CivicPlus 12/10/2025 - Laserfiche WebLink

Offsite/Cloud Addendum - 3 6.20.23 10. Background Checks: Vendor shall conduct criminal background checks and not utilize any staff, including subcontractors, to fulfill the obligations of the Agreement who have been convicted of any crime of dishonesty, including, but not limited to, criminal fraud. Vendor shall promote and maintain awareness of the importance of securing the City's information among Vendor's contractors, employees and agents. 11. Data Dictionary: Intentionally omitted. 12. Security Logs and Reports: Intentionally omitted. 13. Contract Audit: Vendor shall allow the City to audit conformance to Agreement terms and system security as appropriate. The City may perform this audit or contract with a third party at its discretion at the City’s expense. Such reviews shall be conducted with at least 30 days advance written notice, shall not unreasonably interfere with Vendor’s business, and shall be conducted no more frequently than once per twelve months. 14. Subcontractor Disclosure: Intentionally omitted. 15. Third-Party Vendors: Vendor may use third-party vendors to provide services to City. Vendor must ensure that any third-party vendor is also SOC2 compliant. 16. Business Continuity: Vendor will maintain a comprehensive continuity of operations plan consistent with SOC2 requirements and will regularly review and update the plan as necessary. Vendor will provide the City with notice of any changes to the continuity of operations plan that may impact the City’s use of the services under the Agreement. a. In the event of a disruption of Vendor’s operations, Vendor will use commercially reasonable efforts to restore service as soon as possible, consistent with SOC2 requirements. b. Vendor will conduct regular tests of its continuity of operations plan to ensure that it is effective and up-to-date. 17. Operational Metrics: Intentionally omitted. 18. Third Party Supplier Access to City Data: Intentionally omitted.