Document:

Exhibit

Confidential portions of this exhibit have been omitted pursuant to a request for confidential treatment filed separately with the Securities and Exchange Commission. Omissions are designated by the symbol [*****].

EXHIBIT 10.55 
Special Business Provisions
MS-65530-0016
Amendment No. 24

Amendment No. 24
 To
Special Business Provisions (SBP) MS-65530-0016 between
The Boeing Company and Spirit AeroSystems, Inc.

THIS AMENDMENT (“SBP Amendment No. 24”), is entered into as of the last day of execution written below by and between Spirit AeroSystems, Inc. , having its principal office  in Wichita, Kansas (“Seller”), and The Boeing Company, a Delaware corporation acting by and through its Boeing Commercial Airplanes division, with a place of business in Everett, Washington (“Boeing”).
Hereinafter, Seller and Boeing may be referred to jointly as “Parties” hereto.

WHEREAS, the Parties have entered into Special Business Provisions (SBP) MS- 65530-0016, dated June 16, 2005, as amended (“SBP”).

WHEREAS, the Parties have agreed to modify the SBP to incorporate updated Prices in SBP Attachment 1 (Work Statement and Pricing).

WHEREAS, the Parties have agreed to modify SBP Attachment 2 (Product Article Definition and Contract Change Notices) to reflect the incorporation of certain additional Contract Change Notices (CCNs) through December 31, 2015.

WHEREAS, the Parties have agreed to certain modifications to SBP Attachment 7 (Indentured Priced Parts List for POAs).

WHEREAS, the Parties have agreed to certain modifications to SBP Attachment 9 (Non- Recurring Agreements).

WHEREAS, the Parties have agreed to certain modifications to SBP Attachment 14 (Production Article Delivery Schedule).

NOW THEREFORE, in consideration of the foregoing and the mutual agreements contained herein, and for other good and valuable consideration, the value, receipt and sufficiency of which are hereby acknowledged, the Parties hereby agree as follows:

		
	1.
	THAT the AMENDMENTS index of the SBP is hereby deleted in its entirety and replaced with the following (passed over and not-to-be-used Amendment Numbers 15, 16, 18 and 19 have intentionally been designated “NULL”):

Confidential portions of this exhibit have been omitted pursuant to a request for confidential treatment filed separately with the Securities and Exchange Commission. Omissions are designated by the symbol [*****].

	
				
	AMENDMENTS
	 
	 

	Amend Number
	Description
	Effective Date
	Approval

	1
	Revise Company name from Mid-Western Aircraft Systems Incorporated to Spirit AeroSystems throughout document. Update Attachments 1, 2, 4, 14 and 16.
	2/23/2006
	H. McCormick/ R. Stone

	 
	 
	 
	 

	2
	Incorporate CCNs as listed in Amendment 2 Attachment A, includes addition of new section 12.19, modification to sections 3.4.9, 12.16 and 32.0, updates to Attachments 1, 2, 6, 7, 15, 16, 19 and 20.
	4/11/2007
	H. McCormick/ J. Edwards

	 
	 
	 
	 

	3
	Incorporate CCNs as listed in Amendment 3 Attachment A, updates to Attachments 1, 2, 7, 14, 15, 16 and 22.
	11/28/2007
	H. McCormick/ J. Edwards

	 
	 
	 
	 

	4
	Incorporate CCNs as listed in Amendment 4 Attachment A. Updates to Attachments 1, 2, 7, 14, 15, 16. Incorporate Attachment 1A per CCN 508, 1328.
	7/8/2008
	S.Hu
W. Wallace

	 
	 
	 
	 

	5
	Incorporate CCNs as listed in Amendment 5 Attachment A, includes addition of new section 12.3.1.1 Updates to Attachments 1, 2, 7, 14, 15, 16, 20.
	6/22/2009
	S. Hu
R.    Stone

	 
	 
	 
	 

	6
	Incorporate CCNs as listed in Amendment 6 Attachment A. Updates to Attachments 1, 2, 4, 7, 9, 10, 14, 16.
Incorporate Attachment 9 per CCN 2385.
	11/23/2010
	S.    Hu
M. Milan

	 
	 
	 
	 

	7
	Incorporate CCNs as listed in Amendment 7 Attachment A, includes addition of new section 12.13.3.1. Updates to Attachments 1, 2, 4, 7, 9, 14, 16. Incorporate Attachment 1B per CCN 4212 and Attachment 23 per the 767-2C MOA.
	 7/29/11
	S.    Hu
M. Milan

	 
	 
	 
	 

	8
	Incorporate CCNs as listed in Amendment 8 Attachment A, includes revisions to section 7.9 and 12.13.1.1. Updates to Attachments 1, 2, 4, 7, 9, 14, 15, 16.
	2/6/2013
	C. Howell
M. Milan

	 
	 
	 
	 

	9
	Incorporate Attachment 25 - 737 Max Titanium Inner Wall Agreement.
	9/4/2014
	E. Flagel
M. Milan

	 
	 
	 
	 

	10
	Incorporate Attachment 26-737 Derailment.
	9/2/2014
	B. Folden
R. Ast

	 
	 
	 
	 

	11
	Incorporate Attachment 27 -737-MAX Non Recurring Agreement, and Attachment 28 737/747/767/777 Pricing Agreement.  Updates Section 4.1, Attachment 4 Section B.1., Attachments 9 and 15.
	3/10/2015
	C.Howell
R. Ast

	 
	 
	 
	 

	12
	Delete and replace Attachment 25 Section 3.0
	4/9/2015
	K. Drawsky
R. Ast

	 
	 
	 
	 

	13
	Incorporate CCNs as listed in Amendment 13 Attachment A, updates to Attachments 1, 2, 7, 9, 14, and 16.
	1/4/2016
	L. Taylor
K. Leyba

	 
	 
	 
	 

	14
	Incorporate Attachment 25, Addendum 1. 
	4/21/2015
	D. Blaylock
R. Grant

	 
	 
	 
	 

	15
	NULL
	 
	 

	16
	NULL
	 
	 

	 
	 
	 
	 

	17
	Incorporate Attachment 29, 777X Non-Recurring Agreement 
	12/23/2015
	A. Lucker
E. Bauer

	 
	 
	 
	 

	18
	NULL
	 
	 

	19
	NULL
	 
	 

	 
	 
	 
	 

Confidential portions of this exhibit have been omitted pursuant to a request for confidential treatment filed separately with the Securities and Exchange Commission. Omissions are designated by the symbol [*****].

	
				
	20
	737 MAX Inner Wall
	12/17/2015
	S. Garcia-Deleone
J.Reed

	 
	 
	 
	 

	21
	Revisions to Attachment 27, 737 MAX Non-Recurring Agreement
	5/9/2016
	D. Blaylock
R.Grant

	 
	 
	 
	 

	22
	737 MAX Composite Inner Wall Line Movement
	11/2/2016
	D. Blaylock
E. Bossler

	 
	 
	 
	 

	23
	737 MAX 9 INITIAL and CIW Line [*****] Tooling Incentive AGREEMENT
	12/16/2016
	D. Blaylock
E. Bossler

	 
	 
	 
	 

	24
	Incorporate CCNs as listed in Amendment 23 Attachment A, updates to Attachments 1, 2, 7, 9, and 14.  
	12/20/2016
	L. Taylor
K. Leyba

	 
	 
	 
	 

		
	2.
	THAT the Parties agree that SBP Attachment 1 excel files, under “Work Statement and Pricing,” “Attachment 1 Parts and Prices” are deleted in their entirety and replaced by Exhibits A-D of this Amendment, which incorporate  the price impacts from the CCNs noted in this Paragraph 2. 

Hereto “SBP MS-65530-0016 Attachment 1_Rev_013_737 is replaced by Exhibit A) “SBP MS-65530-0016 Amend 24_Attachment 1_737.xlsx”

Hereto “SBP MS-65530-0016 Attachment 1_Rev_013_747 is replaced by Exhibit B) “SBP MS-65530-0016 Amend 24_Attachment 1_747.xlsx”

Hereto “SBP MS-65530-0016 Attachment 1_Rev_013_767 is replaced by Exhibit C)
“SBP MS-65530-0016 Amend 24_Attachment 1_767.xlsx”

Hereto “SBP MS-65530-0016 Attachment 1_Rev_013_777 is replaced by Exhibit D) “SBP MS-65530-0016 Amend 24_Attachment 1_777.xlsx”

CCNs contributing to these changes are: 3126R2, 5445R1, 5446R1, 6487R1, 7175R2, 8283R3, 8657, 8695, 8705, 8715R1, 8715R2, 8719, 8721, 8724, 8724R1, 8752R1, 8752R2, 8770, 8770R1, 8776, 8777, 8777R1, 8786, 8787, 8792R1, 8905, 8983, 8987, 8998, 9012, 9015, 9016, 9033, 9044, 9045, 9064, 9074R1, 9074R2, 9204, 9205, 9218, 9298, 9367, 9368, 9475, 9481, 9491, 9495, 9495R1 and 9557, 9611 and 9688.

