Laserfiche WebLink
Exhibit 1 to the Master Agreement: Software -as -a -Service <br />1. Data Ownership: The Purchasing Entity will own all right, title and interest in its data that is <br />related to the Services provided by this Master Agreement. The Contractor shall not access <br />Purchasing Entity user accounts or Purchasing Entity data, except (1) in the course of data <br />center operations, (2) in response to service or technical issues, (3) as required by the express <br />terms of this Master Agreement, Participating Addendum, SLA, and/or other contract <br />documents, or (4) at the Purchasing Entity's written request. <br />Contractor shall not collect, access, or use user -specific Purchasing Entity Data except as strictly <br />necessary to provide Service to the Purchasing Entity. No information regarding a Purchasing <br />Entity's use of the Service may be disclosed, provided, rented or sold to any third party for any <br />reason unless required by law or regulation or by an order of a court of competent jurisdiction. This <br />obligation shall survive and extend beyond the term of this Master Agreement. <br />2. Data Protection: Protection of personal privacy and data shall be an integral part of the <br />business activities of the Contractor to ensure there is no inappropriate or unauthorized use of <br />Purchasing Entity information at any time. To this end, the Contractor shall safeguard the <br />confidentiality, integrity and availability of Purchasing Entity information and comply with the <br />following conditions: <br />a. The Contractor shall implement and maintain appropriate administrative, technical and <br />organizational security measures to safeguard against unauthorized access, disclosure or <br />theft of Personal Data and Non -Public Data. Such security measures shall be in accordance <br />with recognized industry practice and not less stringent than the measures the Contractor <br />applies to its own Personal Data and Non -Public Data of similar kind. <br />b. All data obtained by the Contractor in the performance of the Master Agreement shall <br />become and remain the property of the Purchasing Entity. <br />c. All Personal Data shall be encrypted at rest and in transit with controlled access. Unless <br />otherwise stipulated, the Contractor is responsible for encryption of the Personal Data. Any <br />stipulation of responsibilities will identify specific roles and responsibilities and shall be <br />included in the service level agreement (SLA), or otherwise made a part of the Master <br />Agreement. <br />d. Unless otherwise stipulated, the Contractor shall encrypt all Non -Public Data at rest and <br />in transit. The Purchasing Entity shall identify data it deems as Non -Public Data to the <br />Contractor. The level of protection and encryption for all Non -Public Data shall be identified <br />in the SLA. <br />e. At no time shall any data or processes — that either belong to or are intended for the <br />use of a Purchasing Entity or its officers, agents or employees — be copied, disclosed or <br />retained by the Contractor or any party related to the Contractor for subsequent use in any <br />transaction that does not include the Purchasing Entity. <br />