Loading...
HomeMy WebLinkAbout2019-606-E IT - LexLoci pre-arrest diversion software DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 [Departmental Use Only] TITLE FY NORTH CAROLINA SERVICES AGREEMENT UNDER $90,000.00 NO RFP/RFQ ORANGE COUNTY This Services Agreement (hereinafter "Agreement"), made and entered into this 23rd day of August, 2019, ("Effective Date") by and between Orange County, North Carolina a political subdivision of the State of North Carolina (hereinafter, the "County") and Lex Loci Technologies, Inc., (hereinafter, the "Provider"). WITNESSETH: That the County and Provider, for the consideration herein named, do hereby agree as follows: 1. Services a. Scope of Work. i) This Agreement is for services to be rendered by Provider to County with respect to (insert type of project): implementing and hosting customized pre-arrest diversion software. ii) By executing this Agreement, the Provider represents and agrees that Provider is qualified to perform and fully capable of performing and providing the services required or necessary under this Agreement in a fully competent, professional and timely manner. iii) Time is of the essence with respect to this Agreement. iv) The services to be performed under this Agreement consist of Basic Services, as described and designated in Section 3 hereof. Compensation to the Provider for Basic Services under this Agreement shall be as set forth herein. 2. Responsibilities of the Provider a. Services to be provided. The Provider shall provide the County with all services required in Section 3 to satisfactorily complete the Project within the time limitations set forth herein and in accordance with the highest professional standards. b. Standard of Care. i) The Provider shall exercise reasonable care and diligence in performing services under this Agreement in accordance with the highest generally accepted standards of this type of Provider practice throughout the United States and in accordance with applicable federal, state and local laws and regulations applicable to the performance of these services. Provider is solely responsible for the professional Revised 10/17 1 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 quality, accuracy and timely completion and/or submission of all work related to the Basic Services. ii) Provider shall be responsible for all errors or omissions of its agents, contractors, employees, or assigns in the performance of the Agreement. Provider shall correct any and all errors, omissions, discrepancies, ambiguities, mistakes or conflicts at no additional cost to the County. iii) The Provider shall not, except as otherwise provided for in this Agreement, subcontract the performance of any work under this Agreement without prior written permission of the County. No permission for subcontracting shall create, between the County and the subcontractor, any contract or any other relationship. iv) Provider is an independent contractor of County. Any and all employees of the Provider engaged by the Provider in the performance of any work or services required of the Provider under this Agreement, shall be considered employees or agents of the Provider only and not of the County, and any and all claims that may or might arise under any workers compensation or other law or contract on behalf of said employees while so engaged shall be the sole obligation and responsibility of the Provider. v) If activities related to the performance of this Agreement require specific licenses, certifications, or related credentials Provider represents that it and/or its employees, agents and subcontractors engaged in such activities possess such licenses, certifications, or credentials and that such licenses certifications, or credentials are current, active, and not in a state of suspension or revocation. vi) In determining the basic services to be provided, should any documents be referenced in this Agreement, the terms of this Agreement shall have priority in any conflict between the terms of referenced documents and the terms of this Agreement. Should a request for proposals and a proposal be referenced the terms of the request for proposals shall have priority over the terms of any proposal. 3. Basic Services a. Basic Services. The Services to be rendered pursuant to this Agreement are as follows (fully describe services to be provided): Provider will license, administer, and support a secure cloud-based implementation of Lex Loci's pre-arrest diversion software, customized for use exclusively by Orange County in administering their local OC-PAD program. Provider is responsible for: on-going administration of the environment, which is deployed on a dedicated Amazon Web Services environment; application support in accordance with the service level agreement described in Attachment A - Service Level Agreement; installing software updates and hot fixes as required. Provider will complete the following code enhancements before go-live: (1) Augmented analytics charts to include visualizations on assigned programs, referring agency, incident, and diversion process; (2) Minor, miscellaneous adjustments based on previously collected OC-PAD coordinator feedback. Provider will also conduct up to six hours of training over the term of the agreement to on-board various law enforcement Revised 10/17 2 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 agencies in Orange County. The hourly development rate for future software enhancements is $115 per hour. There is no licensing count or restriction based on number of users. Instead, the license is "limited use," meaning it is solely "...for use exclusively by Orange County in administering their local OC-PAD program." Reference (i) Attachment A - Service Level Agreement, (ii) Attachment B - Cloud Service Questionnaire (iii) Attachment C - Lex Loci Cyber Liability insurance policy (iv) Attachment D - Lex Loci General Liability insurance policy (v) Attachment E - Lex Loci Licenses—Hourly Development Rate 4. Duration of Services a• Term. The term of this Agreement shall be from August 23' , 2019 to August 22 d, 2021. b. Scheduling of Services. i) The Provider shall schedule and perform its activities in a timely manner. ii) Should the County determine that the Provider is behind schedule, it may require the Provider to expedite and accelerate its efforts, including providing additional resources and working overtime, as necessary, to perform its services in accordance with the approved project schedule at no additional cost to the County. iii) The Commencement Date for the Provider's Basic Services shall be August 23ra, 2019. 