Offeror must describe how it will, prior to the execution of a Service Level Agreement, meet with the Purchasing Entity and cooperate and hold a meeting to determine whether any sensitive or personal information will be stored or used by the Offeror that is subject to any law, rule or regulation providing for specific compliance obligations. RETARUS RESPONSE: Yes – as part of the Retarus implementation methodology, Retarus will meet with purchasing entities to outline Proof of Concepts, and detailed requirements of how data will be processed, what are compliance obligations, what interfaces to be utilized, and more. Retarus will assign a specific project manager to support Purchasing Entities to meet this requirement. All individual parts of Retarus’ complete fax solution are managed service solutions requiring no additional hardware, and no additional software installation at the customer site. Therefore the implementation project for the Retarus Faxolution is primarily definition of client’s custom setup, then configuration and test before the go live. For a more specific approach to fit requirements, a statement of work document can be produced. Outlined below is the standard migration methodology practiced at Retarus. According to Retarus’ service implementation procedures, the implementation and operation of the service can be broken done into the following 4 phases: Design Network Connection Application Implementation Operation The design phase involves a detailed collection of the customer requirements and in particular decision regarding the desired configuration of the various services. A further result of the design phase is the required network setup. The network connection setup stage will only need to be performed once, accounting for the various services that will be configured. Network setup consists of firewall, routing, possibly NAT and VPN configuration. Implementation of the actual service occurs during the application connection phase. Using the configuration parameters specified during the design process, the client and Retarus’ application administrators will setup and configure the individual services. As the application specialists and support personnel these persons are ideally qualified to setup the service. Furthermore as these same individuals are also typically the primary operation and support personnel, they develop the necessary contacts and knowhow from the very beginning. To assure seamless migration the service implementation phase is brok...
Offeror must describe how it intends to comply with all applicable laws and related to data privacy and security.
Offeror must describe how it will not access a Purchasing Entity’s user accounts or data, except in the course of data center operations, response to service or technical issues, as required by the express terms of the Master Agreement, the applicable Participating Addendum, and/or the applicable Service Level Agreement. RETARUS RESPONSE: Retarus will not ever access a purchasing entity’s user accounts or data, except in extreme circumstances. These include, and are regulated by SLA and MSA, data center operations, response to service or technical based issues, as required in MSA or other contractual documents, or a written request by authorized individuals. There are both technical and organizational security measures implemented to ensure data privacy is kept, and all terms of service are met, all of which are documented within ISAE 3402 and IT Security Policies. These include utilizing encryption methodologies, restricting access to systems, logging and audit tracking, and more.
