Remix Technologies LLC 9/14/2021

DocuSign Envelope ID: DCB6F45C-AC01-45CD-9324-AB088020D6A4 City of Everett Cloud and/or Offsite Hosting Terms and Conditions Contract# , Appendix between City of Everett and RPmix Tec'hnningiPS, I I C dated 8/24/2021 This document shall become part of the final contract. Terms and Conditions Clauses 1-13 are mandatory for every engagement. Exceptions will be considered non-compliant and non-responsive. The policy shall comply with the following requirements: • Issued by an insurance company acceptable to the City of Everett and valid for the entire term of the contract, inclusive of any term extension(s). • Liability limits: $2,000,000 per occurrence. • Shall include, but not be limited to, coverage for liabilities arising out of premises, operations, independent contractors, products, completed operations, and liability assumed under an insured contract. • At a minimum, the policy must include third party coverage for credit monitoring; notification costs to data breach victims; and regulatory penalties and fines. • Shall apply separately to each insured against whom claim is made or suit is brought subject to the Service Provider's limit of liability. • Shall include a provision requiring that the policy cannot be cancelled without thirty days written notice to the City of Everett. • The Service Provider shall be responsible for any deductible or self-insured retention contained in the insurance policy. • The coverage under the policy shall be primary, and not excess, to any other insurance carried by the Service Provider. • In the event contractor fails to keep in effect at all times the insurance coverage required by this provision, the City may, in addition to any other remedies it may have, terminate the contract upon the occurrence of such event, subject to the provisions of the contract. 5. Breach Notification and Recovery: City of Everett requires public breach notification when citizens' personally identifiable information is lost or stolen. Additionally, unauthorized access or disclosure of non-public data is considered to be a breach. The Service Provider will provide notification without unreasonable delay and all communication shall be coordinated with the City of Everett. When the Service Provider or their subcontractors are liable for the loss, the Service Provider shall bear all costs associated with the investigation, response and recovery from the breach including but not limited to credit monitoring services with a term of at least 3 years, mailing costs, website, and toll free telephone call center services. The City of Everett shall not agree to any limitation on liability that relieves a Contractor from its own negligence or to the extent that it creates an obligation on the part of the State to hold a Contractor harmless. 6. Notification of Legal Requests: The Service Provider shall contact the City of Everett upon receipt of any electronic discovery, litigation holds, discovery searches, and expert testimonies related to, or which in any way might reasonably require access to the data of the City. The Service Provider shall not respond to subpoenas, service of process, and other legal requests related to the City of Everett without first notifying the City unless prohibited by law from providing such notice. 7. Termination and Suspension of Service: In the event of termination of the contract, the Service Provider shall implement an orderly return of City of Everett data in CSV or XML or another mutually agreeable format. The Service Provider shall guarantee the subsequent secure disposal of City of Everett data. a) Suspension of services: During any period of suspension or contract negotiation or disputes, the Service Provider shall not take any action to intentionally erase any City of Everett data. 2IPage