		
	3.
	THAT SBP Attachment 2 is revised to reflect incorporation of the CCNs in SBP Amendment No. 24 Attachment A.

		
	4.
	THAT SBP Attachment 7 is revised to reflect incorporation of CCNs 8393, 9073 and 9079.

		
	1.
	THAT SBP Attachment 9 is revised to reflect the incorporation of CCNs 2580R4, 3126R2, 4451R1, 5889R5, 6527, 6086, 6086R2, 6086R6, 6086R7, 6086R8, 6086R10, 6086R11, 6487R1, 7752R4, 7903, 8327, 8426, 8493R1, 8494R1, 8505, 8548, 8552, 8556, 8593, 8594, 8595, 8595R1, 8657, 8664, 8695, 8705, 8719, 8721, 8724, 8724R1, 8737, 8776, 8792R1, 8820, 9008, 9010, 9011, 9012, 9015, 9016, 9034, 9043, 9044, 9045, 9054, 9101, 9146, 9147, 9148, 9149, 9205, 9313, 9314, 9424, 9425, 9426, 9491, 9591, 9610, 9611, 9638, 9651, 9688, 9693, 9718, 9719 and 9758.  Attachment 9 is further revised to reflect incorporation of Settlement letter 6-5AC1-DJB15-0059 R2.

Confidential portions of this exhibit have been omitted pursuant to a request for confidential treatment filed separately with the Securities and Exchange Commission. Omissions are designated by the symbol [*****].

		
	2.
	THAT SBP Attachment 14 is revised to incorporate the agreed-to firing orders as reflected in CCNs 5895R2, 5895R4, 8754, 8767, 8821, 8822, 8882, 8884, 8915, 8916, 8917, 8930, 8931, 8966, 8967, 8971, 8980, 8984, 9013, 9017, 9018, 9031, 9036, 9042, 9083, 9118, 9119, 9136, 9137, 9143, 9171, 9172, 9181, 9201, 9201R1, 9214, 9215, 9385, 9390, 9423, 9441, 9442, 9448, 9536, 9541, 9542, 9560, 9563, 9585, 9586, 9587, 9607, 9609, 9630, 9636, 9639R1, 9684, 9686, 9701, 9702, 9702R1, 9721, 9722, 9733, 9775, 9779, 9780, 9819, 9827, and 9829.

THAT except as expressly provided by this SBP Amendment No. 24, all other terms, conditions, provisions and obligations of the parties under Special Business Provisions MS-65530-0016 remain unchanged.

IN WITNESS WHEREOF the parties hereto have executed this SBP Amendment No. 24 as of the last day of execution as written below.

THE BOEING COMPANY               SPIRIT AEROSYSTEMS, INC.
Boeing Commercial Airplanes Supplier Management

		
	By: /s/ Lanny Taylor
	                                 By: /s/  Kenny Leba              

    Lanny Taylor                    Kenny Leyba
Procurement Agent                Contracts Administrator
Date: December 20, 2016            Date: December 20, 2016

Confidential portions of this exhibit have been omitted pursuant to a request for confidential treatment filed separately with the Securities and Exchange Commission. Omissions are designated by the symbol [*****].

ATTACHMENT A

	
							
	6086
	6316
	6527
	6933
	6940
	7950
	8242

	8243
	8318
	8426
	8505
	8530
	8537
	8539

	8548
	8550
	8552
	8579
	8595
	8657
	8658

	8664
	8678
	8692
	8693
	8701
	8702
	8703

	8705
	8715
	8717
	8718
	8719
	8720
	8721

	8722
	8723
	8724
	8727
	8728
	8729
	8734

	8735
	8736
	8737
	8738
	8750
	8752
	8753

	8754
	8755
	8756
	8759
	8761
	8764
	8765

	8766
	8767
	8768
	8769
	8770
	8771
	8772

	8775
	8776
	8777
	8779
	8786
	8787
	8788

	8789
	8802
	8803
	8805
	8806
	8807
	8808

	8809
	8810
	8811
	8812
	8813
	8814
	8815

	8816
	8817
	8818
	8820
	8821
	8822
	8824

	8837
	8838
	8839
	8840
	8841
	8842
	8843

	8844
	8845
	8846
	8847
	8848
	8849
	8850

	8851
	8852
	8853
	8857
	8859
	8860
	8861

	8865
	8867
	8868
	8869
	8870
	8871
	8872

	8873
	8879
	8882
	8884
	8885
	8886
	8887

	8890
	8896
	8899
	8901
	8902
	8904
	8905

	8906
	8909
	8915
	8916
	8917
	8918
	8919

	8925
	8928
	8930
	8931
	8932
	8933
	8934

	8936
	8937
	8942
	8949
	8950
	8951
	8952

	8953
	8958
	8959
	8960
	8962
	8963
	8964

	8966
	8967
	8971
	8972
	8979
	8980
	8981

	8982
	8983
	8984
	8987
	8996
	8997
	8998

	8999
	9000
	9001
	9002
	9003
	9004
	9005

	9006
	9007
	9008
	9010
	9011
	9012
	9013

	9014
	9015
	9016
	9017
	9018
	9019
	9020

	9021
	9022
	9023
	9024
	9025
	9026
	9027

	9028
	9029
	9030
	9031
	9032
	9033
	9034

	9036
	9037
	9042
	9043
	9044
	9045
	9046

	9054
	9055
	9056
	9057
	9058
	9059
	9060

	9062
	9064
	9065
	9066
	9067
	9068
	9069

	9070
	9071
	9072
	9073
	9074
	9075
	9079

	9082
	9083
	9084
	9085
	9091
	9095
	9096

	9097
	9098
	9099
	9101
	9104
	9105
	9106

	9107
	9108
	9110
	9111
	9112
	9113
	9114

	9116
	9117
	9118
	9119
	9120
	9121
	9122

	9123
	9124
	9125
	9126
	9128
	9131
	9132

	9133
	9135
	9136
	9137
	9138
	9140
	9141

Confidential portions of this exhibit have been omitted pursuant to a request for confidential treatment filed separately with the Securities and Exchange Commission. Omissions are designated by the symbol [*****].

	
							
