SaaS Services 6.1 Our SaaS Services are audited at least yearly in accordance with the AICPA’s Statement on Standards for Attestation Engagements (“SSAE”) No. 18. We have attained, and will maintain, SOC 1 and SOC 2 compliance, or its equivalent, for so long as you are timely paying for SaaS Services. Upon execution of a mutually agreeable Non-Disclosure Agreement (“NDA”), we will provide you with a summary of our compliance report(s) or its equivalent. Every year thereafter, for so long as the NDA is in effect and in which you make a written request, we will provide that same information.
6.2 You will be hosted on shared hardware in a Tyler data center or in a third-party data center. In either event, databases containing your Data will be dedicated to you and inaccessible to our other customers.
6.3 Our Tyler data centers have fully-redundant telecommunications access, electrical power, and the required hardware to provide access to the Tyler Software in the event of a disaster or component failure. In the event any of your Data has been lost or damaged due to an act or omission of Tyler or its subcontractors or due to a defect in Tyler’s software, we will use best commercial efforts to restore all the Data on servers in accordance with the architectural design’s capabilities and with the goal of minimizing any Data loss as greatly as possible. In no case shall the recovery point objective (“RPO”) exceed a maximum of twenty-four (24) hours from declaration of disaster. For purposes of this subsection, RPO represents the maximum tolerable period during which your Data may be lost, measured in relation to a disaster we declare, said declaration will not be unreasonably withheld.
6.4 In the event we declare a disaster, our Recovery Time Objective (“RTO”) is twenty-four (24) hours. For purposes of this subsection, RTO represents the amount of time, after we declare a disaster, within which your access to the Tyler Software must be restored.
6.5 We conduct annual penetration testing of either the production network and/or web application to be performed. We will maintain industry standard intrusion detection and prevention systems to monitor malicious activity in the network and to log and block any such activity. We will provide you with a written or electronic record of the actions taken by us in the event that any unauthorized access to your database(s) is detected as a result of our security protocols. We will undertake an additional security audit, on terms and timing to be mutually agreed to by the parties, at your written request. You may not attempt to bypass or subvert security restrictions in the SaaS Services or environments related to the Tyler Software. Unauthorized attempts to access files, passwords or other confidential information, and unauthorized vulnerability and penetration test scanning of our network and systems (hosted or otherwise) is prohibited without the prior written approval of our IT Security Officer.
6.6 We test our disaster recovery plan on an annual basis. Our standard test is not client-specific. Should you request a client-specific disaster recovery test, we will work with you to schedule and execute such a test on a mutually agreeable schedule. At your written request, we will provide test results to you within a commercially reasonable timeframe after receipt of the request.
6.7 We will be responsible for importing back-up and verifying that you can log-in. You will be responsible for running reports and testing critical processes to verify the returned Data.
6.8 We provide secure Data transmission paths between each of your workstations and our servers.
6.9 Tyler data centers are accessible only by authorized personnel with a unique key entry. All other visitors to Tyler data centers must be signed in and accompanied by authorized personnel. Entry attempts to the data center are regularly audited by internal staff and external auditors to ensure no unauthorized access.
6.10 Where applicable with respect to our applications that take or process card payment data, we are responsible for the security of cardholder data that we possess, including functions relating to storing, processing, and transmitting of the cardholder data and affirm that, as of the Effective Date, we comply with applicable requirements to be considered PCI DSS compliant and have performed the necessary steps to validate compliance with the PCI DSS. We agree to supply the current status of our PCI DSS compliance program in the form of an official Attestation of Compliance, which can be found at xxxxx://xxx.xxxxxxxxx.xxx/about- us/compliance, and in the event of any change in our status, will comply with applicable notice requirements.
CERTIFICATION REGARDING BOYCOTTING CERTAIN ENERGY COMPANIES (Texas law as of September 1, 2021) By submitting a proposal to this Solicitation, you certify that you agree, when it is applicable, to the following required by Texas law as of September 1, 2021: If (a) company is not a sole proprietorship; (b) company has ten (10) or more full-time employees; and (c) this contract has a value of $100,000 or more that is to be paid wholly or partly from public funds, the following certification shall apply; otherwise, this certification is not required. Pursuant to Tex. Gov’t Code Ch. 2274 of SB 13 (87th session), the company hereby certifies and verifies that the company, or any wholly owned subsidiary, majority-owned subsidiary, parent company, or affiliate of these entities or business associations, if any, does not boycott energy companies and will not boycott energy companies during the term of the contract. For purposes of this contract, the term “company” shall mean an organization, association, corporation, partnership, joint venture, limited partnership, limited liability partnership, or limited liability company, that exists to make a profit. The term “boycott energy company” shall mean “without an ordinary business purpose, refusing to deal with, terminating business activities with, or otherwise taking any action intended to penalize, inflict economic harm on, or limit commercial relations with a company because the company (a) engages in the exploration, production, utilization, transportation, sale, or manufacturing of fossil fuel-based energy and does not commit or pledge to meet environmental standards beyond applicable federal and state law, or (b) does business with a company described by paragraph (a).” See Tex. Gov’t Code § 809.001(1).
