cicn_ex101.htm



Exhibit 10.1







 


UBS Master Agreement


 


between


 


Cicero Inc,


8000 Regency Parkway


Suite 542


Cary, NC 27518


 


(hereinafter referred to as ‘Supplier’)


 


 


and


 


UBS AG


 


677 Washington Boulevard


 


Stamford Connecticut


 


 


 (hereinafter referred to as ‘UBS’)


 


 


(each also referred to as ‘Party’ and together as ‘Parties’)


 







 


UBS Master Agreement





  





1/42












Exhibit 10.1










 









Table of contents




 



	1.	Subject of this UBS Master Agreement
	2.	Overview
	3.	Introduction
	4.	Products and Services
	5.	Payment and other financial provisions
	6.	Warranties
	7.	Intellectual Property
	8.	Intellectual Property Rights Infringement Indemnity
	9.	Remedies and Liabilities
	10.	Term and Termination
	11.	Confidentiality and Data Protection
	12.	Miscellaneous
	13.	Signatures
	14.	Exhibits





 




  





2/42












Exhibit 10.1








 



	
1.  

	
Subject of this UBS Master Agreement







 


This UBS Master Agreement is dated March 2, 2012.


 


The following terms and conditions shall govern the acquisition by UBS or a UBS Affiliate of any and all Services and/or Products from Supplier or a Supplier Affiliate.


 



	
2.  

	
Overview







 



	
2.1.  

	
The overall structure of this UBS Master Agreement and its Exhibits, the Schedules and their Annexes, and the Supply Orders and their Attachments is reflected in the diagram below.







 


missing1


 



	
2.2.  

	
The documents attached to this UBS Master Agreement are referred to as “Exhibits“. The documents attached to any Schedule are referred to as “Annexes“. The documents attached to any Supply Order are referred to as “Attachments“. This UBS Master Agreement together with any Exhibits form the “UMA”. The UMA together with any Schedule(s) form the “Master Agreement”. A Supply Order together with the UMA and the Schedule(s) listed in said Supply Order form an “Agreement”.







 



	
2.3.  

	
The UMA specifies the terms and conditions under which Supplier shall supply Services and/or Products to UBS and any UBS Affiliate worldwide as further specified in the relevant Schedules and Supply Orders. The terms and conditions relating to a Supply Order shall incorporate all of the provisions of the UMA and its relevant Schedule(s) together with any Special Terms contained in a Supply Order. Each executed Agreement will be a separate and divisible contract. If a Supply Order is executed by a UBS Affiliate, any reference to UBS in the Master Agreement shall - for the scope of the applicable Agreement - refer to the contracting UBS Affiliate and likewise if a Supply Order is executed by a Supplier Affiliate, any reference to Supplier in the Master Agreement shall - for the scope of the applicable Agreement - refer to the contracting Supplier Affiliate (and both UBS Affiliate and Supplier Affiliate accordingly as “Party“ or “Parties“).







 




  





3/42












Exhibit 10.1








 



	
2.4.  

	
To be valid, the UMA, any Schedule(s), and any Supply Order(s) must be signed by two UBS Authorized Personnel, where at least one is signed (or authorized) by SDM, and an authorized representative of Supplier.







 



	
3.  

	
Introduction







 



	
3.1.  

	
Interpretation







 



	
(a)  

	
In the UMA, its Schedules and Supply Orders unless the context otherwise requires:


 



“Acceptance” means written confirmation by UBS that Products, Services and/or Work Product(s) meet UBS’s acceptance criteria as specified in the relevant Schedule and/or Supply Order, and “Accepted” shall be construed accordingly;


 


“Affiliate” means any entity:


 




(i)  that controls a Party;




 



(ii)  that is controlled by a Party; or




 



(iii)  that is controlled by an entity that also controls a Party,


 



where “control” includes direct or indirect control;


 


“Agreement” shall have the meaning as defined in clause 2.2;


 


“Annex” shall have the meaning as defined in clause 2.2;


 


“Applicable Requirements” means all laws, regulations, governmental, quasi-governmental or regulatory rules, orders, decrees, guidelines,  codes of practice or technical, safety or other standards which are: (A) related to the provision or receipt of the Products and/or Services (B) related to acts undertaken (or required to be undertaken) in connection with the Master Agreement and/or Agreement, (C) referred to in the Master Agreement and/or Agreement or (D) of general application to Supplier, the Supplier Affiliates or Subcontractors and its/their business;


 


“Attachment” shall have the meaning as defined in clause 2.2;


 


“Business Day” means, unless provided otherwise in a Supply Order, any Monday to Friday throughout the year, except for holidays at the respective Location;


 


“Charges” means those fees payable by UBS to Supplier as set out in the relevant Schedule and/or Supply Order and/or depending on context, an invoice reflecting these;


 


“CID“ or “Client Identifying Data“ shall have the meaning defined in Exhibit 3 (Data Protection Exhibit);


 


“Confidential Information” means any business, employee, client or customer information or data which is disclosed to or otherwise comes into possession of a Party, whether before, on or after the date of the UMA, whether verbally, in writing, electronically or by any other means, or whether directly or indirectly as a result of the Master Agreement and/or any Agreement and which is of a confidential nature (including for the avoidance of doubt the existence and terms of the Master Agreement and/or any Agreement, any information relating to each party's business affairs, operations, products, processes, methodologies, formulae, plans, intentions, projections, know-how, intellectual property rights, trade secrets, market opportunities, suppliers, clients and customers, marketing activities, sales, software, computer and telecommunications systems, costs and prices, wage rates, records, finances and personnel).. Confidential Information shall in any case include Personal Data, CID and UBS Price Sensitive Information.  Except where otherwise agreed in writing by the Parties with all copies marked, Confidential Information does not include: manuals for released Products; data on the performance and scalability of the Product or the quality of the Services provided by Supplier.















 




  





4/42












Exhibit 10.1








 



	
 

	
“Contract Year” means, in the context of the Master Agreement a year which starts on the commencement date of the UMA as per clause 10.1 (a), or the anniversary of this date, or in the context of an Agreement a year which starts on the Effective Date of the relevant Supply Order, and in each case the final Contract Year shall be deemed to end on the date of termination or expiration of (as applicable) the Master Agreement or the relevant Agreement;


 



“Data Processor” shall have the meaning as defined in Exhibit 3 (Data Protection Exhibit);


 


 “Documentation” means any documentation, in any form, related to the Products or the Services including any specification, user manuals, systems manuals, operating manuals, programming manuals, physical planning guides and set up or installation guides;


 


“Effective Date” means the date when each Agreement shall come into effect;


 


 “Exhibit” shall have the meaning as defined in clause 2.2 (the Exhibits are listed in clause 14);


 


“Force Majeure Event” shall have the meaning as defined in clause 12.4;


 


“Hardware” means any hardware provided by Supplier under the respective Agreement;


 


“Intellectual Property Rights” mean, to the extent that any of the following are recognized in any jurisdiction, any intellectual property and/or proprietary rights in (A) patents and patent applications, (B) registered, unregistered or otherwise protected trademarks, trade names and service marks and protection from trademark dilution, (C) copyright and derivative works thereof, and other rights to works of authorship (whether registerable or not) including software (object and source code), and applications for registration thereof, (D) registered and unregistered designs rights and applications for registration thereof (E) database rights, semiconductor topography rights and proprietary data, (F) internet domain names and applications and reservations thereof, (G) proprietary and confidential information, trade secrets, and proprietary know-how not otherwise described in (A) through (F) above, (H) any and all common-law or equitable rights relating to any of the foregoing, (I) all other intellectual property and equivalent or similar forms of protection existing anywhere in the world and (J) all rights to obtain renewals, continuations, divisions or other extensions of legal protections pertaining thereto;


 


“Location(s)” means any UBS Site or Non-UBS Site at which the Services are to be performed or to which Products have to be delivered as specified in the relevant Supply Order;


 


 “Master Agreement” shall have the meaning as defined in clause 2.2;


 


“Non-UBS Sites” means any sites not owned or controlled by UBS or any UBS Affiliate specified in accordance with the relevant Supply Order at which the Services are to be performed;


 


“Personal Data“ shall have the meaning as defined in Exhibit 3 (Data Protection Exhibit);


 


“Pre-Existing Intellectual Property” means UBS Pre-Existing Intellectual Property and Supplier Pre-Existing Intellectual Property;


 


“Products” means any Hardware, Software or other goods provided by Supplier under the respective Agreement;


 


“Regulator” means any financial or other regulator (whether established by legislation or otherwise) having jurisdiction over UBS, any UBS Affiliate or Supplier, in any relevant territory;


 


“Restricted Country“ shall have the meaning as defined in Exhibit 3 (Data Protection Exhibit);


 


“Schedule” means a schedule of the UMA and any Annexes to such schedule, which form an integral part of the UMA and contain additional provisions specific to the nature of the Products and/or Services to be procured;


 


“SDM” means UBS's Supply & Demand Management organization;


 


“Services” means any services and Work Product(s) (if any) provided by Supplier and/or Staff under the respective Agreement (including consultancy services, software development, software support and maintenance, hardware maintenance or outsourcing services) as well as any warranty remedies provided by Supplier free of charge to UBS and/or the UBS Affiliates;


 


“Software” means any software program in object code or Source Code form provided by Supplier under the respective Agreement;









 




  





5/42












Exhibit 10.1








 



	
 

	
“Source Code” means in relation to any Software, (A) electronic and hard copy versions of the set of human readable, higher level programming language instructions or statements in which the Software was written; (B) any icons, graphics, sound files, database schemas, configuration files or other resources which form part of the Software and (C) any additional documents and information as UBS may reasonably require to maintain, modify, alter, upgrade, develop or enhance the Software or any part thereof;


 



“Special Term” means any provision which is contained in a particular Supply Order, which shall amend the UMA and/or the respective Schedule(s) for that particular Agreement only;


 


“Staff” means the natural persons who provide the Services on behalf of Supplier, who may be employees of Supplier or Subcontractors, self-employed or supplied by a Subcontractor or other third party (including a Supplier Affiliate);


 


“Subcontractor” means a person or entity providing elements of the Services to Supplier, including processing or storing UBS Data or other assets of UBS on behalf of Supplier arising from the Services, as listed in the relevant Supply Order or as otherwise agreed between the Parties in accordance with clause 4.4;


 


“Supplier” shall have the meaning as defined on page 1;


 


“Supplier Person” means an officer, agent, director, employee, contractor or advisor of Supplier, any Supplier Affiliate, or any Subcontractor;


 


“Supplier’s Pre-Existing Intellectual Property” means any output, whether electronic, documentary, tangible or intangible, the Intellectual Property Rights in which:









 




	
(i)

	
are owned by or licensed to Supplier prior to the delivery of the applicable Services to UBS, as modified and enhanced or which were developed by Supplier other than as a result of or in connection with the Master Agreement and/or any Agreement regardless of the date of creation; and









 



	

(ii)



	

are identified in writing as being owned by or licensed to Supplier on delivery of the same to UBS;









 



	
 

	
“Supply Order” means a separately and duly executed document and any Attachments thereto describing the Services, Products, Work Product(s) or any other deliverables to be provided by Supplier.


 



 “Supply Order Number” means the reference number for each Supply Order as assigned by the contract governance process or otherwise agreed between the Parties;


 


“Term” means the term of any Agreement as stated in the relevant Supply Order or which, in the absence of any expressly stated period, shall be the duration of any relevant Services, term of any license granted or the period until final Acceptance of the last Product to be delivered to or Work Product to be produced for UBS, as applicable, whichever is the later;


 


“UBS” shall have the meaning as defined on page 1;


 


“UBS Authorized Personnel” means such personnel of UBS, authorized to execute the Master Agreement and Supply Orders, such person or persons being listed in the relevant Schedule or notified to Supplier by UBS from time to time in accordance with clause 12.2;


 


“UBS Data” means all information and data (including Confidential Information) which is disclosed by UBS and/or UBS Affiliates to or otherwise comes into the possession of Supplier, its Affiliates or Subcontractors, directly or indirectly as a result of the Master Agreement and/or any Agreement;


 


“UBS Person” means an officer, agent, director, employee, contractor or advisor of UBS or any UBS Affiliate;


 


“UBS Policies” means all UBS policies, standards, guidelines and rules in force from time to time which UBS and/or any UBS Affiliate has communicated to any of Supplier or its Staff, and/or to any of Supplier Affiliate or its Staff in writing (including by way of a UBS Supplier Code of Conduct and/or posting on a UBS website (which UBS will provide a link to same) specifically for communicating UBS Policies that may be in place from time to time);









 




  





6/42












Exhibit 10.1








 



	
 

	
“UBS Pre-Existing Intellectual Property” means any output (including reports, documents, templates, studies, software programs in both source code and object code form, specifications, business methods, tools, methodologies, processes, techniques, analytical frameworks, algorithms, know-how, processes, products documentation, abstracts and summaries), whether electronic, documentary, tangible or intangible, provided by UBS and/or any UBS Affiliate to Supplier to assist in the performance of the Services, the Intellectual Property Rights in which are owned by or licensed to UBS or any UBS Affiliate;


 



“UBS Price Sensitive Information” means any of the following information: unpublished information (i.e. information which has not been disseminated to the public via a broad means, such as the news media, press releases, financial publications, wire services or public disclosure statements), which relates, directly or indirectly to a particular security, debt security or other financial instrument of any kind and any related derivative or to a particular legal entity or other party which has power to issue or has issued security, debt security or other financial instrument of any kind and any related derivative or a shareholder or officer of that legal entity and not to security, debt security or other financial instrument of any kind and any related derivative, is specific or precise and would reasonably be expected to have a material effect on the market price of those security, debt security or other financial instrument of any kind and any related derivative or on the market price of related security, debt security or other financial instrument of any kind and any related derivative, if published. It includes non-public CID and information in respect of a company’s profit projections, dividend intentions, forthcoming issues (whether primary or secondary), potential bids or corporate restructuring. It also includes UBS internally-generated information such as the intentions and dealings of fund managers, market makers’ positions, pre-publication research recommendations, etc.;


 


“UBS Sites” means UBS’s sites or those of any UBS Affiliate specified in accordance with the relevant Agreement at which the Services are to be performed or the Products delivered to;


 


“UBS Software” means any software owned by or licensed to UBS or a UBS Affiliate not provided by Supplier hereunder;


 


“UBS Systems” means any software, hardware, telecommunications or other systems or equipment owned by or licensed / leased or provided as a service by a third party to UBS or a UBS Affiliate;


 


“UMA” shall have the meaning as defined in clause 2.2;


 


 “Wholly Owned Affiliate” means an Affiliate of Supplier, which Affiliate is (in each case either directly or indirectly) a wholly owned subsidiary entity of Supplier, an entity which wholly owns Supplier, or a wholly owned subsidiary entity of an entity which wholly owns Supplier; and


 


“Work Product(s)” means all output whether electronic, documentary, tangible or intangible created as a result of the Services required to be undertaken by Supplier, including (without limitation), all inventions, discoveries,  business methods, papers, documents, memos, letters, databases, drawings, source code, object code, data dictionaries, user manuals, data or other deliverables, or other printed, written or computer material created by Supplier, any Subcontractor and/or Staff in connection with the provision of the Services;









 



	
(b)  

	
In the Master Agreement and/or any Agreement, a reference to a statute or statutory provision includes:







 



	
(i)

	
any subordinate legislation made under it; and







 



	
(ii)

	
any statute or statutory provision which modifies, consolidates, re-enacts or supersedes it.







 




  





7/42












Exhibit 10.1








 



	
(c)  

	
A reference in the Master Agreement and/or any Agreement to:







 



	
(i)

	
the singular includes the plural and vice versa and words in one gender include both genders;







 



	
(ii)

	
any Party includes its successors in title and permitted assignees; and







 



	
(iii)

	
an “entity” includes any individual, firm, body corporate, association or partnership, government or state (whether or not having a separate legal personality).