5. Compensation a. Compensation for Basic Services. Compensation for Basic Services shall include all compensation due the Provider from the County for all services under this Agreement. The maximum amount payable for Basic Services shall not exceed Eighty Thousand Dollars ($80,000.00). Payment for Basic Services shall become due and payable within thirty (30) days of Provider properly invoicing County. Payment shall be subject to provisions of Section 5(b). b. Disputes. In the event the amount stated on an invoice is disputed by the County, the County may withhold payment of all or a portion of the amount stated on an invoice until the parties resolve the dispute. Should Provider fail to perform its duties under the terms of this Agreement, County may, without fault or penalty, withhold any payment associated with the work to be performed until such time as said work is completed. c. Additional Services. County shall not be responsible for costs related to any services in addition to the Basic Services performed by Provider unless County requests such additional services in writing and such additional services are evidenced by a written amendment to this Agreement. 6. Responsibilities of the County a. Cooperation and Coordination. The County has designated (Caitlin Fenhagen) to act as the County's representative with respect to the Project and shall have the authority to Revised 10/17 3 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 render decisions within guidelines established by the County Manager and/or the County Board of Commissioners and shall be available during working hours as often as may be reasonably required to render decisions and to furnish information. 7. Insurance a. General Requirements. Provider shall obtain, at its sole expense, Commercial General Liability Insurance, Automobile Insurance, Workers' Compensation Insurance, and any additional insurance as may be required by County's Risk Manager as such insurance requirements are described in the Orange County Risk Transfer Policy and Orange County Minimum Insurance Coverage Requirements (each document is incorporated herein by reference and may be viewed at http://www.orangecountync.gov/departments/purchasing division/contracts.php). If County's Risk Manager determines additional insurance coverage is required such additional insurance shall consist of Cyber Liability insurance (if no additional insurance required mark N/A as being not applicable). Provider shall not commence work until such insurance is in effect and certification thereof has been received by the County's Risk Manager. 8. Indemnity a. Indemnity. The Provider agrees, without limitation, to defend, indemnify and hold harmless the County from all loss, liability, claims or expense, including attorney's fees, arising out of or related to the Project and arising from property damage or bodily injury including death to any person or persons caused in whole or in part by the negligence or misconduct of the Provider except to the extent same are caused by the negligence or willful misconduct of the County. It is the intent of this provision to require the Provider to indemnify the County to the fullest extent permitted under North Carolina law. 9. Amendments to the Agreement a. Changes in Basic Services. Changes in the Basic Services and entitlement to additional compensation or a change in duration of this Agreement shall be made by a written Amendment to this Agreement executed by the County and the Provider. The Provider shall proceed to perform the Services required by the Amendment only after receiving a fully executed Amendment from the County. 10. Termination a. Termination for Convenience of the County. This Agreement may be terminated without cause by the County and for its convenience upon seven (7) days' prior written notice to the Provider. b. Other Termination. The Provider may terminate this Agreement based upon the County's material breach of this Agreement; provided, the County has not taken all reasonable actions to remedy the breach. The Provider shall give the County seven (7) days' prior written notice of its intent to terminate this Agreement for cause. c. Compensation After Termination. Revised 10/17 4 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 i) In the event of termination, the Provider shall be paid that portion of the fees and expenses that it has earned to the date of termination, less any costs or expenses incurred or anticipated to be incurred by the County due to errors or omissions of the Provider. ii) Should this Agreement be terminated, the Provider shall deliver to the County within seven (7) days, at no additional cost, all deliverables including any electronic data or files relating to the Project. d. Waiver. The payment of any sums by the County under this Agreement or the failure of the County to require compliance by the Provider with any provisions of this Agreement or the waiver by the County of any breach of this Agreement shall not constitute a waiver of any claim for damages by the County for any breach of this Agreement or a waiver of any other required compliance with this Agreement. e. Suspension. County may suspend the Basic Services and this Agreement at any time for County's convenience and without penalty to County upon three (3) days' notice to Provider. Upon any suspension by County, Provider shall discontinue work on the Basic Services and shall not resume the Basic Services until notified to proceed by County. 11. Additional Provisions a. Limitation and Assignment. The County and the Provider each bind themselves, their successors, assigns and legal representatives to the terms of this Agreement. Neither the County nor the Provider shall assign or transfer its interest in this Agreement without the written consent of the other. b. Governing Law. This Agreement and the duties, responsibilities, obligations and rights of respective parties hereunder shall be governed by the laws of the State of North Carolina. By executing this Agreement Provider affirms that Provider and any subcontractors of Provider are and shall remain in compliance with Article 2 of Chapter 64 of the North Carolina General Statutes. By executing this Agreement Provider certifies that Provider has not been identified, and has not utilized the services of any agent or subcontractor identified, on the list created by the State Treasurer pursuant to G.S. 147-86.58. By executing this Agreement Provider certifies that Provider has not been identified, and has not utilized the services of any agent or subcontractor identified, on the list created by the State Treasurer pursuant to G.S. 147-86.81. c. Non-Discrimination. Provider shall at all times remain in compliance with all applicable local, state, and federal laws, rules, and regulations including but not limited to all state and federal non-discrimination laws, policies, rules, and regulations and the Orange County Non-Discrimination