Agmt26 Concourse Tech, Inc. - Laserfiche WebLink

Browse Search

REV: 04-07-24 LF originating with the City, or is collected by Provider on behalf of the City, and all data that is the output of computer processing of or other electronic manipulation of any data that was created by or in any way originated with the City as part of the SaaS Solution, or is collected by the Provider on behalf of the City in connection with the SaaS Solution, whether such data or output is stored on the City’s hardware, Provider’s hardware or exists in any system owned, maintained or otherwise controlled by the City or by Provider. Provider will deliver to City a full copy of all City Data that is stored by Provider or held in any database in connection with the Software within five (5) days of City’s request, including within ninety (90) days following the termination of this Agreement, subject to any fee set forth in the Fee Schedule. Furthermore, at the request of City, Provider shall further destroy all copies of the data that are in Provider’s possession. b. The storage and handling of City Data by Provider is as a service provider on behalf of City and it is not intended that the performance of the obligations of Provider pursuant to this Agreement will be subject to the California Consumer Privacy Act as currently in effect. Provider will cooperate with City to ensure that the storage and handling of City Data remains in compliance with any privacy requirements that are applicable to the City. c. Provider shall remain the owner of the Software and any of Provider’s intellectual property that is associated with the SaaS Solution and the performance of any of the Services. 10. Data Security. a. For purposes of this Section 10, the following definitions apply: (i) “Data Breach” means the unauthorized access by a non-authorized person’s that results in the use, disclosure or theft of City Data. (ii) “City Identified Contact” means the person or persons designated in writing by the City to receive Security Incident or Data Breach notification. (iii) “Security Incident” means the potentially unauthorized access by non- authorized persons to City Date that Provider believes could reasonably result in the use, disclosure or theft of City Data within the possession or control of Provider. A Security Incident may or may not turn into a Data Breach. b. The Software and Services will be provided in accordance with the security protocols that are set forth in the security policy of Provider, which is attached hereto as Exhibit “G” (“Security Policy”). The Security Policy sets forth the minimum level of encryption, intrusion detection and data protection that is provided for the SaaS Solution and Provider will not make any change to the Security Policy during the terms of this Agreement that would provide less rigorous protection. Notwithstanding any term of the Security Policy, all City Data will be encrypted while in transit and while at rest or in storage on Provider’s servers. All connections between City and Provider where Provider employees or contractors have access to the City’s network or City Data while providing Services will be secured using a virtual private network or similar protocol. City Data that ATTY/AGR.2026.096/TBD (Relocation Assistance Software) (Page 5 of 33)