Common use of SaaS Products Clause in Contracts

SaaS Products.  We use a shared user information database across our SaaS products and features. This includes Mobile Manager, Relay, Launch, Analytics and Classroom. Customers will commonly sync student records to this shared database for classroom specific management capabilities across these products. Customers have full access to and manage this data. Lightspeed Systems employee access to this data is limited to support needs.  We do not share this information with any 3rd party unless specifically directed by the customer and requiring a signed document from the customer to initiate the sharing. The personal contact information collected by this can include Network Username or Email Address, First and Last Name, School Grade or Year Level, Class or Group Memberships.  Filter – B (H mandatory) / C / D / I (user or Admin) / K / L / M / GAFE OU / Time on App  Google Classroom – B (H mandatory) / C / D / I / Class Name  O – if enabled  Flagged Browsing content either posted or reviewed on websites  With SIS integration – A-J and O  Without SIS integration – only F  Additional Information from devices using MDM  Apps distributed to user (Managed by User) or to a particular device (Managed by Device)  Type of Device  Version of Operating System  With SIS integration – A-J  Without SIS integration – only F and either H or B  In addition to the shared SaaS information collected above Classroom Orchestrator may collect screenshots of computer usage that could contain personal information.  Access to this information is limited to the organization and group admins defined by the customer and when necessary for support reasons can be shared with a Lightspeed Systems employee.

SaaS Products.  We use a shared user information database across our SaaS products and features. This includes Mobile Manager, Relay, Launch, Analytics and Classroom. Customers will commonly sync student records to this shared database for classroom specific management capabilities across these products. Customers have full access to and manage this data. Lightspeed Systems employee access to this data is limited to support needs.  • We do not share this information with any 3rd party unless specifically directed by the customer and requiring a signed document from the customer to initiate the sharing. The personal contact information collected by this can include Network Username or Email Address, First and Last Name, School Grade or Year Level, Class or Group Memberships.  • Filter – B (H mandatory) / C / D / I (user or Admin) / K / L / M / GAFE OU / Time on App  • Google Classroom – B (H mandatory) / C / D / I / Class Name  • O – if enabled  • Flagged Browsing content either posted or reviewed on websites  • With SIS integration – A-J and O  • Without SIS integration – only F  • Additional Information from devices using MDM  • Apps distributed to user (Managed by User) or to a particular device (Managed by Device)  • Type of Device  • Version of Operating System  • With SIS integration – A-J  • Without SIS integration – only F and either H or B  • In addition to the shared SaaS information collected above Classroom Orchestrator may collect screenshots of computer usage that could contain personal information.  • Access to this information is limited to the organization and group admins defined by the customer and when necessary for support reasons can be shared with a Lightspeed Systems employee.

SaaS Products.  We use a shared user information database across our SaaS products and features. This includes Mobile Manager, Relay, Launch, Analytics and Classroom. Customers will commonly sync student records to this shared database for classroom specific management capabilities across these products. Customers have full access to and manage this data. Lightspeed Systems employee access to this data is limited to support needs.  • We do not share this information with any 3rd party unless specifically directed by the customer and requiring a signed document from the customer to initiate the sharing. The personal contact information collected by this can include Network Username or Email Address, First and Last Name, School Grade or Year Level, Class or Group Memberships.  • Filter – B (H mandatory) / C / D / I (user or Admin) / K / L / M / GAFE OU / Time on App  • Google Classroom – B (H mandatory) / C / D / I / Class Name  • O – if enabled  • Flagged Browsing content either posted or reviewed on websites  • With SIS integration – A-J and O  • Without SIS integration – only F  • Additional Information from devices using MDM  • Apps distributed to user (Managed by User) or to a particular device (Managed by Device)  • Type of Device  • Version of Operating System  • With SIS integration – A-J  • Without SIS integration – only F and either H or B  • In addition to the shared SaaS information collected above Classroom Orchestrator may collect screenshots of computer usage that could contain personal information.  • Access to this information is limited to the organization and group admins defined by the customer and when necessary for support reasons can be shared with a Lightspeed Systems employee.. De-Identifiable Information (DII): De-Identification refers to the process by which the Vendor removes or obscures any Personally Identifiable Information (“PII”) from student records in a way that removes or minimizes the risk of disclosure of the identity of the individual and information about them. The Provider’s specific steps to de-identify the data will depend on the circumstances, but should be appropriate to protect students. Some potential disclosure limitation methods are blurring, masking, and perturbation. De-identification should ensure that any information when put together cannot indirectly identify the student, not only from the viewpoint of the public, but also from the vantage of those who are familiar with the individual. Information cannot be de-identified if there are fewer than twenty (20) students in the samples of a particular field or category, i.e., twenty students in a particular grade or less than twenty students with a particular disability. First Name Home Address Last Name Subject Telephone Number Email Address Discipline Records Test Results Special Education Data Juvenile Dependency Records Grades Evaluations Criminal Records Medical Records Health Records Social Security Number Biometric Information Disabilities Socioeconomic Information Food Purchases Political Affiliations Religious Information Text Messages Documents Student Identifiers Search Activity Photos Voice Recordings Videos Date of Birth Grade Classes General Categories:

SaaS Products.  We use a shared user information database across our SaaS products and features. This includes Mobile Manager, Relay, Launch, Analytics and Classroom. Customers will commonly sync student records to this shared database for classroom specific management capabilities across these products. Customers have full access to and manage this data. Lightspeed Systems employee access to this data is limited to support needs.  We do not share this information with any 3rd party unless specifically directed by the customer and requiring a signed document from the customer to initiate the sharing. The personal contact information collected by this can include Network Username or Email Address, First and Last Name, School Grade or Year Level, Class or Group Memberships.  Filter – B (H mandatory) / C / D / I (user or Admin) / K / L / M / GAFE OU / Time on App  Google Classroom – B (H mandatory) / C / D / I / Class Name  O – if enabled  Flagged Browsing content either posted or reviewed on websites  With SIS integration – A-J and O  Without SIS integration – only F  Additional Information from devices using MDM  Apps distributed to user (Managed by User) or to a particular device (Managed by Device)  Type of Device  Version of Operating System  With SIS integration – A-J  Without SIS integration – only F and either H or B  In addition to the shared SaaS information collected above Classroom Orchestrator may collect screenshots of computer usage that could contain personal information.  Access to this information is limited to the organization and group admins defined by the customer and when necessary for support reasons can be shared with a Lightspeed Systems employee.. removes or obscures any Personally Identifiable Information (“PII”) from student records in a way that removes or minimizes the risk of disclosure of the identity of the individual and information about them. The Provider’s specific steps to de-identify the data will depend on the circumstances, but should be appropriate to protect students. Some potential disclosure limitation methods are blurring, masking, and perturbation. De-identification should ensure that any information when put together cannot indirectly identify the student, not only from the viewpoint of the public, but also from the vantage of those who are familiar with the individual. gathered by Provider or provided by LEA or its users, students, or students’ parents/guardians. PII includes, without limitation, at least the following: First Name Home Address Last Name Subject Telephone Number Email Address Discipline Records Test Results Special Education Data Juvenile Dependency Records Grades Evaluations Criminal Records Medical Records Health Records Social Security Number Biometric Information Disabilities Socioeconomic Information Food Purchases Political Affiliations Religious Information Text Messages Documents Student Identifiers Search Activity Photos Voice Recordings Videos Date of Birth Grade Classes Place of birth Social Media Address Unique pupil identifier Credit card account number, insurance account number, and financial services account number Name of the student's parents or other family members General Categories:

