06 - Laserfiche WebLink

Exhibit D Innovative Interfaces Incorporated Hosting Services Terms and Conditions These Hosting Services Terms and Conditions ("Hosting Terms") apply to the License Agreement if, and only to the extent that, Hosting Services are identified on the Pricing Exhibit to the License Agreement as a purchased service. Unless otherwise specified, capitalized terms in these Hosting Terms have the same meaning as those in the GTCs. The terms set forth herein supplement, but do not replace or modify, the GTCs. 1. Hosting Services. The following terms apply for all purposes to Client's license to and use of the Software under the Agreement. 2. Hosting Solution. Innovative offers clients a standard cloud-based hosting option (the"Standard Plan"). The table below sets forth the features of the Standard Plan. This option provides industry-leading security and monitoring at a SOC 1/SOC 2 Type 2/ISO 27001-audited datacenter by a top-tier cloud hosting provider(the "Hosting Provider"),with the flexibility to meet clients' data storage, data recovery, and information security policy requirements. To meet clients' global hosting needs, Innovative offers hosting options in datacenters located in the United States, Canada, United Kingdom, Ireland, Australia and the Asia-Pacific region, however, Innovative reserves the right to increase, decrease and/or relocate its datacenters at anytime. Feature Standard 24x7 infrastructure monitoring ✓ Dedicated production environment ✓ 99.9%guaranteed infrastructure uptime** ✓ Dedicated public IP address and custom URL ✓ Operating system installation and management ✓ Library software installation and upgrades ✓ Data backups Daily Archive data backup retention 30 days 3. Hosting Solution System Configuration.The hosting systems are configured to meet the solution requirements as per the Hosting Terms set forth on the Pricing Exhibit to the License Agreement. 4. Security Controls. a. Generally. Subject to the terms of the Agreement, Innovative implements industry-recognized best practices to prevent the unintended or malicious loss, destruction or alteration of Client's data resident in the Software. b. Network Systems Audit Logging. All firewall logon activity and password changes are logged, monitored, controlled and audited. All intrusion detection and firewall log monitoring is done through services provided by Innovative and those pertinent log files and configuration files are retained for ninety (90) days and can be made available upon request for audit and problem resolution, as may be required. c. Network Monitoring. All network systems and servers are monitored 24/7/365. Innovative will monitor its systems for security breaches, violations and suspicious (questionable) activity. This includes suspicious external activity(including, without limitation, unauthorized probes, scans or break-in attempts) and suspicious internal activity(including, without limitation, unauthorized system administrator access, unauthorized changes to its system or network, system or network misuse or program information theft or mishandling). Innovative will notify Client as soon as reasonably possible of any known security breaches or suspicious activities involving Client's production data or environment, including, without limitation, unauthorized access and service attacks, e.g., denial of service attacks. Page 16 of 17