HomeMy WebLinkAboutStaff Report 2412-3951CITY OF PALO ALTO
CITY COUNCIL
Special Meeting
Monday, March 03, 2025
Council Chambers & Hybrid
5:30 PM
Agenda Item
7.Approval of Two Professional Services Agreements, C25193332 and C25193333 with EPI-
USE America to Implement Identity Access Governance (IAG) Solutions, SAP
Signavio/LeanIX, SAP Governance, Risk, Compliance (GRC) for a Total Not-To-Exceed
Amount of $289,080, for a Period of One Year; CEQA Status - Not a Project.
6
2
0
4
City Council
Staff Report
From: City Manager
Report Type: CONSENT CALENDAR
Lead Department: IT Department
Meeting Date: March 3, 2025
Report #:2412-3951
TITLE
Approval of Two Professional Services Agreements, C25193332 and C25193333 with EPI-USE
America to Implement Identity Access Governance (IAG) Solutions, SAP Signavio/LeanIX, SAP
Governance, Risk, Compliance (GRC) for a Total Not-To-Exceed Amount of $289,080, for a
Period of One Year; CEQA Status - Not a Project.
RECOMMENDATION
Staff recommends that the City Council approve and authorize the City Manager or designee to
execute two contracts with EPI-USE America, C25193332 and C25193333 to implement Identity
Access Governance (IAG) Solutions, SAP Signavio/LeanIX, SAP Governance, Risk, and
Compliance (GRC) for a term of one year, (February 24, 2025 to January 31, 2026), and for a
total not-to-exceed amount of $289,080, including $262,800 for basic services and $26,280 for
additional services (Attachment A and Attachment B).
BACKGROUND
City Council previously approved report #2412-39181 as item no. 5 on the January 21, 2025
consent calendar, authorizing the procurement of SAP Signavio/LeanIX, SAP Governance, Risk,
and Compliance (GRC), and SAP Integration Suite of products. Two professional services
agreements with EPI-USE America are required to help implement these tools into our SAP
environment.
These tools are essential for enabling the City to meet critical compliance requirements,
improving system management efficiency, and aligning with the recommendations outlined in
the 2022 Baker Tilly Annual Risk Assessment report2. By establishing an automated framework
for risk analysis, access monitoring, and governance of business processes, they will enhance
1 Staff report: https://cityofpaloalto.primegov.com/Portal/Meeting?meetingTemplateId=15920
2 FY22 Annual Risk Assessment – Baker Tilly, pp. 39-42:
https://www.cityofpaloalto.org/files/content/public/v/3/departments/city-auditor/reports-and-publications/fy22-
annual-risk-assessment.pdf
6
2
0
4
the City’s compliance and security measures. EPI-USE America will support the preparation and
implementation of these solutions.
ANALYSIS
SAP Cloud Identity Access Governance (IAG) Implementation Timeline (10 weeks):
GRC Implementation:
FISCAL/RESOURCE IMPACT
6
2
0
4
Fund with the remaining 55% for other funds such as Enterprise, special revenue, and other
internal service funds.
STAKEHOLDER ENGAGEMENT
ENVIRONMENTAL REVIEW
ATTACHMENTS
APPROVED BY:
Professional Services
Rev. Oct 16,2024 Page 1 of 34
CITY OF PALO ALTO CONTRACT NO. C25193332
AGREEMENT FOR PROFESSIONAL SERVICES
BETWEEN THE CITY OF PALO ALTO AND EPI-USE AMERICA INC.
This Agreement for Professional Services (this “Agreement”) is entered into as of the 24th day of
February, 2025 (the “Effective Date”), by and between the CITY OF PALO ALTO, a California
chartered municipal corporation (“CITY”), and EPI-USE AMERICA INC., a Delaware
Corporation, located at 4780 Ashford Dunwoody Road, Suite 540 #617, Atlanta Georgia, 30338-
5504 (“CONSULTANT”).
The following recitals are a substantive portion of this Agreement and are fully incorporated herein
by this reference:
RECITALS
A. CITY intends to automate user provisioning and access request (the “Project”) and desires
to engage a consultant to implement SAP Cloud Identity Access Governance (IAG) in connection
with the Project (the “Services”, as detailed more fully in Exhibit A).
B. CONSULTANT represents that it, its employees and subconsultants, if any, possess the
necessary professional expertise, qualifications, and capability, and all required licenses and/or
certifications to provide the Services.
C. CITY, in reliance on these representations, desires to engage CONSULTANT to provide
the Services as more fully described in Exhibit A, entitled “SCOPE OF SERVICES”.
NOW, THEREFORE, in consideration of the recitals, covenants, terms, and conditions, in this
Agreement, the parties agree as follows:
SECTION 1. SCOPE OF SERVICES. CONSULTANT shall perform the Services described
in Exhibit A in accordance with the terms and conditions contained in this Agreement. The
performance of all Services shall be to the reasonable satisfaction of CITY.
SECTION 2. TERM.
The term of this Agreement shall be from the effective date of this agreement through January 31,
2026 unless terminated earlier pursuant to Section 19 (Termination) of this Agreement.
SECTION 3. SCHEDULE OF PERFORMANCE. Time is of the essence in the performance
of Services under this Agreement. CONSULTANT shall complete the Services within the term of
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 2 of 34
this Agreement and in accordance with the schedule set forth in Exhibit B, entitled “SCHEDULE
OF PERFORMANCE”. Any Services for which times for performance are not specified in this
Agreement shall be commenced and completed by CONSULTANT in a reasonably prompt and
timely manner based upon the circumstances and direction communicated to the CONSULTANT.
CITY’s agreement to extend the term or the schedule for performance shall not preclude recovery
of damages for delay if the extension is required due to the fault of CONSULTANT.
SECTION 4. NOT TO EXCEED COMPENSATION. The compensation to be paid to
CONSULTANT for performance of the Services shall be based on the compensation structure
detailed in Exhibit C, entitled “COMPENSATION,” including any reimbursable expenses
specified therein, and the maximum total compensation shall not exceed Sixty-One Thousand
Two Hundred Dollars ($61,200). The hourly schedule of rates, if applicable, is set out in Exhibit
C-1, entitled “SCHEDULE OF RATES.” Any work performed or expenses incurred for which
payment would result in a total exceeding the maximum compensation set forth in this Section 4
shall be at no cost to the CITY.
Optional Additional Services Provision (This provision applies only if checked and a
not-to-exceed compensation amount for Additional Services is allocated below under this
Section 4.)
In addition to the not-to-exceed compensation specified above, CITY has set aside the not-
to-exceed compensation amount of Six Thousand One Hundred Twenty Dollars ($6,120)
for the performance of Additional Services (as defined below). The total compensation for
performance of the Services, Additional Services and any reimbursable expenses specified
in Exhibit C, shall not exceed Sixty-Seven Thousand Three Hundred Twenty Dollars
($67,320), as detailed in Exhibit C.
“Additional Services” means any work that is determined by CITY to be necessary for the
proper completion of the Project, but which is not included within the Scope of Services
described at Exhibit A. CITY may elect to, but is not required to, authorize Additional
Services up to the maximum amount of compensation set forth for Additional Services in
this Section 4. CONSULTANT shall provide Additional Services only by advanced,
written authorization from CITY as detailed in this Section. Additional Services, if any,
shall be authorized by CITY with a Task Order assigned and authorized by CITY’s Project
Manager, as identified in Section 13 (Project Management). Each Task Order shall be in
substantially the same form as Exhibit A-1, entitled “PROFESSIONAL SERVICES TASK
ORDER”. Each Task Order shall contain a specific scope of services, schedule of
performance and maximum compensation amount, in accordance with the provisions of
this Agreement. Compensation for Additional Services shall be specified by CITY in the
Task Order, based on whichever is lowest: the compensation structure set forth in Exhibit
C, the hourly rates set forth in Exhibit C-1, or a negotiated lump sum.
To accept a Task Order, CONSULTANT shall sign the Task Order and return it to CITY’s
Project Manager within the time specified by the Project Manager, and upon authorization
by CITY (defined as counter-signature by the CITY Project Manager), the fully executed
Task Order shall become part of this Agreement. The cumulative total compensation to
CONSULTANT for all Task Orders authorized under this Agreement shall not exceed the
amount of compensation set forth for Additional Services in this Section 4.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 3 of 34
CONSULTANT shall only be compensated for Additional Services performed under an
authorized Task Order and only up to the maximum amount of compensation set forth for
Additional Services in this Section 4. Performance of and payment for any Additional
Services are subject to all requirements and restrictions in this Agreement.
SECTION 5. INVOICES. In order to request payment, CONSULTANT shall submit monthly
invoices to the CITY describing the Services performed and the applicable charges (including, if
applicable, an identification of personnel who performed the Services, hours worked, hourly rates,
and reimbursable expenses), based upon Exhibit C or, as applicable, CONSULTANT’s schedule
of rates set forth in Exhibit C-1. If applicable, the invoice shall also describe the percentage of
completion of each task. The information in CONSULTANT’s invoices shall be subject to
verification by CITY. CONSULTANT shall send all invoices to CITY’s Project Manager at the
address specified in Section 13 (Project Management) below. CITY will generally process and
pay invoices within thirty (30) days of receipt of an acceptable invoice.
SECTION 6. QUALIFICATIONS/STANDARD OF CARE. All Services shall be performed
by CONSULTANT or under CONSULTANT’s supervision. CONSULTANT represents that it,
its employees and subcontractors, if any, possess the professional and technical personnel
necessary to perform the Services required by this Agreement and that the personnel have
sufficient skill and experience to perform the Services assigned to them. CONSULTANT
represents that it, its employees and subcontractors, if any, have and shall maintain during the term
of this Agreement all licenses, permits, qualifications, insurance and approvals of whatever nature
that are legally required to perform the Services. All Services to be furnished by CONSULTANT
under this Agreement shall meet the professional standard and quality that prevail among
professionals in the same discipline and of similar knowledge and skill engaged in related work
throughout California under the same or similar circumstances. All Services shall conform to the
specifications of the applicable Statement of Work for a period of ninety (90) days after final
acceptance.
SECTION 7. COMPLIANCE WITH LAWS. CONSULTANT shall keep itself informed of
and in compliance with all federal, state and local laws, ordinances, regulations, and orders that
may affect in any manner the Project or the performance of the Services or those engaged to
perform Services under this Agreement, as amended from time to time. CONSULTANT shall
procure all permits and licenses, pay all charges and fees, and give all notices required by law in
the performance of the Services.
SECTION 8. ERRORS/OMISSIONS. CONSULTANT is solely responsible for costs,
including, but not limited to, increases in the cost of Services, arising from or caused by
CONSULTANT’s errors and omissions, including, but not limited to, the costs of corrections such
errors and omissions, any change order markup costs, or costs arising from delay caused by the
errors and omissions or unreasonable delay in correcting the errors and omissions.
SECTION 9. COST ESTIMATES. If this Agreement pertains to the design of a public works
project, CONSULTANT shall submit estimates of probable construction costs at each phase of
design submittal. If the total estimated construction cost at any submittal exceeds the CITY’s
stated construction budget by ten percent (10%) or more, CONSULTANT shall make
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 4 of 34
recommendations to CITY for aligning the Project design with the budget, incorporate CITY
approved recommendations, and revise the design to meet the Project budget, at no additional cost
to CITY.
SECTION 10. INDEPENDENT CONTRACTOR. CONSULTANT acknowledges and agrees
that CONSULTANT and any agent or employee of CONSULTANT will act as and shall be
deemed at all times to be an independent contractor and shall be wholly responsible for the manner
in which CONSULTANT performs the Services requested by CITY under this Agreement.
CONSULTANT and any agent or employee of CONSULTANT will not have employee status
with CITY, nor be entitled to participate in any plans, arrangements, or distributions by CITY
pertaining to or in connection with any retirement, health or other benefits that CITY may offer its
employees. CONSULTANT will be responsible for all obligations and payments, whether
imposed by federal, state or local law, including, but not limited to, FICA, income tax
withholdings, workers’ compensation, unemployment compensation, insurance, and other similar
responsibilities related to CONSULTANT’s performance of the Services, or any agent or
employee of CONSULTANT providing same. Nothing in this Agreement shall be construed as
creating an employment or agency relationship between CITY and CONSULTANT or any agent
or employee of CONSULTANT. Any terms in this Agreement referring to direction from CITY
shall be construed as providing for direction as to policy and the result of CONSULTANT’s
provision of the Services only, and not as to the means by which such a result is obtained.
SECTION 11. ASSIGNMENT. The parties agree that the expertise and experience of
CONSULTANT are material considerations for this Agreement. CONSULTANT shall not assign
or transfer any interest in this Agreement nor the performance of any of CONSULTANT’s
obligations hereunder without the prior written approval of the City Manager. Any purported
assignment made without the prior written approval of the City Manager will be void and without
effect. Subject to the foregoing, the covenants, terms, conditions and provisions of this Agreement
will apply to, and will bind, the heirs, successors, executors, administrators and assignees of the
parties.
SECTION 12. SUBCONTRACTING.
Option A: No Subcontractor: CONSULTANT shall not subcontract any portion of the
Services to be performed under this Agreement without the prior written authorization of the City
Manager or designee. In the event CONSULTANT does subcontract any portion of the work to
be performed under this Agreement, CONSULTANT shall be fully responsible for all acts and
omissions of subcontractors.
SECTION 13. PROJECT MANAGEMENT. CONSULTANT will assign Mark Schexnaildre
Email: mark.schexnaildre@epiuse.com as the CONSULTANT’s Project Manager to have
supervisory responsibility for the performance, progress, and execution of the Services and
represent CONSULTANT during the day-to-day performance of the Services. If circumstances
cause the substitution of the CONSULTANT’s Project Manager or any other of CONSULTANT’s
key personnel for any reason, the appointment of a substitute Project Manager and the assignment
of any key new or replacement personnel will be subject to the prior written approval of the CITY’s
Project Manager. CONSULTANT, at CITY’s request, shall promptly remove CONSULTANT
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 5 of 34
personnel who CITY finds do not perform the Services in an acceptable manner, are uncooperative,
or present a threat to the adequate or timely completion of the Services or a threat to the safety of
persons or property.
CITY’s Project Manager is Jitendra Kulkarni, Information Technology Department, 250 Hamilton
Avenue Palo Alto, CA, zipcode: 94301, Telephone: 650-690-6791. CITY’s Project Manager will
be CONSULTANT’s point of contact with respect to performance, progress and execution of the
Services. CITY may designate an alternate Project Manager from time to time.
SECTION 14. OWNERSHIP OF MATERIALS. All work product, including without
limitation, all writings, drawings, studies, sketches, photographs, plans, reports, specifications,
computations, models, recordings, data, documents, and other materials and copyright interests
developed under this Agreement, in any form or media, shall be and remain the exclusive property
of CITY without restriction or limitation upon their use. CONSULTANT agrees that all copyrights
which arise from creation of the work product pursuant to this Agreement are vested in CITY, and
CONSULTANT hereby waives and relinquishes all claims to copyright or other intellectual
property rights in favor of CITY. Neither CONSULTANT nor its subcontractors, if any, shall
make any of such work product available to any individual or organization without the prior written
approval of the City Manager or designee. CONSULTANT makes no representation of the
suitability of the work product for use in or application to circumstances not contemplated by the
Scope of Services. CONSULTANT shall not transfer any right, title or interest in, and
CONSULTANT shall continue to own exclusively, all intellectual property and proprietary
information owned by CONSULTANT, that (a) exists at the time Statement of Work or Task Order
is entered into or, (b) are developed entirely independently by CONSULTANT or its subsidiaries
or CONSULTANT’s holding company, at any time without any use, knowledge of, or reference
to, the CITY’s confidential information or other information obtained in connection with this
Agreement (“Consultant Property”). By incorporating such Consultant Property in Services,
CONSULTANT grants to the CITY a fully paid-up, non-exclusive, royalty-free, non-transferable
and non-sublicensable license to use the Consultant Property solely in connection with its use of
the Services, and to allow third parties to do the same to the extent necessary in connection with
the CITY’s use of the Services. CONSULTANT’s license to the CITY does not include the right
of the CITY or any third-party to de-compile, reverse engineer or otherwise use the Consultant
Property for any purpose other than those associated with or intended for in the applicable
Statement of Work or Task Order.
