Master Service Agreement

GREY MATTER

Master Services Agreement

Our Responsibilities

Our Response Time

We agree to provide response to Your support requests within the time frames laid out below. If the support request is submitted outside of Our business hours, Our response time may be longer normal. We will still work on Your support request as fast as possible, however it will be on a best effort basis.

Support Request Priorities

We classify support request priorities as shown in the chart below. 

These priorities reflect the amount of time that We have before We change the status of Your service ticket from a status of “New” to a status of “In Progress.” 

We will respond to each support request to confirm that We have received the request and gather any additional details We think We may need. From there, We will prioritize how quickly We have an engineer starting to resolve Your issue based on the chart below. Many times, We will change the status of Your support request from “New” to “In Progress” immediately. We simply set out these guidelines for situations when We have multiple service requests waiting to be worked on. This lets You know the “worst case scenario” for when Your support request will have an engineer actively working on resolving the issue. 

As We all know, not everything in life fits into a box so, the final decision on classifying the priority of an issue will be made by Our responding technician.

 

Priority Examples "In Progress" Time

Critical

Your Main Server is offline, and all users are unable to work.
1 Hour
One of Your Network Switches has failed and stopped half the company from working.
A VPN link between 2 x offices is offline causing one office to be unable to work.

High

Your Internet Connection is offline, users can still work locally
2 Hour
Your CEO’s computer has stopped working
Your main Accounting Software has stopped working

Medium

A user’s desktop won’t turn on so they can’t work
4 Hours
One of the main printers is not working, but users can print to another one
A user is having problems connecting to the Wireless network

Low

Printing is slower than normal
8 Hours
A single user is unable to scan
A user needs a program installed on their PC

No Priority

Pro-Active maintenance of systems
N/A
Add / Edit / Delete User Requests
New Computer or Software Installation

What’s Covered?

As part of this AGREEMENT, We endeavor to include the day-to-day IT support items that are generally required to run a typical business technology baseline infrastructure.
The following is a list of items that are covered under this AGREEMENT.
It’s important to note that anything not included in this list is excluded from Your AGREEMENT and may be billed at Our normal hourly rates.
From time to time, We may provide support for items not included in this list without charge, however We will do this at Our absolute discretion. You will be advised when additional charges would apply if We were to perform work outside of this list prior to Us beginning the work. You will have to agree to these charges before We proceed. This way there will be no billing surprises.

Description of Services

Consulting
Onsite Quarterly Business Review (QBR)
End-User Office365 Training Program

Desktop, Laptops and Servers
Setup New Profiles on Desktops and Laptops
Add / Edit / Delete User Accounts
Forgotten Password Resets
Archive Old User Accounts (Backup Email & Files)
Setup & Maintain Security Groups
Setup & Maintain Network Drives
Restore Files from Backups (1)
Troubleshoot Operating System Not Working
Troubleshoot Microsoft Office Not Working
Troubleshoot Anti-Virus Not Working
Reboot Servers
Troubleshoot Hardware Issues (3)
Hard Drive Clean-up (Remove Temp & Unnecessary Files)
Warranty Claim Processing (3)
Microsoft Patch Management (Service Packs & Updates)
Update Approved 3rd Party Applications (Adobe Flash, Adobe Reader, PDF Creator, Java, 7-Zip)
Monitor all Critical Server and Computer Services and Fix
Monitor Anti-Virus Running & Protection Enabled
Monitor Anti-Virus Definitions Updating Correctly
Monitor Anti-Malware Running & Protection Enabled
Monitor Anti-Malware Definitions Updating Correctly
Monitor Hard Disk Health + Space & Defrag if Necessary
Monitor High CPU Usage
Monitor Security and Event Logs
Roll out Our Best Practice Security Policies

Backups and Disaster Recovery
Monitor Server and Computer Backups (1)
Troubleshoot Server and Computer Backup Failures (1)
Monitor Office365 Backups (1)
Troubleshoot Office365 Backup Failures (1)
Manual Test Restore & Report of Approved Backups (1)

Printers
Clear & Reset Printer Queues
Troubleshoot Printer Issues
Add / Edit / Delete Printer Mapping Group Policies
Add / Edit / Delete Printer Drivers for Existing Printers
Troubleshoot Printer Hardware Issues (3)
Warranty Claim Processing (3)

Network
Troubleshoot Internet Service Provider Issues & Outages
Troubleshoot Network Switch Issues
Troubleshoot Wi-Fi Access Point Issues
Update Wi-Fi SSID / Keys
Troubleshoot Router Issues
Troubleshoot Firewall Issues
Firewall Security Audit and Adjustment
Monitor Network Switches Operations & Availability
Monitor WiFi Access Points Operations & Availability
Monitor Router Operations & Availability
Monitor Firewall Operations & Availability
Warranty Claim Processing (3)

