Product Specific Terms

A client who has subscribed to a Premium Tier, may subscribe to these Add-On Features for an additional fee(s), as set out in the applicable Order Form.

Business Continuity Management System.

The Business Continuity Management System or “BCM” allows Client to ensure operational continuity by facilitating payload signing for the blockchain independent of the Fireblocks platform. It is intended for use when the Fireblocks Services are unavailable (for example, in temporary outage scenarios) and is built on top of Hosted MPC (another Add-on Feature, described below).

a. Installation.

In order the use BCM, Client acknowledges:

i. it must provide, set up and configure its infrastructure so that it complies with the functional requirements stated by Fireblocks, including, but not limited to: ensuring it has an active Hosted MPC subscription with Fireblocks; its own blockchain node(s) to broadcast transactions; and, a properly configured Hosted MPC Environment;

ii. it must download and properly install the relevant software (the “BCM Software”) made available by Fireblocks in accordance with the requirements provided by Fireblocks; and,

iii. it is solely responsible for broadcasting transactions signed via BCM to the relevant blockchain.

b. Client acknowledges and agrees:

i. Notwithstanding any recommendations Fireblocks may make with respect to the setup of BCM, Client bears sole responsibility for appropriately configuring, patching, and utilizing the necessary infrastructure, including but not limited to any security measures Client, in its sole discretion, deems are necessary (e.g. the required firewall setup, network routing setup, access list setup, RPC authentication methods);

ii. No Transaction Authorization Policy functionality will be available as part of BCM and Client will be solely responsible for putting in place compensating controls to ensure that transactions are appropriately authorized.

iii. While Fireblocks will use commercially reasonable efforts to notify Client when an update or upgrade to the BCM Software is available, Client will be solely responsible for installing this update in a timely manner to ensure it is running the latest version of the BCM Software.

c. DISCLAIMER
CLIENT ACKNOWLEDGES AND AGREES THAT CLIENT IS SOLELY RESPONSIBLE FOR THE SETUP, CONFIGURATION, MANAGEMENT, MAINTENANCE AND SECURITY OF THE CLIENT’S INFRASTRUCTURE AND ITS BCM INSTANCE. FIREBLOCKS WILL HAVE NO RESPONSIBILITY OR LIABILITY FOR ANY LOSSES INCLUDING LOSS OF DIGITAL ASSETS) AS A RESULT OF ANY DELAYS, FAILURES, OR OTHER MISBEHAVIOR RESULTING FROM SLOW, UNRESPONSIVE, MISCONFIGURED OR MALFUNCTIONING BCM.

d. SLA Exclusion
Given that it facilitates transaction signing without the use of the Fireblocks platform, Client acknowledges that Fireblocks’ SLA shall not apply to any use of BCM.

Cold Wallet.

The Cold Wallet offering allows Client to create a Workspace for which the relevant Private Key Share is stored offline.

a. Warranties.

Client represents, warrants, and undertakes that it: (i) will ensure that it procures and provisions any Cold Wallet Device appropriately and in accordance with the specifications set out in the Help Center and the Documentation; and (ii) is solely responsible for ensuring the security of the Cold Wallet Device, as well as the Recovery Passphrase and Disaster Recovery Kit with respect to the Cold Wallet (as provided in the Agreement).

b. Fireblocks Disclaimers.

Client acknowledges and agrees that Fireblocks is not liable for any loss, including any loss of any digital assets, arising from or relating to the provisioning and security of the Cold Wallet Device.

Embedded Wallets.

Subject to these terms, Client may provide its clients (each an “End User”) access to the Services through a white-labeled Client application (the “Client App”) in the form of an embedded wallet (the “Embedded Wallets”).

a. Client App.

i. To develop the Client App, Fireblocks will make a software development kit (“SDK”) available to Client, in addition to documentation in the Fireblocks developer portal (the “Portal”). Client acknowledges and agrees that it is solely responsible for monitoring the Portal for any updates and upgrades to the SDK that Fireblocks may make available during the Term.

b. Usage Rights to Service; End User Keys.