Policy and Orange County Living Wage Policy (each policy is incorporated herein by reference and may be viewed at http://www.oran eg countync. og v/departments/purchasing division/contracts.php.) Any violation of the Orange County Non-Discrimination Policy is a breach of this Agreement and County may immediately terminate this Agreement without further obligation on the part of the County. This paragraph is not intended to limit and does not limit the definition of breach to discrimination. Revised 10/17 5 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 d. Dispute Resolution. Any and all suits or actions to enforce, interpret or seek damages with respect to any provision of, or the performance or non-performance of, this Agreement shall be brought in the General Court of Justice of North Carolina sitting in Orange County, North Carolina. It is agreed by the parties that no other court shall have jurisdiction or venue with respect to such suits or actions. Binding arbitration may not be initiated by either Party, however, the Parties may agree to nonbinding mediation of any dispute prior to the bringing of such suit or action. e. Entire Agreement. This Agreement represents the entire and integrated agreement between the County and the Provider and supersedes all prior negotiations, representations or agreements, either written or oral. This Agreement may be amended only by written instrument signed by both parties. Modifications may be evidenced by facsimile signatures. f. Severability. If any provision of this Agreement is held as a matter of law to be unenforceable, the remainder of this Agreement shall be valid and binding upon the Parties. g. Ownership of Work Product. Should Provider's performance of this Agreement generate documents, items or things that are specific to this Project such documents, items or things shall become the property of the County and may be used on any other project without additional compensation to the Provider. The use of the documents, items or things by the County or by any person or entity for any purpose other than the Project as set forth in this Agreement shall be at the full risk of the County. h. Non-Appropriation. Provider acknowledges that County is a governmental entity, and the validity of this Agreement is based upon the availability of public funding under the authority of its statutory mandate. In the event that public funds are unavailable and not appropriated for the performance of County's obligations under this Agreement, then this Agreement shall automatically expire without penalty to County immediately upon written notice to Provider of the unavailability and non-appropriation of public funds. It is expressly agreed that County shall not activate this non-appropriation provision for its convenience or to circumvent the requirements of this Agreement, but only as an emergency fiscal measure during a substantial fiscal crisis. In the event of a change in the County's statutory authority, mandate and/or mandated functions, by state and/or federal legislative or regulatory action, which adversely affects County's authority to continue its obligations under this Agreement, then this Agreement shall automatically terminate without penalty to County upon written notice to Provider of such limitation or change in County's legal authority. i. Signatures. This Agreement together with any amendments or modifications may be executed electronically. All electronic signatures affixed hereto evidence the consent of the Parties to utilize electronic signatures and the intent of the Parties to comply with Article I IA and Article 40 of North Carolina General Statute Chapter 66. Revised 10/17 6 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 j. Notices. Any notice required by this Agreement shall be in writing and delivered by certified or registered mail, return receipt requested to the following: Orange County Provider's Name Attention:Caitlin Fenhagen Lex Loci Technologies, LLC P.O. Box 8181 PO Box 6373 Hillsborough,NC 27278 KINSTON,NC 28504 [SIGNATURE PAGE TO FOLLOW] Revised 10/17 7 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 IN WITNESS WHEREOF, the Parties, by and through their authorized agents, have hereunder set their hands and seal, all as of the day and year first above written. ORANGE COUNTY: PROVIDER: ,¢DocuSigned by: DocuSigned by: By. bbkVut. RMW+W� 9/5/2019 By. 8/23/2019 County anager Sean Flynn, VP of Product Development Printed Name and Title Revised 10/17 8 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment A: Service Level Agreement LexLoci - Uplea / Orange Count Pre-Arrest Diversion Program (OC-PAD) Service Level Agreement (SLA) 1) Uptime The YouPlea platform inherits many availability characteristics from Amazon Web Services. All AWS services utilized by YouPlea are highly available and fault tolerant, with an expected 99.99% uptime. In the event of a service disruption of our underlying infrastructure, customers will be notified by e-mail. 2) Performance and response time: System will provide response times to user requests generally in under 10 seconds. 3) Error correction time: Support Hours Issue Severity Response Times Resolution Times Monday-Friday High 1 hour 8 hours 8:00 AM-5:00 PM CST Medium 4 hours ASAP Low 8 hours ASAP 4) infrastructure and security: Infrastructure and security as described throughout this document. Penalty for non-compliance includes 10%of contract value for first time offense, and loss of contract for subsequent failures to comply. DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment B-Lex Loci Cloud Service Questionnaire Cloud Service Questionnaire This questionnaire is to be used to assess security and legal issues 17 52 surrounding cloud services under consideration for Orange County. For this questionnaire, cloud services are any services requiring storage of County data outside the County network or provision of computing resources outside of the County network. Vendor under consideration: LexLoci Solution under consideration: YouPlea Department(s) served: District Attorney's Office 1. Who owns the data created by County personnel using this service? The County. 2. Does the Cloud contractually allow the County to access and retrieve its data at the County's discretion? Yes If No, Explain: Click here to enter text. 3. Is the Cloud provider contractually obligated to dispose, return or retrieve data in the event of contract termination? Yes If No, Explain: Click here to enter text. 4. Upon such provision of data, is the Cloud provider obligated to specify data format and all information necessary for data extraction? Yes If No, Explain: Click here to enter text. 5. Is the Cloud provider obligated to destroy all copies of County data, at the County's request? Yes If No, Explain: Click here to enter text. 6. What are the Cloud provider's obligation to the County in the event of confirmed or suspected data breaches? In the event of confirmed or suspected data breaches, LexLoci is obligated to notify the County as soon as possible. 