Domain Names
Add / Edit / Delete MX Records
Add / Edit / Delete TXT Records
Add / Edit / Delete PTR Records
Add / Edit / Delete CNAME Records
Add / Edit / Delete A Record

Mobile Phones & Tablets
Configure Outlook or Mail App (2)
Configure Skype for Business App (2)
Configure OneDrive for Business App (2)
Configure Teams for Business App (2)

Office 365
Add / Edit / Delete User Accounts
Add / Edit / Delete User and Security Groups
Add / Edit / Delete Shared Mailboxes
Add / Edit / Delete Distribution Groups
Forgotten Password Resets
Archive Old User Accounts (Backup Email & OneDrive)
Restore Files from Backups (1)
Install & Connect OneDrive Desktop Client (2)
Install & Connect Skype for Business Desktop Client (2)
Install & Connect Teams Desktop Client (2)








(1) Only applies to when using Backup Platforms purchased through Grey Matter Technologies.
(2) This assumes that You already have the back-end systems and company-wide configurations all setup and configured for this product. If You don’t, then We will discuss with You the scope of any potential Project and send You a separate Proposal for Your review.
(3) As You can appreciate, it is hard to build a profitable and sustainable business offering “Unlimited Support” at a reasonable price for items that We didn’t recommend, sell, and install.

What’s Not Covered

If the Hardware We are troubleshooting was not purchased from Us and/or the device is not currently covered by the manufacturer’s warranty, a care pack or a maintenance agreement, then it is in Our discretion as to whether We will cover this work under the scope of this
AGREEMENT or set it as billable out of scope work.

We do not provide any software or modifications to software. Any software upgrades that are needed and the PROVIDER is unable to perform will be performed by the provider of the software and billed separately. Any software upgrades that Provider is able to perform will be billed to the CLIENT at a rate to be set via a fixed fee proposal that the CLIENT will receive and sign off on prior to the commencement of work. We can only provide generalized advice for Line of Business software related issues.
Support for items that are aged out of the manufacturer’s warranty period.
Special Projects (Replacing and or adding net new hardware or software)
PC Installs will be categorized as a special project and a separate quote for this special project will be provided.
Physical office moves will be categorized as a special project and a separate quote for this special project will be provided.
Support, troubleshooting, and or recovery of backups not purchased through Grey Matter Technologies.
Support, troubleshooting, and or remediation of any issues on a network that is currently running any Microsoft Operating System that is no longer supported by Microsoft.
Examples include Windows 7, Vista, XP, and older. Server 2008, 2003, and older.
Grey Matter Technologies reserves the right to bill hourly for support, troubleshooting, and or remediation of any issues on a network that are caused by a malicious third party. Commonly referred to as Ransomware, Trojans, Viruses, Worms, and other similarly associated terms.
Travel further than a 65 mile radius of our offices will be billed at $195 per/hr

Reporting
Clients may request to opt into the delivery of an Executive Summary Report on a monthly
basis.

Quarterly Business Reviews
As part of this AGREEMENT, the CLIENT may request a Quarterly Business Review session with
Your dedicated Account Manager.
In this session, We will run through items such as, but not limited to, the following:
• Last Quarters Metrics
• Your Plans for the next Quarter
• Refresh Cycle Update / Minimum Standards
• Technology Budget Update
• General Information and Updates about Your Network
• Anything else You need to Discuss Related to Your IT

You agree to allocate two (2) hours for each of these sessions to ensure that We can provide Our service to You at the world class levels that We strive to provide.

You agree to give Us at least seven (7) business days’ notice if You need to reschedule or amend an upcoming Quarterly Business Review. If You don’t give Us at least seven (7) business days’ notice, that Quarterly Business Review will still be counted as used.

Your Responsibilities

Minimum Standards
There are some hardware and software requirements that You need to have in place in order for Us to meet Our service obligations,. We will update this list from time to time as certain technologies age and other technologies are released and tested by Us. This is outlining during our initial contract engagement and will continue throughout the contract with you.

If You do not have all of these minimum standards in place before Your AGREEMENT start date, then We will work with You on a plan to bring Your network up to our minimum standards.

If an item requiring support does not meet Our minimum standards, it will be at Our discretion whether We charge You for any time incurred for supporting that Item. The rate for this type of support is $195 p/hr

Submitting Support Requests
The process for submitting support requests is outlined in the Welcome Packet you will receive upon partnering with Grey Matter Technologies. There are multiple ways to submit a support request, email, phone or direct contact to your support rep.

