SaaS Services 6.1 Our SaaS Services are audited at least yearly in accordance with the AICPA’s Statement on Standards for Attestation Engagements (“SSAE”) No. 18. We have attained, and will maintain, SOC 1 and SOC 2 compliance, or its equivalent, for so long as you are timely paying for SaaS Services. Upon execution of a mutually agreeable Non-Disclosure Agreement (“NDA”), we will provide you with a summary of our compliance report(s) or its equivalent. Every year thereafter, for so long as the NDA is in effect and in which you make a written request, we will provide that same information. 6.2 You will be hosted on shared hardware in a Tyler data center or in a third-party data center. In either event, databases containing your Data will be dedicated to you and inaccessible to our other customers. 6.3 Our Tyler data centers have fully-redundant telecommunications access, electrical power, and the required hardware to provide access to the Tyler Software in the event of a disaster or component failure. In the event any of your Data has been lost or damaged due to an act or omission of Tyler or its subcontractors or due to a defect in Tyler’s software, we will use best commercial efforts to restore all the Data on servers in accordance with the architectural design’s capabilities and with the goal of minimizing any Data loss as greatly as possible. In no case shall the recovery point objective (“RPO”) exceed a maximum of twenty-four (24) hours from declaration of disaster. For purposes of this subsection, RPO represents the maximum tolerable period during which your Data may be lost, measured in relation to a disaster we declare, said declaration will not be unreasonably withheld. 6.4 In the event we declare a disaster, our Recovery Time Objective (“RTO”) is twenty-four (24) hours. For purposes of this subsection, RTO represents the amount of time, after we declare a disaster, within which your access to the Tyler Software must be restored. 6.5 We conduct annual penetration testing of either the production network and/or web application to be performed. We will maintain industry standard intrusion detection and prevention systems to monitor malicious activity in the network and to log and block any such activity. We will provide you with a written or electronic record of the actions taken by us in the event that any unauthorized access to your database(s) is detected as a result of our security protocols. We will undertake an additional security audit, on terms and timing to be mutually agreed to by the parties, at your written request. You may not attempt to bypass or subvert security restrictions in the SaaS Services or environments related to the Tyler Software. Unauthorized attempts to access files, passwords or other confidential information, and unauthorized vulnerability and penetration test scanning of our network and systems (hosted or otherwise) is prohibited without the prior written approval of our IT Security Officer. 6.6 We test our disaster recovery plan on an annual basis. Our standard test is not client-specific. Should you request a client-specific disaster recovery test, we will work with you to schedule and execute such a test on a mutually agreeable schedule. At your written request, we will provide test results to you within a commercially reasonable timeframe after receipt of the request. 6.7 We will be responsible for importing back-up and verifying that you can log-in. You will be responsible for running reports and testing critical processes to verify the returned Data. 6.8 We provide secure Data transmission paths between each of your workstations and our servers. 6.9 Tyler data centers are accessible only by authorized personnel with a unique key entry. All other visitors to Tyler data centers must be signed in and accompanied by authorized personnel. Entry attempts to the data center are regularly audited by internal staff and external auditors to ensure no unauthorized access. 6.10 Where applicable with respect to our applications that take or process card payment data, we are responsible for the security of cardholder data that we possess, including functions relating to storing, processing, and transmitting of the cardholder data and affirm that, as of the Effective Date, we comply with applicable requirements to be considered PCI DSS compliant and have performed the necessary steps to validate compliance with the PCI DSS. We agree to supply the current status of our PCI DSS compliance program in the form of an official Attestation of Compliance, which can be found at xxxxx://xxx.xxxxxxxxx.xxx/about- us/compliance, and in the event of any change in our status, will comply with applicable notice requirements.
