Loading...
HomeMy WebLinkAbout2024-720-E-Solid Waste-Rehrig Vision Software-Vision web based cart systemRevised 01/24 1 [Departmental Use Only] TITLE FY NORTH CAROLINA SERVICES AGREEMENT NO RFP/RFQ ORANGE COUNTY This Services Agreement (hereinafter “Agreement”), made and entered into this 25th day of October, 2024, (“Effective Date”) by and between Orange County, North Carolina a political subdivision of the State of North Carolina (hereinafter, the "County") and Rehrig Pacific Company, Inc., (hereinafter, the "Provider"). WITNESSETH: That the County and Provider, for the consideration herein named, do hereby agree as follows: 1. Services a. Scope of Work. i) This Agreement is for services to be rendered by Provider to County with respect to (insert type of project): Vision Software ii) By executing this Agreement, the Provider represents and agrees that Provider is qualified to perform and fully capable of performing and providing the services required or necessary under this Agreement in a fully competent, professional and timely manner. iii) Time is of the essence with respect to this Agreement. iv) The services to be performed under this Agreement consist of Basic Services, as described and designated in Section 3 hereof. Compensation to the Provider for Basic Services under this Agreement shall be as set forth herein. 2. Responsibilities of the Provider a. Services to be provided. The Provider shall provide the County with all services required in Section 3 to satisfactorily complete the Project within the time limitations set forth herein and in accordance with the highest professional standards. b. Standard of Care. i) The Provider shall exercise reasonable care and diligence in performing services under this Agreement in accordance with the highest generally accepted standards of this type of Provider practice throughout the United States and in accordance with applicable federal, state and local laws and regulations applicable to the performance of these services. Provider is solely responsible for the professional Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Revised 01/24 2 quality, accuracy and timely completion and submission of all work related to the Basic Services. ii) Provider shall be responsible for all errors or omissions of its agents, contractors, employees, or assigns in the performance of the Agreement. Provider shall correct any and all errors, omissions, discrepancies, ambiguities, mistakes or conflicts at no additional cost to the County. iii) The Provider shall not, except as otherwise provided for in this Agreement, subcontract the performance of any work under this Agreement without prior written permission of the County. No permission for subcontracting shall create, between the County and the subcontractor, any contract or any other relationship. iv) Provider is an independent contractor of County. Any and all employees of the Provider engaged by the Provider in the performance of any work or services required of the Provider under this Agreement, shall be considered employees or agents of the Provider only and not of the County, and any and all claims that may or might arise under any workers compensation or other law or contract on behalf of said employees while so engaged shall be the sole obligation and responsibility of the Provider. v) If activities related to the performance of this Agreement require specific licenses, certifications, or related credentials Provider represents that it or its employees, agents and subcontractors engaged in such activities possess such licenses, certifications, or credentials and that such licenses certifications, or credentials are current, active, and not in a state of suspension or revocation. vi) Should any documents, exhibits, or addenda be attached to this Agreement, the terms of this Agreement shall have priority in any conflict with or among the terms of such referenced documents, exhibits, or addenda. vii) Should this Agreement involve project designs, the construction or creation of which is to be bid out or fulfilled by other contractors, and bidding or negotiation with contractors produce prices which, when added to the other elements of the approved total project cost, produce a cost that is in excess of the approved total project cost, the Provider shall participate with the County in negotiation and design adjustments to the extent such are necessary to obtain prices within the approved total project cost. All activity of the Provider with respect to these matters shall constitute Basic Services and shall be performed by the Provider without additional compensation. If negotiation and design adjustments fail to bring costs within the total project cost the County may reject all bids and Provider will redesign or reduce portions of the project in an effort to reduce the bid prices to within the total project cost and rebid the project. One such redesign is included within Basic Services. If this second letting for bids does not produce bids that are within the approved total project cost initially or after negotiations with the contractor the cost is not reduced to an amount within the total project cost, the Provider is not obligated to engage in further redesign. 3. Basic Services Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Revised 01/24 3 a. Basic Services. The Services to be rendered pursuant to this Agreement are as follows (fully describe services to be provided): To provide Vision web software, 6 RFID readers, 3 desktop users, and 2 mobile users components, which will track verification reporting, live vehicle location, route details, storage, and transmittal as listed on Attachment I. 4. Duration of Services a. Term. The term of this Agreement shall be from 11-11-2024 to 11-10-2027. b. Scheduling of Services. i) The Provider shall schedule and perform its activities in a timely manner. ii) Should the County determine that the Provider is behind schedule, it may require the Provider to expedite and accelerate its efforts, including providing additional resources and working overtime, as necessary, to perform its services in accordance with the approved project schedule at no additional cost to the County. iii) The Commencement Date for the Provider's Basic Services shall be 11-11-2024. 5. Compensation a. Compensation for Basic Services. Compensation for Basic Services shall include all compensation due the Provider from the County for all services satisfactorily (as determined by the County) performed pursuant to this Agreement. The maximum amount payable for Basic Services shall not exceed Fifty six thousand, seven hundred Dollars ($56,700 for three years, payable $1,575 per month). Payment for satisfactorily performed Basic Services shall become due and payable within thirty (30) days of Provider properly invoicing County. Payment shall be subject to provisions of Section 5(b). b. Disputes. In the event the amount stated on an invoice is disputed by the County, the County may withhold payment of all or a portion of the amount stated on an invoice until the parties resolve the dispute. Should Provider fail to perform its duties under the terms of this Agreement, County may, without fault or penalty, withhold any payment associated with the work to be performed until such time as said work is completed. c. Additional Services. County shall not be responsible for costs related to any services in addition to the Basic Services performed by Provider unless County requests such additional services in writing and such additional services are evidenced by a written amendment to this Agreement. 6. Responsibilities of the County a. Cooperation and Coordination. The County has designated (Robert Williams) to act as the County's representative with respect to the Project who shall have the authority to render decisions within guidelines established by the County Manager or the County Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Revised 01/24 4 Board of Commissioners and who shall be available during working hours as often as may be reasonably required to render decisions and to furnish information. 7. Insurance a. General Requirements. Provider shall obtain, at its sole expense, Commercial General Liability Insurance, Automobile Insurance, Workers’ Compensation Insurance, and any additional insurance as may be required by County’s Risk Manager as such insurance requirements are described in the Orange County Risk Transfer Policy and Orange County Minimum Insurance Coverage Requirements (each document is incorporated herein by reference and may be viewed at http://www.orangecountync.gov/departments/purchasing_division/contracts.php). If County’s Risk Manager determines additional insurance coverage is required such additional insurance shall consist of N/A (if no additional insurance required mark N/A as being not applicable). Provider shall not commence work until such insurance is in effect and certification thereof has been received by the County's Risk Manager. 