7. Is the Cloud provider obligated to inform the County of all locations in which the data is stored (including backups) and to continually keep the County informed of any changes DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment B -Lex Loci Cloud Service Questionnaire to those locations? Yes If No, Explain: Click here to enter text. 8. What are the Cloud provider's contractual obligations with respect to litigation holds on County data? LexLoci will perform a point-in-time snapshot of all data at the request of the County. 9. What are the Cloud provider's contractual prohibitions on disclosing data to individuals, groups or organizations making record requests, unless so directed by an authorized County official? Data will not be disclosed, to the extent permitted by law, to any entity other than the County. 10. Does the contract obligate the Cloud provider to allow third-party audits and/or certifications related to infrastructure and security, including penetration testing and vulnerability assessment, as requested by the County? Yes If No, Explain: Click here to enter text. 11. Does the contract obligate the Cloud provider to allow third party onsite inspections of the Cloud provider's infrastructure and security practices on a specified basis? Yes If No, Explain: Click here to enter text. 12. Does the contract obligate the Cloud provider to provide security documentation upon request by the County? Yes If No, Explain: Click here to enter text. 13. Does the contract obligate the Cloud provider to supply the County with the provider's performance records, including access to daily and weekly service quality statistics? Yes If No, Explain: Click here to enter text. 14. Explain the contractually obligated service level parameters, minimum levels, specific remedies and penalties for non-compliance for: 1) Uptime The YouPlea platform inherits many availability characteristics from Amazon Web Services.All AWS services utilized by YouPlea are highly available and fault tolerant, with an expected 99.99%uptime. In the event of a service disruption of our underlying infrastructure, customers will be notified by e-mail. DocuSign Envelope ID:A55lA38E-3703-439F-B000-AB96C3150AB4 Attachment B- Lex Loci Cloud Service Questionnaire 2) Performance and response time:System will provide response times to user requests generally in under 10 seconds. 3) Error correction time:Click here to enter text. Support Hours Issue Severityw Response Times Resolution Times Monday-Friday High 1 hour 8 hours 8:00 AM-5:00 PM CST Medium 4 hours ASAP Low 8 hours ASAP 4) infrastructure and security: Infrastructure and security as described throughout this document. Penalty for non-compliance includes 10% of contract value for first time offense, and loss of contract for subsequent failures to comply. 15. Does the contractually defined Service Level Agreement define pertinent terms such as downtime, scheduled downtime, etc...? Yes If No, Explain: Click here to enter text. 16. Does the contract specify minimum disaster recovery and business continuity requirements, including penalties for non-compliance, as discovered through onsite inspections, audits or actual disasters? Yes If No, Explain: Click here to enter text. 17. Does the contract require the cloud vendor to notify the County of any outsourced functionality and its provider? Yes If No, Explain: Click here to enter text. 18. What are the contractually required notification period for the County or the cloud vendor for termination of the cloud services? 30 days 19. Describe how the County's data will be stored, managed and archived. The County's data will be stored in a combination of Amazon Web Services databases and object storage. Access is managed through permissions provisioned at the application layer for normal use and through permissions provisioned at the platform layer for development and administrative use. 20. Will the County's data be stored and managed on a storage system with other data? No DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment B-Lex Loci Cloud Service Questionnaire If Yes, Explain: Click here to enter text. 21. At what architectural point in the provider's cloud facility will the County's data be physically connected to networking equipment with non-County data? The cloud facility is owned and operated by Amazon Web Services. Physical connectivity documentation is not available. 22. What are the cloud provider's information security policies? See enclosed policy documents. 23. What are the cloud provider's incident management and reporting policies? See enclosed policy documents. 24. What is the process by which the cloud provider updates policies and informs customers? Customers are notified of modifications to pertinent policies as soon as possible following their approval. 25. What is the basic architecture of the cloud provider's network security? (overall design, zones, filters, firewalls, VLANs, protocols, standards) YouPlea is built on a Serverless architecture on Amazon Web Services cloud platform. Traffic enters the system through AWS API Gateway where it is routed to AWS Lambda functions which in turn process requests. Requests are authenticated via AWS Cognito. Request processing may or may not involve reading from and/or writing to AWS DynamoDB and AWS S3. AWS C1oudWatch receives and stores all logging information. 26. What security measures does the cloud provider use in data storage, transit and use? HTTPS secures in-flight data. AWS Cognito and JWTs serve authentication and authorization. 27. What encryption technologies does the cloud provider use in data management? TLS 28. How are access rights managed by the cloud provider for their employees, contractors and other persons? Access rights are provisioned following the principle of least privilege and are approved by the Director of Engineering. 29. What methods does the cloud provider use to destroy information, when so authorized? LexLoci uses the methods made available by AWS to destroy information when requested to do so by the client. 30. What is the cloud provider's patch management policy/methods? See enclosed policy documents. 31. How does the cloud provider defend against malware, including but not limited to viruses, bots, spyware, spam, phishing and pharming? DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment B- Lex Loci Cloud Service Questionnaire YouPlea uses serverless technologies exclusively. While malware relies on persistence, our resources are provisioned and deprovisioned on demand and exist for only minutes at a time. 32. What system hardening strategies are employed by the cloud provider? YouPlea uses serverless technologies exclusively. There are no systems to harden. 