Laserfiche WebLink
Terms. Licensee hereby consents to the <br />processing (which Includes, without limitation, <br />collection, recording, organization, storage, <br />adaptation or alteration, retrieval, consultation, <br />use, disclosure by transmission, dissemination or <br />otherwise making available, alignment or <br />combination, blocking, erasure and destruction) <br />and other use of Personal Information by the <br />Processing Parties in connection with their <br />activities relating to the subject matter of these <br />API License Terms, provided, however that <br />Licensor shall provide Its services to Licensee and <br />its end users solely from data centers In the U.S. <br />Storage of any Licensee customer data that may <br />be collected by Licensor or Processing Parties <br />shall be located solely in data centers in the U.S. <br />The service provider shall not allow its personnel <br />or contractors to store public jurisdiction data on <br />portable devices, including personal computers, <br />except for devices that are used and kept only at <br />its U.S. data centers. Licensor shall permit its <br />personnel and contractors to access public <br />jurisdiction data remotely only as required to <br />provide technical support. Licensor may provide <br />technical user support on a 24/7 basis using a <br />Follow the Sun model, unless otherwise <br />prohibited in this contract. "Personal <br />Information" means data and information <br />relating to identified or identifiable individuals, <br />including information relating to Licensee <br />personnel (e.g., employees, temporary workers, <br />and Independent contractors), customers, <br />suppliers, and other third parties. Streetline <br />Incorporates the following data security <br />standards: <br />(1) Physical security— controlled by a 2 <br />factor access card/biometric HID system. <br />Datacenter access badges are kept in the AIMS <br />NOC and must be signed out with proper ID. NOC <br />personnel keep ID until the access badge is <br />returned and visit is escorted. Datacenter is <br />always monitored and accessed by 240 NOC <br />personnel via camera. <br />(ii) Network security-Streetline servers and <br />application platforms are deployed beyond <br />firewalls. Firewalls are configured with access list <br />and only traffic allowed are those necessary for <br />the applications. <br />(iii) Infrastructure security— Intrusion detection <br />policy is in place to check for malicious activity <br />and all the critical systems are kept up to date <br />with the latest security patches. <br />(iv) Customer data security- Product security is <br />considered from the beginning for new product <br />development. Streetline utilizes standard HTTP <br />Secure Protocol (https), authentication to verify <br />identity and authorization to handle access rights <br />through an ACL -based (Access Control List) <br />security model. A central Single Sign On service <br />and administrative UI supports user management, <br />application and service access and various <br />degrees of access rights to data within an <br />application or service. This is to ensure that <br />customer data is secure and only accessible to the <br />customer, authorized Streetline personnel and <br />authorized third parties. <br />6. Monitoring. Licensee will provide Licensor <br />with information or materials that Licensor <br />reasonably requests to verify Licensee's <br />compliance with these API License Terms and the <br />Specifications, including a copy of each <br />Application and one or more test accounts that <br />will enable Licensor to access each Application in <br />its entirety free of charge. Licensee <br />acknowledges and agrees that Licensor may (but <br />Is not obligated to) monitor the Data, the API, and <br />other Licensor Materials and Licensee's access <br />thereto and use thereof for any purpose, <br />including to ensure quality and to verify <br />compliance with these API License Terms and any <br />other agreement between the parties. Licensee <br />will provide Licensor with reasonable means to <br />carry out such monitoring at no charge. Licensee <br />will not interfere with such monitoring or <br />otherwise obscure from Licensor any activity in <br />connection with any Licensor Materials, and <br />Licensor may use any technical means to <br />overcome such interference. <br />7. Responsibility for Service; Support. As <br />between Licensee and Licensor, Licensee is solely <br />responsible for all aspects of its use of the Data, <br />the API, any other Licensor Materials, and each <br />Application, and Licensee acknowledges and <br />REV: 07-07-17 JS <br />ATTY/AGR.2017.158/Streetline Page 18 of 19 <br />