SECTION 15. AUDITS. CONSULTANT agrees to permit CITY and its authorized
representatives to audit, at any reasonable time during the term of this Agreement and for four (4)
years from the date of final payment, CONSULTANT’s records pertaining to matters covered by
this Agreement, including without limitation records demonstrating compliance with the
requirements of Section 10 (Independent Contractor). CONSULTANT further agrees to maintain
and retain accurate books and records in accordance with generally accepted accounting principles
for at least four (4) years after the expiration or earlier termination of this Agreement or the
completion of any audit hereunder, whichever is later. CITY shall give CONSULTANT prior
written notice of at least thirty (30) days for any planned audit.
SECTION 16. INDEMNITY AND LIMITATION OF LIABILITY.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 6 of 34
16.1. To the fullest extent permitted by law, CONSULTANT shall indemnify, defend
and hold harmless CITY, its Council members, officers, employees and agents (each an
“Indemnified Party”) from and against any and all third party demands, claims, or liability of any
nature, including death or injury to any person, property damage or any other loss, including all
costs and expenses of whatever nature including reasonable attorney’s fees, experts fees, court
costs and disbursements (“Claims”) resulting from, arising out of or in any manner related to
performance or nonperformance by CONSULTANT, its officers, employees, agents or contractors
under this Agreement, regardless of whether or not it is caused in part by an Indemnified Party.
16.2. Notwithstanding the above, nothing in this Section 16 shall be construed to
require CONSULTANT to indemnify an Indemnified Party from a Claim arising from the active
negligence or willful misconduct of an Indemnified Party that is not contributed to by any act of,
or by any omission to perform a duty imposed by law or agreement by, CONSULTANT, its
officers, employees, agents or contractors under this Agreement.
16.3. The acceptance of CONSULTANT’s Services and duties by CITY shall not
operate as a waiver of the right of indemnification. The provisions of this Section 16 shall survive
the expiration or early termination of this Agreement.
16.4 NOTWITHSTANDING SECTION 16, IN NO EVENT OR
CIRCUMSTANCE SHALL CONSULTANT’S TOTAL AGGREGATE LIABILITY TO CITY,
WHETHER ARISING OUT OF OR RELATING TO THIS AGREEMENT OR ANY
STATEMENT OF WORK FOR ANY CAUSE OR CLAIM WHATSOEVER, AND
REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT
(INCLUDING NEGLIGENCE AND STRICT LIABILITY), OR OTHERWISE, EXCEED THE
THREE TIMES (3X) THE CUMULATIVE AMOUNT PAID TO CONSULTANT BY CITY
UNDER THAT STATEMENT OF WORK OR TASK ORDER WHICH GAVE RISE TO, OR
UNDER WHICH THE CLAIM HAS ARISEN. IN NO EVENT OR CIRCUMSTANCE SHALL
EITHER PARTY BE LIABLE FOR ANY LOST PROFITS, LOST REVENUES, LOST DATA
OR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR
CONSEQUENTIAL DAMAGES WHETHER IN AN ACTION, IN CONTRACT OR TORT
(INCLUDING NEGLIGENCE AND STRICT LIABILITY), EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.
SECTION 17. WAIVERS. No waiver of a condition or nonperformance of an obligation under
this Agreement is effective unless it is in writing in accordance with Section 29.4 of this
Agreement. No delay or failure to require performance of any provision of this Agreement shall
constitute a waiver of that provision as to that or any other instance. Any waiver granted shall
apply solely to the specific instance expressly stated. No single or partial exercise of any right or
remedy will preclude any other or further exercise of any right or remedy.
SECTION 18. INSURANCE.
18.1. CONSULTANT, at its sole cost and expense, shall obtain and maintain, in
full force and effect during the term of this Agreement, the insurance coverage described in Exhibit
D, entitled “INSURANCE REQUIREMENTS”. CONSULTANT and its contractors, if any, shall
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 7 of 34
obtain a policy endorsement naming CITY as an additional insured under any general liability or
automobile policy or policies.
18.2. All insurance coverage required hereunder shall be provided through
carriers with AM Best’s Key Rating Guide ratings of A-:VII or higher which are licensed or
authorized to transact insurance business in the State of California. Any and all contractors of
CONSULTANT retained to perform Services under this Agreement will obtain and maintain, in
full force and effect during the term of this Agreement, identical insurance coverage, naming CITY
as an additional insured under such policies as required above.
18.3. Certificates evidencing such insurance shall be filed with CITY
concurrently with the execution of this Agreement. The certificates will be subject to the approval
of CITY’s Risk Manager and will contain an endorsement stating that the insurance is primary
coverage and will not be canceled, or materially reduced in coverage or limits, by the insurer except
after filing with the Purchasing Manager thirty (30) days’ prior written notice of the cancellation
or modification. If the insurer cancels or modifies the insurance and provides less than thirty (30)
days’ notice to CONSULTANT, CONSULTANT shall provide the Purchasing Manager written
notice of the cancellation or modification within two (2) business days of the CONSULTANT’s
receipt of such notice. CONSULTANT shall be responsible for ensuring that current certificates
evidencing the insurance are provided to CITY’s Chief Procurement Officer during the entire term
of this Agreement.
18.4. The procuring of such required policy or policies of insurance will not be
construed to limit CONSULTANT’s liability hereunder nor to fulfill the indemnification
provisions of this Agreement. Notwithstanding the policy or policies of insurance,
CONSULTANT will be obligated for the full and total amount of any damage, injury, or loss
caused by or directly arising as a result of the Services performed under this Agreement, including
such damage, injury, or loss arising after the Agreement is terminated or the term has expired.
SECTION 19. TERMINATION OR SUSPENSION OF AGREEMENT OR SERVICES.
19.1. The City Manager may suspend the performance of the Services, in whole
or in part, or terminate this Agreement, without cause, by giving fifteen (15) business days prior
written notice thereof to CONSULTANT. If CONSULTANT fails to perform any of its material
obligations under this Agreement, in addition to all other remedies provided under this Agreement
or at law, the City Manager may terminate this Agreement sooner upon written notice of
termination. Upon receipt of any notice of suspension or termination, CONSULTANT will
discontinue its performance of the Services on the effective date in the notice of suspension or
termination. A Party may terminate this Agreement if the other Party materially breaches any of
its obligations under this Agreement, by giving fifteen (15) business days prior written notice
thereof to the other Party. If that Party fails to cure such breach within the notice period, then the
non-breaching Party may immediately terminate this Agreement.
19.2. In event of suspension or termination, CONSULTANT will deliver to the
City Manager on or before the effective date in the notice of suspension or termination, any and
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 8 of 34
all work product, as detailed in Section 14 (Ownership of Materials), whether or not completed,
prepared by CONSULTANT or its contractors in the performance of this Agreement if any, which
have been paid in full by CITY. Such work product is the property of CITY, as detailed in Section
14 (Ownership of Materials).
19.3. In event of suspension or termination, CONSULTANT will be paid for the
Services rendered and work products delivered to CITY in accordance with the Scope of Services
up to the effective date in the notice of suspension or termination; provided, however, if this
Agreement is suspended or terminated on account of a default by CONSULTANT, CITY will be
obligated to compensate CONSULTANT only for that portion of CONSULTANT’s Services
provided in material conformity with this Agreement as such determination is made by the City
Manager acting in the reasonable exercise of his/her discretion. The following Sections will
survive any expiration or termination of this Agreement: 14, 15, 16, 17, 19.2, 19.3, 19.4, 20, 25,
27, 28, 29 and 30.
19.4. No payment, partial payment, acceptance, or partial acceptance by CITY
will operate as a waiver on the part of CITY of any of its rights under this Agreement, unless made
in accordance with Section 17 (Waivers).
SECTION 20. NOTICES.
All notices hereunder will be given in writing and mailed, postage prepaid, by
certified mail, addressed as follows:
To CITY: Office of the City Clerk
City of Palo Alto
Post Office Box 10250
Palo Alto, CA 94303
With a copy to the Purchasing Manager
To CONSULTANT: Attention of the Project Manager
Address: 4780 Ashford Dunwoody Road, Suite 540#617, Atlanta, Georgia, 30338-
5504
With a copy to: legalcounsel@epiuse.com
CONSULTANT shall provide written notice to CITY of any change of address.
SECTION 21. CONFLICT OF INTEREST.
21.1. In executing this Agreement, CONSULTANT covenants that it presently
has no interest, and will not acquire any interest, direct or indirect, financial or otherwise, which
would conflict in any manner or degree with the performance of the Services.
21.2. CONSULTANT further covenants that, in the performance of this
Agreement, it will not employ subcontractors or other persons or parties having such an interest.
CONSULTANT certifies that no person who has or will have any financial interest under this
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 9 of 34
Agreement is an officer or employee of CITY; this provision will be interpreted in accordance
with the applicable provisions of the Palo Alto Municipal Code and the Government Code of the
State of California, as amended from time to time. CONSULTANT agrees to notify CITY if any
conflict arises.
21.3. If the CONSULTANT meets the definition of a “Consultant” as defined by
the Regulations of the Fair Political Practices Commission, CONSULTANT will file the
appropriate financial disclosure documents required by the Palo Alto Municipal Code and the
Political Reform Act of 1974, as amended from time to time.
SECTION 22. NONDISCRIMINATION; COMPLIANCE WITH ADA.
22.1. As set forth in Palo Alto Municipal Code Section 2.30.510, as amended
from time to time, CONSULTANT certifies that in the performance of this Agreement, it shall not
discriminate in the employment of any person due to that person’s race, skin color, gender, gender
identity, age, religion, disability, national origin, ancestry, sexual orientation, pregnancy, genetic
information or condition, housing status, marital status, familial status, weight or height of such
person. CONSULTANT acknowledges that it has read and understands the provisions of Section
2.30.510 of the Palo Alto Municipal Code relating to Nondiscrimination Requirements and the
penalties for violation thereof, and agrees to meet all requirements of Section 2.30.510 pertaining
to nondiscrimination in employment.
22.2. CONSULTANT understands and agrees that pursuant to the Americans
Disabilities Act (“ADA”), programs, services and other activities provided by a public entity to
the public, whether directly or through a contractor or subcontractor, are required to be accessible
to the disabled public. CONSULTANT will provide the Services specified in this Agreement in a
manner that complies with the ADA and any other applicable federal, state and local disability
rights laws and regulations, as amended from time to time. CONSULTANT will not discriminate
against persons with disabilities in the provision of services, benefits or activities provided under
this Agreement.
SECTION 23. ENVIRONMENTALLY PREFERRED PURCHASING AND ZERO
WASTE REQUIREMENTS. CONSULTANT shall comply with the CITY’s Environmentally
Preferred Purchasing policies which are available at CITY’s Purchasing Department, hereby
incorporated by reference and as amended from time to time. CONSULTANT shall comply with
waste reduction, reuse, recycling and disposal requirements of CITY’s Zero Waste Program. Zero
Waste best practices include, first, minimizing and reducing waste; second, reusing waste; and,
third, recycling or composting waste. In particular, CONSULTANT shall comply with the
following Zero Waste requirements:
(a) All printed materials provided by CONSULTANT to CITY generated from a
personal computer and printer including but not limited to, proposals, quotes, invoices, reports,
and public education materials, shall be double-sided and printed on a minimum of 30% or greater
post-consumer content paper, unless otherwise approved by CITY’s Project Manager. Any
submitted materials printed by a professional printing company shall be a minimum of 30% or
greater post-consumer material and printed with vegetable-based inks.
(b) Goods purchased by CONSULTANT on behalf of CITY shall be purchased in
accordance with CITY’s Environmental Purchasing Policy including but not limited to Extended
Producer Responsibility requirements for products and packaging. A copy of this policy is on file
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 10 of 34
at the Purchasing Department’s office.
(c) Reusable/returnable pallets shall be taken back by CONSULTANT, at no
additional cost to CITY, for reuse or recycling. CONSULTANT shall provide documentation from
the facility accepting the pallets to verify that pallets are not being disposed.
SECTION 24. COMPLIANCE WITH PALO ALTO MINIMUM WAGE ORDINANCE.
CONSULTANT shall comply with all requirements of the Palo Alto Municipal Code Chapter 4.62
(Citywide Minimum Wage), as amended from time to time. In particular, for any employee
otherwise entitled to the State minimum wage, who performs at least two (2) hours of work in a
calendar week within the geographic boundaries of the City, CONSULTANT shall pay such
employees no less than the minimum wage set forth in Palo Alto Municipal Code Section 4.62.030
for each hour worked within the geographic boundaries of the City of Palo Alto. In addition,
CONSULTANT shall post notices regarding the Palo Alto Minimum Wage Ordinance in
accordance with Palo Alto Municipal Code Section 4.62.060.
SECTION 25. NON-APPROPRIATION. This Agreement is subject to the fiscal provisions of
the Charter of the City of Palo Alto and the Palo Alto Municipal Code, as amended from time to
time. This Agreement will terminate without any penalty (a) at the end of any fiscal year in the
event that funds are not appropriated for the following fiscal year, or (b) at any time within a fiscal
year in the event that funds are only appropriated for a portion of the fiscal year and funds for this
Agreement are no longer available. This Section shall take precedence in the event of a conflict
with any other covenant, term, condition, or provision of this Agreement.
SECTION 26. PREVAILING WAGES AND DIR REGISTRATION FOR PUBLIC
WORKS CONTRACTS.
26.1. This Project is not subject to prevailing wages and related
requirements. CONSULTANT is not required to pay prevailing wages and meet related
requirements under the California Labor Code and California Code of Regulations in the
performance and implementation of the Project if the contract:
(1) is not a public works contract;
(2) is for a public works construction project of $25,000 or less, per California
Labor Code Sections 1782(d)(1), 1725.5(f) and 1773.3(j); or
(3) is for a public works alteration, demolition, repair, or maintenance project of
$15,000 or less, per California Labor Code Sections 1782(d)(1), 1725.5(f) and
1773.3(j).
SECTION 27. CLAIMS PROCEDURE FOR “9204 PUBLIC WORKS PROJECTS”. For
purposes of this Section 27, a “9204 Public Works Project” means the erection, construction,
alteration, repair, or improvement of any public structure, building, road, or other public
improvement of any kind. (Cal. Pub. Cont. Code § 9204.) Per California Public Contract Code
Section 9204, for Public Works Projects, certain claims procedures shall apply, as set forth in
Exhibit F, entitled “Claims for Public Contract Code Section 9204 Public Works Projects”.
This Project is not a 9204 Public Works Project.
SECTION 28. CONFIDENTIAL INFORMATION.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 11 of 34
28.1. In the performance of this Agreement, CONSULTANT may have access to
CITY’s Confidential Information (defined below). CONSULTANT will hold Confidential
Information in strict confidence, not disclose it to any third party, and will use it only for the
performance of its obligations to CITY under this Agreement and for no other purpose.
CONSULTANT will maintain reasonable and appropriate administrative, technical and physical
safeguards to ensure the security, confidentiality and integrity of the Confidential Information.
Notwithstanding the foregoing, CONSULTANT may disclose Confidential Information to its
employees, agents and subcontractors, if any, to the extent they have a need to know in order to
perform CONSULTANT’s obligations to CITY under this Agreement and for no other purpose,
provided that the CONSULTANT informs them of, and requires them to follow, the confidentiality
and security obligations of this Agreement.
