Backup as a Service Addendum

Backup as a Service Addendum

This Backup as a Service Addendum (this “Addendum”) is subject to and part of the Contour Master Cloud and Managed Services Agreement (the “Agreement”) between Contour Data Solutions LLC (“Contour”) and Customer. Any capitalized terms that are not defined in this Addendum shall have the meanings set forth in the Agreement.

1. Description of Services

1.1. Contour offers cloud-based Customer-managed backup and recovery services (“Recovery Services”) designed to Customer’s backed-up Contour Cloud and on-premise data and systems. This Addendum outlines the terms and conditions for the Recovery Services which may be selected and configured by Customer through the Cinch Portal. Additionally, Contour and Customer will mutually agree to a Service Order and applicable RACI chart. Customer will configure the specific backup policies, including the Customer equipment and systems to be backed up (“Protected Systems ”), the Recovery Point Objective, and Recovery Time Objective. The “Recovery Point Objective” or “RPO” is the point in time from which data can be restored from Protected Systems (e.g., all data older than three days old). The “Recovery Time Objective” or “RTO” is the period of time it will take to restore the data from Protected Systems (e.g., within twenty-four hours).

1.2. CUSTOMER IS SOLELY RESPONSIBLE FOR SELECTING AND CONFIGURING RECOVERY SERVICES, INCLUDING SELECTING PROTECTED SYSTEMS, THAT ARE APPROPRIATE TO ITS NEEDS. CONTOUR SHALL HAVE NO RESPONSIBILITY WHATSOEVER FOR CUSTOMER’S SELECTIONS AND CONFIGURATIONS.

1.3. The Recovery Services back up and replicate Protected Systems to the Contour cloud. When requested by Customer, Contour will restore the Protected Systems back to client control and managed infrastructure.

This service option may be configured by Customer, including the following options:

Feature Function
Redundancy of the backup service The backup can be maintained at two separate locations.
Automatic replication New backups on your primary storage location are mirrored to an offsite vault.
Flexible replication policies Replication can be scheduled or run on demand.
End-to-end encryption Backup data remains encrypted during transmission to Contour and in storage.
Efficient processing Block-level delta processing technology replicates only new and changed data blocks. Compression and bandwidth throttling minimize network traffic.
Bandwidth throttling Set bandwidth throttling policy to reduce use of network at specific days or times of day.

1.4. Customer can choose an RTO of 4-hours or 24-hours. All you need is a computer and an Internet connection to remotely access your recovered systems and data from our secure, purpose-built cloud.

(a) Technical Documentation and Training. An on-boarding process is provided for all clients. Documents and hands-on training outlining key concepts with usage examples are available.

(b) Service Support. Contour’s Command Center Operations will provide support for problems that you report, related to our offerings. The Command Center can be reached by phone at 484.679.2324, or email at help@contourds.com. Support may be provided to any client in which Contour or its agents maintain facilities.

1.5. Contour Backup Service Operations

1.5.1. Service Options

(a) Backup-as-a-Service offering is operated and managed by Contour:

• “Local Back-Up” service allows you to engage Contour to manage regularly scheduled system and data back-ups. The architectural framework of this service also allows you to integrate Contour’s Recovery Services into your existing disaster recovery architecture.

• “Replicated Back-up” allows you to extend the protection of Local Back-up offsite, to the Contour Cloud.

• If subscribed and contracted with Contour, Cloud-based Virtual Recovery service allows you to select systems that have been replicated to the Contour Cloud and recover them in the Contour Cloud Recovery area.

1.5.2. Local Back-up and Management

(a) Contour will provide the following:

• Escalation management within your organization and with the related hardware and software manufacturers for the products that comprise the backup solution
• If contracted, daily health checks with identification of trends including growth and disaster recovery readiness and monthly reporting to actual back-up jobs with recommended changes

(b) As a part of this solution you can either purchase the capital assets for local back-up from Contour or acquire them as an operational cost through Contour.