8. Indemnity a. Indemnity. To the extent authorized by North Carolina law the Provider agrees, without limitation, to defend, indemnify and hold harmless the County from all loss, liability, claims or expense, including attorney's fees, arising out of or related to the Project and arising from property damage or bodily injury including death to any person or persons caused in whole or in part by the negligence or misconduct of the Provider except to the extent same are caused by the negligence or willful misconduct of the County. It is the intent of this provision to require the Provider to indemnify the County to the fullest extent permitted under North Carolina law. 9. Amendments to the Agreement a. Changes in Basic Services. Changes in the Basic Services and entitlement to additional compensation or a change in duration of this Agreement shall be made by a written Amendment to this Agreement executed by the County and the Provider. The Provider shall proceed to perform the Services required by the Amendment only after receiving a fully executed Amendment from the County. 10. Termination a. Termination for Convenience of the County. This Agreement may be terminated without cause by the County and for its convenience upon seven (7) days’ prior written notice to the Provider. b. Other Termination. The Provider may terminate this Agreement based upon the County's material breach of this Agreement; provided, the County has not taken all reasonable actions to remedy the breach. The Provider shall give the County seven (7) days' prior written notice of its intent to terminate this Agreement for cause. Either party may terminate this Agreement upon notice to the other party that obligations pursuant to this Agreement are made impractical due to declarations of emergency by Orange County or by North Carolina due to events directly impacting Orange County. Both parties shall Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Revised 01/24 5 remain responsible for all payment and performance due up to the receipt of such notice, but shall have no further obligation or responsibility beyond that date provided the terminating party has taken all reasonable steps to complete the performance of its obligations. c. Compensation After Termination. i) In the event of termination, the Provider shall be paid that portion of the fees and expenses that it has earned to the date of termination, less any costs or expenses incurred or anticipated to be incurred by the County due to errors or omissions of the Provider. Upon request of the County, the Provider shall submit to County all relevant documentation, including but not limited to, job cost records, to support its claims for final compensation. ii) Should this Agreement be terminated, the Provider shall deliver to the County within seven (7) days, at no additional cost, all deliverables including any electronic data or files relating to the Project. d. Waiver. The payment of any sums by the County under this Agreement or the failure of the County to require compliance by the Provider with any provisions of this Agreement or the waiver by the County of any breach of this Agreement shall not constitute a waiver of any claim for damages by the County for any breach of this Agreement or a waiver of any other required compliance with this Agreement. e. Suspension. County may suspend the Basic Services and this Agreement at any time for County’s convenience and without penalty to County upon three (3) days’ notice to Provider. Upon any suspension by County, Provider shall discontinue work on the Basic Services and shall not resume the Basic Services until notified to proceed by County. 11. Additional Provisions a. Limitation and Assignment. The County and the Provider each bind themselves, their successors, assigns and legal representatives to the terms of this Agreement. Neither the County nor the Provider shall assign or transfer its interest in this Agreement without the written consent of the other. There are no third-party beneficiaries of this Agreement and nothing in this Agreement, express or implied, is intended to confer on any person other than the parties hereto (and their respective successors, heirs and permitted assigns), any rights, remedies, or obligations. b. Governing Law. This Agreement and the duties, responsibilities, obligations and rights of respective parties hereunder shall be governed by the laws of the State of North Carolina. By executing this Agreement Provider affirms that Provider and any subcontractors of Provider are and shall remain in compliance with Article 2 of Chapter 64 of the North Carolina General Statutes. By executing this Agreement Provider certifies that Provider has not been identified, and has not utilized the services of any agent or subcontractor identified, on the list created by the State Treasurer pursuant to G.S. 147-86.58. By executing this Agreement Provider certifies that Provider has not been identified, and has not utilized the services of any agent or subcontractor identified, on the list created by the State Treasurer pursuant to G.S. 147-86.81. Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Revised 01/24 6 c. Non-Discrimination. Provider shall at all times remain in compliance with all applicable local, state, and federal laws, rules, and regulations including but not limited to all state and federal non-discrimination laws, policies, rules, and regulations and the Orange County Non-Discrimination Policy and Orange County Living Wage Policy (each Orange County policy is incorporated herein by reference and may be viewed at http://www.orangecountync.gov/departments/purchasing_division/contracts.php.) Any violation of the Orange County Non-Discrimination Policy is a breach of this Agreement and County may immediately terminate this Agreement without further obligation on the part of the County. This paragraph is not intended to limit and does not limit the definition of breach to discrimination. d. Dispute Resolution. Any and all suits or actions to enforce, interpret or seek damages with respect to any provision of, or the performance or non-performance of, this Agreement shall be brought in the General Court of Justice of North Carolina sitting in Orange County, North Carolina. It is agreed by the parties that no other court shall have jurisdiction or venue with respect to such suits or actions. Binding arbitration may not be initiated by either Party, however, the Parties may agree to nonbinding mediation of any dispute prior to the bringing of such suit or action. e. Entire Agreement. This Agreement represents the entire and integrated agreement between the County and the Provider and supersedes all prior negotiations, representations or agreements, either written or oral. This Agreement may be amended only by written instrument signed by both parties. Modifications may be evidenced by facsimile signatures. f. Severability. If any provision of this Agreement is held as a matter of law to be unenforceable, the remainder of this Agreement shall be valid and binding upon the Parties. g. Ownership of Work Product. Should Provider’s performance of this Agreement generate documents, items or things that are specific to this Project such documents, items or things shall become the property of the County and may be used on any other project without additional compensation to the Provider. The use of the documents, items or things by the County or by any person or entity for any purpose other than the Project as set forth in this Agreement shall be at the full risk of the County. h. Non-Appropriation. Provider acknowledges that County is a governmental entity, and the validity of this Agreement is based upon the availability of public funding under the authority of its statutory mandate. In the event that public funds are unavailable or not appropriated for the performance of County’s obligations under this Agreement, then this Agreement shall automatically expire without penalty to County immediately upon written notice to Provider of the unavailability or non-appropriation of public funds. It is expressly agreed that County shall not activate this non-appropriation provision for its convenience or to circumvent the requirements of this Agreement. In the event of a change in the County’s statutory authority, mandate or mandated Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Revised 01/24 7 functions, by state or federal legislative or regulatory action, which adversely affects County’s authority to continue its obligations under this Agreement, then this Agreement shall automatically