 


 



	
(d)  

	
To the extent of any conflict, the various parts of the Master Agreement and Agreement shall prevail over each other as follows:







 



	
(i)

	
the provisions of the UMA shall take precedence over the provisions of the Schedules and the Supply Orders unless, and to the extent that:







 



	
1.  

	
a Schedule expressly states the contrary intention by explicit cross reference to the affected provision(s) of the UMA (and in any case, the provisions specific to the type of Products or Services governed by the respective Schedule shall not be deemed to be conflicting solely due to the omission of such specifics in the UMA); or







 



	
2.  

	
a Supply Order expressly sets forth the terms which are intended to prevail over those in the UMA, in the Special Terms section of such Supply Order, and such Supply Order is duly signed by both Parties; and







 



	
(ii)

	
the provisions of a Schedule shall take precedence over the provisions of a Supply Order unless, and to the extent that a Supply Order expressly sets forth the terms which are intended to prevail over those in the Schedule, in the Special Terms section of such Supply Order, and such Supply Order is duly signed by both Parties.







 



	
(iii)

	
the provisions of any Supply Order shall prevail over any Attachments.







 



	
(e)  

	
The Master Agreement and/or any Agreement overrides and takes the place of any other terms or conditions emanating from or referred to by Supplier or UBS in relation to the subject matter of the Master Agreement and/or any Agreement, including any terms and conditions printed on Supplier’s invoices and/or on UBS’s purchase orders. Additionally, any documents referenced by Supplier in a Supply Order or an Attachment (e.g. reference to any web page) are only valid if duly signed by UBS and attached to the Supply Order or Attachment.







 



	
(f)  

	
In the Master Agreement and the Supply Orders the use of the term “include” or its derivatives means “including without limitation”.







 



	
3.2.  

	
Severability


 



To the extent that any provision of the Master Agreement and/or any Agreement is found by any court or competent authority to be invalid, unlawful or unenforceable in any jurisdiction, that provision shall be deemed not to be a part of the Master Agreement and/or the respective Agreement, and such finding shall not affect the enforceability of the remainder of the Master Agreement and/or the respective Agreement nor shall it affect the validity, lawfulness or enforceability of that provision in any other jurisdiction. Any such invalid, unlawful or unenforceable provision shall be deemed replaced with a valid, lawful and enforceable provision as similar to the invalid provision and its original purpose as possible by law.









 



	
3.3.  

	
Governing Law and Jurisdiction


 



The Master Agreement and, unless expressly provided otherwise therein, any Agreements concluded under the Master Agreement, this Agreement shall be governed and construed in accordance with the laws of the state of New York, without reference to its conflicts rules.  In no event will this Agreement be governed by and the parties explicitly agree to opt out of the Uniform Computer Information Transactions Act.  If the parties fail to resolve the dispute in accordance with the procedures set out in clause 12.3, the parties irrevocably agree that the state and federal courts located in New York shall have exclusive jurisdiction to settle any disputes which may arise out of or in connection with this Master Agreement and/or any Agreements.  Supplier (including for the avoidance of doubt its Affiliates) waives any objection to proceedings in any such courts on the ground of venue or on the ground that the proceedings have been brought in an inconvenient forum.









 



	
3.4.  

	
Entire Agreement







 



	
(a)  

	
The Master Agreement and/or any Agreements set out the entire agreement and understanding between the Parties with respect to its subject matter and supersede:







 



	
(i)

	
all previous agreements, promises, proposals, representations, understandings and negotiations, whether written or oral, between such Parties pertaining to such subject matter, and







 



	
(ii)

	
all terms of any “shrink-wrap“, “click-wrap“ or “web-wrap” agreements, terms of service or terms of use or different or additional terms and/or conditions presented with, online, or incorporated into any Products, Services, Work Product(s) or  invoices, whether (i) and (ii) above are with a UBS Affiliate and/or Supplier Affiliate. However, unless expressly stated to the contrary, the Master Agreement and/or Agreement are not to supersede, or otherwise change, the Parties respective rights and duties under any previously executed written agreement between them or their Affiliates relating to any transactions outside of the scope of the subject matter set forth in the Agreement. 







 




  





8/42












Exhibit 10.1








 



	
(b)  

	
Each Party acknowledges that it has entered into the Master Agreement and any Agreement in reliance only upon the representations, warranties and promises specifically contained or incorporated in the UMA, the relevant Schedule(s) and Supply Order and, except as expressly set out or referred to herein or in the relevant Agreement, each Party shall have no liability in respect of any other prior representation, warranty or promise unless it was made fraudulently.







 



	
3.5.  

	
Relationship of the Parties







 



	
(a)  

	
The Parties acknowledge that they are independent contractors. Nothing in the Master Agreement and/or any Agreement shall render any member of the Staff an employee, agent or partner of UBS or any UBS Affiliate and no member of Staff shall hold themselves out as such. Both Parties declare that they have no intention, for any purpose whatsoever, to form a corporate, corporate-like or other partnership. UBS shall not be liable for any of the acts or omissions of Supplier and/or the Staff.







 



	
(b)  

	
Supplier shall be solely responsible for the payment of compensation of its Staff, and for any worker’s compensation, disability benefits, unemployment insurance, withholding or employment-related taxes and visa costs for Staff. Supplier shall inform its Staff that they are not entitled to the provision of any UBS employee benefits.







 



	
(c)  

	
In the event that the Master Agreement and/or any Agreement authorizes Staff to interact with third parties, whether orally or in writing, on behalf of UBS, Supplier shall ensure that the Staff shall present themselves as acting on behalf of UBS (or such other manner of presentation as UBS may specify in the Master Agreement and/or any Agreement, including in any applicable UBS Policy, or as notified by UBS from time to time) and not as employees of UBS.







 



	
3.6.  

	
Third Party Rights







 



	
(a)  

	
Any UBS Affiliate that receives, directly or indirectly, Products or Services under an Agreement, whether or not named in that Agreement, may enforce the terms of that Agreement.







 



	
(b)  

	
Supplier or any Supplier Affiliate's sole right of action under a Supply Order against UBS (including for the avoidance of doubt its Affiliates) shall be against the UBS entity that entered into such Supply Order.







 



	
(c)  

	
Except for UBS Affiliates, no third party may enforce the terms of the Master Agreement and/or any Agreement. The Master Agreement and/or any Agreement may nevertheless be varied by the relevant Parties without the consent of any third party.







 



	
4.  

	
Products and Services


 




The following provisions apply where the Parties wish to provide for the Master Agreement and any Agreement to cover the supply of Products or the provision of Services to UBS and UBS Affiliates. The Products and Services may be received and used by UBS, any UBS Affiliate and any other person or entity authorized by UBS or UBS Affiliates to receive and/or use the Products and Services, in UBS’s and each UBS Affiliate’s sole discretion.









 



	
4.1.  

	
Ordering







 



	
(a)  

	
With respect to each country or group of countries, if applicable, the Parties may at any time request a Supply Order to be executed (and therefore an Agreement to be entered into) by







 



	
(i)

	
the appropriate Supplier Affiliate(s), (provided that such Affiliate is a Wholly Owned Affiliate) to provide and/or







 



	
(ii)

	
the appropriate UBS Affiliate(s) to receive







 


Products and/or Services pursuant to the Master Agreement and/or any Agreement. Any such Supply Order may set forth any supplementary provisions either (A) required by local law (“Local Law Matters“) or (B) any Special Terms appropriate due to the circumstances.


 




  





9/42












Exhibit 10.1








 



	
(b)  

	
To be valid, any Supply Order must be assigned a Supply Order Number (and signed by two UBS Authorized Personnel, where at least one is signed (or authorized) by SDM, and an authorized representative of Supplier, as set forth in clause 2.4). Each Supply Order (including any Special Terms) so executed will, together with the UMA and the relevant Schedule(s), form an Agreement which shall be effective no later than upon the commencement of the delivery of Products or the provision of Services. UBS shall not be liable to pay any Charges for Services or Products provided by Supplier under an improperly authorized Supply Order. In the event that Supplier has any doubt as to whether a Supply Order has been authorized properly, Supplier shall discuss the matter with UBS’s manager prior to commencing the Services or providing the required Products in respect of the relevant Supply Order. If Supplier proceeds with performing the Services or providing the Products and has not clarified the validity of a Supply Order, then the performance thereunder shall be at Supplier’s sole expense until such Supply Order has been validated. UBS may issue system-generated, electronic purchase orders for the supply of Services or Products. The details with regard thereto shall be specified in the applicable Schedule(s) and/or Supply Orders.







 



	
(c)  

	
UBS may propose changes within the general scope of the Master Agreement and/or any Agreement at any time or as necessary to reflect the specific legal requirements and business practices from time to time applicable in the relevant jurisdiction in order to produce the legal and business result intended by the Parties. If any such change causes an increase in the cost of performance to Supplier or time required for such performance, the Parties shall negotiate reasonably and in good faith for an equitable adjustment to the Charges and timeframes, in line with any specific procedure or process which may be set out in the relevant Schedule and/or Supply Order. Upon receiving a notice or request from UBS, Supplier shall (at no additional cost to UBS) promptly submit to UBS a change in scope proposal which shall outline in detail the required changes to the scope of the Services and associated impact on the Charges. Any such changes must be agreed by both Parties in writing in accordance with clause 12.7.







 



	
4.2.  

	
Location







 



	
(a)  

	
If Services are performed at UBS Sites, Supplier confirms that it will inspect them without delay and:







 



	
(i)

	
notify UBS if such UBS Sites are not adequate to allow Supplier to perform the Services in accordance with the terms of the applicable Agreement; or







 



	
(ii)

	
promptly raise and discuss with UBS any additional accommodation and/or facilities that it reasonably requires to perform the Services in accordance with the terms of the applicable Agreement.







 



	
(b)  

	
To the extent required for the provision of Services, UBS shall allow the Staff to enter the UBS Sites during each day that such sites are open during reasonable business hours for the purposes of providing the Services and at other times on reasonable notice and with UBS’s prior written consent. UBS may revoke or suspend such permission in part or in whole including in respect of certain UBS Sites only and/or in respect of certain individuals or classes of individuals only. Supplier agrees that its use of any UBS Site is permitted solely on the basis that it has no right in the form of a lease, continuing license or tenancy and that it does not have any right of sole use or possession of any UBS Site or any part thereof. Other than for UBS Sites, Supplier shall secure, as applicable, all Location leases, licenses, authorizations and permits and will work with the building management company, at Supplier's sole cost and expense, to secure and maintain the same for the Term of the relevant Agreement.







 



	
(c)  

	
Supplier shall, whenever the Staff are present on the UBS Sites, require such Staff to adhere to the reasonable instructions of representatives of UBS and to observe any conditions, policies or procedures applicable to them from time to time, as communicated to Supplier or any Supplier Affiliate or the affected Staff. For the avoidance of doubt, without limitation to the generality of the foregoing, any conditions, policies or procedures communicated to Supplier shall be deemed communicated to all Supplier Affiliates and Subcontractors and all Staff under any Agreement. Upon reasonable request of UBS, Supplier shall arrange for all or any specific individual or class of Staff, whether on or off UBS Sites, to sign any related acknowledgements as are set forth by UBS indicating that such Staff will comply with such conditions, policies or procedures.







 



	
(d)  

	
Insofar as the Services are performed at Non-UBS Sites:







 



	
  

	
(i)

	
where a Non-UBS Site proposed by Supplier is, in the reasonable opinion of UBS, unsuitable for the provision of the Services, UBS shall promptly notify Supplier; or







 




  





10/42












Exhibit 10.1








 



	
  

	
(ii)

	
where a Non-UBS Site proposed by UBS is, in the reasonable opinion of Supplier, unsuitable for the provision of the Services, Supplier shall promptly notify UBS,







 


and, in either case, Supplier shall, if requested by UBS, find an alternative Non-UBS Site acceptable to UBS.


 



	
(e)  

	
Supplier shall







 



	
(i)

	
obtain UBS's prior written approval of any relocation of a Supplier Location set forth in the relevant Supply Order (“Supplier Location“);







 



	
(ii)

	
bear all of its costs of relocation of any Supplier Location; and.







 



	
(iii)

	
reimburse UBS for the costs it incurs in connection with any such Supplier Location relocation, including any security audit thereof.







 



	
4.3.  

	
Notification







 


Supplier shall promptly notify:


 



	
(i)

	
UBS on becoming aware that Supplier, a Supplier Affiliate or a member of Staff or its Subcontractor is in breach of any obligations under the Master Agreement and/or any Agreement, including any failure to comply with any Applicable Requirements or UBS Policies; and







 



	
(ii)

	
UBS on becoming aware of any management issues, security problems, system failures and other developments which have or may have a material impact on Supplier’s ability to provide the Services or supply the Products and comply with its obligations in the Master Agreement and/or any Agreement;







 



	
(iii)

	
any UBS Affiliate of the existence of the Master Agreement (with a copy to UBS) if Supplier is, during the term of the Master Agreement, discussing the provision to the respective UBS Affiliate of products and/or services similar to those provided under the Master Agreement.







 



	
4.4.  

	
Subcontracting







 



	
(a)  

	
Supplier may use Subcontractors (including Supplier Affiliates), provided that UBS’s written consent is first obtained, whether or not the Subcontractor is already in place at the Effective Date. No subcontracting shall in any way relieve Supplier from its obligations to provide the Services and Supplier shall at all times remain liable for any Subcontractor’s performance of Services under the Master Agreement and/or any Agreement in accordance with its terms as if such Subcontractor were Supplier.







 



	
(b)  

	
UBS is not responsible for the selection, instructions to and control of the Subcontractors by Supplier.







 



	
(c)  

	
Any permitted subcontract shall include:







 



	
(i)

	
a representation that all Subcontractor personnel are employees of such Subcontractor for tax and employment law purposes;







 



	
(ii)

	
the right for Supplier to terminate such subcontract with respect to the Services upon request by UBS if any deficiency in such Subcontractor’s performance is not corrected to the reasonable satisfaction of UBS within 30 days of notice thereof;







 



	
(iii)

	
a provision requiring such Subcontractor to protect Confidential Information in accordance with the requirements of the Master Agreement and/or any Agreement, for the benefit of UBS and its Affiliates;







 



	
(iv)

	
a representation that the Subcontractor has all necessary Intellectual Property Rights to supply the Services to UBS in accordance with the requirements of the Master Agreement and/or any Agreement;







 



	
(v)

	
assignment of all rights to UBS (in accordance with clause 7.2) in any Work Product, deliverables, software, documentation, or other materials provided by such Subcontractor, in accordance with the Master Agreement and/or any Agreement;







 



	
(vi)

	
a provision preventing the Subcontractor from subcontracting any of the Services subcontracted to it without the prior written consent of UBS; and







 




  





11/42












Exhibit 10.1








 



	
(vii)

	
an obligation to maintain insurance to the levels required of Supplier as set out in clause 12.5; and







 



	
(viii)

	
any other terms reasonably specified by UBS.







 



	
(d)  

	
UBS and its Affiliates shall be specified as a third party beneficiary of any such subcontract and such subcontract shall contain the right for UBS (at its option), to directly enforce any obligations contained in such subcontract that deal with the protection of Confidential Information or the assignment of Intellectual Property Rights. Supplier shall take all actions to ensure that where its Subcontractors are responsible for any obligations dealing with the protection of UBS’s Confidential Information or the assignment of Intellectual Property rights, such Subcontractors shall execute directly with UBS, such confidentiality and/or rights assignment agreements as UBS deems appropriate to establish direct privity of contract with such Subcontractors, permitting UBS and it Affiliates to assert in its/their own name and for its/their own benefit, any claims alleging an improper disclosure of UBS Confidential Information or violation of UBS Intellectual Property rights by such Subcontractor. Until Supplier has complied with this provision, UBS may reject the affected Subcontractors even in case of prior approval by UBS.







 



	
(e)  

	
Supplier shall be solely responsible for ensuring its Subcontractors’ full compliance with all relevant terms and conditions of the Master Agreement and any relevant Agreement applicable to Staff. Supplier shall be solely responsible for all payments to its Subcontractors including any applicable taxes. A Subcontractor may not claim performance of any obligation, any taxes, compensations, expenses and similar directly from UBS; vice versa UBS may not claim performance directly from the Subcontractor (except as set out in clause 4.4(d)), however UBS may be entitled to place Service requests and give instructions to a local Subcontractor as agreed in the relevant Supply Order and for the avoidance of doubt Supplier shall remain responsible for the performance of the relevant Agreement.