Through the Client App, Client will:

i. Provide the End User with the capability to generate a Private Key Share which enables the End User to independently execute transactions (the “End User Private Key Share”);

ii. allow the End User to generate a method to recover the End User Private Key Share in the event the End User’s Device containing the End User Private Key Share is lost, stolen, damaged, or otherwise inaccessible (the “End User Recovery Passphrase”); and,

iii. advise the End User of the availability of a Disaster Recovery Kit through which End User may access the digital assets in the End User’s Wallet(s) without any involvement from Fireblocks (the “End User Disaster Recovery Kit”).

Collectively, the End User Private Key Share, End User Recovery Passphrase and End User Disaster Recovery Kit shall be referred to as the “End User Keys”.

c. End User Key Obligations.

Client acknowledges and agrees that:

i. only End Users are permitted to use the End User Keys, and Client will advise End User of the best practice to prevent any unauthorized access to, or use of, the End User Keys;

ii. it is solely responsible and liable for the establishment of the appropriate technical, organizational and security measures to ensure that End Users safeguard access to the End User Keys, and Client will notify Fireblocks promptly upon becoming aware of any unauthorized access to or use of the End User Keys;

iii. Client is solely responsible for any consequences, losses, expenses, costs, and claims arising from or related to any incorrect, neglectful, or unauthorized use of the End User Keys or Client App and Fireblocks has no responsibility for any loss or damage due to Client’s or the End User’s failure to secure the End User Keys or Client App as required by this section, including, but not limited to, a failed recovery of an End User wallet, loss of data, erroneous transmission of digital assets, loss of digital assets, and/or hacking by any Third Party;

iv. Fireblocks does not have the ability to recreate or access the End User Keys and Fireblocks cannot assist in their retrieval in the event End Users lose their End Users Keys;

v. it is Client’s sole responsibility to ensure: (i) End Users backup their End User Keys; (ii) store the End User Disaster Recovery Kit and Recovery Passphrase in a secured, offline location, with strict protocols setting adequate security measures; and (iii) from time to time, perform a recovery test to ensure the Disaster Recovery Kit operates in accordance with Client’s recovery procedure;

vi. any loss of the End User Keys could lead to permanent damage and complete loss of control over and inability to recover any digital assets and Client represents that it will advise End Users of the same;

vii. Client shall enter into an agreement with the End User related to its use of the Client App and the Embedded Wallets that contains terms not less restrictive than the terms set forth herein; additionally Client shall advise End User of the End User Keys and their various functionalities; and,

viii. nothing in these Product Specific Terms shall be construed to create a relationship, contractual or otherwise, between End User and Fireblocks.

d. Client’s Liability and Indemnification of Fireblocks.

Client is solely responsible for its internal policies and procedures with respect to delegating use of the Embedded Wallets to End Users, including any consents required from its End Users to share any Usage Data. Client will be liable for all actions taken by its End Users, including any breach by End Users of these terms. Without derogating from the above, Fireblocks is not responsible or liable in any way for any of the following:

i. the development of the Client App, including its functionality and security;

ii. any unauthorized access to or use of the Embedded Wallets, including by any Third Party and/or in case of theft, embezzlement or similar cases;

iii. Client’s failure to enable the End User Disaster Recovery Kit;

iv. storage of the End User Keys; and/or,

v. any failure by Client to obtain any consents required by End User with respect to Usage Data. Client will fully indemnify Fireblocks for any losses, damages, or claims made by End User, or any Third Party, arising from the Client’s and/or End User’s use of the Embedded Wallets.

e. Representations and Warranties; Disclaimers.

i. Client represents and warrants that: (i) it has explained to End User the implications of and the obligations associated with using the Embedded Wallets, in accordance with the terms of the Agreement; (ii) it is solely responsible for ensuring that its activities on the Fireblocks platform, including the Embedded Wallets, are in compliance with any regulatory obligations, notwithstanding any use-cases proposed by Fireblocks.

