GENESYS MASTER SUBSCRIPTION AGREEMENT

BY EXECUTING A SERVICE ORDER OR STATEMENT OF WORK THAT INCORPORATES THIS AGREEMENT, CUSTOMER AGREES TO FOLLOW AND BE BOUND BY THE TERMS AND CONDITIONS OF THIS GENESYS MASTER SUBSCRIPTION AGREEMENT. THE PERSON ENTERING INTO THIS AGREEMENT ON BEHALF OF CUSTOMER CONFIRMS THAT HE OR SHE HAS READ AND UNDERSTAND THE TERMS AND CONDITIONS OF THIS AGREEMENT AND HAS THE AUTHORITY TO BIND CUSTOMER AND ITS RELATED PARTIES HERETO.

GENESYS MASTER SUBSCRIPTION AGREEMENT

For Cloud Services

***CONFIDENTIAL***

This Master Subscription Agreement (“Agreement”) is entered into by the parties to the Services Order: By executing a Services Order, the parties agree to be bound by the applicable Service Orders, this Agreement and any other separately executed Services Orders or SOWs incorporating this Agreement. Capitalized terms shall have the meanings defined in the Agreement. In consideration of the mutual promises and obligations in the Agreement, the sufficiency of which is hereby acknowledged, the parties agree as follows.

1. SERVICES

1.1. Subject to the terms of the Agreement, Genesys grants Customer a non-transferable, non-sublicensable, non-exclusive Subscription to access and use the Genesys Cloud CX Service during the Subscription Term.

1.2. Genesys will provide Support as described in the Genesys PureConnect Cloud Services Support Policy, attached to this Agreement as Exhibit A.

1.3. Customer may retain Genesys to perform Professional Services as set forth in a mutually acceptable Statement of Work (“SOW”).

1.4. Customer may retain Genesys to provide training as set forth in a Services Order. Customer’s access and receipt of training is subject to the terms set forth at https://ebooks-genesys.com/TUTerms.

2. INVOICING AND PAYMENT

2.1. Payments will be due within thirty (30) days of the date of the applicable invoice.

2.2. Fees shall be as set forth in the Services Order or SOW (“Fees”). Unless otherwise stated in a Services Order or this Agreement: (a) all Fees are quoted and payable in the currency set forth in the applicable Services Order, and (b) Customer will be invoiced for the Professional Services Fees as set forth in the SOW. Genesys reserves the right to update Fees and other terms for any Renewal Term by notice to Customer at least ninety (90) days’ prior to the end of the then-current Term. Such changes will become effective for Customer upon commencement of a Renewal Term.

2.3. Customer will reimburse all pre-approved travel and other expenses incurred in connection with the Services.

2.4. Fees are exclusive of applicable Taxes and Regulatory Charges. Customer will reimburse Genesys for Taxes and Regulatory Charges arising in connection with the Services.

2.5. If Customer in good faith disputes the amount of any invoice, Customer will timely pay the undisputed amount and will notify Genesys in writing of the disputed amount no later than the date payment would otherwise be due, providing the reasons for the dispute. The parties will attempt in good faith to resolve the dispute within thirty (30) days after Genesys’ receipt of Customer’s notice of dispute (the “Resolution Period”), during which time Customer’s withholding of the disputed amount will not be considered a material breach of this Agreement. Upon resolution of the dispute, Customer will pay the resolved amount promptly but in any case within ten (10) days of mutual written agreement resolving the dispute. If the dispute is not resolved within the thirty-day (30) Resolution Period, then each party will be entitled to pursue all available remedies.

3. TERM AND TERMINATION

3.1. The term of the Agreement shall commence upon the Effective Date and shall continue for the duration of any effective Services Orders or SOWs. The Initial Subscription Term will commence upon the Scheduled Provisioning Date.

3.2. In the absence of a written non-renewal notice provided at least sixty (60) days prior to the end of the applicable Term, each Subscription Term shall automatically renew for Renewal Subscription Terms as set forth in the applicable Services Order.

3.3. Either party will have the right to terminate the Agreement by written notice to the other party if (a) the other party has breached a material obligation under the Agreement or any Services Order or SOW and such breach remains uncured for a period of thirty (30) days after written notice of such breach is sent to the other party; provided such breach is curable, it being understood that a breach of Sections 4.1 and 4.2 are incurable.; or (b) if the other party becomes the subject of a petition in bankruptcy or any other proceeding relating to insolvency, receivership, liquidation or assignment for the benefit of creditors. Upon any termination of the Agreement by Customer for breach by Genesys, Genesys shall refund any prepaid Fees covering the remainder of the Subscription Term after the effective date of termination. Upon any termination of the Agreement by Genesys for breach by Customer, Customer shall pay any unpaid Fees covering the remainder of the Subscription Term after the effective date of termination, and prepaid fees shall not be refunded. Termination of the Agreement by a party shall be without prejudice to any right or remedy of such party under the Agreement or applicable Law. If, during the cure period referenced in 3.2(a), Genesys documents an effort to promptly cure the breach, then, notwithstanding anything to the contrary, Customer will not terminate this Agreement or a Services Order or SOW while such good faith efforts are continuing. Genesys’ efforts to cure the breach may not exceed 120 days from Customer’s notice.

3.4. Notwithstanding any term in the Agreement to the contrary, Genesys reserves the right to suspend the Genesys Cloud CX Services, or portion thereof, or reject or cancel the transmission of any information through the Genesys Cloud CX Service based upon (i) reasonable belief that the use of the Genesys Cloud CX Services is in violation of applicable Laws, (ii) Customer’s failure to pay amounts when due, or (iii) an imminent compromise to the security or integrity of the network. As practicable depending on the circumstances, Genesys will provide notice of the suspension and keep Customer reasonably informed of Genesys’ efforts to restore the Genesys Cloud CX Services.

3.5. Except as otherwise stated therein, upon execution by both parties, each Services Order shall be a non-cancelable, non-refundable order by Customer. The Fees and Subscription Term stated on each Services Order shall be applicable only for that Services Order. Fees shall apply during periods of suspension and as incurred for unauthorized use of the Genesys Cloud CX Service. Customer’s purchase of the Genesys Cloud CX Service is not conditioned on the availability of any future service or enhancement. Upon termination of this Agreement (or a Services Order) for any reason all licenses granted hereunder and Customer’s access to the Services will terminate.

4. INTELLECTUAL PROPERTY

4.1. All Intellectual Property Rights in the Services (and other materials or services provided hereunder) remain the exclusive property of Genesys and its licensors or suppliers, as applicable. Genesys and its licensors and suppliers reserve all rights not expressly granted in this Agreement and own all rights in all Derivative Works of the Services (and other materials provided hereunder) and any copy, translation, modification, adaptation or derivation (including any improvement or development) of the Services (and all other materials provided hereunder).

4.2. No implied licenses are granted hereunder. Customer is granted no rights in or to the Services except as expressly set forth under a Services Order. Customer shall not (a) modify or create any Derivative Works, functionally equivalent works, or translations of the Services or any other materials provided hereunder, (b) reverse engineer the Services or take any action that jeopardizes Genesys’ rights or the rights of its licensors and service providers in any materials, including the Services, made available to Customer hereunder; (c) access the Services in order to build a competitive product or service or to assist anyone else to compete with Genesys; or (d) use the Services in a way that violates any Law. Genesys Cloud CX Services include tools that can be used to create content related to Customer Data. The algorithms, compilations, collation methods and anonymized analyses created through the use of Genesys Cloud CX Services are considered Derivative Works and therefore are retained by Genesys. Customer retains, however, non-anonymized analyses of Customer Data obtained from its use of such tools.

4.3. As between Genesys and Customer, the Customer Data are the proprietary material of Customer and shall be considered Customer’s Confidential Information. Customer grants Genesys a non-exclusive, non-sublicenseable (except to parties working on Genesys’ behalf), non-transferable, royalty-free license to access, process, store, transmit, and otherwise make use of the Customer Data as directed by Customer or as necessary to provide the Services and to otherwise fulfill its obligations under and in accordance with the Agreement.

4.4. To the extent not already owned by Genesys and subject in each case to Section 12.1 to the extent Customer is identified by name or logo, Customer, on behalf of itself and its Related Parties, hereby grants Genesys a perpetual, exclusive, royalty-free, worldwide license to use or disclose (or choose not to use or disclose), and create derivative works of Feedback for any purpose, in any way, in any media worldwide. |

4.5. Nothing in this Agreement precludes or limits Genesys in any way from providing materials or services that are similar to materials or services provided or contemplated in this Agreement or developing deliverables or other materials or services that are similar to or compete with any materials or services developed as a result of this Agreement, regardless of their similarity to any Services. Genesys will be free to use any concepts, processes, techniques, improvements or other know-how developed by Genesys in the course of performance of this Agreement free from any use restriction or payment obligation. For the avoidance of doubt, but subject to this Agreement, including this Section 4.5, Genesys does not claim any rights to any of Customer’s Confidential Information.

