Agmt18 Host Compliance LLC - Laserfiche WebLink

Browse Search

CITY: Melissa Stevenson -Diaz City Manager City of Redwood City 1017 Middlefield Road Redwood City, CA 94063 Agreement for Professional and Software Services Host Compliance LLC CONSULTANT: Ulrik Binzer President & CEO Host Compliance LLC 735 Market Street, Floor 4 San Francisco, CA 6.21 Warranty of Authorized Signatories. Each of the signatories hereto warrants and represents that he or she is competent and authorized to enter into this Agreement on behalf of the party for whom he or she purports to sign. 6.22 Procurement Piggybacking. Consultant agrees to reasonably participate in any procurement related "piggybacking" programs pertinent to local government. 6.23 Data Protection 6.23.1 Data Security. Consultant will use, at a minimum, NIST -approved technical and organizational security measures to store data provided by City, or obtained by Consultant related to the services and tasks performed under this Agreement (together "City Data"). These measures are designed to protect the integrity of City Data and guard against unauthorized or unlawful access. 6.23.2 Electronic Commerce. Consultant shall protect data in accordance with the Payment Card Industry Data Security Standard (PCI DSS) on behalf of the City, relating to City activities when cardholder information is entered, accessed, transferred, stored or processed by Consultant or through their system. 6.23.3 Confidential Information. Consultant shall treat all information and data, including but not limited to remote access, such as instructions, user IDs and Passwords, as confidential information. In no case shall Consultant allow a third party access to City information or Customer Data, including but not limited to proprietary confidential information, without the express written consent of the City. 6.23.4 Data Ownership. The City will own all right, title and interest in its data that is related to the services provided by this Agreement. Consultant shall not access City user accounts or City data, except (1) in the course of data center operations, (2) in response to service or technical issues, (3) as required by the express terms of this Agreement, or (4) at City's written request. 6.23.5 Data Protection. Protection of personal privacy and data shall be an integral part of the business activities of Consultant to ensure there is no inappropriate or unauthorized access or use of City Data at any time. To this end, Consultant shall safeguard the confidentiality, integrity and availability of City Data and comply with the following conditions: (a) Consultant shall implement and maintain appropriate administrative, technical and organization security measures to safeguard against unauthorized access, disclosure or theft of City Data. Such security measures shall be in accordance with recognized industry practice. (b) All data obtained by Consultant in the performance of this Agreement shall become and remain property of the City. REV: 10-03-18 PR Page 8 of 13 ATTYIAGR.2018.2401Host Compliance