Terms of Use
McKinsey Asset Agreement
This McKinsey Asset Agreement is an agreement between the legal entity (along with such entity’s affiliates, “Client” or “you”) that executes or accepts this agreement or, if applicable, that executes the corresponding Proposal (as defined below) and McKinsey & Company, Inc. United States (along with its affiliates, “McKinsey”, “we” or “us”), and governs Client’s access to and use of Solutions (as defined below), including those provided in connection with consulting services that McKinsey may have provided in the past, may be providing currently, and may provide you in the future (“Services”). With respect to either party, the term “affiliates” means any entities that directly or indirectly control, are controlled by, or are under the same control as, such party or any other entities affiliated with such party or entities.
“Solutions” refers collectively to proprietary data- and analytics-driven tools and solutions (which may include any application or software) that are provided or made available to McKinsey clients as one-to-many solutions, including McKinsey Academy, Wave, OrgSolutions, and related offerings, together with their corresponding content (for example, courses, programs, services, materials, or offerings) and related services (for example, discussion, recommendations, or analysis of content for you).
McKinsey and Client hereby agree that the following terms will apply to Client’s use of the Solutions specified in McKinsey’s proposals, statements of work and/or confirming memoranda submitted to the Client or as otherwise agreed in writing by the parties, including one or more commercial agreements referencing the Solutions (each a “Proposal”).
1. COVERED SOLUTIONS: Subject to the conditions and limitations of this agreement and any applicable Proposal, McKinsey grants to Client a limited, revocable, non-exclusive, non-transferable right and license to access and use each Solution identified in a Proposal for the Client’s internal business purposes, including in connection with any related Services provided by McKinsey in connection with such Solution. The foregoing license shall apply for each applicable Solution for the term set forth in the applicable Proposal or, if no such term is provided, for the duration of McKinsey’s provision of the Services in connection with such Solution; provided that such license may be immediately terminated and the Client’s use of such Solution suspended in the event of the Client’s material breach of this agreement. The scope of the Solutions and any related Services may be further described in McKinsey’s Proposal. The Services shall include the evaluation or discussion of potential services and McKinsey’s preparation of Proposals, and the parties may meet at mutually agreed times to discuss the progress of the Services and to exchange feedback. In order to be able to provide the Solutions and Services within the agreed timeframe and budget and to fulfill its responsibilities on a timely basis, McKinsey will rely on the Client’s timely cooperation, including the Client making available relevant data, information and personnel, performing any tasks or responsibilities assigned to the Client and notifying McKinsey of any issues or concerns the Client may have relating to the Solutions.
2. COMPENSATION: The Client shall compensate McKinsey for its professional fees and any expenses in connection with the Services, if any, as set forth in the applicable Proposal. The Client agrees that it will not, without McKinsey’s prior written permission, disclose the terms of this agreement or any Proposal (including McKinsey’s fees, expenses and other commercial terms) to any third parties (including the Client’s external procurement and other service providers). McKinsey will invoice the Client for professional fees and expenses in connection with the Services monthly or as otherwise set forth in the applicable Proposal. As required by applicable laws, McKinsey shall separately include on its invoices any VAT, GST, local sales or similar applicable taxes. The Client agrees to pay such invoiced taxes, which McKinsey shall be required to remit to the appropriate taxing authority. All invoices are due 30 days after receipt. Should any invoice remain unpaid for more than 30 days after receipt, interest will accrue on the outstanding amount at the rate of 1% per month (compounded to 12.68% per annum), calculated from the 31st day after receipt until the date of payment.