ii. THE EMBEDDED WALLETS SERVICE IS PROVIDED “AS IS” AND FIREBLOCKS AND ITS SUPPLIERS, IF ANY, MAKE NO WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, REGARDING THE EMBEDDED WALLET SERVICE, AND SPECIFICALLY DISCLAIM THE WARRANTIES OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE, TO THE MAXIMUM EXTENT POSSIBLE BY LAW. FIREBLOCKS DOES NOT WARRANT THAT THE EMBEDDED WALLETS SERVICE WILL MEET CLIENT’S REQUIREMENTS, OPERATE WITHOUT INTERRUPTION OR BE ERROR FREE.

f. Term and Termination.

i. Termination for Breach. If Client and/or End User commits a material breach of these terms, or if Fireblocks reasonably believes that Client and/or End User is in violation of these terms or any applicable law, Fireblocks may immediately terminate End User’s access to the Embedded Wallets and/or terminate Client’s Agreement upon written notice to Client.

ii. Effect of Termination. Upon termination, Client shall immediately deactivate any End User wallet(s).

Hosted MPC

Fireblocks hosted multiparty computation (MPC) allows Client to host its Private Key, as well as the two MPC cloud key shares typically held by Fireblocks in its cloud environment (the three key shares collectively referred to as the “Key Shares”) in the Client’s controlled environment either on-premise or in the cloud, in Client’s discretion (“Hosted MPC”). Client is solely responsible for any fees charged by participating third parties and any hardware required by Client to enable Hosted MPC.

a. Installation. In order to use Hosted MPC, Client acknowledges: 

i. it must provide, set up and configure its infrastructure so that it complies with the functional requirements stated by Fireblocks; and,

ii. it must download and properly install the relevant software made available by Fireblocks (the “Hosted MPC Software”). While Fireblocks will use commercially reasonable efforts to notify Client when an update or upgrade to the Hosted MPC Software is available, Client will be solely responsible for installing the latest version of the Hosted MPC Software.

iii. Client Keys. Client acknowledges and agrees that by virtue of using Hosted MPC it will have sole responsibility for the security and integrity of the Key Shares. Notwithstanding any recommendations Fireblocks may make with respect to the setup of Hosted MPC, Client bears sole responsibility for appropriately configuring, patching, and utilizing the necessary infrastructure, including but not limited to any security measures Client, in its sole discretion, deems are necessary (e.g. the required firewall setup, network routing setup, access list setup, RPC authentication methods,);

iv. DISCLAIMER. CLIENT ACKNOWLEDGES AND AGREES THAT CLIENT IS SOLELY RESPONSIBLE FOR THE SETUP, CONFIGURATION, MANAGEMENT, MAINTENANCE AND SECURITY OF THE CLIENT’S INFRASTRUCTURE AND HOSTED MPC. NOTWITHSTANDING ANY RECOMMENDATIONS THAT FIREBLOCKS MAY MAKE IN ITS INSTALLATION GUIDE OR ELSEWHERE, FIREBLOCKS WILL HAVE NO RESPONSIBILITY OR LIABILITY FOR ANY LOSSES (INCLUDING LOSS OF DIGITAL ASSETS) AS A RESULT OF ANY DELAYS, FAILURES, OR OTHER MISBEHAVIOR RESULTING FROM SLOW, UNRESPONSIVE, MISCONFIGURED OR MALFUNCTIONING HOSTED MPC SOFTWARE ON CLIENT’S SERVERS.

iv. SLA Exclusion. Client acknowledges that Fireblocks’ SLA shall not include any Downtime Incidents (as defined in the SLA, fireblocks.com/sla) that are caused by or attributable to the Client’s infrastructure, including its use of Hosted MPC and/or Client’s own act or omission.