 



	
4.5.  

	
Supplier Staff Confidentiality / Data Protection







 



	
(a)  

	
Supplier must ensure that the Staff are made aware of the confidential nature of Confidential Information and that they are reminded of their duties of confidentiality pursuant to their contracts of employment or their contracts for services, as the case may be. Supplier shall ensure that, if requested by UBS, any Staff accessing Confidential Information shall sign the Declaration of staff member regarding data protection / privacy and client confidentiality / bank secrecy obligations as attached as Exhibit 2. UBS shall have the right to request written proof of these documents at any time for retention in UBS’s files.







 



	
(b)  

	
Without prejudice to the generality of Clause 4.5(a), UBS shall be entitled to require that Supplier procures that a member of Staff executes the Declaration of staff member regarding data protection / privacy and client confidentiality / bank secrecy obligations in the language of the Location in which the relevant member of Staff is located for the purposes of providing the Services, in the form provided to Supplier from time to time or as provided to the relevant member of Staff. In these circumstances, the Declaration of staff member regarding data protection / privacy and client confidentiality / bank secrecy obligations in the respective local version shall prevail over the version attached as Exhibit 2.







 



	
5.  

	
Payment and other financial provisions







 



	
5.1.  

	
Payment







 



	
(a)  

	
Unless expressly stated otherwise in the respective Supply Order or the applicable Schedule, all sums due to Supplier under any Agreement shall be payable by UBS (or the UBS Affiliate specified in the respective Supply Order) by check or by electronic bank transfer within 45 days of receipt of a correct and properly due invoice. Any invoice shall state the following information together with all other information specified in the affected Supply Order:







 



	
(i)

	
the title, contract number and Effective Date of the relevant Supply Order;







 



	
(ii)

	
an invoice number, and invoice issue date;







 



	
(iii)

	
the name and address of the respective UBS manager;







 



	
(iv)

	
a description sufficient to identify of the relevant Products and/or Services;







 




  





12/42












Exhibit 10.1








 



	
(v)

	
Supply Order Number (where applicable);







 



	
(vi)

	
the period to which the invoice relates;







 



	
(vii)

	
Supplier’s bank account for payment;







 



	
(viii)

	
Charges and any applicable taxes and rates of tax;







 



	
(ix)

	
Location where the Products were delivered and/or the Services were performed;







 



	
(x)

	
Supplier's address from which the supply was made;







 



	
(xi)

	
Data Universal Numbering System (DUNS) Number;







 



	
(xii)

	
Ultimate DUNS Number; and







 



	
(xiii)

	
Tax Identification Number.







 



	
(b)  

	
All invoices shall be sent to the address specified in the relevant Supply Order or as may otherwise be notified to Supplier by UBS in writing.







 



	
(c)  

	
All invoices received may be processed worldwide by UBS, its Affiliates and/or third parties. By virtue of accessing and processing the invoices abroad, UBS will have to disclose the data provided on the invoices, including the banking relationship with UBS (if any) and the account number to the UBS Affiliates and/or third parties involved in the invoice processing (including auditing). As a consequence, the data provided on the invoices will be subject to the laws and regulations of the jurisdictions where the processing will take place. Foreign laws and regulations may oblige UBS to provide access to this data to relevant authorities.







 



	
(d)  

	
In the event that UBS has a bona fide dispute in relation to all or any portion of an invoice submitted by Supplier, UBS may withhold payment of the amount subject to the dispute, provided that:







 



	
(i)

	
UBS will notify Supplier in writing within thirty (30) days of receipt of invoice of such dispute.







 



	
(ii)

	
UBS shall continue to pay the undisputed amount when it becomes due and payable in accordance with the terms of the Master Agreement and/or the affected Supply Order; and







 



	
(iii)

	
Supplier shall continue to perform its obligations under the Master Agreement and the affected Supply Order.







 



	
(e)  

	
The Parties shall resolve the dispute in accordance with the procedures set out in clause 12.3. It shall not be a breach of the Master Agreement and/or any Agreement for UBS to withhold charges which are the subject of a dispute.







 



	
5.2.  

	
Expenses







 


Unless expressly specified in the relevant Supply Order, all sums due to Supplier shall be inclusive of any expenses (including travel and accommodation) Supplier may incur in connection with the Master Agreement and/or Agreement.


 



	
5.3.  

	
Taxes







 



	
(a)  

	
Taxes in the Master Agreement and/or any Agreement include all sales, import or other taxes or duties, any value added taxes or other similar taxes and the like, which may be chargeable by the Supplier to UBS as a result of the Master Agreement and/or any Agreement.







 



	
(b)  

	
All prices mentioned in connection with the Master Agreement and/or any Agreement are exclusive of any taxes (if any).







 



	
(c)  

	
UBS shall pay all applicable taxes to Supplier, except where they are only due because of a formal or material fault by Supplier. Supplier shall be fully responsible for collecting and, subsequently remitting all VAT, sales, use, import, withholding or other taxes or duties that Supplier is legally obligated to collect and remit to applicable taxing jurisdictions.







 



	
(d)  

	
If un


der any Applicable Requirements UBS is required to make any payment under the Master Agreement and/or any Agreement subject to a tax deduction or withholding tax, then UBS shall be entitled to deduct such amount from the amount payable to Supplier. Unless Supplier delivers a certificate from the relevant authority evidencing an entitlement to an exemption from such taxes, UBS shall withhold from payments to Supplier and pay to the relevant authority withholding tax as required by law. The withholding and payment of such tax will accordingly reduce the amount otherwise payable under the invoices submitted by Supplier to UBS.







 




  





13/42












Exhibit 10.1








 



	
(e)  

	
Supplier shall be liable for any applicable interest or penalties which may now or hereafter be imposed by reason of Supplier's failure to collect or remit taxes. In no event will UBS be liable for the payment of any penalties or interest due on any taxes and Supplier expressly indemnifies UBS against any such penalties and/or interest.







 



	
(f)  

	
Where applicable, Supplier shall ensure that its invoices to UBS meet the requirements for deduction/claim of input VAT by UBS. If UBS should pay any tax to Supplier and if it is later held that such tax was not due, Supplier will refund the amount hereof to UBS, together with any interest relating thereto.







 



	
(g)  

	
UBS will cooperate with Supplier in applying for any tax reduction or deduction permitted under any such foreign government law. Supplier will, when requested by UBS, assist and co-operate with UBS in challenging the validity of a tax provided that UBS shall bear Supplier's reasonable costs and expenses in connection with any such challenge.







 



	
(h)   

	
Except to the extent expressly set forth above, UBS shall not be responsible for the payment of any duties or taxes of Supplier or its Subcontractors.







 



	
5.4.  

	
Indemnification for Taxes


 



Each Party shall be responsible for its own income taxes on its business. If any Party breaches its obligations to lawfully remit taxes to the applicable tax authority relating to its own taxes under the Master Agreement and/or any Agreement, such Party will indemnify, defend and hold harmless the other Party in respect of such taxes and any government penalties and interest resulting from such breach.









 



	
5.5.  

	
Set Off


 



UBS shall not be entitled to set off against any invoice otherwise payable under the Master Agreement and/or any Agreement or the Supply Orders entered into pursuant to its terms any amounts due and owing to UBS or any of its Affiliates by Supplier or any of Supplier's Affiliates. Subject to clause 5.1(d), with respect to any amount to be paid or reimbursed by UBS under the Master Agreement and/or any Agreement, UBS may not set off against such amount any amount that UBS believes in good faith that Supplier is obligated to pay, reimburse, credit or refund UBS under the Master Agreement and/or any Agreement.









 



	
6.  

	
Warranties







 



	
6.1.  

	
Power to Contract







 



	
(a)  

	
UBS and Supplier hereby warrant and represent to each other that they each have:







 



	
(i)

	
all requisite corporate power and authority to enter into the Master Agreement and each subsequent Agreement, and to carry out the transactions contemplated hereby; and







 



	
(ii)

	
obtained and will maintain throughout the Term all consents, permissions and licenses necessary to enable them to perform their obligations hereunder.







 



	
(b)  

	
Supplier warrants that all representations and statements, whether written or oral, that it has made prior to any Effective Date are accurate (for the avoidance of doubt, including representations made in any responses that were given by Supplier or any Supplier Affiliate to an initial request for information (RFI) or request for proposal (RFP) received from UBS or any UBS Affiliate in respect of any particular Products, Services or Supply Orders, and any proposal documents and any written clarifications to those documents, unless such representation directly conflicts with the respective Supply Order).







 



	
6.2.  

	
Performance of Obligations


 



Supplier warrants and represents to UBS and the UBS Affiliates that:









 



	
(a)  

	
it will perform its obligations hereunder using the skill and care of a diligent supplier in a professional and timely manner, with an adequate number of competent personnel who have the necessary technical skills, qualifications, experience, certifications and training to perform and complete the Services in accordance with best standards and practices observed by suppliers in the upper quartile of the industry providing similar services to those required by the Master Agreement and the respective Supply Order;







 




  





14/42












Exhibit 10.1








 



	
(b)  

	
it will perform its obligations hereunder in compliance with the UBS Policies provided to Supplier in writing and in a safe manner which, as a minimum, complies with all relevant health and safety and environmental legislation and regulations applicable to the performance of the obligations under this Agreement in all relevant jurisdictions;







 



	
(c)  

	
it will perform its obligations hereunder in compliance with any Applicable Requirements and so as to enable UBS and UBS Affiliates to comply with their obligations thereunder;







 



	
(d)  

	
it will perform its obligations hereunder in such a manner to ensure that it does not, and that any Products or Work Products do not, introduce, malware including any software viruses, trojan horses, worms, time bombs, logic bombs, trap doors, back doors, cancelbots, spyware, botnet nodes, keyloggers, rootkits or any other computer code, files or programs designed to disrupt, interrupt, disable, damage, destroy or limit the functionality of any device, software, system or telecommunications equipment (“Malware”) whether owned by or licensed to UBS, a UBS Affiliate or otherwise or obtain any unauthorized pecuniary advantage for any person.  Notwithstanding the foregoing, UBS agrees that it shall be responsible for running virus scans on such software.







 



	
(e)  

	
all Products and/or Work Products provided to UBS or UBS Affiliates hereunder shall:







 



	
(i)

	
handle data input, processing and output accurately and without interruption and function accurately and without interruption recognizing and treating any date at its true calendar date and any time span correctly; and







 



	
(ii)

	
be fully interoperable with any other UBS software or system which provides the functions listed in sub-clause (i) of this clause 6.2(e);







 



	
(f)  

	
it will perform its obligations hereunder without undue disruption to UBS’s or UBS Affiliates’ business;







 



	
(g)  

	
to the extent that it processes Personal Data as a Data Processor on behalf of UBS and the UBS Affiliates, it shall comply with the provisions of clause 11.1 and Exhibit 3 (Data Protection Exhibit) and shall indemnify and hold harmless UBS and the UBS Affiliates against all losses, claims, costs (including reasonable legal fees), damages and proceedings that result from a breach of this clause 6.2(g);  and







 



	
(h)  

	
any Documentation provided by Supplier will be reasonably sufficient for the subsequent use of the Products or any related Work Products by UBS.







 



	
6.3.  

	
Intellectual Property







 



	
(a)  

	
Supplier warrants and represents to UBS and UBS Affiliates that to the best of Supplier’s knowledge as of the date of delivery:







 



	
(i)

	
use or possession by UBS or the UBS Affiliates of any Products, Services and/or Work Products or Supplier’s Pre-Existing Intellectual Property shall not subject UBS or the UBS Affiliates to any claim for infringement of any Intellectual Property Rights of any third party; and







 



	
(ii)

	
the Work Products, excluding UBS Pre-Existing Intellectual Property will be either (A) original works of authorship of Supplier or those acting on its behalf; or (B) licensed to Supplier with full right and authority to sub-license in accordance with the provisions of the Master Agreement and/or any Agreement.







 



	
(b)  

	
UBS represents and warrants that the use or possession by Supplier of UBS Software, UBS Systems or UBS Pre-Existing Intellectual Property as per the terms of the Master Agreement and/or any Agreement shall not subject Supplier to any claim for infringement of any Intellectual Property Rights of any third party.







 



	
6.4.  

	
Security


 



Supplier warrants and represents to UBS and UBS Affiliates that:









 



	
(i)

	
the use of Products or provision of the Services shall not permit any unauthorized access to or cause any loss or damage to UBS Systems, UBS Pre-Existing Intellectual Property, any Work Products (where such Work Products are owned by UBS in accordance with the Master Agreement or the applicable Agreement) or Confidential Information belonging to UBS; and







 




  





15/42












Exhibit 10.1








 



	
(ii)

	
it shall comply with any security obligations set out in: the UMA, the applicable Schedule(s), Supply Orders and/or UBS Policies provided to Supplier in writing or communicated to Supplier.; and







 



	
(iii)

	
Supplier will institute above industry standard safeguards to guard against the unauthorized access, alteration, destruction or loss of UBS Data and/or UBS Confidential Information. Supplier will propose security changes it deems to be appropriate, subject to UBS’s acceptance via the applicable change control process agreed between the Parties, which shall include a detailed risk assessment and sign-off by the relevant UBS risk control functions. If the safeguards specified in this clause 6.4 conflict with the UBS Policies in these areas, the UBS Policies provided to Supplier in writing and/or communicated to Supplier shall prevail. Supplier will, in any event, notify UBS if it considers the UBS Policies are deficient.







 



	
6.5.  

	
CID and UBS Price Sensitive Information







 



	
(a)  

	
In processing CID and UBS Price Sensitive Information Supplier shall establish and maintain adequate technical and/or procedural measures, the purpose of which is to restrict and control access by Staff to such information, in order to comply with relevant UBS Policies.







 



	
(b)  

	
Supplier warrants and represents to UBS and UBS Affiliates that:







 



	
(i)

	
it will protect and clearly identify CID and UBS Price Sensitive Information and ensure that such information is processed separately from information that may be processed for any other customer of Supplier; and







 



	
(ii)

	
it will put and keep in place, all technical, personnel and organizational measures necessary to maintain the security and confidentiality of such CID and UBS Price Sensitive Information.







 



	
6.6.  

	
Additional Warranties







 



	
(a)  

	
In regards to the Products, Services and Work Products, the warranty provisions of the applicable Schedule shall apply to the respective Product, Service or Work Product in addition to the warranties contained in this clause 6.







 



	
(b)  

	
Supplier hereby undertakes to be jointly and severally liable for all obligations and liabilities accepted or incurred by its Affiliates under each Agreement.







 


 



	
(c)  

	
Supplier will execute such form of guarantee as UBS may require to guarantee the performance of Supplier’s Affiliates under any Agreement.







 



	
7.  

	
Intellectual Property







 



	
7.1.  

	
Pre-Existing Intellectual Property







 



	
(a)  

	
Each Party shall retain ownership of its Pre-Existing Intellectual Property.







 



	
(b)  

	
Subject to the terms of the Master Agreement and/or any Agreement, Supplier grants UBS and the UBS Affiliates a perpetual, world-wide, royalty-free, non-exclusive, transferable and non-revocable license to use, copy, and sublicense and to permit the clients, potential clients, outsourcing companies and contractors of UBS and UBS Affiliates to use Supplier’s Pre-Existing Intellectual Property as is necessary for UBS to use the Work Products incorporating Supplier’s Pre-Existing Intellectual Property or as is necessary to gain the benefit of the Services, for the purposes for which such Work Products were designed and intended. UBS agrees that it will not sublicense, sell, use or transfer such Supplier’s Pre-Existing Intellectual Property on a stand-alone basis.







 



	
(c)  

	
In the case that any Supplier Pre-Existing Intellectual Property licensed from a third party is incorporated or provided in conjunction with in any Work Product, Supplier warrants that it will have obtained any necessary authority, permission or license from the relevant third party to grant a license in the same terms as set out in clause 7.1(b) above. To the extent set out in a Supply Order, UBS will be responsible for procuring any third party software which is necessary to enable it to receive the benefit of the Services and which has been specifically detailed in the relevant Supply Order. In the event that Supplier is to grant UBS a license to any third party software, any additional license terms to those set out above will be set out expressly in the relevant Supply Order.