3. CONFIDENTIALITY: McKinsey will keep confidential any confidential information, including any personal data (as defined below), furnished by or on behalf of the Client to McKinsey in connection with the Services (“Confidential Information”). Except to the extent it constitutes Personal Data (as defined below), Confidential Information shall not include information that is or becomes publicly available, already known to McKinsey, independently acquired or developed by McKinsey or legally required to be disclosed. McKinsey will disclose Confidential Information only to its (or its affiliates) employees, agents and contractors who have a need to know and are bound to keep it confidential, will use Confidential Information only for purposes of performing the Services, including preparing Proposals and evaluating potential Services, providing and maintaining the Solutions, including evaluating and improving Solution usage, performance and functionality and providing information to the Client regarding the same, or as otherwise requested or authorized by the Client, and will protect Confidential Information in accordance with the McKinsey Information Security Program Overview available at https://solutions.mckinsey.com/msd/information_security_overview.pdf (the “Information Security Overview”). Subject to its confidentiality obligations, where the agreed upon Services include benchmarking services McKinsey may also incorporate Confidential Information into its benchmarking databases for use in reporting on sanitized or aggregate trends and metrics without attribution to the Client. To bring the best of McKinsey’s global resources to serve the Client, the Client agrees that McKinsey may transfer Confidential Information, including Personal Data, to geographies other than those in which it was collected or received, including to McKinsey affiliates and sub-processors that comprise or support McKinsey’s infrastructure and maintenance functions as set forth in https://solutions.mckinsey.com/msd/subprocessors/ in accordance with the Information Security Overview, to facilitate any activities authorized by the Client, provided that at all times Confidential Information will be treated as confidential and protected in accordance with the terms of this agreement. McKinsey will reasonably cooperate with the Client, at the Client’s expense, in responding to any legally required disclosure.
In performing the Services, McKinsey will use and rely primarily on information available from public sources and the Confidential Information and the Client warrants that (i) McKinsey will have no obligation to verify such information, (ii) the Client is authorized to provide McKinsey with all such Confidential Information, (iii) the Client has satisfied any data privacy requirement under applicable law to allow the processing of Personal Data (including any notification requirements and informed consent from individuals, if required), and (iv) McKinsey’s use of such information in connection with the agreed Services will not violate any law or contractual right of any third party.
McKinsey shall promptly destroy or, at the Client’s election and specific written prior notification to McKinsey, return any Confidential Information, including any Personal Data, in its possession or control when the same is no longer necessary for the provision of the Services, provided that McKinsey may retain such Confidential Information only as required by applicable law, regulation or documented professional archival policy or as otherwise authorized or instructed by the Client. Any Confidential Information so retained shall at all times remain subject to the terms and conditions of this agreement, including with respect to confidentiality, security and non-disclosure.
4. ENABLING SOLUTIONS: To enable the Services and Client’s use of the Solutions, Client agrees to the following terms, which reflect that the Solutions are one-to-many offerings that were built for use by McKinsey’s clients. Client’s users of the Solutions (the "Users") must be Client employees, unless otherwise agreed to in writing with McKinsey.
User Data and Insights. Client agrees that McKinsey may collect and provide Client with individual and aggregated data, information, and reports concerning Client and its Users’ use of any Solution, together with other applicable data provided, identified, or authorized by Client (collectively, "User Data"). User Data may include, for example, completion rates, performance metrics, data related to test and survey-taking, initiative information and related data, organization data (e.g., organization charts, headcounts, and functions), usage and engagement data, data from third parties identified by Client (e.g., HRIS or HRMS data), and data or information similar to the foregoing. At Client’s request, we may collect and provide to Client as part of the User Data additional demographic and/or other information about Client’s personnel, either as provided directly by Client and/or collected by us as directed by Client , as part of providing the Solutions.
Client agrees that McKinsey is collecting and analyzing such User Data at Client’s request and on Client’s behalf for the purpose of providing the agreed upon Services, and McKinsey will maintain such User Data in accordance with the terms of this agreement. Client acknowledges and agrees that it is authorized to provide to us or instruct us to collect such User Data. If applicable, the Client has satisfied any requirements to allow the processing of User Data (including, for example, Client’s own internal standards concerning notice and consent or applicable local laws). To the extent McKinsey is provided or has access to de-identified data, it will not make any attempts to re-identify the same. Likewise, Client represents that if McKinsey provides de-identified data to Client, Client will not make any attempts to re-identify the same.
While certain User Data may be an indicator of upskilling and behavior change, Client acknowledges and agrees that McKinsey cannot guarantee results. Client further understands that User Data is not intended to be used for decisions related to hiring, promotion, demotion, re-assignment, termination, or setting compensation or benefit levels of any individual.
Client warrants that it is not relying on McKinsey for, and acknowledges that McKinsey does not provide, legal or regulatory advice, and that Client will consult with its own legal counsel for any such advice, including with respect to any personnel-related decisions. Client acknowledges that it is solely responsible for its decisions and actions, including its personnel-related decisions and compliance with applicable laws, rules, and regulations.