28.2. “Confidential Information” means all data, information (including without
limitation “Personal Information” about a California resident as defined in Civil Code Section
1798 et seq., as amended from time to time) and materials, in any form or media, tangible or
intangible, provided or otherwise made available to CONSULTANT by CITY, directly or
indirectly, pursuant to this Agreement. Confidential Information excludes information that
CONSULTANT can show by appropriate documentation: (i) was publicly known at the time it
was provided or has subsequently become publicly known other than by a breach of this
Agreement; (ii) was rightfully in CONSULTANT’s possession free of any obligation of
confidence prior to receipt of Confidential Information; (iii) is rightfully obtained by
CONSULTANT from a third party without breach of any confidentiality obligation; (iv) is
independently developed by employees of CONSULTANT without any use of or access to the
Confidential Information; or (v) CONSULTANT has written consent to disclose signed by an
authorized representative of CITY.
28.3. Notwithstanding the foregoing, CONSULTANT may disclose Confidential
Information to the extent required by order of a court of competent jurisdiction or governmental
body, provided that CONSULTANT will notify CITY in writing of such order immediately upon
receipt and prior to any such disclosure (unless CONSULTANT is prohibited by law from doing
so), to give CITY an opportunity to oppose or otherwise respond to such order.
28.4. CONSULTANT will notify City promptly upon learning of any breach in
the security of its systems or unauthorized disclosure of, or access to, Confidential Information in
its possession or control, and if such Confidential Information consists of Personal Information,
CONSULTANT will provide information to CITY sufficient to meet the notice requirements of
Civil Code Section 1798 et seq., as applicable, as amended from time to time.
28.5. Prior to or upon termination or expiration of this Agreement,
CONSULTANT will honor any request from the CITY to return or securely destroy all copies of
Confidential Information. All Confidential Information is and will remain the property of the CITY
and nothing contained in this Agreement grants or confers any rights to such Confidential
Information on CONSULTANT.
28.6. If selected in Section 30 (Exhibits), this Agreement is also subject to the
terms and conditions of the Information Privacy Policy and Cybersecurity Terms and Conditions.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 12 of 34
SECTION 29. MISCELLANEOUS PROVISIONS.
29.1. This Agreement will be governed by California law, without regard to its
conflict of law provisions.
29.2. In the event that an action is brought, the parties agree that trial of such
action will be vested exclusively in the state courts of California in the County of Santa Clara,
State of California.
29.3. The prevailing party in any action brought to enforce the provisions of this
Agreement may recover its reasonable costs and attorneys’ fees expended in connection with that
action. The prevailing party shall be entitled to recover an amount equal to the fair market value
of legal services provided by attorneys employed by it as well as any attorneys’ fees paid to third
parties.
29.4. This Agreement, including all exhibits, constitutes the entire and integrated
agreement between the parties with respect to the subject matter of this Agreement, and supersedes
all prior agreements, negotiations, representations, statements and undertakings, either oral or
written. This Agreement may be amended only by a written instrument, which is signed by the
authorized representatives of the parties and approved as required under Palo Alto Municipal
Code, as amended from time to time.
29.5. If a court of competent jurisdiction finds or rules that any provision of this
Agreement is void or unenforceable, the unaffected provisions of this Agreement will remain in
full force and effect.
29.6. In the event of a conflict between the terms of this Agreement and the
exhibits hereto (per Section 30) or CONSULTANT’s proposal (if any), the Agreement shall
control. In the event of a conflict between the exhibits hereto and CONSULTANT’s proposal (if
any), the exhibits shall control.
29.7. The provisions of all checked boxes in this Agreement shall apply to this
Agreement; the provisions of any unchecked boxes shall not apply to this Agreement.
29.8. All section headings contained in this Agreement are for convenience and
reference only and are not intended to define or limit the scope of any provision of this Agreement.
29.9. This Agreement may be signed in multiple counterparts, which, when
executed by the authorized representatives of the parties, shall together constitute a single binding
agreement.
29.10 If, at any time during the term of a Statement of Work, the parties desire to
implement a change to a Statement of Work, the parties shall execute a change order describing
such change (the “Change Order”). In the event of a discrepancy between the Change Order and
any other part of this Agreement or the Statement of Work executed prior to such Change Order,
the terms of the Change Order shall govern. In no event shall a Statement of Work be amended,
enhanced, or otherwise modified except as set forth above. CONSULTANT will not be required
to perform under a Change Order prior to the execution by both parties of the applicable Change
Order. If the receiving party does not accept the Change Order in writing within ten (10) days, the
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 13 of 34
receiving party shall be deemed to have rejected the Change Order.
SECTION 30. EXHIBITS. Each of the following exhibits, if the check box for such exhibit is
selected below, is hereby attached and incorporated into this Agreement by reference as though
fully set forth herein:
EXHIBIT A: SCOPE OF SERVICES
EXHIBIT A-1 PROFESSIONAL SERVICES TASK ORDER
EXHIBIT B: SCHEDULE OF PERFORMANCE
EXHIBIT C: COMPENSATION
EXHIBIT C-1: SCHEDULE OF RATES
EXHIBIT D: INSURANCE REQUIREMENTS
EXHIBIT E: INFORMATION PRIVACY POLICY
EXHIBIT F: CYBERSECURITY TERMS AND CONDITIONS
THIS AGREEMENT IS NOT COMPLETE UNLESS ALL SELECTED EXHIBITS
ARE ATTACHED.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 14 of 34
CONTRACT No. C25193332
SIGNATURE PAGE
IN WITNESS WHEREOF, the parties hereto have by their duly authorized representatives
executed this Agreement as of the date first above written.
CITY OF PALO ALTO
____________________________
City Manager
APPROVED AS TO FORM:
__________________________
City Attorney or designee
EPI-USE AMERICA INC.
Officer 1
By: ________________________________
Name: ______________________________
Title: _______________________________
Officer 2
By: ________________________________
Name: ______________________________
Title: _______________________________
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Mark Schexnaildre
Vice President/Managing Director
Company Secretary
John Mcfadzean
Professional Services
Rev. Oct 16,2024 Page 15 of 34
EXHIBIT A
SCOPE OF SERVICES
CONSULTANT shall provide the Services detailed in this Exhibit A, entitled “SCOPE OF
SERVICES”. Notwithstanding any provision herein to the contrary, CONSULTANT’s duties and
services described in this Scope of Services shall not include preparing or assisting CITY with any
portion of CITY’s preparation of a request for proposals, request for qualifications, or any other
solicitation regarding a subsequent or additional contract with CITY. CITY shall at all times retain
responsibility for public contracting, including with respect to any subsequent phase of this project.
CONSULTANT’s participation in the planning, discussions, or drawing of project plans or
specifications shall be limited to conceptual, preliminary, or initial plans or specifications.
CONSULTANT shall cooperate with CITY to ensure that all bidders for a subsequent contract on
any subsequent phase of this project have access to the same information, including all conceptual,
preliminary, or initial plans or specifications prepared by CONSULTANT pursuant to this Scope
of Services.
A. Introduction/Background
The City of Palo Alto is planning to automate user provisioning and access request analysis using SAP
Cloud IAG.
B. Objectives
Below are objectives which will be implemented as a part of SAP Cloud IAG system implementation at
City of Palo Alto.
1. SAP Cloud IAG configuration
2. Risk Reports for Auditors
3. Mitigate access risks
4. User provisioning/de-provisioning with access request workflows
5. Manage Privileged User activities
6. System logging for Change activities
C. Proposed Plan
An SAP Cloud IAG implementation (consisting of two tenants: Non-Production & Production) to address
the objectives outlined in Section B will take approximately 10 weeks to complete. As a part of the
implementation at City of Palo Alto, automation of provisioning upon workflow approval, Risk Analysis,
and use of Privileged User, Consultant is will conduct the implementation approach below which would
allow City of Palo Alto to satisfy user access process and audit requirements in the short-term and long-
term.
Scope of Work
CONSULTANT will conduct the following activities:
1. Access Risk Analysis
a. Use standard delivered risk ruleset and run risk analysis within Cloud IAG to identify any
Segregation of Duties (SoD) and Critical Access issues with each user’s current access within the in-
Scope SAP Production Systems.
b. Utilize City of Palo Alto’s current mitigating control library to remediate any SoD/critical
access risks that arise.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 16 of 34
c. Deliver Executive risk reports for business owners/stake holder’s review.
2. Access Request Management
a. Implement SAP standard workflow that includes 1 to 2 stage approvers for provisioning access
to SAP Production landscapes using SAP standard roles.
b. Creation of user accounts & terminations of user accounts.
3. Privileged Access Management
a. Basic Privileged User creation for On-premises Plugin systems which requires Super user
access.
b. Basic Privileged User ID request, approval, and log review workflow implementation
c. Configure Privileged User access including roles and user access for Privileged User IDs,
Privileged Users, Privileged User approvers and Privileged User controllers.
4. Testing Cycles
a. Unit Test in Non-Production IAG tenant
b. Integration/User Acceptance Test in Non-Production IAG tenant
5. Knowledge Transfer
a. Carry out IAG tool support knowledge transfer sessions.
6. Go-Live Preparation
a. Cutover in IAG Production tenant
Scope of Work - Exclusions
1. Ruleset Management
a. Review ruleset with City of Palo Alto
b. Adjust ruleset appropriately for City of Palo Alto (if needed).
c. Update ruleset with custom transactions and programs
2. Role Design Service City
a. Maintain role through IAG.
b. Implement SAP CLOUD IAG role change management/workflow.
3. Other Functionalities a. Password self-service (this will fix all password re-sets)
b. Customized IAG notifications
4. Access Certificate Service - Auditors Favorite a. Periodic review of role assignment to users
b. Periodic review of risk and mitigating assignment to users
5. Customization of User Interface
a. Delivered user interface will be leverage (no custom Fiori integration)
City of Palo Alto Responsibilities
• City of Palo Alto to be responsible for IAG Master data preparation
• City of Palo Alto to be responsible for defining Privilege Access Management security/authorization
roles
• City of Palo Alto to be responsible for preparing for and completing UAT
• City of Palo Alto to be responsible for UAT and configuration sign-off
• City of Palo Alto to be responsible for data validation and sign-off
• City of Palo Alto to be responsible for Change Management
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 17 of 34
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 18 of 34
EXHIBIT A-1
PROFESSIONAL SERVICES TASK ORDER
CONSULTANT shall perform the Services detailed below in accordance with all the terms and
conditions of the Agreement referenced in Item 1A below. All exhibits referenced in Item 8 are
incorporated into this Task Order by this reference. CONSULTANT shall furnish the necessary facilities,
professional, technical and supporting personnel required by this Task Order as described below.
CONTRACT NO.
OR PURCHASE ORDER REQUISITION NO. (AS APPLICABLE)
1A. MASTER AGREEMENT NO. (MAY BE SAME AS CONTRACT / P.O. NO. ABOVE):
1B. TASK ORDER NO.:
2. CONSULTANT NAME:
3. PERIOD OF PERFORMANCE: START: COMPLETION:
4 TOTAL TASK ORDER PRICE: $__________________
BALANCE REMAINING IN MASTER AGREEMENT/CONTRACT $_______________
5. BUDGET CODE_______________
COST CENTER________________
COST ELEMENT______________
WBS/CIP__________
PHASE__________
6. CITY PROJECT MANAGER’S NAME & DEPARTMENT:_____________________________________
7. DESCRIPTION OF SCOPE OF SERVICES (Attachment A)
MUST INCLUDE:
SERVICES AND DELIVERABLES TO BE PROVIDED
SCHEDULE OF PERFORMANCE
MAXIMUM COMPENSATION AMOUNT AND RATE SCHEDULE (as applicable)
REIMBURSABLE EXPENSES, if any (with “not to exceed” amount)
8. ATTACHMENTS: A: Task Order Scope of Services B (if any): _____________________________
I hereby authorize the performance of the
work described in this Task Order.
APPROVED:
CITY OF PALO ALTO
BY:____________________________________
Name __________________________________
Title___________________________________
Date ___________________________________
Task Order and warrant that I have authority to
sign on behalf of Consultant.
APPROVED:
COMPANY NAME: ______________________
BY:____________________________________
Name __________________________________
Title___________________________________
Date ___________________________________
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 19 of 34
EXHIBIT B
SCHEDULE OF PERFORMANCE
CONSULTANT shall perform the Services so as to complete each milestone within the number
of days/weeks specified below. The time to complete each milestone may be increased or
decreased by mutual written agreement of the Project Managers for CONSULTANT and CITY so
long as all work is completed within the term of the Agreement. CONSULTANT shall provide a
detailed schedule of work consistent with the schedule below within 2 weeks of receipt of the
notice to proceed (“NTP”) from the CITY.
Milestones Number of Days/Weeks (as specified below)
1. Project Kick-off, Requirement Gathering,
Realization and Unit Testing
4 Weeks
2. Integration and UAT testing support 2 Weeks
3. Cutover and Production master data
preparation
1 Week
4. Post Go-live support and KT 1 Week
5. Optional – Privileged Access Management
(Realization & Testing)
1 Week
Optional Schedule of Performance Provision for On-Call or Additional Services Agreements.
(This provision only applies if checked and only applies to on-call agreements per Section 1 or
agreements with Additional Services per Section 4.)
The schedule of performance shall be as provided in the approved Task Order, as detailed in
Section 1 (Scope of Services) in the case of on-call Services, or as detailed in Section 4 in the case
of Additional Services, provided in all cases that the schedule of performance shall fall within the
term as provided in Section 2 (Term) of this Agreement.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 20 of 34
EXHIBIT C
COMPENSATION
CITY agrees to compensate CONSULTANT for the Services performed in accordance with the
terms and conditions of this Agreement, including Services, any specified reimbursable expenses,
and Additional Services (if any, per Section 4 of the Agreement), based on the hourly rate schedule
attached as Exhibit C-1.
The compensation to be paid to CONSULTANT under this Agreement for all Services, any
specified reimbursable expenses, and Additional Services (if any, per Section 4), shall not exceed
the amount(s) stated in Section 4 of this Agreement. CONSULTANT agrees to complete all
Services, any specified reimbursable expenses, and Additional Services (if any, per Section 4),
within this/these amount(s). Any work performed or expenses incurred for which payment would
result in a total exceeding the maximum amount of compensation set forth in this Agreement shall
be at no cost to the CITY.
REIMBURSABLE EXPENSES
CONSULTANT’S ordinary business expenses, such as administrative, overhead,
administrative support time/overtime, information systems, software and hardware,
photocopying, telecommunications (telephone, internet), in-house printing, insurance and
other ordinary business expenses, are included within the scope of payment for Services and
are not reimbursable expenses hereunder.
Reimbursable expenses, if any are specified as reimbursable under this section, will be
reimbursed at actual cost. The expenses (by type, e.g. travel) for which CONSULTANT will
be reimbursed are: NONE up to the not-to-exceed amount of: $0.00.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 21 of 34
EXHIBIT C-1
SCHEDULE OF RATES
CONSULTANT’s schedule of rates is as follows:
Consultants and Cost
IAG Implementation
Role Hours Hourly Rate Total
Total 340 TOTAL $61,200
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 22 of 34
EXHIBIT D
INSURANCE REQUIREMENTS
CONSULTANTS TO THE CITY OF PALO ALTO (CITY), AT THEIR SOLE EXPENSE, SHALL FOR THE TERM OF THE
CONTRACT OBTAIN AND MAINTAIN INSURANCE IN THE AMOUNTS FOR THE COVERAGE SPECIFIED BELOW,
AFFORDED BY COMPANIES WITH AM BEST’S KEY RATING OF A-:VII, OR HIGHER, LICENSED OR
AUTHORIZED TO TRANSACT INSURANCE BUSINESS IN THE STATE OF CALIFORNIA.