terminate without penalty to County upon written notice to Provider of such limitation or change in County’s legal authority. i. Signatures. This Agreement together with any amendments or modifications may be executed electronically. All electronic signatures affixed hereto evidence the consent of the Parties to utilize electronic signatures and the intent of the Parties to comply with Article 11A and Article 40 of North Carolina General Statute Chapter 66. j. Notices. Any notice required by this Agreement shall be in writing and delivered by certified or registered mail, return receipt requested to the following: Orange County Provider’s Name Attention:Director, Solid Waste Rehrig Vision Software P.O. Box 8181 900 Corporate Center Dr. Hillsborough, NC 27278 Monterey Park, CA 91754 [SIGNATURE PAGE TO FOLLOW] Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Revised 01/24 8 IN WITNESS WHEREOF, the Parties, by and through their authorized agents, have hereunder set their hands and seal, all as of the day and year first above written. ORANGE COUNTY: PROVIDER: By: _________________________________ County Manager By: __________________________________ Rececca Vara, Vice President ES Printed Name and Title Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Vice President of Sales Revised 01/24 9 ORANGE COUNTY—INTERNAL USE ONLY ______________________________________________________________________________ Finance Information Vendor Name: Rehrig Vision Software Vendor Contact Person: Rebecca Vara Phone: 610-909-5099 Address: 900 Corporate Center Drive, Suite #600 City Monterey Park State: CA Zip: 91754 Department: Solid Waste Amount: $56,700 for three years, payable $1,575 per month Purpose: Vision web based cart system Budget Code(s): 50352020-630003 Vendor # 58988 Vendor Status with NCSOS: Active Vendor is a BOCC consultant: Yes No Contract Details Contract Type: New Amendment (Original Contract: ) (Most Recent Amendment ) Effective Date 11/11/2024 End Date 11/10/2027 Notice Date (Notice Purpose ) Award Approved by Board (Agenda Date: ); Made or Administered by Signature Authority - BOCC Express Delegation (Agenda Date: ) - Policy 9.4: Under $5,000; Service Under $90,000; Construction Under $250,000 - Budget Policy Section XV (Capital Improvement Project: ) Bidding Informal Bidding ($30k-$90k); Formal RFP ($90k+); Other (<$30k); Exception(# ) Department Affirmation This agreement is approved as to technical form and content and I as Department Director affirmatively state work on this project has not been initiated prio r to execution of the agreement. This agreement is approved as to technical form and content. Services related to this agreement have alread y begun or been completed. Description of the nature of the emergency condition that was addressed: Department Director’s Signature ________________________________________ Date: ________ Information Technologies This agreement has been reviewed and is approved as to information t echnology content and specifications: Office of the Chief Information Officer___________________________________ Date: ________ Inapplicable because no hardware/software purchases or related services Risk Management This agreement is approved for sufficiency of insurance standards, specifications, and requirements: Office of the Risk Management Officer___________________________________ Date: _________ Financial Services This instrument has been pre-audited in the manner required by the Local Government Budget and Fiscal Control Act: Office of the Chief Financial Officer ____________________________________ Date: _________ Legal Services This agreement is approved as to legal form and sufficiency: Office of the County Attorney __________________________________________Date: ________ Clerk to the Board All Docusign contracts must be copied to the Clerk upon completion: occlerkdocs@orangecountync.gov The following signature block is for hard copies only and is not required for Docusign contracts: Received for record retention: Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 10/21/2024 11/20/2024 11/20/2024 11/21/2024 11/21/2024 Revised 01/24 10 Office of the Clerk to the Board __________________________________________Date:________ Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 4012 East 26th Street · Los Angeles, CA 90058 Purchase Order: Customer Term (years):Software Billing Frequency Orange County, NC Start Customer Contact:End Project ID Isaac Jones Phone #: 919-968-2788 Email Address: ijones@orangecountync.gov Invoice Delivery Method: Vision Suite Software WOI + Service Verification Additional Software N/A Notes: Hardware, Hardware Accessories N/A Implementation N/A Item Description Quantity Price Term (Months)Extended Price VISION SAAS - SV TRUCK Collection Data Tracking, Service Verification Reporting, Live Vehicle Location, Breadcrumb Trail, Truck and Route details in Map Center. If camera enabled, includes photo compression, storage, transmittal.6 125.00$ 36 27,000.00$ VISION SAAS - SV WOI DESKTOP Asset Management, Work Order Management, Dashboards and Reporting, Map Center, Dispatch (Minimum 2 users)3 145.00$ 36 15,660.00$ VISION SAAS - SV WOI MOBILE Dynamic Dispatching, Hot Ticket Access, Route Optimization, Turn by turn driver directions. Real time vehicle/driver location.2 195.00$ 36 14,040.00$ 56,700.00$ 56,700.00$ PRESENTED BY: 9/27/2024 Date Casey Shea Casey Shea Territory Manager Direct: 518-441-8740 Email: cshea@rehrig.com ACCEPTED BY: Name: Title: Signature: PO#: 303183 Total Reoccuring (Encompasses Annual/Monthly Software SAAS) Orange County 1514 Eubanks Rd. Include on invoice/emails: Bruce Woody - bwoody@orangecountync.gov Jason Dunn - jdunn@orangecountync.gov Subtotal Chapel Hill, NC 27514 Electronic via Email Software Existing Contract 12/1/2024 11/30/2027 Bill-to Address: 3-years Ship-to/ServiceAddress: 9/27/2024Prepared Date: Monthly Contract Type Quote Details Item Number 302279 303108 Terms and Agreements. Lead time of hardware is dependent on hardware quantity order. Vision SAAS is a software subscription, not a purchase. Rehrig Pacific will maintain ownership of all software associated with this service a pplication. Customers using Vision Work Order and Inventory Mobile App must provide an approved Android or IOS smart device. It must con nect via a customer provided cellular connection. Any additional trucks/users needed for this program or the expansion of this program will be billed at the monthly rate liste d in the provided Vision pricing. Rehrig Pacific will not be held responsible for any fees, liquidated damages, and/or other charges rendered against The Custo mer for performance issues related to their contracts. Ongoing support will be provided Monday -Friday 8-5 PM Central Time via Phone and email. Pricing does NOT include any applicable taxes. Some states charge sales tax on software subscriptions. Rehrig Pacific will have the right to review and adjust pricing annually based on movement in the Consumer Price Index -All Items (CPI-U) as published by the U.S. Department of Labor Bureau of Labor Statistics. If the Consumer Price Index –All Items (CPI-U) increases over a 12-month period during the term of this agreement, Rehrig Pacific will have the right to adjust pricing to reflect only such percentage increase as reflected by the index by delivering written notice thereof to the Customer. The Vision software will automatically renew after the term of the agreement has expired until Customer elects to terminate service. Standard Warranty includes a 1 year warranty on the RFID Reader and components with optional purchases for multiple years bey ond the first year. Upon termination of this agreement, any and all investments associated with the implementation of the technology bundle that have not been paid for by the customer will need to be reimbursed to Rehrig Pacific. A early termination fee of $5,000 may be applied if customer terminates prior to end date illustrated in the term section above. Invoice information: Send Invoices to : joshuawilliams@rehrig.com and orderer ATTACHMENT I Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS. INSURER(S) AFFORDING COVERAGE INSURER F : INSURER E : INSURER D : INSURER C : INSURER B : INSURER A : NAIC # NAME:CONTACT (A/C, No):FAX E-MAILADDRESS: PRODUCER (A/C, No, Ext):PHONE INSURED REVISION NUMBER:CERTIFICATE NUMBER:COVERAGES IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed. If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s). THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER. OTHER: (Per accident) (Ea accident) $ $ N / A SUBR WVD ADDL INSD THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED. NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. $ $ $ $PROPERTY DAMAGE BODILY INJURY (Per accident) BODILY INJURY (Per person) COMBINED