33. How does the cloud provider perform security testing, including logging, correlation, intrusion detection, intrusion prevention, file integrity monitoring, time synchronization, security assessments, penetration testing? YouPlea ensures security through static code analysis and automated unit, functional, and integration testing. Further the system uses a serverless architecture making all resources ephemeral. Logging and correlation are performed through AWS CloudWatch and an Elastic (ELK) stack. 34. What technologies and methods does the cloud vendor provide for strong authentication? YouPlea uses AWS Cognito for authentication and authorization. JWTs are generated at login and used to validate all requests thereafter. All data is stored in a combination of AWS DynamoDB and AWS S3. DynamoDB and S3 are configured to prevent public access. 35. Provide any other comments and explanations: Click here to enter text. DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy CZ- H U ES ES Chubb DigiTeehw Enterprise ACE Alllel'1CaT1 II]Sill'II]CP "011II}a1T Risk Management Police D+eclarati0lls N09TCE: THE THIRD PARTY LIABILITY INSURING AGREFAIENTS OF THIS POLICV PROXIDE CLAIMS-ALA-DE CON-ERAGE, WHIC H APPLIES ONLY TO CLAIMS FIRST BLADE DURING THE POLICY PERIOD ORAL APPLICABLE EXTENDED REPORTING PERIOD FOR.WVINCIDEN�'T TAha G PLACE AFTER THE RETROACM E DATE BUT BEFORE THE END OF THE POLICY PERIOD. A31OUN-TS INCURRED AS CLAIMS E-PEIti SES ENDER THIS POLICY SHALL REDUCE AND M.AY EXHAUST THE APPLICABLE L15 T OF INSURANCE AND IYILL BE APPLIED AGAINST ANY APPLICABLE RETEN'TIOOIti. IN NO L-VENT TWILL THE COMPANY BE LIABLE FOR CLAIMS EXPENSES OR THE AMOUNT OF ANY JUDGMENT OR SETTLEMENT IN EXCESS OF THE APPLICABLE LL'%STI OF INSURANCE. TERMS THAT ARE UNDERLINED Ilti THIS NOTICE PROVISION HAVE SPECIAL MEANING AND ARE DEFINED IN SECTION H. DEFINITIONS. READ THE ENTIRE POLICY CAREFULLY. F YOU NEED URGENT CRISIS MANAGEMENT OR Cyber Ineidellt R e spans a Coach Hotline at: GAL ADVICE,PLEASE CONTACT: 1-(8aa)-81 -266-or Press yuar'Report Cyber Incident'butt on the Chub Cy r Alert Mobile application. Policy No: D94692544 enewai oh Item L Named Insured LEX LOCI TECHNOLOGIES,LLC Principal Address 1314 W Vernon Ave Yjnston,NC 28504-1000 Item 2.Policy PeriodFrom:01-10-2019 O:01-10-2020 (1 a:01 AM local time at the address shown in Item 1.) Item 3.Maximum Policy Limits of Insurance. A. Maximum Single Limit of Insurance $1,000.aaa B. Maximum Policy Aggregate Limit of Insurance $1,000,aaa tam 4.Limits of Insurance,Retentions and InsuringAgreement(s)Purchased. If any Limit of Insurance field for an Insuring Agreement is left blank or NOT COVERED is shoxn,there is no wyerage for such Insuring Agreement. Professional Third Party Liability Insuring Agreements InsiringAgreement Each Claini Limit Aggregate Limit for all Each Claim Retention Claims Technology Errors and 51,000,000 $15000,000 $15000 Omissions Liability First Party Insuring Agreements PF-48337(10 f 16) Page 1 of 3 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy A. fiber Incident Response Each Cyber Incident Aggregate Limit for all Each C vber Incident Retention Fund Limit Cyber Incidents 1. CvberIn€ident S1,000,D00 S1,000,000 S1,000 Response Teanl Except Cyber Incident spouse ° oath: NOTE:The Insured is under no obligation to use or contract for services nrith the Cyber Incident Response Tea However,if the Insured elects not to use or contract with the Cylber Incident Response Team but elects to use oir contract with a Non-Panel Re spouse Provider then the Each Cyber Incident Limits and.Aggregate Limit for all Cyber Incidents specified in Item 4A2 below apply. 2. Non-Panel S500,000 S500,000 S1,000 Response Pro%ider B. Business Interruption and Each Cyber Incident Aggregate Ilmit for all Each Cyber Incident Retention Extra Expense Limit Cyber Incidents i. Business S1,000,oaa S1,000,000 S1,000 Interruption Loss iraiting Period: 8 Hours and Extra Expenses 2. Colitillgent $150,000 $150,000 515000 Business Waiting Period: 8 Hours Interruption Loss and Extra Expenses a. Scheduled Providers Limit(if i'aitinw Pellod: Hoi..: scheduled by endorsement) C. Digital I)ata Recovery S1,000.000 S1.000.000 Si,000 D. Netw-ork Extortion51,000,000 51,000,000 515000 Third Party Liability Insuring Agreements hu ringAgreement Each Claini Limit Aggregate Limit for all Each Clailn Retention Claims E. C}Iwr,Privacy and S1,000,000 S1,000,000 S15000 Network Security Liability i. Pa-vinent Card Loss $250,000 $250,oaa S1,000 a. Regulator $2fiO,OCIO 250,aao S1,000 Proceeding Electronic.Social and S1,000.000 S1,000,000 S15000 Printed Media Liabilit4 temS.RetroactiT,e Date 01-01-2014 (only applicable to Third Parts-Insuring Agreements) tem 6.Pending or Prior Proceedings Date (mly applicable to Third Parts-Insuring Agreements) PF-48337(10/16) Page^o ? DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy Item 7.Exte lid ed Repo rtingPeizod A. Additional Premium: iao%of Annual Premium B. Additional Period: 12 Months Item 8.Policy Premium S1,310 urcharges/ sessments f Taxes So olicy Premium Plus applicable taxes and fees(if any) S1,310 Item g.Notice to Insurer A. Notice of Incident,Claud.or potential Claw By Mail: as sat forth in Section 'III.subsection C Director of Claims Chubb P.O.BOY Sio5 Scranton,PA i85o5-o3iB Fax Number:8y7-201-8787 By Email: cyberciaimreport@chubb.com OR aceclain s m-taotice@chubb,cam B. All Other Notices to the Insiuer Chief Underwriting Officer Chubb—Financial Lines 1133 Avenue of the Americas,32nd Floor Now York NY 10036 Chubb.lnsurecr PF- 8337(10 f 16) Page 3 of 3 DocuSign Envelope ID:A55lA38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy Forms Seliedtile Form Form For to Number Edition Title PF4833- 1o16 Chubb Dia TeclLAiR Enterprise Risk management Policy Declarations -iLLaoBS-a o316 Cliubb Producer Coiupensation Practices tC Policies PF4826o ioi6 Policyholder Notice Cyber Services f0r Loss Mitigation PF48259 iko16 Policyholder Notice Cyber Services for Incident Response ?1LL4249ob o-i6 C5 Foreign}iccouni Txx Compliance Act("FATC-A") PFi-914a 041L6 C.S. Treastu.y Department's Office of Foreign assets Contl'ol ("QFC"} dyisor N otice to Policyholders PF4642a o-i; Trade or Economic Sanctions Endorsement PF45354 0115 Cap On Losses From Certified acts Of Terrorism TRLArid 0316 Disclosure Pursuant To Terrorism Risk Insurance Act Mki di 0314 Signatures PF48336 ioi6 Chubb DigiTeclL�:R Enterprise Risk Management Policy PF49469 081- General Errliancement Endorsement-DigiTeclL-k? PF4945^ O81- Government Contractors Enhancement PF494^S 081- Prior knowledge Endorsement