(c) You are responsible for:

• Company backup policies
• Maintaining Contour compatible back-up and recovery enabled software
• Maintaining Contour compatible back up hardware and storage
• Maintaining current Support and Maintenance with the hardware and software manufacturer
• Providing sufficient bandwidth at your local facility

These components will allow you to back-up locally in your data center and have Contour manage to ensure the solution is performing consistently and as expected.

1.5.3. Replicated Back-up to the Cloud

If subscribed and contracted with Contour, Contour can provide Veeam or Commvault as a backup engine that operates at the hypervisor level and enables protection of both physical and individual virtual machines and their associated virtual machine disk(s).

(a) Contour will provide the following services with respect to Replicated Back-up:

• Compatible back-up, recovery, and management software
• Compatible integrated hardware
• Daily management of the replication process to ensure that all necessary data is replicated to the Contour cloud in a consistent state acceptable for recovery in a disaster
• Daily health checks with identification of trends including growth and disaster recovery readiness and monthly reporting to actual back-up jobs with recommended changes
• Support in a recovery scenario to help bring data back from the cloud to either the production site or the recovery site as needed
• If subscribed and contracted with Contour, Contour will provide a WAN-optimized technologies that will speed back-up operations.

(b) You are responsible for:

• Company backup policies
• Maintaining Contour compatible back-up and recovery enabled software
• Maintaining Contour compatible back up hardware and storage
• Maintaining current Support and Maintenance with the hardware and software manufacturer
• Providing sufficient bandwidth at your local facility

1.6 Fee Schedule

In the event you subscribe to the Contour Cloud for recovery purposes, the following fee schedule will be applicable:

(a) Monthly usage fees – per server per month

(b) Based on SLA or Tiers

(c) Fees include:

• Internet and Network
• Compute
• Disk
• Managed Services from Contour for recovery only

2. Monitoring & Management with Service Levels

2.1 Monitoring System: Contour will use system monitoring tools (the “Monitoring Systems”) to monitor the Managed Systems. Contour will use an incident management system to automatically create incident tickets and track the management of those incidents.

(a) Monitoring Dashboard/Portal and Business Views: Contour will provide Customer with access to a dashboard and management portal (“Customer Portal”) through which Customer may access incident ticketing information, reports, and trending data with respect to Managed Systems.

(b) Monitoring Services: Contour’s proactive Monitoring Systems and Customer Portal will be available as set forth in this Exhibit. The Monitoring Systems collect and evaluate availability and performance statistics from Managed Systems and present those statistics to Customer via the Customer Portal. In addition to monitoring up/down status of each device with a Managed System, the Monitoring System monitors the critical application attributes that are identified in cooperation with Customer and set forth a Service Order.

(c) Incident Management: Contour will manage the collection, communication, and escalation of incidents arising as a result of alerts received from the Monitoring System, in accordance with the written standard operating procedures (the “SOPs”) agreed upon with Customer in writing and the terms and conditions defined in this document.

2.2 Proactive Management: Contour will provide the Infrastructure Management Services identified in the applicable Service Order, for the Managed Systems specified in the applicable Service Order. The Infrastructure Management Services may include:

(a) Preventative Maintenances: Contour will perform appropriate preventative maintenance tasks on Managed Systems. The tasks may include services such as log review, job monitoring, and replication job monitoring, disk defragmentation, virtualization configuration analysis and adjustments, each as further defined in an SOP.

(b) Health Checks: Health checks are a technical assessment of Customer’s existing physical and virtual Managed Systems to ensure that you continue to achieve optimal levels of performance and efficiency. Health checks maximize the return on your investments and provide a proactive, in-depth understanding of the performance level across your network, servers, storage systems, and backup systems. Contour staff will provide daily health checks in accordance with the applicable SOP to ensure that all critical components of your environment are physically inspected and affirmed operational by one of its team members.