SINGLE LIMIT AUTOS ONLY AUTOSAUTOS ONLY NON-OWNED SCHEDULEDOWNED ANY AUTO AUTOMOBILE LIABILITY Y / N WORKERS COMPENSATION AND EMPLOYERS' LIABILITY OFFICER/MEMBER EXCLUDED? (Mandatory in NH) DESCRIPTION OF OPERATIONS below If yes, describe under ANY PROPRIETOR/PARTNER/EXECUTIVE $ $ $ E.L. DISEASE - POLICY LIMIT E.L. DISEASE - EA EMPLOYEE E.L. EACH ACCIDENT EROTH-STATUTEPER LIMITS(MM/DD/YYYY)POLICY EXP(MM/DD/YYYY)POLICY EFFPOLICY NUMBERTYPE OF INSURANCELTRINSR EXCESS LIAB UMBRELLA LIAB $EACH OCCURRENCE $AGGREGATE $ OCCUR CLAIMS-MADE DED RETENTION $ $PRODUCTS - COMP/OP AGG $GENERAL AGGREGATE $PERSONAL & ADV INJURY $MED EXP (Any one person) $EACH OCCURRENCE DAMAGE TO RENTED $PREMISES (Ea occurrence) COMMERCIAL GENERAL LIABILITY CLAIMS-MADE OCCUR GEN'L AGGREGATE LIMIT APPLIES PER: POLICY PRO-JECT LOC CERTIFICATE OF LIABILITY INSURANCE DATE (MM/DD/YYYY) CANCELLATION AUTHORIZED REPRESENTATIVE ACORD 25 (2016/03) © 1988-2015 ACORD CORPORATION. All rights reserved. CERTIFICATE HOLDER The ACORD name and logo are registered marks of ACORD HIRED AUTOS ONLY 6/26/2024 SullivanCurtisMonroe Insurance Services (Pasadena) 2010 Main Street Suite 700 Irvine, CA 92614 949-250-7172 949-852-9762 www.SullivanCurtisMonroe.com License # 0E83670 Hartford Fire Insurance Company 19682 Federal Insurance Company 20281 Property and Casualty Ins Co of Hartford 34690 Twin City Fire Insurance Company 29459 AGCS Marine Insurance Company 22837 10200Hiscox Insurance Company Inc. A 2,000,00072CSES440043/31/2024 3/31/2025 1,000,000 3 10,000 3 2,000,000 3 General Aggr Cap Limit $8M 4,000,000 4,000,000 Combined Aggregate Ded 3 3 Max Annual Aggregate 8,000,000 $7,000,000 shared with A 72CSES44002 3/31/2024 3/31/2025 2,000,000 3 Comp.& Coll. Deductibles: $2000 Medium Truck $3000 Heavy Truck/Tractor 3 $3000 Extra Heavy Truck $1000 All Other/Trailers Auto Liab (BI/PD) Ded:100,000 B 78198810 3/31/2024 3/31/2025 25,000,00033 25,000,000 C 72WNS44000 3/31/2024 3/31/2025 3 Ded Plan $250,000 1,000,000D72WBRS44001 (WI only)3/31/2024 3/31/2025 1,000,000Retro Plan $250,000 1,000,000 E Motor Truck Cargo MXI93092203 3/31/2024 3/31/2025 $100,000 / $5,000 Ded F Technology Professional Liability MPL197376024 3/31/2024 3/31/2025 $3,000,000 Each Claim / $3,000,000 Agg. Claims Made & Reported $5,000 Retention Kathy Roberge Pasadena Office $100,000 Ded per Occ. Retro Date: 09/27/2016 GLI, Auto & WC. Rehrig Pacific Company, Inc. 4010 East 26th Street Vernon CA 90058-4401 79597326 3 3 33 Evidence Only DESCRIPTION OF OPERATIONS / LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, may be attached if more space is required) [Entity - Customer with contract] is named as additional insured per attached form. Coverage is primary and non-contributory per attached form. Waiver of Subrogation applies per attached form. 30 day notice of cancellation applies per attached form. 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 1 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 COMMERCIAL AUTOMOBILE HA 99 16 12 21 THIS ENDORSEMENT CHANGES THE POLICY. PLEASE READ IT CAREFULLY. Form HA 99 16 12 21 Page 1 of 5 © 2021, The Hartford (Includes copyrighted material of Insurance Services Office, Inc. with its permission.) COMMERCIAL AUTOMOBILE BROAD FORM ENDORSEMENT This endorsement modifies insurance provided under the following: BUSINESS AUTO COVERAGE FORM To the extent that the provisions of this endorsement provide broader benefits to the "insured" than other provisions of the Coverage Form, the provisions of this endorsement apply. 1. BROAD FORM INSURED Paragraph .1. - WHO IS AN INSURED - of Section II - Liability Coverage is amended to add the following: d. Subsidiaries and Newly Acquired or Formed Organizations The Named Insured shown in the Declarations is amended to include: (1) Any legal business entity other than a partnership or joint venture, formed as a subsidiary in which you have an ownership interest of more than 50% on the effective date of the Coverage Form. However, the Named Insured does not include any subsidiary that is an "insured" under any other automobile policy or would be an "insured" under such a policy but for its termination or the exhaustion of its Limit of Insurance. (2) Any organization that is acquired or formed by you and over which you maintain majority ownership. However, the Named Insured does not include any newly formed or acquired organization: (a) That is a partnership or joint venture, (b) That is an "insured" under any other policy, (c) That has exhausted its Limit of Insurance under any other policy, or (d) 180 days or more after its acquisition or formation by you, unless you have given us notice of the acquisition or formation. Coverage does not apply to "bodily injury" or "property damage" that results from an "accident" that occurred before you formed or acquired the organization. e. Employees as Insureds (1). Any "employee" of yours while using a covered "auto" you don't own, hire or borrow in your business or your personal affairs. f. Lessors as Insureds (1). The lessor of a covered "auto" while the "auto" is leased to you under a written agreement if: (a) The agreement requires you to provide direct primary insurance for the lessor and (b) The "auto" is leased without a driver. Such a leased "auto" will be considered a covered "auto" you own and not a covered "auto" you hire. g. Additional Insured if Required by Contract (1) When you have agreed, in a written contract or written agreement, that a person or organization be added as an additional insured on your business auto policy, such person or organization is an "insured", but only to the extent such person or organization is liable for "bodily injury" or "property damage" caused by the conduct of an "insured" under paragraphs a. or b. of Who Is An Insured with regard to the ownership, maintenance or use of a covered "auto." The insurance afforded to any such additional insured applies only if the "bodily injury" or "property damage" occurs: (a) During the policy period, and (b) Subsequent to the execution of such written contract, and Rehrig Pacific Company, Inc. 72CSES44002 03/31/2024 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 2 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Page 2 of 5 Form HA 99 16 12 21 (c) Prior to the expiration of the period of time that the written contract requires such insurance be provided to the additional insured. (2) How Limits Apply If you have agreed in a written contract or written agreement that another person or organization be added as an additional insured on your policy, the most we will pay on behalf of such additional insured is the lesser of: (a) The limits of insurance specified in the written contract or written agreement; or (b) The Limits of Insurance shown in the Declarations. Such amount shall be a part of and not in addition to Limits of Insurance shown in the Declarations and described in this Section. (3) Additional Insureds Other Insurance If we cover a claim or "suit" under this Coverage Part that may also be covered by other insurance available to an additional insured, such additional insured must submit such claim or "suit" to the other insurer for defense and indemnity. However, this provision does not apply to the extent that you have agreed in a written contract or written agreement that this insurance is primary and non- contributory with the additional insured's own insurance. (4) Duties in The Event Of Accident, Claim, Suit or Loss If you have agreed in a written contract or written agreement that another person or organization be added as an additional insured on your policy, the additional insured shall be required to comply with the provisions in LOSS CONDITIONS 2. - DUTIES IN THE EVENT OF ACCIDENT, CLAIM , SUIT OR LOSS – OF SECTION IV – BUSINESS AUTO CONDITIONS, in the same manner as the Named Insured. 