Utilities, Services Landlord shall provide, subject to the terms of this Section 11, water, electricity, heat, air conditioning, light, power, sewer, and other utilities (including gas and fire sprinklers to the extent the Project is plumbed for such services), refuse and trash collection and janitorial services (collectively, “Utilities”). Landlord shall pay, as Operating Expenses or subject to Tenant’s reimbursement obligation, for all Utilities used on the Premises, all maintenance charges for Utilities, and any storm sewer charges or other similar charges for Utilities imposed by any Governmental Authority or Utility provider, and any taxes, penalties, surcharges or similar charges thereon. Landlord shall not cause any Utilities to the Premises which are not currently separately metered to be separately metered. Tenant shall pay directly to the Utility provider, prior to delinquency, any separately metered Utilities and services which may be furnished to Tenant or the Premises during the Term. Tenant shall pay, as part of Operating Expenses, its share of all charges for jointly metered Utilities based upon consumption, as reasonably determined by Landlord. No interruption or failure of Utilities, from any cause whatsoever other than Landlord’s willful misconduct, shall result in eviction or constructive eviction of Tenant, termination of this Lease or the abatement of Rent. Tenant agrees to limit use of water and sewer with respect to Common Areas to normal restroom use. Landlord’s sole obligation for either providing emergency generators or providing emergency back-up power to Tenant shall be: (i) to provide emergency generators with not less than the capacity of the emergency generators located in the Building as of the Commencement Date, and (ii) to contract with a third party to maintain the emergency generators as per the manufacturer’s standard maintenance guidelines. Landlord shall have no obligation to provide Tenant with operational emergency generators or back-up power or to supervise, oversee or confirm that the third party maintaining the emergency generators is maintaining the generators as per the manufacturer’s standard guidelines or otherwise. During any period of replacement, repair or maintenance of the emergency generators when the emergency generators are not operational, including any delays thereto due to the inability to obtain parts or replacement equipment, Landlord shall have no obligation to provide Tenant with an alternative back-up generator or generators or alternative sources of back-up power. Tenant expressly acknowledges and agrees that Landlord does not guaranty that such emergency generators will be operational at all times or that emergency power will be available to the Premises when needed.
Business Continuity Planning Supplier shall prepare and maintain at no additional cost to Buyer a Business Continuity Plan (“BCP”). Upon written request of Buyer, Supplier shall provide a copy of Supplier’s BCP. The BCP shall be designed to ensure that Supplier can continue to provide the goods and/or services in accordance with this Order in the event of a disaster or other BCP-triggering event (as such events are defined in the applicable BCP). Supplier’s BCP shall, at a minimum, provide for: (a) the retention and retrieval of data and files; (b) obtaining resources necessary for recovery, (c) appropriate continuity plans to maintain adequate levels of staffing required to provide the goods and services during a disruptive event; (d) procedures to activate an immediate, orderly response to emergency situations; (e) procedures to address potential disruptions to Supplier’s supply chain; (f) a defined escalation process for notification of Buyer, within two (2) business days, in the event of a BCP-triggering event; and (g) training for key Supplier Personnel who are responsible for monitoring and maintaining Supplier’s continuity plans and records. Supplier shall maintain the BCP and test it at least annually or whenever there are material changes in Supplier’s operations, risks or business practices. Upon Xxxxx’s written and reasonable request, Supplier shall provide Buyer an executive summary of test results and a report of corrective actions (including the timing for implementation) to be taken to remedy any deficiencies identified by such testing. Upon Xxxxx’s request and with reasonable advance notice and conducted in such a manner as not to unduly interfere with Supplier’s operations, Supplier shall give Buyer and its designated agents access to Supplier’s designated representative(s) with detailed functional knowledge of Supplier’s BCP and relevant subject matter.
COVERED HEALTHCARE SERVICES This section describes covered healthcare services. This plan covers services only if they meet all of the following requirements: • Listed as a covered healthcare service in this section. The fact that a provider has prescribed or recommended a service, or that it is the only available treatment for an illness or injury does not mean it is a covered healthcare service under this plan. • Medically necessary, consistent with our medical policies and related guidelines at the time the services are provided. • Not listed in Exclusions Section. • Received while a member is enrolled in the plan. • Consistent with applicable state or federal law. We review medical necessity in accordance with our medical policies and related guidelines. Our medical policies can be found on our website. Our medical policies are written to help administer benefits for the purpose of claims payment. They are made available to you for informational purposes and are subject to change. Medical policies are not meant to be used as a guide for your medical treatment. Your medical treatment remains a decision made by you with your physician. If you have questions about our medical policies, please call Customer Service. When a new service or drug becomes available, when possible, we will review it within six (6) months of one of the events described below to determine whether the new service or drug will be covered: • the assignment of an American Medical Association (AMA) Current Procedural Terminology (CPT) code in the annual CPT publication; • final Food and Drug Administration (FDA) approval; • the assignment of processing codes other than CPT codes or approval by governing or regulatory bodies other than the FDA; • submission to us of a claim meeting the criteria above; and • generally, the first date an FDA approved prescription drug is available in pharmacies (for prescription drug coverage only). During the review period, new services and drugs are not covered. For all covered healthcare services, please see the Summary of Medical Benefits and the Summary of Pharmacy Benefits to determine the amount that you pay and any benefit limits.