AWARD IS CONTINGENT ON COMPLIANCE WITH CITY’S INSURANCE REQUIREMENTS AS SPECIFIED HEREIN.
REQUIRED TYPE OF COVERAGE REQUIREMENT
MINIMUM LIMITS
EACH
OCCURRENCE AGGREGATE
YES
YES
WORKER’S COMPENSATION
EMPLOYER’S LIABILITY
STATUTORY
STATUTORY STATUTORY STATUTORY
YES
GENERAL LIABILITY, INCLUDING
PERSONAL INJURY, PROPERTY
DAMAGECONTRACTUALLIABILITY
BODILY INJURY
PROPERTY DAMAGE
BODILY INJURY & PROPERTY
DAMAGE COMBINED.
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
YES
AUTOMOBILE LIABILITY,
INCLUDING ALL OWNED, HIRED,
NON-OWNED
BODILY INJURY
- EACH PERSON
- EACH OCCURRENCE
PROPERTY DAMAGE
BODILY INJURY AND PROPERTY
DAMAGE, COMBINED
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
YES
PROFESSIONAL LIABILITY,
INCLUDING, ERRORS AND
OMISSIONS, MALPRACTICE (WHEN
APPLICABLE), AND NEGLIGENT
PERFORMANCE
ALL DAMAGES $2,000,000
YES
THE CITY OF PALO ALTO IS TO BE NAMED AS AN ADDITIONAL INSURED: CONSULTANT, AT ITS SOLE COST
AND EXPENSE, SHALL OBTAIN AND MAINTAIN, IN FULL FORCE AND EFFECT THROUGHOUT THE ENTIRE TERM
OF ANY RESULTANT AGREEMENT, THE INSURANCE COVERAGE HEREIN DESCRIBED, INSURING NOT ONLY
CONSULTANT AND ITS SUBCONSULTANTS, IF ANY, BUT ALSO, WITH
COMPENSATION, EMPLOYER’S LIABILITY AND PROFESSIONAL INSURANCE, NAMING AS ADDITIONAL
INSUREDS CITY, ITS COUNCIL MEMBERS, OFFICERS, AGENTS, AND EMPLOYEES.
I. INSURANCE COVERAGE MUST INCLUDE:
A. A CONTRACTUAL LIABILITY ENDORSEMENT PROVIDING INSURANCE COVERAGE FOR
CONSULTANT’S AGREEMENT TO INDEMNIFY CITY.
II. THE CONSULTANT MUST SUBMIT CERTIFICATES(S) OF INSURANCE EVIDENCING REQUIRED COVERAGE
AT THE FOLLOWING EMAIL: PURCHASINGSUPPORT@CITYOFPALOALTO.ORG
III. ENDORSEMENT PROVISIONS WITH RESPECT TO THE INSURANCE AFFORDED TO ADDITIONAL
INSUREDS:
A. PRIMARY COVERAGE
WITH RESPECT TO CLAIMS ARISING OUT OF THE OPERATIONS OF THE NAMED INSURED,
INSURANCE AS AFFORDED BY THIS POLICY IS PRIMARY AND IS NOT ADDITIONAL TO OR
CONTRIBUTING WITH ANY OTHER INSURANCE CARRIED BY OR FOR THE BENEFIT OF THE
ADDITIONAL INSUREDS.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 23 of 34
B. CROSS LIABILITY
THE NAMING OF MORE THAN ONE PERSON, FIRM, OR CORPORATION AS INSUREDS UNDER
THE POLICY SHALL NOT, FOR THAT REASON ALONE, EXTINGUISH ANY RIGHTS OF THE
INSURED AGAINST ANOTHER, BUT THIS ENDORSEMENT, AND THE NAMING OF MULTIPLE
INSUREDS, SHALL NOT INCREASE THE TOTAL LIABILITY OF THE COMPANY UNDER THIS
POLICY.
C. NOTICE OF CANCELLATION
1. IF THE POLICY IS CANCELED BEFORE ITS EXPIRATION DATE FOR ANY REASON
OTHER THAN THE NON-PAYMENT OF PREMIUM, THE CONSULTANT SHALL PROVIDE
CITY AT LEAST A THIRTY (30) DAY WRITTEN NOTICE BEFORE THE EFFECTIVE DATE
OF CANCELLATION.
2. IF THE POLICY IS CANCELED BEFORE ITS EXPIRATION DATE FOR THE NON-PAYMENT
OF PREMIUM, THE CONSULTANT SHALL PROVIDE CITY AT LEAST A TEN (10) DAY
WRITTEN NOTICE BEFORE THE EFFECTIVE DATE OF CANCELLATION.
EVIDENCE OF INSURANCE AND OTHER RELATED NOTICES ARE REQUIRED TO BE
FILED WITH THE CITY OF PALO ALTO SENT TO THE FOLLOWING EMAIL:
PURCHASINGSUPPORT@CITYOFPALOALTO.ORG
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 24 of 34
EXHIBIT E
INFORMATION OF PRIVACY
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 25 of 34
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 26 of 34
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 27 of 34
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 28 of 34
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 29 of 34
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 30 of 34
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 31 of 34
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 32 of 34
EXHIBIT F
CYBERSECURITY TERMS AND CONDITIONS
In order to assure the privacy and security of the personal information of the City's customers and
people who do business with the City, including, without limitation, vendors, utility customers,
library patrons, and other individuals and companies, who are required to share such information
with the City, as a condition of receiving services from the City or selling goods and services to
the City, including, without limitation, the Software as a Service services provider (the
"Consultant") and its subcontractors, if any, including, without limitation, any Information
Technology ("IT") infrastructure services provider, shall design, install, provide, and maintain a
secure IT environment, described below, while it renders and performs the Services and furnishes
goods, if any, described in the Statement of Work, Exhibit B, to the extent any scope of work
implicates the confidentiality and privacy of the personal information of the City's customers. The
Consultant shall fulfill the data and information security requirements (the "Requirements") set
forth in Part A below.
A "secure IT environment" includes (a) the IT infrastructure, by which the Services are provided
to the City, including connection to the City's IT systems; (b) the Consultant's operations and
maintenance processes needed to support the environment, including disaster recovery and
business continuity planning; and (c) the IT infrastructure performance monitoring services to
ensure a secure and reliable environment and service availability to the City. "IT infrastructure"
refers to the integrated framework, including, without limitation, data centers, computers, and
database management devices, upon which digital networks operate.
In the event that, after the Effective Date, the Consultant reasonably determines that it cannot fulfill
the Requirements, the Consultant shall promptly inform the City of its determination and submit,
in writing, one or more alternate countermeasure options to the Requirements (the "Alternate
Requirements" as set forth in Part B), which may be accepted or rejected in the reasonable
satisfaction of the Information Security Manager (the "ISM").
Part A. Requirements:
The Consultant shall at all times during the term of any contract between the City and the
Consultant:
(a) Appoint or designate an employee, preferably an executive officer, as the security liaison
to the City with respect to the Services to be performed under this Agreement.
(b) Comply with the City's Information Privacy Policy:
(c) Have adopted and implemented information security and privacy policies that are
documented, are accessible to the City, and conform to ISO 27001/2 – Information Security
Management Systems (ISMS) Standards. See the following:
http://www.iso.org/iso/home/store/catalogue_tc/catalogue_detail.htm?csnumber=42103
http://www.iso.org/iso/iso_catalogue/catalogue_tc/catalogue_detail.htm?csnumber=50297
(d) Conduct routine data and information security compliance training of its personnel that is
appropriate to their role.
(e) Develop and maintain detailed documentation of the IT infrastructure, including software
versions and patch levels.
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 33 of 34
(f) Develop an independently verifiable process, consistent with industry standards, for
performing professional and criminal background checks of its employees that (1) would
permit verification of employees' personal identity and employment status, and (2) would
enable the immediate denial of access to the City's confidential data and information by
any of its employees who no longer would require access to that information or who are
terminated.
(g) Provide a list of IT infrastructure components in order to verify whether the Consultant
has met or has failed to meet any objective terms and conditions.
(h) Implement access accountability (identification and authentication) architecture and
support role-based access control ("RBAC") and segregation of duties ("SoD")
mechanisms for all personnel, systems, and Software used to provide the Services.
"RBAC" refers to a computer systems security approach to restricting access only to
authorized users. "SoD" is an approach that would require more than one individual to
complete a security task in order to promote the detection and prevention of fraud and
errors.
(i) Assist the City in undertaking annually an assessment to assure that: (1) all elements of the
Services' environment design and deployment are known to the City, and (2) it has
implemented measures in accordance with industry best practices applicable to secure
coding and secure IT architecture.
(j) Provide and maintain secure intersystem communication paths that would ensure the
confidentiality, integrity, and availability of the City's information.
(k) Deploy and maintain IT system upgrades, patches and configurations conforming to
current patch and/or release levels by not later than one (1) week after its date of release.
Emergency security patches must be installed within 24 hours after its date of release.
(l) Provide for the timely detection of, response to, and the reporting of security incidents,
including on-going incident monitoring with logging.
(m) Notify the City within twenty four (24)hours of detecting a security incident that results in
the unauthorized access to or the misuse of the City's confidential data and information.
(n) Inform the City that any third party service provider(s) meet(s) all of the Requirements.
(o) Perform security self-audits on a regular basis and not less frequently than on a quarterly
basis, and provide the required summary reports of those self-audits to the ISM on the
annual anniversary date or any other date agreed to by the Parties.
(p) Accommodate, as practicable, and upon reasonable prior notice by the City, the City's
performance of random site security audits at the Consultant's site(s), including the site(s)
of a third-party service provider(s), as applicable. The scope of these audits will extend to
the Consultant's and its third-party service provider(s)' awareness of security policies and
practices, systems configurations, access authentication and authorization, and incident
detection and response.
(q) Cooperate with the City to ensure that to the extent required by applicable laws, rules and
regulations, and the Confidential Information will be accessible only by the Consultant and
any authorized third-party service provider's personnel.
(r) Perform regular, reliable secured backups of all data needed to maximize the availability
of the Services. Adequately encrypt the City of Palo Alto's data, during the operational
process, hosted at rest, and the backup stage at the Vendors' environment (including
Vendor's contracting organization's environment).
(s) Maintain records relating to the Services for a period of three (3) years after the expiration
or earlier termination of this Agreement and in a mutually agreeable storage medium.
Within thirty (30) days after the effective date of expiration or earlier termination of this
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 34 of 34
Agreement, all of those records relating to the performance of the Services shall be
provided to the ISM.
(t) Maintain the Confidential Information in accordance with applicable federal, state, and
local data and information privacy laws, rules, and regulations.
(u) Encrypt the Confidential Information before delivering the same by electronic mail to the
City and or any authorized recipient.
(v) Provide Network Layer IP filtering services to allow access only from the City of Palo
Alto's IP address to the Vendor environment (primarily hosted for the City of Palo Alto).
(w) Offer a robust disaster recovery and business continuity (DR-BCP) solutions to the City
for the systems and services the Vendor provides to the City.
(x) Provide and support Single Sign-on (SSO) and Multifactor Authentication (MFA)
solutions for authentication and authorization services from the "City's environment to the
Vendor's environment," and Vendor's environment to the Vendor's cloud services/hosted
environment." The Vendor shall allow two employees of the City to have superuser and
super-admin access to the Vendor's IT environment, and a cloud-hosted IT environment
belongs to the City.
(y) Unless otherwise addressed in the Agreement, shall not hold the City liable for any direct,
indirect or punitive damages whatsoever including, without limitation, damages for loss of
use, data or profits, arising out of or in any way connected with the City's IT environment,
including, without limitation, IT infrastructure communications.
(z) The Vendor must provide evidence of valid cyber liability insurance policy per the City’s
EXHIBIT “D” INSURANCE REQUIREMENTS.
Part B. Alternate Requirements:
Docusign Envelope ID: 88BA5A1C-5103-4EB4-9402-72DFB7245B5B
Professional Services
Rev. Oct 16,2024 Page 1 of 43
CITY OF PALO ALTO CONTRACT NO. C25193333
AGREEMENT FOR PROFESSIONAL SERVICES
BETWEEN THE CITY OF PALO ALTO AND EPI-USE AMERICA INC.
This Agreement for Professional Services (this “Agreement”) is entered into as of the 24th day of
February, 2025 (the “Effective Date”), by and between the CITY OF PALO ALTO, a California
chartered municipal corporation (“CITY”), and EPI-USE AMERICA INC., a Delaware
Corporation, located at 4780 Ashford Dunwoody Road, Suite 540 #617, Atlanta Georgia, 30338-
5504 (“CONSULTANT”).
The following recitals are a substantive portion of this Agreement and are fully incorporated herein
by this reference:
RECITALS
A. CITY intends to implement a business process repository to establish process governance
within SAP (the “Project”) and desires to engage a consultant to assist with the setup and
configuration of SAP Signavio Process Manager and SAP Signavio Collaboration Hub in
connection with the Project (the “Services”, as detailed more fully in Exhibit A).
B. CONSULTANT represents that it, its employees and subconsultants, if any, possess the
necessary professional expertise, qualifications, and capability, and all required licenses and/or
certifications to provide the Services.
C. CITY, in reliance on these representations, desires to engage CONSULTANT to provide
the Services as more fully described in Exhibit A, entitled “SCOPE OF SERVICES”.
NOW, THEREFORE, in consideration of the recitals, covenants, terms, and conditions, in this
Agreement, the parties agree as follows:
SECTION 1. SCOPE OF SERVICES. CONSULTANT shall perform the Services described
in Exhibit A in accordance with the terms and conditions contained in this Agreement. The
performance of all Services shall be to the reasonable satisfaction of CITY.
SECTION 2. TERM.
The term of this Agreement shall be from the effective date of this agreement through January 31,
2026 scope, unless terminated earlier pursuant to Section 19 (Termination) of this Agreement.
SECTION 3. SCHEDULE OF PERFORMANCE. Time is of the essence in the performance
of Services under this Agreement. CONSULTANT shall complete the Services within the term of
this Agreement and in accordance with the schedule set forth in Exhibit B, entitled “SCHEDULE
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 2 of 43
OF PERFORMANCE”. Any Services for which times for performance are not specified in this
Agreement shall be commenced and completed by CONSULTANT in a reasonably prompt and
timely manner based upon the circumstances and direction communicated to the CONSULTANT.
CITY’s agreement to extend the term or the schedule for performance shall not preclude recovery
of damages for delay if the extension is required due to the fault of CONSULTANT.
SECTION 4. NOT TO EXCEED COMPENSATION. The compensation to be paid to
CONSULTANT for performance of the Services shall be based on the compensation structure
detailed in Exhibit C, entitled “COMPENSATION,” including any reimbursable expenses
specified therein, and the maximum total compensation shall not exceed Two Hundred One
Thousand Six Hundred Dollars ($201,600). The hourly schedule of rates, if applicable, is set
out in Exhibit C-1, entitled “SCHEDULE OF RATES.” Any work performed or expenses incurred
for which payment would result in a total exceeding the maximum compensation set forth in this
Section 4 shall be at no cost to the CITY.
Optional Additional Services Provision (This provision applies only if checked and a
not-to-exceed compensation amount for Additional Services is allocated below under this
Section 4.)
In addition to the not-to-exceed compensation specified above, CITY has set aside the not-
to-exceed compensation amount of Twenty Thousand One Hundred Sixty Dollars
($20,160) for the performance of Additional Services (as defined below). The total
compensation for performance of the Services, Additional Services and any reimbursable
expenses specified in Exhibit C, shall not exceed Two Hundred Twenty-One Thousand
Seven Hundred Sixty Dollars ($221,760), as detailed in Exhibit C.