5. WARRANTIES

5.1 Genesys warrants that the (i) Professional Services and (ii) Maintenance and Support will be performed in a professional and workmanlike manner and in accordance with applicable requirements of this MSA.

5.2 Genesys warrants that the Genesys Cloud CX Services will materially conform to the specifications set forth in the Documentation. For purposes of this Section 5, “Documentation” shall mean applicable technical published manuals that accompany the Genesys Cloud CX Services.

5.3 Customer’s sole and exclusive remedy for breach of the warranties set forth in this section shall be for Genesys to re-perform non-conforming services or to correct errors.

5.4 EXCEPT AS EXPRESSLY PROVIDED IN THIS SECTION 5, THE SERVICES ARE PROVIDED TO CUSTOMER ON AN “AS IS” ‘WHERE IS” AND “AS AVAILABLE” BASIS WITHOUT WARRANTY OF ANY KIND EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. GENESYS MAKES NO REPRESENTATIONS OR WARRANTIES THAT USE OF THE GENESYS CLOUD SERVICE WILL BE UNINTERRUPTED, TIMELY, COMPLETE, OR ERROR-FREE.

6. LIMITATION OF LIABILITY

6.1. THE CUMULATIVE AGGREGATE LIABILITY OF A PARTY AND ALL OF ITS RELATED PARTIES (AND IN THE CASE OF GENESYS, ITS LICENSORS OR SERVICE PROVIDERS) UNDER THE AGREEMENT SHALL BE LIMITED TO DIRECT DAMAGES AND SHALL NOT EXCEED THE FEES PAID TO GENESYS DURING THE TWELVE MONTHS IMMEDIATELY PRIOR TO THE COMMENCEMENT OF THE DISPUTE FOR THE SERVICES THAT ARE THE SUBJECT OF THE DISPUTE. CUSTOMER AGREES THAT THIS LIMITATION ON LIABILITY FORMS A FUNDAMENTAL BASIS OF THE BARGAIN HEREUNDER, IN THE ABSENCE OF WHICH, THE ECONOMIC TERMS OF THIS AGREEMENT WOULD HAVE BEEN DIFFERENT.

6.2. IN NO EVENT SHALL EITHER PARTY OR ANY OF ITS RELATED PARTIES (AND IN THE CASE OF GENESYS, ITS LICENSORS OR SERVICE PROVIDERS) BE LIABLE TO THE OTHER PARTY OR ANY OF ITS RELATED PARTIES (AND IN THE CASE OF GENESYS, ITS LICENSORS OR SERVICE PROVIDERS) FOR ANY INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE DAMAGES OF ANY CHARACTER, CONSEQUENTIAL OR EXEMPLARY DAMAGES (INCLUDING LOSS OF BUSINESS OR GOOD WILL, WORK STOPPAGE, LOST PROFITS, REVENUE, DATA OR USE, COMPUTER FAILURE OR MALFUNCTION AND TELECOMMUNICATIONS CHARGES FROM UNAUTHORIZED ACCESS), COVER DAMAGES , OR OTHER SIMILAR DAMAGES REGARDLESS OF THE LEGAL THEORY ASSERTED, WHETHER IN CONTRACT, BREACH OF WARRANTY, TORT (INCLUDING NEGLIGENCE), PRODUCT LIABILITY, STRICT LIABILITY OR OTHERWISE, EVEN IF SUCH PARTY OR ANY OF ITS RELATED PARTIES (AND IN THE CASE OF GENESYS, ITS LICENSORS OR SERVICE PROVIDERS) HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND EVEN IF AN AGREED REMEDY FAILS OF ITS ESSENTIAL PURPOSE OR IS HELD UNENFORCEABLE FOR ANY OTHER REASON.

6.3. THIS LIMITATION OF LIABILITY SHALL NOT OPERATE SO AS TO: (I) REDUCE ANY AMOUNTS DUE AS FEES; (II) LIMIT LIABILITY ARISING IN CONNECTION WITH INDEMNIFICATION OBLIGATIONS; OR (III) LIMIT LIABILITY FINALLY DETERMINED TO HAVE RESULTED FROM A PARTY’S GROSS NEGLIGENCE OR WILFULL MISCONDUCT. THIS SECTION WILL NOT APPLY TO DAMAGES THAT CANNOT BE LIMITED OR EXCLUDED BY LAW (IN WHICH EVENT THE LIMITATION WILL BE THE MINIMUM AMOUNT REQUIRED BY LAW).

7. CONFIDENTIALITY

7.1. During the Confidentiality Period, recipient shall (a) protect the confidentiality of all Confidential Information using the same degree of care that it uses to protect the confidentiality of its own Confidential Information of like kind (but in no event less than reasonable care) to prevent unauthorized use or disclosure; (b) not use any Confidential Information except as expressly authorized in the Agreement; (c) not disclose, orally or in writing, any Confidential Information to any person, other than an employee, consultant or agent of recipient bound by terms at least as restrictive as those set forth herein with a need to know such Confidential Information.

7.2. The obligations in Section 7.1, however, shall not apply to any information which: (a) is already in the public domain or becomes available to the public through no breach of the Agreement by recipient; (b) was in the recipient’s possession prior to receipt from discloser, as proven by recipient’s written records; (c) is received by the recipient from a third party free to disclose such information to recipient; or (d) is independently developed by recipient without use of the Confidential Information.

7.3. Nothing in this Agreement shall prevent a party from disclosing Confidential Information to the extent required by applicable Law, judicial or administrative process, provided that recipient shall: (i) notify discloser of any duty to disclose, affording opportunity for discloser to take protective actions (except to the extent notice is prohibited by Law), and (ii) disclose only as much of the Confidential Information as required, maintaining all proprietary notices applicable to such Confidential Information.

7.4. Upon written request in connection with termination of the Agreement, each party shall deliver to the other party or destroy all copies of such other party’s Confidential Information. Notwithstanding the foregoing, recipient may retain an archival record of Confidential Information to the extent required pursuant to applicable Law subject to recipient’s compliance with the remaining terms of this section.

8. COMPLIANCE WITH LAWS

Each party shall comply with all applicable Laws in connection with the performance of its obligations under this Agreement. Notwithstanding the foregoing, however, Genesys is not responsible for ensuring that the Services, or Customer’s use thereof, comply with any Laws applicable to Customer’s business or industry, including, without limitation communications and privacy regulations such as the Telephone Consumer Protection Act of 1991 and the Health Insurance Portability and Accountability Act (HIPAA).

9. USE OF THE SERVICE

9.1. Customer will not, and will not permit or authorize others, to use the Genesys Cloud CX Service for any of the following:

9.1.1. to violate applicable Law;

9.1.2. to transmit Malicious Code;

9.1.3. to transmit 911 or any emergency services (or reconfigure to support or provide such use);

9.1.4. to interfere with, unreasonably burden, or disrupt the integrity or performance of the Genesys Cloud CX Services or third-party data contained therein;

9.1.5. to attempt to gain unauthorized access to systems or networks; or

9.1.6. to provide the Genesy s Cloud Services to non-User third parties, including, by resale, license, lend or lease.

9.2. Customer will use commercially reasonable efforts to prevent and/or block any prohibited use by Customer personnel or Customer’s Users.

9.3. Customer will maintain any reasonable, appropriate administrative, physical, and technical level of security regarding its account ID, password, antivirus and firewall protections, and connectivity with the Genesys Cloud CX Services.

9.4. Customer shall maintain strict security over all VoIP Services lines. Customer acknowledges that Genesys does not provide Customer the ability to reach 911 or other emergency services and Customer agrees to inform any individuals who may be present where the Genesys Cloud CX Services are used, or who use the Genesys Cloud CX Services, of the non-availability of 911 or other emergency dialing.

9.5. If the Genesys Cloud CX Service will be used to transmit or process Sensitive Information, Customer will ensure that all Sensitive Information is captured and used solely via the use of available Security Features.