Trends and Metrics. To enable McKinsey to provide cutting-edge proprietary data- and analytics-driven Solutions, subject to McKinsey’s confidentiality obligations, Client agrees that McKinsey may incorporate into its databases information and data provided by Client, or that is collected and derived, in connection with Client's use of Solutions, without external or public attribution to Client, for McKinsey’s use in (i) performing the Services, including preparing and evaluating potential Services; (ii) providing, maintaining, and improving Solutions, including their performance and functionality; and (iii) reporting on sanitized or aggregate trends and metrics, or as otherwise instructed or authorized by the Client. Client may opt-out of certain uses by notifying McKinsey in writing.
Solutions Login Process. As part of the standard registration and/or login process for certain of the Solutions, each User may be prompted to review and accept a notice that describes how a User's personal data is collected and processed. With respect to McKinsey Academy (if applicable), McKinsey may update the Academy platform during the term of your access. In the event of such an update, McKinsey will migrate your users from the current platform to the updated platform. If we migrate your users to the updated platform, you will continue to have access to the Academy course content. We will notify you in advance, via email, prior to any such update or change.
Certificates/Badges for Client Users. At McKinsey’s sole discretion, McKinsey may offer a certificate, statement or other acknowledgement, documentation, or digital badge to Client’s User if such User satisfies certain criteria (e.g., course completion) for such Solution (a “Certificate”). The issuance of a Certificate to a User, and the criteria governing such issuance, are solely within McKinsey’s discretion and may be changed at any time. In addition, Client acknowledges that (a) receipt of a Certificate, if any, does not represent an endorsement by McKinsey and (b) McKinsey is not an accredited educational institution, nor has McKinsey sought any such accreditation, and any such Certificate does not convey any academic credit or standing. Client agrees that it will not seek to obtain a Certificate through any false, misleading, or unlawful means, or misrepresent to the public or to any third party the nature, content or terms of issuance of any such Certificate.
For Certificates in the form of digital badges, McKinsey is currently partnered with Credly (https://info.credly.com/) to provide Users with shareable, open badges. Credly’s badges are web-enabled and can be verified in real-time. Eligible Users can choose to accept or decline their badge through Credly’s badging platform. If accepted, Users can share their badge publicly via certain social media platforms (e.g., LinkedIn) or choose to keep it private. Eligible Users will be provided with full instructions on sharing the badge, specifically concerning describing the course and displaying the badge received on LinkedIn. McKinsey reserves the right to change its digital badge provider in the future.
Leaderboards. Certain Solutions may include a leaderboard feature (the “Leaderboard”) shared with all users in a specific cohort that is intended to encourage friendly competition and is not intended to be used for evaluative purposes or personnel decisions. The Leaderboard will display a user’s individual information (e.g., first name and last name), together with certain metrics (e.g., a score based upon progress, or the percent of course completion) to other users in the same cohort (as applicable). User Data will be used to calculate such metrics and populate this Leaderboard.
Optional Generative AI Capabilities. Certain Solutions may also include the use of AI technologies (the “GenAI Capabilities”). Client may opt-out of the use of the GenAI Capabilities by notifying McKinsey in writing. Otherwise, the following terms will apply to Client’s use of such GenAI Capabilities in connection with the Solutions.
- Client acknowledges that the GenAI Capabilities are still being refined, and, as such, the functionality and user experience for the GenAI Capabilities may change. Client further acknowledges that there may be unanticipated delays as McKinsey works internally to improve and refine the GenAI Capabilities.
- Third-party cloud generative AI models (“Third-Party Models”) are used to deliver the GenAI Capabilities; currently the GenAI Capabilities primarily use Microsoft Azure OpenAI, but this is subject to change at McKinsey’s sole discretion. Accordingly, some of the content, analysis, data and insights generated by the GenAI Capabilities will be created with the assistance of Azure OpenAI or its successor Third-Party Models.
- Client may provide McKinsey with feedback (including thumbs up/down), comments, suggestions, or recommendations regarding the GenAI Capabilities (“Feedback”). McKinsey has the right to use, reproduce, publish, distribute, modify and otherwise leverage the Feedback for any purpose, and in any form, not prohibited by applicable law. The Feedback shall not be attributed to the Client. Client also understands and agrees that McKinsey may reach out to Client’s participants to request such Feedback through interviews or surveys.