Critical and high priority support requests must be submitted via phone only. Otherwise, the support request priorities will be defaulted to Our medium priority level.

All requests received by Grey Matter Technologies will be processed with the assumption that the person submitting the request has the authority to make such a request and the authority to sign off on any quote that they have requested.

If You have a specific person or a specific group of people that have the authority to sign off on purchase orders, they need to be who the quote for additional products or services is requested by and sent to.

TERMS AND CONDITIONS

The terms and conditions of product sales and monthly service(s) or specific service projects are limited to those contained herein and are collectively referred to herein after as “AGREEMENT” or “MASTER TERMS AND CONDITIONS.” Any additional or different terms or
conditions in any form delivered by you (“CLIENT”) are hereby deemed to be material alterations to this AGREEMENT and are therefore summarily rejected by Grey Matter Technologies (“PROVIDER”).

By accepting delivery of products or by engaging with the PROVIDER on a statement of work, invoice, or other agreement to provide any type of services to the CLIENT, CLIENT agrees to be bound by and accepts the terms and conditions of this AGREEMENT unless the PROVIDER and the CLIENT have mutually signed a subsequent and separate agreement that specifically states said agreement is in lieu of this specific AGREEMENT, in which case that mutually signed separate agreement shall govern the order of business therein.

CLIENT does in fact consent to receiving electronic documents from PROVIDER. These documents may be provided via a web browser or by email transmissions or other forms of electronic transmission via internet or cellular services. CLIENT may decline this consent by
contacting PROVIDER in writing and requesting such. Electronic signatures or copies of signatures sent via electronic means are the equivalent of personally written and signed documents and shall hold such legally binding power as an original signature.

Prior dealings (such as quotes, invoices, inquiries, RFPs, RFIs and the like) or contracts will not be considered to affect this AGREEMENT contained herein. This AGREEMENT is understood to contain the entirety of the AGREEMENT between the CLIENT and the PROVIDER for the matters contained herein and shall supersede and replace any previous communications whether written, oral, electronic, implied, or otherwise with respect to the subject matter hereof.

1. Terms and Termination of this AGREEMENT
1.1 Terms: This AGREEMENT carries a term of 3 years. This AGREEMENT automatically renews for a subsequent 3 years beginning on the day immediately following the end of the Initial Term, unless either party gives the other ninety (90) days prior written notice of its intent not to renew this AGREEMENT.

1.2 This Agreement may be terminated by the CLIENT upon sixty (60) days written notice AGREEMENT and does not cure such failure within thirty (30) days of receipt of such written notice, or 1. Breaches any material term or condition of this AGREEMENT and fails to remedy such breach within thirty (30) days of receipt of such written notice.

2. Terminates or suspends its business operations, unless it is succeeded by a permitted assignee under this AGREEMENT.

3. This AGREEMENT may be terminated by the PROVIDER upon sixty (60) days’ written notice to the CLIENT.

1.3 Termination for Convenience: This AGREEMENT may be terminated with thirty (30) days written notice to the PROVIDER for any reason. Upon exercising this option for convenience, the CLIENT agrees to pay for a fixed fee special project to offboard the
CLIENT or transition the CLIENT to a new provider. The fee for this special project will be equivalent to the sum of the total monthly recurring fee(s) for products and services times the number of months remaining in the term of the AGREEMENT. CLIENT understands that the special project for offboarding or transitioning to a new provider will not begin until the CLIENT has paid the invoice for this special project

2. Fees, Payments, Payment Methods, Credits, Applicable Taxes
2.1 Fees: A fee will be assessed on all unpaid invoices on the 5th day after the published due date and finance charges will be applied at a rate of 1.5% for all invoices or portions of invoices that are thirty (30) days past due. This interest will compound monthly until the delinquent balance is paid in full.

2.2 Payment for agreed monthly services will be due within 30 days of the invoice date, regardless of the date the invoice is received. Payment for projects governed by this Agreement shall be made as follows:Hardware Costs: 100% of hardware costs must be paid prior to the  commencement of the project. Labor Costs:If the total labor cost for a project is under $10,000, 100% of the labor cost is due upon project completion.If the total labor cost for a project exceeds $10,000, the Client agrees to pay 50% of the labor cost upfront prior to project commencement, and the remaining 50% upon project completion.For purposes of this Agreement, completion of the project shall be defined as the completion of the deliverables as outlined in the agreed “Scope of Work.” If the Client finances hardware or project costs through a Provider-approved third-party leasing company, the payment terms will be governed by the lease agreement negotiated between the Provider and the third-party leasing company. 
No offboarding, documentation transfer, or system access reconfiguration will commence until all past-due invoices and applicable project fees have been paid in full.

