration fees, carrier surcharges, and pass-through fees.

2.5 Content Restrictions. Not send content prohibited by carrier or CTIA rules, including SHAFT content (sex, hate, alcohol, firearms, tobacco/cannabis except as expressly permitted and registered), phishing, deceptive content, or content promoting unlawful activity.

2.6 Calling and Quiet Hours. Comply with all calling-time restrictions, quiet hours, do-not-call registry obligations, and caller ID requirements applicable to Client's calls and texts.

2.7 Email. For email campaigns, comply with CAN-SPAM, including accurate header and sender information, non-deceptive subject lines, a functioning unsubscribe mechanism honored within ten (10) business days, and a valid physical postal address.

2.8 End User Notices. Provide End Users with all legally required privacy notices and disclosures regarding Client's collection and use of their contact information.

3.1 Suspension. LATTICE may, without liability and with or without prior notice, suspend or restrict Client's messaging, calling, or email functionality upon (a) any suspected violation of this Addendum or applicable law, (b) any carrier, provider, or registry flag, complaint threshold, or compliance inquiry, or (c) unusually high opt-out, spam-report, or error rates. LATTICE may condition reinstatement on remediation satisfactory to LATTICE and the applicable providers.

3.2 Pass-Through of Fees and Penalties. Client is responsible for, and shall reimburse LATTICE on demand for, all carrier fines, penalties, surcharges, audit costs, and provider-imposed fees arising from Client's communications or registrations.

3.3 No Legal Advice. LATTICE does not provide legal advice. Any consent language, templates, or compliance tooling made available by LATTICE are provided as a convenience only, and Client remains solely responsible for its own compliance and should consult its own counsel.

Client represents and warrants that: (a) every contact uploaded to or messaged through the platform has provided legally sufficient consent for the communications Client sends; (b) all information provided for brand/campaign registration is accurate; (c) Client's contact lists were not purchased, scraped, or otherwise acquired without valid consent; and (d) Client's use of the platform will comply with this Addendum and all applicable laws.

Client shall defend, indemnify, and hold harmless LATTICE, its members, officers, employees, and contractors from and against any and all claims, actions, demands, investigations, damages, fines, penalties, settlements, and costs (including reasonable attorneys' fees) arising out of or related to (a) Client's communications sent through the platform, (b) any alleged or actual violation of the TCPA, state telemarketing laws, CAN-SPAM, CTIA guidelines, or carrier requirements, (c) any inaccuracy in Client's registrations or consent records, or (d) any claim by an End User or third party relating to Client's messaging, calling, or email activities. This obligation applies regardless of whether the claim is brought as an individual or class action.

This Addendum remains in effect for as long as Client has access to any messaging, calling, or email functionality. Sections 2.2, 3.2, 4, 5, and 6 survive termination of this Addendum, the Terms of Service, or any related agreement.

If this Addendum conflicts with the Terms of Service or any other agreement between the parties regarding the subject matter of messaging compliance, this Addendum controls.