“Additional Services” means any work that is determined by CITY to be necessary for the
proper completion of the Project, but which is not included within the Scope of Services
described at Exhibit A. CITY may elect to, but is not required to, authorize Additional
Services up to the maximum amount of compensation set forth for Additional Services in
this Section 4. CONSULTANT shall provide Additional Services only by advanced,
written authorization from CITY as detailed in this Section. Additional Services, if any,
shall be authorized by CITY with a Task Order assigned and authorized by CITY’s Project
Manager, as identified in Section 13 (Project Management). Each Task Order shall be in
substantially the same form as Exhibit A-1, entitled “PROFESSIONAL SERVICES TASK
ORDER”. Each Task Order shall contain a specific scope of services, schedule of
performance and maximum compensation amount, in accordance with the provisions of
this Agreement. Compensation for Additional Services shall be specified by CITY in the
Task Order, based on whichever is lowest: the compensation structure set forth in Exhibit
C, the hourly rates set forth in Exhibit C-1, or a negotiated lump sum.
To accept a Task Order, CONSULTANT shall sign the Task Order and return it to CITY’s
Project Manager within the time specified by the Project Manager, and upon authorization
by CITY (defined as counter-signature by the CITY Project Manager), the fully executed
Task Order shall become part of this Agreement. The cumulative total compensation to
CONSULTANT for all Task Orders authorized under this Agreement shall not exceed the
amount of compensation set forth for Additional Services in this Section 4.
CONSULTANT shall only be compensated for Additional Services performed under an
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 3 of 43
authorized Task Order and only up to the maximum amount of compensation set forth for
Additional Services in this Section 4. Performance of and payment for any Additional
Services are subject to all requirements and restrictions in this Agreement.
SECTION 5. INVOICES. In order to request payment, CONSULTANT shall submit monthly
invoices to the CITY describing the Services performed and the applicable charges (including, if
applicable, an identification of personnel who performed the Services, hours worked, hourly rates,
and reimbursable expenses), based upon Exhibit C or, as applicable, CONSULTANT’s schedule
of rates set forth in Exhibit C-1. If applicable, the invoice shall also describe the percentage of
completion of each task. The information in CONSULTANT’s invoices shall be subject to
verification by CITY. CONSULTANT shall send all invoices to CITY’s Project Manager at the
address specified in Section 13 (Project Management) below. CITY will generally process and
pay invoices within thirty (30) days of receipt of an acceptable invoice.
SECTION 6. QUALIFICATIONS/STANDARD OF CARE. All Services shall be performed
by CONSULTANT or under CONSULTANT’s supervision. CONSULTANT represents that it,
its employees and subcontractors, if any, possess the professional and technical personnel
necessary to perform the Services required by this Agreement and that the personnel have
sufficient skill and experience to perform the Services assigned to them. CONSULTANT
represents that it, its employees and subcontractors, if any, have and shall maintain during the term
of this Agreement all licenses, permits, qualifications, insurance and approvals of whatever nature
that are legally required to perform the Services. All Services to be furnished by CONSULTANT
under this Agreement shall meet the professional standard and quality that prevail among
professionals in the same discipline and of similar knowledge and skill engaged in related work
throughout California under the same or similar circumstances. All Services shall conform to the
specifications of the applicable Statement of Work for a period of ninety (90) days after final
acceptance.
SECTION 7. COMPLIANCE WITH LAWS. CONSULTANT shall keep itself informed of
and in compliance with all federal, state and local laws, ordinances, regulations, and orders that
may affect in any manner the Project or the performance of the Services or those engaged to
perform Services under this Agreement, as amended from time to time. CONSULTANT shall
procure all permits and licenses, pay all charges and fees, and give all notices required by law in
the performance of the Services.
SECTION 8. ERRORS/OMISSIONS. CONSULTANT is solely responsible for costs,
including, but not limited to, increases in the cost of Services, arising from or caused by
CONSULTANT’s errors and omissions, including, but not limited to, the costs of corrections such
errors and omissions, any change order markup costs, or costs arising from delay caused by the
errors and omissions or unreasonable delay in correcting the errors and omissions.
SECTION 9. COST ESTIMATES. If this Agreement pertains to the design of a public works
project, CONSULTANT shall submit estimates of probable construction costs at each phase of
design submittal. If the total estimated construction cost at any submittal exceeds the CITY’s
stated construction budget by ten percent (10%) or more, CONSULTANT shall make
recommendations to CITY for aligning the Project design with the budget, incorporate CITY
approved recommendations, and revise the design to meet the Project budget, at no additional cost
to CITY.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 4 of 43
SECTION 10. INDEPENDENT CONTRACTOR. CONSULTANT acknowledges and agrees
that CONSULTANT and any agent or employee of CONSULTANT will act as and shall be
deemed at all times to be an independent contractor and shall be wholly responsible for the manner
in which CONSULTANT performs the Services requested by CITY under this Agreement.
CONSULTANT and any agent or employee of CONSULTANT will not have employee status
with CITY, nor be entitled to participate in any plans, arrangements, or distributions by CITY
pertaining to or in connection with any retirement, health or other benefits that CITY may offer its
employees. CONSULTANT will be responsible for all obligations and payments, whether
imposed by federal, state or local law, including, but not limited to, FICA, income tax
withholdings, workers’ compensation, unemployment compensation, insurance, and other similar
responsibilities related to CONSULTANT’s performance of the Services, or any agent or
employee of CONSULTANT providing same. Nothing in this Agreement shall be construed as
creating an employment or agency relationship between CITY and CONSULTANT or any agent
or employee of CONSULTANT. Any terms in this Agreement referring to direction from CITY
shall be construed as providing for direction as to policy and the result of CONSULTANT’s
provision of the Services only, and not as to the means by which such a result is obtained.
SECTION 11. ASSIGNMENT. The parties agree that the expertise and experience of
CONSULTANT are material considerations for this Agreement. CONSULTANT shall not assign
or transfer any interest in this Agreement nor the performance of any of CONSULTANT’s
obligations hereunder without the prior written approval of the City Manager. Any purported
assignment made without the prior written approval of the City Manager will be void and without
effect. Subject to the foregoing, the covenants, terms, conditions and provisions of this Agreement
will apply to, and will bind, the heirs, successors, executors, administrators and assignees of the
parties.
SECTION 12. SUBCONTRACTING.
Option B: Subcontracts Authorized: Notwithstanding Section 11 (Assignment) above, CITY
agrees that subcontractors may be used to complete the Services. The subcontractors authorized
by CITY to perform work on this Project are:
IMPRIVIA INC.
840 S Rancho Dr
Las Vegas, NV 89106
CONSULTANT shall be responsible for directing the work of any subcontractors and for any
compensation due to subcontractors. CITY assumes no responsibility whatsoever concerning
compensation of subcontractors. CONSULTANT shall be fully responsible to CITY for all acts
and omissions of subcontractors. CONSULTANT shall change or add subcontractors only with
the prior written approval of the City Manager or designee.
SECTION 13. PROJECT MANAGEMENT. CONSULTANT will assign Mark Schexnaildre
Email: mark.schexnaildre@epiuse.com as the CONSULTANT’s Project Manager to have
supervisory responsibility for the performance, progress, and execution of the Services and
represent CONSULTANT during the day-to-day performance of the Services. If circumstances
cause the substitution of the CONSULTANT’s Project Manager or any other of CONSULTANT’s
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 5 of 43
key personnel for any reason, the appointment of a substitute Project Manager and the assignment
of any key new or replacement personnel will be subject to the prior written approval of the CITY’s
Project Manager. CONSULTANT, at CITY’s request, shall promptly remove CONSULTANT
personnel who CITY finds do not perform the Services in an acceptable manner, are uncooperative,
or present a threat to the adequate or timely completion of the Services or a threat to the safety of
persons or property.
CITY’s Project Manager is Jitendra Kulkarni, Information Technology Department, 250 Hamilton
Avenue Palo Alto, CA, zipcode: 94301, Telephone: 650-690-6791. CITY’s Project Manager will
be CONSULTANT’s point of contact with respect to performance, progress and execution of the
Services. CITY may designate an alternate Project Manager from time to time.
SECTION 14. OWNERSHIP OF MATERIALS. All work product, including without
limitation, all writings, drawings, studies, sketches, photographs, plans, reports, specifications,
computations, models, recordings, data, documents, and other materials and copyright interests
developed under this Agreement, in any form or media, shall be and remain the exclusive property
of CITY without restriction or limitation upon their use. CONSULTANT agrees that all copyrights
which arise from creation of the work product pursuant to this Agreement are vested in CITY, and
CONSULTANT hereby waives and relinquishes all claims to copyright or other intellectual
property rights in favor of CITY. Neither CONSULTANT nor its subcontractors, if any, shall
make any of such work product available to any individual or organization without the prior written
approval of the City Manager or designee. CONSULTANT makes no representation of the
suitability of the work product for use in or application to circumstances not contemplated by the
Scope of Services. CONSULTANT shall not transfer any right, title or interest in, and
CONSULTANT shall continue to own exclusively, all intellectual property and proprietary
information owned by CONSULTANT, that (a) exists at the time Statement of Work or Task Order
is entered into or, (b) are developed entirely independently by CONSULTANT or its subsidiaries
or CONSULTANT’s holding company, at any time without any use, knowledge of, or reference
to, the CITY’s confidential information or other information obtained in connection with this
Agreement (“Consultant Property”). By incorporating such Consultant Property in Services,
CONSULTANT grants to the CITY a fully paid-up, non-exclusive, royalty-free, non-transferable
and non-sublicensable license to use the Consultant Property solely in connection with its use of
the Services, and to allow third parties to do the same to the extent necessary in connection with
the CITY’s use of the Services. CONSULTANT’s license to the CITY does not include the right
of the CITY or any third-party to de-compile, reverse engineer or otherwise use the Consultant
Property for any purpose other than those associated with or intended for in the applicable
Statement of Work or Task Order.
SECTION 15. AUDITS. CONSULTANT agrees to permit CITY and its authorized
representatives to audit, at any reasonable time during the term of this Agreement and for four (4)
years from the date of final payment, CONSULTANT’s records pertaining to matters covered by
this Agreement, including without limitation records demonstrating compliance with the
requirements of Section 10 (Independent Contractor). CONSULTANT further agrees to maintain
and retain accurate books and records in accordance with generally accepted accounting principles
for at least four (4) years after the expiration or earlier termination of this Agreement or the
completion of any audit hereunder, whichever is later. CITY shall give CONSULTANT prior
written notice of at least thirty (30) days for any planned audit.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 6 of 43
SECTION 16. INDEMNITY AND LIMITATION OF LIABILITY.
16.1. To the fullest extent permitted by law, CONSULTANT shall indemnify, defend
and hold harmless CITY, its Council members, officers, employees and agents (each an
“Indemnified Party”) from and against any and all third party demands, claims, or liability of any
nature, including death or injury to any person, property damage or any other loss, including all
costs and expenses of whatever nature including reasonable attorney’s fees, experts fees, court
costs and disbursements (“Claims”) resulting from, arising out of or in any manner related to
performance or nonperformance by CONSULTANT, its officers, employees, agents or contractors
under this Agreement, regardless of whether or not it is caused in part by an Indemnified Party.
16.2. Notwithstanding the above, nothing in this Section 16 shall be construed to
require CONSULTANT to indemnify an Indemnified Party from a Claim arising from the active
negligence or willful misconduct of an Indemnified Party that is not contributed to by any act of,
or by any omission to perform a duty imposed by law or agreement by, CONSULTANT, its
officers, employees, agents or contractors under this Agreement.
16.3. The acceptance of CONSULTANT’s Services and duties by CITY shall not
operate as a waiver of the right of indemnification. The provisions of this Section 16 shall survive
the expiration or early termination of this Agreement.
16.4 NOTWITHSTANDING SECTION 16, IN NO EVENT OR
CIRCUMSTANCE SHALL CONSULTANT’S TOTAL AGGREGATE LIABILITY TO CITY,
WHETHER ARISING OUT OF OR RELATING TO THIS AGREEMENT OR ANY
STATEMENT OF WORK FOR ANY CAUSE OR CLAIM WHATSOEVER, AND
REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT
(INCLUDING NEGLIGENCE AND STRICT LIABILITY), OR OTHERWISE, EXCEED THE
TWO TIMES (2X) THE CUMULATIVE AMOUNT PAID TO CONSULTANT BY CITY
UNDER THAT STATEMENT OF WORK OR TASK ORDER WHICH GAVE RISE TO, OR
UNDER WHICH THE CLAIM HAS ARISEN. IN NO EVENT OR CIRCUMSTANCE SHALL
EITHER PARTY BE LIABLE FOR ANY LOST PROFITS, LOST REVENUES, LOST DATA
OR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR
CONSEQUENTIAL DAMAGES WHETHER IN AN ACTION, IN CONTRACT OR TORT
(INCLUDING NEGLIGENCE AND STRICT LIABILITY), EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.
SECTION 17. WAIVERS. No waiver of a condition or nonperformance of an obligation under
this Agreement is effective unless it is in writing in accordance with Section 29.4 of this
Agreement. No delay or failure to require performance of any provision of this Agreement shall
constitute a waiver of that provision as to that or any other instance. Any waiver granted shall
apply solely to the specific instance expressly stated. No single or partial exercise of any right or
remedy will preclude any other or further exercise of any right or remedy.
SECTION 18. INSURANCE.
18.1. CONSULTANT, at its sole cost and expense, shall obtain and maintain, in
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 7 of 43
full force and effect during the term of this Agreement, the insurance coverage described in Exhibit
D, entitled “INSURANCE REQUIREMENTS”. CONSULTANT and its contractors, if any, shall
obtain a policy endorsement naming CITY as an additional insured under any general liability or
automobile policy or policies.
18.2. All insurance coverage required hereunder shall be provided through
carriers with AM Best’s Key Rating Guide ratings of A-:VII or higher which are licensed or
authorized to transact insurance business in the State of California. Any and all contractors of
CONSULTANT retained to perform Services under this Agreement will obtain and maintain, in
full force and effect during the term of this Agreement, identical insurance coverage, naming CITY
as an additional insured under such policies as required above.
18.3. Certificates evidencing such insurance shall be filed with CITY
concurrently with the execution of this Agreement. The certificates will be subject to the approval
of CITY’s Risk Manager and will contain an endorsement stating that the insurance is primary
coverage and will not be canceled, or materially reduced in coverage or limits, by the insurer except
after filing with the Purchasing Manager thirty (30) days’ prior written notice of the cancellation
or modification. If the insurer cancels or modifies the insurance and provides less than thirty (30)
days’ notice to CONSULTANT, CONSULTANT shall provide the Purchasing Manager written
notice of the cancellation or modification within two (2) business days of the CONSULTANT’s
receipt of such notice. CONSULTANT shall be responsible for ensuring that current certificates
evidencing the insurance are provided to CITY’s Chief Procurement Officer during the entire term
of this Agreement.
18.4. The procuring of such required policy or policies of insurance will not be
construed to limit CONSULTANT’s liability hereunder nor to fulfill the indemnification
provisions of this Agreement. Notwithstanding the policy or policies of insurance,
CONSULTANT will be obligated for the full and total amount of any damage, injury, or loss
caused by or directly arising as a result of the Services performed under this Agreement, including
such damage, injury, or loss arising after the Agreement is terminated or the term has expired.
SECTION 19. TERMINATION OR SUSPENSION OF AGREEMENT OR SERVICES.
19.1. The City Manager may suspend the performance of the Services, in whole
or in part, or terminate this Agreement, without cause, by giving fifteen (15) business days prior
written notice thereof to CONSULTANT. If CONSULTANT fails to perform any of its material
obligations under this Agreement, in addition to all other remedies provided under this Agreement
or at law, the City Manager may terminate this Agreement sooner upon written notice of
termination. Upon receipt of any notice of suspension or termination, CONSULTANT will
discontinue its performance of the Services on the effective date in the notice of suspension or
termination. A Party may terminate this Agreement if the other Party materially breaches any of
its obligations under this Agreement, by giving fifteen (15) business days prior written notice
thereof to the other Party. If that Party fails to cure such breach within the notice period, then the
non-breaching Party may immediately terminate this Agreement.