	9142
	9143
	9144
	9146
	9147
	9148
	9149

	9150
	9151
	9152
	9153
	9154
	9155
	9156

	9157
	9158
	9159
	9160
	9162
	9163
	9164

	9165
	9166
	9170
	9171
	9172
	9173
	9174

	9175
	9176
	9177
	9178
	9179
	9180
	9181

	9182
	9186
	9187
	9188
	9189
	9190
	9191

	9192
	9193
	9194
	9195
	9196
	9197
	9198

	9199
	9200
	9201
	9202
	9203
	9204
	9205

	9206
	9207
	9208
	9209
	9210
	9211
	9212

	9213
	9214
	9215
	9216
	9217
	9218
	9219

	9220
	9221
	9222
	9223
	9224
	9225
	9226

	9227
	9228
	9229
	9230
	9231
	9232
	9233

	9234
	9235
	9236
	9237
	9238
	9239
	9240

	9241
	9242
	9243
	9244
	9245
	9246
	9247

	9248
	9249
	9250
	9251
	9252
	9253
	9254

	9255
	9256
	9257
	9258
	9259
	9260
	9261

	9262
	9263
	9264
	9265
	9266
	9267
	9268

	9269
	9270
	9271
	9272
	9273
	9274
	9275

	9276
	9277
	9278
	9279
	9280
	9281
	9282

	9283
	9284
	9285
	9291
	9292
	9298
	9299

	9306
	9307
	9308
	9309
	9310
	9311
	9313

	9314
	9325
	9326
	9327
	9328
	9329
	9330

	9331
	9332
	9333
	9334
	9336
	9346
	9347

	9348
	9349
	9350
	9351
	9352
	9353
	9354

	9355
	9356
	9357
	9358
	9359
	9360
	9361

	9362
	9363
	9364
	9365
	9366
	9367
	9368

	9369
	9370
	9371
	9372
	9373
	9374
	9375

	9376
	9377
	9378
	9379
	9380
	9381
	9382

	9385
	9386
	9387
	9388
	9389
	9390
	9391

	9392
	9394
	9396
	9397
	9398
	9399
	9400

	9401
	9402
	9405
	9406
	9407
	9408
	9409

	9410
	9411
	9412
	9413
	9414
	9415
	9416

	9417
	9418
	9419
	9420
	9421
	9422
	9423

	9424
	9425
	9426
	9427
	9430
	9431
	9434

	9435
	9436
	9437
	9438
	9439
	9440
	9441

	9442
	9445
	9446
	9447
	9448
	9449
	9450

	9451
	9452
	9453
	9454
	9457
	9458
	9459

	9460
	9461
	9462
	9463
	9464
	9465
	9466

	9467
	9468
	9469
	9470
	9471
	9473
	9474

	9475
	9476
	9477
	9478
	9479
	9480
	9481

	9482
	9483
	9484
	9485
	9486
	9487
	9488

	9489
	9490
	9491
	9492
	9493
	9494
	9495

	9496
	9497
	9498
	9499
	9500
	9501
	9502

	9503
	9504
	9505
	9506
	9507
	9508
	9509

	9510
	9511
	9512
	9513
	9515
	9516
	9517

	9518
	9519
	9520
	9521
	9522
	9523
	9524

Confidential portions of this exhibit have been omitted pursuant to a request for confidential treatment filed separately with the Securities and Exchange Commission. Omissions are designated by the symbol [*****].

	
							
	9527
	9528
	9529
	9530
	9531
	9532
	9533

	9534
	9535
	9536
	9537
	9538
	9539
	9540

	9541
	9542
	9543
	9544
	9545
	9546
	9547

	9548
	9549
	9550
	9551
	9552
	9553
	9554

	9555
	9556
	9557
	9558
	9559
	9560
	9563

	9566
	9567
	9568
	9569
	9570
	9571
	9572

	9573
	9574
	9575
	9576
	9577
	9578
	9579

	9581
	9582
	9583
	9584
	9585
	9588
	9589

	9591
	9592
	9593
	9594
	9595
	9596
	9597

	9598
	9601
	9602
	9603
	9604
	9605
	9606

	9607
	9608
	9609
	9610
	9611
	9612
	9613

	9614
	9617
	9619
	9620
	9621
	9622
	9623

	9624
	9625
	9626
	9627
	9628
	9629
	9630

	9631
	9632
	9633
	9634
	9635
	9636
	9638

	9640
	9641
	9642
	9643
	9644
	9645
	9646

	9647
	9648
	9649
	9650
	9651
	9652
	9653

	9654
	9655
	9656
	9657
	9658
	9659
	9660

	9661
	9662
	9663
	9664
	9665
	9666
	9667

	9668
	9669
	9670
	9671
	9673
	9674
	9675

	9676
	9677
	9678
	9679
	9680
	9681
	9682

	9683
	9684
	9685
	9686
	9687
	9688
	9689

	9690
	9691
	9692
	9693
	9697
	9698
	9699

	9700
	9701
	9702
	9703
	9704
	9705
	9706

	9707
	9708
	9709
	9710
	9711
	9712
	9713

	9714
	9715
	9716
	9717
	9718
	9719
	9720

	9721
	9722
	9723
	9724
	9725
	9726
	9727

	9728
	9729
	9730
	9732
	9733
	9734
	9735

	9737
	9738
	9739
	9740
	9742
	9743
	9744

	9745
	9746
	9747
	9748
	9749
	9750
	9751

	9752
	9753
	9754
	9755
	9756
	9757
	9758

	9759
	9761
	9762
	9763
	9764
	9765
	9766

	9767
	9768
	9769
	9770
	9771
	9773
	9774

	9775
	9776
	9777
	9779
	9780
	9782
	9783

	9784
	9785
	9786
	9787
	9788
	9789
	9790

	9791
	9793
	9794
	9795
	9796
	9797
	9798

	9799
	9800
	9803
	9804
	9805
	9806
	9807

	9808
	9809
	9810
	9811
	9812
	9813
	9814

	9817
	9818
	9819
	9820
	9821
	9823
	9824

	9825
	9827
	9828
	9829
	9831
	9836
	2580R4

	3126R2
	4451R1
	5445R1
	5446R1
	5889R2
	5889R3
	5889R5

	5895R2
	5895R4
	6086R10
	6086R11
	6086R2
	6086R6
	6086R7

	6086R8
	6086R9
	6134R1
	6487R1
	6913R3
	6940R1
	7175R2

	7752R4
	8067R3
	8067R4
	8067R5
	8138R3
	8138R4
	8281R3

	8281R4
	8283R3
	8283R4
	8283R5
	8283R6
	8445R1
	8445R2

	8461R1
	8510R2
	8510R3
	8510R4
	8595R1
	8665R1
	8665R2

	8715R1
	8715R2
	8724R1
	8727R1
	8727R2
	8752R1
	8752R2

Confidential portions of this exhibit have been omitted pursuant to a request for confidential treatment filed separately with the Securities and Exchange Commission. Omissions are designated by the symbol [*****].

	
							
	8770R1
	8777R1
	8785R2
	8792R1
	8802R1
	8807R1
	8807R2

	8818R1
	8845R2
	8925R1
	8925R2
	8928R1
	8951R1
	9056R1

	9074R1
	9074R2
	9152R1
	9179R1
	9201R1
	9213R1
	9220R1

	9259R1
	9265R1
	9283R1
	9290R1
	9298R1
	9374R1
	9394R1

	9400R1
	9402R1
	9406R1
	9430R1
	9438R1
	9495R1
	9515R1

	9520R1
	9527R1
	9544R1
	9577R1
	9626R1
	9639R1
	9653R1

	9654R1
	9655R1
	9656R1
	9657R1
	9687R1
	9702R1
	9707R1

	9770R1
	9801R1
	9817R1
	9817R2Exhibit 10.2

 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

DATA SERVICES AGREEMENT

This DATA SERVICES AGREEMENT (this "Agreement") made and entered into as of September 26, 2016 (the "Effective Date") by and between Digital Matrix Systems, Inc., a Texas corporation, located at 15301 Spectrum Drive, Second Floor, Addison, TX 75001 ("DMS") and Intersections Inc., a Delaware corporation, located at 3901 Stonecroft Blvd., Chantilly, VA  20151 ("Intersections").

W I T N E S S E T H:

WHEREAS, Intersections desires DMS to provide certain on-line credit and third party data access and processing services through DMS' proprietary web-based application known as the Alert Processing Engine ("APE") and access, process and retain the Third Party Data as outlined herein (the "Services"), and DMS is willing to provide the Services to Intersections in accordance with the terms and conditions hereof; and

WHEREAS, in connection with the Services, Intersections desires DMS to process and retain certain credit and other third party information (the "Third Party Data") obtained from consumer reporting agencies such as Experian, Equifax, and Trans Union and other Intersections selected third party data providers (collectively, the "Data Providers") in order to prepare and provide to Intersections Alert Processing Engine responses based on each specific product or transaction type; and

NOW, THEREFORE, in consideration of the premises and the mutual covenants and agreements herein set forth, the parties, intending to be legally bound, agree as follows:

Section 1.  Services.  In accordance with the terms of this Agreement, DMS will provide Intersections access to its Services to enable Intersections to request Credit Information of or from the Data Providers, or other Third Party Data sources as determined by Intersections and agreed to by DMS, and for DMS to return the Credit Information to Intersections through Alert Processing Engine responses based on specific product or transaction type, as identified by Intersections, via the Internet.  Each such request received and processed by DMS shall be defined as a "Transaction."  Intersections hereby authorizes DMS to obtain (and retain as applicable) Third Party Data on its behalf using the Data Provider access codes provided by Intersections to DMS.  DMS shall retain such Third Party Data in such a manner allowing Intersections to retrieve the Third Party Data as outlined herein.  Intersections right to retrieve retained Third Party Data and DMS right to access Third Party Data shall not extend beyond the Term of this Agreement. The parties recognize that in order to provide the Services DMS will receive Personal Information (as defined in Section 17 of the Agreement).  

(a)         Implementation Services –  DMS shall provide the implementation services set forth below:

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 1 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

		1.	
Set up of hardware environments, including testing, production, and disaster recovery.

		2.	
Deployment of the Alert Processing Engine (the "APE") application across hardware environments covering user acceptance testing, production, and disaster recovery environments.

		3.	
Establish and test Credit Bureau connectivity and processing of the APE application.

		4.	
Establish and test the data retention database and related support services.

		5.	
Test Disaster Recovery procedures for all Credit Bureau connections, the APE, and Third Party Data and Personal Information retention services.