 




  





16/42












Exhibit 10.1








 



	
(d)  

	
UBS grants Supplier a royalty free, non-exclusive license to use the UBS Pre-Existing Intellectual Property to the extent necessary to enable it to provide the Services, and for no other purpose.







 



	
7.2.  

	
Intellectual Property in Work Products







 



	
(a)  

	
UBS shall upon the creation thereof, exclusively own all Intellectual Property Rights in all Work Products. All original works of authorship created, developed or modified by Supplier or its Staff during the course of the provision of any Services provided to UBS are “works made for hire” under the applicable copyright laws and shall become and remain the sole and exclusive property of UBS. To the extent that all right, title, and interest in Intellectual Property Rights in and to Work Product may not, by operation of law or equity, vest in UBS, Supplier hereby irrevocably assigns (including by way of future assignment) any and all right, title and interest in Intellectual Property Rights in and to the Work Product to UBS, together with all causes of action for infringement, misappropriation, or otherwise relating to any Intellectual Property Rights in the Work Product and further, agrees to assist UBS and to execute, acknowledge and deliver to UBS any requested affidavits and/or documents of assignment and conveyance or perform any other act deemed reasonably necessary or desirable to carry out the intended purposes of this clause 7.2, including but not limited to assisting UBS in obtaining, procuring, registering, maintaining, protecting, assigning, and enforcing Intellectual Property Rights in Work Products. To the extent that any moral rights or rights equivalent or analogous to moral rights do not vest in UBS as works made for hire or for any reason do not, by operation of law or equity or by assignment, vest in UBS (or are not considered to be assignable), Supplier hereby agrees to waive irrevocably or procure the irrevocable waiver of any rights constituting or equivalent or analogous to moral rights, for all uses including internal or external products, marketing, and/or promotional materials that UBS or any UBS Affiliate may use, distribute, or otherwise exploit.  Unless otherwise specified in the relevant Supply order, UBS grants Supplier a limited, non-sub-licensable, non-dealable, royalty free, non-exclusive license to use, the Work Products solely to the extent and for as long as necessary for the purpose of performing the Services.







 



	
(b)  

	
Supplier shall promptly disclose in writing to UBS all copyright works or designs originated, conceived, written or made by it alone or with others in the performance of the Services and shall (to the extent that they do not automatically vest in UBS by operation of law or pursuant to the Master Agreement and/or any Agreement) hold them in trust for UBS until such rights shall be fully and absolutely vested in UBS.







 



	
(c)  

	
Supplier shall (at the reasonable expense of UBS which shall be agreed by the Parties in advance) execute such further documents and promptly provide such assistance as UBS may reasonably request in order to:







 



	
(i)  

	
register UBS in any country as proprietor of any Intellectual Property Rights subsisting in the Work Products; and







 



	
(ii)  

	
perfect the title of UBS to any Intellectual Property Rights subsisting in the Work Products.







 



	
(d)  

	
Supplier shall procure that its Staff irrevocably and unconditionally waive in favor of UBS any rights (including moral rights or rights equivalent or analogous to moral rights), title or interests in and/or to the Work Products immediately on creation and shall ensure that it appoints all Subcontractors on terms which give effect to the provisions of this clause 7.2 in favor of UBS.







 



	
(e)  

	
If under the relevant Supply Order UBS owns such Work Product, Supplier shall, as soon as reasonably practicable following creation thereof, deliver to UBS the Products and Source Code to the Work Product and all documentation and information as UBS may consider necessary to enable a person skilled in such software to operate and maintain such Software.







 



	
(f)  

	
Unless otherwise requested by UBS, upon completion of the Services to be performed under each Agreement or upon the earlier termination of such Agreement, Supplier shall immediately turn over to UBS all Work Products developed pursuant to such Agreement. All Work Products reduced to tangible form shall bear UBS’s copyright and trade secret notices, or such other proprietary notice as UBS may specify.







 




  





17/42












Exhibit 10.1








 



	
(g)  

	
Supplier shall ensure that all Staff shall be bound by undertakings in substantially the same terms as this clause 7.2.







 



	
7.3.  

	
Use of Know-how


 



Subject to clause 11.2 (Confidentiality), neither Supplier nor UBS shall be prevented or restricted by the Master Agreement and/or any Agreement from developing and using any techniques, ideas, concepts, information or know-how relating to methods or processes of general application which can be recalled only from the memories of the Staff or of UBS personnel.









 



	
8.  

	
Intellectual Property Rights Infringement Indemnity







 



	
(a)  

	
Should a third party claim that its Intellectual Property Rights are infringed and initiate proceedings against UBS, UBS shall notify Supplier of this fact in writing as soon as reasonably practicable (but the failure to do so shall not relieve Supplier of any liability hereunder except to the extent Supplier has been materially prejudiced therefrom). Supplier shall have sole control over the defense and settlement of such claims at its own expense but shall not, without UBS's prior written consent (not to be unreasonably withheld), consent to entry of any judgment or enter into any settlement which (A) does not include, as an unconditional term, the grant by the claimant to UBS of a release of all liabilities in respect of such claims or (B) otherwise adversely affects the rights of UBS. Supplier shall likewise be obligated to provide full support to UBS in order to successfully defend such third party claims, by providing among other things all necessary information and documents. Notwithstanding the foregoing, UBS may participate in the defense and settlement of the claim at its own expense







 



	
(b)  

	
Supplier shall indemnify, defend, and hold harmless UBS, UBS Affiliates, and UBS Persons for all damages awarded and/or costs imposed as a result of a judgment or settlement, provided these costs were not caused by gross negligence of UBS. However, before UBS makes concessions and/or concludes a settlement, it shall request Supplier to provide its comments; otherwise any claim for reimbursement shall be reduced by the amount increased as a result of this omission. In any case, UBS shall hereby be indemnified and held harmless by Supplier for its own related expenses and lawyer's fees.







 



	
(c)  

	
In the event that any copyright and/or other Intellectual Property Rights of third parties are infringed or an infringement is credibly claimed creating a risk that UBS is legally enjoined from using the Product, Services or Work Products either in whole or in part, UBS shall have the option to:







 



	
(i)

	
arrange that Supplier provide UBS with the right in dispute; or







 



	
(ii)

	
have developed, at the expense of Supplier, a modified and technically equivalent Product, Service or Work Product which does not infringe rights of third parties


 







 


Assuming Supplier accomplishes one of the foregoing (1) or (ii) successfully with no more than two weeks from the first notice of the infringement claim, however delivered or realized, then the limits on liability specified in Section 9.2 will apply to any claims which UBS may subsequently assert for damages or losses incurred as a result of infringing use prior to the point at which it had been successfully addressed,


 


Any cost caused to UBS as a result of a migration shall be borne by Supplier.  The right to claim further loss or damage shall be reversed.  Such claims by UBS for monetary damages and/or reimbursement of related costs shall be subject to the limitation on liability specified above only in those instances where the actions in (i) or (ii) have been successfully taken to resolve the infringing activity,.


 


Except as otherwise specified in this Section (c), the foregoing shall be in addition to, and not in limitation of, any other remedies available to UBS in law or equity or under the Master Agreement and/or any Agreement.


 



	
(d)  

	
The indemnity in this clause 8 shall not apply to any infringement to the extent that it is exclusively and necessarily due to Supplier having followed a design or instruction furnished or given by UBS in circumstances where Supplier could not reasonably have been expected to avoid such infringement, or UBS combines the Products with such products which Supplier has clearly stated in the relevant Supply Order would cause such an infringement.







 




  





18/42












Exhibit 10.1








 



	
(e)  

	
If at any time any allegation of infringement of third party and/or proprietary rights is made in respect of the UBS Pre-Existing Intellectual Property, UBS Software or UBS Systems, Supplier shall notify UBS of this fact in writing within thirty (30) calendar days (but the failure to do so shall not relieve UBS of any liability hereunder except to the extent UBS has been materially prejudiced therefrom), and UBS may, at its expense, modify or replace the same so as to avoid the infringement and Supplier will ensure that UBS is provided with all reasonable assistance required to exercise such right. In the event of any third party claim being made against Supplier by virtue of its use of any UBS Pre-Existing Intellectual Property, UBS Software or UBS Systems in accordance with the provisions of the Master Agreement and/or any Agreement (and which does not itself arise as a result of any Services provided by Supplier), UBS shall have the option to (A) compensate Supplier for all reasonable losses and expenses it incurs in connection with such claim, or (B) defend such claims at its own expense.







 



	
9.  

	
Remedies and Liabilities







 



	
9.1.  

	
Neither Party excludes or limits its liability to the other for fraud or for death or personal injury resulting from its negligence, or for any breach of any warranties as to title.







 



	
9.2.  

	
Subject to clause 9.1 above and clause 9.3 below but otherwise notwithstanding anything to the contrary contained elsewhere in the Master Agreement and/or any Agreement, the aggregate liability of each Party in each Contract Year for claims made by the other in that Contract Year in respect of loss or damage arising out of or in connection with any breach of that Party’s obligations under each Agreement whether arising for breach of contract, tort, or negligence shall not exceed the greater of:







 



	
(i)

	
the cumulative amount of Charges invoiced by Supplier to UBS under the relevant Agreement;







 



	
(ii)

	
four times the amount of Charges invoiced by Supplier to UBS under the relevant Agreement during the quarter preceding the claim; or







 



	
(iii)

	
$20 million







 


Subject always to clause 9.1 in no event shall either Party be liable to the other for indirect, punitive, exemplary, or consequential loss or consequential damages.


 



	
9.3.  

	
Exceptions from Limitation of Liability


 



The preceding limitation of liability provisions in clause 9.2 shall not apply to: (i) a breach by either Party of clause 6.4 (Security) or clause 11 (Confidentiality and Data Protection); (ii) the liability of Supplier for indemnity obligations in relation to tax payments in clause 5.24; (iii) claims resulting from the loss or compromise of security or control over data, including any liability arising out of the indemnity obligations relating to the Data Protection Exhibit set out in clause 6.2(g);  (iv) Intellectual Property Rights Infringement Indemnity in clause 8.









 



	
9.4.  

	
Remedies Cumulative


 



Except as otherwise expressly provided by the Master Agreement and/or any Agreement, all remedies available to the Parties for breach of the Master Agreement and/or any Agreement are cumulative and may be exercised concurrently or separately and the exercise of any one remedy shall not be deemed an election of such remedy to the exclusion of other remedies.









 



	
10.  

	
Term and Termination







 



	
10.1.  

	
Term







 



	
(a)  

	
The Master Agreement, shall commence on March 2, 2012, and shall have an initial term of five (5) years, after which it shall automatically renew for additional one year terms, unless and until terminated by either Party with ninety (90) days written notice to the end of the respective term.







 



	
(b)  

	
In the Master Agreement, the terms and conditions of a Schedule shall commence on the date specified therein and shall end or renew corresponding to clause 10.1(a), unless otherwise agreed in the respective Schedule.







 




  





19/42












Exhibit 10.1








 



	
(c)  

	
An Agreement shall commence on its Effective Date and shall continue in force for the duration specified therein, notwithstanding the termination or expiry of the Master Agreement.







 



	
10.2.  

	
Termination by either Party







 



	
(a)  

	
Without prejudice to any right or remedy either Party may have against the other for breach or non-performance of the Master Agreement and/or any Agreement, either Party shall have the right by notice in writing to the other Party to terminate with immediate effect all or any part of the Master Agreement and/or any Agreement on or at any time after the happening of any of the following events:







 



	
(i)

	
the other Party is unable to pay its debts as they fall due or admits inability to pay its debts or if the value of the other Party’s assets falls below the amount of its liabilities, taking into account contingent and prospective liabilities; or







 



	
(ii)

	
the passing by the other Party of a resolution for its winding-up (except in connection with a bona fide solvent business re-organization) or the making by a court of competent jurisdiction of an order for the winding-up of the other Party or the dissolution of the other Party; or







 



	
(iii)

	
the filing of a petition or other appropriate filing by a creditor or by the Party itself requesting the opening of bankruptcy or winding up proceedings, opening of bankruptcy or winding up proceedings against the other Party, the making of a bankruptcy order or an administration order in relation to the other Party; or







 



	
(iv)

	
the appointment of an administrator, receiver or an administrative receiver over any of the other Party’s assets (or a person becoming entitled to do so); or







 



	
(v)

	
the taking possession, sale by an encumbrance of or attachment or the levy of any distress, execution, sequestration or other such process  on any of the other Party’s assets and which is not discharged within 14 days; or







 



	
(vi)

	
the granting of an adjournment on the opening of bankruptcy or winding-up proceedings against the other Party; or







 



	
(vii)

	
the approval of a provisional or definitive moratorium of debt enforcement (composition proceedings) of one Party or opening of similar proceedings against the other Party; or







 



	
(viii)

	
the lack of or improper appointment of any corporate body of the legal entity of the other Party, where the corporate bodies are required under the applicable law of said legal entity; or







 



	
(ix)

	
the other Party makes or commences negotiations in respect of an arrangement or composition with its creditors generally or making an application to a court of competent jurisdiction for protection from its creditors generally (or any class of them), except in connection with a bona fide solvent business re-organization; or







 



	
(x)

	
if the other Party’s performance during a Force Majeure Event is not resumed within ninety (90) days (or such other period as may be specified in a Supply Order) of its suspension under the provisions of clause 12.4 (Force Majeure).







 



	
10.3.  

	
Termination by UBS







 



	
(a)  

	
UBS shall have the right by notice in writing to Supplier to terminate with immediate effect all or any part of the Master Agreement and/or any Agreement on or at any time after the happening of any of the following events:







 



	
(i)

	
if Supplier commits a material or persistent breach of any of the terms and conditions set out in the Master Agreement and/or any Agreement provided that where such breach is capable of remedy Supplier has been notified in writing of the breach and has not cured it within thirty (30) days of receipt of such notice. For the avoidance of doubt, any breach by Supplier of its obligations of confidentiality regarding UBS or any UBS Affiliate’s Confidential Information will automatically be deemed to be a material breach. For the purposes of this clause a breach shall be considered capable of remedy if time is not of the essence in performance of the obligation and if Supplier can comply with the obligation within the thirty (30) day notice period;







 




  





20/42












Exhibit 10.1








 



	
(ii)

	
on either UBS or Supplier ceasing to carry on a material part of its business at any time or disposing of all its assets or a substantial part of its assets;







 



	
(iii)

	
on a change of control of either Supplier or any Wholly Owned Affiliate not otherwise notified to UBS by Supplier in advance and approved by UBS in writing; in this clause “control” means the ability to direct the affairs of Supplier whether by virtue of contract, ownership of shares or otherwise;







 



	
(iv)

	
if either UBS’s or Supplier’s ability to carry out its obligations under the Master Agreement and/or any Agreement is prevented or substantially interfered with by any regulation, law, decree or any act of state or other governmental action or either UBS or Supplier is refused or has revoked any official or regulatory license, authorization or permission necessary for the performance of its obligations hereunder;







 



	
(v)

	
if Supplier is, at any time, the subject of an enforcement action by any Regulator which prevents Supplier from lawfully performing its obligations under the Master Agreement and/or any Agreement;







 



	
(vi)

	
if Supplier breaches clauses 6.4, 6.5 and 11;







 



	
(vii)

	
if any of the events referred to in this clause 10.3 occurs in respect of any of Supplier’s Subcontractors;







 



	
(viii)

	
Supplier is indicted on allegations of material fraud or corruption (or if a principal officer admits to either of the foregoing); or







 



	
(ix)

	
if Supplier persistently and repeatedly breaches its obligations under the Master Agreement and/or any Agreement, irrespective of whether or not Supplier subsequently remedies such breaches; or







 



	
(x)

	
if Supplier’s performance under the Master Agreement and/or any Agreement is reasonably determined by UBS to be contrary to any UBS Policy;







 



	
(xi)

	
if Supplier breaches any Applicable Requirements; or







 



	
(xii)

	
if any act or omission of any Subcontractor would, if such act or omission had been committed by Supplier itself, allow UBS to terminate the Master Agreement.