9.6. Recordings. As between Genesys and Customer, Customer acknowledges that Recordings are solely within its discretion and control. Without limiting the foregoing: (i) Customer accepts sole responsibility for determining the method and manner of performing Recording such that it is compliant with all applicable Laws and for instructing the Services accordingly; and (ii) Customer shall ensure that Recordings shall be made only for diagnostic, quality assurance, archival, and/or Support purposes, and in any event only for purposes required and/or in compliance with, all applicable Laws. Customer will ensure that either (a) Recordings will not knowingly include any bank account number, credit card number, authentication code, Social Security number, or other personal or Sensitive Information, except as allowed or required by all applicable Laws; or (v) Recordings are encrypted at all times. To the extent Recordings are encrypted or where encryption is electable by Customer as part of the Service, Customer shall elect such encryption. Customer shall not modify, disable, or circumvent the Recording encryption feature within the Genesys Cloud CX Services and shall otherwise ensure that it will use the Genesys Cloud CX Services in compliance with the encryption feature.

10. CUSTOMER DATA

10.1. General.

10.1.1. Customer acknowledges and agrees that the Customer Data may be transferred or stored outside the country where Customer and its customers are located in order to carry out the Services and Genesys’ other obligations under the Agreement.

10.1.2. Customer represents and warrants that it has obtained all consents necessary for Genesys to collect, access, process, store, transmit, and otherwise use Customer Data in accordance with the Agreement.

10.1.3. Customer shall comply with all requirements of integrity, quality, legality and all other similar aspects in respect of Customer Data and Messages. Genesys may, but is not obligated to, review or monitor any Customer Data. Genesys expressly disclaims any duty to review or determine the legality, accuracy or completeness of Customer Data used through the Genesys Cloud CX Services.

10.1.4. If Customer, End Users or Persons provide credit card information to the Genesys Cloud CX Services, Customer retains responsibility for compliance with all applicable standards, including the Payment Card Industry Data Security Standards (“PCI-DSS”).

10.1.5. Each party will comply with the European Union Directive 95/46/EC (the “EU Directive”) or such similar Laws within or outside of the EU (“Similar Data Security Laws”), as each applies to the performance of such party’s obligations under the Agreement. To the extent that either party is a Data Processor such party shall only process Personal Data in accordance with the instructions of the Data Controller. (The terms “Data Processor”, “Data Controller” and “Personal Data” are as defined in the EU Directive, and shall be deemed to denote analogous terms under Similar Data Security Laws.) The Data Processor shall promptly notify Data Controller if it receives any complaint, notice or communication which relates directly or indirectly to the processing of Personal Data under the Agreement, and provide full co-operation and assistance in relation to any such complaint, notice or communication.

10.2. Protection of Customer Data.

10.2.1. Unless Customer’s failure to comply with Section 9 prevents Genesys from doing so, Genesys shall maintain reasonable, appropriate administrative, physical, and technical safeguards for protection of the security, confidentiality and integrity of Customer Data and (ii) Genesys shall maintain its status as a PCI-DSS Level 1 compliant service provider and comply with applicable credit card association rules regarding cardholder data security.

10.2.2. Genesys shall not modify, disclose, or access Customer Data except to provide the Services and perform Support to prevent or address service issues or technical problems, at Customer’s request in connection with Support, or to the extent otherwise permitted in the Agreement.

11. INDEMNIFICATION

11.1. Subject to the Exclusions, Genesys shall pay to defend Customer at Genesys’ expense, indemnify Customer against any judgments finally awarded by a court and pay any settlements approved by Genesys with respect to any third-party claims that the original, unchanged Genesys Cloud CX Service, as it stands alone, infringes or misappropriates any third party’s Intellectual Property Rights as identified in a patent or copyright that is valid and enforceable in the United States. Genesys may at any time and at its option and expense: (i) obtain for Customer the right to continue using the Genesys Cloud CX Service, (ii) modify or replace or modify the Genesys Cloud CX Service so that it becomes non-infringing while retaining substantially similar functionality; or (iii) if neither of the foregoing remedies can be reasonably effected by Genesys, terminate Customer’s right to use the Genesys Cloud CX Service and refund to Customer any prepaid, unused Fees. The provisions of this Section 11 state the sole, exclusive, and entire liability of Genesys and are Customer’s sole remedy with respect to the infringement of third party intellectual property rights.

11.2. Customer will defend Genesys and its Related Parties at Customer’s expense, indemnify Genesys and its Related Parties against any judgments finally awarded by a court, and pay any settlements approved by Customer with respect to any claims: (a) that Customer Data and/or Customer’s method or process of doing or conducting business infringes any Intellectual Property Rights of a third party; (b) arising from Customer’s non-compliance with Section 4 (Intellectual Property); or (c) that the Services or the use thereof infringes any Intellectual Property Rights of a third party to the extent such claim arises in connection with an Exclusion(s).

11.3. A party entitled to indemnification (“Indemnified Party”) shall take all reasonable steps to mitigate any potential expenses and shall provide the other party (the “Indemnifying Party”) with: (i) prompt written notice of any such claim or actions, or possibility thereof upon becoming aware of the same; and (ii) relevant information (subject to confidentiality restrictions the Indemnified party owes to third parties), authority and reasonable assistance to settle or defend and such claim or action. Failure to provide timely notice or reasonable assistance will relieve the Indemnifying Party of its indemnification obligations to the extent that the Indemnifying Party has been materially prejudiced thereby. The Indemnified Party shall tender sole control and authority over to the Indemnifying Party, and reasonably assist with the defense or settlement of such claim or action. Notwithstanding the foregoing, the Indemnified Party shall have the right to retain counsel of its own choice, at its own expense, in respect of the subject of the Indemnification, for purposes including services as co-counsel, or to monitor the defense provided by the Indemnifying Party’s appointed counsel. The Indemnified Party shall have the right to approve counsel selected by the Indemnifying Party, which approval shall not be unreasonably withheld or delayed.

12. MISCELLANEOUS

12.1. Marketing. Subject to Customer’s written consent in each instance, Customer grants Genesys the right to use Customer’s name and logo to identify Customer as a Genesys customer. Subject to prior written approval of content, Customer grants Genesys the right to issue a media release after execution of the Agreement announcing that Customer has become a Genesys customer, and to make other announcements and place promotion in various publications and media. Customer agrees that, not less than once per calendar quarter during the Term of this Agreement, to act as a reference customer as requested by Genesys. Except as set forth in a mutually agreed written public statement, Customer will not imply or state that Customer is affiliated with or endorsed by Genesys, publicize the existence of the Agreement, or disclose any of its terms.

12.2. Assignment. Neither party may assign its rights or obligations under the Agreement, either in whole or in part, except (1) with respect to a sale of substantially all of the assets of its business, merger, or change in the party’s ownership, or (2) with the prior written consent of the other party, which shall not be unreasonably withheld. Without limiting the preceding sentence, the rights and liabilities of the parties hereto shall bind and inure to the benefit of their respective successors and assigns.

12.3. Government Usage. This is a commercial item agreement. If the Services are acquired by or on behalf of the U.S. Government, a state or local government, or a prime contractor or subcontractor (of any tier) of the foregoing, such government customers and users shall obtain only those commercial license rights set forth in the Agreement.

12.4. Professional Services. Genesys will perform Professional Services on a time and materials basis unless otherwise stated in an SOW. Genesys shall control the manner by which the Professional Services are performed. Genesys reserves the right to make all staffing decisions in its sole and reasonable discretion. Customer shall make available at no charge all technical data, computer facilities, programs, files, documentation, test data, sample output, office space, equipment and other assistance as reasonably requested by Genesys in the performance of Professional Services. Genesys retains sole and exclusive ownership of all materials created in connection with its performance of the Professional Services, including but not limited to: methodologies, know-how, source and object code; specifications, configurations, designs, architecture, processes, techniques, concepts, discoveries, and, inventions made or developed (collectively, “PS Creations”), in addition to all Derivative Works of the foregoing. To the extent, and for any reason the foregoing statement of ownership is not effective, Genesys shall have a royalty-free, worldwide, transferable, sublicenseable, irrevocable, perpetual license to use, including the incorporation into the Genesys Cloud CX Service, all PS Creations. Unless otherwise set forth in the Statement of Work, Customer is hereby granted a license to use the PS Creations solely in connection with, and under the same provisions as, its use of the Genesys Cloud CX Services.

12.5. Survival: The provisions of the Agreement regarding payment, confidentiality, assignment, licenses, definitions, limitation of liability, intellectual property and any provision which by its nature should survive, will survive the termination of the Agreement. In the event that any provision of the Agreement is held to be invalid or unenforceable, the remaining provisions of the Agreement shall remain in full force.

