EDGE TRACE, INC. (#2026402) - Laserfiche WebLink

● Vendor Access Controls: Time-limited, ticketed, MFA-required, fully logged Critical Security Measures: ● FIPS 140-2 cryptographic modules (AlmaLinux 9 FIPS mode) ● Encryption at rest (AES-256) and in transit (TLS 1.3/1.2) ● Role-based access control (RBAC) with least privilege ● Multi-factor authentication (MFA) required 3. STATEMENT OF WORK (17 pages) Implementation Timeline: 4 weeks from kickoff Phase Breakdown: ● Week 1: Planning, installation, hardware setup ● Week 2: Camera integration, Active Directory/SSO conﬁguration ● Week 3: Testing, validation, administrator & end-user training ● Week 4: Go-live support, acceptance testing, ﬁnal sign-off Deliverables: ● Rack Server Lite Appliance (leased hardware) ● EdgeTrace Vantage VMS soύware (licensed) ● Integration with up to 36 cameras ● SSO/Active Directory integration ● Administrator training (8 hours) ● End-user training (4 hours) ● Documentation package (Admin Guide, User Guide, Troubleshooting Guide) Acceptance Criteria: 27 speciﬁc criteria across hardware, soύware, integration, functionality, training, and performance (Section 5) Hardware Return: Upon contract termination, EdgeTrace provides pickup service (Bay Area) or prepaid shipping. Customer may sanitize drives per NIST 800-88 before return. Appendices: ● Appendix A: Acceptance Certiﬁcate (to be signed at go-live) ● Appendix B: Pre-Installation Checklist (Customer responsibilities) 4. SECURITY ADDENDUM (14 pages) Key Security Controls: Identity & Access Management (Section 1): ● SAML 2.0 and LDAP/Active Directory SSO ● 5 role types: Administrator, Investigator, Analyst, Viewer, Auditor ● Per-camera and per-case access restrictions ● Conﬁgurable session timeout (default: 30 minutes) Vendor Access Controls (Section 2): Docusign Envelope ID: 7C14E910-C8FB-4538-B7C4-4EC888D7DD0A