PF48263 roi6 False Claims Act EXdnsion PF483111 iLoi6 Amendat0r--Endorsement-North Carolina PF-48:�52(09/16) -.' aD16 Page i Df i DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy C: HLJBB" Chubb Producer Compensation Practices &Policies Chubb believes that policyholders should have access to information about Chubb's practices and policies related to the payment of compensation to brokers and independent agents. You can obtain that information by accessing our w,ebsite at htt /}w .aceproducercompgagation.coEa or by calling the folloisuig toll-free telephone number: 1-866-512-286n, ALLr20887a(o3/ 6) DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy = b U B El Polievholder•Notice C yber ,Ser-bees for Loss Mitigation This Policyholder Notice shall be construed as part of your Polio- but no coverage is prc ided by this Policyholder Notice nor can it be construed to replace any provisions of your Polio-, �4'hile no coverage is prcn ded by this Policyholder Notice,bolded terms in this Policyholder Notice shall have the meaning set forth in your Policy.You should read your Policy-and review your D} arations page for complete information on the coverage you are provided. As a Chubb policyholder,you have cyber services available to you,as described in this Notice. Loss Mitigation Seniees Chubb provides "pre- veaV cyber security services as a benefit to help our policyholders analyze ley cyber exposures and help limit the exposures to a potential loss. These services,which complement our post incident cyber services,have been created based on our claim and industry experienoe. These services have been carefiffly selected by Chubb and are re6ewed on a periodic basis. These services include, but are not limited to, the fallowing: i. online Web Portal 2. Incident Response Readiness 3. Security Awareness q. Information Governance s. Security Disk Ratings 6. Cvber Securitv standards y. Encryption B, User Access Controls 9. Regulatory and Standards Compliance io, Password Mmagement Ser%ices shall be provided by a panel of Chubb pre-approved vendors at preferred rates and must be rendered during the Polio-Period. Pol eyhoider Reimbursements In order to assist the Insured in reducing exposure to covered Costs, Damages and Expenses under the Policy, Chubb can authorize contributions to the cost of qualified senzces from a pre-approved vendor or a vendor that is reviewed and approved in writing by Chubb. Such contribution shall take the form of a matched reimbursement of the cost of a qualified service up to a maximum of S 3000 per Policy-Period. Reimbursements must he authorized by Chubb and w7ll be made for only those sennces rendered go da}T prior to the Policy- expiration or renewal date. Please note the follostizng: i. Chubb does not endorse vendors or their respective ser%ices. Before you engage any of these vendors,we urge you to conduct your own due diligence to ensure the companies and their services meet your needs. PF-4826o(io fi6) (t)2016 Page 1 of 2 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy Unless otherwise indicated or approved, payment for services provided by these companies is the responsibility of the Insured. 2_ The web portal is currently powered In eRisk Huber, a 3-1 party web-based loss prevention portal managed by NetI}iligence . Do not share portal access instructions Y�ith anyone outside your organization.You are responsible for maintaining the confidentiality of the Chubb Access Code provided to you. An unlimited number of indhiduals from,rour organization may register and use the portal. PF-4826o(io/6) (t)2o16 Page 2 of z DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy C H U B B Policyholder Notice Giber Sei-ices for Incident Response This Policyholder Notice shall be eonstrued as part of your Policy- but no coverage is� grrnTided by this Policyholder Notice nor can it be construed to replace any prcnasiom of }uur Policy-. li�'hde no coverage is prav ded by this Policyholder Notice,hoided terms in this Policyholder Notice shall have the meaning set forth in your Policy.You should read your Policy and review your Declarations page for complete information on the coverages you are provided. This Notice prov-ides information concerning access to cyber services for incident response. Cyter Incident Response Team The Cyber Incident Response Team is a list of approved service providers available to provide the services set forth in the definition of Cyber Incident Response Expenses in your Policy. The list of approved service providers is available on tics Chubb website, These providers have been carefully selected by Chubb and are reviewed on a periodic basis. The service providers have capabilities in various disciplines for a Cyber Incident response that include,but are not limited to,the following: i, Computer Forensics i. Public Relations g. Notification and Identity Services 4. Call Center Services S. Cyber Extortion and Ransom Senices 6. Legal and Regulatory Communications 7. Business Interruption Senices In the event of a Cyber Incident,a copy of the Cyber Incident Response Team list can also be obtained from any Cyber Incident Response Coach. In the event of a Cyber Incident,contact the Cyber Incident Response Coach as indicated on the Declarations Page and referenced throughout the Policy. Please note the folio King: i, Should)uu experience a cyber related incident,you may choose to call the Cyber Incident Response Team Hotline listed in your Policy- for immediate true assistance. Please be aware that the hotline service is provided by a third-party law fu-m.If you engage this service,it is billable to you at the standard rate per hour outlined in the Chubb Cyber Incident Response Team Panel Guidelines. Calling the hotline does NOT satisfy the claim notification requirements of your Policy-, 2. Chubb shall not be a party to any agreement entered into between any Cyber Incident Response Temn service prom-ider and the policyholder. It is understood that Cyber Incident Response Team service providers are independent contractors,and are not agents of Chubb. The policyholder agrees that Chubb assumes no liability arising out of any services rendered by a Cyber Incident Response Team service provider. Chubb shall not be entitled to any rights or subject to any obligations or liabilities set forth in any agreement entered into between any Cyber Ineident Response Tearn service provider and the policyholder. Any rights and obligations with respect to such agreement,including but limited to billings, fees and services rendered, are solely for the benefit of, and borne solely by such Cher Incident Response Team service provider and the policyholder,and not Chubb. PF-48259(ic f i6) (�)2o16 Page 1 of 2 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment C- Lex Loci Cyber Liability insurance policy g. Chubb has no obligation to provide any of the legal,computer forensics,public relations,notification and identity services,call center services,cyber extortion and ransom,legal and regulator-communications, and business interruption advice and services provided by the Cyber incident Response Team. 4. The policyholder is under no obligation to contract for services v6th Cyber Incident Response Team service providers,except as may be amended by the Policy. S. Solely pith respect to the services provided by the C,$er Incident Response Team: a. Failure to comply-with anv one or more of the requirements of the Cyber Incident Response Te ain i%ill preclude coverage under the applicable limit(s). b. Chubb may,at its sole discretion and only as evidenced by Chubb's prior xTitten approval,on or before the effective date of the Polie-, permit the policyholder to retain alternative service providers to provide services comparable to the services and rates offered by the Cyber Incident Response Team. c. If, during the Polie• Period, either (i) any of the Cyber Incident Response Team service prmiders is unable to or does not provide the services covered and as defined in the definition of Cyber Incident response Expenses or(ii)there is a change of lay or regulation that prevents service providers selected exclusively from the Cyber Incident Response Team from providing the legal, computer forensic, notification, call eenter, public relations, crisis communications, fraud consultation, credit monitoring, and identity restoration advice and services sought by the policyholder,Chubb may, at its sole discretion and only m evidenced by Chubb's prior vATitten approval, permit the policyholder to retain alternative service providers to provide services comparable to the services offered by the Cyber Incident response Team, d. The maximum rate Chubb will pay for Cyber Incident Response Expenses shall be no more than the rates outlined in the'Chubb Caber Incident response Teary Panel Guidelines'for such services, PF-48259(ro f f6) .t)2o16 Page 2 of 2 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment D- Lex Loci General Liability insurance policy ACE Fire Underwriers Insurance C H U 13 B` 436 Walnut St ettPhiladelphia, PA 119106 Policy Declarations This Policy is issued by the stock insurance company listed above("Insurer"). Policy Number: D94692532 Renewal of: New Named Insured & Principal Address: Policy Period: From 01-10-2019 To 01-10-2020 LEX LOCI TECHNOLOGIES, LLC 12-0 t AM"Standard Time at your mailing '1314 VV Vernon Ave address shown Kinston, NC 28504-1000 ADVANCED PREMIUM: $250.00 Admitted Status:Admitted Auditable Status: No Auditable Period: N!A IN RETURN FOR THE PAYMENT OF THE PREMIUM,AND SUBJECT TO ALL THE TERMS OF THIS POLICY,WE AGREE WITH YOU TO PROVIDE INSURANCE AS STATED IN THIS POLICY Business Description:Technology Section 2-LIABILITY Described Premises- 1314 W Vernon Ave,Kinston,NC 28504-1000 Prem, Classification Class Code Rating Basis Premium Basis Premium No. PremrO s PRICO 1 Computer Software and TE201 Gross Sales 3D,044 S4 $5 Services(Non-Industrial Only) LIMITS Other than ProducWCompleted Operations Aggregate S2,000,000 ProducWCompleted Operations Aggregate 52,000,000 Liability and Medical Expenses S1,000,000 Per Occurrence Damage to Premises Rented to You S1,060.000 Any One Premises Medical Expense S5,000 Per Person Combined Total Aggregate $2,000,000 All Locations Combined Item C_ OPTIONAL COVERAGES HIRED AND NON-OWNED AUTO INCLUDED WITHIN LIABILITY LIMITS BOP�43591 b(01117) 20115 Page 1 of 3 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment D-Lex Loci General Liability insurance policy General Aggregate Limit S2,006,000 Each Occurrence Limit S11,000,000 Total Hired&Non-Owned Auto Premium: $204 ELECTRONIC DATA LIABILITY LIMITS Limited Form Limit S25,000 Total Electronic Data Liability Premium: SO BUSINESSOWNERS LIABILITY ENHANCEMENTS Total Businessowners Liability Enhancements Premium; S25 Total Terrorism{TRIA}Premium: $2 Total General Liability Premium: $240 Total Policy Premium: S250.00 Item E. COVERAGE FORMS Form Number Edition Title BOP435911) 0117 BUSINESSOWNERS POLICY DECLARATIONS CC1 K11 H 0314 SIGNATURES BP00D3 0713 BUSINESSOWNERS COVERAGE FORM BPO404 0110 HIREDAUTO AND NON-OWNED AUTO LIABILITY BPO501 0702 CALCULATION OF PREMIUM BPO515 D115 DISCLOSURE PURSUANTTO TERRORISM RISK INSURANCE ACT BPO517 0106 EXCLUSION-SILICAORSILICA-RELATED DUST 8PO595 0514 ELECTRONIC DATA LIABILITY-LIMITED COVERAGE BP0598 0713 AMENDMENT OF INSURED CONTRACT DEFINITION BP1480 0713 HIGHER LIMITS BOP47635a 0716 BUSINESSOWNERS LIABILITY ENHANCEMENTS ENDORSEMENT BOP47675a 0716 BUSINESSOWNERS LIABILITY EXTENSION BOP47-553 0316 INTELLECTUAL PROPERTY LAWS OR RIGHTS EXCLUSION — PERSONAL AND ADVERTISING INJURY BOP47639 0316 LIMITATION OF PERSONAL AND ADVERTISING INJURY DEFINITION BOP4T730 0416 EXCLUSION-HEALTHCARE INFORMATION TECHNOLOGY PRODUCTS AND SERVICES BOP47739 0416 INFORMATION AND NETWORK TECHNOLOGY PROFESSIONAL SERVICES ENDORSEMENT BOP-43591 b(01117) @ 2015 Page 2 of 3 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment D-Lex Loci General Liability insurance policy BPO523 0i15 GAP ON LOSSES FROM CERTIFIED ACTS OF TERRORISM BOP47643 0316 EMPLOYMENT-RELATED PRACTICES EXCLUSION BOP45068 1214 PROPERTY COVERAGE PART EXCLUSION BOP48527 0117 ASBESTOS EXCLUSION ALL202$7 1006 ACE PRODUCER COMPENSATION PRACTICES AND POLICIES ILP001 0104 U.S. TREASURY DEPARTMENTS OFFICE OF FOREIGN ASSETS CDNTROL ("OFAG") ADVISORY NOTICE TO POLICYHOLDERS ALL42490B 0716 U-S_FOREIGN ACCOUNT TAX COMPLIANCE ACT("FATCA") ALL21101 1106 TRADE OR ECONOMIC SANCMN5 ENDORSEMENT TRIA11c 0115 DISCLOSURE PURSUANT TO TERRORISM RISK INSURANCE ACT BPO116 0315 NORTH CAROLINA CHANGES Item F. Notice under this Policy shall be given to: Chubb North America Claims P.O. Box 5122 Scranton,PA 18E05-0654 Tall Free: 844-539-3801 ACECRS-CLAIMS@chubb.com Item G. Producer Name and Mailing Address COVERHOUND INC❑SA:COVERHOUND INSURANCE SOLUTIONS 5655 LINDERO CANYONRD42G WESTLAKE VILLAGE,CA 91362-4046 Item H_ Producer Cade:Z08497 IN WITNESS WHEREOF,the Insurer has caused this Policy to be signed by its President and Secretary,and countersigned by duly authorized representative of the Insurer. DATE: 01-04-2019 Authorized Representative BOP-43591b(01117) 02015 Page 3 of 3 DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment D-Lex Loci General Liability insurance policy SIGNATURES hlwned Irsurea Endarserrern N,,nbe- LEX LOCI TECHNOLOGIES,LLC CC1 K1 IH03,14 Pdicy Symbol Pchcy Number P-10-2019 liay Perim Elective Date of Endser arne�l TEC D94692632 T001-10-2020 01-10-2019 ss.ed By{Name of Insurance Cbrnpany; ACE FIRE UNDERWRITERS INSURANCE COMPANY Icsert the qd cy merhber The=erra cer c=the