12.6. Cumulative Remedies, Force Majeure and Injunctive Relief: All remedies available to Genesys will be cumulative and the specification of a remedy will not preclude Genesys from pursuing other remedies available at law, or in equity. Neither party will be responsible for acts of Force Majeure. Nothing in this Agreement will prevent Genesys from seeking immediate injunctive relief against Customer in the courts having jurisdiction over Customer.

12.7. Governing Law: This Agreement shall be governed by the laws set forth in Table 1 below, based on the Customer’s domicile, without reference to conflicts of law provisions. The parties agree to submit to the personal and exclusive jurisdiction of such courts and that venue therein is proper and convenient as set forth in Table 1. In the event more than one Genesys entity is or becomes a party the Agreement, the governing law shall be California and United States federal law; and, the California state courts in and for San Mateo County, California (or, if there is federal jurisdiction), the United States District Court for the Northern District of California, each of which shall have the personal and exclusive jurisdiction, which such jurisdiction is acknowledged to be proper and convenient. The UN Convention for the International Sale of Goods shall not apply to the Agreement in whole or in part. In any dispute under the Agreement, the prevailing party shall be entitled to recover its cost of enforcing its claim, including but not limited to attorney fees.

12.8. Authority to Execute: The party executing the Agreement on behalf of the parties represents and warrants that he or she has been duly authorized under the party’s charter documents and applicable law to do so.

12.9. Independent Contractors: The parties are acting as independent contractors. Nothing in the Agreement shall be construed to create a partnership, joint venture or agency relationship between the parties.

12.10. Third party beneficiaries: No third-party beneficiary relationships are created by this Agreement.

12.11. Notices: All notices under the Agreement shall be in writing and shall be deemed to have been given when (a) personally delivered; (b) sent by electronic facsimile transmission; or (c) sent by registered mail, postage prepaid (which notice shall be deemed to have been received on the third (3rd) business day following the date on which it is mailed) or (d) sent overnight by a commercial overnight courier that provides a receipt (which notice shall be deemed to be received on the next business day after mailing). Notices to either party shall be sent to the applicable address set forth in the preamble of the Agreement or such other address as a party may notify the other party of in writing.

12.12. Waiver: No provision of the Agreement may be waived unless such waiver is in writing and signed by the party against which the waiver is to be effective.

12.13. Complete Agreement; Amendment. The Agreement constitutes the complete agreement between the parties and supersedes all prior agreements and representations, written or oral, concerning the subject matter of the Agreement. In the event of a conflict between the terms of a Services Order and the other provisions of the Agreement, the terms of the Services Order shall take precedence; however, Sections 6, 8, 9, 10 and this section 12.13 of the Agreement may only be modified in the Services Order by a direct reference to such sections. The Agreement may not otherwise be modified or amended except in a writing signed by a duly authorized representative of each party. The terms of the Agreement shall supersede the terms in any Customer purchase order or other ordering document.

12.14. Execution; Digitized Copies. The parties agree that this Agreement may be executed by any means of signature, including electronic commerce or transmission, including facsimile, email, or acknowledgement through a webpage. The Agreement may be executed in two (2) or more counterparts, each of which is deemed an original, but which together constitute one contract or document. Signed digitized copies of the Agreement and other associated documents, including attachments and amendments shall legally bind the parties to the same extent as original documents.

12.15. Subcontracting. Genesys may subcontract certain portions of the Services under this Agreement to third parties, provided that Genesys shall be responsible for the performance of such subcontractors.

13. DEFINITIONS

Affiliate: A business entity that: (a) Controls the party; (b) is Controlled by the party; or (c) is under common Control with the party, but only during the time that such Control exists. For the purposes of this definition, “Control(led)” is the ability to determine the management policies of an entity through ownership of a majority of shares or by control of the board of management.

Confidential Information: Any information disclosed by one party to the other party, or otherwise learned by the recipient from the discloser, marked “confidential” or disclosed or learned under circumstances that would lead a reasonable person to conclude that the information was confidential. Notwithstanding the foregoing, Genesys Confidential Information includes but is not limited to the Services and the terms of this Agreement and Customer Confidential Information includes but is not limited to Customer Data. In addition, whether or not marked “confidential” or otherwise identifiable as confidential, the following information shall be deemed Confidential Information of the discloser: inventions, product development plans, education materials, pricing, marketing plans, and customer lists.

Confidentiality Period: The longer of: (i) three (3) years after termination of the Agreement, or (ii) indefinitely with respect to trade secrets, Customer Data, and the Services.

Customer Data: (a) all data submitted through the Genesys Cloud CX Service by Customer or Users; and (b) the non-anonymized content of any reports generated by the Genesys Cloud CX Service regarding Customer’s use of the Genesys Cloud CX Service.

Derivative Work: A new or modified work that is based on or derived from all or any part of the Services, including without limitation, a revision, modification, translation, localization, adaptation, abridgment, port, condensation or expansion, in any form, of the Services, or any work that would infringe any copyright if created without the authorization of the copyright holder or any other intellectual property right in the Services or that uses trade secrets or other Confidential Information embodied in or used by the Services.

Effective Date: The effective date of the Agreement, which shall be the date both parties have signed the Agreement.

Exclusions: are conditions that are deemed excluded from, and that terminate, Genesys’ warranty, defense or indemnity obligations, as follows: (i) use of Genesys Cloud CX Service in combination with any non-Genesys equipment, software, services, processes, data or materials; (ii) Customer’s non-compliance with this Agreement or Documentation; (iii) use of the Genesys Cloud CX Service after receipt of notice from Genesys to discontinue such use; (iv) the development or use of any alteration, derivation, modification or customization of the Genesys Cloud CX Service regardless of whether developed by Genesys, Customer, or any other person or entity and regardless of whether developed using any Genesys tools, methods or training; (v) Genesys’ compliance with Customer’s requests or instructions or the use of any materials provided by Customer; (vi) Customer’s business method(s) or process(es); (vii) Customer content or Customer Data.

Feedback: any suggestions, enhancement requests, recommendations, report, feedback, proposals, anonymized statistical data or other information concerning the Genesys Cloud CX Service provided by Customer to Genesys hereunder. Notwithstanding anything to contrary herein contained, in no event shall Feedback be deemed Customer Intellectual Property unless such Feedback existed on or before the Effective Date.

Force Majeure: Delays or failures on performance resulting from acts beyond the control of a party. Such acts include acts of God, provider blockades, denial of service attacks, strikes, lockouts, riots, acts of war, terrorism, epidemics, Laws effective after the Effective Date, fire, communication line failures, power failures, earthquakes or other disasters natural or man-made.

Genesys Cloud CX Service(s): The individual services and use of features and functionality of Genesys proprietary software and supporting facilities, all as further described in this Agreement and the Documentation, that are ordered by Customer by a Services Order. The term “Genesys Cloud CX Service” excludes Professional Services, Support and the use of Third-Party Applications.

Indemnify (and all forms of the word (e. g. Indemnification): Agreement to indemnify, hold harmless, and defend the other party and its Related Parties and from and against any and all third-party claims, demands, sums of money, actions, rights, causes of action, obligations, allegations and liabilities of any kind or nature whatsoever, and from any resulting liabilities, damages, losses, and costs (including, but not limited to, attorney fees and disbursements) arising from or relating, directly or indirectly, to the use, act, omission, or manner set forth as the subject of and giving rise to the claim.

Initial Subscription Term: The minimum term for the initial Subscription under each Services Order.

Intellectual Property Rights: Any and all technology, know-how, software, data, ideas, formulae, processes, charts, Confidential Information, and any other materials or information and any and all worldwide intellectual property rights (present and future) therein and thereto, including copyrights, trade secrets, patents, patent applications, moral rights, contract rights and other proprietary rights.

Law(s): Laws, statutes, regulations, directives, rules, standards and the like of any territorial division (e. g. federal, national, state, province, etc.).

Malicious Code: Viruses, worms, time bombs, corrupted files, Trojan horses and other harmful or malicious code, files, scripts, agents, programs, or any other similar code that may interrupt, limit, damage the operation of Genesys’ or another’s computer or property.

Professional Services (or PS): The professional services described in a Statement of Work executed by the parties.

Recordings: Recorded inbound or outbound Genesys VoIP Service transmission, performed by Customer, via the Genesys Cloud CX Service.

Related Parties: A party’s past, present and future officers, directors, employees, and other personnel, agents, insurers, reinsurers, servants, attorneys, parent company, subsidiaries and affiliates.

Renewal Term(s): Each subsequent term of a Services Order after the Initial Subscription Term. Each Renewal Subscription Term shall commence upon the anniversary date of the commencement of the Initial Subscription Term.