		6.	
Support for Intersections Acceptance Testing.

(b)         Third Party Data processing and data retention services for the Data Providers as outlined on Exhibit B.  Intersections will be responsible for all DMS access to the Third Party Data from the Data Providers, its format, and delivery method of each "data component" within the Third Party Data.

(c)            Periodic Disaster Recover (DR) Failover Testing

		1.	
Creating the DR rollover test plans.

		2.	
Executing the DR site rollover.

		3.	
Testing the DR site, fail back to the primary site and testing the fall back.

(d)         Support for Services in (b) above

		1.	
Process documentation for DMS Operations.

		2.	
Training DMS staff for 7/24/365 production support.

(e)            DMS shall, upon written request and subject to an executed Amendment to this Agreement, develop for Intersections a separate non-production database that replicates the information maintained by DMS as part of the Services, including Third Party Data and Personal Information ("Intersections Database").  The Intersections Database shall be updated every 24 hours and may be accessed by Intersections employees in accordance with this Agreement.  Intersections shall only use this database for its internal purposes. 

The Services shall at all times comply with the requirements of the Service Level Agreement outlined in Exhibit A hereto, as applicable. 

Section 2.  Acceptance Testing.  The term "Acceptance Testing" means testing performed by Intersections to determine whether the relevant Services comply with the documentation.  Within fifteen (15) business days after receipt of the Services, Intersections shall provide DMS a written list of items that it finds unacceptable, including a written description of the failure sufficient to allow DMS to replicate such Acceptance Test failure and DMS shall correct the items 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 2 of 23

	
API Processing Services August 2016

	 

 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

within fifteen (15) business days.  This process shall continue until Intersections signs off on receipt and acceptance of the Services.  Rework required shall not be charged back to Intersections unless the rework is the result of an error in, or change to, the requirements provided by Intersections to DMS.  Intersections shall be deemed to have accepted the Services upon the earlier of (1) providing DMS written acceptance of the Services, or (2) thirty (30) calendar days after delivery or redelivery of the Services for which Intersections does not provide DMS a written list of unacceptable items.  Intersections shall be solely responsible for determining the appropriateness of all Acceptance Testing elements.

Section 3.  Security.  DMS shall maintain reasonable and appropriate administrative, technical and physical security safeguards to (i) insure the security and confidentiality of the Third Party Data and Personal Information; (ii) protect against anticipated threats or hazards to the security or integrity of the Third Party Data and Personal Information; and (iii) protect against unauthorized access or use of Third Party Data and Personal Information.  Such safeguards will include maintaining compliance with prevailing industry standards, including the Gramm-Leach-Bliley Act, establishing procedures to prevent any of its employees or agents from using any Third Party Data or Personal Information for personal reasons or transferring any such information to any third party (other than as provided in this Agreement).  DMS will, as allowed by Applicable Laws, promptly notify Intersections of any actual or suspected unauthorized access to Third Party Data or Personal Information as outlined in Exhibit C.  

DMS Information Security Requirements shall be as outlined on Exhibit C and the federal and state regulations that apply to the Services performed by DMS hereunder.  In addition, DMS Services will contract to have an annual ***** audit performed and shall provide Intersections a copy of such audit reports, which shall be considered DMS Confidential Information.  

During the term of this Agreement, and for a period of one (1) year thereafter, either party may, upon reasonable notice and during normal business hours, audit the other party's policies, procedures and records to ensure compliance with this Section 3.  DMS shall comply with reasonable audit requirements from Intersections, including Intersections data providers whose data is subject to the Services provided pursuant to this Agreement.  A security-related questionnaire may be required to be completed during the annual audit or an Intersections' client request.  Any such third party auditors must comply with the confidentiality requirements of DMS.

DMS will conduct or obtain, and ensure that its agents, independent contractors, and subcontractors conduct or obtain, background checks designed to prevent them from the  hiring, retaining or engaging of officers or employees (including de facto employees under the FDIC Act, 12 USC § 1829), or agents or independent contractors or subcontractors who have been convicted of or entered into a pretrial diversion program for fraud,  embezzlement, larceny, perjury, terrorism or breach of fiduciary duty from performing any responsibilities or functions in connection with: processing Third Party Data as outlined herein.  Intersections may require confirmation from the DMS that the independent contractor or subcontractor successfully completed the background 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 3 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 check consistent with DMS' policies and procedures.  If DMS learns that an employee or independent contractor or subcontractor is convicted of (or enters into pretrial diversion for) a felony identified above, or DMS learns of a prior conviction or diversion during the term of the Agreement, it will take appropriate action to inform Intersections of the conviction and remove the employee, independent contractor, or subcontractor from performing any services for Intersections if requested by Intersections.  

Intersections shall maintain the security of logon identification credentials used by Intersections and Intersections' employees and its authorized users to gain access to the Services. Intersections will implement any credentialing or procedures reasonably requested by DMS from time to time to maintain security of access to the Services. 

Section 4.  Term.  The initial term of this Agreement shall be a period of one year, commencing on the Effective Date. Unless earlier terminated pursuant to the terms and conditions hereof, this Agreement shall automatically be extended for successive terms of one year each, unless either party shall give the other party written notice of its election not to extend the term 30 days prior to the conclusion of the then-current term.  Notwithstanding the foregoing, DMS may immediately discontinue offering the Services, or any part thereof, in the event DMS is no longer authorized to provide the Third Party Data pursuant to Intersections' or DMS' arrangements with the Data Providers. 

Section 5.  Conditions of Use of the Services.

(a)      As a condition to DMS providing the Services hereunder, Intersections agrees that Intersections and its affiliates will use the Services and Credit Information only for a permissible purpose under the federal Fair Credit Reporting Act 15 U.S.C. § 1681 et seq., as amended ("FCRA") and that DMS' Services will not directly or indirectly violate or interfere with the terms of any other agreement to which Intersections is a party.

(b)      Intersections will implement strict security procedures designed to ensure that Intersections' employees and its authorized users use the Services in accordance with the Agreement.   Intersections will treat and hold the Services in strict confidence and will restrict access to the Services to Intersections' employees and authorized users who agree to act in accordance with the confidentiality requirements set forth in Section 15 hereof. Intersections will inform Intersections' employees and authorized users to whom any Third Party Data is disclosed of the provisions of this Section 5(b).  

(c)      Intersections acknowledges the proprietary and confidential nature of the Services, and that the Services are, will continue to be the exclusive property of DMS, and shall be used only as authorized in writing by DMS.  DMS grants to Intersections a limited, non-exclusive, non-transferable and non-assignable or sublicensable license to access and use the Services and any 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 4 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 other data or information that is proprietary to DMS for purposes authorized by this Agreement.  Intersections will require its employees and authorized users that have access to the Services to comply with all of the terms and conditions of this Agreement, and if any of such persons breach this Agreement such breach shall be deemed a breach of this Agreement by Intersections.  Except as expressly set forth in this Section 5(c), nothing contained in this Agreement shall be deemed to convey to Intersections, Intersections' affiliates, employees, agents, authorized users or to any other party, any right, title or interest, including any patent, copyright, trademark or other proprietary right, in or to the Services or any other data or information that is proprietary to DMS.  Intersections will not use or permit its affiliates, employees, agents, subcontractors and authorized users to use the trademarks, service marks, logos, names or other proprietary designations of DMS without its prior written consent.

Section 6.  Fees.  In consideration for the Services provided hereunder, Intersections shall pay to DMS the following fees:

(a)          A one-time Implementation Fee of $***** that shall be billable upon execution of this Agreement.

(b)         Third Party Data Processing and Retention Services shall be billed in equal installments per month (the "Monthly Fee") not to exceed the amount set forth in the applicable Contract Year below.  A Contract Year shall be defined as each 12-month period, with the first Contract Year One beginning with the earlier of (1) the date of Acceptance by Intersections, and (2) live production processing by Intersections, and each successive 12-month period thereafter.   The pricing for the for each Contract Year is as set forth below: 

		(i)	
Contract Year One $*****

		(ii)	
Contract Year Two $*****

		(iii)	
Contract Year Three *****

		(iv)	
The initial Monthly Fee shall be due upon customer the earlier of (1) the date of Acceptance, and (2) live production processing by Intersections using the Services.

Intersections agrees to pay DMS within 30 days of the receipt of each DMS invoice.  DMS may assess a late charge of *****% per month or the highest rate allowed by law, whichever is less, on past due invoices.  Intersections obligation to pay invoiced amounts is absolute and unconditional and not subject to any offset, defense or counterclaim.  Failure to timely pay such fees may result in discontinuation of Services.

Section 7.  Maintenance Services and Enhancement.  