19.2. In event of suspension or termination, CONSULTANT will deliver to the
City Manager on or before the effective date in the notice of suspension or termination, any and
all work product, as detailed in Section 14 (Ownership of Materials), whether or not completed,
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 8 of 43
prepared by CONSULTANT or its contractors in the performance of this Agreement, if any, which
have been paid in full by CITY. Such work product is the property of CITY, as detailed in Section
14 (Ownership of Materials).
19.3. In event of suspension or termination, CONSULTANT will be paid for the
Services rendered and work products delivered to CITY in accordance with the Scope of Services
up to the effective date in the notice of suspension or termination; provided, however, if this
Agreement is suspended or terminated on account of a default by CONSULTANT, CITY will be
obligated to compensate CONSULTANT only for that portion of CONSULTANT’s Services
provided in material conformity with this Agreement as such determination is made by the City
Manager acting in the reasonable exercise of his/her discretion. The following Sections will
survive any expiration or termination of this Agreement: 14, 15, 16, 17, 19.2, 19.3, 19.4, 20, 25,
27, 28, 29 and 30.
19.4. No payment, partial payment, acceptance, or partial acceptance by CITY
will operate as a waiver on the part of CITY of any of its rights under this Agreement, unless made
in accordance with Section 17 (Waivers).
SECTION 20. NOTICES.
All notices hereunder will be given in writing and mailed, postage prepaid, by
certified mail, addressed as follows:
To CITY: Office of the City Clerk
City of Palo Alto
Post Office Box 10250
Palo Alto, CA 94303
With a copy to the Purchasing Manager
To CONSULTANT: Attention of the Project Manager
Address: 4780 Ashford Dunwoody Road, Suite 540#617, Atlanta, Georgia, 30338-
5504
With a copy to: legalcounsel@epiuse.com
CONSULTANT shall provide written notice to CITY of any change of address.
SECTION 21. CONFLICT OF INTEREST.
21.1. In executing this Agreement, CONSULTANT covenants that it presently
has no interest, and will not acquire any interest, direct or indirect, financial or otherwise, which
would conflict in any manner or degree with the performance of the Services.
21.2. CONSULTANT further covenants that, in the performance of this
Agreement, it will not employ subcontractors or other persons or parties having such an interest.
CONSULTANT certifies that no person who has or will have any financial interest under this
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 9 of 43
Agreement is an officer or employee of CITY; this provision will be interpreted in accordance
with the applicable provisions of the Palo Alto Municipal Code and the Government Code of the
State of California, as amended from time to time. CONSULTANT agrees to notify CITY if any
conflict arises.
21.3. If the CONSULTANT meets the definition of a “Consultant” as defined by
the Regulations of the Fair Political Practices Commission, CONSULTANT will file the
appropriate financial disclosure documents required by the Palo Alto Municipal Code and the
Political Reform Act of 1974, as amended from time to time.
SECTION 22. NONDISCRIMINATION; COMPLIANCE WITH ADA.
22.1. As set forth in Palo Alto Municipal Code Section 2.30.510, as amended
from time to time, CONSULTANT certifies that in the performance of this Agreement, it shall not
discriminate in the employment of any person due to that person’s race, skin color, gender, gender
identity, age, religion, disability, national origin, ancestry, sexual orientation, pregnancy, genetic
information or condition, housing status, marital status, familial status, weight or height of such
person. CONSULTANT acknowledges that it has read and understands the provisions of Section
2.30.510 of the Palo Alto Municipal Code relating to Nondiscrimination Requirements and the
penalties for violation thereof, and agrees to meet all requirements of Section 2.30.510 pertaining
to nondiscrimination in employment.
22.2. CONSULTANT understands and agrees that pursuant to the Americans
Disabilities Act (“ADA”), programs, services and other activities provided by a public entity to
the public, whether directly or through a contractor or subcontractor, are required to be accessible
to the disabled public. CONSULTANT will provide the Services specified in this Agreement in a
manner that complies with the ADA and any other applicable federal, state and local disability
rights laws and regulations, as amended from time to time. CONSULTANT will not discriminate
against persons with disabilities in the provision of services, benefits or activities provided under
this Agreement.
SECTION 23. ENVIRONMENTALLY PREFERRED PURCHASING AND ZERO
WASTE REQUIREMENTS. CONSULTANT shall comply with the CITY’s Environmentally
Preferred Purchasing policies which are available at CITY’s Purchasing Department, hereby
incorporated by reference and as amended from time to time. CONSULTANT shall comply with
waste reduction, reuse, recycling and disposal requirements of CITY’s Zero Waste Program. Zero
Waste best practices include, first, minimizing and reducing waste; second, reusing waste; and,
third, recycling or composting waste. In particular, CONSULTANT shall comply with the
following Zero Waste requirements:
(a) All printed materials provided by CONSULTANT to CITY generated from a
personal computer and printer including but not limited to, proposals, quotes, invoices, reports,
and public education materials, shall be double-sided and printed on a minimum of 30% or greater
post-consumer content paper, unless otherwise approved by CITY’s Project Manager. Any
submitted materials printed by a professional printing company shall be a minimum of 30% or
greater post-consumer material and printed with vegetable-based inks.
(b) Goods purchased by CONSULTANT on behalf of CITY shall be purchased in
accordance with CITY’s Environmental Purchasing Policy including but not limited to Extended
Producer Responsibility requirements for products and packaging. A copy of this policy is on file
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 10 of 43
at the Purchasing Department’s office.
(c) Reusable/returnable pallets shall be taken back by CONSULTANT, at no
additional cost to CITY, for reuse or recycling. CONSULTANT shall provide documentation from
the facility accepting the pallets to verify that pallets are not being disposed.
SECTION 24. COMPLIANCE WITH PALO ALTO MINIMUM WAGE ORDINANCE.
CONSULTANT shall comply with all requirements of the Palo Alto Municipal Code Chapter 4.62
(Citywide Minimum Wage), as amended from time to time. In particular, for any employee
otherwise entitled to the State minimum wage, who performs at least two (2) hours of work in a
calendar week within the geographic boundaries of the City, CONSULTANT shall pay such
employees no less than the minimum wage set forth in Palo Alto Municipal Code Section 4.62.030
for each hour worked within the geographic boundaries of the City of Palo Alto. In addition,
CONSULTANT shall post notices regarding the Palo Alto Minimum Wage Ordinance in
accordance with Palo Alto Municipal Code Section 4.62.060.
SECTION 25. NON-APPROPRIATION. This Agreement is subject to the fiscal provisions of
the Charter of the City of Palo Alto and the Palo Alto Municipal Code, as amended from time to
time. This Agreement will terminate without any penalty (a) at the end of any fiscal year in the
event that funds are not appropriated for the following fiscal year, or (b) at any time within a fiscal
year in the event that funds are only appropriated for a portion of the fiscal year and funds for this
Agreement are no longer available. This Section shall take precedence in the event of a conflict
with any other covenant, term, condition, or provision of this Agreement.
SECTION 26. PREVAILING WAGES AND DIR REGISTRATION FOR PUBLIC
WORKS CONTRACTS.
26.1. This Project is not subject to prevailing wages and related
requirements. CONSULTANT is not required to pay prevailing wages and meet related
requirements under the California Labor Code and California Code of Regulations in the
performance and implementation of the Project if the contract:
(1) is not a public works contract;
(2) is for a public works construction project of $25,000 or less, per California
Labor Code Sections 1782(d)(1), 1725.5(f) and 1773.3(j); or
(3) is for a public works alteration, demolition, repair, or maintenance project of
$15,000 or less, per California Labor Code Sections 1782(d)(1), 1725.5(f) and
1773.3(j).
SECTION 27. CLAIMS PROCEDURE FOR “9204 PUBLIC WORKS PROJECTS”. For
purposes of this Section 27, a “9204 Public Works Project” means the erection, construction,
alteration, repair, or improvement of any public structure, building, road, or other public
improvement of any kind. (Cal. Pub. Cont. Code § 9204.) Per California Public Contract Code
Section 9204, for Public Works Projects, certain claims procedures shall apply, as set forth in
Exhibit F, entitled “Claims for Public Contract Code Section 9204 Public Works Projects”.
This Project is not a 9204 Public Works Project.
SECTION 28. CONFIDENTIAL INFORMATION.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 11 of 43
28.1. In the performance of this Agreement, CONSULTANT may have access to
CITY’s Confidential Information (defined below). CONSULTANT will hold Confidential
Information in strict confidence, not disclose it to any third party, and will use it only for the
performance of its obligations to CITY under this Agreement and for no other purpose.
CONSULTANT will maintain reasonable and appropriate administrative, technical and physical
safeguards to ensure the security, confidentiality and integrity of the Confidential Information.
Notwithstanding the foregoing, CONSULTANT may disclose Confidential Information to its
employees, agents and subcontractors, if any, to the extent they have a need to know in order to
perform CONSULTANT’s obligations to CITY under this Agreement and for no other purpose,
provided that the CONSULTANT informs them of, and requires them to follow, the confidentiality
and security obligations of this Agreement.
28.2. “Confidential Information” means all data, information (including without
limitation “Personal Information” about a California resident as defined in Civil Code Section
1798 et seq., as amended from time to time) and materials, in any form or media, tangible or
intangible, provided or otherwise made available to CONSULTANT by CITY, directly or
indirectly, pursuant to this Agreement. Confidential Information excludes information that
CONSULTANT can show by appropriate documentation: (i) was publicly known at the time it
was provided or has subsequently become publicly known other than by a breach of this
Agreement; (ii) was rightfully in CONSULTANT’s possession free of any obligation of
confidence prior to receipt of Confidential Information; (iii) is rightfully obtained by
CONSULTANT from a third party without breach of any confidentiality obligation; (iv) is
independently developed by employees of CONSULTANT without any use of or access to the
Confidential Information; or (v) CONSULTANT has written consent to disclose signed by an
authorized representative of CITY.
28.3. Notwithstanding the foregoing, CONSULTANT may disclose Confidential
Information to the extent required by order of a court of competent jurisdiction or governmental
body, provided that CONSULTANT will notify CITY in writing of such order immediately upon
receipt and prior to any such disclosure (unless CONSULTANT is prohibited by law from doing
so), to give CITY an opportunity to oppose or otherwise respond to such order.
28.4. CONSULTANT will notify City promptly upon learning of any breach in
the security of its systems or unauthorized disclosure of, or access to, Confidential Information in
its possession or control, and if such Confidential Information consists of Personal Information,
CONSULTANT will provide information to CITY sufficient to meet the notice requirements of
Civil Code Section 1798 et seq., as applicable, as amended from time to time.
28.5. Prior to or upon termination or expiration of this Agreement,
CONSULTANT will honor any request from the CITY to return or securely destroy all copies of
Confidential Information. All Confidential Information is and will remain the property of the CITY
and nothing contained in this Agreement grants or confers any rights to such Confidential
Information on CONSULTANT.
28.6. If selected in Section 30 (Exhibits), this Agreement is also subject to the
terms and conditions of the Information Privacy Policy and Cybersecurity Terms and Conditions.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 12 of 43
SECTION 29. MISCELLANEOUS PROVISIONS.
29.1. This Agreement will be governed by California law, without regard to its
conflict of law provisions.
29.2. In the event that an action is brought, the parties agree that trial of such
action will be vested exclusively in the state courts of California in the County of Santa Clara,
State of California.
29.3. The prevailing party in any action brought to enforce the provisions of this
Agreement may recover its reasonable costs and attorneys’ fees expended in connection with that
action. The prevailing party shall be entitled to recover an amount equal to the fair market value
of legal services provided by attorneys employed by it as well as any attorneys’ fees paid to third
parties.
29.4. This Agreement, including all exhibits, constitutes the entire and integrated
agreement between the parties with respect to the subject matter of this Agreement, and supersedes
all prior agreements, negotiations, representations, statements and undertakings, either oral or
written. This Agreement may be amended only by a written instrument, which is signed by the
authorized representatives of the parties and approved as required under Palo Alto Municipal
Code, as amended from time to time.
29.5. If a court of competent jurisdiction finds or rules that any provision of this
Agreement is void or unenforceable, the unaffected provisions of this Agreement will remain in
full force and effect.
29.6. In the event of a conflict between the terms of this Agreement and the
exhibits hereto (per Section 30) or CONSULTANT’s proposal (if any), the Agreement shall
control. In the event of a conflict between the exhibits hereto and CONSULTANT’s proposal (if
any), the exhibits shall control.
29.7. The provisions of all checked boxes in this Agreement shall apply to this
Agreement; the provisions of any unchecked boxes shall not apply to this Agreement.
29.8. All section headings contained in this Agreement are for convenience and
reference only and are not intended to define or limit the scope of any provision of this Agreement.
29.9. This Agreement may be signed in multiple counterparts, which, when
executed by the authorized representatives of the parties, shall together constitute a single binding
agreement.
29.10 If, at any time during the term of a Statement of Work, the parties desire to
implement a change to a Statement of Work, the parties shall execute a change order describing
such change (the “Change Order”). In the event of a discrepancy between the Change Order and
any other part of this Agreement or the Statement of Work executed prior to such Change Order,
the terms of the Change Order shall govern. In no event shall a Statement of Work be amended,
enhanced, or otherwise modified except as set forth above. CONSULTANT will not be required
to perform under a Change Order prior to the execution by both parties of the applicable Change
Order. If the receiving party does not accept the Change Order in writing within ten (10) days, the
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 13 of 43
receiving party shall be deemed to have rejected the Change Order.
SECTION 30. EXHIBITS. Each of the following exhibits, if the check box for such exhibit is
selected below, is hereby attached and incorporated into this Agreement by reference as though
fully set forth herein:
EXHIBIT A: SCOPE OF SERVICES
EXHIBIT A-1 PROFESSIONAL SERVICES TASK ORDER
EXHIBIT B: SCHEDULE OF PERFORMANCE
EXHIBIT C: COMPENSATION
EXHIBIT C-1: SCHEDULE OF RATES
EXHIBIT D: INSURANCE REQUIREMENTS
EXHIBIT E: INFORMATION PRIVACY POLICY
EXHIBIT F: CYBERSECURITY TERMS AND CONDITIONS
THIS AGREEMENT IS NOT COMPLETE UNLESS ALL SELECTED EXHIBITS
ARE ATTACHED.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 14 of 43
CONTRACT No. C25193333
SIGNATURE PAGE
IN WITNESS WHEREOF, the parties hereto have by their duly authorized representatives
executed this Agreement as of the date first above written.
CITY OF PALO ALTO
____________________________
City Manager
APPROVED AS TO FORM:
__________________________
City Attorney or designee
EPI-USE AMERICA INC.
Officer 1
By: ________________________________
Name: ______________________________
Title: _______________________________
Officer 2
By: ________________________________
Name: ______________________________
Title: _______________________________
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
John Mcfadzean
Company Secretary
Vice President/Managing Director
Mark Schexnaildre
Professional Services
Rev. Oct 16,2024 Page 15 of 43
EXHIBIT A
SCOPE OF SERVICES
CONSULTANT shall provide the Services detailed in this Exhibit A, entitled “SCOPE OF
SERVICES”. Notwithstanding any provision herein to the contrary, CONSULTANT’s duties and
services described in this Scope of Services shall not include preparing or assisting CITY with any
portion of CITY’s preparation of a request for proposals, request for qualifications, or any other
solicitation regarding a subsequent or additional contract with CITY. CITY shall at all times retain
responsibility for public contracting, including with respect to any subsequent phase of this project.