2.3 Payment Methods: Grey Matter Technologies will accept payments in multiple forms. These forms include credits cards including Visa, Mastercard, American Express, Capital One, Citibank, Discover, and Chase. Payments will also be accepted via ACH. Please note that bank
drafted paper checks will not be accepted for efficiency purposes. The PROVIDER’s billing department will work with the CLIENT to collect the proper checking or savings account information to set up ACH (Automated Clearing House) payments.

2.4 CLIENT agrees that all payments made via credit card (whether a one-time payment or a recurring monthly payment) will incur an additional 3.5% processing fee. Payments made via ACH will not incur any additional fees.

2.5 Credits: Credit memos will be communicated individually between the CLIENT and the PROVIDER. Credits may be used in one of two ways: A. Reduction of balances toward outstanding invoices. B. Full reimbursement by bank drafted check if the CLIENT currently has
no outstanding invoices.

2.6 Taxes: Applicable Local, State, and Federal taxes will be applied to all services rendered under this AGREEMENT. CLIENT is responsible for all applicable taxes and shall pay such taxes.
CLIENT may produce a valid state issued certificate of exemption to the PROVIDER and the taxes will be properly adjusted to accommodate this exemption.

3. Non-Disclosure and Confidential Information

3.1 Confidential Information: CLIENT acknowledges that during the course of providing standard and regular IT Services, PROVIDER will have access to private and confidential information should such information reside in or on the CLIENT’s network. This information includes information governed by HIPAA, PCI, and other regulatory bodies.
PROVIDER will handle such information in a confidential and professional manner as set out by Industry Best Practices and in a manner concurrent with the description of the service request.

3.2 Use of Confidential Information: CLIENT and PROVIDER shall use confidential information for the sole purpose of performing duties governed herein. There shall be no use of confidential information in whole, in part, or in any other form for any other purpose. Both parties agree to refrain from disclosing confidential information to third parties unless a prior and separate agreement is made for an agreeable purpose between the CLIENT and the PROVIDER. Furthermore, the PROVIDER and the CLIENT agree to take all reasonable steps to keep all information (Including quotations for services from the PROVIDER) confidential and not to disseminate this type of information to outside
third parties. If either party is required by subpoena to turn over confidential information to a proper governing authority, the receiving party shall immediately notify the other party. However, it shall be assumed that the subpoenaed party shall comply with such lawful requests.

3.3 Remedies for Breach of Non-Disclosure: The confidential information that is covered by this AGREEMENT is of unique character to such an extent that monies and damages may not be a significant form of compensation should there be a breach of this AGREEMENT (although they are not ruled out as available forms of remedy). The parties agree that injunctive and other forms of equitable relief would be appropriate to prevent any such actual or threatened unauthorized use or disclosure.

4. Non-Solicitation of Employees

4.1 CLIENT recognizes and agrees that the PROVIDER’s employees are its most valuable asset. In consideration of the value of these assets, CLIENT agrees that it shall not solicit (or in any other direct or indirect way, cause to be solicited) for employment any of the
PROVIDER’s employees during the terms of this AGREEMENT or for a period of 12 months thereafter. If any employee quits or resigns his or her position for any reason and is then employed by the CLIENT (or their affiliate or subsidiary) during anytime that this AGREEMENT remains in effect or for a period of 12 months after, CLIENT agrees to pay PROVIDER 150% of that employees annual salary immediately. The CLIENT and PROVIDER both agree that this is a reasonable amount in consideration of the recruitment and training the PROVIDER would have to undertake to replace the employee.

5. Minimum Standards
5.1 CLIENT understands and acknowledges that PROVIDER has a set of minimum standards to which the CLIENT’s network must comply in order for PROVIDER’s services to be rendered in a professional, timely, and effective fashion. PROVIDER may come to CLIENT at any time to let them know that certain hardware or software is “out of date” per the manufacturer’s specifications or no longer of a serviceable standard or condition.
CLIENT shall be compelled to adjust their environment to comply with such minimum standards in order for PROVIDER to properly provide services. Refusal to comply with this section may be grounds for termination of this AGREEMENT as laid out in section 1.2(c) of this AGREEMENT. PROVIDER, at its own discretion, may also opt to eliminate said out of date or unserviceable hardware or software from the PROVIDER’s list of items they are responsible for servicing under this AGREEMENT and charge an hourly rate of $195.00 per hour. for any services requested to be performed on such hardware or software.