 



	
(b)  

	
Such termination shall take effect thirty (30) days after receipt of notice that the other party intends to terminate and does not cure such condition within the notice period either immediately or at such date as UBS shall specify in such notice and the Parties agree that any termination by UBS under any of the provisions listed above shall not result in the payment of any termination Charges to Supplier.







 



	
10.4.  

	
Termination by Supplier







 



	
(a)

	
Other than as specified in clause 10.2, Supplier may terminate the applicable Agreement by not less than one hundred and eighty (180) days prior written notice to UBS, if UBS commits a material intentional infringement or misappropriation of Supplier's proprietary rights and fails to cure such misappropriation of rights within forty five (45) days after receipt of written notice specifying such breach and Supplier's intention to terminate the Supply Order. (For purposes of this clause “intentional“ shall mean infringement or misappropriation undertaken at the direction of or with express approval from, or the actual knowledge of, UBS's responsible management).







 



	
(b)

	
Supplier irrevocably waives any rights (other than those contractual rights explicitly set out in the Master Agreement and/or any Agreement) that may be available under applicable law or in equity to suspend performance or terminate the Master Agreement and/or any Agreement for any reason.







 




  





21/42












Exhibit 10.1








 



	
10.5.  

	
Termination by Third Party Supplier


 



If a third party terminates an agreement with Supplier and the subject of such agreement pertains to the Software and affects Supplier’s obligations under Clause 4, then Supplier will either provide an alternative product or negotiate a license on UBS’ behalf to any such third party product and  perform all acts and execute all supplementary instruments or documents which may be reasonably necessary to carry out the provisions of this Agreement.









 



	
10.6.  

	
Additional termination of Agreements


 



Any Agreement may also be terminated pursuant to the provisions of the Schedule(s) applicable to the respective Agreement and/or the provisions contained in the respective Supply Order itself.









 



	
10.7.  

	
Termination by UBS without cause


 



UBS may terminate the Master Agreement without cause on thirty (30) days prior written notice to Supplier, without further penalty, obligation or liability to UBS. UBS may terminate any Supply Order or Agreement without cause on thirty (30) days prior written notice to Supplier, without further penalty, obligation or liability to UBS as set out in clause 10.8 below.









 



	
10.8.  

	
Consequences of Termination







 



	
(a)  

	
Following the termination or expiration of the Master Agreement for any reason, no further Supply Orders may be executed thereunder. The termination of the Master Agreement shall not affect the validity of any Agreements constituted thereunder prior to the termination date and the Master Agreement shall continue to apply to any such Agreements even after termination of the Master Agreement.







 



	
(b)  

	
Following the termination of the Master Agreement or any Agreement for any reason, Supplier shall promptly deliver to UBS at Supplier's expense (on media, in formats and to such address as may be specified by UBS) or return to UBS all materials and copies thereof (whether in hard or electronic format) relating to the UBS Confidential Information as well as all UBS Data together with a written certificate of confirmation from a senior authorized representative of Supplier that it has complied with all of its obligations under the Master Agreement or the respective Supply Order. If some UBS Data (e.g. information, software etc.) cannot be returned it must be permanently deleted in accordance with ISO27001 with a written certificate of confirmation from a senior authorized representative of Supplier that it has complied with ISO27001. The costs incurred thereby shall be borne by Supplier;







 



	
(c)  

	
Following the termination of the Master Agreement or any Agreement for any reason, if requested by UBS, at Supplier’s then-current daily rates, Supplier is to provide such services as are reasonably required to allow the Services to continue so far as possible without interruption so as to facilitate the orderly transfer of the Services to UBS or any of its designees or a successor supplier.







 



	
(d)  

	
Supplier acknowledges that UBS and its Affiliates may be required by its regulators to ensure that they are able to continue to carry on their business notwithstanding the occurrence of any insolvency related event in relation to another UBS Affiliate.  Accordingly, Supplier agrees, on behalf of itself and its Affiliates, that following any termination by Supplier or any Supplier Affiliate of all or any part of the Master Agreement or any Agreement, for the happening of any of the events specified in clauses 10.2 (a)(i) to (viii) in relation to UBS or any UBS Affiliate, Supplier and its Affiliates will, if requested by UBS or any of its Affiliates, continue to provide the Products and/or Services for such period as UBS or the UBS Affiliates may reasonably require, on the same terms and conditions as such Products and/or Services were provided prior to termination, provided that the UBS entity or entities receiving such Products and/or Services continues to pay to the Supplier or its Affiliate (as the case may be) the Charges that were payable for such Products and/or Services prior to termination.







 



	
(e)  

	
The consequences of termination of an Agreement shall further be governed by the provisions contained in the respective Supply Order and the Schedule(s) applicable to such Agreement.







 



	
(f)  

	
The provisions regarding Warranties (clause 6), Intellectual Property (clause 7), Intellectual Property Rights Infringement Indemnity (clause 8) and Remedies and Liability (clause 9), Consequences of Termination (clause 10.8) and Confidentiality and Data Protection (clause 11),  and Miscellaneous (clause 12) shall survive the termination or expiration of the Master Agreement or any Agreement.







 




  





22/42












Exhibit 10.1








 



	
11.  

	
Confidentiality and Data Protection







 



	
11.1.  

	
Data Protection


 



To effect the purposes of the Master Agreement and/or any Agreement, UBS, UBS Affiliates and/or third parties may from time to time provide Supplier with Personal Data. Supplier shall comply with all applicable data protection and data privacy laws and regulations in its storage, use, transfer and processing of any Personal Data. In this clause, “data protection laws and regulations” means any laws, regulations, rules, guidelines or standards relating to data protection, banking secrecy, confidentiality, data security, data privacy or similar matters from any supranational, federal, national, state, provincial or local government, any financial or other regulator (whether established by legislation or otherwise) having jurisdiction over UBS or a UBS Affiliate in any relevant territory, or any other body having power to require compliance with the law, regulation, rule, guideline or standard concerned. Personal Data shall constitute Confidential Information for the purposes of the Master Agreement and/or any Agreement. In the event Supplier processes Personal Data on behalf of UBS as a Data Processor, the Parties shall be bound by the provisions set out in Exhibit 3 (Data Protection Exhibit).









 



	
11.2.  

	
Confidentiality







 



	
(a)  

	
For the term of the Master Agreement and/or any Agreement and following its termination, both Parties generally undertake to treat any Confidential Information in a confidential manner, and neither to convey or disclose such data or information to third parties nor to use it for purposes other than for the performance of the Master Agreement and/or any Agreement. This shall include but not be limited to the obligation to ensure, as far as technically feasible according to state-of-the-art technology, that no unauthorized third party can access any such data or information through network and/or database online access. This obligation of confidentiality shall not apply to information that:







 



	
(i)

	
is disclosed by UBS to any UBS Persons  to the extent that such disclosure is reasonably necessary for the purpose of the Master Agreement and/or any Agreement or for evaluating the Master Agreement and/or any Agreement, provided that UBS shall ensure that the UBS Recipient complies with UBS’s obligations of confidentiality under the Master Agreement and/or any Agreement; or







 



	
(ii)

	
is disclosed by Supplier, subject to clause 11.3, to any Staff or other Supplier Persons to the extent that such disclosure is reasonably necessary for the purpose of the Master Agreement and/or any Agreement, provided that Supplier shall ensure that Supplier Recipient complies with Supplier’s obligations of confidentiality under the Master Agreement and/or any Agreement; or







 



	
(iii)

	
that can be proved by the receiving Party to have been in the public domain at the date it was disclosed to a third party; or







 



	
(iv)

	
is lawfully or properly obtained by the receiving Party from a person who is without obligation of confidentiality; or







 



	
(v)

	
comes into the public domain otherwise than through the default or negligence of the receiving Party; or







 



	
(vi)

	
the receiving Party can demonstrate was independently developed by the receiving Party without reference to the Confidential Information of the other Party; or







 



	
(vii)

	
by virtue of the regulations of any recognized stock exchange upon which the receiving Party’s securities  (or those of its Wholly Owned Affiliate) are listed, provided that where permitted by such body the other Party is given prompt notice thereof; or







 



	
(viii)

	
is requested in a lawful and legally binding manner to be disclosed by a competent court, regulator or a body having similar authority over the receiving Party provided that where permitted by such body the other Party is given prompt notice thereof; or







 



	
(ix)

	
is required to be disclosed by Applicable Requirements provided that where permitted by such body the other Party is given prompt notice thereof; or







 



	
(x)

	
is requested to be disclosed by UBS or on its behalf to its auditors (whether internal or external) and other third parties who have the right to require that UBS supply the relevant information and, subject to the same entering into a confidentiality agreement with UBS; or







 



	
(xi)

	
is disclosed to benchmarking companies which have entered into a confidentiality agreement with UBS to protect such information.







 




  





23/42












Exhibit 10.1








 



	
(b)  

	
Supplier shall not disclose the content of its specific activity for UBS and the findings or information of any kind received during the delivery of Products and/or Services for UBS.







 



	
(c)  

	
Both Parties acknowledge that breach by it of this clause 11 may cause irreparable injury to the other Party, which injury will be inadequately compensable in damages. Accordingly, each Party is entitled to the remedies of injunction, specific performance and other equitable relief in respect of any actual breach or threatened breach of the terms of the Master Agreement and/or any Agreement in addition to any other legal remedies which may be available, without the necessity of proving actual damages or posting of security or a bond.







 



	
(d)  

	
Neither party makes any representation or warranty, express or implied, with respect to its Confidential Information.







 



	
(e)  

	
Except as expressly set out in the Master Agreement and/or any Agreement, nothing contained in the Master Agreement and/or any Agreement shall be construed as granting any right or license to either Party’s Confidential Information or to any invention or discovery derived from or improvement made to such Confidential Information, whether conceived or created prior to or after the date of the Master Agreement and/or Agreement.







 



	
(f)  

	
Each party’s obligations to retain the confidentiality of the other party’s trade secrets shall survive any termination or expiration of the Master Agreement and/or Agreement.







 



	
(g)  

	
Supplier indemnifies and holds harmless UBS Persons and shareholders against all liability, claims, demands, fines, losses and expenses, including reasonable legal fees, arising out of a failure by Supplier to comply with the terms of this clause 11.







 



	
11.3.  

	
Restricted Countries


 



Supplier acknowledges that it has been advised by UBS that UBS and certain UBS Affiliates are regulated as financial institutions under applicable local laws or regulations (including banking secrecy, confidentiality, data protection, outsourcing or offshoring). This may require additional technical, personal and/or organizational measures from Supplier to comply with the applicable local legal or regulatory requirements, such measures to be specified in the applicable Supply Order.









 



	
12.  

	
Miscellaneous







 



	
12.1.  

	
Access to records


 



Supplier shall, for a period of ten (10) years from creation, promptly provide UBS with, or cause UBS to be promptly provided with, reasonable access to all records pertaining to the Products and/or Services, to the extent necessary or reasonably useful for UBS in connection with any audit, investigation, dispute, litigation or the preparation of filings required by Applicable Requirements, relating to UBS and its Affiliates.









 



	
12.2.  

	
Notices and Communications







 



	
(a)  

	
In proving service of a notice or document under the Master Agreement and/or any Agreement it shall be sufficient to prove that an envelope containing the notice or document was properly addressed and delivered by courier or posted as a prepaid, first class or airmail, recorded delivery letter:







 



	
(i)

	
to Supplier at the address specified in the Supply Order;







 



	
(ii)

	to UBS at the address specified in the Supply Order as well as a copy to the UBS Legal department





         


or at any other address or to any other fax number or addressee as it may have notified to the other Party in accordance with this clause.


 



	
(b)  

	
Unless there is evidence that it was received earlier, such notice or document shall be deemed to have been served:







 



	
(i)

	
if delivered by courier, when left at the address referred to above;







 




  





24/42












Exhibit 10.1








 



	
(ii)

	
if sent by post to an address within the country of postage, two Business Days (in the city of the recipient) after posting it; or







 



	
(iii)

	
if sent by post to an address outside the country of postage, five Business Days (in the city of the recipient) after posting it.







 



	
(c)  

	
Supplier irrevocably appoints Supplier’s Chief Executive Officer at Cicero Inc., 8000 Regency Parkway, Suite 542, Cary, NC 27518 to receive on its behalf service of any action, suit or other proceedings in connection with the Master Agreement and/or any Agreement. If any person appointed as process agent ceases to act for any reason, Supplier shall notify UBS and shall promptly appoint another entity incorporated within ten (10) days to act as its process agent and shall notify UBS of the name and address of the replacement agent. Failing such appointment and notification, UBS shall be entitled by notice to Supplier to appoint a replacement agent to act on Supplier's behalf.







 



	
12.3.  

	
Escalation of Disputes and Complaints


 



Subject to any alternative procedure which may be set out in the relevant Supply Order or the applicable Schedule:









 



	
(a)  

	
Any dispute arising out of or in connection with the Master Agreement and/or any Agreement shall be referred by written notice:







 



	
(i)

	
first to the manager appointed by each Party who shall meet and endeavour to resolve the dispute between them within five (5) Business Days of such notice; and







 



	
(ii)

	
failing resolution of the dispute, to a senior representative of Supplier and a senior representative of UBS (together the “Senior Representatives”) who shall meet and endeavour to resolve the dispute between them within ten (10) Business Days of such notice (the “Senior Representatives’ Meeting”). The joint written decision of those Senior Representatives shall be binding on the Parties.







 



	
(iii)

	
If the appointed managers or Senior Representatives are unable to resolve the dispute, the Parties shall, if both Parties agree, within five (5) Business Days of the Senior Representatives’ Meeting refer the dispute to mediation in accordance with the rules of the Centre for Dispute Resolution (CEDR) or such other mediation provider agreed by the Parties. The Parties agree to hold such mediation as soon as possible and in any event within one (1) month of the Senior Representatives’ Meeting.







 



	
(b)  

	
Any complaint from any third party arising out of or in connection with the Master Agreement and/or any Agreement shall be referred by written notice within twenty-four (24) hours of receipt to the manager appointed by UBS.







 



	
12.4.  

	
Force Majeure







 



	
(a)  

	
Neither Party shall be liable to the other for any delay or non-performance of its obligations under the Master Agreement and/or any Agreement arising from any of the following: act of God, war, fire, flood, earthquake, explosion, acts of terrorism, epidemic or pan-epidemic or civil commotion, strikes or lockouts or labor disputes,  excluding, for the avoidance of doubt, strikes of Supplier’s Staff or Malware or other items or events which should have been capable of avoidance or mitigation in the exercise of appropriate business continuity or disaster recovery measures (“Force Majeure Event”).







 



	
(b)  

	
Subject to the affected Party promptly notifying the other Party in writing of the cause and the likely duration of the cause, the performance of the affected Party’s obligations, to the extent affected by the cause, shall be suspended during the period that the cause persists, subject to termination by either Party in accordance with clause 10.2.







 



	
(c)  

	
The foregoing excuse from non-performance is conditioned upon such Party continuing to use its best efforts to recommence performance whenever and to whatever extent possible without delay, including through the use of alternate sources, workaround plans, backup or emergency power, redundant telecommunications circuits, or other means.







 



	
(d)  

	
Notwithstanding the foregoing, the acts or omissions of a Party's agents, subcontractors, representatives, materialmen, suppliers or other third parties providing products or services to such Party will not constitute a Force Majeure Event (unless such acts or omissions are themselves the product of a Force Majeure Event).







 




  





25/42












Exhibit 10.1








 



	
(e)  

	
The occurrence of a Force Majeure Event does not excuse, limit or otherwise affect Supplier's obligation to provide either normal recovery procedures or any other disaster recovery services specified in the Master Agreement or in any Agreement.