Security Features: The features and functionality associated with the Genesys Cloud CX Service used to help secure transmitted data. Security Features may include secure SIP/RTP, voice connection encryption, log masking, or other similar features.

Sensitive Information: All sensitive Customer Data, including but not limited to personal health information (PHI), personally-identifiable information (PII) and credit card information.

Services: The Genesys Cloud CX Service, Professional Services, Support and all related services provided under the Agreement.

Service Level Agreement: Genesys’ agreement to perform the Genesys Cloud CX Services in accordance with specific metrics, subject to a defined set of remedies as set forth in Sections 12 and 13 of the Supplemental Terms of this Agreement.

Services Order(s): The document by which Customer orders Genesys Cloud CX Services, or other goods and services that Customer may purchase from Genesys pursuant to this Agreement. Services Order shall include: (a) a description of items being ordered, including Subscription Term, and the quantity, (b) Fees, method of determining Fees, and pricing terms, (c) billing address; and (d) other addresses for the parties, if applicable. Genesys reserves the right to waive any or all of the aforementioned requirements either in writing or by fulfilment of the Order.

Subscription: Term-based grant, for a specified time to use a specific quantity and type of Genesys Cloud CX Service, all as described in the applicable Services Order. Subscriptions exclude services and expenses associated with decommissioning Customer’s use of the Genesys Cloud CX Service, migration of Customer Data, and storage and retrieval of records associated with Customer’s use of the Services.

Subscription Term: The Initial Subscription Term and all Renewal Subscription Terms.

Support: the maintenance and support of the Genesys Cloud CX Service, subject to the terms and policies set forth in Exhibit A of this Agreement.

Support Level: The applicable level of Support as selected by Customer and elected under the Services Order.

Taxes and Regulatory Fees: Any direct or indirect local, state, federal or foreign taxes, levies, duties or similar governmental assessments of any nature, including regulatory fees (such as USF), fines, penalties, value-added, use or withholding taxes. Taxes and Regulatory Fees shall not include charges based upon Genesys’ income or employees.

Term: Any term (time period) under the Agreement (e. g. Subscription Term, License Term).

Third-Party Applications: Third party or Customer-developed online, Web-based applications and offline software products that are provided by Customer or third parties, that may or may not interoperate with the Genesys Cloud CX Service.

Table 1. Governing Law, Jurisdiction, Notices.

GENESYS MASTER SUBSCRIPTION AGREEMENT

SUPPLEMENTAL TERMS: PURECONNECT

***CONFIDENTIAL***

THESE SUPPLEMENTAL TERMS ARE ENTERED INTO BETWEEN THE PARTIES TO THE LINKING SERVICES ORDER, SUBJECT TO THE TERMS AND CONDITIONS OF THE GENESYS MASTER SUBSCRIPTION AGREEMENT AND THE APPLICABLE ATTACHMENT THERETO. THE PARTIES FURTHER AGREE THAT EXECUTION OF THESE SUPPLEMENTAL TERMS MAY OCCUR BY ANY MEANS OF SIGNATURE, INCLUDING VIA ELECTRONIC COMMERCE OR TRANSMISSION, FACSIMILE, EMAIL, OR ACKNOWLEDGEMENT THROUGH A WEBPAGE. THESE SUPPLEMENTAL TERMS ARE SUPPLEMENTAL TO ANY TERMS OF THE AGREEMENT. ANY CAPITALISED TERMS USED IN THESE SUPPLEMENTAL TERMS WHICH ARE NOT OTHERWISE DEFINED HEREIN ARE AS DEFINED IN THE AGREEMENT. IN THE EVENT OF ANY CONFLICT BETWEEN THE SUPPLEMENT TERMS AND THE TERMS OF THE AGREEMENT, THESE SUPPLEMENTAL TERMS SHALL PREVAIL AND OPERATE TO VARY THE TERMS OF THE AGREEMENT. THESE TERMS ARE APPLICABLE TO PURECONNECT SERVICES ONLY.

In consideration of the mutual promises and obligations in these Supplemental Terms, the sufficiency of which is hereby acknowledged, the parties agree as follows:

1. Invoicing and Payment; Term

Upon Full Production, Customer will be billed for the annual commitment set forth in the Services Order (twelve times the monthly minimum set forth therein). Any usage over the monthly minimum will be billed monthly in arrears at the then current rate, unless set forth in the Services Order. Customer shall be responsible for any other monthly billing or fees set forth in the Services Order. Prior to Full Production, Customer will be billed monthly in arrears based on usage. Any Infrastructure Provisioning Fees shall be invoiced on the Effective Date.

The term of the Agreement shall commence upon the Effective Date and it shall continue for the duration of the Initial Subscription Term. The Initial Subscription Term will commence upon the Full Production date.

2. Equipment

Genesys may offer Equipment for resale or renting on a pass-through basis under limited circumstances. All Equipment is provided “AS-IS” without warranty of any kind and is excluded from the scope of any Genesys warranty or indemnification obligations. In the event Customer rents Equipment, Customer shall pay such Fees as reflected in the Services Order. Customer shall secure and protect rented Equipment at Customer’s location(s). In the event rented Equipment is lost, stolen or damaged, Customer agrees to reimburse Genesys for reasonable replacement costs. Upon termination of the Services Order, Customer will promptly return rented Equipment to Genesys in good condition, reasonable wear and tear excepted. Shipping terms are F.O.B. In the event Customer purchases Equipment from Genesys, Customer shall pay such Fees as reflected in the Services Order and title to such Equipment transfers to Customer upon full payment. Customer will retain purchased Equipment upon termination or expiration of the Agreement. Any other equipment or facilities required by Customer to access the Genesys Cloud CX Services will be provided by and paid for by Customer.

3. Communication Circuits

Customer is responsible for procuring the applicable Communication Circuits for use with Genesys Cloud CX Services. If set forth in the Services Order, Customer may procure access to Communication Circuits from Genesys subject to payment of associated installation charges (one-time, per circuit), and access fees (monthly). Communication-related Fees include any fees or charges imposed by third party carriers or service providers to install or initiate service for Customer (e.g., Communications Circuits installation fees).

4. Inbound and Outbound Long Distance Services

Customer is responsible for procuring the applicable communication services, including inbound and outbound voice, data, long distance and external network facilities for use with Genesys PureCloud Services. If set forth in the Services Order, Genesys will administer Customer’s access to domestic and international inbound and outbound long distance services from one or more telecommunication Providers in connection with Customer’s use of the Cloud Services. Except as otherwise set forth in the Services Order, long distance services are billed separately each month based on Customer’s usage, subject to a minimum access charges, plus applicable taxes.

5. Agent Training

Training is available subject to additional fees and expenses. As set forth in the applicable Services Order, Genesys will provide initial user training to Customer’s trainer and administrative Agents. Classroom or in-person training shall be conducted at a mutually acceptable location and date. Customer will cause one or more of its employees to attend “Train the Trainer” training prior to the planned Provisioning Date. Thereafter, Customer’s trainer will conduct user training for Customer’s Agents that are expected to commence use of the Genesys Cloud CX Services as of the planned Provisioning Date. Following the planned Provisioning Date, Customer’s trainer will provide user training on an ongoing basis to enable Customer’s Agents continued use and understand the functionality of the Genesys Cloud CX Services as appropriate for the Agents’ areas of responsibility.

6. Reports

Customer’s use of the Genesys Cloud CX Service may include access to certain reporting tools. Customer personnel that have completed required training can configure reporting tools. Customer may use and distribute Reports for Customer’s internal use only.

7. Workforce Optimization; Business Analytics

As set forth in the Services Order, the Subscription may include access and use of Genesys workforce optimization and business analytics software or tools, or adapters that integrate with third party workforce management tools (“WFO”). Customer is responsible for all decisions made using WFO and for determining whether WFO is sufficient for its needs. WFO Reports, including but not limited to forecasting, reflect estimates using certain categories of available historical data and generalized staffing or other projections which may not reflect or be otherwise suitable for Customer’s specific needs.

8. Support

Genesys will make the PureConnect Service available 24 hours a day, 7 days a week, except for: (a) occasional planned downtime at non-peak hours (for which Genesys will provide advance notice); or (b) any unavailability causes by circumstances beyond Genesys’ reasonable control, including failure or delay of Customer’s internet connection, misconfiguration by Customer or any third party, issues on Customer’s network, or telecommunications services contracted by or for Customer. The PureConnect Support Policy is attached here to as Exhibit A.