2.3 Performance Tracking/Reporting: Contour will regularly monitor and analyze the performance and utilization data from Managed Systems, to identify trends and tuning opportunities with respect to Managed Systems. That data will be shared with Customer on an ad hoc basis, and on a monthly management report, which reviews the service level status and service support delivery of Managed Systems. As reasonably requested by Customer, Contour will provide reports regarding the performance, capacity, availability, and incidents for of all Managed Systems. Contour and Customer will also meet as reasonably requested by Customer to review the status of the account.

2.4 Remediation Services: For incidents that have been detected and reported to Contour by the Monitoring Systems (“Incidents”), Contour will provide the first level response. Contour will provide this response in accordance with a Customer-provided run book, which has been reviewed and accepted by Contour (not to be unreasonably withheld, conditioned, or delayed). Customer hereby authorizes Contour to open support tickets for Customer with Customer’s internal escalation resources and/or third parties required for resolution (including, but not limited to, manufacturers, service providers, and telecommunications carriers). Contour will work to remediate Incidents, as set forth in the applicable Service Order and the SOPs. Customer may engage Contour to manage the troubleshooting and resolution of other issues, on a time and materials basis or as part of an established retainer based Service, in either case as set forth in one or more SOWs.

2.5 Standard Operating Procedures: The SOPs will contain prioritization levels associated with specific events, business requirements, and other management and support criteria designated by Customer. The SOPs will specify the prioritization definitions outlined in Help Desk Procedures, the SOPs will govern the escalation and issue management process.

2.6 Periodic Review Meetings: The Contour employee that is dedicated to managing Customer’s account (“Account Manager”) may from time to time meet with stakeholders from Customer and other members of the Contour support team to review reports, identify meaningful trends, and to discuss the priorities and concerns of all parties. These meetings are designed to last from one to two hours, and may be held at Customer’s location, by telephone, and/or as otherwise mutually agreed by the parties.

2.7 Infrastructure as a Service: All hardware provided by Contour that is not sold or leased to Customer pursuant to a Service Order, is the sole property of Contour and will remain so for the Term.

2.8 Equipment Location Use and Repair: If Contour-provided Managed Systems are located other than at a Contour-owned or Contour-managed location (collectively, “Off-Premises Contour Equipment”), then Customer agrees to the terms and conditions of subsections 1(h) and 1(i). Customer will maintain and use Off-Premises Contour Equipment only at the location shown on the applicable Service Order. Customer agrees that it will not move Off-Premises Contour Equipment from that location without the advanced written approval of Contour. Customer is solely responsible for maintaining all Off-Premises Contour Equipment in good repair and proper working order. Customer is solely responsible for maintaining a safe and sufficient operating environment and protecting all Off-Premises Contour Equipment from damage of any kind whatsoever. Customer will continue to make all required payments to Contour in the event of any loss, damage or destruction of any Off-Premises Contour Equipment, including if such equipment is rendered inoperable or is completely destroyed. Customer will not modify, or make alterations or attachments to any Off-Premises Contour Equipment without prior written authorization from Contour. Customer acknowledges and warrants that Contour or its agents shall have the right to inspect any Off-Premises Contour Equipment during Customer’s normal business hours without notice to Customer at such Off-Premises Contour Equipment’s current location. Customer will cooperate with Contour or its agents as necessary to complete regular maintenance and repair activities of Off-Premises Contour Equipment. Upon termination or expiration of the applicable Service Order, Customer will return all Off-Premises Contour Equipment to Contour in substantially the same condition as when such equipment was provided to Customer, normal wear and tear expected. Customer acknowledges and agrees that Contour will invoice Customer, and Customer will pay, for all repairs or replacements to Off-Premises Contour Equipment.