- McKinsey will use and rely primarily on data provided by the Client (“Inputs”). Client represents and warrants that it is authorized to provide McKinsey with the Inputs, and McKinsey’s use of such Inputs will not violate any law or contractual right of any third party, and McKinsey will have no obligation to verify the Inputs. McKinsey may record and retain interactions (including Inputs and Outputs) and may use such interactions for audit, security, and product development purposes, provided that Inputs shall remain Client’s Confidential Information, and no data provided by the Client will be used to train Third-Party Models.
- Given the Third-Party Models used here, Client agrees that anything generated by the GenAI Capabilities (“Outputs”) may be inaccurate, biased, or otherwise inappropriate. McKinsey expressly disclaims any and all warranties, including merchantability and fitness for a particular purpose, and is not liable for any issues in any Outputs or related to the Third-Party Models.
- Client will not use the GenAI Capabilities or Outputs in any fully autonomous system without human oversight and involvement in decision-making, including where no Client personnel will be materially involved in implementing the Outputs or insights derived therefrom. Client will inform its personnel and users about the nature of generative AI. Client is solely responsible for its use of the Outputs. Client will not use Outputs to make or materially influence decisions affecting the initiation, promotion and termination of work-related contractual relationships, task allocation based on individual behavior or personal traits or characteristics, or for monitoring and evaluating performance and behavior of persons in such relationships.
- Client agrees to use the GenAI Capabilities internally to help advance its business objectives within the Solutions only. No part of the GenAI Capabilities, including any Outputs, may be circulated, quoted, reproduced for distribution, or referenced to any third party without prior written approval from McKinsey.
- Client agrees that McKinsey may revoke any User’s access to the GenAI Capabilities if the User materially misuses or violates the of the GenAI Capabilities.
5. DATA SECURITY: Without limiting the foregoing, if McKinsey processes client-owned or controlled data as part of the Services in the interest and on behalf of the Client which relates to an identified or identifiable person (“Personal Data”), McKinsey shall (i) only process such Personal Data, including transferring it to or allowing access by McKinsey’s sub-processors to the extent necessary to perform its obligations as set forth in this agreement and the Information Security Overview, as otherwise authorized in writing by the Client, or as required by applicable law, (ii) implement appropriate technical and organizational measures to protect such personal data as set forth in the Information Security Overview, (iii) promptly notify the Client of any actual incident in which the confidentiality, integrity or security of the Personal Data has been compromised, or of any request received by a data subject with regards to the Personal Data, and (iv) collaborate with the Client as required by applicable law or the Client’s request to document the Personal Data, data subjects and processing activities related to the Services, including as part of an applicable Proposal. For the avoidance of doubt, McKinsey will not (i) sell or share Personal Data; (ii) attempt to identify or reidentify individuals in data sets containing deidentified Personal Data, and (iii) combine Personal Data it receives from or on behalf of the Client with personal data it receives from or on behalf of another party or person, except for any purposes permitted by law or after such personal data has been anonymized, aggregated or otherwise deidentified for use for research, data analysis, and statistical purposes, including to benchmark and identify insights. McKinsey will notify the Client if it can no longer meet its obligations under any applicable law. Client and McKinsey agree to comply with all applicable laws regulating the security or processing of Client Personal Data throughout the duration of the engagement. Notwithstanding the above, McKinsey shall not transfer, disclose or allow access to the personal data to any sub-processor except to the extent required for its performance of its obligations under this agreement and/or applicable statement of work. McKinsey shall impose binding obligations which include provisions that are substantially similar to those in this Section in its agreements with its sub-processors. McKinsey shall ensure that its sub-processors comply with its obligations under this Section. Client and McKinsey agree that, under this Agreement, (a) the categories of Personal Data in scope and (b) the categories of individuals whose Personal Data is collected and processed are as set out in, or otherwise contemplated by, the body of this agreement and/or the applicable Proposal.
