CORE & MAIN LP (#2027020) - Laserfiche WebLink

10 confidentiality obligations with respect to City Data shall survive termination or expiration of this Agreement. 27.Handling of City Data. In the event of a termination of this Agreement, Contractor shall implement an orderly return of City Data in CSV, XML, or another industry-standard, non-proprietary format mutually agreed to by the parties, at no additional cost to the City. Contractor shall complete the data return within sixty (60) days of the termination effective date, or such longer period as agreed in writing by the parties. During any period of service suspension or following notice of termination, Contractor shall not take any action to erase, delete, or otherwise render inaccessible any City Data for a minimum period of ninety (90) days after the effective date of termination, unless expressly authorized by City in writing. City shall be entitled to any post-termination assistance generally made available with respect to the Services, unless a unique data retrieval arrangement has been established as part of the Service Level Agreement (SLA), attached hereto as Exhibit F READy License and Hosting Agreement US. Contractor shall securely dispose of all City Data in all of its forms, including but not limited to cloud storage, local disk, removable media, backup systems, disaster recovery environments, and paper records, when requested by City. Data shall be permanently deleted and shall not be recoverable, according to National Institute of Standards and Technology (NIST) Special Publication 800-88 or successor guidelines. Contractor shall require the same of any sub processors or subcontractors who have had access to City Data. Certificates of destruction shall be provided to City within thirty (30) days of the destruction request. Data Retention. During the term of this Agreement, Contractor shall retain all City Data for a minimum of 13 months hourly usage values and daily values for 5 years through the software platform. Contractor shall maintain automated backups at intervals no less frequent than every four (4) hours. All backup and disaster recovery data shall be stored exclusively on servers located within the United States and shall be subject to the same security, access, and confidentiality requirements as production data. Data Location. All City Data, including production, backup, and disaster recovery copies, shall be stored exclusively on servers located within the United States. Contractor shall not transfer, process, or store City Data outside the United States without prior written consent of the City. Contractor shall notify the City in writing at least thirty (30) days prior to any change in data center location or hosting provider. 28.Cyber Security Incident. In the event a. Security Incident (as defined below) occurs with respect to City Data, user accounts, or any component of the AMI system, Contractor shall: a.Notification. Notify the City’s IT Director and designated City contact by telephone within twenty-four (24) hours of discovery of the Security Incident, followed by written notification within forty-eight (48) hours. The written notification shall include, to the extent known: the nature and scope of the incident, the categories and approximate number of records affected, a description of the measures taken or Docusign Envelope ID: D15BA154-47D3-8EAA-8171-B89F63E73DD1