2.9 Insurance: During the Term, Customer will procure and maintain property insurance covering all Off-Premises Contour Equipment at Customer’s sole expense, naming Contour or its designee as the sole loss payee, for the full replacement value of the Off-Premises Contour Equipment, and general liability insurance listing Contour or its designee as an additionally insured. Customer will furnish Contour with proof of insurance upon request. If Customer is unwilling or unable to provide proof of insurance, Contour will procure such insurance for the Off-Premises Contour Equipment and add the cost of such insurance to the amounts due from Customer under this agreement. All changes to such insurance must disclosed in writing to Contour within thirty (30) days of Customer becoming aware of such changes. Customer hereby irrevocably appoints Contour as its attorney-in-fact to make claim for, receive payment of and execute and endorse all documents, checks or drafts for loss or damage under any insurance policy insuring the Off-Premises Contour Equipment.

3 Service Level Agreement. Contour will provide certain aspects of the Infrastructure Management System to Customer in accordance with the following Service Level Agreement (this “SLA”).

3.1 System Availability

(a) “Available” or “Availability” means the time (in minutes) that the system being measured has the ability to establish a network connection and that its material features and functions are up, running, and operationally functional.

(b) "Excluded Downtime" means the time (in minutes) that the system being measured is not Available, to the extent caused by (A) Customer-provided hardware, software, or other equipment not provided by or certified by Contour; (B) Customer-provided or Customer-leased local area networks or ISP connections; (C) modifications made by Customer without Contour’s prior written approval; (D) use of the system by Customer, its employees, agents, or contractors, in ways not authorized by this Exhibit; (E) Maintenance Downtime, as defined below; (F) Customer’s failure to use sufficient, redundant power sources or Internet connectivity; (G) a Force Majeure event as provided in Section 12(a) of the Agreement; or (H) any other system outside of Contour’s control.

(c) “Maintenance Downtime” means scheduled repairs, maintenance, upgrades, or deployments related to Contour’s equipment, network, or facility, and other events agreed upon in advance by Contour and Customer.

(d) “Total Minutes” shall mean the number of minutes in the applicable calendar month.

(e) “Percent Available” will be calculated as follows: ((Availability / (Total Minutes – Excluded Downtime)) x 100).

3.2 Monitoring System. In each calendar month during the Term, the Percent Available for the Monitoring Systems will be 99.99%.

(a) Ticketing System. In each calendar month during the Term, the Percent Available for the Customer Portal will be 99.99%.

(b) Managed Data Center and internal Network Availability. In each calendar month during the Term, the Percent Available for the network within the locations used to store Managed Systems (“Data Center”) will be 99.99%.

(c) Redundant Devices. In each calendar month during the Term, the Percent Available for each Redundant Device managed by Contour will be 99.99%.

(d) Device Availability. In each calendar month during the Term, the Percent Available for each Non-Redundant Device managed by Contour will be 50.00%.

(e) Non-Standard Equipment. Customer may require Contour to manage or support hardware and/or software products for which Contour does not typically provide support as part of the Infrastructure Management Services (collectively, “Non-Standard Equipment”). Contour shall not be responsible under this SLA or this Exhibit for the Availability or functionality of any Non-Standard Equipment, and Customer shall not be eligible for credits under this SLA for the failure of any Non-Standard Equipment.

(f) Security. Contour shall use commercially reasonable efforts to secure: (i) the Data Centers and networks contained therein; and (ii) Managed Systems (including testing and deploying security patches and fixes, where appropriate).

(g) Failure to Meet SLA. In a calendar month where Contour fails to meet any expressly stated service level commitment in this Section 2, Customer will give Contour written notice thereof no later than ten (10) business days after the end of such calendar month. Contour will investigate such failure promptly after its receipt of notice.

3.3 Response Time SLA for Remediation Services. Beginning forty-five (45) days after the Acceptance Date and continuing for the Term, Contour will respond to issues relating to the Infrastructure Management Services, in accordance with the tables below and based on the priority of the issue. Contour is not responsible for issues caused by any of the items within the definition of Excluded Downtime (“Excluded Issues”).

