Item 26 - Agreement with Allied Network Solutions, Inc. for Adobe Software and Subscription

Home Browse Search

Security and Hosting Overview June 2015 reasons, including testing of new or changed integration connectors, reports, and/or application configuration changes such as revised approval workflows. New application features can also be turned on and reviewed in the sandbox before turning on in the live production instance. • Any data deletion scripts that are developed between the customer and SAP Fieldglass must be tested in a non -production environment prior to executing in production. • Customer Preview testing — this is an opportunity for customers to gain early access to a future upgrade of the SAP Fieldglass application. This allows customers to gain confidence that the system is working as expected prior to the release date. Customer participation is optional. • SAP Fieldglass regression testing — the SAP Fieldglass application is offered in a Software as a Service (SaaS) model. One of the services we provide is testing of the application prior to each production release. To ensure a customer's configuration, integrations, and reports are working as expected with the new codebase, SAP Fieldglass Quality Assurance uses a scrubbed production copy of the database in our regression testing. Regression testing is where we execute test cases against the current production codebase and the future codebase using a common data input. Output files from each test are compared to ensure any changes are expected. Customers may opt out of this process. However, all responsibility in ensuring the customer's SAP Fieldglass instance is properly working and maintained is transferred to the customer. To date, all SAP Fieldglass customers have declined to assume this responsibility. 1.6.5 Data Scrubbing In order to properly service our customers, access to production data is required. All customer data is classified as Confidential. SAP Fieldglass takes every possible precaution to ensure data is protected from unauthorized access and misuse. Data is protected in the following ways: • First names and last names of buyers, suppliers, and workers are anonymized by replacing with a test value. • Email addresses of buyers, suppliers, and workers are changed to a single false email address such as gatest8@SAP Fieldglass.com which is configured to automatically purge all email sent to it. • Buyer and supplier company names are anonymized. • Any custom fields created by the customer remain unchanged. Custom fields that contain sensitive data are encrypted with AES-256 and optionally display masked when entering and displaying values in the user interface. There is no way to decrypt these values since the decryption keys between production and test are different. Keys are stored in the corporate password vault and SAP Fieldglass P a g e 16 1 21