Subcontracting for Medicaid Services Notwithstanding any permitted subcontracting of services to be performed under this Agreement, Party shall remain responsible for ensuring that this Agreement is fully performed according to its terms, that subcontractor remains in compliance with the terms hereof, and that subcontractor complies with all state and federal laws and regulations relating to the Medicaid program in Vermont. Subcontracts, and any service provider agreements entered into by Party in connection with the performance of this Agreement, must clearly specify in writing the responsibilities of the subcontractor or other service provider and Party must retain the authority to revoke its subcontract or service provider agreement or to impose other sanctions if the performance of the subcontractor or service provider is inadequate or if its performance deviates from any requirement of this Agreement. Party shall make available on request all contracts, subcontracts and service provider agreements between the Party, subcontractors and other service providers to the Agency of Human Services and any of its departments as well as to the Center for Medicare and Medicaid Services.
Hospice Services Services are available for a Member whose Attending Physician has determined the Member's illness will result in a remaining life span of six months or less.
Business Services Professional Services
Verizon OSS Services 8.2.1 Upon request by ECI, Verizon shall provide to ECI Verizon OSS Services. Such Verizon OSS Services will be provided in accordance with, but only to the extent required by, Applicable Law. 8.2.2 Subject to the requirements of Applicable Law, Verizon Operations Support Systems, Verizon Operations Support Systems functions, Verizon OSS Facilities, Verizon OSS Information, and the Verizon OSS Services that will be offered by Verizon, shall be as determined by Verizon. Subject to the requirements of Applicable Law, Verizon shall have the right to change Verizon Operations Support Systems, Verizon Operations Support Systems functions, Verizon OSS Facilities, Verizon OSS Information, and the Verizon OSS Services, from time-to-time, without the consent of ECI. 8.2.3 To the extent required by Applicable Law, in providing Verizon OSS Services to ECI, Verizon will comply with Verizon’s applicable OSS Change Management Guidelines, as such Guidelines are modified from time-to-time, including, but not limited to, the provisions of the Guidelines related to furnishing notice of changes in Verizon OSS Services. Verizon’s OSS Change Management Guidelines will be set out on a Verizon website.
Dialysis Services This plan covers dialysis services and supplies provided when you are inpatient, outpatient or in your home and under the supervision of a dialysis program. Dialysis supplies provided in your home are covered as durable medical equipment.
Administration Services When a medical prescription drug is administered by infusion, the administration of the prescription drug may be covered separately from the prescription drug. See Infusion Therapy - Administration Services in the Summary of Medical Benefits for benefit limits and the amount you pay. Prescription drugs that are self-administered are not covered as a medical benefit but may be covered as a pharmacy benefit. Please see Pharmacy Prescription Drugs and Diabetic Equipment or Supplies – Pharmacy Benefits section above for additional information. For some medical prescription drugs, after the first administration, coverage may be limited to certain locations (for example, a designated outpatient or ambulatory service facility, physician’s office, or your home), provided the location is appropriate based on your medical status. For a list of medical prescription drugs that are subject to this Site of Care Program, visit our website. Preauthorization may be required to determine medical necessity as well as appropriate site of care. If we deny your request for preauthorization, or you disagree with our determination for the appropriate site of care, you can submit a medical appeal. See Appeals in Section 5 for information on how to file a medical appeal.
ADS Services Up to U.S. $5.00 per 100 ADSs (or fraction thereof) held on the applicable record date(s) established by the Depositary. Person holding ADSs on the applicable record date(s) established by the Depositary.
Network Services Local Access Services In lieu of any other rates and discounts, Customer will pay fixed monthly recurring local loop charges ranging from $1,200 to $2,000 for TDM-based DS-3 Network Services Local Access Services at 2 CLLI codes mutually agreed upon by Customer and Company.
REGULATORY ADMINISTRATION SERVICES BNY Mellon shall provide the following regulatory administration services for each Fund and Series: Assist the Fund in responding to SEC examination requests by providing requested documents in the possession of BNY Mellon that are on the SEC examination request list and by making employees responsible for providing services available to regulatory authorities having jurisdiction over the performance of such services as may be required or reasonably requested by such regulatory authorities; Assist with and/or coordinate such other filings, notices and regulatory matters and other due diligence requests or requests for proposal on such terms and conditions as BNY Mellon and the applicable Fund on behalf of itself and its Series may mutually agree upon in writing from time to time; and