2. Primary and Non-Contributory if Required by Contract Only with respect to insurance provided to an additional insured in A.1.g. - Additional Insured If Required by Contract, the following provisions apply: (1) Primary Insurance When Required By Contract This insurance is primary if you have agreed in a written contract or written agreement that this insurance be primary. If other insurance is also primary, we will share with all that other insurance by the method described in Other Insurance 5.d. (2} Primary And Non-Contributory To Other Insurance When Required By Contract If you have agreed in a written contract or written agreement that this insurance is primary and non-contributory with the additional insured's own insurance, this insurance is primary and we will not seek contribution from that other insurance. Paragraphs (1) and (2) do not apply to other insurance to which the additional insured has been added as an additional insured. When this insurance is excess, we will have no duty to defend the insured against any "suit" if any other insurer has a duty to defend the insured against that "suit". If no other insurer defends, we will undertake to do so, but we will be entitled to the insured's rights against all those other insurers. When this insurance is excess over other insurance, we will pay only our share of the amount of the loss, if any, that exceeds the sum of: (1) The total amount that all such other insurance would pay for the loss in the absence of this insurance; and (2) The total of all deductible and self- insured amounts under all that other insurance. We will share the remaining loss, if any, by the method described in SECTION IV- Business Auto Conditions, B. General Conditions, Other Insurance 5.d. 3. AUTOS RENTED BY EMPLOYEES Any "auto" hired or rented by your "employee" on your behalf and at your direction will be considered an "auto" you hire. The SECTION IV- Business Auto Conditions, B. General Conditions, 5. OTHER INSURANCE Condition is amended by adding the following: e. If an "employee’s" personal insurance also applies on an excess basis to a covered "auto" hired or rented by your "employee" on your behalf and at your direction, this insurance will be primary to the "employee’s" personal insurance. 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 3 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Form HA 99 16 12 21 Page 3 of 5 4. AMENDED FELLOW EMPLOYEE EXCLUSION EXCLUSION 5. - FELLOW EMPLOYEE - of SECTION II - LIABILITY COVERAGE does not apply if you have workers' compensation insurance in-force covering all of your "employees". Coverage is excess over any other collectible insurance. 5. HIRED AUTO PHYSICAL DAMAGE COVERAGE If hired "autos" are covered "autos" for Liability Coverage and if Comprehensive, Specified Causes of Loss, or Collision coverages are provided under this Coverage Form for any "auto" you own, then the Physical Damage Coverages provided are extended to "autos" you hire or borrow, subject to the following limit. The most we will pay for "loss" to any hired "auto" is: (1) $100,000; (2) The actual cash value of the damaged or stolen property at the time of the "loss"; or (3) The cost of repairing or replacing the damaged or stolen property, whichever is smallest, minus a deductible. The deductible will be equal to the largest deductible applicable to any owned "auto" for that coverage. No deductible applies to "loss" caused by fire or lightning. Hired Auto Physical Damage coverage is excess over any other collectible insurance. Subject to the above limit, deductible and excess provisions, we will provide coverage equal to the broadest coverage applicable to any covered "auto" you own. We will also cover loss of use of the hired "auto" if it results from an "accident", you are legally liable and the lessor incurs an actual financial loss, subject to a maximum of $1000 per "accident". This extension of coverage does not apply to any "auto" you hire or borrow from any of your "employees", partners (if you are a partnership), members (if you are a limited liability company), or members of their households. 6. PHYSICAL DAMAGE - ADDITIONAL TEMPORARY TRANSPORTATION EXPENSE COVERAGE Paragraph A.4.a. of SECTION III - PHYSICAL DAMAGE COVERAGE is amended to provide a limit of $50 per day and a maximum limit of $1,000. 7. LOAN/LEASE GAP COVERAGE Under SECTION III - PHYSICAL DAMAGE COVERAGE, in the event of a total "loss" to a covered "auto", we will pay your additional legal obligation for any difference between the actual cash value of the "auto" at the time of the "loss" and the "outstanding balance" of the loan/lease. "Outstanding balance" means the amount you owe on the loan/lease at the time of "loss" less any amounts representing taxes; overdue payments; penalties, interest or charges resulting from overdue payments; additional mileage charges; excess wear and tear charges; lease termination fees; security deposits not returned by the lessor; costs for extended warranties, credit life Insurance, health, accident or disability insurance purchased with the loan or lease; and carry-over balances from previous loans or leases. 8. AIRBAG COVERAGE Under Paragraph B. EXCLUSIONS - of SECTION III - PHYSICAL DAMAGE COVERAGE, the following is added: The exclusion relating to mechanical breakdown does not apply to the accidental discharge of an airbag. 9. ELECTRONIC EQUIPMENT - BROADENED COVERAGE a. The exceptions to Paragraphs B.4 - EXCLUSIONS - of SECTION III - PHYSICAL DAMAGE COVERAGE are replaced by the following: Exclusions 4.c. and 4.d. do not apply to equipment designed to be operated solely by use of the power from the "auto's" electrical system that, at the time of "loss", is: (1) Permanently installed in or upon the covered "auto"; (2) Removable from a housing unit which is permanently installed in or upon the covered "auto"; (3) An integral part of the same unit housing any electronic equipment described in Paragraphs (1) and (2) above; or (4) Necessary for the normal operation of the covered "auto" or the monitoring of the covered "auto's" operating system. b. Section III, Physical Damage Coverage, Limit of Insurance, Paragraph C.2. is amended to add the following: $1,500 is the most we will pay for "loss" in any one "accident" to all electronic equipment (other than equipment designed solely for the reproduction of sound, and accessories used with such equipment) that reproduces, receives or transmits audio, visual or data signals which, at the time of "loss", is: 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 4 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Page 4 of 5 Form HA 99 16 12 21 (1) Permanently installed in or upon the covered "auto" in a housing, opening or other location that is not normally used by the "auto" manufacturer for the installation of such equipment; (2) Removable from a permanently installed housing unit as described in Paragraph 2.a. above or is an integral part of that equipment; or (3) An integral part of such equipment. c. For each covered "auto", should loss be limited to electronic equipment only, our obligation to pay for, repair, return or replace damaged or stolen electronic equipment will be reduced by the applicable deductible shown in the Declarations, or $250, whichever deductible is less. 10. EXTRA EXPENSE - BROADENED COVERAGE Under Paragraph A. - COVERAGE - of SECTION III - PHYSICAL DAMAGE COVERAGE, we will pay for the expense of returning a stolen covered "auto" to you. 11. GLASS REPAIR - WAIVER OF DEDUCTIBLE Under Paragraph D. - DEDUCTIBLE - of SECTION III - PHYSICAL DAMAGE COVERAGE, the following is added: No deductible applies to glass damage if the glass is repaired rather than replaced. 12. TWO OR MORE DEDUCTIBLES Under Paragraph D. - DEDUCTIBLE - of SECTION III - PHYSICAL DAMAGE COVERAGE, the following is added: If another Hartford Financial Services Group, Inc. company policy or coverage form that is not an automobile policy or coverage form applies to the same "accident", the following applies: (1) If the deductible under this Business Auto Coverage Form is the smaller (or smallest) deductible, it will be waived; (2) If the deductible under this Business Auto Coverage Form is not the smaller (or smallest) deductible, it will be reduced by the amount of the smaller (or smallest) deductible. 13. AMENDED DUTIES IN THE EVENT OF ACCIDENT, CLAIM, SUIT OR LOSS The requirement in LOSS CONDITIONS 2.a. - DUTIES IN THE EVENT OF ACCIDENT, CLAIM, SUIT OR LOSS - of SECTION IV - BUSINESS AUTO CONDITIONS that you must notify us of an "accident" applies only when the "accident" is known to: (1) You, if you are an individual; (2) A partner, if you are a partnership; (3) A member, if you are a limited liability company; or (4) An executive officer or insurance manager, if you are a corporation. 14. UNINTENTIONAL FAILURE TO DISCLOSE HAZARDS If you unintentionally fail to disclose any hazards existing at the inception date of your policy, we will not deny coverage under this Coverage Form because of such failure. 15. HIRED AUTO - COVERAGE TERRITORY SECTION IV, BUSINESS AUTO CONDITIONS, PARAGRAPH B. GENERAL CONDITIONS, 7. - POLICY PERIOD, COVERAGE TERRITORY - is added to include the following: (6) For short-term hired "autos", the coverage territory with respect to Liability Coverage is anywhere in the world provided that if the "insured's" responsibility to pay damages for "bodily injury" or "property damage" is determined in a "suit," the "suit" is brought in the United States of America, the territories and possessions of the United States of America, Puerto Rico or Canada or in a settlement we agree to. 16. WAIVER OF SUBROGATION Paragraph 5. TRANSFER OF RIGHTS OF RECOVERY AGAINST OTHERS TO US - of SECTION IV - BUSINESS AUTO CONDITIONS A. Loss Conditions is amended by adding the following: We waive any right of recovery we may have against any person or organization with whom you have a written contract that requires such waiver because of payments we make for damages under this Coverage Form. 17. RESULTANT MENTAL ANGUISH COVERAGE The definition of "bodily injury" in SECTION V- DEFINITIONS, C. is replaced by the following: "Bodily injury" means bodily injury, sickness or disease sustained by any person, including mental anguish or death resulting from any of these. 