6. Cooperation of Client

6.1 CLIENT will allow PROVIDER to use CLIENT’s machines, communications devices, facilities, features, and other such equipment at no charge, as in situation where the CLIENT and PROVIDER agree that it is a reasonable need to enable PROVIDER to render agreed services.

7. Access to Equipment and Facilities

7.1 CLIENT agrees that PROVIDER may utilize certain items in the CLIENT’s stack of equipment and may gain access to CLIENT facilities as necessary to render services agreed upon under this AGREEMENT. CLIENT shall retain ownership and title of all CLIENT owned equipment that is utilized by PROVIDER. CLIENT may deny access at any time as it makes specific business sense for the CLIENT, however, if access is denied,
CLIENT understands that there may be an impact up to and including inability to remedy service issues as requested by CLIENT. CLIENT also agrees that PROVIDER’s inability to access one piece of equipment or software does not only impact the PROVIDER’s ability
to service that specific piece of hardware or software but may lead to the inability to service other network connected pieces of hardware or software. In such situation PROVIDER shall be held harmless and any previously agreed upon services to be rendered shall be deemed void.

8. Pricing Adjustments

8.1 PROVIDER reserves the right to make adjustments to pricing for products and services alike. Reasons for such adjustments may include, but are not limited to, product discontinuation, manufacturer price changes, changes in market conditions, product availability, errors in manufacturer advertisements, price changes from PROVIDER’s suppliers, and discovery of a disparity between CLIENT consumption of monthly services and the set monthly service fee. All orders are subject to PROVIDER’s availability to perform services and therefore PROVIDER cannot guarantee that it can always perform all services requested at any time.

8.2 An annual price increase of 3% will apply upon renewal.

8.3 If the CLIENT adds additional users to be supported by this AGREEMENT, the PROVIDER will automatically increase the user count and any requisite license count on the subsequent invoice. The CLIENT is responsible for informing the PROVIDER when an employee of the CLIENT leaves their company and should no longer be included in the user count and the requisite license count.

8.4 Upon request, CLIENT agrees to provide reasonable resources to assist PROVIDER with ensuring user counts and requisite licenses are accurately reflected on the monthly invoice.

9. Representation of Warranties

9.1 PROVIDER represents and warrants that it has the proper rights, power, and authority  o enter into this AGREEMENT and to fully perform all functions hereunder, will use commercially available and commercially reasonable efforts to provide all services
requested and required of it under this AGREEMENT in accordance with industry best practices.

9.2 PROVIDER does not produce hardware or commercial off-the-shelf software covered under this AGREEMENT. Any warranty provisions are passed through from the third party sellers to the CLIENT and are subject to the individual manufacturer’s limitations.
Labor provided by PROVIDER is not covered under manufacturer’s warranty. CLIENT is hereby notified that all warranty claims are to be processed through the individual manufacturer of the hardware or software in question.

9.3 PROVIDER may provide equipment owned by PROVIDER and stored at CLIENT’s location. Such equipment may include but is not limited to remote backup devices, desktops, servers, routers, firewalls, switches, and software. Such equipment shall be properly secured and cared for in the same manner as the CLIENT’s own equipment. CLIENT shall be liable for any damages or loss that is not covered by that specific equipment’s manufacturer’s warranty. If such loss or damage occurs CLIENT agrees that it is reasonable for PROVIDER to invoice CLIENT for a replacement of similar model and or capability of the lost or damaged device.

10. Disclaimer of Warranties and Limitations of Liabilities

10.1 The express, but limited warranty in section 9 above is in lieu of all other warranties, expressed, or implied regarding PROVIDER’s services. PROVIDER and its affiliates specifically disclaim all warranties of any kind whether expressed or implied, including, but not limited to all warranties of merchantability, fitness for a specific purpose, title, non-infringement, and any warranties arising from the course of dealing, course of performance, or trade usage.

10.2 PROVIDER and its affiliates shall not be liable for any incidental, direct, indirect, exemplary, special, consequential, or punitive damages or for any lost data including, but not limited to damages from lost profits, costs of procurement of substitute goods or
services, business interruptions arising from or relating to this AGREEMENT or arising from or relating to the use of software which has been modified by anyone other than the PROVIDER, Loss of programs and the like, that result from the use or inability to use the
services or mistakes, omissions, interruptions, deletions of files or any and all directories, loss of data, errors, defects, delays in operations or transmissions of data, or any other failure of performance however caused and under any existing or new theory of liability       
including negligence or other torts to the extent allowed by law, even if PROVIDER has been advised of the possibilities of such damage and works with CLIENT to make a decision to proceed with such process when deemed by CLIENT that the risks are worth the benefit of taking such actions.