 


 



	
(f)  

	
The Party whose performance is prevented, hindered or delayed by a Force Majeure Event will:







 



	
(i)

	
immediately notify the other Party of the occurrence of the Force Majeure Event and describe in reasonable detail the nature of the Force Majeure Event and such Party's good faith estimate of the likely duration of such Force Majeure Event;







 



	
(ii)

	
with the cooperation of the other Party, exercise all reasonable efforts to mitigate the extent of any non-performance, hindrance or delay caused by a Force Majeure Event and any adverse consequences of such Force Majeure Event, including, in the case of Supplier, performance of required work or the provision of the Services with the use of Supplier's qualified management or other employees or Subcontractors (as permitted by the Master Agreement and/or any Agreement), and cooperating with UBS's efforts to secure necessary replacement services from third party vendors and suppliers; and







 



	
(iii)

	
immediately notify the other Party of the cessation of such Force Majeure Event.







 



	
(g)  

	
The provisions of this clause may be amended by further related provisions in the applicable Schedule(s).







 



	
12.5.  

	
Insurance







 



	
(a)  

	
During the term of the Master Agreement and/or any Agreement, Supplier shall maintain insurance coverage at its own cost and expense as follows:







 


(i)           Commercial General Liability insurance written on an occurrence basis (including liability arising out of death, bodily injury or disease, for products supplied and completed operations, contractual liability, personal and advertising injury and loss of or damage to property and claimants costs & expenses) with a limit of $5 million or more per occurrence but in all for products liability, with a “cross liabilities” clause and naming UBS and its Affiliates as an additional insured,


 


(ii)           Automobile Liability insurance (covering the ownership, possession or use of any owned, non-owned and hired vehicles) with a limit of cover for liability arising out of death or bodily injury and damage to property of at least $5 million per occurrence or the statutory amount if greater including a waiver of subrogation in favor of UBS and its Affiliates, with a “cross liabilities” clause and naming UBS and its Affiliates as an additional insured,


 


(iii)           Employer’s Liability insurance as required by statute or otherwise with a minimum limit of $500,000.00 per occurrence or the sum required by statute or regulation which ever is the greater for liability arising out of death bodily injury or disease and claimants costs & expenses including a waiver of subrogation in favor of UBS and its Affiliates covering all Staff engaged in the provision of Services under the respective Agreement,


 


(iv)           Workers’ Compensation insurance with statutory limits in compliance with all applicable laws and regulations including a waiver of subrogation in favor of UBS and its Affiliates,


 


(v)           Crime/Fidelity coverage with a minimum limit $5 million  per occurrence providing coverage for, but not limited to, Staff dishonesty (for losses arising out of or in connection with any fraudulent or dishonest acts committed by Staff, acting alone or in collusion with others), computer crime, forgery and alteration,


 


(vi)           Professional Liability/Errors & Omissions insurance in the amount of $5 million per occurrence for losses from wrongful acts arising from the performance of professional services and


 


(vii)           All Risks Property damage insurance covering all real and personal property of UBS and its Affiliates in the care custody or control of the Supplier its servants or agents including whilst in transit for the full reinstatement or replacement cost of the property with new including and a waiver of subrogation in favor of UBS and its Affiliates.


 


(viii)           Loss of income/profit and additional cost of working cover as appropriate following all risks of physical loss or damage to real or personal property with an indemnity period of twelve months,


 


(ix)           a freight forwarders, warehouse keepers and carriers liability policy covering legal liability for loss or damage to property and claimants costs arising from wrongful acts in the performance of services with a limit of indemnity of at least $500,000.00,


 


(x)           A policy covering legal liability for any real or personal property in the suppliers care custody or control with a limit of indemnity of at least $5 million,


 




  





26/42












Exhibit 10.1








 



	
(b)  

	
The foregoing insurances are to be maintained with insurers licensed and admitted where Supplier conducts business and with a minimum rating of Moody’s A1 or S&P A+ or Fitch A.







 



	
(c)  

	
All policies maintained by Supplier pursuant to the Master Agreement and/or any Agreement shall be primary and non-contributing with any insurance carried by UBS and its Affiliates.







 



	
(d)  

	
If any of the above required insurance policies are written on a claims-made/discovered basis, such policies shall be kept in force, through either the purchase of an extended reporting period or renewal policy, for a period of not less than three (3) years following the expiration or termination of the Master Agreement and/or any Agreement.







 



	
(e)  

	
At the time of the execution of the Master Agreement and/or any Agreement and prior to the performance of any work thereunder, Supplier shall provide certificate(s) of insurance to UBS evidencing that the coverage required under the Master Agreement and/or any Agreement is maintained and in force. Supplier shall also provide renewal certificates to UBS at the time of each required policy renewal throughout the term of the Master Agreement and/or any Agreement. In addition, Supplier shall provide at least thirty (30) days written notice to UBS prior to cancellation, non-renewal or material change to any of the policies providing such coverage.







 



	
(f)  

	
The foregoing insurance requirements do not limit Supplier’s liability as set forth elsewhere in the Master Agreement and/or any Agreement.







 



	
12.6.  

	
Waiver


 



No single or partial exercise, or failure or delay in exercising any right, power or remedy by any Party shall constitute a waiver by that Party of, or impair or preclude any further exercise of, that or any other right, power or remedy arising under the Master Agreement, any Agreement or otherwise.









 



	
12.7.  

	
Amendments


 



No purported modification, amendment or waiver of the Master Agreement or any Agreement shall be effective unless it is in writing and signed by two UBS Authorized Personnel, where at least one is signed (or authorized) by SDM, and an authorized representative of Supplier.









 



	
12.8.  

	
Assignment







 



	
(a)  

	
The Master Agreement and any Agreement shall not be assigned by Supplier without the prior written consent of UBS, but nothing in the Master Agreement and/or any Agreement shall prevent or restrict UBS from assigning, sub-licensing, transferring or otherwise disposing of all or any of its rights or obligations hereunder to a UBS Affiliate or to any legal entity which succeeds to all or part of the business or assets of UBS or to any third party service provider engaged by UBS to manage or supervise the Services. Any attempted assignment in contravention of this clause shall be null and void.







 



	
  

	
The Master Agreement and any Agreement shall be binding upon any successors in interest or title of the Parties.







 



	
12.9.  

	
Audit







 



	
(b)  

	
The Supplier shall, for a period of ten (10) years from creation, keep or cause to be kept full and accurate records pertaining to the delivery of the Product, Work Product and Services.







 


 



	
(c)  

	
Without prejudice to its other obligations under this Agreement, and no more than once per calendar year, the Supplier shall permit UBS or its authorized representatives or any representative of any relevant regulatory body (in any case the "Auditor") to have access to the premises of the Supplier and any other premises under the control of the Supplier or any Subcontractor and to:







 



	
a.

	
examine data and other records, documents or other relevant information relating thereto or to the provision of the Product, Work Product and/or Services; and







 



	
b.

	
as for and receive explanations in respect to such matters from the Supplier,







 




  





27/42












Exhibit 10.1








 



	
  

	
to the extent necessary for the Auditor to be satisfied that the Supplier is complying with the terms and conditions of this Agreement and any contractual terms, regulations, statutory provisions and the like affecting UBS and touching on this Agreement.  Any audit shall be conducted with a minimum of disruption to Supplier's normal business operations.  All information disclosed by Supplier to UBS during the course of such audit shall be deemed Confidential Information of Supplier.







 



	
(d)  

	
Access shall be granted to the Auditors at any time during which the premises of the Supplier or the relevant site is ordinarily open for business provided that any authorized representative of UBS has first produced to the Supplier any necessary authorizations from UBS and agrees to comply with all reasonable requirements of the Supplier stipulated for the purpose of protecting the confidentiality of the data systems or information of other users.







 



	
(e)  

	
UBS agrees to the best of their ability to keep accurate business records relating to its use and deployment of the Product which will contain details reasonably sufficient to establish compliance with granted license entitlements.  Supplier may, but no more than one time per year, request a certification from an Executive Officer in writing with a minimum of thirty (30) days prior notice representing that UBS is compliant with the deployment of said Product in the applicable Schedule.  If UBS fails to submit such Certification, Supplier will provide written notice to UBS and UBS will have forty-five (45) days to provide such Certification.







 



	
12.10.  

	
Publicity


 



Supplier shall not, without the prior written consent of UBS Brand Management advertise or publicly announce it is providing, or has provided, Products or Services to UBS, or otherwise use any trade name, trademark, service mark or other information which identifies UBS in Supplier’s marketing and publicity activities.









 



	
12.11.  

	
Responsible Supply Chain Management







 



	
(a)  

	
Supplier shall access the UBS Responsible Supply Chain Standard, which incorporates standards on human rights, labor rights and environmental and anti-corruption principles, on www.ubs.com/responsiblesupplychainstandard and shall comply, and cause any Subcontractor to comply, with the principles set forth therein, which are incorporated in the UMA by reference.







 



	
(b)  

	
Supplier shall promptly notify UBS of any circumstances affecting compliance with the UBS Responsible Supply Chain Standard.







 



	
(c)  

	
UBS reserves the right to evaluate Supplier's compliance with the UBS Responsible Supply Chain Standard and Supplier shall maintain written records of the agreed documentation necessary to demonstrate its compliance.







 



	
12.12.  

	
Changes in Applicable Requirements


 



Supplier will identify the impact of changes in any Applicable Requirements on the provision or use of the Services and the delivery or use of Products. Supplier will notify UBS of such changes and will work with UBS to identify the impact such changes have on (A) the performance of the Services or Products supplied by Supplier, (B) the benefits UBS derives therefrom, and (C) the use of the Services and/or Products by UBS. Supplier will promptly make any resulting modifications to the Products and/or Services as reasonably necessary as a result of such changes.









 




  





28/42












Exhibit 10.1








 



	
12.13.  

	
Governance


 



The Parties will comply with the contract governance process and procedures set out in the relevant Schedule and/or Supply Order.









 



	
13.  

	
Signatures







 



	
 


 


Signed for and on behalf of UBS March  ___, 2012 by:


 


 

	  	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]

	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]


	
 


[Place, Date]

	  	  	  
	
 


 


Signed for and on behalf of [Supplier] by:


 


 

	  	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]

	  
	  

March  ___, 2012

	 	 	 





 



	
14.  

	
Exhibits







 



	
(a)  

	
The following Exhibits shall form an integral part of the UMA:







 




	
  

	
Exhibit 1:

	List of Schedules





                    





	
  

	
Exhibit 2:

	
Declaration of staff member regarding data protection / privacy and client confidentiality / bank secrecy obligations







 




	
  

	
Exhibit 3:

	Data Protection Exhibit





 




	
  

	
Exhibit 4:

	Restricted Country List





 




	
  

	
Exhibit 5:

	Security Exhibit





 









	
(b)  

	
Exhibit 1 (List of Schedules) shall automatically be amended by any subsequent Schedules executed by the Parties under the UMA.







 




  





29/42












Exhibit 10.1








 


Exhibit 1: List of Schedules


 


to the UBS Master Agreement concluded between UBS AG and Cicero, Inc.  dated March 2, 2012.


 







 


 


1.    Services Schedule


 



2.    Consultancy Schedule




 


3.    Outsourcing Services Schedule


 


4.    Software Schedule (License, Maintenance & Development)


 


5.    Software as a Service Schedule


 


6.    Hardware Purchase Schedule


 


7.    Hardware Maintenance Schedule


 


8.    Training Schedule


 


 




  





30/42












Exhibit 10.1













Exhibit 2: Declaration of staff member regarding data protection / privacy and client confidentiality / bank secrecy obligations


 




	
Last name

	  
	
First name

	  
	
Date of birth

	  
	
Employer / Company (name, address)

	  





 



	
As a bank, UBS AG (hereinafter: "UBS") is subject to particularly strict obligations with regard to data protection/privacy requirements, non-disclosure/ confidentiality obligations in relation to its clients' and other persons' data. These obligations also apply to me personally as a member of staff of the Employer / Company which has entered into a contract with UBS ("Agreement") and carries out work for UBS as set out in the Agreement.


 


I therefore acknowledge that I am bound by the following obligations as provided for by the Agreement and/or applicable law:


 


Confidentiality


 


As a matter of principle all non-public information obtained in connection with the Agreement must be treated confidentially in line with the applicable confidentiality obligations under the Agreement. This applies in particular to:


 


§ all information concerning clients of UBS, including knowledge of whether or not someone is a client of UBS (banking secrecy / client confidentiality);


§ any personal data of a person be it a client or any other person such as an employee of UBS (data protection / privacy)


§ non-public information about the business of UBS, such as its organization, operational and technical processes, infrastructure and systems (including hardware and software), products and services, information on employees and contractual relations with third parties (trade and business secrecy).


 


In particular, without the prior express consent of UBS, I must not:


 


§ procure information to someone for whom it is not intended;


§ make private use of information or enable third parties to do so;


§ put information at the disposal of third parties or make it available in any manner whatsoever;


§ remove from the premises of UBS, in whole or in part, original business documents or copies

	 	
thereof either on paper or (electronic) data carriers, to misappropriate such documents in any other way or to make them available to third parties.


 


The duties of confidentiality shall unrestrictedly survive the termination of my employment with the Employer / Company.


 


Data protection / privacy


 


When processing personal data, the provisions of the applicable data protection / privacy law and any other laws which govern the processing of personal data must be adhered to.


 


In particular, personal data must only be collected and processed in a lawful manner, must be processed in a proportionate manner consistent with the purposes for which the data has been collected in line with the Agreement, be kept up-to-date and accurate and not be retained for longer than needed for the purposes for which it was originally collected. When processing personal data the applicable security measures must be adhered to. Personal data may not be transferred to other persons, unless expressly permitted under the Agreement.


 


UBS reserves the right to retain all messages, in particular emails and chat messages ("Messages"). Messages are protected and accessed only in legally justified cases. To the extent that I have access to UBS networks, UBS computers or UBS removable media, I acknowledge I might be subject to measures to prevent the unauthorized transmission of UBS information via electronic distribution channels to external recipients or removable media, in particular by using software to prevent or detect suspected data leakage or monitor information transmission.


 


Possible sanctions in case of breach


 


A breach of the obligations set out in this Appendix may constitute a breach of applicable law and lead to sanctions (imprisonment, penalty or fine) under criminal law, claims for damages under civil law and may also impact my employment relationship with the Employer / Company.









 


Place/Date: ___________________________________________________  Signature: ___________________________________________________________


 




  





31/42












Exhibit 10.1








 


Exhibit 3: Data Protection Exhibit


 


to the UBS Master Agreement concluded between UBS AG and Cicero, Inc.  dated March 2, 2012.


 



	
1.  

	
Preamble







 



	
(1)

	
This document (“DP Exhibit“) specifies the data protection obligations of the Parties in relation to the Processing of Personal Data within the scope of the UBS Master Agreement concluded between UBS AG and Cicero, Inc.  dated March 2, 2012 (“UMA“), its applicable Schedules and Supply Orders.







 



	
(2)

	
This DP Exhibit applies to all activities in connection with the UMA, its applicable Schedules and Supply Orders in which the Staff of Supplier or a third party acting on behalf of Supplier Process Personal Data of UBS.







 



	
(3)

	
Each Party must appoint and notify in writing to the other Party an individual who is authorized to respond to any enquiries concerning Processing of Personal Data.







 


 



	
2.  

	
Definitions


 




Terms and references which are not defined in this DP Exhibit shall have the same meanings as those contained in the UMA. In addition, in this DP Exhibit, unless the context otherwise requires:


 


“Adequate Safeguards“ means the measures provided for by Article 26 (2) of the Directive to compensate for the lack of protection, if a third country importing Personal Data does not ensure an adequate level of protection; such safeguards may in particular result from an international data transfer agreement incorporating the standard contractual clauses between the data exporting and the data importing party pursuant to Article 26 (4) in conjunction with Article 31 (2) of the Directive.


 


“CID“ or “Client Identifying Data“ means data provided from or relating to UBS clients, prospects or employees (if they are UBS clients) which allows the deduction of the existence of a banking relationship between the client and UBS. Examples of such data fields are: name, address, e-mail information, publicly available identifiers (e.g. phone or fax number), account number (Stamm/Master) and (static) IP-addresses.


 


“Data Controller“ has the meaning set out in Article 2(d) of the Directive.


 


“Data Processor“ has the meaning set out in Article 2(e) of the Directive.