Key Link Solution

These terms govern Client’s use of Fireblocks’ solution through which the Client’s private key material (“Private Key(s)”) is entirely managed and controlled by the Client (“Key Link Solution”).

a. Installation. Client acknowledges: (i) it must provide, set up and configure its infrastructure (including, but not limited to, deploying the Fireblocks Key Link agent and integrating it with the Client key management system) so that it complies with the interface and functional requirements stated by Fireblocks; and (ii) this proper installation is necessary to enable the Client to use its Private Keys to execute transactions when using the Service.

b. Client Keys. Client acknowledges that, by virtue of its use of the Key Link Solution, the Client generates and stores its Private Keys within its own infrastructure.

c. Client acknowledges and agrees:

i. Fireblocks does not generate, nor does it have access to, the Private Keys and therefore Client shall be solely responsible for the security of the Private Key, including making any backups; viii. only Client’s Owner and/or Users are permitted to use the Private Key and Client will prevent any unauthorized access to, or use of, the Private Key;

ii. in the event of any unauthorized access to or use of the Private Key the Client bears sole responsibility for any mitigation efforts it deems necessary to prevent the loss of its digital assets;

iii. Client bears sole responsibility for appropriately configuring, patching, and utilizing the infrastructure in which it stores its Private Key, including any required firewall setup, network routing setup, access list setup, RPC authentication methods, and any other security measures deemed necessary, in the Client’s sole discretion;

iv. Fireblocks does not have the ability to recreate or access the Private Key and Fireblocks cannot assist in its retrieval in the event of loss by Client; and,

v. any loss of the Private Key could lead to permanent damage and complete loss of control over and inability to recover its digital assets.

d. DISCLAIMER. CLIENT ACKNOWLEDGES AND AGREES THAT CLIENT IS SOLELY RESPONSIBLE FOR THE SETUP, CONFIGURATION, MANAGEMENT, MAINTENANCE AND SECURITY OF THE CLIENT’S INFRASTRUCTURE. FIREBLOCKS WILL HAVE NO RESPONSIBILITY OR LIABILITY FOR ANY LOSSES (INCLUDING LOSS OF DIGITAL ASSETS) AS A RESULT OF ANY DELAYS, FAILURES, OR OTHER MISBEHAVIOR RESULTING FROM SLOW, UNRESPONSIVE, MISCONFIGURED OR MALFUNCTIONING HARDWARE ON WHICH THE PRIVATE KEY IS STORED.

e. SLA Exclusion. Client acknowledges that Fireblocks’ SLA shall not include any Downtime Incidents (as defined in the SLA, fireblocks.com/sla) that are caused by or attributable to the Client’s infrastructure, including its key management system and/or Client’s own act or omission.

Node Router

Fireblocks’ Node Router allows Clients to use their own blockchain node(s) when using the Service. When a Client purchases Node Router, Fireblocks’ support team will collaborate with the Client to provision the necessary connection and establish a link to the Client’s dedicated blockchain node (the “Client Node”).

a. Maintenance and Security of Nodes. Client acknowledges and agrees that it is solely responsible for the setup, configuration, management, maintenance and security of the Client Node. Fireblocks will have no responsibility or liability for any losses (including digital assets losses) as a result of Client’s use of Node Router services, howsoever arising, including any delays, drops, failures, stuck, or any other misbehavior resulting from a slow, unresponsive, misconfigured or malfunctioning Client Node. Additionally, the Client acknowledges that Fireblocks will not engage Fireblocks’ own node infrastructure in the event Client Node is inactive or otherwise malfunctions, whether as a backup or for any other means of recovery.

b. Security Measures. The Client bears sole responsibility for appropriately configuring, patching, and utilizing the Client Node, including firewall setup, network routing setup, access list setup, RPC authentication methods, and any other security measures deemed necessary, in the Client’s sole discretion.

c. SLA Exclusion. Client acknowledges that Fireblocks’ SLA shall not include any Downtime Incidents (as defined in the SLA at fireblocks.com/sla) that are caused by or attributable to the Client Node and/or Client’s own act or omission.