With respect to transfers of personal data from the Client to McKinsey, where required by law to ensure an adequate level of data protection, the Parties agree that such standard contractual clauses as applicable to the respective transfer and to McKinsey’s Services and as available at https://solutions.mckinsey.com/msd/sccs.pdf shall be deemed automatically incorporated into this agreement and binding upon the parties hereto, including their affiliates, unless an alternate data transfer arrangement authorized by applicable law is agreed by the parties. McKinsey will comply with the Client’s reasonable requests to furnish information regarding McKinsey’s processing activities as is reasonably necessary to enable the Client to verify that McKinsey is complying with its obligations under this agreement, including by making its Director of IT Security or person of comparable knowledge and position available to provide information about the Information Security Overview and McKinsey’s processing in connection with the Services, and the foregoing shall apply in full satisfaction of any Client audit or inspection rights of McKinsey, but shall not limit or restrict the ability of any legal or regulatory authority to conduct such audit or inspection pursuant to applicable law.
6. INTELLECTUAL PROPERTY: Upon payment in full of McKinsey’s fees, if any, the Client will own all reports and other deliverables prepared for and furnished to the Client by McKinsey in connection with the Services, including any related Solution outputs (the “Deliverables”), save that McKinsey (or its licensor) retains ownership of all concepts, know-how, tools, questionnaires and assessments, modules, courses, frameworks, software, algorithms, databases, content, models, and industry perspectives developed or enhanced outside of or in connection with the Services, including the Solutions themselves (the “McKinsey Tools”), it being understood that none of the McKinsey Tools will contain the Client’s Confidential Information. To the extent the Deliverables include any embedded McKinsey Tools, McKinsey hereby grants the Client a non-exclusive, non-transferable, non-sublicenseable, worldwide, royalty-free license to use and copy the McKinsey Tools solely as part of the Deliverables and subject to the limitations herein on disclosure of McKinsey materials and publicity. The Client agrees that, without McKinsey's prior written permission, it will (a) not permit any third party to access or copy any McKinsey Tool or Deliverable; and (b) not itself, nor permit any third party to, remove or circumvent security or technological safeguards, including notices, digital protection mechanisms, metadata, watermarks, or disclaimers provided with, or reverse engineer, any Solution, McKinsey Tool or Deliverable. The Solutions (including their outputs) and Deliverables are provided ‘as is’, without any express or implied warranty. Except as otherwise set forth in the applicable Proposal, McKinsey shall not be obligated to maintain, support, host, update, or correct the Solutions (including their outputs) or Deliverables. The Client acknowledges and agrees that any results, options, data, recommendations, analyses, or other information generated by the Deliverables are dependent upon the accuracy of the information processed thereby (including as provided by the Client), as well as upon the Client’s proper use of the Solutions (including Solution outputs) and/or Deliverables. The Client is responsible for performing final testing (including security testing) of the Solutions and Deliverables, final validation and final implementation of the Solutions and Deliverables in a production environment. McKinsey is not liable for modifications made to the Solutions or Deliverables by anyone other than McKinsey personnel or for use of any Deliverables in a live production environment. The Client is responsible for the operation and security of its operating environment.
7. DISCLOSURE OF McKINSEY MATERIALS; PUBLICITY: McKinsey’s work for the Client is confidential and for the Client’s internal use only. McKinsey will not disclose the Deliverables to any third parties without the Client’s prior written permission. Similarly, the Client agrees that it will not disclose any materials or information that McKinsey furnishes to the Client, including the Deliverables, to any third parties without McKinsey’s prior written permission. Each party further agrees not to use the other party’s name or trademarks in any communication with any third party without the other party’s prior written permission.
8. SERVING COMPETITORS: It is McKinsey’s long-standing policy to serve competing clients and clients with potentially conflicting interests as well as counter-parties in merger, acquisition and alliance opportunities, and to do so without compromising McKinsey’s professional responsibility to maintain the confidentiality of client information. Consistent with such practice and McKinsey’s confidentiality obligations to its other clients, McKinsey is not able to advise or consult with the Client about McKinsey’s serving the Client’s competitors or other parties. Nothing in this section shall operate to limit or reduce McKinsey’s obligations with respect to the Client’s Confidential Information, including the confidentiality and non-disclosure obligations with respect thereto.