9. Data Security

Genesys security and privacy policies for the Genesys PureConnect Service, which are incorporated by reference, are attached hereto as Exhibit B. Customer shall comply with all applicable Genesys security guidelines, which shall be in accordance with industry standards. Customer is solely responsible for the content and legal sufficiency of its Customer Data.

10. Transition Services

Transition services to facilitate migration of the services to a replacement provider, to archive or migrate Customer Data, or to otherwise wind-down the services (“Transition Services”) are excluded from the scope of the Subscription. Genesys will make Transition Services available to Customer subject to the parties’ execution of a separate statement of work and Genesys’ then-current time and material rates. If Customer is in breach of the Agreement as of the Subscription termination date, Genesys may condition its performance of Transition Services upon Customer’s pre-payment in full for Transition Services and other outstanding amounts.

11. Definitions

As used in the applicable Services Order, SOW or these Supplemental Terms, capitalized terms shall have the meanings set forth below:

Agent: Customer’s Users who answer and place calls via a call center.

Communications Circuits: Data and voice communications circuits provided by one or more telecommunications service Providers for use with Genesys Cloud CX Services.

Concurrent User: The peak number of simultaneous Users at a point in time.

Data Center: means a data center where we house servers and other components used to deliver the PureConnect Service.

Equipment: Third party product provided on a pass-through basis without warranty from Genesys.

Full Production: The day upon which the earlier of the following occurs: (i) Customer reaches the agreed Minimum Monthly User/agent commitment counts as shown in the Services Order; (ii) Customer notifies Genesys of its intent to end the Ramp Period; or (iii) the Ramp Period expires.

Infrastructure Provisioning Fee: The Fee set forth in a Services Order due to be paid to Genesys by Customer in respect of the provisioning of the applicable Genesys infrastructure environment.

Live: The earlier of (a) the day in which there is at least one (1) User of the PureConnect Services in an environment capable of supporting the agreed Minimum Monthly User/agent commitment counts as shown in the Services Order, or (b) thirty (30) days after implementation completion (as described in the applicable SOW).

Minimum Monthly User: The minimum commitment that Customer has committed to, as set forth in the Services Order.

Named User: A billable named user is anyone that has logged in to the PureConnect service at least once during the billing period.

Ramp Period: The optional period of time (shown in the Services Order) not to exceed ninety (90) days, during which Customer will transition to Full Production. The default Ramp Period is zero (0) days if not specified. The Ramp Period will begin on the Live date.

Reports: operational and historical reports provided to Customer through a standard set of reporting templates or widgets, configured by Customer personnel, or developed by Genesys PS pursuant to a statement of work.

User: An individual who (i) is authorized by Customer; and, (ii) has been supplied a user identification and password(s) by Customer to access the Genesys Cloud CX Services on Customer’s behalf. A User may be a Concurrent User or Named User, as described in the Services Order.

Exhibit A

PureConnect Support Policy

1. Support Incident Priority Levels

Incidents will be categorized and handled according to an assigned severity level. The assigned severity level for a problem may be mutually determined by both parties during the problem resolution process, but Genesys Technical Support shall have final authority as to the actual designation. Genesys Technical Support uses commercially reasonable efforts to respond to each Support incident within the applicable response time and reach resolution of code red and high impact issues within the timeframes described in the table below.

Upon Customer request and with Customer cooperation, Genesys will make administrative moves, additions and/or changes (MACs) as follows:

1. The MAC will be scheduled during posted business hours and will be completed within twenty-four (24) business hours after receipt of the request.
2. All requests must be made using https://isupportweb.inin.com.
3. Customer will pay the amounts stated in the Order Form for MACs.

2. PureConnect Service Levels

1. “Hard Outage” means that the PureConnect Services cannot receive and route calls or place calls with the primary server, switchover server or via remote survivability. ““Planned Outage” and “Emergency Maintenance” mean downtime in the PureConnect Services for scheduled maintenance.
2. Excluding Planned Outages and Emergency Maintenance, Genesys will use best commercially reasonable efforts to provide at least 99.99% uptime of the PureConnect Services to support incoming and outgoing calls, three-hundred and sixty-five (365) days a year, twenty-four (24) hours a day. If the PureConnect Services do not meet the foregoing standards, Genesys will issue a Hard Outage credit to Customer equal to the applicable Credit Percentage shown below multiplied by the Monthly Cost of the Minimum Monthly Commitments for Genesys Software specified within the Order Form for the affected PureConnect Services:

3. The Uptime Percentage equals (1-(Total Minutes of Hard Outage/(# days in the month *1440)).
4. Code Red incidents due to customer managed equipment and/or applications (email server, web chat server, etc.) are excluded from Hard Outage credits.
5. In order to receive any Hard Outage credit, Customer must request the credit no later than thirty (30) days after the end of the month during which the credit was earned and must not be past due on any invoices. Customer will not be entitled to the Hard Outage credit if the failure was not caused by Genesys, including without limitation, failures caused by: (i) interruption in data or voice service (local or long distance) regardless of whether the provider is contracted by Genesys or by Customer; (ii) Customer’s internet connection, network, equipment, software (other than Interface Software), facility, databases or operator error; and (iii) alterations, modifications, configurations, or customizations of the Genesys Software, other than those undertaken and performed by Genesys. The Hard Outage credit is the Customer’s sole remedy for any failure to meet the PureConnect Service Level standards.

3. Support Policies

Additional support policies, procedures, and services will be described in the Customer Handbook. Genesys may modify this Support and Service Level Policy (any websites referenced in this Agreement) at any time by posting a revised version on the website and by otherwise notifying Customer. The modified terms will become effective upon posting or, if Genesys notifies Customer by email, as stated in the email message. By continuing to use the PureConnect Service after the effective date of any modifications to this Agreement, Customer agrees to be bound by the modified terms. Genesys last modified this Agreement on the date listed at the end of this Agreement. If such modification materially decreases any of Genesys’ obligations or the functionality of the PureConnect Service, Customer may terminate this Agreement. Genesys will have no obligation to take any action to correct a problem reported by Customer if Genesys determines that the problem: (i) arises from use of the PureConnect Services or Interface Software contrary to this Support and Service Level Policy or the documentation regarding the service provided to Customer by Genesys; (ii) arises from Customer’s use of the PureConnect Services or Interface Software in combination with equipment or third party software not certified by Genesys for use in combination with the PureConnect Services and Interface Software; or (iii) is not included in standard support services as defined in the PureConnect Customer Guide. At Customer’s request and Genesys’ discretion, Genesys may attempt to correct such problems at ’ then-current rates for such services. Support will be provided by telephone, web ticketing and remote access and does not include support at any Customer Site.

4. Equipment Maintenance.

Genesys’ support obligations include: (i) initial troubleshooting and issue isolation for issues with all Equipment used to provide the Genesys PureConnect Cloud Service, and (ii) maintenance services (installing version upgrades and patches) for the Genesys proprietary software on such Equipment.  However, Customer is responsible for: (i) assisting Genesys in troubleshooting and issue isolations for issues with Equipment on Customer’s site(s) or any Equipment controlled by customer in Genesys’ data centers (collectively “Customer-controlled Equipment”), and (ii) any software or hardware maintenance other than the Genesys proprietary software (examples: operating system, antivirus, etc.) on Customer-controlled Equipment.  Customer must ensure all Customer-controlled Equipment is compatible with all new versions of the Genesys proprietary software.

5. After Hours Support

After Hours support is subject to an additional charge of $250 per incident. A support request shall be considered After Hours if the support request is non-Critical and made on a holiday or outside the hours identified in Customer Handbook. Unless otherwise identified on the Order Form, Customer Time Zone shall be the time zone of the primary PureConnect data center serving the Customer.

6. System Maintenance

Refers to any system or infrastructure impacting change or update that has the potential to result in a brief momentary loss, impact, or reduction to the resiliency or functionality of the PureConnect Service.

1. Planned Maintenance – Planned maintenance shall not involve any activity that is anticipated to have a material or adverse effect on the live, operational functioning of the PureConnect Services.Genesys will provide Forty-eight (48) hours advanced notice prior to any planned maintenance event. Genesys will perform planned maintenance between the hours of 12:00 A.M. and 5:00 A.M. within the time zone of the Customer’s primary PureConnect data center.
2. Planned Outage – Planned outages involve any activities (operating system patches, service updates, equipment reboot etc…) which are anticipated to cause interruption to the operational functioning of the PureConnect Services.Genesys will provide Customer with at least two (2) weeks advanced posted notification and e-mail notice prior to conducting any planned outage. Additional email notification will be provided forty-eight (48) hours prior to any planned outage event. Genesys will perform planned outages between the hours of 12:00 A.M. and 5:00 A.M. within the time zone of the Customer’s primary PureConnect data center.
3. Emergency Maintenance – Emergency maintenance involves any activity (operating system patches, service updates, equipment reboot etc…) where Genesys may or may not be to anticipate an interruption to the operational functioning of the PureConnect Services.Email and/or telephone notification will be provided within forty-eight (48) hours of the emergency maintenance event. Due to the potential urgent nature of this type of maintenance, it is not always possible to perform emergency maintenance during normal maintenance periods.