CONSULTANT’s participation in the planning, discussions, or drawing of project plans or
specifications shall be limited to conceptual, preliminary, or initial plans or specifications.
CONSULTANT shall cooperate with CITY to ensure that all bidders for a subsequent contract on
any subsequent phase of this project have access to the same information, including all conceptual,
preliminary, or initial plans or specifications prepared by CONSULTANT pursuant to this Scope
of Services.
Introduction/Background
The City of Palo Alto (“CLIENT” or “CUSTOMER”) is requesting a quotation for implementation
of SAP Signavio Process Manager and Collaboration Hub. EPI-USE America, Inc. (EPI-USE) is
engaging its partner, IMPRIVA Inc. (IMPRIVA), to lead the engagement together with EPI-USE.
This Proposal is considered confidential by EPI-USE and IMPRIVA and City of Palo Alto.
Neither party shall use or disclose any technical, proprietary, or confidential data associated with
this proposal. The parties shall not disclose to others the contents of this Proposal without the
prior written consent of the disclosing party.
Client Request DEFINITIONS
“Production System” means a live SAP system used for running Customer’s internal business
operations and where Customer’s data is processed.
SCOPE OF SERVICES
• EPI-USE/IMPRIVA shall provide the implementation of SAP Signavio
(“Service/s”) to assist Customer with the setup and configuration of SAP Signavio
Process Manager and SAP Signavio Collaboration Hub. These Cloud Services
enable Customer to establish a business process repository, model business
processes and to collaborate across the organization to establish process
governance.
• EPI-USE/IMPRIVA shall provide the following Services:
o Setup and configure SAP Signavio Process Manager and SAP Signavio
Collaboration Hub.
o Deliver 2 days end user enablement of Business Process Model and
Notation (“BPMN”) 2.0 related process documentation in SAP Signavio
Process Manager and Collaboration Hub.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 16 of 43
o Transition into productive mode, deliver enablement, handover
governance and admin responsibilities.
Scope Conditions and Boundaries
• The following conditions and boundaries apply to the scope of Services:
o The kick-off call will not last longer than 2 hours.
o All business data in the system will be in English language only.
• This Service is based on a single instance of SAP Signavio workspace.
• EPI-USE/IMPRIVA only delivers a standard end user enablement for up to 10
participants (not customized to Customer needs).
• EPI-USE/IMPRIVA will use the standard authorization content provided with the
Cloud Services.
Prerequisites
Customer shall fulfil the following prerequisites before the start of the Services:
• Customer has a valid cloud subscription for SAP Signavio Process Manager and
SAP Signavio Collaboration Hub.
• Cloud Services are provisioned and fully functional.
• Customer grants authorized access to the SAP team, to the Customer SAP
Signavio workspace and any other resources as may be required for timely
execution of the Services.
• Identify administrator resource
Out of Scope
The following is out of scope, including without limitation:
• Ancillary or other services not expressly listed in this Scope Document .
• Subscription to any Cloud Services or purchase of SAP Software.
• Any development of custom code, updates, or upgrades to SAP products.
• Upgrade to the SAP solution components, operating systems, or database systems.
• Programs or content to migrate data from legacy systems.
• Data cleansing or data clean up.
• Verification and validation testing processes that may be required by regulatory,
industry or governmental requirements.
• Implementation of any solution or integration scope not explicitly mentioned in
this document.
• Customer specific authorizations roles and security concepts.
• Any changes required because of pre-existing Customer specific enhancements or
developments.
• Any changes required because of quality or values of Customer’s master and
transactional data.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 17 of 43
Approach
EPI-USE/IMPRIVA will follow a defined Services approach:
• Prepare and explore: The Service is formally initiated, and the schedule and
resources are agreed. The Customer completes the onboarding process to the
Cloud Services. Services kick-off is conducted to establish the Services delivery
team, collect priorities, issues, and opportunities.
• Realize: Cloud Services are setup and configured and documented, setup and
configuration are validated, and end users are trained.
• Deploy: Configured Cloud Services are made available for productive use, admin
and governance tasks are handed over to Customer
RACI
EPI-USE/IMPRIVA and Customer agree the following responsibility matrix of activities.
• Responsible (R): Charged with performing the activities. A mutually agreed
project plan may define further details at the work unit level.
• Accountable (A): Customer has overall accountability for its implementation and
all the activities identified below. Hence, Accountable (A) does not appear for the
activities below.
• Consulted (C): Provides input on how to perform the activity and supports the
execution of the activity. d) Informed (I): Provided with information.
Task EPI-USE/ IMPRIVA Client
Prepare
Provisioning of systems and Cloud Services C R (SAP)
Onboarding of SAP Signavio Process Manager
and SAP Signavio Collaboration Hub
R C
Initiate Services and mobilize resources R C
Conduct kick-off call R C
Realize
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 18 of 43
Setup and configuration of SAP Signavio
Process Manager and SAP Signavio
R C
Validation of setup and configuration C R
Conduct end user enablement R C
Deploy
Handover admin and governance tasks to R C
Services closure R I
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 19 of 43
Resources
EPI-USE/IMPRIVA Team
The EPI-USE/IMPRIVA team includes the following key roles:
• Client Manager
• Sr. Solution Architect
• Business Process Management Consultant(s)
• EPI-USE/IMPRIVA may staff a single resource to serve multiple roles, or multiple
resources to serve a single role.
• Services are delivered remotely (onsite training can be an option).
Customer Team
The Customer team includes the following roles:
• Business Lead / Project Manager: Acts as a business lead from Customer side.
• Supports the Services with input around business objectives and scope – plans and
manages project activities on the Customer side.
• Business Subject Matter Experts: Signavio Core Team / Process Expert (Business
Analyst): Understands business context and has in-depth knowledge of process.
Available for requirements definition and rollout to user community. Creating,
managing, and improving business processes with SAP Signavio. Users consist of
process analysts and stakeholders collaborating on processes.
• IT Functional Lead & Technology Consultant: System Expert, SAP Basis
Specialist, System.
• Administrator: Technology representative from Customer side. Signavio
administrator. Supports the Services with input concerning technical requirements
and environment.
In cases where it’s necessary to assign multiple resources to a single role, Customer shall
clearly identify the responsibilities of each resource. Customer is expected to staff the
roles per the time allocations recommended by EPI-USE/IMPRIVA.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 20 of 43
Deliverables
Approval upon completion when completion criteria are met.
Deliverable Description Completion
Criteria
Role(s)
Cloud Services
set up
Manager, SAP Signavio Collaboration Hub &
to include:
• Setup User Access.
• Create Folders.
• Setup dictionary.
• Standards & Conventions.
• Activate model types.
• Activate syntax checks.
• Governance Workflow.
Handover of
configured
Cloud
Services
Sr.
Technical
Lead
Sr.
Process
Architect
End user
enablement
include:
• Discovery workshops.
• Build and Configure solution.
• Process model creation in SAP
Signavio. (BPMN Best Practice)
o 20 processes of up to 10 to 20
process steps
• Integration discovery (ALM, EA tools,
dashboards…)
• Leverage multiple data sources: KB
Articles, Visio, Excel Spreadsheets,
Stickies/Photos…
• Publish to Collaboration Hub.
• Reporting (Basic – Out of Box).
• Training.
• Standards & Conventions
documentation.
Enablement
sessions are
conducted
Sr.
Technical
Lead
Sr.
Process
Architect
Process
Architect
Administrator •
Enablement
sessions are
Sr.
Technical
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 21 of 43
•
• Data dictionary management.
• Attribution.
BPM Center of
Excellence
• Discuss the benefits and how to
implement them.
o Centralized Process Repository.
o Collaboration Hub.
o Governance.
o Reporting.
o Staffing.
Organizational
Enablement
Technical
Lead
Sr.
Process
Architect
Documentation
• User Groups Rights.
• Business Process Hierarchy.
• Data Dictionary.
• Standards & Conventions.
• Model Types.
• Syntax Checks.
• Custom Attributes.
• Governance Workflow.
Training document(s) to include:
• Administrator Training.
o Introduction to Signavio:
Overview of Signavio's features,
interface, and capabilities.
o Process Modeling Basics:
Training on how to create and
modify process models using
BPMN (Business Process Model
and Notation).
o Collaboration Hub Usage:
Instructions on how to navigate
and use the Collaboration Hub
for sharing and discussing
process models.
o Process Documentation:
Techniques for documenting
processes, including attaching
Electronic
Document(s)
Sr.
Technical
Lead
Sr.
Process
Architect
Process
Architect
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 22 of 43
managing versions.
o Workflow Design and
Execution: Guidance on setting
up workflows, defining roles,
and executing processes within
the system.
o Data and Analytics: Training on
how to use Signavio's analytics
features to gain insights into
process performance and
efficiency.
o Customizing the Signavio
Environment: Tailoring the
Signavio environment to specific
organizational needs, including
custom attributes and report
configurations.
o User Management and Access
Control: Setting up user roles,
permissions, and access control
within Signavio.
o Best Practices for Process
Management: Strategies and tips
for effective process
management and continuous
improvement using Signavio.
o Updates and New Features:
Regular updates on new features
and enhancements in the
Signavio suite.
• End-User Training.
o Process Modeling Basics:
Training on how to create and
modify process models using
BPMN (Business Process Model
and Notation) and Quick Model.
o Collaboration Hub Usage:
Instructions on how to navigate
and use the Collaboration Hub
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 23 of 43
process models.
o Process Documentation:
Techniques for documenting
processes, including attaching
files, adding descriptions, and
managing versions.
o Generate BPMN models from
SAP Signavio Process
Intelligence
o Best Practices for Process
Management: Strategies and tips
for effective process
management and continuous
improvement using Signavio.
o Updates and New Features:
Regular updates on new features
and enhancements in the
Signavio suite.
Copies of presentations used during the project.
Description (LeanIX)
Cloud Services
Setup
• Methodology, standards & conventions,
and configuration of the following
factsheets: Drive workshops with other
stakeholders to come up with the
following and their definitions.
o Business Capabilities
o Applications
o IT Components
o Integrations
o
End User
Enablement
include:
• Operationalize data entry, review
governance processes and optimize role-
based edit standards (Viewer, Member,
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 24 of 43
• Create change control process to:
o Ensure information is current
and accurate.
o Ensure new IT components are
added to inventory (LeanIX,
Logic Monitor & CMDB).
• Generate heatmaps to support strategic
planning and analysis.
• Define and review roadmaps in to
understand dependencies, drilldowns,
etc.
o Two towers (compute and
storage) – heat maps &
roadmaps to demonstrate in
LeanIX
o
Administrator
Enablement • User setup and access.
• Fact sheet configuration.
Documentation All relevant guides and presentations.
Completion Criteria
The method(s) of determining the completion of each deliverable will be the following:
Unless otherwise agreed to, in writing, between the parties, Client shall have 10 days from
receipt of each deliverable to determine whether such deliverable substantially conforms to the
applicable requirements and is free of any defects. “Substantially” conforms, means that EPI-
USE/IMPRIVA has implemented the deliverable in such a way that it meets the requirements set
forth in this Proposal and any subsequent requirements document e.g., reporting. If Client does
not accept or reject in writing as set forth above, the service and/or deliverable will be considered
accepted by Client.
If Client rejects a deliverable, Client shall clearly state in writing to EPI-USE/IMPRIVA the
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 25 of 43
specific defect of the deliverable. Within five (5) business days of any notice of rejection, EPI-
USE/IMPRIVA shall present a corrective plan of action to Client. EPI-USE/IMPRIVA shall
then make the corrections at no charge to Client and EPI-USE/IMPRIVA shall resubmit the
corrected service or deliverable to Client. Deliverables are tracked via a project plan and status is
communicated via a weekly status report.
Client Responsibilities:
• Customer shall cooperate with EPI-USE/IMPRIVA in good faith so that EPI-
USE/IMPRIVA can deliver the Services. Customer’s failure to meet or fulfil any of the specified
responsibilities or requirements in this Agreement, can result in a delay of the provision of the
Services or an increase of fees due.
• Customer is responsible for the overall management of Customer’s project and controls
the project realization, process, scope, costs, Customer resources and targeted solutions.
• Customer shall staff the listed Customer team roles with the requisite skills and
knowledge to complete Customer activities.
• Customer should make reasonable efforts to minimize the change in personnel
throughout the duration of the Services.
• If Customer involves third-parties, Customer shall manage any third-party resources and
be responsible for their acts and omissions.
• Customer shall supply EPI-USE/IMPRIVA with the names and contact information of
key Customer and third-party resources.
• Customer shall be fully responsible for organizational change management of all affected
departments.
• Customer shall fulfill and provide listed prerequisites required to perform the Services.
• Customer shall provide technical advice regarding any third-party systems accessible to
the SAP team.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 26 of 43
• Customer shall comply with any relevant governmental and regulatory requirements.
Assumptions
• The Services are provided based on the current release version of the Cloud Services that
are generally available at the start of the Services delivery. Unless SAP’s release notes state
otherwise, SAP provides at least 1 quarterly update for general availability. If an update is made
generally available during the performance of the Services, any additional planning or
configuration required to support the updated release is not included in the Services.
• If not otherwise agreed, the project language and corresponding documentation is
English. Deliverables will be delivered in English only.
• Services are based on a predefined scope and delivery model. In performing the Services,
SAP a) May utilize accelerators.
• Will follow applicable parts of the SAP Activate standard implementation methodology.
• May use software and tools (Tools) for which all rights of authorship remain with EPI-
USE/IMPRIVA.
• This will be a time and materials engagement. EPI-USE/IMPRIVA shall invoice Client
upon delivery with terms of Net 30.
Change Procedure
Significant changes to the Scope of Services and/or tasks defined in this Proposal shall be
documented in a Change Order Request. Neither party shall be obligated to perform any duties
under any Change Request that has not been duly authorized and executed by each of the parties.
Additional Terms and Conditions
Publicity: EPI-USE/IMPRIVA may not use the name or trademarks of Client in any
advertisement or press release without prior written consent of Client.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 27 of 43
EXHIBIT A-1
PROFESSIONAL SERVICES TASK ORDER
CONSULTANT shall perform the Services detailed below in accordance with all the terms and
conditions of the Agreement referenced in Item 1A below. All exhibits referenced in Item 8 are
incorporated into this Task Order by this reference. CONSULTANT shall furnish the necessary facilities,
professional, technical and supporting personnel required by this Task Order as described below.
CONTRACT NO.
OR PURCHASE ORDER REQUISITION NO. (AS APPLICABLE)
1A. MASTER AGREEMENT NO. (MAY BE SAME AS CONTRACT / P.O. NO. ABOVE):
1B. TASK ORDER NO.:
2. CONSULTANT NAME:
3. PERIOD OF PERFORMANCE: START: COMPLETION:
4 TOTAL TASK ORDER PRICE: $__________________
BALANCE REMAINING IN MASTER AGREEMENT/CONTRACT $_______________
5. BUDGET CODE_______________
COST CENTER________________
COST ELEMENT______________
WBS/CIP__________
PHASE__________
6. CITY PROJECT MANAGER’S NAME & DEPARTMENT:_____________________________________
7. DESCRIPTION OF SCOPE OF SERVICES (Attachment A)
MUST INCLUDE:
SERVICES AND DELIVERABLES TO BE PROVIDED
SCHEDULE OF PERFORMANCE
MAXIMUM COMPENSATION AMOUNT AND RATE SCHEDULE (as applicable)
REIMBURSABLE EXPENSES, if any (with “not to exceed” amount)
8. ATTACHMENTS: A: Task Order Scope of Services B (if any): _____________________________
I hereby authorize the performance of the
work described in this Task Order.
APPROVED:
CITY OF PALO ALTO
BY:____________________________________
Name __________________________________
Title___________________________________
Date ___________________________________
Task Order and warrant that I have authority to
sign on behalf of Consultant.