 


“Data Protection Laws and Regulations“ means laws and regulations regulating data privacy and/or the Processing of Personal Data, in particular laws and regulations implementing the Directive; “Data Protection Law or Regulation“ shall be construed accordingly.


 


“Data Subject“ means an identified or identifiable natural person as set out in Art 2 (a) of the Directive, except that Data Subject shall also include (i) persons other than living individuals and (ii) legal entities to the extent that the Processing of a legal entity's Personal Data is regulated by a Data Protection Law or Regulation.


 


“Directive“ means the Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the Processing of Personal Data and on the free movement of such data as updated and/or amended from time to time.


 


“Personal Data“ means any information relating to a Data Subject such as data relating to past, current or potential employees, clients, consultants, contractors, or suppliers of UBS, as well as visitors to UBS websites (if the individual is or can be identified), held in whatever form, that Supplier or a Subcontractor processes in connection with the execution of the UMA, its applicable Schedules and Supply Orders.


 


“Processing“ means any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as receipt, collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, viewing, disclosure, transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.


 


“Relevant Transfer“ means a transfer of Personal Data to an entity which is in a country which (for the purposes of this DP Exhibit) does not provide an adequate level of protection as required by the Data Protection Laws and Regulations.


 


“Restricted Country“ means, as the case may be, one or all of the countries listed in Exhibit 5 (Restricted Countries List) with banking secrecy laws and/or regulations that restrict cross-border access and/or transfer of records and data containing CID as further specified in clause 3 of this DP Exhibit.


 


Terms defined in the Directive have the same meaning when used in this DP Exhibit or, as the case may be, in the UMA, its applicable Schedules and Supply Orders, unless otherwise defined in this DP Exhibit.









 




  





32/42












Exhibit 10.1








 



	
3.  

	
Obligations of Supplier







 



	
3.1.  

	
Compliance with laws and regulations: Supplier must comply with the Data Protection Laws and Regulations applicable to Supplier. Supplier shall not by any act or omission put UBS in breach of any of the Data Protection Laws and Regulations.








	
3.2.  

	
Relevant Transfers: Irrespective of whether Supplier acts as a Data Controller or as a Data Processor in the performance of the Services, it shall in any event set up and observe and ensure that its Affiliates or Subcontractors carrying out any Relevant Transfer on behalf of Supplier set up and observe Adequate Safeguards to carry out any Relevant Transfer. Each act or omission of Supplier or its Affiliates or Subcontractors in relation to the obligations set forth in the Adequate Safeguards shall be deemed to be an act or omission of Supplier for which Supplier is responsible. Supplier shall not make a Relevant Transfer before such Adequate Safeguards have been set up. In case that Supplier does not comply with this clause 3.2, UBS has the right to terminate all or any part of the Master Agreement and/or any Agreement(s).








	
3.3.  

	
Purpose of Processing: Supplier acknowledges that UBS is the Data Controller in respect of any Personal Data that Supplier processes in the course of providing the Services. It is in UBS's sole and absolute discretion to determine the purposes of Processing Personal Data, such purpose being defined in the Master Agreement and/or any Agreement(s). Supplier represents and warrants that it must carry out the Processing solely for the purposes agreed upon in the Master Agreement and/or any Agreement(s) and that it must not otherwise Process any Personal Data at any time and not keep them longer than is necessary for the performance of the Master Agreement and/or any Agreement(s).








	
3.4.  

	
Supplier's Staff and other persons acting under Supplier's supervision: Supplier must take reasonable steps to ensure the reliability of its Staff and any other person acting under its supervision who may come into contact with, or otherwise have access to and process, the Personal Data and represents and warrants that any person it authorizes to have access to the Personal Data is bound by contract or otherwise to respect the confidentiality and security of the Personal Data, that any person acting under the authority of Supplier must be made aware of and must comply with Supplier’s obligations under this DP Exhibit and that Supplier can impose effective sanctions on any such person in case of non-compliance.








	
3.5.  

	
Information requests from Data Subjects: Supplier represents and warrants that it promptly notifies UBS of any queries from a Data Subject, regulator or any other authority in relation to any Personal Data that Supplier processes as Data Processor in the course of providing the Services.








	
3.6.  

	
Confidentiality / Non-Disclosure







(i)            General rule: As a matter of principle, Supplier must treat all non-public information obtained in connection with the Master Agreement and/or Agreement confidentially in line with the applicable confidentiality obligations, which applies in particular to (1) all information concerning clients of UBS, including knowledge of whether or not someone is a client of UBS (banking secrecy / client confidentiality), (2) any personal data of a person be it a client or any other person such as an employee of UBS (data protection / privacy) and (3) non-public information about the business of UBS, such as its organization, operational and technical processes, infrastructure and systems (including hardware and software), products and services, information on employees and contractual relations with third parties (trade and business secrecy).


 


(ii)            Restricted Countries: Without the prior written consent of UBS Supplier must not access or provide access to CID (in a Restricted Country) from outside a Restricted Country or transfer or allow the transfer of any CID outside a Restricted Country. In case that Supplier or Supplier’s Subcontractor does not comply with this section, UBS has the right to terminate the Agreement.


 


(iii)   Transfer or disclosure of Personal Data: Supplier must not transfer or disclose the Personal Data except: (i) where necessary to provide the Services (as defined in the Agreement) other than using a Sub-contractor (if permitted by UBS); or (ii) with the written authority of UBS; or (iii) when using a Sub-contractor pursuant to clause 6 in this DP Exhibit; or (iv) when required by applicable mandatory law, in which case Supplier must, where permitted by such law, give UBS written notice prior to such transfer or disclosure so that UBS can challenge such transfer or disclosure.


 


Supplier has to take all reasonable measures to prevent the transfer or disclosure if such transfer or disclosure is not in compliance with applicable law and to protect UBS's rights and position.


 




  





33/42












Exhibit 10.1








 



	
3.7.

	
Obligation to notify: Supplier must inform UBS without undue delay in case of serious interruption in operations, suspicion of breaches of data protection or other irregularities in Processing Personal Data.







 



	
3.8.

	
Copies of Personal Data: Supplier must not create any copies or duplicates of Personal Data without UBS's previous written consent, unless such a creation is necessary to provide and document the Services.







 



	
3.9.

	
Ownership and retention rights: The Personal Data, any copies or reproductions made thereof remain UBS's property. Any right of retention of Supplier in relation to the Personal Data without the express written consent of UBS is excluded. Unless set out otherwise in the Agreement, upon request by UBS or in any event, upon termination of the Agreement for any reason, Supplier must return to UBS or upon request by UBS, destroy, all Personal Data of UBS in its possession or under its control, except to the extent that such return or destruction is prohibited by the laws or regulations applicable in the country in which Supplier carries out the Processing. Where such a return or destruction is prohibited, the remaining Personal Data must be kept confidential and no longer be Processed by Supplier. Upon request by UBS, Supplier must confirm in writing that it has complied with the obligations of this sub-section.







 



	
4.  

	
Obligations of UBS







 



	
4.1.  

	
UBS represents and warrants that the Personal Data provided to Supplier were processed lawfully (e.g., lawful collection, compliance with obligation to inform).








	
4.2.  

	
UBS shall not by any act or omission put Supplier or any Subcontractor in breach of any of the Data Protection Laws and Regulations in connection with the Processing of the Personal Data. Without prejudice to the foregoing, Supplier shall not be held responsible for UBS's breach of Data Protection Laws and Regulations.








	
4.3.  

	
Unless already specified in the Master Agreement and/or any Agreement(s), UBS is obligated to instruct Supplier about the purpose of Processing Personal Data and the data recipients.








	
4.4.  

	
UBS may inspect the results of Processing of Personal Data by Supplier and will notify Supplier of any relevant errors or irregularities which are to be fixed by Supplier.







 



	
5.  

	
Rights of the Data Subjects







 



	
5.1.  

	
Each Party acting as a Data Controller under the Master Agreement and/or any Agreement(s) remains solely responsible for the adherence to the rights of the Data Subjects (including information, correction, destruction, blocking).








	
5.2.  

	
The rights of the Data Subjects are to be asserted against the responsible Data Controller. In the event of lawsuits against a Data Subject, the Data Controller has the sole right of decision.








	
5.3.  

	
If UBS has an obligation under applicable data protection law to provide information to the Data Subject about the Processing of his/her Personal Data, Supplier acting as a Data Processor must make the relevant information available to UBS and upon request by UBS provide such other assistance in order for UBS to comply with the rights of the Data Subjects.








	
5.4.  

	
Supplier acting as a Data Processor must comply with all instructions from UBS to rectify, delete and/or update any Personal Data.







 



	
6.  

	
Subcontractors







 



	
6.1.  

	
Supplier may use a Subcontractor to carry out the Processing only with the prior written consent from UBS and after Supplier has entered into a contract with the Subcontractor which includes terms equivalent to those in this DP Exhibit and any additional terms UBS may require.








	
6.2.  

	
Supplier must ensure that each Subcontractor does not process any Personal Data or CID in contravention of this DP Exhibit and the Data Protection Laws or Regulations or other applicable laws, in particular that the Subcontractor implements Adequate Safeguards.







 




  





34/42












Exhibit 10.1








 



	
7.  

	
Technical and organizational security measures







 



	
7.1.  

	
Supplier must implement such technical and organizational security measures for Processing of any Personal Data as provided in the Master Agreement and/or any Agreement(s) and must upon request from UBS provide evidence of the implementation of such measures.








	
7.2.  

	
Supplier represents and warrants that it has in place and maintains at least the following technical and organizational security measures commensurate with the risks associated with the Processing of Personal Data:








	
7.2.1  

	
Premises Access Control: Unauthorized persons must be prevented from gaining physical access to premises, buildings or rooms, where data Processing systems are located which process Personal Data; persons are unauthorized if their activity does not correspond to tasks assigned to them (examples of measures: specifying authorized individuals; using badge readers; locking of rooms; video surveillance and alarm devices with reference to access areas); exceptions may be granted for the purpose of auditing the facilities to third party auditors as long as they are supervised by Supplier and do not get access to the Personal Data itself.








	
7.2.2  

	
Electronic Data Processing (EDP) System Access Control: Data Processing systems must be prevented from being used without authorization (examples of measures: assignment of user IDs for identification and user passwords for authentication; firewalls).








	
7.2.3  

	
Data Access Control: Persons entitled to use a data Processing system must gain access only to the data to which they have a right of access, and Personal Data must not be read, copied, modified or removed without authorization in the course of Processing or use and after storage (examples of measures: restriction on access to files and programs based on a “need-to-know-basis“; prevention of use/installation of unauthorized hardware and/or software; storing data carriers in secured areas; establishing rules for the safe and permanent destruction of data carriers that are no longer required).








	
7.2.4  

	
Data Transmission Control: Except as necessary for the provision of the Services in accordance with the Master Agreement and/or any Agreement(s) Personal Data must not be read, copied, modified or removed without authorization during transfer or storage and it must be possible to establish to whom Personal Data was transferred to (examples of measures: instructions for online or offline transfer; encryption of data or transportation of data carriers in sealed containers, shipping and delivery notes).








	
7.2.5  

	
Data Entry Control: It must be possible retrospectively to examine and establish whether and by whom Personal Data have been entered into data Processing systems, modified or removed (examples of measures: logging of administration and user activities).








	
7.2.6  

	
Contractual Control: Personal Data being processed on commission must be processed solely in accordance with the Master Agreement and/or any Agreement(s) and related instructions of UBS (examples of measures: written instructions or contracts; control of the contractual performance).








	
7.2.7  

	
Availability Control: Personal Data must be protected against accidental destruction or loss (examples of measures: creating back-up copies stored in specially protected environments or building reliable redundancies; implementation of anti-virus software; creation of contingency plans or business recovery strategies in case of water damage, lightning strike, power failure, deficits of suppliers).








	
7.2.8  

	
Organizational Requirements: The internal organization of Supplier must meet the specific requirements of data protection (examples of measures: designation of Data Protection Officers; commitment of the employees to maintain confidentiality; training of Staff on data privacy and data security; realization of IT security concepts; notifications / authorizations regarding Data Protection Authorities, as far as applicable). In particular, to avoid accidental mixing of Personal Data, Supplier separates other data than that belonging to UBS by technical and organizational measures from UBS's data (examples of measures: physical or logical separation of data).







 



	
8.  

	
Right to audit and monitor







 



	
8.1.  

	
Upon request from UBS, for the purposes of audit or certification, or upon request from UBS's regulator in relation to the supervision of UBS, Supplier must provide relevant information on its data processing facilities, procedures, and personnel used for the provision of the Services. UBS shall pay all commercially reasonable costs of any such audit or certification.








	
8.2.  

	
UBS shall in particular be entitled, in consultation with Supplier and observing a reasonable notice period, to audit and inspect Supplier’s working premises during normal business hours and without creating a business interruption, to satisfy itself that adequate measures are being taken to meet the technical and organizational requirements of the Data Protection Laws and Regulations. UBS acknowledges that Supplier owes a duty to its other clients to maintain information relating to them confidential. Should Supplier need to limit UBS access rights as a result of Supplier’s confidentiality obligations to its clients, Supplier agrees to use all reasonable endeavors to provide such alternative evidence as is necessary to allow UBS to perform a satisfactory audit under this provision.







 




  





35/42












Exhibit 10.1








 



	
9.  

	
Other, General Provisions







 



	
9.1.  

	
Supplier has to inform UBS without undue delay, if Supplier has to reasonably anticipate that data of UBS in Supplier's possession or under its control is threatened with seizure or confiscation (e.g. through bankruptcy or settlement proceedings or actions of a third party). Supplier must initiate all reasonable measures to protect UBS's rights and position, in particular inform all involved bodies and persons that authority over the data lies with UBS.







 



	
9.2.   

	
Changes and amendments to this DP Exhibit and all of its components, including any assurances by UBS, require written agreement and an explicit statement that they represent a change or amendment to these conditions. The same applies to the waiving of this formal requirement.







 


 



	
 


 


Signed for and on behalf of UBS AG by:


 


 

	  	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]

	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]


	  

March ___, 2012

	  	  	  
	
 


 


Signed for and on behalf of Cicero, Inc.  by:


 


 

	  	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]

	  
	  

March ___, 2012

	 	 	 










 




  





36/42












Exhibit 10.1








 


Exhibit 4: Restricted Countries List


 


to the UBS Master Agreement concluded between UBS AG and Cicero, Inc.  dated March 2, 2012.


 


 



	 	EMEA: 	Jersey, Luxembourg, Monaco, Switzerland
	 	 	 
	 	APAC: 	China, Korea, Singapore
	 	 	 
	 	AMERICAS:  	Bahamas, Cayman Islands, Mexico





 


UBS is authorized to unilaterally amend this list of Restricted Countries by giving Supplier written notice of any such amendment at any time.


 



	
 


 


Signed for and on behalf of UBS AG by:


 


 

	  	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]

	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]


	  

March __, 2012

	  	  	  
	
 


 


Signed for and on behalf of Cicero, Inc.  by:


 


 

	  	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]

	  
	  

March __, 2012

	 	 	 










 


 




  





37/42












Exhibit 10.1








 


Exhibit 5: Security Exhibit


 


to the UBS Master Agreement concluded between UBS AG and Cicero, Inc.  dated March 2, 2012


 



	
1.  

	
Preamble







 



	
(1)

	
This document (“Security Exhibit“) specifies the data security obligations of Supplier in relation to the processing of UBS Data within the scope of the UBS Master Agreement concluded between UBS AG and Cicero, Inc. dated March 2, 2012, (“UMA“), its applicable Schedules and Supply Orders.







 



	
(2)

	
This Security Exhibit applies to all activities in connection with the UMA, its applicable Schedules and Supply Orders in which the Staff of Supplier or a third party acting on behalf of Supplier process UBS Data.







 



	
(3)

	
Terms and references which are not defined in this Security Exhibit shall have the same meanings as those contained in the UMA.







 



	
2.  

	
Obligations of Supplier. As at the commencement date of the UMA as per clause 10.1(a) thereof, Supplier shall have implemented, to UBS' written approval, and shall thereafter maintain current, a comprehensive security policy (“Security Policy“) that satisfies the requirements set forth below. Supplier shall notify UBS of any material change in its Security Policy.







