1. Scope and Applicability
This Export Compliance Addendum (“Addendum”) applies to all use, distribution, sublicensing, integration, commercialization, and deployment of the STCP software (“STCP”), whether in source code or object code form, and whether bundled with or incorporated into other products or services, including but not limited to server platforms such as Mastodon.
By acquiring, installing, integrating, distributing, or using STCP, you acknowledge and agree to be bound by this Addendum.
2. Export-Control Classification and Cryptographic Nature
STCP implements strong cryptography, key exchange mechanisms, and encrypted transport functionality.
Such functionality is subject to export-control regulations, including but not limited to:
- national cryptographic export laws,
- sanctions and embargo regulations,
- dual-use regulations governing information security products,
- restrictions on military, intelligence, or surveillance use,
- restrictions on export to prohibited or denied persons, entities, or destinations.
STCP’s authors, rights holders, licensors, or distributors make no representation regarding the classification or regulatory status of STCP under any specific jurisdiction’s export laws.
3. User / Licensee Obligations
You (the “Licensee”) expressly agree that:
3.1 Compliance Responsibility
You are solely and entirely responsible for determining, understanding, and complying with all applicable export, import, transfer, and use restrictions relating to cryptographic software in every jurisdiction where STCP is used or made available.
3.2 Permitted and Prohibited Transfers
You shall not export, re-export, ship, transfer, transmit, make available, or provide access to STCP:
- to any country, entity, organization, or individual for whom such actions are prohibited under applicable law,
- for any purpose prohibited under applicable law, including restricted military, intelligence, surveillance, or weapons-related use,
- without first obtaining all mandatory governmental authorizations.
3.3 Distribution and Integration
If you integrate STCP into a product or service (including Mastodon or any derived work), you assume full legal and regulatory responsibility for:
- the export classification of your combined product,
- all downstream distribution (direct or indirect),
- compliance by your customers, affiliates, users, and resellers.
3.4 Duty to Maintain Records
You agree to maintain accurate records of any export-controlled transfers or deployments as required by applicable law.
4. No Warranty of Export or Legal Compliance
STCP is provided without any warranty or representation regarding:
- legality of export,
- eligibility for import,
- compliance with sanctions or dual-use regulations,
- classification under any export regime,
- suitability for deployment in regulated environments.
STCP’s authors, contributors, licensors, and distributors assume no responsibility for your compliance obligations.
Any reliance by you on interpretations of export law, whether explicit or implied, is at your sole risk.
5. Limitation of Liability
To the fullest extent permitted by applicable law, the authors, contributors, licensors, and distributors of STCP disclaim and exclude all liability, including without limitation:
- fines, penalties, sanctions, enforcement actions,
- loss of business, data, revenue, or reputation,
- indirect, special, incidental, consequential, or punitive damages,
- costs associated with legal defense, investigation, or remediation.
No such party shall be liable for any violation of export, import, sanctions, or cryptographic-use regulations arising from:
- your use of STCP,
- your distribution of STCP,
- your integration of STCP into other systems,
- downstream use by third parties.
These limitations apply regardless of legal theory, including contract, tort, negligence, and statutory liability.
6. Indemnification
You agree to fully indemnify, defend, and hold harmless the authors, contributors, licensors, copyright holders, and distributors of STCP from and against:
- any claim, investigation, enforcement action, penalty, fine, or proceeding
- arising out of or relating to your use, integration, distribution, export, re-export, or transfer of STCP,
- including reasonable attorney’s fees and costs.
Your indemnification obligations survive termination of your license or use of STCP.
7. Obligation to Seek Legal Guidance
If you are uncertain whether your use, integration, distribution, or export of STCP complies with applicable regulations,
you agree to consult competent legal counsel or the appropriate governmental authority before proceeding.
STCP should not be deployed, redistributed, or integrated into commercial or public systems (including server platforms such as Mastodon) unless the Licensee has confirmed compliance with all relevant laws.
8. Entire Agreement and Precedence
This Addendum supplements any license applicable to STCP. In the event of a conflict, this Addendum takes precedence with respect to export-control, sanctions, cryptography-related liability, and compliance matters.