 

During the term of this Agreement, DMS will provide to Intersections telephone support in accordance with the provisions of the Service Level Agreement attached hereto as Exhibit A.

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 5 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

The Services will be subject to DMS' standard maintenance services which shall include, in addition to the obligations outlined in Exhibit A, (1) routine changes instigated by the Data Providers within data layout, version, and format changes in order to continue delivery of the Services as outlined herein; (2) corrections of Errors as defined in Exhibit A; and (3) SLA reporting as outlined in Exhibit A.

Enhancements, including access to new Data Providers or other third party data suppliers, formats, and report types, to be defined by mutual agreement of the parties, including any additional fees for the Services provided pursuant to this Agreement.

Section 8.  Disclaimer of Warranty.  Intersections acknowledges that the Services provided hereunder entail the possibility of some human and/or machine errors, omissions, delays and losses, including errors in the Third Party Data, or delays caused by the Data Providers or Internet delivery of the Services, which may give rise to loss or damage.  ACCORDINGLY, DMS DOES NOT GUARANTEE OR WARRANT THE ACCURACY, TIMELINESS, COMPLETENESS, CURRENTNESS, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE OF THE SERVICES, THE THIRD PARTY DATA.  

Section 9.  Insurance. Each party represents that as of the Effective Date it has, and agrees that it shall maintain in force during the Term, at least the insurance coverage set forth below:

		(a)	
Statutory workers' compensation covering all state and local statutory requirements;

		(b)	
Employer's liability with a limit of $***** for one or more claims arising from each accident;

		(c)	
Commercial general liability, including coverage for completed operations, products liability and contractual operations;

		(d)	
Professional liability for errors and omissions with a limit of $*****; and

		(e)	
Crime and Fidelity Insurance with a limit of $*****.

The limits of coverage for section (c) above shall be $***** per occurrence combined single limit bodily injury and property damage plus $***** excess or umbrella liability coverage.  DMS shall cause its insurers to (i) waive all rights of subrogation against the other party, and its officers, directors and employees; and (ii) each party shall furnish the other party certificates of insurance evidencing that the above insurance is in effect and otherwise complies with the requirements of this Insurance Section.

No party shall be required to indemnify another party under this Agreement to the extent insurance coverage is available to cover the liability in question unless the insurance company has 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 6 of 23

	
API Processing Services August 2016

	 

 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 not paid (or only partially paid) the claim within 60 days of the date the claim is reported.  Otherwise, the carrying by a party of the insurance required herein shall in no way be interpreted as relieving the insured party of any other obligations it may have under the Agreement.

Section 10.  Limitation of Liability.  Except for a Party's breach of Indemnification (Section 11), or Security (Section 3), for all other claims relating to this Agreement, whether in contract, tort, strict liability, or otherwise, each Party's sole and exclusive remedy shall be the recovery of actual, direct damages, not to exceed $*****.  IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INCIDENTAL, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INDIRECT DAMAGES, INCLUDING, BUT NOT LIMITED TO, ANY DAMAGES RESULTING FROM A DISRUPTION IN A PARTY'S BUSINESS, EVEN IF SUCH PARTY HAS BEEN ADVISED AS TO THE POSSIBILITY OF SUCH DAMAGES.

Section 11.  Indemnification.  Intersections will indemnify, and defend and hold DMS and its affiliated entities, officers, directors, employees, contractors and agents harmless from and against any and all liabilities, damages, losses, claims, costs and expenses, including reasonable attorney's fees, which may be asserted against or incurred by the foregoing parties, arising out of or resulting from: (i) access or any unauthorized access to or use of the DMS Services or the disclosure, sale or transfer of the Third Party Data; (ii) Intersections' breach of the Confidentiality provisions of this Agreement; (iii) any violations of the FCRA or other applicable laws due to the acts or omissions of Intersections; or (iv) any third-party claim against DMS of infringement or misappropriation of any Intellectual Property Rights alleged to have occurred because of Intersections provided items pursuant to the Services; and (v) any claim against DMS from Intersections customers and Data Providers based upon DMS' provision of the Services to Intersections pursuant to this Agreement.

DMS will indemnify, and defend and hold Intersections and  its affiliated entities, officers, directors, employees, contractors and agents harmless from and against any and all liabilities, damages, losses, claims, costs and expenses, including reasonable attorney's fees, which may be asserted against or incurred by the foregoing parties, arising out of or resulting from: (i) any claim that the DMS Services, including any related support services, infringe upon, violate, or misappropriate the intellectual property rights of a third party including, without limitation, patent, copyright, trademark, and trade secret rights; (ii) DMS' breach of the Confidentiality provisions of this Agreement; or (iii) any violations of the FCRA or other applicable laws due to the acts or omissions of DMS.  In addition to the foregoing obligations, DMS at its exclusive option shall, at its own expense and within sixty (60) days of learning that any part of the Services has become the subject of an infringement claim or has become the subject of an injunction or settlement prohibiting the use of the Services, (i) procure for Intersections the right to continue offering the Services; (ii) replace such Services with non-infringing DMS products with equivalent or better capacity performance and functionality, in which case Intersections shall immediately begin utilization of the non-infringing Services; or (iii) reasonably assist Intersections to find and/or  transition to a third party service similar to the Services, each party bearing its own expenses.  This 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 7 of 23

	
API Processing Services August 2016

	 

 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 indemnity does not extend to any infringement claim due solely to Intersections' unauthorized modification of the Services or the combination of the Services with any product or service not supplied or mandated by DMS.

Section 12.  Termination; Remedies.  (a)  Either party shall be in default if it fails to perform any of its duties or obligations hereunder and does not cure such failure within 30 (thirty) days after written notice is given to the defaulting party.  Upon a default, the non-defaulting party may terminate this Agreement by providing written notice of termination to the defaulting party, reserving unto the non-defaulting party all rights and remedies it may have under this Agreement or may otherwise have at law or in equity.  Notwithstanding the foregoing, DMS may immediately cease providing the Services or access thereto to Intersections if (i) DMS believes in its reasonable judgment that Intersections has failed to comply with any of its obligations hereunder, including in particular, Section 5 of this Agreement, (ii) for any reason one or more of the Data Providers ceases to provide the Third Party Data to DMS or Intersections, or (iii) DMS receives reliable information from Intersections, law enforcement authorities, accredited news reports (i.e. a recognized, documented news source rather than an anonymous blog or its equivalent), or other reputable third parties that Intersections or any of Intersections' officers, directors, managers, shareholders, members, partners, employees, agents, or affiliates has engaged in, or is suspected to have engaged in, illegal or fraudulent activities, whether related to the provision of Services under this Agreement or otherwise.  DMS SHALL NOT BE LIABLE TO INTERSECTIONS FOR ANY COST, EXPENSES OR DAMAGES (DIRECT OR OTHERWISE) INCURRED AS A RESULT OF THE EXERCISE OF ANY AND ALL OF DMS' RIGHTS AND REMEDIES UNDER THIS SECTION 12. 

(b)     The provisions of Sections 8, 10, 11, 12, 13, 14, 15, 16, 17 and 18 shall survive any expiration or termination of this Agreement, for any reason or of DMS' obligation to provide the Services hereunder.

Section 13.  Taxes and Other Charges.  In addition to all amounts payable by Intersections hereunder, Intersections will pay amounts equal to all sales, use, personal property and other taxes resulting from this Agreement or any activities under this Agreement, excluding taxes based on DMS' net income, unless Intersections furnishes annual proof of exemption from payment of such taxes in a form reasonably acceptable to DMS.  DMS may separately reflect on its invoices to Intersections the amount of any taxes paid by DMS on Intersections' behalf, and Intersections shall pay DMS for such amounts.

Section 14.  Nonsolicitation.  

(a)       Neither party shall, during the term of this Agreement and for a period of one year after termination of this Agreement, either directly or indirectly, recruit or hire or attempt to recruit or hire, directly or indirectly, any employee, consultant or independent contractor of the other party. Neither party shall be prohibited from responding to or hiring employees of the other party 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 8 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

who inquire about employment on their own accord or in response to a public advertisement or employment solicitation in general.

(b)      Each party agrees that a breach or violation of this Section 14 may cause irreparable injury for which the non-breaching party would have no adequate remedy at law, and that the non-breaching party will be entitled to preliminary or other injunctive relief issued by any court or arbitration panel of competent jurisdiction, restraining any such breach or violation.  Such injunctive relief will be in addition to, and in no way in limitation of any other remedies or rights that the non-breaching party may have at law or in equity.