SaaS Products.  We use a shared user information database across our SaaS products and features. This includes Mobile Manager, Relay, Launch, Analytics and Classroom. Customers will commonly sync student records to this shared database for classroom specific management capabilities across these products. Customers have full access to and manage this data. Lightspeed Systems employee access to this data is limited to support needs.  • We do not share this information with any 3rd party unless specifically directed by the customer and requiring a signed document from the customer to initiate the sharing. The personal contact information collected by this can include Network Username or Email Address, First and Last Name, School Grade or Year Level, Class or Group Memberships.  • Filter – B (H mandatory) / C / D / I (user or Admin) / K / L / M / GAFE OU / Time on App  • Google Classroom – B (H mandatory) / C / D / I / Class Name  • O – if enabled  • Flagged Browsing content either posted or reviewed on websites  • With SIS integration – A-J and O  • Without SIS integration – only F  • Additional Information from devices using MDM  • Apps distributed to user (Managed by User) or to a particular device (Managed by Device)  • Type of Device  • Version of Operating System  • With SIS integration – A-J  • Without SIS integration – only F and either H or B  • In addition to the shared SaaS information collected above Classroom Orchestrator may collect screenshots of computer usage that could contain personal information.  • Access to this information is limited to the organization and group admins defined by the customer and when necessary for support reasons can be shared with a Lightspeed Systems employee. Data: Data shall include, but is not limited to, the following: student data, educational records, employee data, metadata, user content, course content, materials, and any and all data and information that the District (or any authorized end user(s)) uploads or enters through their use of the product. Data also specifically includes all personally identifiable information in education records, directory data, and other non-public information for the purposes of Texas and Federal laws and regulations. Data as specified in Exhibit B is confirmed to be collected or processed by the Provider pursuant to the Services. Data shall not constitute that information that has been anonymized or de-identified, or anonymous usage data regarding a student’s use of Provider’s services.

SaaS Products.  We use a shared user information database across our SaaS products and features. This includes Mobile Manager, Relay, Launch, Analytics and Classroom. Customers will commonly sync student records to this shared database for classroom specific management capabilities across these products. Customers have full access to and manage this data. Lightspeed Systems employee access to this data is limited to support needs.  • We do not share this information with any 3rd party unless specifically directed by the customer and requiring a signed document from the customer to initiate the sharing. The personal contact information collected by this can include Network Username or Email Address, First and Last Name, School Grade or Year Level, Class or Group Memberships.  • Filter – B (H mandatory) / C / D / I (user or Admin) / K / L / M / GAFE OU / Time on App  • Google Classroom – B (H mandatory) / C / D / I / Class Name  • O – if enabled  • Flagged Browsing content either posted or reviewed on websites  • With SIS integration – A-J and O  • Without SIS integration – only F  • Additional Information from devices using MDM  • Apps distributed to user (Managed by User) or to a particular device (Managed by Device)  • Type of Device  • Version of Operating System  • With SIS integration – A-J  • Without SIS integration – only F and either H or B  • In addition to the shared SaaS information collected above Classroom Orchestrator may collect screenshots of computer usage that could contain personal information.  • Access to this information is limited to the organization and group admins defined by the customer and when necessary for support reasons can be shared with a Lightspeed Systems employee.. LEA Data includes all business, employment, operational and Personally Identifiable Information that Division provides to Provider and that is not intentionally made generally available by the LEA on public websites or publications, including but not limited to business, administrative and financial data, intellectual property, and student, employees, and personnel data, user generated content and metadata but specifically excludes Provider Data (as defined in the Contract).De-Identifiable Information (DII): De-Identification refers to the process by which the Provider removes or obscures any Personally Identifiable Information (“PII”) from student records in a way that removes or minimizes the risk of disclosure of the identity of the individual and information about them. Anonymization or de-identification should follow guidance equivalent to that provided by U.S Department of Education publication “Data De- identification: An Overview of Basic Terms” or NISTIR Special Publication (SP) 8053 De- Identification of Personally Identifiable Information. The Provider’s specific steps to de-identify the data will depend on the circumstances but should be appropriate to protect students. Some potential disclosure limitation methods are blurring, masking, and perturbation. De- identification should ensure that any information when put together cannot indirectly identify the student, not only from the viewpoint of the public, but also from the vantage of those who are familiar with the individual. Information cannot be de- identified if there are fewer than twenty (20) students in the samples of a particular field or category, i.e., twenty students in a particular grade or less than twenty students with a particular disability. PII includes, without limitation, at least the following: ● Staff, Student or Parent First, Middle and Last Name ● Staff, Student or Parent Telephone Number(s) ● Discipline Records ● Special Education Data ● Grades ● Criminal Records ● Health Records ● Biometric Information ● Socioeconomic Information ● Political Affiliations ● Text Messages ● Student Identifiers Photos ● Videos ● Grade ● Home Address Subject ● Email Address ● Test Results ● Juvenile Dependency Records Evaluations ● Medical Records ● Social Security Number ● Disabilities ● Food Purchases ● Religious Information Documents ● Search Activity ● Voice Recordings ● Date of Birth ● Classes ● Information in the Student’s Educational Record ● Information in the Student’s Email