10.3 CLIENT acknowledges and agrees that CLIENT has relied on no warranties except the limited expressed warranty(s) in section 9.

10.4 CLIENT agrees that the total liability of PROVIDER and its affiliates and the sole remedy of the CLIENT and any end user for any claims regarding PROVIDER is limited to the CLIENT’s right to terminate this AGREEMENT unless determined otherwise by an adjudicator in Hartford County, Connecticut. Should that adjudicator deem that liability is above and beyond the right to terminate this AGREEMENT, the CLIENT agrees that the total liability of PROVIDER and its affiliates shall be capped at the single occurrence amount that the PROVIDER’s General Liability Insurance policy allows for the event germane to the adjudication.

10.5 Except as expressly provided in this AGREEMENT, CLIENT acknowledges that PROVIDER is in no manner responsible for any actions or inactions of third-party vendors or any other third party. PROVIDER is in no way representing that the services shall be uninterrupted, error free, or without delay. PROVIDER does not and cannot control the flow of data through the internet. Such flow depends in large part on the performance of third parties whose actions or inaction can, at times, produce situations in which connections to the internet may be impaired or disrupted. Accordingly, CLIENT acknowledges that PROVIDER disclaims all liability related to events outside of its control
and or in the control of all other third parties and CLIENT shall have no right to rely upon any representation of any third party in respect to the services as they apply to the services rendered by the PROVIDER. Further, CLIENT acknowledges that, in providing the services, PROVIDER shall necessarily rely upon information, instructions, and services from CLIENT, its administrator(s), employees, agents, and other third parties providing computer and communications hardware and software and internet services. Except as expressly provided in this AGREEMENT, CLIENT fully assumes the risk associated with errors in such information, instructions, and services.

11. Liquidated Damages

11.1 CLIENT acknowledges that PROVIDER is relying on CLIENT to perform as agreed upon under this AGREEMENT and has therefore made significant investments in time, equipment, and personnel. To protect this investment, PROVIDER has the right to collect
liquidated damages in the case of breach by the CLIENT. If CLIENT fails to perform as outlined in this AGREEMENT, CLIENT agrees to pay liquidated damages in the amount equal to six (6) times the amount of the monthly services fee set out by the current service agreement or other current Managed Services Agreement due to PROVIDER for services rendered at the time for the breach.

11.2 This section shall not apply if the CLIENT is exercising the option to Terminate for Convenience as laid out in Section 1.3 of this AGREEMENT.

12. Coverage

12.1 CLIENT agrees that unless otherwise specified in a separate written agreement, business hours shall mean Monday through Friday from 7am – 6pm eastern time. These times exclude national holidays. Provider will make best efforts to respond to emergency requests outside of business hours.

13. Indemnification

13.1 CLIENT and PROVIDER shall defend, indemnify, and hold harmless one anther from and against any claims, damages, expenses, and liabilities, causes of action, and costs, including all reasonable costs of defense including attorney fees arising out of or resulting from the following.

A. Death. Personal Injury or property damage from the unintentional reckless acts of the indemnifying party, its employees, subcontractors, or suppliers in connection with the obtaining or providing of services.

B. Claims of infringement of any intellectual property right in connection with the obtaining or providing of services.

C. The unauthorized disclosure, use, or infringement by the indemnifying party of any proprietary or confidential information of any third party. The indemnified party shall give a timely notification to indemnifying party of any claim(s) and shall cooperate with the indemnifying party and its agents in the defense of the claim(s). Each party’s obligation to indemnify the other party shall survive the termination of this AGREEMENT.

14. Entire AGREEMENT

14.1 This AGREEMENT contains the entire AGREEMENT and understanding among the parties hereto with respect to the subject matter hereof, and supersedes all prior and contemporaneous agreements, understandings, inducements and conditions, express or implied, oral or written, of any nature whatsoever with respect to the subject matter hereof. The express terms hereof control and supersede any course of performance and/or usage of products or services inconsistent with any of the terms hereof. This AGREEMENT may not be modified or amended other than by a new agreement in writing between the CLIENT and the PROVIDER.

14.2 Client Cyber Insurance Requirement

14.1 The Client agrees to maintain, at its own expense and for the duration of this Agreement, a commercially reasonable cyber liability insurance policy covering, at minimum:

• Data breach response and notification costs,
• Third-party claims involving data compromise,
• Costs associated with business interruption due to cybersecurity events,
• Regulatory fines and penalties, where insurable by law.

