| Egnyte Platform | - In provisioning the Services for proper usage by Customer and its Users under all Egnyte plans detailed under the Agreement and the associated compute resources to be utilized, Egnyte targets a Content access limit of up to 100% of the total monthly storage purchased during any given month of the Subscription Term (the “Access Limit”). Customer usage in excess of the Access Limit qualifies as a restricted use under Section 3.d of the Agreement and may subject Customer to overage fees.
Notwithstanding the above, any Customer and/or User attempts to access Content in any other manner that imperil the stability and reliability of the Services or which are prohibited under Section 3.d of the Agreement may be subject to additional restrictions. For example: i. the sharing of Content reasonably identified by Egnyte as an attempt to propagate a mass, junk mailing may be blocked in its entirety, temporarily or permanently; ii. Customer’s initiation of Egnyte network egress activities, bandwidth usage, or API calls may be limited by Egnyte in accordance with Egnyte’s then-current plan limits (which may include, but are not limited to, those found at: https://helpdesk.egnyte.com/hc/en-us/articles/201637594-Am-I-Subject-to-Any-Restrictions ; https://helpdesk.egnyte.com/hc/en-us/articles/17683455594125-Select-Usage-Restrictions-by-Plan). - Methods of Content access by Customer or its Users that count toward the Access Limit include, but are not limited to, the following:
- Web UI
- Shared file and folder links
- Desktop App
- Desktop Sync
- WebEdit
- WebDAV
- Mobile App
- Storage Sync
- Turbo
- FTP/SFTP
- Microsoft Office Add-In
- Salesforce Integration
|
| Governance | - Pricing for Governance functionality includes fees for Customer’s right to utilize the Content Classification and Access Control modules.
|
| Administrative Package/Admin Package | - Multiple Entity Management (MEM) Power User Access. Customers with the Administrative Package may use MEM capability to manage multiple domains.
If this feature is utilized, all unique Power Users under the Agreement may access any domain listed under this Order Form or a subsequent Order Form under the Agreement (excluding any Archive Domain or GxP Domain), subject to Customer configuration and MEM limitations. |
| Egnyte Archive Storage/Domain | - Archive Storage will be accessed and utilized through an Archive Domain for a Customer with RAD functionality enabled via its plan. Archive Storage is automatically allocated by Egnyte following the purchase of such storage.
- The Archive Domain is not to be utilized as an active domain, rather only as an archive ancillary to the active domain(s) for housing low-use files and folders.
- Up to 5 unique Admin Users under the Agreement may access such Archive Domain.
- Governance, Permissions, and Legal Hold functionality are unavailable for the Archive Domain.
- General search functionality is available for the Archive Domain but may be subject to limitations.
- Accessing (i.e. downloads) of Content from the Archive Domain by Customer and its Users, including any modification, access, or migration of data already in an Archive Domain, is limited to 5% of the total storage in use on the last day of each month for the Archive Domain (the "Download Limit"). Should Customer and its Users, in the aggregate, exceed the Download Limit in any month during the Subscription Term, Egnyte may increase the fee for that month (based on the applicable pricing for non-archive storage), rounded up to each TB above the Download Limit during that month. Egnyte will bill for such usage following discovery of the overage, with billing effective as of the date such overage occurred.
- Any file size limit under Customer’s purchased plan shall not apply to the Archive Domain.
- For clarity, “accessing” refers to the download centric activities set forth in Egnyte’s Service generated audit report, and includes downloads, downloads via link, preview, and preview via link.
Notwithstanding the foregoing, in no event shall the following operational activities be counted against the accessing/download limit: - the removal of data from the Archive Domain upon termination of the archive service
- uploading of data into the Archive Domain from the primary, active domain(s)
Methods of Content access by Customer or its Users that count toward the Download Limit include, but are not limited to, the following: - Web UI
- Shared file and folder links
- FTP/SFTP
- Public API
- RAD
- Migration tools
- All other methods of Content access are prohibited on the Archive Domain, and as such, the Administrator is required to manually disable the following on the domain configuration settings prior to Customer’s use of the Archive Domain:
- Mobile
- Desktop App
- Apps and Integrations
|
| GxP Platform | - Description. The GxP Platform includes a domain that includes features to meet requirements set forth in FDA 21 CFR Part 11.
- The GxP Platform domain is able to hold Customer’s FDA regulated data. Such domain will be generated following Egnyte’s qualifications procedures and have features to meet requirements set forth in FDA 21 CFR Part 11.
- In addition to the domain described in subsection a. above, the GxP Platform includes a separate test domain at no additional cost, which includes 25 GB of storage and which may be accessed by up to 5 unique Power Users and up to 5 unique Standard Users.
