Laserfiche WebLink
H^��� PROPpSAL CITY OF <br /> U SAWA ANA <br /> 04 Data Security&Governance <br /> —Encryption and hosting:all data transmitted to and from the platform is encrypted in transit using TL.S 1.2+;data at rest is <br /> encrypted using AES-256.The Holly platform is hosted on Amazon Web Services(AWS)through Verceland Supa base.All <br /> infrastructure providers Holly relies on—AWS,Vercel,Supabase,OpenAl,and Anthropic—are independently SOC 2 attested <br /> and routinely recertified <br /> —SOC 2 Type 11 attestation:Holly is actively undergoing SOC 2 Type II attestation for the platform itself,with Type 11 report <br /> completion expected Q3 2026.Holly will provide quarterly written status updates to the City until completion,and a copy of the <br /> completed Type II report within 30 days of issuance <br /> —Data ownership and termination:all data uploaded to or generated by Santa Ana within the platform remains the sole property <br /> of the City.On termination,Holly will provide a complete export of all City data in standard machine-readable formats within 30 <br /> days and permanently delete all City data from Holly systems within 60 days,with written confirmation.Holly's product design <br /> also avoids storage of personally identifiable information—employee names,SSNs,D08s,and other personnel records are not <br /> required,requested,or stored <br /> —No Al model training on City data:Holly's contracts with OpenAl and Anthropic are on enterprise/business plans that <br /> contractually prohibit the use of customer data for training,fine-tuning,or improving the providers'Al models.Al providers <br /> may only use City data for inference(producing a response to a specific request),with no retention beyond the inference <br /> window <br />