Coverage limits shall not be less than $1,000,000 per incident and $2,000,000 in aggregate. The Client acknowledges that refusal to implement Grey Matter Technologies’ recommended cybersecurity services (including but not limited to managed EDR, MFA enforcement, and secure backups) may materially increase the risk of security incidents. In such cases, GMT expressly disclaims liability for any breach, ransomware incident, or resulting data loss, and the Client agrees to look to its cyber insurance coverage as the primary remedy.
Client shall, upon request, provide proof of coverage, including insurer name, limits, and expiration date.

14.3 Privacy & Regulatory Compliance

14.3The Client acknowledges that it is solely responsible for complying with applicable federal, state, and industry-specific data privacy and security regulations, including but not limited to the Gramm-Leach-Bliley Act (GLBA), New York Department of Financial Services
Cybersecurity Regulation (NYDFS 23 NYCRR 500), Health Insurance Portability and Accountability Act (HIPAA), and California Consumer Privacy Act (CCPA), where applicable. Grey Matter Technologies will provide tools, services, and recommendations to assist the Client
in protecting sensitive data, but shall not be held liable for the Client’s internal data handling policies, recordkeeping obligations, regulatory filings, or breach notification responsibilities outside the scope of services defined in this Agreement.

The Client is solely responsible for determining whether regulatory frameworks apply to its operations, and for ensuring that its internal practices align with those legal requirements.

15. Privacy Notice

Grey Matter Technologies is committed to protecting the confidentiality, integrity, and availability of Client Data. As part of service delivery, GMT may have access to information that includes personally identifiable information (PII), financial records, or data governed by
applicable privacy and cybersecurity laws.

Grey Matter Technologies agrees to the following:

• Data Access Limitation: GMT will only access or process Client Data as necessary to fulfill the obligations outlined in this Agreement or applicable Statements of Work.
• No Sale or Disclosure: GMT does not sell, rent, or disclose Client Data to third parties
unless required by law, court order, or Client’s written instruction.
• Security Safeguards: GMT maintains technical and organizational safeguards consistent with industry standards (e.g., NIST, CIS) to protect against unauthorized access, data loss, or misuse.
• Third-Party Access: Any third-party partners used in support of Client services are bound by confidentiality and data handling obligations no less stringent than those outlined in this Agreement.
• Breach Notification: In the event of a confirmed data breach impacting Client Data, GMT shall notify the Client without undue delay, and in any case, no later than seventy-two
(72) hours after confirmation, providing a summary of the incident and steps taken.
Clients are responsible for internal controls, user permissions, and local compliance obligations not expressly defined in this Agreement.

16. Successors and Assignees

16.1 Each service agreement as well as this AGREEMENT shall benefit and be binding upon the parties hereto and the respective successors and assignees.

17. Returns

17.1 Products are non-returnable unless approved in writing by the PROVIDER within 15 days of the invoice date. Those approved returns may be subject to a restocking fee of 20% of the invoice price of the product being returned.

18. Severability

18.1 Wherever possible, each provision of this AGREEMENT shall be interpreted in such a manner as to be effective and valid under applicable law, but if any provision of the AGREMENT shall be prohibited by or invalid under applicable laws, such provisions shall
be ineffective to the extent of such prohibition or invalidity, without invalidating the remainder of such provision or the remaining provisions of this AGREEMENT.

19. Waivers

19.1 The failure or forbearance of PROVIDER or CLIENT to enforce any right or claim against the other party shall not be deemed to be a waiver by the PROVIDER or the CLIENT of such right or claim or any other right or claim herein. Furthermore, the waiver by the PROVIDER or the CLIENT of breach hereof shall not operate or be construed as a waiver of any subsequent breaches of the same or any other provision.

20. Passwords

20.1 CLIENT acknowledges that PROVIDER may need access to secure passwords to perform the duties described herein this AGREEMENT and therefore agrees to provide such passwords for the PROVIDER to perform the duties and services described herein.

21. Force Majeure

21.1 Neither Party shall be in breach of its obligations under this AGREEMENT (other than payment obligations) or incur any liability to the other Party for any losses or damages of any nature whatsoever incurred or suffered by the other (other than under any express indemnity in this AGREEMENT) if and to the extent that it is prevented from carrying out those obligations by, or such losses or damages are caused by, a Force Majeure Event except to the extent that the relevant breach of its obligations would have occurred, or the relevant losses or damages would have arisen, even if the Force Majeure Event had not occurred.