18. EXTENDED CANCELLATION CONDITION Paragraph 2. of the COMMON POLICY CONDITIONS - CANCELLATION - applies except as follows: If we cancel for any reason other than nonpayment of premium, we will mail or deliver to the first Named Insured written notice of cancellation at least 60 days before the effective date of cancellation. 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 5 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Form HA 99 16 12 21 Page 5 of 5 19. HYBRID, ELECTRIC, OR NATURAL GAS VEHICLE PAYMENT COVERAGE In the event of a total loss to a "non-hybrid" auto for which Comprehensive, Specified Causes of Loss, or Collision coverages are provided under this Coverage Form, then such Physical Damage Coverages are amended as follows: a. If the auto is replaced with a "hybrid" auto or an auto powered solely by electricity or natural gas, we will pay an additional 10%, to a maximum of $2,500, of the "non-hybrid" auto’s actual cash value or replacement cost, whichever is less, b. The auto must be replaced and a copy of a bill of sale or new lease agreement received by us within 60 calendar days of the date of "loss," c. Regardless of the number of autos deemed a total loss, the most we will pay under this Hybrid, Electric, or Natural Gas Vehicle Payment Coverage provision for any one "loss" is $10,000. For the purposes of the coverage provision, a. A "non-hybrid" auto is defined as an auto that uses only an internal combustion engine to move the auto but does not include autos powered solely by electricity or natural gas. b. A "hybrid" auto is defined as an auto with an internal combustion engine and one or more electric motors; and that uses the internal combustion engine and one or more electric motors to move the auto, or the internal combustion engine to charge one or more electric motors, which move the auto. 20. VEHICLE WRAP COVERAGE In the event of a total loss to an "auto" for which Comprehensive, Specified Causes of Loss, or Collision coverages are provided under this Coverage Form, then such Physical Damage Coverages are amended to add the following: In addition to the actual cash value of the "auto", we will pay up to $1,000 for vinyl vehicle wraps which are displayed on the covered "auto" at the time of total loss. Regardless of the number of autos deemed a total loss, the most we will pay under this Vehicle Wrap Coverage provision for any one "loss" is $5,000. For purposes of this coverage provision, signs or other graphics painted or magnetically affixed to the vehicle are not considered vehicle wraps. 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 6 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 4/18/2024Rehrig Pacific Company, Inc. 72CSES44004 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 7 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 8 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 9 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 10 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 4/18/2024Rehrig Pacific Company, Inc. 72CSES44004 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 11 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 72CSES44004 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 12 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 4/18/2024Rehrig Pacific Company, Inc. 72CSES44004 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 13 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 4/18/2024 72WNS44000 3/31/2025 3/31/2024 Rehrig Pacific Company, Inc. 4010 East 26th Street Vernon CA 90058-4401 79597326 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Mahesh Mylarappa | 4/18/2024 4:57:42 PM (PDT) | Page 14 of 14 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS. INSURER(S) AFFORDING COVERAGE INSURER F : INSURER E : INSURER D : INSURER C : INSURER B : INSURER A : NAIC # NAME:CONTACT (A/C, No):FAX E-MAILADDRESS: PRODUCER (A/C, No, Ext):PHONE INSURED REVISION NUMBER:CERTIFICATE NUMBER:COVERAGES IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed. If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s). THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER. OTHER: (Per accident) (Ea accident) $ $ N / A SUBR WVD ADDL INSD THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED. NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. $ $ $ $PROPERTY DAMAGE BODILY INJURY (Per accident) BODILY INJURY (Per person) COMBINED SINGLE LIMIT AUTOS ONLY AUTOSAUTOS ONLY NON-OWNED SCHEDULEDOWNED ANY AUTO AUTOMOBILE LIABILITY Y / N WORKERS COMPENSATION AND EMPLOYERS' LIABILITY OFFICER/MEMBER EXCLUDED? (Mandatory in NH) DESCRIPTION OF OPERATIONS below If yes, describe under ANY PROPRIETOR/PARTNER/EXECUTIVE $ $ $ E.L. DISEASE - POLICY LIMIT E.L. DISEASE - EA EMPLOYEE E.L. EACH ACCIDENT EROTH-STATUTEPER LIMITS(MM/DD/YYYY)POLICY EXP(MM/DD/YYYY)POLICY EFFPOLICY NUMBERTYPE OF INSURANCELTRINSR DESCRIPTION OF OPERATIONS / LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, may be attached if more space is required) EXCESS LIAB UMBRELLA LIAB $EACH OCCURRENCE $AGGREGATE $ OCCUR CLAIMS-MADE DED RETENTION $ $PRODUCTS - COMP/OP AGG $GENERAL AGGREGATE $PERSONAL & ADV INJURY $MED EXP (Any one person) $EACH OCCURRENCE DAMAGE TO RENTED $PREMISES (Ea occurrence) COMMERCIAL GENERAL LIABILITY CLAIMS-MADE OCCUR GEN'L AGGREGATE LIMIT APPLIES PER: POLICY PRO-JECT LOC CERTIFICATE OF LIABILITY INSURANCE DATE (MM/DD/YYYY) CANCELLATION AUTHORIZED REPRESENTATIVE ACORD 25 (2016/03) © 1988-2015 ACORD CORPORATION. All rights reserved. CERTIFICATE HOLDER The ACORD name and logo are registered marks of ACORD HIRED AUTOS ONLY 11/18/2024 SullivanCurtisMonroe Insurance Services (Pasadena) 2010 Main Street Suite 700 Irvine, CA 92614 949-250-7172 949-852-9762 www.SullivanCurtisMonroe.com License # 0E83670 Hartford Fire Insurance Company 19682 Federal Insurance Company 20281 Property and Casualty Ins Co of Hartford 34690 Twin City Fire Insurance Company 29459 AGCS Marine Insurance Company 22837 10200Hiscox Insurance Company Inc. A 2,000,00072CSES440043/31/2024 3/31/2025 1,000,000 3 10,000 3 2,000,000 3 General Aggr Cap Limit $8M 4,000,000 4,000,000 Combined Aggregate Ded 3 3 Max Annual Aggregate 8,000,000 $7,000,000 shared with A 72CSES44002 3/31/2024 3/31/2025 2,000,000 3 Comp.& Coll. Deductibles: $2000 Medium Truck $3000 Heavy Truck/Tractor 3 $3000 Extra Heavy Truck $1000 All Other/Trailers Auto Liab (BI/PD) Ded:100,000 B 78198810 3/31/2024 3/31/2025 25,000,00033 25,000,000 C 72WNS44000 3/31/2024 3/31/2025 3 Ded Plan $250,000 1,000,000ND72WBRS44001 (WI only)3/31/2024 3/31/2025 1,000,000Retro Plan $250,000 1,000,000 E Motor Truck Cargo MXI93092203 3/31/2024 3/31/2025 $100,000 / $5,000 Ded F Technology Professional Liability MPL197376024 3/31/2024 3/31/2025 $3,000,000 Each Claim / $3,000,000 Agg. Claims Made & Reported $5,000 Retention Kathy Roberge Pasadena Office $100,000 Ded per Occ. Retro Date: 09/27/2016 GLI, Auto & WC. Rehrig Pacific Company, Inc. 900 Corporate Center Dr., Ste 600 Monterey Park CA 91754 82765496 3 Orange County, its officers, agents and employees are to be designated as additional insured. Orange County P.O. Box 8181 300 West Tryon Street Hillsborough NC 27278 82765496 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Lincy Nisha | 11/18/2024 1:00:33 PM (PST) | Page 1 of 5 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 11/18/2024Rehrig Pacific Company, Inc. 72CSES44004 82765496 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Lincy Nisha | 11/18/2024 1:00:33 PM (PST) | Page 2 of 5 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 82765496 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Lincy Nisha | 11/18/2024 1:00:33 PM (PST) | Page 3 of 5 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 82765496 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Lincy Nisha | 11/18/2024 1:00:33 PM (PST) | Page 4 of 5 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 82765496 | REHRIPAC2 | 24-25 GL CAU UMC WC IM PRF | Lincy Nisha | 11/18/2024 1:00:33 PM (PST) | Page 5 of 5 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS. INSURER(S) AFFORDING COVERAGE INSURER F : INSURER E : INSURER D : INSURER C : INSURER B : INSURER A : NAIC # NAME:CONTACT (A/C, No):FAX E-MAILADDRESS: PRODUCER (A/C, No, Ext):PHONE INSURED