Data Storage, Access, and Location. Off Shore Restrictions. Contractor may conduct help desk, support services, and software development and testing activities under this Contract from any location convenient to Contractor, except that the Parties agree that: (a) all NYS Confidential Information shall remain within and may not be stored, or accessed from, outside of the Continental United States (CONUS); and (b) unless expressly agreed to in writing in a specific Transaction Document approved by an ITS authorized signatory adhering to established ITS practices, Contractor shall not have remote access into ITS' information technology systems.
Data Storage, Access, and Location. Off Shore Restrictions. Contractor may conduct help desk, support services, and software development and testing activities under this Agreement from any location convenient to Contractor, except that the Parties agree that: (a) all BRETSA Confidential Information shall remain within and may not be stored, or accessed from, outside of the Continental United States (CONUS); and (b) unless expressly agreed to in writing in a specific Transaction Document approved by a BRETSA authorized signatory adhering to established BRETSA practices, Contractor shall not have remote access into BRETSA' information technology systems. All access to BRETSA Confidential Information, physical or virtual, must be conducted within CONUS and have adequate security systems in place to protect against the unauthorized access to Contractor Facilities and Confidential Information stored therein, including at a minimum two-factor authentication acceptable to BRETSA. The Contractor shall not send or permit to be sent to any location outside of the CONUS any BRETSA Confidential Information related to this Agreement. To the extent support by Contractor requires replication of a set of conditions such as a software crash event, Contractor shall replicate that set of conditions in its own environment when providing support, while communicating with BRETSA technical personnel. For software development activities, such as patches, updates, or adding new functionality, Contractor shall conduct that software development within its own Development, Quality Assurance, and Production Environments, and, when ready, shall package and provide it through an agreed-to Internet-based location, from which BRETSA technical personnel will download such software, and install and test it in BRETSA 's information technology environment. To the extent Contractor (or, any Subcontractors allowed by BRETSA) requires access to BRETSA or Contractor system or application audit logs for support and troubleshooting, Contractor or such Subcontractors will maintain such logs only within CONUS, will take the strictest measures to ensure such logs do not contain BRETSA Confidential Information including production data, and will maintain such logs in a secure environment subject to audits by BRETSA.