(c)       In the event any restriction set forth in this Section 14 is deemed to be unenforceable for being overly broad, the parties agree to amend the applicable provision as necessary to make it enforceable to the maximum extent legally permitted. 

Section 15.  Confidentiality.   Each party (each, a "Receiving Party") understands and agrees that in the performance by the other party (each, a "Disclosing Party") of its duties hereunder, the Disclosing Party will communicate to the Receiving Party certain confidential and proprietary information concerning the business of the Disclosing Party, and certain know-how, technology, techniques, computer code for software products proprietary to the Disclosing Party, whether in source code or object code form and related documentation, and customer lists, all of which are confidential, proprietary information and trade secrets of the Disclosing Party (collectively the "Confidential Information"). The Receiving Party agrees to hold and protect all such Confidential Information and shall not, unless authorized pursuant to this Agreement of with specific prior written consent of an authorized officer of the Disclosing Party, utilize in any manner, communicate or disclose any part thereof to any third party. The Receiving Party shall require all of its employees, affiliates, subcontractors, agents, authorized users, as applicable, to maintain the confidentiality of the Disclosing Party's Confidential Information in accordance with this Agreement. Confidential Information shall not include information that the Receiving Party can show by documented evidence: (a) is now or subsequently becomes lawfully known through no fault of the Receiving Party; (b) is known by the Receiving Party at the time of disclosure and is not subject to restriction; (c) is lawfully obtained from a third party who has the right to make such disclosure; or (d) is required to be disclosed by lawful process, provided that the Receiving Party shall provide the Disclosing Party with timely notice in order for the Disclosing Party to seek a protective order or otherwise object.  Each party acknowledges that (i) the restrictions contained in this Section 15 are reasonable and necessary to protect the other party's legitimate interests, (ii) remedies at law will be inadequate and any violation of these restrictions will cause irreparable damage to the Disclosing Party within a short period of time, and (iii) the Disclosing Party will be entitled to injunctive relief against each violation. Each party further agrees that all confidentiality commitments hereunder shall survive termination of this Agreement for any reason.

 

Section 16.  Data Ownership and Storage.    In the course of working with the data provided by Intersections, which may include Personal information, DMS will create electronic 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 9 of 23

	
API Processing Services August 2016

	 

 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 records for the purposes of providing the service described herein.  Such electronic records will be maintained as confidential by DMS, subject to any disclosure mandated by the Fair Credit Reporting Act or other Applicable Laws.                                       

Section 17.  Handling of Personal Information.  During the term of this Agreement, DMS and Intersections agree to comply with all federal, state and local statutes, regulations and rules applicable to it, including, without limitation the FCRA, with any changes enacted to FCRA during the term of this Agreement, The Gramm Leach Bliley Act and Its implementing regulations, and any state or local laws governing the disclosure, use, and storage of consumer credit information (the "Applicable Laws").  Each party to this Agreement agrees to hold all non-public information of consumers, as defined in the Gramm-Leach-Bliley Act ("Personal Information"), received from the other party as confidential and will not disclose or use such Personal Information other than to perform its obligations as set forth in this Agreement or as otherwise authorized by Applicable law.  Each party shall use commercially reasonable efforts to assist the other party in its efforts to comply with such Applicable Laws.

Section 18.  General Terms and Conditions.  

(a)      Entire Agreement.  This Agreement contains the entire understanding of the parties with respect to its subject matter, and supersedes any and all related prior understandings and agreements, oral or written.  This Agreement cannot be modified or amended except in writing signed by both parties.

(b)      Force Majeure.  Either Party shall be excused from delays in performing or from its failure to perform hereunder, and such delays or failures shall not constitute breaches of this Agreement, to the extent that such delays or failures result from causes beyond its reasonable control, including but not limited to the acts or omissions of the Data Providers (e.g., one or more of the Data Providers ceases to provide the Third Party Data to DMS or Intersections for any reason), delay and interruptions in sending and receiving Third Party Data via the Internet, denial of service attacks, labor disputes, strikes or other labor or industrial disturbances, acts of God, floods, lightning, shortages of materials, utility or communication failures, earthquakes, casualty, war, riots, insurrections, embargoes, regulations or orders from any governments, or any agency or subdivision thereof; provided that, in order to be excused from delay or failure to perform, DMS must act diligently to remedy the cause of such delay or failure.

(c)         Independent Contractor.  DMS is providing the Services to Intersections as an independent contractor.  DMS does not undertake by this Agreement or otherwise to perform any obligation of Intersections, whether by regulation or contract, unless specified in writing.

(d)      Governing Law.  THE VALIDITY, CONSTRUCTION AND PERFORMANCE OF THIS AGREEMENT, AND THE LEGAL RELATIONS AMONG THE PARTIES 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 10 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

SHALL BE GOVERNED BY AND CONSTRUED IN ACCORDANCE WITH THE LAWS OF THE STATE OF TEXAS.

(e)       Dispute Resolution.  With the exception of any action taken under Sections 5, 12 and 15 of this Agreement, the parties shall resolve any dispute arising out of or relating to this Agreement in binding arbitration conducted in accordance with the then pertaining rules for commercial arbitration of the American Arbitration Association by a single arbitrator selected by the American Arbitration Association or an arbitrator agreed upon by the parties.  Any such arbitration shall be held in Dallas, Texas unless the parties otherwise agree.  The parties shall be entitled to conduct reasonable discovery, in accordance with the Texas Rules of Civil Procedure and applicable case law, prior to the arbitration hearing, and the Texas Rules of Evidence shall be applicable to the arbitration proceeding.  The decision of the arbitrators shall be final and binding on DMS and Intersections and may be entered and enforced in any court of competent jurisdiction by either party.

(f)       Severability.  This Agreement shall be deemed to be severable and, if any provision of this Agreement shall be finally determined to be void, illegal or unenforceable, then it is the parties' desire and intention that such provision be deemed automatically adjusted to the minimum extent necessary to conform to applicable requirements of validity, legality and enforceability and, as so adjusted, be deemed a provision of this Agreement as if it were originally included herein; provided, however, if such provision cannot be adjusted without substantially and materially altering the rights and duties hereunder and fundamentally depriving one party of the benefit of the bargain (taken as a whole) contemplated by this Agreement, then the parties will seek to reform this Agreement through the procedure outlined in Section 18(e) above so as to restore, as nearly as possible, the parties' respective rights, duties, and bargain.  In any case, the remaining provisions of this Agreement shall remain in effect.

(g)      No Waiver.  No delay or omission by either party hereto to exercise any right or power occurring upon any non-compliance or default by the other party with respect to any of the terms of this Agreement shall impair any such right or power or be construed to be a waiver thereof.  A waiver by either of the parties hereto of any of the covenants, conditions or agreements to be performed by the other shall not be construed to be a waiver of any succeeding breach thereof or of any other covenant, condition, or agreement herein contained.  Unless otherwise stated, all remedies provided for in this Agreement shall be cumulative and in addition to and not in lieu of any other remedies available to either party at law, in equity, or otherwise.

(h)      Notices.  Under this Agreement, if one party is required or permitted to give notice to the other, such notice shall be deemed given if mailed by registered or certified first class mail, postage paid with return receipt requested, or if sent by facsimile, with receipt confirmed, and addressed as follows (or as subsequently noticed to the other party):

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 11 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

Digital Matrix Systems, Inc.

15301 Spectrum Drive, 2nd Floor

Addison, TX 75001-6466

ATTN:  Contracts Department

Telephone: (972) 341-0000

 Fax:  (972) 341-3600

Intersections Inc.

President, Identity Guard

3901 Stonecroft Blvd.

Chantilly, VA  20151

ATTN: President, Identity Guard 

CC: Chief Risk Officer & Chief Legal Officer

 Fax: (703) 488-1757

(i)        Binding Effect; No Assignment.  This Agreement shall inure to the benefit of and be binding upon and enforceable against each party and it successors and assigns.  Intersections may not sell, assign, convey, sublicense or transfer this Agreement or its rights or obligations hereunder through merger, acquisition, sale of all or substantially all of Intersections' assets, or otherwise without the prior written consent of DMS.  Any assignment, transfer, conveyance or sublicense in violation of this paragraph shall be null and void.

 

(j)       Authority.  DMS and Intersections each represent to the other that the execution, delivery, and performance of this Agreement by such party have been duly approved by all necessary corporate action, and do not conflict with, or result in a material breach of the articles of incorporation or by-laws of such party, any material agreement by which such party is bound, or any law, regulation, rule, judgment, or decree of any governmental instrumentality or court having competent jurisdiction over such party.  Each party further represents that this Agreement has been duly executed by such party and constitutes a valid and legally binding obligation of such party enforceable in accordance with its terms.