7. Termination for Cause

1. Customer may terminate this Agreement for cause and without penalty if Customer experiences a failure of the PureConnect Services resulting in an Uptime Percentage of less than 98.000% in three (3) months during a rolling twelve (12) month period and, within thirty (30) days of such occurrence, Customer gives Genesys at least thirty(30) days written Notice of termination.

8. Network Assessment

For any VoIP implementation, Genesys requires Customer’s network to meet the following standards:

1. Quality of Services (“QoS”) must be enabled on all VoIP-related network devices and endpoints and configured in accordance with the QoS for the xIC Platform whitepaper.
2. Full Duplex must be enabled on all network devices.
3. RTP latency in one direction must be less than 150 ms for voice traffic.
4. RTP jitter must be less than 30 ms.
5. RTP packets must include highest markings for service priority queuing (ex. DSCP for Cisco devices).
6. Network segments must not exceed a packet loss rate of one percent (1%).
7. Network bandwidth must accommodate approximately 88kb/s for calls using audio codec G711 and 32kb/s for calls using audio codec G729 (not including overhead for VPN encryption/decryption, if applicable).
8. VLAN settings must be set in accordance with the QoS for the xIC Platform whitepaper.

If Genesys determines that Customer’s network does not meet these standards, Customer must rectify the failures. Customer will not be entitled to receive Hard Outage credits unless and until Customer’s network meets these standards. If the Customer chooses to engage Genesys to assist in rectifying the failures, Customer will pay Genesys at its current rates in accordance with the Order Form or a Statement or Work to perform a full network assessment. At any time if it is reasonably determined by Genesys that Customer’s network does not meet these standards, then any support provided as a result of the network inadequacy will be provided at the rates stated in the Order Form.

9. Reports

Genesys will provide an automated report to Customer within five (5) days after the end of each month showing all support incidents opened during that month including: (a) the incident number; (b) the date and time the incident was opened; (c) the Customer Site impacted; (d) close date/time for the fix or work-around; (e) the total Hard Outage time.

Definitions

Code Red – PureConnect’s operational ability to receive, route and deliver Customer purchased interaction services is ‘down’, severely degraded, or major components of the service are not operational and work cannot reasonably continue for greater than 10% of minimum monthly agent commitment as identified in the Order Form  (see column entitled “Minimum Monthly Commitment for Users/Item”). Interaction services which are ‘down’ or severely degraded due to Customer managed equipment and/or applications (email server, web chat server, etc.) are excluded from ‘Hard Outage credits.

High – Non-business critical features of the PureConnect Services are impaired or non-functional (for example: Interaction Supervisor, Interaction Recorder).

Medium – Non-disabling or cosmetic errors with little or no impact on the PureConnect Services.

Low – Requests for information on PureConnect Services, Policies, Processes, or Procedures from Supplier by members of Customer’s Business, Management, or technical staff teams.

Initial Response – The difference between the time an automated alert or Customer support request (phone or web ticket) is received by the Genesys service management system and the time it is assigned to a PureConnect Support representative within the service management system.

Mean Time to Restoration (MTTR) – Average duration of the outage from the time of an automated alert or customer reported incident.

 

Exhibit B

PureConnect Security Policy

This PureConnect Security Policy describes the minimum requirements for information security and data protection provided by Genesys to Customer in connection with the performance of the PureConnect Service under the Agreement, and to the extent that Genesys actually has access and control over Customer Data.  

1. Security Program

Genesys has implemented and will maintain an information security program that follows generally accepted system security principles embodied in the ISO 27001 standard designed to protect the Customer Data as appropriate to the nature and scope of the PureConnect Services provided.

Genesys currently hold the following certifications: SSAE-16 SOC2 Type II, ISO 27001 and ISO 9001.  A copy of the most current SSAE16 SOC2 attestation report and ISO certificates will be provided to Customer upon written request.

1. Security Awareness and TrainingGenesys has developed and will maintain an information security and awareness program that is delivered to all of its employees and appropriate contractors at the time of hire or contract commencement and annually thereafter.  The awareness program is delivered electronically and includes a testing aspect with minimum requirements to pass.
2. Policies and ProceduresGenesys will maintain appropriate policies and procedures to support the information security program. Policies and procedures will be reviewed annually and updated, as necessary.
3. Change ManagementGenesys will utilize a change management process based on industry standards to ensure that all changes to Customer’s environment are appropriately reviewed, tested, and approved.
4. Data Storage and BackupGenesys will create backups of critical Customer Data according to documented backup procedures. Customer Data will be stored and maintained solely on designated backup storage media within the Data Center(s). Backup data will not be stored on portable media. Customer Data stored on backup media will be protected from unauthorized access. Backup data for critical non-database production servers will be retained for approximately 30 days. Backup data for critical production database servers and transactional data will be retained for a minimum of 7 days.
5. Anti-Virus and Anti-Malware ProtectionGenesys will utilize industry standard anti-virus and anti-malware protection solutions to ensure that all servers in Customer’s PureConnect Service environment are appropriately protected against malicious software such as Trojan horses, viruses, and worms. The solution will be centrally managed and configured to ensure updates are applied in a timely manner.Genesys will use standard industry practice to ensure that the PureConnect Services as delivered to Customer does not include any program, routine, subroutine, or data (including malicious software or “malware,” viruses, worms, and Trojan Horses) that are designed to disrupt the proper operation of the PureConnect Services, or which, upon the occurrence of a certain event, the passage of time, or the taking of or failure to take any action, will cause the PureConnect Services to be destroyed, damaged, or rendered inoperable.  Customer acknowledge that the use of license keys will not be a breach of this section.
6. Penetration TestingOn at least an annual basis, Genesys will conduct a vulnerability assessment and penetration testing engagement with an independent qualified vendor.  Issues identified during the engagement will be appropriately addressed within a reasonable time-frame commensurate with the identified risk level of the issue.  A cleansed version of the executive summary of the test results will be made available to Customer upon written request and will be subject to non-disclosure and confidentiality agreements.
7. Vulnerability and Patch Management ProgramGenesys will maintain a vulnerability management program based on industry standard practices that routinely assesse the Data Center environment.  Routine network and server scans will be scheduled and completed on a regular basis. The scan results will be analyzed to confirm identified vulnerabilities, and remediation will be scheduled within a timeframe commensurate with the relative risk.Genesys will monitor a variety of vulnerability advisory services to ensure that newly identified vulnerabilities are appropriately evaluated for possible impact to the PureConnect Service. Critical and high risk vulnerabilities will be promptly addressed following the patch management and change management processes.
8. Data DestructionGenesys will follow industry standard processes for the secure destruction of Customer Data that becomes obsolete or is no longer required under the Agreement. Retired or decommissioned equipment that formerly held Customer Data and is scheduled for destruction will be securely destroyed using a qualified vendor who will provide a certificate of secure destruction.

2. Network Security

Genesys will employ effective network security controls based on industry standards to ensure that Customer Data is segmented and isolated from other customer environments within the Data Center.  Controls include, but are not limited to:

1. Segregated Firewall ServicesCustomer environments are segmented using physical and contextual firewall instances.
2. Network-based Intrusion Detection System (NIDS)Genesys has implemented industry standard network intrusion detection systems at Internet egress points across the PureConnect Service environment.
3. No Wireless NetworksWireless networks are not utilized within the Data Center environments.
4. Data Connections between You and the PureConnect Service EnvironmentGenesys uses SSL/TLS and/or MPLS circuits to secure connections between browsers, client apps, and mobile apps to the PureConnect Service.  Connections traversing a non-dedicated network (i.e. the Internet) will use SSL/TLS.
5. Data Connections between PureConnect and Third PartiesTransmission or exchange of Customer Data with Customer and any third parties authorized by Customer to receive the Customer Data will be conducted using secure methods (e.g. SSL/TLS, HTTPS, SFTP).
6. Encrypted RecordingsGenesys encrypts call recordings and chat sessions. Customer may elect to implement a unique password, known only to Customer, to protect the encryption keys used to secure the call recordings and chat sessions.
7. Encryption ProtectionGenesys uses industry standard methods to support encryption.  For asymmetric key encryption, Genesys uses RSA 2048 bit keys.  For symmetric key encryption, Genesys uses AES-128 bit keys.  For hashing, Genesys uses SHA1 and SHA2.
8. Logging and MonitoringGenesys will log security events from the operating perspective for all servers providing the PureConnect Service to Customer.  Genesys will monitor and investigate events that may indicate a Security Incident (as defined in Section 5) or problem.  Event records will be retained for 90 days.