APPROVED:
COMPANY NAME: ______________________
BY:____________________________________
Name __________________________________
Title___________________________________
Date ___________________________________
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 28 of 43
EXHIBIT B
SCHEDULE OF PERFORMANCE
CONSULTANT shall perform the Services so as to complete each milestone within the number
of days/weeks specified below. The time to complete each milestone may be increased or
decreased by mutual written agreement of the Project Managers for CONSULTANT and CITY so
long as all work is completed within the term of the Agreement. CONSULTANT shall provide a
detailed schedule of work consistent with the schedule below within 2 weeks of receipt of the
notice to proceed (“NTP”) from the CITY.
Milestones Number of Days/Weeks (as specified below)
1. Project Planning/Onboarding 1 Week
2. Discovery Workshops 4 Weeks
3. Standards & Conventions/FactSheets 2/90 Minute Workshops
4. Process Modeling/LeanIX Configuration 2/60 Minute Workshops
5. Rollout & Training 90 Minute Training Class (number of classes
TBD until team is identified. Admin and Users
Optional Schedule of Performance Provision for On-Call or Additional Services Agreements.
(This provision only applies if checked and only applies to on-call agreements per Section 1 or
agreements with Additional Services per Section 4.)
The schedule of performance shall be as provided in the approved Task Order, as detailed in
Section 1 (Scope of Services) in the case of on-call Services, or as detailed in Section 4 in the case
of Additional Services, provided in all cases that the schedule of performance shall fall within the
term as provided in Section 2 (Term) of this Agreement.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 29 of 43
EXHIBIT C
COMPENSATION
CITY agrees to compensate CONSULTANT for the Services performed in accordance with the
terms and conditions of this Agreement, including Services, any specified reimbursable expenses,
and Additional Services (if any, per Section 4 of the Agreement), based on the hourly rate schedule
attached as Exhibit C-1.
The compensation to be paid to CONSULTANT under this Agreement for all Services, any
specified reimbursable expenses, and Additional Services (if any, per Section 4), shall not exceed
the amount(s) stated in Section 4 of this Agreement. CONSULTANT agrees to complete all
Services, any specified reimbursable expenses, and Additional Services (if any, per Section 4),
within this/these amount(s). Any work performed or expenses incurred for which payment would
result in a total exceeding the maximum amount of compensation set forth in this Agreement shall
be at no cost to the CITY.
REIMBURSABLE EXPENSES
CONSULTANT’S ordinary business expenses, such as administrative, overhead,
administrative support time/overtime, information systems, software and hardware,
photocopying, telecommunications (telephone, internet), in-house printing, insurance and
other ordinary business expenses, are included within the scope of payment for Services and
are not reimbursable expenses hereunder.
Reimbursable expenses, if any are specified as reimbursable under this section, will be
reimbursed at actual cost. The expenses (by type, e.g. travel) for which CONSULTANT will
be reimbursed are: NONE up to the not-to-exceed amount of: $0.00.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 30 of 43
EXHIBIT C-1
SCHEDULE OF RATES
CONSULTANT’s schedule of rates is as follows:
Role Rate Hours
Client Manager 200 32 6,400
Sr. Solution/Process Architect N/C 160 0
Sr. Process Architect 175 320 56,000
Process Architect 160 320 51,200
Associate Process Architect 100 320 32,000
Sr. Enterprise Architect (LeanIX) 175 320 56,000
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 31 of 43
EXHIBIT D
INSURANCE REQUIREMENTS
CONSULTANTS TO THE CITY OF PALO ALTO (CITY), AT THEIR SOLE EXPENSE, SHALL FOR THE TERM OF THE
CONTRACT OBTAIN AND MAINTAIN INSURANCE IN THE AMOUNTS FOR THE COVERAGE SPECIFIED BELOW,
AFFORDED BY COMPANIES WITH AM BEST’S KEY RATING OF A-:VII, OR HIGHER, LICENSED OR
AUTHORIZED TO TRANSACT INSURANCE BUSINESS IN THE STATE OF CALIFORNIA.
AWARD IS CONTINGENT ON COMPLIANCE WITH CITY’S INSURANCE REQUIREMENTS AS SPECIFIED HEREIN.
REQUIRED TYPE OF COVERAGE REQUIREMENT
MINIMUM LIMITS
EACH
OCCURRENCE AGGREGATE
YES
YES
WORKER’S COMPENSATION
EMPLOYER’S LIABILITY
STATUTORY
STATUTORY STATUTORY STATUTORY
YES
GENERAL LIABILITY, INCLUDING
PERSONAL INJURY, PROPERTY
DAMAGE CONTRACTUAL, AND
BODILY INJURY
PROPERTY DAMAGE
BODILY INJURY & PROPERTY
DAMAGE COMBINED.
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
YES
AUTOMOBILE LIABILITY,
INCLUDING ALL OWNED, HIRED,
NON-OWNED
BODILY INJURY
- EACH PERSON
- EACH OCCURRENCE
PROPERTY DAMAGE
BODILY INJURY AND PROPERTY
DAMAGE, COMBINED
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
$1,000,000
YES
PROFESSIONAL LIABILITY,
INCLUDING, ERRORS AND
OMISSIONS, MALPRACTICE (WHEN
APPLICABLE), AND NEGLIGENT
PERFORMANCE
ALL DAMAGES $2,000,000
YES
THE CITY OF PALO ALTO IS TO BE NAMED AS AN ADDITIONAL INSURED: CONSULTANT, AT ITS SOLE COST
AND EXPENSE, SHALL OBTAIN AND MAINTAIN, IN FULL FORCE AND EFFECT THROUGHOUT THE ENTIRE TERM
OF ANY RESULTANT AGREEMENT, THE INSURANCE COVERAGE HEREIN DESCRIBED, INSURING NOT ONLY
CONSULTANT AND ITS SUBCONSULTANTS, IF ANY, BUT ALSO, WITH
COMPENSATION, EMPLOYER’S LIABILITY AND PROFESSIONAL INSURANCE, NAMING AS ADDITIONAL
INSUREDS CITY, ITS COUNCIL MEMBERS, OFFICERS, AGENTS, AND EMPLOYEES.
I. INSURANCE COVERAGE MUST INCLUDE:
A. A CONTRACTUAL LIABILITY ENDORSEMENT PROVIDING INSURANCE COVERAGE FOR
CONSULTANT’S AGREEMENT TO INDEMNIFY CITY.
II. THE CONSULTANT MUST SUBMIT CERTIFICATES(S) OF INSURANCE EVIDENCING REQUIRED COVERAGE
AT THE FOLLOWING EMAIL: PURCHASINGSUPPORT@CITYOFPALOALTO.ORG
III. ENDORSEMENT PROVISIONS WITH RESPECT TO THE INSURANCE AFFORDED TO ADDITIONAL
INSUREDS:
A. PRIMARY COVERAGE
WITH RESPECT TO CLAIMS ARISING OUT OF THE OPERATIONS OF THE NAMED INSURED,
INSURANCE AS AFFORDED BY THIS POLICY IS PRIMARY AND IS NOT ADDITIONAL TO OR
CONTRIBUTING WITH ANY OTHER INSURANCE CARRIED BY OR FOR THE BENEFIT OF THE
ADDITIONAL INSUREDS.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 32 of 43
B. CROSS LIABILITY
THE NAMING OF MORE THAN ONE PERSON, FIRM, OR CORPORATION AS INSUREDS UNDER
THE POLICY SHALL NOT, FOR THAT REASON ALONE, EXTINGUISH ANY RIGHTS OF THE
INSURED AGAINST ANOTHER, BUT THIS ENDORSEMENT, AND THE NAMING OF MULTIPLE
INSUREDS, SHALL NOT INCREASE THE TOTAL LIABILITY OF THE COMPANY UNDER THIS
POLICY.
C. NOTICE OF CANCELLATION
1. IF THE POLICY IS CANCELED BEFORE ITS EXPIRATION DATE FOR ANY REASON
OTHER THAN THE NON-PAYMENT OF PREMIUM, THE CONSULTANT SHALL PROVIDE
CITY AT LEAST A THIRTY (30) DAY WRITTEN NOTICE BEFORE THE EFFECTIVE DATE
OF CANCELLATION.
2. IF THE POLICY IS CANCELED BEFORE ITS EXPIRATION DATE FOR THE NON-PAYMENT
OF PREMIUM, THE CONSULTANT SHALL PROVIDE CITY AT LEAST A TEN (10) DAY
WRITTEN NOTICE BEFORE THE EFFECTIVE DATE OF CANCELLATION.
EVIDENCE OF INSURANCE AND OTHER RELATED NOTICES ARE REQUIRED TO BE
FILED WITH THE CITY OF PALO ALTO SENT TO THE FOLLOWING EMAIL:
PURCHASINGSUPPORT@CITYOFPALOALTO.ORG
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 33 of 43
EXHIBIT E
INFORMATION OF PRIVACY
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 34 of 43
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 35 of 43
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 36 of 43
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 37 of 43
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 38 of 43
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 39 of 43
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 40 of 43
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 41 of 43
EXHIBIT F
CYBERSECURITY TERMS AND CONDITIONS
In order to assure the privacy and security of the personal information of the City's customers and
people who do business with the City, including, without limitation, vendors, utility customers,
library patrons, and other individuals and companies, who are required to share such information
with the City, as a condition of receiving services from the City or selling goods and services to
the City, including, without limitation, the Software as a Service services provider (the
"Consultant") and its subcontractors, if any, including, without limitation, any Information
Technology ("IT") infrastructure services provider, shall design, install, provide, and maintain a
secure IT environment, described below, while it renders and performs the Services and furnishes
goods, if any, described in the Statement of Work, Exhibit B, to the extent any scope of work
implicates the confidentiality and privacy of the personal information of the City's customers. The
Consultant shall fulfill the data and information security requirements (the "Requirements") set
forth in Part A below.
A "secure IT environment" includes (a) the IT infrastructure, by which the Services are provided
to the City, including connection to the City's IT systems; (b) the Consultant's operations and
maintenance processes needed to support the environment, including disaster recovery and
business continuity planning; and (c) the IT infrastructure performance monitoring services to
ensure a secure and reliable environment and service availability to the City. "IT infrastructure"
refers to the integrated framework, including, without limitation, data centers, computers, and
database management devices, upon which digital networks operate.
In the event that, after the Effective Date, the Consultant reasonably determines that it cannot fulfill
the Requirements, the Consultant shall promptly inform the City of its determination and submit,
in writing, one or more alternate countermeasure options to the Requirements (the "Alternate
Requirements" as set forth in Part B), which may be accepted or rejected in the reasonable
satisfaction of the Information Security Manager (the "ISM").
Part A. Requirements:
The Consultant shall at all times during the term of any contract between the City and the
Consultant:
(a) Appoint or designate an employee, preferably an executive officer, as the security liaison
to the City with respect to the Services to be performed under this Agreement.
(b) Comply with the City's Information Privacy Policy:
(c) Have adopted and implemented information security and privacy policies that are
documented, are accessible to the City, and conform to ISO 27001/2 – Information Security
Management Systems (ISMS) Standards. See the following:
http://www.iso.org/iso/home/store/catalogue_tc/catalogue_detail.htm?csnumber=42103
http://www.iso.org/iso/iso_catalogue/catalogue_tc/catalogue_detail.htm?csnumber=50297
(d) Conduct routine data and information security compliance training of its personnel that is
appropriate to their role.
(e) Develop and maintain detailed documentation of the IT infrastructure, including software
versions and patch levels.
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 42 of 43
(f) Develop an independently verifiable process, consistent with industry standards, for
performing professional and criminal background checks of its employees that (1) would
permit verification of employees' personal identity and employment status, and (2) would
enable the immediate denial of access to the City's confidential data and information by
any of its employees who no longer would require access to that information or who are
terminated.
(g) Provide a list of IT infrastructure components in order to verify whether the Consultant
has met or has failed to meet any objective terms and conditions.
(h) Implement access accountability (identification and authentication) architecture and
support role-based access control ("RBAC") and segregation of duties ("SoD")
mechanisms for all personnel, systems, and Software used to provide the Services.
"RBAC" refers to a computer systems security approach to restricting access only to
authorized users. "SoD" is an approach that would require more than one individual to
complete a security task in order to promote the detection and prevention of fraud and
errors.
(i) Assist the City in undertaking annually an assessment to assure that: (1) all elements of the
Services' environment design and deployment are known to the City, and (2) it has
implemented measures in accordance with industry best practices applicable to secure
coding and secure IT architecture.
(j) Provide and maintain secure intersystem communication paths that would ensure the
confidentiality, integrity, and availability of the City's information.
(k) Deploy and maintain IT system upgrades, patches and configurations conforming to
current patch and/or release levels by not later than one (1) week after its date of release.
Emergency security patches must be installed within 24 hours after its date of release.
(l) Provide for the timely detection of, response to, and the reporting of security incidents,
including on-going incident monitoring with logging.
(m) Notify the City within twenty four (24) hours of detecting a security incident that results
in the unauthorized access to or the misuse of the City's confidential data and information.
(n) Inform the City that any third party service provider(s) meet(s) all of the Requirements.
(o) Perform security self-audits on a regular basis and not less frequently than on a quarterly
basis, and provide the required summary reports of those self-audits to the ISM on the
annual anniversary date or any other date agreed to by the Parties.
(p) Accommodate, as practicable, and upon reasonable prior notice by the City, the City's
performance of random site security audits at the Consultant's site(s), including the site(s)
of a third-party service provider(s), as applicable. The scope of these audits will extend to
the Consultant's and its third-party service provider(s)' awareness of security policies and
practices, systems configurations, access authentication and authorization, and incident
detection and response.
(q) Cooperate with the City to ensure that to the extent required by applicable laws, rules and
regulations, and the Confidential Information will be accessible only by the Consultant and
any authorized third-party service provider's personnel.
(r) Perform regular, reliable secured backups of all data needed to maximize the availability
of the Services. Adequately encrypt the City of Palo Alto's data, during the operational
process, hosted at rest, and the backup stage at the Vendors' environment (including
Vendor's contracting organization's environment).
(s) Maintain records relating to the Services for a period of three (3) years after the expiration
or earlier termination of this Agreement and in a mutually agreeable storage medium.
Within thirty (30) days after the effective date of expiration or earlier termination of this
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23
Professional Services
Rev. Oct 16,2024 Page 43 of 43
Agreement, all of those records relating to the performance of the Services shall be
provided to the ISM.
(t) Maintain the Confidential Information in accordance with applicable federal, state, and
local data and information privacy laws, rules, and regulations.
(u) Encrypt the Confidential Information before delivering the same by electronic mail to the
City and or any authorized recipient.
(v) Provide Network Layer IP filtering services to allow access only from the City of Palo
Alto's IP address to the Vendor environment (primarily hosted for the City of Palo Alto).
(w) Offer a robust disaster recovery and business continuity (DR-BCP) solutions to the City
for the systems and services the Vendor provides to the City.
(x) Provide and support Single Sign-on (SSO) and Multifactor Authentication (MFA)
solutions for authentication and authorization services from the "City's environment to the
Vendor's environment," and Vendor's environment to the Vendor's cloud services/hosted
environment." The Vendor shall allow two employees of the City to have superuser and
super-admin access to the Vendor's IT environment, and a cloud-hosted IT environment
belongs to the City.
(y) Unless otherwise addressed in the Agreement, shall not hold the City liable for any direct,
indirect or punitive damages whatsoever including, without limitation, damages for loss of
use, data or profits, arising out of or in any way connected with the City's IT environment,
including, without limitation, IT infrastructure communications.
(z) The Vendor must provide evidence of valid cyber liability insurance policy per the City’s
EXHIBIT “D” INSURANCE REQUIREMENTS.
Part B. Alternate Requirements:
Docusign Envelope ID: 132DB8D3-CD33-4C9E-B4F7-100E15377E23