Environmental Services 1. Preparation of Environmental Documentation (CEQA/NEPA) including but not limited to the following:
a. Initial Study
b. Categorical Exemption (CE)
c. Notice of Exemption (XXX)
d. Negative Declaration (ND)
e. Mitigated Negative Declaration (MND)
f. Notice of Preparation (NOP)
g. Environmental Impact Report (EIR)
i. Initial Document (Screen Check/Administrative Draft) ii. Addendum iii. Supplemental
Program Monitoring and Evaluation The Recipient shall prepare, or cause to be prepared, and furnish to the Association not later than six months after the Closing Date, a report of such scope and in such detail as the Association shall reasonably request, on the execution of the Program, the performance by the Recipient and the Association of their respective obligations under the Legal Agreements and the accomplishment of the purposes of the Financing.”
Verizon OSS Services 8.2.1 Upon request by ECI, Verizon shall provide to ECI Verizon OSS Services. Such Verizon OSS Services will be provided in accordance with, but only to the extent required by, Applicable Law.
8.2.2 Subject to the requirements of Applicable Law, Verizon Operations Support Systems, Verizon Operations Support Systems functions, Verizon OSS Facilities, Verizon OSS Information, and the Verizon OSS Services that will be offered by Verizon, shall be as determined by Verizon. Subject to the requirements of Applicable Law, Verizon shall have the right to change Verizon Operations Support Systems, Verizon Operations Support Systems functions, Verizon OSS Facilities, Verizon OSS Information, and the Verizon OSS Services, from time-to-time, without the consent of ECI.
8.2.3 To the extent required by Applicable Law, in providing Verizon OSS Services to ECI, Verizon will comply with Verizon’s applicable OSS Change Management Guidelines, as such Guidelines are modified from time-to-time, including, but not limited to, the provisions of the Guidelines related to furnishing notice of changes in Verizon OSS Services. Verizon’s OSS Change Management Guidelines will be set out on a Verizon website.
CERTIFICATION REGARDING BOYCOTTING CERTAIN ENERGY COMPANIES (Texas law as of September 1, 2021) By submitting a proposal to this Solicitation, you certify that you agree, when it is applicable, to the following required by Texas law as of September 1, 2021: If (a) company is not a sole proprietorship; (b) company has ten (10) or more full-time employees; and (c) this contract has a value of $100,000 or more that is to be paid wholly or partly from public funds, the following certification shall apply; otherwise, this certification is not required. Pursuant to Tex. Gov’t Code Ch. 2274 of SB 13 (87th session), the company hereby certifies and verifies that the company, or any wholly owned subsidiary, majority-owned subsidiary, parent company, or affiliate of these entities or business associations, if any, does not boycott energy companies and will not boycott energy companies during the term of the contract. For purposes of this contract, the term “company” shall mean an organization, association, corporation, partnership, joint venture, limited partnership, limited liability partnership, or limited liability company, that exists to make a profit. The term “boycott energy company” shall mean “without an ordinary business purpose, refusing to deal with, terminating business activities with, or otherwise taking any action intended to penalize, inflict economic harm on, or limit commercial relations with a company because the company (a) engages in the exploration, production, utilization, transportation, sale, or manufacturing of fossil fuel-based energy and does not commit or pledge to meet environmental standards beyond applicable federal and state law, or (b) does business with a company described by paragraph (a).” See Tex. Gov’t Code § 809.001(1).
Disaster Services In the event of a local, state, or federal emergency, including natural, man-made, criminal, terrorist, and/or bioterrorism events, declared as a state disaster by the Governor, or a federal disaster declared by the appropriate federal official, Grantee may be called upon to assist the System Agency in providing the following services:
i. Community evacuation;
ii. Health and medical assistance;
iii. Assessment of health and medical needs;
iv. Health surveillance;
v. Medical care personnel;
vi. Health and medical equipment and supplies;
vii. Patient evacuation;
viii. In-hospital care and hospital facility status;
ix. Food, drug and medical device safety;
x. Worker health and safety;
xi. Mental health and substance abuse;
xii. Public health information;
xiii. Vector control and veterinary services; and
xiv. Victim identification and mortuary services.