3. User Access Control

Genesys will implement appropriate access controls to ensure only authorized users have access to Customer Data within the PureConnect Service environment.

1. Customer’s User AccessCustomer is responsible for managing user access controls within the application. Customer defines the usernames, roles, and password characteristics (length, complexity, and expiration timeframe) for its users. Customer is entirely responsible for any failure by itself, its agents, contractors or employees (including without limitation all of its users) to maintain the security of all usernames, passwords and other account information under its control. Except in the event of a security lapse caused by Genesys’ gross negligence or willful action or inaction, Customer is entirely responsible for all use of the PureConnect Service through its usernames and passwords whether or not authorized by Customer and all charges resulting from such use.  Customer will immediately notify Genesys if Customer becomes aware of any unauthorized use of the PureConnect Service.
2. Our User AccessGenesys will create individual user accounts for each of its employees or contractors that have a business need to access Customer Data or Customer systems within the PureConnect Service environment. The following guidelines will be followed with regard to Genesys user account management:

1. User accounts are requested and authorized by Genesys management.
2. Strong password controls are systematically enforced.
3. Connections are required to be made via secure VPN using strong passwords that expire every 90 days.
4. Dormant or unused accounts are disabled after 90 days of non-use.
5. Session time-outs are systematically enforced.
6. User accounts are promptly disabled upon employee termination or role transfer, eliminating a valid business need for access.

4. Business Continuity and Disaster Recovery

The PureConnect Service will be deployed and configured in a high-availability design and the PureConnect Service will be deployed across geographically separate Data Centers to provide optimal availability of the PureConnect Service.  The Data Center environment is physically separated from the Genesys corporate network environment so that a disruption event involving the corporate environment does not impact the availability of the PureConnect Service.

1. Business ContinuityGenesys will maintain a corporate business continuity plan designed to ensure that ongoing monitoring and support services will continue in the event of a disruption event involving the corporate environment.
2. Disaster RecoveryThe PureConnect Service will be deployed in a high-availability, geographically redundant design such that a disruption event at a single Data Center will trigger a system fail-over to the back-up Data Center to minimize disruption to the PureConnect Service.  Customer is responsible for defining specific parameters regarding fail-over.

5. Security Incident Response

Genesys will maintain a Security Incident response program based on industry standards designed to identify and respond to suspected and actual Security Incidents involving Customer Data.  The program will be reviewed, tested and, if necessary, updated on at least an annual basis.  “Security Incident” means a confirmed event resulting in the unauthorized use, deletion, modification, disclosure, or access to Customer Data.

1. NotificationsIn the event of a confirmed breach involving the unauthorized release or disclosure of Customer Data or other security event requiring notification under applicable law, Genesys will notify Customer within seventy-two (72) hours and will reasonably cooperate so that customer can make any required notifications in connection with such event, unless Genesys is specifically requested by law enforcement or a court order not to do so.
2. Notification DetailsGenesys will provide the following details regarding the confirmed Security Incident to Customer: (i) date that the Security Incident was identified and confirmed; (ii) the nature and impact of the Security Incident; (iii) actions already taken by Genesys; (iv) corrective measures to be taken; and (v) evaluation of alternatives and next steps.
3. Ongoing CommunicationsGenesys will continue providing appropriate status reports to Customer regarding the resolution of the Security Incident, continually work in good faith to correct the Security Incident and to prevent future such Security Incidents.  Genesys will cooperate, as reasonably requested by Customer, in order to further investigate and resolve the Security Incident.

6. Certification of Co-location Data Centers

Genesys contracts with third-party providers for Data Center colocation space.  Data Center providers and related services are reviewed on an annual basis to ensure that they continue to meet the needs of Genesys and its customers.  Each Data Center provider maintains certification based on their independent business models.  Security and compliance certifications and/or attestation reports for the Data Center(s) relevant to Customer’s PureConnect Service will be provided upon written request and may require additional non-disclosure agreements to be executed.

1. Physical SecurityEach Data Center is housed within a secure and hardened facility with the following minimum physical security requirements: (a) secured and monitored points of entry; (b) surveillance cameras in facility; (c) on-site access validation with identity check; (d) access only to persons on an access list approved by Genesys; (e) on-site network operations center staffed 24x7x365.
2. Environmental ControlsEach Data Center is equipped to provide redundant external electrical power sources, redundant uninterruptible power supplies, backup generator power, and redundant temperature and humidity controls.

7. Right to Audit

Customer or its designated representative will have the right to audit Genesys records and systems related to the performance of the PureConnect Service under this Agreement, upon ten (10) business days’ prior written notice. Genesys agrees to cooperate in good faith with Customer to determine and implement a mutually agreeable resolution to any significant concerns identified during any such audit. Any audits performed by Customer or its designated representatives under this Agreement shall be conducted a maximum of one (1) time during any twelve (12) month period during which this Agreement remains in force.  Audits will be conducted during normal business operating hours and will be conducted in a manner that minimizes any disruption to Genesys normal daily operations.

8. Privacy

Genesys has developed and will maintain a privacy program designed to respect and protect Customer Data under our control. Genesys will not rent, sell or otherwise share any Customer Data with outside parties. Customer Data will only be used or accessed for the purpose of providing the PureConnect Service. Genesys self-certifies compliance with the US-EU and US-Swiss Safe Harbor Frameworks.

9. Industry Specific Certifications

Genesys security and operational controls are based on industry standard practices and are certified to meet ISO 27001, ISO 9001, and SSAE16/ISAE3402 Service Organization Control (SOC) guidelines. Genesys will configure the solution and the PureConnect Service based on Customer’s specifications as defined in a mutually agreed upon Statement of Work (SOW); however Customer is solely responsible for achieving and maintaining any industry specific certifications required for its business (e.g. PCI DSS, HIPAA, GLBA, NIST 800-53, FedRAMP, etc.). 

Customer acknowledges that Genesys offers “Premium Services” designed to meet selected industry specific certifications within the Data Center environment, if required by Customer.  If an industry specific certification is required for Customer’s business relative to the PureConnect Service, Customer agrees to contract for the additional “Premium Services” required to meet the industry specific certification.  Customer will indemnify and hold Genesys harmless against any claim, fine, damage, or loss resulting from Customer’s breach of its obligations under this Section 9 (Industry Specific Certifications).  Customer further acknowledges that Genesys will not be liable for any unauthorized access to your Customer Data arising out of our compliance with your requests in connection with such Customer Data.

10. Premium Services

The standard security controls listed above meet industry standards and are sufficient for most customers.  Customers requiring a higher level of assurance may need to contract for additional “Premium Services”.

For an additional fee, Genesys will implement the following controls and procedures designed to meet the certification requirements of certain industry standards (PCI DSS, HIPAA, etc.) where appropriate for Customer PureConnect Service environment within the Data Center.

Additional controls will include, but may not be limited to:

1. Remote AccessGenesys authorized employees and contractors will require two-factor authentication to access Customer’s PureConnect Service environment within the Data Center.
2. Vulnerability and Patch ManagementGenesys will conduct quarterly vulnerability scans of Customer’s PureConnect Service environment within the Data Center.  Critical and high risk vulnerabilities will be addressed within 30 days, following the documented change management and patch management procedures.  Medium and lower risk vulnerabilities will be remediated within 90 days.
3. Logging and MonitoringGenesys will conduct reviews of infrastructure event logs on a daily basis.  Identified issues and concerns will be risk ranked and addressed according to documented vulnerability management procedures. Infrastructure logs will be maintained for one year, with 90 days availability on local storage.
4. Certification AuditsGenesys will contract with qualified third-party assessors to conduct industry specific certification audits of the PureConnect Service within the Data Center.  Certification audits will be conducted on an annual basis.  The resulting certification or executive summary of the audit report will be provided to Customer upon written request.

Genesys currently maintains PCI DSS 3.0 certification for a specific deployment model within the U.S. Data Centers located in Carmel, Indiana and Englewood, Colorado.  PCI certification does not extend to any other Data Center.