Signature Page Follows

 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 12 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

IN WITNESS WHEREOF, the parties have executed this Agreement as of the date first written above.

	
DIGITAL MATRIX SYSTEMS, INC.

	 	 
	 	 
	 	 
	
By: 

	
/s/ David McGouh

	 	 
	
Name:

	
David McGough

	 	 
	
Title: 

	
CEO

	
INTERSECTIONS INC.

	 
	
By: 

	
/s/ Johan J. Roets

	 	 
	
Name: 

	
Johan J. Roets

	 	 
	
Title: 

	
President, Identity Guard

 

 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 13 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

Exhibit A – Service Level Agreement

 

THIS EXHIBIT A ("Exhibit A") is attached to and made a part of the DATA SERVICES AGREEMENT dated September 26, 2016 (the "Agreement"), by and between Intersections Inc. ("Intersections") and Digital Matrix Systems ("DMS").  Capitalized terms used in this Exhibit A have the meanings attributed to them in the Agreement.

 

1.            Product and Services Support.  DMS will respond to Intersections' request for support services ("Support") regarding the DMS Services in accordance with the procedures identified below.  In each case, Intersections may describe the problem by telephone, facsimile or electronic mail.  DMS shall use commercially reasonable efforts to meet the obligations under this Exhibit A. 

Telephone Support.  As part of DMS Services, DMS shall provide technical support personnel accessible by toll-free telephone on a 24/7 basis for the resolution of technical questions and DMS Services Errors as further defined and described herein.  Without limitation of the foregoing, DMS shall provide to Intersections, without additional charge, all reasonably necessary telephone consultation requested in connection with Intersections' use and operation of the DMS Services or any problems therewith.

Notice of Errors; Error Correction.  As part of Support, DMS shall provide the services set forth below:

(a)      Error Classifications.  Each error or problem with the DMS Services ("Error") encountered by Intersections and under the responsibility of DMS as provided for in this Agreement will be classified into one of the following classifications: 

(i)          Class 1 Error.  A "Class 1 Error" is any Error that renders continued use of the Services either impossible or substantially interrupts the use of the Services or normal business operations of Intersections.

(ii)         Class 2 Error.  A "Class 2 Error" is any material nonconformance of the Services with its specifications, documentation or the applicable Exhibit A that is not a Class 1 Error.

(iii)        Class 3 Error.  A "Class 3 Error" is any Error that is not a Class 1 Error or a Class 2 Error.

(iv)        Notification of Errors and Escalation.  DMS shall provide to Intersections a contact person for Intersections to contact in order to report an Error or to notify DMS that Support is not being provided as set forth herein. 

(iv)            Response to Error Notification.  Intersections will inform DMS of the Error Class when initially contacting DMS.  The Error class will be used to determine DMS's required response time to Intersections.  From the time that an Error was reported to DMS, DMS shall respond to Intersections prior to expiration of the times listed below for each class of Error.   The beginning point for calculation of the response time is when a voice 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 14 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

    message or digital page is left with the DMS contact person at 1-800-367-1800.  

	
Error Class

	
DMS Response Time

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

(b)      Documentation and Correction of Errors.

  

(i)          Class 1 Errors and Class 2 Errors.  For any Class 1 Error or Class 2 Error, Intersections shall provide DMS sufficient documentation to enable DMS to reproduce the Error and DMS shall then take all reasonably necessary steps to supply a correction to Intersections as soon as practicable.  If DMS is unable to reproduce a Class 1 Error or Class 2 Error, the parties will work in good faith to correct such Error on a mutually agreed-upon schedule.  This will include assigning qualified, dedicated staff to work on the Error.  Upon detecting or being notified of a Class 1 Error or Class 2 Error, DMS shall assemble the appropriate personnel to analyze the problem, identify potential solutions and determine the best plan of action (which may include providing a temporary work-around until a permanent correction can be provided).  Intersections shall be permitted to participate in this process.  A DMS representative shall keep Intersections continuously informed of the status.  If DMS provides Intersections with a workaround for a Class 1 Error, such Error will be re-classified as a Class 2 Error.

(ii)         Class 3 Errors.  For any Class 3 Error, DMS shall work with Intersections to document the Error through mutually established standards.  Class 3 Errors shall be resolved according to mutually agreed priorities.  DMS personnel shall be dedicated to resolving Class 3 Errors through DMS's normal software support procedures, but in any event, each Class 3 Error shall be resolved no later than the date of next release of the applicable software and DMS Services.

2.             Scheduled Maintenance and Notifications 

Standard Maintenance Windows. DMS will use commercially reasonable efforts to schedule maintenance on Sundays between the hours of 12:01am and 4:00 am Central Time North America.

Notification of Scheduled Maintenance Downtime.  DMS will notify Intersections of any Scheduled Maintenance Downtime that will occur outside of the Standard Maintenance Windows outlined above.  Except in cases of emergency, notification will be provided at least one business day prior to such downtime.  In cases of emergency, DMS will use commercially reasonable efforts to notify Intersections of a planned downtime as soon as practicable.  

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 15 of 23

	
API Processing Services August 2016

	 

  

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

  

3.             Detailed Service Level Requirements SLA for the following: 

		     (a)	
*****

		     (b)	
*****

		     (c)	
*****

		     (d)	
*****

	 	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	 
	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	 
	
*****

	
*****

	
*****

	
*****

	
*****

	 
	
*****

	
*****

	
*****

	
*****

	
*****

	 
	
*****

	
*****

	
*****

	
*****

	
*****

	 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 16 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

 

	
*****

	
*****

	
*****

	
*****

	
*****

	 
	
*****

	
*****

	
*****

	
*****

	
*****

	 
	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	 
	
*****

	
*****

	
*****

	
*****

	
*****

	 
	
*****

	 	 	 	 	 

(1)            *****

(2)            *****

Intersections and DMS shall review the SLA Requirements outlined in the table above for the initial ninety (90) days of DMS' delivery of the Services and the parties shall mutually agree on the final SLA Requirements, which shall then be in force.

			
Definition of "validated" – *****:

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

	
*****

Recovery Time Objective (RTO) – DMS shall have twenty-four (24) hours to restore the Services outlined in the Agreement in the event of a disaster or major disruption in the Services.

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 17 of 23

	
API Processing Services August 2016

	 

 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

Recovery Point Objective (RPO) – DMS shall restore the datavault application data associated with the Services with a forty-eight (48) hour maximum loss of data measured from the point of any failure of the Services as outlined in the RTO.

The RPO and RTO shall each be an SLA Requirement.

SLA Penalties – during the initial ninety (90) days of the Services, the parties agree that no SLA penalties shall apply until the parties mutually agree on the final SLA Requirements.

		o	
In the event DMS fails to meet individual SLA Requirements as measured over the course of a calendar month period, DMS shall pay Intersections 3% of the monthly Third Party Data Processing and Retention Services fee for each SLA Requirement not met (with maximum payment in any month of 12%) reported by Intersections and confirmed by DMS or reported by DMS and confirmed by Intersections.  

		o	
Ten percent (10%) of the monthly Third Party Data Processing and Retention Services fee shall be credited to Intersections for availability of the Services at less than 95% as measured over a calendar month period.

4.            SLA Reporting.  DMS shall provide reporting to Intersections, no later than the 10th business day of each month for the previous month, to verify its compliance with SLAs set forth in this Section 3 of this Exhibit A. 

Exhibit B – Data Providers and Data Retention Services Include:

Data Providers:

			
*****

			
*****

			
*****

			
*****

Data Retention:

			
*****

			
*****

			
*****

			
*****

			
 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 18 of 23

	
API Processing Services August 2016

	 

  

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

			
*****

 

 

 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 19 of 23

	
API Processing Services August 2016

	 

  

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

EXHIBIT C

INFORMATION SECURITY REQUIREMENTS

1.             Purpose.  This Exhibit C sets forth the minimum information security program and infrastructure policies (the "Information Security Requirements") in effect as of the Effective Date of the Agreement that DMS will meet and maintain in order to protect Intersections' Confidential Information, Credit Information,  and Personal Information (the "Information") from unauthorized use, access, disclosure, theft, manipulation, reproduction and/or possible Security Breach during the Term of the Agreement and for any period of time thereafter during which DMS has possession of or access to Intersections Confidential Information, Third Party Data or Personal Information.