inFa.natian s is be campletec anlywhen t^,s e^carsament s ssuad subsequent is the preparatan of bse policy. THE ONLY SIGNATURES APPLICABLE TO THIS POLICY ARE THOSE REPRESEWRING THE COMPANY NAMED ON THE FIRST PAGE OF THE DECLARATIONS_ By signing and delivering the policy to you,we state that it is a valid contract. INDEMNITY INSURANCE COMPANY OF NORTH AMERICA(A stock company) BANKERS STANDARD FIRE AND MARINE COMPANY(A stock company) BANKERS STANDARD INSURANCE COMPANY{A stock company) ACE AMERICAN INSURANCE COMPANY(A stock company) AC E PROPERTY AND CASUALTY INSURANCE COMPANY{A stock company) INSURANCE COMPANY OF NORTH AMERICA(A stock company) PACIFIC EMPLOYERS INSURANCE COMPANY{A stock company) ACE FIRE UNDERWRITERS INSURANCE COMPANY(A stock company) WESTCHESTER FIRE INSURANCE COMPANY(A stock company) 436 Walnut Street,P.C.Box 1000,Philadelphia, Pennsylvania 19106-3703 Aa REBECCAL.COLLINS,Sec retary 5�;JDHN J_ LUPICA_ President Auffiorized RepresenEative CC-1K11h(ON14) DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Attachment E-Lex Loci Licenses—Hourly Development Rate From: Anthony Volne To: Hardik Patel;Sean Flynn Cc: Caitlin Fanhaaen Subject: [EXTERNAL MAILJ RE:QuantWorks Pre-Anr t Divemon Software. Date: Tuesday,July 30,2019 4:12:46 PM Attachments: aae001.ono aae002 on OC Cloud Service Ouestionnaire Le%Loci docx Hi Hardik, Regarding support,we offersupportvia email.admin(@lexlocitech.com If Orange County requires support via phone,we can add that,but it is not in the price right now.We do support other software in this manner,so we have the capability,just not pre- arrest diversion,which doesn't seem to be a mission critical system. On the other questions you asked... • SLA I have attached the OCCloud Service Ouestionnaire document where it is clarified. • The number of licenses that will be covered under this contract. There Is no licensing count or restriction based on number of users. Instead,the license is"limited use,"meaning It is solely"...for use exclusively by Orange County officials in administering their local OC-PAD program." • Hourly rate of development for future enhancements. Funny,I wanted to put that into the agreement,but it Is the OC standard form and there is no freedom to ad-lib. Please use this email as official notice on the following:The hourly development rate for future software enhancements Is$115 per hour. I hope all of this helps. Let me know what else I can do for you. Regards, Anthony From:Hardik Patel<hpatel@orangecountync.gov> Sent:Tuesday,July 30,2019 3:29 PM To:Sean Flynn<Sean.Flynn@quantworks.com> Cc:Anthony Volpe<anthony.volpe@quantworks.com>;Caitlin Fenhagen<cfenhagen@orangecountync.gov> Subject:RE:QuantWorks Pre-Arrest Diversion Software. Gotcha. Is there a number that they can call? Also,could you please resend me the following: • SLA • The number of licenses that will be covered under this contract. • Hourly rate of development for future enhancements. Thanks Hardik C.Patel Systems Analyst Orange County IT Office:(919)245-2291 Email:hnatelr7a orangecountvnc.ew IT Help desk ext:(919)245-228o "We ourselves feel that what we are doing is just a drop in the ocean.But if that drop were not there,I think the ocean would be less by that missing drop."—Mother Teresa From:Sean Flynn rmailto:Sean.FlynnCa)ouantworks.coml Sent:Tuesday,July 30,2019 3:22 PM To:Hardik Patel Cc:Anthony Volpe Subject:[EXTERNAL MAIL]Re:QuantWorks Pre-Arrest Diversion Software. Hi Hardik, The email address for support is ad mi nlallexloci tech.com Please let me know if you need anything else. All the best, Sean From:Hardik Patel<hnate1&orangecountync.eov> Date:Tuesday,July 30,2019 at 3:10 PM To:Sean Flynn<Sean.Flynn"uantworks.com> Subject:RE:QuantWorks Pre-Arrest Diversion Software. Sean, One quick question,I am putting together the final draft contract packet and need to add the support contact information for when ORD needs to call for support Thanks. Hardik C.Patel DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 From: Jim Northrup To: Anthony Volne; Hardik Patel;Caitlin Fenhagen Subject: RE:Quant Contract Date: Thursday,August 15,2019 2:00:09 PM I think that would work. Jim Northrup Chief Information Officer Orange County Government Information Technologies Desk: 1.919.245.2276 Cell: 1.252.305.6678 http://www.orangecount)tnc.gov Did you know that the Orange County IT Help Desk processes about 40 calls a day and uses a priority system for processing all requests? Next time you call ask about how your call is getting prioritized. From: Anthony Volpe [mailto:anthony.volpe@quantworks.com] Sent: Wednesday, August 14, 2019 8:52 AM To:Jim Northrup; Hardik Patel; Caitlin Fenhagen Subject: [EXTERNAL MAIL!] RE: Quant Contract Jim, Welcome back! There really is no other detail in there. As you'd agree, the spirit of the agreement is that it can not be used for cases outside of Orange County. I understand Jim Woodall, for example, is not really an official of the county, but he is working cases there, as is the Chapel Hill PD. I can see why "Orange County officials" is not a very accurate way to put this! Maybe just strike the word "Officials". Would that work? If not, please suggest the language that best captures the spirit, and I'm sure it will work for us. Thanks, Anthony From:Jim Northrup <i north rup(@orangecountync.gov> Sent:Tuesday, August 13, 2019 2:57 PM To: Hardik Patel <hpatel(@orangecountync.gov>; Anthony Volpe <anthony.volpe(@quantworks.com>; Caitlin Fenhagen <cfenhagen(@orangecount)tnc.gov> Subject: Quant Contract DocuSign Envelope ID:A551A38E-3703-439F-B000-AB96C3150AB4 Hardik or Anthony, I was reviewing the contract. I haven't seen it until today, I have been out of the office and Hardik has been keeping me up to speed. I have a question regarding "licensing" and use. The contract states it is licensed to Orange County Officials. It's unclear to me if that includes other jurisdictions outside of Orange County, e.g., the District Attorneys Office or Chapel Hill PD. I know there are two pieces to this product the administrative end for Caitlin and her staff to use for data entry and general administration and then there is a portal for others to use in view only mode. I don't see a delineation between the two types of users. Perhaps, I missed it. If so, please point me to it, if not we probably want to define who can used the software and who can't based on our current use model. I hope this makes sense. Jim Northrup Chief Information Officer Orange County Government Information Technologies Desk: 1.919.245.2276 Cell: 1.252.305.6678 http://www.orangecountync.gov Did you know that the Orange County IT Help Desk processes about 40 calls a day and uses a priority system for processing all requests? Next time you call ask about how your call is getting prioritized.