22. Arbitration

22.1 Except for collection actions to recover fees due to us, any amounts that qualify for small claims court in our local jurisdiction, the right of either party to apply to a court of competent jurisdiction for a temporary restraining order, preliminary injunction, or other
equitable relief to preserve the status quo and prevent irreparable harm, all claims and disputes arising under or relating to this AGREEMENT are to be settled by binding arbitration in the state of Connecticut or another location mutually agreeable to the
parties. The arbitration shall be conducted on a confidential basis pursuant to the Commercial Arbitration Rules of the American Arbitration Association. Any decision or award as a result of any such arbitration proceeding shall be in writing and shall provide
an explanation for all conclusions of law and fact and shall include the assessment of costs, expenses, and reasonable attorneys’ fees. Any such arbitration shall be conducted by an arbitrator experienced in technology services disputes and shall include a written
record of the arbitration hearing. The parties reserve the right to object to any individual who shall be employed by or affiliated with a competing organization or entity. An award of arbitration may be confirmed in a court of competent jurisdiction.

23. Availability of Products

23.1 Under no circumstance shall PROVIDER be responsible to CLIENT or anyone else for its failure to fill accepted orders, or for its delay in filling accepted orders, when such failure or delay is due to strike, accident, labor trouble, supply chain interruptions or delays, acts of nature, freight embargo, war, civil disobedience, vendor problems, or any cause beyond the PROVIDER’s control.

24. Transfer of Ownership

24.1 CLIENT agrees that transfer of ownership will pass to the CLIENT from the PROVIDER upon receipt of the goods at the PROVIDER location and upon identification of the CLIENT’s product by the PROVIDER.

25. Notices

25.1 Any notice required or permitted under this AGREEMENT shall be in writing and shall be delivered by the United States Postal Service via Certified Mail with a return receipt requested, postage prepaid, and properly addressed to the office of the respective parties to this AGREEMENT or at other addresses as such parties to this AGREEMENT may specify in writing at a later date for the reception of certified mail notifications. This section shall apply whether said mail is accepted, denied, or unclaimed.

26. Cyber Security Exclusions

26.1 The delivery of products and services discussed and explained in this AGREEMENT are assumed to not be caused by, needed because of, or requested considering, any type of cyber security breach. 
26.2 Issues caused by or due to cyber security breaches including but not limited to, infections, system takeovers, worms, trojans, SQL injection attacks, man in the middle attacks, denial-of-service attacks, command and control server attacks, ransomware, or any other nefarious act performed by an uninvited outside source or party of any origination shall be dealt with in a best effort scenario and may
require the assistance of an outside third party that specializes in cyber security remediation.
26.3 These services and associated costs shall be billed on a separate basis, unless CLIENT subscribes to PROVIDER’s Managed Cyber Security Services Bundle and has had this Managed Cyber Security Services Bundle for 30 days prior to the above-described incident. In such case, remediation services rendered by the PROVIDER are covered under the monthly Managed Services Agreement.
26.4 The hourly rate for work that is done in house by the PROVIDER shall be billed at $195.00 per hour. if CLIENT does not subscribe to the Managed Cyber Security Services Bundle or has not been subscribed to the Managed Cyber Security Services Bundle for the requisite 30 days prior to the above-described incident.
26.5 Any work that requires the involvement of a third-party cyber security expert shall be billed based on the rates provided by said provider. Such third-party services will be billed to the CLIENT regardless of the subscription status of the PROVIDER’s Managed Cyber Security Services Bundle. The CLIENT shall get a quote for the Statement of Work to be performed by said third-party cyber
security expert and shall be aware of these charges prior to the commencement of remediation. Such agreement for services shall be between the CLIENT and said third-party provider.
26.6 As described in section 10.2 of this AGREEMENT, PROVIDER is not responsible for or liable for, any type of adverse or unwanted effect, including but not limited to, the compromise, degradation, takeover, or loss of data or the incapacitation of network or computing capabilities due to any type of cyber security breach under any circumstance regardless of the subscription status of the PROVIDER’s Managed Cyber Security Services Bundle.
26.7 PROVIDER’s Managed Cyber Security Services Bundle is standard on all Grey Matter Technologies Support Partnership(s). The absence of PROVIDER’s Managed Cyber Security Services Bundle indicates that this service was declined and invokes
the relevant portion of section 25.3 as described above.

27. Third Party Vendor Commitments

27.1 PROVIDER commits to agreements with vendors such as Microsoft and/or their partners for a minimum level and term of services (m365 and related) that we include as part of this agreement. In most cases, these services are not transferrable to you or other providers during the agreement term. Should you decide to terminate this agreement prior to its expiration date, you agree to pay us for those charges for the remainder of the term. The amount will be set to the Microsoft retail rate of those services at the time of termination. In exchange for said payment, we will keep those services operational until the original agreem ent expiration date or until transfer is allowed, whichever is earlier.3