Additional Terms: Applications (GCP — Cloud Run)

Effective Date: April 16, 2026
Cloud Provider: Google Cloud Platform
GCP Service: Cloud Run (fully managed)
Document ID: QUOME-LEGAL-APPS-GCP-001

These Additional Terms govern your use of the Quome Applications service ("Apps") when deployed on Google Cloud Platform. These terms supplement the Terms of Service.

1. Service Description

Apps enables you to deploy, manage, and scale containerized applications on Google Cloud Run within your GCP project under the BYOSA model. Quome provisions and configures Cloud Run services, revisions, traffic routing, custom domains, and associated networking on your behalf.

2. Infrastructure Ownership

2.1 Customer-Owned Resources

The following resources are created in your GCP project and are owned by you:

• Cloud Run services and revisions
• VPC connectors and networking configurations
• Custom domain mappings and SSL certificates
• Cloud Build artifacts and container images in your Artifact Registry
• Cloud Logging and Cloud Monitoring data

2.2 Quome-Managed Configuration

Quome manages the orchestration layer, including:

• Deployment pipelines (build, push, deploy)
• Revision traffic splitting and rollback
• Sidecar container injection and shared volume configuration
• Health check and scaling configuration
• Snapshot and rollback metadata

3. Customer Responsibilities

3.1 Application Code

You are solely responsible for the code, container images, and configurations deployed through Apps, including:

(a) Ensuring your application code does not violate Applicable Law or third-party rights;

(b) Securing any secrets, API keys, or credentials used by your application — Quome provides secret injection mechanisms, but you are responsible for proper usage;

(c) Implementing appropriate application-level security controls (input validation, authentication, authorization) within your application;

(d) Configuring appropriate resource limits (CPU, memory, scaling bounds) — misconfigured limits may result in unexpected cloud provider charges.

3.2 Custom Domains

Custom domain configuration is provided as-is. You are responsible for DNS configuration, domain ownership verification, and renewal of any domains you connect to your applications.

3.3 Compliance

If your application processes regulated data (PHI, PII, PCI, etc.), you are responsible for ensuring your application architecture, code, and configuration comply with applicable regulations. Quome's HIPAA Eligible Services designation applies only when a BAA is in effect and required security configurations are applied.

4. Service Limits

Apps is subject to Google Cloud Run's service limits, quotas, and pricing. Current Cloud Run limits are published at https://cloud.google.com/run/quotas. Quome does not guarantee availability beyond what Google Cloud provides under your GCP agreement.

5. Data Handling

5.1 Application Data

Application runtime data (request/response payloads, application state) is processed entirely within your GCP project. Quome's control plane does not intercept, store, or log application data in transit.

5.2 Deployment Metadata

Quome stores deployment metadata in its control plane, including: service name, revision history, deployment timestamps, build status, scaling configuration, and health check results. This metadata does not include application data or request payloads.

5.3 Logs

Application logs are written to Cloud Logging in your GCP project. Quome may stream logs through its control plane for real-time display in the Quome UI; log content is not persisted in Quome's control plane beyond the active streaming session.

6. Termination Effects

Upon termination of the Service:

(a) Cloud Run services in your GCP project continue to run — Quome does not delete or stop your applications upon termination;

(b) Quome revokes its delegated access to your GCP project;

(c) You retain full control of all Cloud Run resources and can manage them directly through the GCP Console or CLI;

(d) Deployment metadata in Quome's control plane is deleted in accordance with the data retention terms in the Privacy Notice.

Cloud Provider Reference

AWS (ECS/Fargate) and Azure (Container Apps) Additional Terms will be published when those providers reach general availability on the Quome platform.