REVISION NUMBER:CERTIFICATE NUMBER:COVERAGES IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed. If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s). THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER. OTHER: (Per accident) (Ea accident) $ $ N / A SUBR WVD ADDL INSD THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED. NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. $ $ $ $PROPERTY DAMAGE BODILY INJURY (Per accident) BODILY INJURY (Per person) COMBINED SINGLE LIMIT AUTOS ONLY AUTOSAUTOS ONLY NON-OWNED SCHEDULEDOWNED ANY AUTO AUTOMOBILE LIABILITY Y / N WORKERS COMPENSATION AND EMPLOYERS' LIABILITY OFFICER/MEMBER EXCLUDED? (Mandatory in NH) DESCRIPTION OF OPERATIONS below If yes, describe under ANY PROPRIETOR/PARTNER/EXECUTIVE $ $ $ E.L. DISEASE - POLICY LIMIT E.L. DISEASE - EA EMPLOYEE E.L. EACH ACCIDENT EROTH-STATUTEPER LIMITS(MM/DD/YYYY)POLICY EXP(MM/DD/YYYY)POLICY EFFPOLICY NUMBERTYPE OF INSURANCELTRINSR DESCRIPTION OF OPERATIONS / LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, may be attached if more space is required) EXCESS LIAB UMBRELLA LIAB $EACH OCCURRENCE $AGGREGATE $ OCCUR CLAIMS-MADE DED RETENTION $ $PRODUCTS - COMP/OP AGG $GENERAL AGGREGATE $PERSONAL & ADV INJURY $MED EXP (Any one person) $EACH OCCURRENCE DAMAGE TO RENTED $PREMISES (Ea occurrence) COMMERCIAL GENERAL LIABILITY CLAIMS-MADE OCCUR GEN'L AGGREGATE LIMIT APPLIES PER: POLICY PRO-JECT LOC CERTIFICATE OF LIABILITY INSURANCE DATE (MM/DD/YYYY) CANCELLATION AUTHORIZED REPRESENTATIVE ACORD 25 (2016/03) © 1988-2015 ACORD CORPORATION. All rights reserved. CERTIFICATE HOLDER The ACORD name and logo are registered marks of ACORD HIRED AUTOS ONLY 11/18/2024 SullivanCurtisMonroe Insurance Services (Pasadena) 2010 Main Street Suite 700 Irvine, CA 92614 949-250-7172 949-852-9762 www.SullivanCurtisMonroe.com License # 0E83670 Underwriters at Lloyds, London A Cyber Liability W31DE4240301 3/31/2024 3/31/2025 Policy Aggregate Limit $5,000,000 Claims Made & Reported form Addl Breach Response Limit $5,000,000 Retention $100,000 each incident Kathy Roberge Pasadena Office Waiting Period 12 Hours Rehrig Pacific Company, Inc. 900 Corporate Center Dr., Ste 600 Monterey Park CA 91754 82765541 Orange County, its officers, agents and employees are to be designated as additional insured. Orange County P.O. Box 8181 300 West Tryon Street Hillsborough NC 27278 82765541 | REHRIPAC2 | 24-25 CYB | Lincy Nisha | 11/18/2024 1:03:18 PM (PST) | Page 1 of 1 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN ACCORDANCE WITH THE POLICY PROVISIONS. INSURER(S) AFFORDING COVERAGE INSURER F : INSURER E : INSURER D : INSURER C : INSURER B : INSURER A : NAIC # NAME:CONTACT (A/C, No):FAX E-MAILADDRESS: PRODUCER (A/C, No, Ext):PHONE INSURED REVISION NUMBER:CERTIFICATE NUMBER:COVERAGES IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed. If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s). THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER. OTHER: (Per accident) (Ea accident) $ $ N / A SUBR WVD ADDL INSD THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED. NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. $ $ $ $PROPERTY DAMAGE BODILY INJURY (Per accident) BODILY INJURY (Per person) COMBINED SINGLE LIMIT AUTOS ONLY AUTOSAUTOS ONLY NON-OWNED SCHEDULEDOWNED ANY AUTO AUTOMOBILE LIABILITY Y / N WORKERS COMPENSATION AND EMPLOYERS' LIABILITY OFFICER/MEMBER EXCLUDED? (Mandatory in NH) DESCRIPTION OF OPERATIONS below If yes, describe under ANY PROPRIETOR/PARTNER/EXECUTIVE $ $ $ E.L. DISEASE - POLICY LIMIT E.L. DISEASE - EA EMPLOYEE E.L. EACH ACCIDENT EROTH-STATUTEPER LIMITS(MM/DD/YYYY)POLICY EXP(MM/DD/YYYY)POLICY EFFPOLICY NUMBERTYPE OF INSURANCELTRINSR DESCRIPTION OF OPERATIONS / LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, may be attached if more space is required) EXCESS LIAB UMBRELLA LIAB $EACH OCCURRENCE $AGGREGATE $ OCCUR CLAIMS-MADE DED RETENTION $ $PRODUCTS - COMP/OP AGG $GENERAL AGGREGATE $PERSONAL & ADV INJURY $MED EXP (Any one person) $EACH OCCURRENCE DAMAGE TO RENTED $PREMISES (Ea occurrence) COMMERCIAL GENERAL LIABILITY CLAIMS-MADE OCCUR GEN'L AGGREGATE LIMIT APPLIES PER: POLICY PRO-JECT LOC CERTIFICATE OF LIABILITY INSURANCE DATE (MM/DD/YYYY) CANCELLATION AUTHORIZED REPRESENTATIVE ACORD 25 (2016/03) © 1988-2015 ACORD CORPORATION. All rights reserved. CERTIFICATE HOLDER The ACORD name and logo are registered marks of ACORD HIRED AUTOS ONLY 11/18/2024 SullivanCurtisMonroe Insurance Services (Pasadena) 2010 Main Street Suite 700 Irvine, CA 92614 949-250-7172 949-852-9762 www.SullivanCurtisMonroe.com License # 0E83670 Illinois Union Insurance Company 27960 3 A Premises Pollution Liability PPLG47381794002 3/31/2024 3/31/2025 $5,000,000 Per Pol or Indoor Enviro Cond Claims Made & Reported $10,000,000 Total Policy and Aggregate Schedule loc:4010 E 26th St,Vernon,CA SIR: $250,000 Per Poll or IndoorEnviro C Kathy Roberge Pasadena Office Retro Date: 12/28/22 10 Day BI Ded Per Poll or Indoor Enviro C Rehrig Pacific Company, Inc. 900 Corporate Center Dr., Ste 600 Monterey Park CA 91754 82765583 Orange County, its officers, agents and employees are to be designated as additional insured. Orange County P.O. Box 8181 300 West Tryon Street Hillsborough NC 27278 82765583 | REHRIPAC2 | 24-25 POLL | Lincy Nisha | 11/18/2024 1:05:42 PM (PST) | Page 1 of 1 Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Cloud Service Questionnaire This questionnaire is to be used to assess security and legal issues surrounding cloud services under consideration for Orange County. For this questionnaire, cloud services are any services requiring storage of County data outside the County network or provision of computing resources outside of the County network. Vendor under consideration: Click here to enter text. Solution under consideration: Click here to enter text. Department(s) served: Click here to enter text. 1. Who owns the data created by County personnel using this service? County owns data & Rehrig owns database/servers 2. Does the Cloud contractually allow the County to access and retrieve its data at the County’s discretion? No If No, Explain: County must request access to the data except the data that is exposed at application layer. 3. Is the Cloud provider contractually obligated to dispose, return or retrieve data in the event of contract termination? Yes If No, Explain: Click here to enter text. 4. Upon such provision of data, is the Cloud provider obligated to specify data format and all information necessary for data extraction? Yes If No, Explain: Click here to enter text. 5. Is the Cloud provider obligated to destroy all copies of County data, at the County’s request? Yes If No, Explain: Click here to enter text. 6. What are the Cloud provider’s obligation to the County in the event of confirmed or suspected data breaches? Monitor and take appropriate actions actively for those suspicious activities. 7. Is the Cloud provider obligated to inform the County of all locations in which the data is stored (including backups) and to continually keep the County informed of any changes to those locations? Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Yes If No, Explain: Click here to enter text. 8. What are the Cloud provider’s contractual obligations with respect to litigation holds on County data? Several key aspects to ensure data preservation and compliance with legal requirements. Like Data Preservation, Access Control, Notification Obligations, Compliance with Legal Requests, Audit and Documentation, Cost Allocation. 9. What are the Cloud provider’s contractual prohibitions on disclosing data to individuals, groups or organizations making record requests, unless so directed by an authorized County official? Here are common prohibitions. • Non-Disclosure Requirement • County Authorization • Legal Compliance Restrictions • Confidentiality Agreements. 10. Does the contract obligate the Cloud provider to allow third-party audits and/or certifications related to infrastructure and security, including penetration testing and vulnerability assessment, as requested by the County? Yes If No, Explain: We can discuss this if Rehrig has such policies. 11. Does the contract obligate the Cloud provider to allow third party onsite inspections of the Cloud provider’s infrastructure and security practices on a specified basis? Yes If No, Explain: We can discuss if Rehrig has any such policies 12. Does the contract obligate the Cloud provider to provide security documentation upon request by the County? Yes If No, Explain: Click here to enter text. 13. Does the contract obligate the Cloud provider to supply the County with the provider’s performance records, including access to daily and weekly service quality statistics? No If No, Explain: We can review this again. 