Encryption Management Platform (EMP) Addendum

Encryption Management Platform Service Description

Encryption Management Platform (EMP) is a cloud security solution provided by Corporate Network Solutions and supported by Fortanix. This Self-Defending Key Management Service (SDKMS) delivers Hardware Security Module (HSM), Key Management, Encryption, and Tokenization for multi-cloud and hybrid environments. The solution provides a centralized way to enforce policies and maintain consistent end to end encryption by encrypting applications and data – at rest, in motion, and in use by leveraging Runtime Encryption technology built upon Intel SGX technology. With SDKMS, one can securely generate, store, and use cryptographic keys and certificates, as well as secrets, such as passwords, API keys, and tokens. This service supports all the major key algorithms (AES, RSA, (3)DES, HMAC, ECC) and is a FIPS 140-2 Level 3 certified HSM.

Encryption Management Platform SLA

This Corporate Network Solutions Service Level Agreement (“SLA”) is a policy governing the use of Corporate Network Solutions Encryption Management Platform (“EMP”) under the terms of the Corporate Network Solutions Master Service Agreement (the “Corporate Network Solutions MSA”) between Corporate Network Solutions, LLC and clients of Corporate Network Solutions services. This SLA applies separately to each account using Corporate Network Solutions EMP service. Unless otherwise provided herein, this SLA is subject to the terms of the Corporate Network Solutions MSA and capitalized terms will have the meaning specified in the Corporate Network Solutions MSA. We reserve the right to change the terms of this SLA in accordance with the Corporate Network Solutions MSA.

1. Service Availability of Application Program Interface (API) and User Interface (UI).
   99.9 to 99.0 = 25%
   99.0 and under = 100%
   If the Availability of a class of service that you purchase is less than the associated Availability Commitment, then you may request Service Credits for that affected class of service in accordance with the Corporate Network Solutions MSA procedures. Availability in a given month is calculated according to the following formula:
   “Availability” = ((total minutes in a calendar month – total minutes Unavailable) / total minutes in a calendar month) x 100
2. The following will be considered an SLA Event for the EMP service:
   A more than five (5) percent Error Rate for more than ten (10) consecutive minutes – where “Error Rate” means the number of valid requests that result in a response with HTTP Status 500 and Code “Internal Error”, or no response due to network interruption deemed to be created by Corporate Network Solutions, divided by the total number of valid requests during each five-minute period.
3. Reporting
   Client should report downtime incidents requests to us via email to support@cnsolutions immediately of the event’s commencement. Only one event per report, please. Please include the service type, IP Address, and a full description of the service interruption including logs (if applicable). Downtime officially begins at the time Corporate Network Solutions receives the email “ticket” and ends when Corporate Network Solutions has, at its sole discretion, resolved the issue.
4. Exclusions
   The Service Commitment does not apply to any unavailability, suspension or termination of Corporate Network Solutions, or any other Corporate Network Solutions performance issues:
   1. That result from a suspension described in Section 5 of the Corporate Network Solutions MSA; Caused by factors outside of our reasonable control, including any force majeure event or Internet access or related problems beyond the demarcation point of Corporate Network Solutions;
   2. That result from any actions or inactions of you or any third party;
   3. That result from Client equipment, software or other technology and/or third party equipment, software or other technology (other than third party equipment within our direct control);
   4. Arising from our suspension and termination of Client’s right to use Corporate Network Solutions EMP or any other service offering in accordance with the Corporate Network Solutions MSA (collectively, the “Corporate Network Solutions MSA SLA Exclusions”). If availability is impacted by factors other than those used in our calculation of the Error Rate, then we may issue a Service Credit considering such factors at our discretion.
5. Account Status
   If Client is currently behind in payments for Client’s accounts, of has been behind 3 or more times in the preceding 12 months, Client does not qualify for an SLA credit for Downtime. Valid SLA claims can’t be credited if Client has outstanding abuse issues, but once Client’s abuse issues are resolved Corporate Network Solutions will gladly credit all valid claims. Making false or repetitive claims will cost Client $50 per incident and may place Client in violation of account Acceptable Use Policy and Terms & Conditions. Clients engaging in malicious or aggressive Internet activities such as attacks or counter-attacks are in violation of the Acceptable Use Policy and Terms & Conditions and are therefore not entitled to SLA credits. Making false or repetitive claims will cost Client $50 per incident and may place Client in violation of account Acceptable Use Policy and Terms & Conditions. Clients engaging in malicious or aggressive Internet activities such as attacks or counter-attacks are in violation of the Acceptable Use Policy and Terms & Conditions.
   1. Application of Service Credits
      Whichever Service was least available during the Service month, Corporate Network Solutions will apply any Service Credits only against future payments otherwise due from Client; provided that:
   2. Corporate Network Solutions may issue the Service Credit to the Client account for the Service Month in which the Unavailability occurred,
   3. Client is current with all payment obligations set forth in the Agreement, and
   4. Client’s total calculated usage fees for the Eligible Credit Period are greater than or equal to $100.
   5. Service Credits shall not entitle Client to any refund or other payment from Corporate Network Solutions. Service Credits may not be transferred or applied to any other account. Unless otherwise provided in the Agreement, Service Credits are Client’s sole and exclusive remedy for any unavailability or non-performance of Services.
6. Credit Request and Payment Procedures
   To receive a Service Credit, Client must submit a request by sending an e-mail message to support@cnsolutions. To be eligible, the credit request must:
   1. Include SLA Service Credit Claim in the subject of the e-mail message;
   2. Include, in the body of the e-mail, Client’s Organization name or Client ID, the dates, times, and length of each Unavailability Period that Client claims to have experienced;
   3. Include any documentation that corroborates Client’s claimed Unavailability; and
   4. Be received by Corporate Network Solutions within thirty (30) calendar days of the last day reported in the Unavailability claim.
   5. If the Monthly Uptime Percentage of such request is confirmed by Corporate Network Solutions valid for the Service Month requested, then Corporate Network Solutions will issue the Service Credit to Client within one Service Month following the month in which the request is confirmed. Client’s failure to provide the request and other information as required above will disqualify Client from receiving a Service Credit. Corporate Network Solutions data and records will be the sole factor for validating claims due to Unavailability.