(a) Initial Response SLA. Contour will initially respond to issues reported by the Monitoring Systems, in accordance with the following table.

SLA Criteria Initial Response Commitment Level
Response Initiate response to monitoring system alert < 15 minutes response

In a calendar month where Contour fails to initially respond to an issue within the Initial Response Commitment Level above, Customer will give Contour written notice thereof no later than ten (10) business days after the end of such calendar month. Contour will investigate such failure promptly after its receipt of notice.

3.4 Incident Management and Escalation SLA. Contour will acknowledge and escalate issues reported by the Monitoring Systems, in accordance with the following table.

Priority Status Action Time Escalation
P1 - Critical Unassigned Response/Acknowledgement 15 minutes NOC Tier 1
P1 Assigned NOC escalates to Tier 2 15 minutes NOC Tier 2
P1 Assigned Tier 2 calls Engineer 30 minutes Engineering
P1 Assigned Crisis Management Process 1 hour CRISIS
P2 - High Unassigned Response/Acknowledgement 15 minutes NOC Tier 1
P2 Assigned NOC escalates to Tier 2 1 hour NOC Tier 2
P2 Assigned Tier 2 calls Engineer 4 hours Engineering
P3 - Low Unassigned Response/Acknowledgement 15 minutes NOC Tier 1
P2 Assigned NOC escalates to Tier 2 8 hours NOC Tier 2
P2 Assigned Tier 2 calls Engineer 24 hours Engineering

(a) In a calendar month where Contour fails to acknowledge or escalate an issue within the time set forth above, Customer will give Contour written notice thereof no later than ten (10) business days after the end of such calendar month. Contour will investigate such failure promptly after its receipt of notice.

(b) Priority Definitions

Priority Level Criteria
Priority 3 Managed Systems are Available, but with minor operational variances (e.g. bugs)
Priority 2 Managed Systems are partially available
Priority 1 Managed Systems are completely unavailable

3.5 Knowledge Management SLA

For each issue responded to in accordance with this Section 3, Contour will record relevant information in its incident management system and provide access to Customer upon request. In addition, for each calendar month, Contour will deliver a report to Customer that summarizes all issues in such month, by no later than seven (7) days after the end of such month.

In a calendar month where Contour fails to perform its obligations in this Section 3.5, Customer will give Contour written notice thereof no later than ten (10) business days after the end of such calendar month. Contour will investigate such failure promptly after its receipt of notice.

3.6 Excluded Issues

Contour is not required to provide support for Excluded Issues. Contour may, in its sole discretion, provide support for Excluded Issues, and Customer will pay for all such support at Contour’s then-standard hourly rate. Contour is not responsible for Customer’s failure, for any reason, to respond to alerts or incidents escalated by Contour in accordance with this Exhibit.

3.7 Customer Responsibilities

Customer alone is responsible for:

* Designating a qualified liaison between itself and Contour;
* Providing Contour with the names of persons (and alternates) responsible for technical, administrative and contact matters;
* Obtaining licenses and complying the terms thereof for all software utilized on Customer’s equipment and environments;
* All communications with Customer’s end users, whether for technical support, business relations or any other purpose; and
* If applicable, providing Contour with a list of end users for service and/or support.

3.8 Transition Services

If Customer requests (which must be made before the termination or expiration of the applicable Service Order), then Contour, for a commercially reasonable period of time (not to exceed thirty (30) days) will provide assistance to Customer in the transfer of Customer’s Managed Systems to a third party or to a Customer site (the “Transition Services”). Such Transition Services will be rendered and paid for by Customer on a time and material basis, plus all reasonable and necessary travel and living expenses. Promptly after Customer’s request (which must be made no later than thirty (30) days after the end of the applicable Service Order), Contour will provide Customer with all of Customer’s data in Contour’s possession, at no expense to Customer.

Hold up, wait a minute, let’s go there cuz Cinch’s with IT!