- As a service alongside purchase of the GxP Platform, Customer will be able to review Egnyte's GxP-related SOPs remotely once per annual Subscription Term (or annual portion thereof), provided such review does not exceed reasonable limits on time and resources to be expended by Egnyte in providing Customer support in relation to its review, as may be determined by Egnyte in its sole discretion (which shall not be unreasonably withheld). Excess support for such review may be offered by Egnyte via a separately negotiated Statement of Work.
- If required, costs and scope of a Validation Package shall be addressed in a separate Statement of Work.
- Customer understands that its use of the GxP Platform is dependent on maintaining Power User functionality and will maintain such functionality as needed in order to secure access to the GxP Platform.
|
| Validation as a Service | - Summary and Delivery Cadence:
Egnyte’s GxP Validation as a Service offering is a recurring service that includes the development and delivery of critical components for a fully validated solution to assist Customer in its ongoing compliance activities as set forth in FDA 21 CFR Part 11. All services will be performed by Egnyte at regular intervals: - GxP validation Major services are typically performed two (2) times in each twelve (12) month interval of the Subscription Term, with the first performance commencing immediately after execution of the Order Form.
- GxP validation Minor services will be performed on a monthly basis, with a maximum of one (1) per month (except for the months Major service is performed).
- Custom Egnyte GxP training will be delivered a maximum of one (1) time per annual period, with the first training commencing immediately following the execution of the order.
- Details/Scope:
Egnyte will work in collaboration with Customer to complete the scope below for one (1) GxP Platform purchased by Customer in accordance with the cadence defined above: 2.1 GxP Validation Major Services. GxP validation for use in a regulated environment and the provision by Egnyte of the following documents after validation is complete for Customer’s relevant Power Users and Standard Users, encompassing the allocated storage on the GxP domain. The following will be provided: - Egnyte Validation Plan
- Functional Requirements Specifications (FRS)
- Platform Qualification (PQ)/ User Acceptance Testing (UAT)
- Software Installation Qualification (IQ)
- Operational Qualification (OQ)
- Traceability Matrix
- Electronic Records, Electronic Signatures (ERES) Assessment
- Egnyte Validation Summary
- Develop Test Plan
- Customer may choose to develop a separate, independent overall Validation Plan
- Develop User Requirements Specifications (URS)
- Develop PQs /UAT based on the approved URS
- Integration with DocuSign (or Adobe Sign Cloud) and Egnyte Desktop App
- Develop Traceability Matrix (UAT to URS and Egnyte FRS)
- Execute the approved PQ / UATs and endeavor to resolve discrepancies / deviations (if any) in Customer’s environment
- Develop 2 System SOPs: Operation and Administration of the System
- Scope of services includes two (2) cycles of draft, review/revise, and approval of the documents. The second cycle shall be final, with no further iterations.
- Upon completion, Egnyte PS will refresh all documentation accessible to Customer’s business owner or quality team for any ongoing management and responsibilities.
- UAT Summary Report
2.2 GxP Validation Minor Services. The following will be provided: - Functional Requirements Specifications, as needed
- Platform Qualification / User Acceptance Testing (UAT)
- Software Installation Qualification
- Operational Qualification as needed
- Traceability Matrix
- Electronic Records, Electronic Signatures (ERES) Assessment
- Develop Test Plan
- Customer may choose to develop a separate, independent overall Validation Plan
- Develop User Requirements Specifications (URS)
- Develop Traceability Matrix (UATs to URS and Egnyte FRS)
- Execute the approved PQ / UATs and endeavor to resolve discrepancies / deviations (if any) in Customer’s environment
- Develop 2 System SOPs: Operation and Administration of the System
- Scope of services includes two (2) cycles of draft, review/revise, and approval of the documents. The second cycle shall be final, with no further iterations.
- Upon completion, Egnyte PS will refresh all documentation accessible to Customer’s business owner or quality team for any ongoing management and responsibilities.
- A Validation Summary Report (VSR) will be provided to Customer
2.3 Custom Training.
Remote customized training and user adoption support, which will include curriculum development in collaboration with Customer. The following trainings will be recorded and provided to Customer, with an annual refresher training as needed and requested: - 1 x Admin training
- 1 x Power User training
- 1 x GxP features training
|
| Advanced Privacy & Compliance | - Description. Advanced Privacy & Compliance ("APC") is a SaaS-based privacy feature licensed by Egnyte for delivery to Egnyte customers directly from a third-party licensor. For clarity, apart from the first sentence of such section, the provisions of Section 3.f of the Agreement are inapplicable to APC.
|
| Egnyte for Government / CMMC | - Customer is responsible for configuring its Egnyte for Government domain in accordance with its own compliance and business requirements, including, but not limited to, CMMC certification. CMMC functionality is a SaaS-based privacy feature licensed by Egnyte for delivery to Egnyte customers directly from a third-party licensor. For clarity, apart from the first sentence of such section, the provisions of Section 3.f of the Agreement are inapplicable to CMMC functionality.
|