2.             Information Security Safeguards.

2.1      Appropriate Safeguards.  DMS and all of its Affiliates, Contractors and representatives that have access to Intersections' Confidential Information have established, implemented, and will maintain ***** designed to insure the security and confidentiality of Information; protect against anticipated threats or hazards to the security and integrity of Information; protect against unauthorized access to or use of Information; and provide for the proper disposal of Information, all as required by applicable law, including but not limited to the Gramm-Leach Bliley Act and Massachusetts Regulation 201 CMR 17.00 ("Information Security Safeguards").  

a.        Standards & Practices.  Information Security Safeguards shall incorporate commercially reasonable and appropriate methods and safeguards to protect the security, confidentiality, integrity, availability and privacy of Information, including those contained in *****.

b.        Updates.  Information Security Safeguards shall be documented and kept current in light of changes in applicable law, and appropriate industry security standards (as referenced in Section 2.1.a above) for the Services provided to Intersection by DMS pursuant to this Agreement.  DMS shall permit Intersections to review such documentation at DMS's facilities upon the reasonable request of Intersections.

2.2      Authorized Persons.  DMS shall limit access to Information to those employees, authorized agents, vendors, consultants, representatives and subcontractors who have a need to access such data in connection to the uses permitted by this Agreement ("Authorized Persons"). Each Authorized Persons shall be trained with respect to the Information Security Safeguards and shall comply with the requirements of DMS's Information Security Safeguards.  DMS shall re-evaluate its list of Authorized Persons at least annually.  DMS shall be responsible for any failure of its employees, agents, subcontractors and its authorized third parties to comply with these terms and conditions regarding Information.

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 20 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 

2.3      DMS Information Security Policies.  DMS shall have in place and adhere to internal information security and privacy policies that address the roles and responsibilities of DMS Personnel and any Authorized Persons, including both technical and non-technical personnel, who have direct or indirect access to Information.  These internal security and confidentiality policies shall, at a minimum, include: *****. 

3.             Vulnerability Assessments.  *****   

4.             Third Party Security Assessment Questionnaire.  At Intersections request, no more than once a calendar year, DMS shall complete Intersections Third-Party Security Assessment Questionnaire and forward a completed copy to Intersections Information Protection Department.  The completed Security Assessment Questionnaire shall be treated as DMS Confidential Information.  DMS hereby warrants that all information provided and statements made by DMS to Intersections in the completed Third-Party Security Assessment Questionnaire, to the best of DMS's knowledge are true as of the date that the completed document was provided to Intersections.  DMS agrees to provide prior written notice to Intersections of any material change in the information provided by DMS to Intersections in the completed Third-Party Security Assessment Questionnaire.  Intersections may, with DMS's consent (not to be unreasonably withheld), at Intersections own expense, be permitted to conduct independent on site security assessments, at a time mutually agreed upon by Intersections and the DMS, with respect to the Service security and compliance with Information Security Requirements.  Any results and reports from such on site security assessments shall be DMS's Confidential Information.

5.             Information Security Infrastructure.

5.1      Access Controls.  DMS will utilize appropriate access controls to protect Information.  DMS agrees that it shall maintain, throughout the Term of the Agreement and at all times during the access to or while in possession of Intersections Confidential Information, the access controls disclosed to Intersections and approved by Intersections prior to execution of the Agreement and shall not materially change or modify the access controls without prior written notification to Intersections. DMS shall also employ appropriate segregation of duties principles in the assignment of all critical job functions. Intersections will be solely responsible for implementing and maintaining access controls on its own systems to which the DMS may be granted access.

5.2      Password Administration.  ***** 

5.3      Access Justification/Authorization Process. DMS shall have a process in place that is designed to confirm that only Authorized Persons and DMS Personnel (technical and non-technical) are granted access to Information.  Access shall be authorized and granted consistent with DMS's obligations the confidentiality provisions outlined in the Agreement entered into by DMS and Intersections.  Each authorization shall be approved by appropriate DMS management.  All DMS employee authorizations and manager approvals shall be documented and retained.  If 

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 21 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

 any individual among DMS's Personnel or Authorized Persons no longer requires access to Information, DMS shall take immediate steps to remove the access of that individual, or inform Intersections for removal from Intersections systems.  The access removal will be documented with date and time and will be retained by DMS at all times while DMS is in possession of or has access to Information.  Intersections retains the right to audit these access lists and justifications upon reasonable prior notice.

5.4      Encryption.  ***** 

5.5      Network and Host Security.  DMS shall have commercially reasonable and efficient network intrusion detection, firewalls and anti-virus protection in place and functioning properly (the "Network and Host Security Methods").  DMS shall use commercially reasonable efforts to ensure that operating systems and applications that are associated with Information shall be patched within a commercially reasonable time period after DMS has actual knowledge of any security vulnerabilities.  DMS will exercise generally accepted industry standards to protect any software, systems, or networks that may interact with Intersections systems, networks, or any of Information from becoming infected by any Viruses.  DMS agrees that it shall maintain, throughout the Term of the Agreement and at all times while in the possession of or during the access to Information, Network and Host Security Methods at least as secure as the Network and Host Security Methods disclosed to and assessed by Intersections prior to execution of the Agreement and shall not implement less secure Network and Host Security Methods without the prior written consent of Intersections.

6.             Permitted Uses and Disclosures of Personal Information.  DMS will not use or disclose any Personal information provided by Intersections about any individual, including, but not limited to, *****  Any use or disclosure of any Personal Information is specifically and expressly limited to the use or disclosure that is necessary to process transactions requested by Intersections or the individual to whom the information pertains.  In addition, unless authorized by Intersections, DMS shall not use or permit others to use Personal Information to offer products or services, or otherwise commercially exploit Personal Information.

7.             Security Breach Management.

7.1      Notice.  Unless prohibited by Applicable Laws, DMS shall expeditiously notify Intersections, but in no more than *****, if DMS becomes aware that: (1) any Personal Information in DMS's custody is lost or cannot be accounted for; (2) there is an actual or potential unauthorized access to or use of Personal Information; or (3) Personal Information in written or electronic form has been transmitted, disclosed, stored, or disposed of in an unencrypted or unsecured format in violation of Applicable Law ("Security Breach").  DMS shall provide notice to Intersections Corporate Privacy Office by emailing *****, *****, and, ***** and shall include, to the extent known, the following information: (a) the nature of the Security Breach, (b) the estimated impact on Intersections, (c) the name of a senior level person responsible for communicating with Intersections regarding the Security Breach, and (d) the investigative action taken or planned.  

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 22 of 23

	
API Processing Services August 2016

	 

SPECIFIC TERMS IN THIS AGREEMENT HAVE BEEN REDACTED BECAUSE CONFIDENTIAL TREATMENT FOR THOSE TERMS HAS BEEN REQUESTED. THE REDACTED TERMS HAVE BEEN MARKED AT THE APPROPRIATE PLACE WITH FIVE ASTERISKS (*****).

	

	
15301 Spectrum Drive, Second Floor, Addison, TX 75001

DMS shall cooperate fully with all Intersections reasonable requests for information regarding the Security Breach and DMS shall provide regular updates on each Security Breach and the investigative action and corrective action taken. Such notices and updates shall be DMS's Confidential Information. 

7.2.     Remediation.  Upon completion of the investigation and at Intersections request, DMS will provide Intersections with a final written report that fully describes, to the extent known, (a) the nature of the Security Breach, (b) the Personal Information disclosed, destroyed, compromised or altered, and (c) the specific corrective/remedial action taken.  Such report shall be DMS's Confidential Information.

7.3.     Customer Notices.  In the event of a Security Breach, DMS will provide notifications to affected parties, regulatory agencies, and law enforcement to the extent that DMS is required to do so by Applicable Law. The content, timing and other details of such notice shall be subject to Intersections cooperation in providing DMS appropriate contact information and other relevant assistance to allow DMS to comply with the provisions outlined herein, including Intersections reasonable approval. For any Security Breach that is due to DMS's, or a DMS contractor's, failure to comply with the terms of this Agreement, DMS shall be responsible for the costs of such notifications (including credit monitoring services or identity theft protection services required Applicable Laws or by a state or federal regulator).

8.             Return of Records.  Upon termination of the relationship between DMS and Intersections, or at the request of Intersections, DMS shall immediately cease to process records containing Personal Information and shall promptly return to Intersections all such records, or destroy the same, in accordance with such instructions as may be given by Intersections at that time.  Notwithstanding the foregoing, DMS may retain such records as necessary to comply with Applicable Law.

This document is confidential and the proprietary information of Digital Matrix Systems, Inc. and shall not be disclosed without written permission.

	
Digital Matrix Systems, Inc.

	
Page 23 of 23

	
API Processing Services August 2016

Source: [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00266-of-00352.parquet"}, [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00266-of-00352.parquet"}]]