Raw Signing

The Raw Signing feature allows Client to sign transactions on non-supported blockchains or to use features or functionality that are not natively supported by the Fireblocks platform. If the Client chooses to enable Raw Signing in its Workspace(s), Client acknowledges and agrees that it is solely responsible for its setup and implementation and for ensuring the security of the Raw Signing feature, including using the Transaction Authorization Policy to determine and/or limit the range of derivation paths, vault accounts and digital assets available for Raw Signing. In addition, Client acknowledges that once a blockchain or feature is natively supported by the Fireblocks platform, Fireblocks strongly encourages Client to use the native integration, instead of using Raw Signing. FIREBLOCKS WILL HAVE NO RESPONSIBILITY OR LIABILITY FOR ANY LOSSES (INCLUDING LOSS OF DIGITAL ASSETS) AS A RESULT OF CLIENT’S USE OF RAW SIGNING. ON NOTICE TO CLIENT, FIREBLOCKS RESERVES THE RIGHT TO DISCONTINUE CLIENT’S USE OF RAW SIGNING IF, IN FIREBLOCK’S SOLE DISCRETION, SUCH USE WOULD RESULT IN SECURITY RISKS TO THE SERVICE OR OTHER CLIENTS.

Fireblocks Security Posture Management

a. The Fireblocks Security Posture Management (“FSPM”) solution allows Client to continuously monitor its security posture by identifying potential security flaws for review and action.

b. Client acknowledges and agrees:

i. The FSPM solution is based on industry-recognized information security principles, evolving threat intelligence, recommended best practices, and the Client’s configurations and uses of the Fireblocks’ platform. FSPM findings are for informational purposes only and do not constitute legal or security advice, or an assurance that the Client’s environment is free from risks.

ii. The FSPM solution may categorize identified risks as “High,” “Medium,” “Low”, or “Info”. These categorizations are indicative only and may not align with Client’s internal risk management framework, policies, or risk tolerance. Client is solely responsible for reviewing, validating, and addressing any findings, including any actions to be taken. Client is solely responsible for maintaining its own security controls and should not rely solely on the solution’s outputs to assess or manage security within its environment.

iii. The FSPM solution is not intended to replace or substitute Client’s own security reviews, assessments, audits, or other independent evaluations. Client should continue to maintain appropriate procedures to monitor, assess, and manage its security posture in line with any applicable standards and regulatory obligations.

iv. The FSPM solution’s scope is limited to the Fireblocks platform and it may not assess or detect potential security flaws in third-party products or services (including any Third Party Services) used by the Client to access or integrate with the platform.

v. The FSPM solution may uncover risks using an agentic policy analyzer, which is an AI-based attack simulator, and to which the AI Services terms within these Product Specific Terms apply.

c. Disclaimer. THE FSPM SOLUTION IS PROVIDED “AS IS” AND FIREBLOCKS AND ITS SUPPLIERS, IF ANY, MAKE NO WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, REGARDING THE FSPM SOLUTION, AND SPECIFICALLY DISCLAIM THE WARRANTIES OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE, TO THE MAXIMUM EXTENT POSSIBLE BY LAW. FIREBLOCKS DOES NOT WARRANT THAT THE FSPM SOLUTION WILL MEET CLIENT’S REQUIREMENTS, OPERATE WITHOUT INTERRUPTION OR BE ERROR FREE, OR THAT ALL THREATS, VULNERABILITIES, MISCONFIGURATIONS OR OTHER SECURITY FLAWS WILL BE DISCOVERED, REPORTED OR REMEDIED. FIREBLOCKS HAS NO RESPONSIBILITY FOR ANY DAMAGE, INCLUDING ANY LOSS OF DIGITAL ASSETS AND/OR DAMAGE TO THE WORKSPACE, IN THE EVENT OF ANY CLIENT ACTION OR INACTION TAKEN DIRECTLY OR INDIRECTLY AS A RESULT OF THE OUTPUTS PROVIDED BY THE FSPM SOLUTION.