documentation to demonstrate compliance with PCI DSS standards by Supplier and all identified Subcontractors. Failure to discharge this obligation may be considered by Bank of America to be a Termination Event under (a) of subsection 5.2. 28.0 INDEMNITY 28.1 Supplier shall indemnify, defend, and hold harmless Bank of America and its Representatives, successors, permitted assigns and customers from and against any and all claims or legal actions of whatever kind or nature that are made or threatened by any third party and an related losses, expenses, damages, costs and liabilities, including reasonable attorneys' fees and expenses incurred in investigation, defense or settlement ("Damages"), which arise out of, are alleged to arise out of, or relate to the following: (a) any negligent act or omission or willful misconduct by Proprietary to Bank of America Page 23 vTIP2010 Source: CARDLYTICS, INC., S-1, 1/12/2018 Supplier, its Representatives or any Subcontractor engaged by Supplier in the performance of Supplier's obligations under this Agreement;or (b) any breach in a representation, covenant or obligation of Supplier contained in this Agreement 28.2 Supplier shall defend or settle at its expense any threat, claim, suit or proceeding arising from or alleging infringement, misappropriation or other violation of any Intellectual Property Rights or any other rights of any third party by Products, Work Product or services furnished under this Agreement Supplier shall indemnify and hold Bank of America, its Affiliates and each of their Representatives, successors, permitted assigns and customers harmless from and against and pay any Damages. including royalties and license fees attributable to such threat, claim, suit or proceeding. A. If any Product, Work Product or service furnished under this Agreement, including, without limitation, software, system design, equipment or Documentation, becomes, or in Bank of America's or Supplier's reasonable opinion is likely to become, the subject of