9. LIMITATION OF LIABILITY: The Services shall not be deemed investment, legal, tax, accounting or other regulated advice. McKinsey does not supplant the Client’s management or other decision-making bodies and does not guarantee results. The Client remains solely responsible for its decisions, actions, use of the Solutions and Deliverables, including its use of Solution outputs, and compliance with applicable laws, rules and regulations. The Client agrees to pay for any costs, including attorney fees, McKinsey incurs as a result of its participation as a non-party in any legal, regulatory, administrative or other proceeding relating to the Services. In no event shall McKinsey’s liability to the Client in connection with a Solution or related Services exceed the fees received by McKinsey from the Client in connection with the engagement pursuant to which such Solution and/or Services are provided. Neither party will be liable for any lost profits or other indirect, consequential, incidental, punitive or special damages.
10. TERM AND TERMINATION: This agreement takes effect on the date the Services commenced and shall continue until terminated in accordance with its terms. Except as otherwise provided in the applicable Proposal, either party may terminate the Services at any time effective upon written notice to the other and, in the event of such termination, the Client will pay McKinsey’s fees and expenses up to the effective date of termination.
11. TRADE, SANCTIONS & EXPORT CONTROLS: For purposes of this section, a Party is defined as each contracting entity, including its directors, officers, and affiliates (“Party”). In performing this agreement, each Party agrees to comply with applicable sanctions, export control, import control, and antiboycott laws (“Trade Control Laws”), including, but not limited to, EU, UK, and U.S. laws, and neither Party shall cause the other to violate or to be penalized under such Trade Control Laws. Neither Party is a Restricted Party (as defined below) and neither will use anything received from the other Party in connection with a Restricted Party, Russia, the Government of Venezuela, or a comprehensively sanctioned jurisdiction under Trade Control Laws.
A Restricted Party is an individual or entity that (i) is identified on a restricted party list under Trade Control Laws, or is owned 50% or more by, controlled by, or acting on behalf of, such a person(s) or entity(ies), or (ii) is organized under the laws of, ordinarily resident in, or acting on behalf of a person or entity located in Russia or any comprehensively sanctioned jurisdiction under Trade Control Laws. Each Party agrees to promptly inform the other in writing if it becomes a Restricted Party. Neither Party will provide to the other anything for which government authorization is required under Trade Control Laws without explaining to the other Party what government authorization is required and obtaining the other Party’s prior written consent.
12. MISCELLANEOUS: This agreement and the Proposals constitute the entire agreement between the parties, and there are no prior or contemporaneous oral or written representations, understandings or agreements relating to this subject matter that are not fully expressed herein or therein. In the event of any conflict between this agreement and any Proposal, the Proposal will govern. This agreement and the Proposals, and all claims or matters arising out of or relating to the agreement and the Proposals, including the parties’ rights and obligations, shall be governed by and construed in accordance with the laws of the State of New York without regard to conflicts of law principles and shall inure to the benefit of and be binding on the successors and assigns of the Client and McKinsey. Notwithstanding the forgoing, the parties may agree in a separate writing that the laws of a different jurisdiction apply. The following Sections shall survive the completion or any termination of the Services: 3 (Confidentiality), 4 (Enabling Solutions), 5 (Data Security), 6 (Intellectual Property), 7 (Disclosure of McKinsey Materials; Publicity), 8 (Serving Competitors), 9 (Limitation of Liability), 10 (Term and Termination), 11 (Trade Controls) and 12 (Miscellaneous), and any other provision which by law or by its nature should survive. Neither party may assign its rights or obligations under this agreement to any person or entity without the written consent of the other party, not to be unreasonably withheld, provided, however, that either party may assign its rights and obligations under this agreement to its affiliates upon reasonable written notice to the other party but without the written consent of the other party. Assignment shall not relieve either party of its obligations hereunder. McKinsey is an independent contractor and not the Client’s agent or fiduciary. Notwithstanding any course of dealings of the parties at any time or any statement to the contrary contained therein, no purchase order, invoice or other similar document issued by a party shall be construed to modify the terms of this agreement. Rights and remedies provided in this agreement are cumulative and not exclusive of any right or remedy provided at law or in equity. The parties have specifically requested that this agreement be written in English. Les parties aux présentes ont demandé spécifiquement que l’entente soit rédigée en anglais. This agreement is strictly a commercial contract and may not be used for purposes of providing services to government or public sector entities without the express prior agreement of the parties.