 



	
3.  

	
Objectives. Supplier’s Security Policy shall ensure that Supplier:







 



	
(a)  

	
Protects the confidentiality, integrity, and availability of all UBS Data;








	
(b)  

	
Protects against accidental, unauthorized, or unlawful access, copying, use, processing, disclosure, alteration, transfer, loss or destruction of the UBS Data. Where access to UBS Data is permitted, Supplier shall not copy, download or store the UBS Data on any desktop, server or other device without UBS’s prior written approval; and








	
(c)  

	
Complies with and implements UBS’s policies dealing with security, procedures and standards notified to Supplier from time to time (the “UBS Security Policies”).







 



	
4.  

	
Risk Assessment. Supplier shall perform regular (and in any event no less frequently than at every twelve month intervals) risk assessments (“Risk Assessments”) that:







 



	
(a)  

	
Identify reasonably foreseeable threats that could result in unauthorized access, copying, use, processing, disclosure, alteration, transfer, loss or destruction of any of the UBS Data;








	
(b)  

	
Assess the likelihood of these threats occurring, and the potential damage that might result, taking into consideration the sensitivity of the relevant types or categories of UBS Data (and any special risks or issues identified by UBS);








	
(c)  

	
Assess the sufficiency of the security measures, policies, and procedures, information systems, technology, and other arrangements that Supplier has in place to control such risks; and








	
(d)  

	
Are provided in a manner and format agreed to by UBS, based on at least the same security and operational risks for new products, services, processes and technologies introduced to the UBS environment or otherwise used to deliver services to UBS.







 


Supplier shall notify UBS in advance of any Risk Assessments and shall provide UBS with the written results, upon request. Supplier shall perform an additional Risk Assessment whenever requested by UBS to do so. UBS shall pay Supplier's reasonable costs of performing such additional Risk Assessments, save where the Risk Assessment was required to assess whether Supplier had sufficiently resolved a vulnerability in its systems or processes, in which case Supplier shall bear the cost of the Risk Assessment. Supplier agrees that all new products, services, processes and technologies introduced to the UBS environment will be approved in writing by the relevant UBS risk control functions.


 




  





38/42












Exhibit 10.1








 



	
5.  

	
Security measures. Based on such Risk Assessment and the requirements of the Master Agreement and/or any Supply Order, Supplier shall develop (or modify, as appropriate), implement and maintain appropriate security measures and procedures (which shall be reflected in an updated Security Policy, to be provided to UBS for UBS's written approval) so as to achieve the objectives set forth in clause 3 above and to manage and control the risks identified during the Risk Assessment, commensurate with the sensitivity of the UBS Data, as well as the complexity and scope of the activities of Supplier pursuant to the Master Agreement and/or any Supply Order. UBS reserves the right, and Supplier agrees, to perform penetration tests and/or other network or infrastructure assurance activities.







 


Such security measures and procedures shall include physical, technical, and organizational safeguards appropriate to: (1) the nature of the UBS Data involved, including the quality, quantity, and age of the data, and the sensitivity of the data, (2) the significance of the processing to the protection of privacy, (3) the nature of the risks and the harm that might result from the threats identified during the Risk Assessment, and (4) the state of the art, state of technological development, and the security techniques available.


 


Supplier shall also be responsible for performing the following non-exhaustive obligations:


 



	
(a)  

	
Physical security measures













	
(1)  

	
Physical security and access control –  Ensuring that all systems hosting UBS Data and/or providing services on behalf of UBS are maintained in a physically secure environment that ensures an unbroken barrier to unauthorized access, and that access restrictions at physical locations containing UBS Data, such as buildings, computer facilities, and records storage facilities, are designed and implemented to permit access only to authorized individuals, and to detect any unauthorized access that may occur, including 24 x 7 security personnel at all relevant locations (“UBS Secure Area”).













	
(2)  

	
Physical security for media – Implementing and maintaining appropriate security measures and procedures to protect, and prevent the unauthorized viewing, copying, alteration or removal of any media containing UBS Data, wherever located.













	
(3)  

	
Media destruction – Implementing and maintaining appropriate security measures and procedures to destroy removable media containing UBS Data that is no longer used, or alternatively (with UBS's prior written consent) to render UBS Data on such removable media unintelligible and not capable of reconstruction by any technical means before re-use of such removable media is allowed.













	
(4)  

	
Shredding - Implementing and maintaining appropriate security measures and procedures to secure confidential disposal of all paper waste generated in supplying the Services by cross shredding, either by Supplier or through a reputable Subcontractor approved by UBS in accordance with clause 4.4 of the UMA.







 



	
(b)  

	
Technical Security Measures













	
(1)  

	
Access controls on information systems – Implementing and maintaining appropriate security measures and procedures to ensure that access to all systems hosting UBS Data and/or being used to provide services to UBS shall be protected through the use of access control systems that uniquely identify each individual requiring access, grant access only to authorized individuals and based on the principle of least privileges, prevent unauthorized persons from gaining access to UBS Data, appropriately limit and control the scope of access granted to any authorized person, and log all relevant access events. These security measures and procedures shall include Supplier implementing and maintaining:













	
(i)  

	
Access rights policies – appropriate policies and procedures regarding the granting of access rights to UBS Data, in order to ensure that only the personnel expressly authorized by UBS in writing may create, modify or cancel the rights of access of the Staff. Supplier shall maintain an accurate and up to date list of all Staff who have access to the UBS Data and shall have the facility to promptly disable access by any individual Staff.







 




  





39/42












Exhibit 10.1










 



	
(ii)  

	
Authorization procedures for persons entitled to access – appropriate security measures and procedures to establish and configure authorization profiles in order to ensure that personnel will only have access to the UBS Data and resources they need to know to perform their duties, and that they are only able to access the UBS Data within the scope and to the extent covered by their respective access permission. Staff working on development must not normally have access to production systems. For occasional and essential support purposes, such Staff may be granted special access for a limited period of time provided such access is managed, appropriately authorized and logged.













	
(iii)  

	
Authentication credentials and procedures – appropriate security measures and procedures for strong authentication of authorized Staff, including the following:








	
·  

	
All systems shall prevent access by unauthorized users;








	
·  

	
New passwords shall be communicated to users in a secure manner, with an appropriate proof of identity check of the intended users. Usernames and passwords supplied by UBS for the purpose of accessing any UBS Systems and/or UBS Data shall be for the sole use of a specific person and shall not be shared with or divulged to any other person;








	
·  

	
Passwords shall not be stored or transmitted in readable form;








	
·  

	
When privileged access (e.g. root or superuser level access) is granted to systems which handle UBS Data and/or are used to provide Services, such access shall be for a limited duration only and shall be fully logged;








	
·  

	
Systems shall not go into production until all Staff have received appropriate documentation and training, including:








	
o  

	
the handling of security breaches;








	
o  

	
the management of emergency access support for Supplier’s developers; and








	
o  

	
procedures to follow when Staff forget their password.













	
(iv)  

	
Access control from outside the UBS Secure Area – appropriate security measures and procedures to prevent Supplier’s information systems or UBS Data from being accessed by unauthorized persons from outside the UBS Secure Area.













	
(v)  

	
Access monitoring – appropriate security measures and procedures for monitoring all access to Supplier’s information systems and UBS Data and for monitoring additions, alterations, deletions, and copying of UBS Data, including:








	
·  

	
Making available to UBS, on request, all logs and records; and








	
·  

	
Maintaining full records of system or applicable access attempts, both successful and failed.













	
(vi)  

	
Intrusion detection/prevention and Malware – appropriate security measures and procedures (i) to ensure that UBS Data, assets and/or systems being used to provide Services is protected against the risk of intrusion and the effects of Malware, and (ii) to monitor each and every instance of access to Supplier’s assets and information systems and to UBS Data to detect the same, and to promptly respond to the same.













	
(vii)  

	
Prohibited devices - appropriate policies and procedures to ensure that the following devices are not used on UBS Systems or any equipment used for the provision of the Services or otherwise in connection with the provision of the Services, unless approved by UBS:








	
·  

	
Network connections;








	
·  

	
Connection to the internet;








	
·  

	
Dial-in access;








	
·  

	
Equipment such as laptops or additional workstations;








	
·  

	
Wireless equipment;








	
·  

	
Software;








	
·  

	
USB memory sticks;








	
·  

	
Network sniffing devices;








	
·  

	
Data capture devices;








	
·  

	
Traffic analysis devices or network management tools;








	
·  

	
Mass storage devices;








	
·  

	
Other removable media; and








	
·  

	
Other technologies that are similar to the above or provide analogous functionality.







 




  





40/42












Exhibit 10.1








 



	
(viii)  

	
Unused network ports - appropriate policies and procedures to ensure that all unused network ports are disabled or disconnected.













	
(ix)  

	
Prohibited functionality - appropriate policies and procedures to ensure that all functionality that allows the extraction and storage of UBS Data is disabled. Examples include, but are not limited to the following:








	
·  

	
Local drive access or mapping; and








	
·  

	
Redirection of COM, LPT, and USB ports.













	
(2)  

	
Data management controls – Implementing and maintaining appropriate security measures and procedures to ensure that UBS Data and UBS Systems are managed properly. These security measures and procedures shall include Supplier implementing and maintaining:













	
(i)  

	
UBS Systems – appropriate policies and procedures to ensure that UBS Systems are used by Supplier only for the purposes specified in the UMA, the applicable Schedule(s) and/or any Supply Order.













	
(ii)  

	
UBS production data - appropriate policies and procedures to ensure that where access is given to production UBS Data, Supplier's Staff and Subcontractors shall not copy, download or store production UBS Data on any desktop, server or other device at any Location, in Supplier’s or its Staff’s possession or otherwise, unless otherwise agreed to in writing by UBS.













	
(iii)  

	
Data input control –appropriate security measures and procedures to ensure that it is possible to check and establish whether, when, and by whom UBS Data has been input into Supplier’s information systems, or accessed, copied, modified, or removed.













	
(iv)  

	
Data processing control –appropriate security measures and procedures to ensure that UBS Data may only be processed in accordance with the UMA and the applicable Schedule(s) and/or any Supply Order, and to ensure that data collected for different purposes can be processed separately, including the following:








	
·  

	
Production systems shall not depend on development infrastructure;








	
·  

	
No production data shall be used for development testing;








	
·  

	
The development of new application or system software shall be kept separate from the production environment.













	
(v)  

	
Data integrity controls –appropriate security measures and procedures to protect the integrity of the UBS Data, to prevent the unauthorized recording, alteration or erasure of UBS Data, and to ensure that it is subsequently possible to determine when, by whom and which UBS Data were recorded, altered or erased.













	
(vi)  

	
Data encryption –appropriate security measures and procedures to ensure that UBS Data is encrypted or protected by other technical means, where appropriate, so that it cannot be read, copied, changed or deleted by unauthorized persons while in storage and while it is being transferred electronically or transferred or saved on a data medium.













	
(vii)  

	
Link encryption - appropriate security measures and procedures to ensure that all data and voice links between Supplier and UBS are encrypted using a method approved in writing by UBS. Encryption must be applied across the whole link between UBS and the UBS Secure Area.













	
(viii)  

	
Data transfer, transport, and transmission Control –appropriate security measures and procedures to ensure the verification and tracing of the locations/destinations to which the UBS Data are transferred by utilization of Supplier’s data communication equipment/devices.













	
(ix)  

	
Data destruction –appropriate security measures and procedures to destroy UBS Data when appropriate and in accordance with the UMA, the applicable Schedule(s) and/or any Supply Order.













	
(x)  

	
Data availability control –appropriate security measures and procedures in order to ensure data availability, including procedures to ensure that UBS Data are protected from accidental destruction or loss, and against loss of data caused by a power shortage or interruptions in the power supply.













	
(xi)  

	
Software patching –appropriate security measures and procedures in order to ensure the regular update and patching of all computer software to eliminate vulnerabilities and remove flaws that could otherwise facilitate security breaches.













	
(xii)  

	
Change control procedures –appropriate security measures and procedures to protect the UBS Data in the event of changes to, movement of, or replacement of any hardware, computer component, software, or information related to the processing of UBS Data, including emergency changes. Any emergency changes which need to be made by Supplier which bypass any of the elements of the established change control process shall be controlled and logged by Supplier, and Supplier shall take commercially reasonable steps to keep such emergency changes to a minimum, to the extent possible within its reasonable control.













	
(xiii)  

	
Infrastructure management – appropriate security measures and procedures - to demonstrate careful infrastructure management with a robust change control process.













	
(xiv)  

	
Backup, retention, and recovery –appropriate backup and recovery security measures and procedures in order to ensure data availability in the event of loss of data or information systems from any cause.














  





41/42












Exhibit 10.1








 



	
(c)  

	
Organizational Security Measures







 



	
(1)  

	
Responsibility – Implementing and maintaining appropriate security measures and procedures to ensure assignment of responsibility for information security management to appropriate skilled and senior Staff.







 



	
(2)  

	
Qualification of Staff – Implementing and maintaining appropriate security measures and procedures to ensure the reliability, technical expertise, and personal integrity of all Staff who have access to Supplier’s information system or UBS Data.







 



	
(3)  

	
Obligations of Staff – Implementing and maintaining appropriate security measures and procedures in order to verify that any Staff accessing the UBS Data knows his obligations and the consequences of any security breach.







 



	
6.  

	
Training and education. Supplier shall institute an appropriate training and education program to ensure that the Staff are trained to, and will, implement and comply with its Security Policy, and to ensure that they are adequately aware of their responsibilities under the Security Policy.







 



	
7.  

	
Subcontractors. Whenever Supplier is authorized by UBS to use Subcontractors to provide the Services under the Master Agreement, Supplier shall ensure that Subcontractors comply with security measures commensurate with those described in this Security Exhibit.







 



	
8.  

	
Incident management/escalation. Supplier shall develop and implement (and require its Subcontractors to develop and implement) an incident response plan for dealing with any security incidents, to be approved by UBS in writing, including escalation paths to senior management based on the incident classification or severity, incident contact lists, initial responses, investigation log, system recovery, issue and eradication, reporting and review and follow up procedures, including appropriate reports to regulatory and law enforcement agencies. Supplier shall immediately report to UBS all incidents that may in any way affect the operation of UBS or the confidentiality, availability or integrity of UBS Data (including backed up data). Supplier shall immediately disclose to UBS all attempted or actual malicious access to systems or networks which provide access to the UBS Data or incidents where Supplier suspects or detects that unauthorized persons or entities have gained access to UBS Data. Supplier shall ensure that all Staff (including Subcontractors) fully understand the process and conditions under which they are required to invoke the appropriate incident response plans. Supplier acknowledges and agrees that records of system activity and of handling of UBS Data may be evidence in the event of a security breach or other inappropriate activity. Upon UBS’s reasonable request, Supplier shall deliver these records to UBS for use in any legal, investigatory or regulatory proceedings.







 



	
9.  

	
Review and investigations. Supplier shall promptly provide UBS with a copy of any operational audit reports which have been completed by any independent bodies, including any SAS-70 reports. Without prejudice to clause 8 (Right to audit and monitor) of the Exhibit 3 (Data Protection Exhibit), UBS reserves the right at any time (together with its external auditors or any regulatory authority) to inspect any aspect of Supplier’s security measures and procedures and to conduct its own security tests with respect to the UBS Data. Supplier shall co-operate fully with any such inspections and tests and shall implement any resulting recommendations within an agreed timeframe thereafter. Supplier shall review the Security Policy regularly, and particularly following any changes in Supplier’s information systems, in order to verify that the Security Policy and controls set out therein remain accurate, comprehensive and up to date. Where in UBS’s reasonable opinion, it is necessary to have UBS staff be present on Supplier premises, Supplier agrees to accommodate the presence of any UBS staff.












 



	
 


 


Signed for and on behalf of UBS AG by:


 


 

	  	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]

	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]


	  

March ___, 2012

	  	  	  
	
 


 


Signed for and on behalf of Cicero, Inc.  by:


 


 

	  	
 


__________________________


Signature


__________________________


[Name]


__________________________


[Function]

	  
	  

March __, 2012

	 	 	 










 


 


42/42