Laserfiche WebLink
Offsite/Cloud Addendum - 1 <br />6.20.23 <br /> <br /> <br /> <br /> <br />ADDENDUM <br />(CLOUD/OFFSITE HOSTING) <br /> <br />Vendor: CivicPlus <br />Agreement: Statement of Work Q-101292-1 <br />The City of Everett (City) and Vendor are parties to the Agreement as shown in <br />the table above. Regardless of anything to the contrary in the Agreement, the <br />Vendor agrees as follows: <br />1. Compliance Requirements: Intentionally omitted. <br />2. Data Ownership: Intentionally omitted. Refer to Master Services <br />Agreement for details. <br />3. Confidentiality: Vendor shall protect the confidentiality of City data and <br />shall not disclose any City data to any third party without the City’s prior <br />written consent. Vendor shall maintain appropriate security measures to <br />protect City data from unauthorized access, use, or disclosure. <br />4. Data Protection: Protection of personal privacy and sensitive data shall <br />be an integral part of the business activities of Vendor to ensure that <br />there is no inappropriate or unauthorized use of City data at any time. <br />To this end, Vendor shall safeguard the confidentiality, integrity, and <br />availability of City data and comply with the following conditions: <br />a. Intentionally omitted. <br />b. At no time shall any identifiable data or processes which solely <br />belongs to the City or its officers, agents, or employees, be copied, <br />disclosed, or retained by Vendor or any party related to Vendor for <br />subsequent use unless such use is authorized by the City in writing. <br />5. Data Location: Vendor shall not store or transfer non-public City data <br />outside of the United States. This includes backup data and disaster <br />recovery locations. Vendor will permit its personnel and contractors to <br />access City data remotely only as required to provide technical support. <br />6. Encryption: <br />a. Vendor shall encrypt all non-public data in transit regardless of the <br />transit mechanism. <br />b. For engagements where Vendor stores sensitive personally identifiable <br />or otherwise confidential information collected through encrypted forms, <br />this data shall be encrypted at rest. Examples of such information <br />include without limitation: social security number, date of birth, driver’s <br />license number, financial data, federal/state tax information, and hashed <br />passwords. Vendor’s encryption shall be consistent with validated