14. Explain the contractually obligated service level parameters, minimum levels, specific remedies and penalties for non-compliance for: 1) Uptime All time mostly Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 2) Performance and response time:1 hr. 3) Error correction time:4-8 hrs. 4) infrastructure and security: N/A 15. Does the contractually defined Service Level Agreement define pertinent terms such as downtime, scheduled downtime, etc…? Yes, these can be found in the terms and agreements section on the proposal/contract extension form. If No, Explain: This is not explicitly defined in the contract. 16. Does the contract specify minimum disaster recovery and business continuity requirements, including penalties for non-compliance, as discovered through onsite inspections, audits or actual disasters? No If No, Explain: This is not explicitly defined in the contract 17. Does the contract require the cloud vendor to notify the County of any outsourced functionality and its provider? Yes If No, Explain: Click here to enter text. 18. What are the contractually required notification period for the County or the cloud vendor for termination of the cloud services? This can be provided by our Sales Team. 19. Describe how the County’s data will be stored, managed and archived. County data is stored in secure, redundant cloud infrastructure managed by Rehrig Pacific Company. Data is encrypted both at rest and in transit using industry-standard encryption protocols to protect against unauthorized access. Role-based access controls (RBAC) and multi-factor authentication (MFA) are implemented to restrict access to authorized personnel, ensuring that only individuals with proper permissions can access County data. Customer data will be archived after 3 years inactivity. 20. Will the County’s data be stored and managed on a storage system with other data? Yes If Yes, Explain: In many cloud environments, the County’s data is often stored on a shared storage system, known as a multi-tenant environment, where multiple clients’ data resides on the same physical infrastructure. However, cloud providers implement several strategies to securely manage and separate this data. 21. At what architectural point in the provider’s cloud facility will the County’s data be physically connected to networking equipment with non-County data? Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 Rehrig handles the data in the following ways. • Network Core • Hypervisor and Virtualization Layer • Storage Network • Internet Gateway and Load Balancers • Edge and Backbone Infrastructure. Rehrig handles the data in the following ways. Network Core, Hypervisor and Virtualization Layer, Storage Network, Internet Gateway and Load Balancers, Edge and Backbone Infrastructure. 22. What are the cloud provider’s information security policies? o Data Protection and Privacy. o Security Incident Response Plan o Enterprise Security Program o Security Best Practices o Security Center o Network Security o Monitoring and Incident Response o Physical Security o Compliance and Certifications o Data Backup and Disaster Recovery o User Activity Monitoring and Logging o Vulnerability Management and Penetration Testing o Third-Party Risk Management 23. What are the cloud provider’s incident management and reporting policies? • Continuous Monitoring and Threat Detection • Dedicated Incident Response Team (IRT) • Incident Classification and Escalation • Containment, Eradication, and Recovery • Customer Notification and Communication • Post-Incident Analysis and Reporting • Testing and Continuous Improvement 24. What is the process by which the cloud provider updates policies and informs customers? • Policy Review and Update Process • Internal Evaluation and Approval • Customer Notification • Customer Support and Documentation • Real-Time Incident Communication (if relevant) 25. What is the basic architecture of the cloud provider’s network security? (overall design, zones, filters, firewalls, VLANs, protocols, standards) • Network Segmentation and Isolation • Firewalls and Intrusion Prevention Systems (IPS) • Load Balancers • Data Encryption in Transit and at Rest Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 • Identity and Access Management (IAM) • Monitoring, Logging, and Security Information and Event Management (SIEM) • DDoS Mitigation • Physical Security Controls • Compliance and Regular Security Audits 26. What security measures does the cloud provider use in data storage, transit and use? • Data Storage Security o Encryption at Rest o Access Control and Role-Based Access o Redundant Storage and Replication o Audit Logging o Regular Security Patching 27. What encryption technologies does the cloud provider use in data management? • Encryption at Rest o Advanced Encryption Standard (AES-256) o Shield Platform Encryption o Customer-Managed Keys • Encryption in Transit o Transport Layer Security (TLS 1.2/1.3) o HTTPS and Secure APIs • Encryption Key Management o Hardware Security Module (HSM) o Key Rotation and Revocation • Encryption in Use o Field-Level Encryption\ o Tokenization and Masking • Compliance-Oriented Encryption Standards o FIPS 140-2 Compliance 28. How are access rights managed by the cloud provider for their employees, contractors and other persons? • Role-Based Access Control (RBAC) • Principle of Least Privilege • Multi-Factor Authentication (MFA) • Single Sign-On (SSO) Integration • Access Reviews and Audits • Strict Access Approval and Revocation Processes • Privileged Access Management (PAM) • Data Masking and Restricted Access in Production Environments • Activity Monitoring and Logging • Training and Security Awareness Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 29. What methods does the cloud provider use to destroy information, when so authorized? • Data Deletion on Request • Secure Overwriting and Data Wiping • Encryption Key Destruction • Media and Hardware Sanitization • Secure Data Backup Deletion • Compliance with Legal and Regulatory Standards • Third-Party Certifications and Audits 30. What is the cloud provider’s patch management policy/methods? • Continuous Vulnerability Monitoring • Patch Classification and Prioritization • Automated Patch Deployment • Testing in Sandbox and Staging Environments • Scheduled Maintenance Windows • Compliance with Security Standards • Third-Party and Dependency Patching • Real-Time Monitoring and Incident Response • Customer Communication 31. How does the cloud provider defend against malware, including but not limited to viruses, bots, spyware, spam, phishing and pharming? • Network Security Controls • Email Security Measures • Endpoint Security • Web Security • User Awareness and Training • Identity and Access Management (IAM) • Threat Intelligence and Monitoring • Malware Detection and Response • Data Loss Prevention (DLP) • Compliance and Best Practices 32. What system hardening strategies are employed by the cloud provider? • Principle of Least Privilege • Secure Configuration Management • Regular Patching and Updates • Network Segmentation and Isolation • Firewalls and Intrusion Detection Systems (IDS) • Data Encryption • Multi-Factor Authentication (MFA) • Application Security Testing • Logging and Monitoring • Security Awareness and Training • Incident Response Plan Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04 • Third-Party Risk Management 33. How does the cloud provider perform security testing, including logging, correlation, intrusion detection, intrusion prevention, file integrity monitoring, time synchronization, security assessments, penetration testing? • Logging • Correlation • Intrusion Detection • Intrusion Prevention • File Integrity Monitoring • Time Synchronization • Security Assessments • Penetration Testing • Continuous Monitoring and Response • Regulatory Compliance and Best Practices 34. What technologies and methods does the cloud vendor provide for strong authentication? • Multi-Factor Authentication (MFA) • Single Sign-On (SSO • Social Sign-On • IP Whitelisting • Login Policies • Device Recognition • Session Management • Password Policies • Identity Connect • Risk-Based Authentication 35. Provide any other comments and explanations: Rehrig places a strong emphasis on security and compliance across its platform, and the company is committed to continuously enhancing its security posture. Here are some additional comments and explanations from Rehrig regarding their security measures, best practices, and commitment to customer data protection • Commitment to Security • Transparency and Compliance • User Education and Resources • Incident Response and Reporting Data Protection and Privacy • Continuous Improvement • Ecosystem Security • Collaboration with Industry Partners Docusign Envelope ID: 99306186-17FB-4EAC-9539-D90895EB6D04