riskCanvas Technical Support Policy
Contact Us

riskCanvas Technical Support Policy

Introduction
The following technical support services (“Technical Support”) shall be provided by riskCanvas Holdings, LLC (collectively “riskCanvas,” “we,” “us,” or “our”) as part of its customer’s (collectively “Customer,” “You,” or “Your”) paid annual subscription to Technical Support for the riskCanvas product (“Product”), subject to the terms and conditions of Your applicable agreements with riskCanvas.

riskCanvas Hosted Services
For customers who have contracted with riskCanvas for Hosted Services, we leverage server monitoring software to measure server-side error rates, ping results, web server tests, TCP port tests, and website tests. At the end of each year, we will calculate the total “downtime” periods for each customer instance. Our Service Level Agreement (SLA) for Hosted Services is 99.9% annual uptime. Certain events will not be counted as downtime:

  • Planned upgrades and releases which are coordinated with Customer
  • Outages caused by Customer behavior
  • External network problems outside of our control

If the total agreed upon annual uptime is less than 99.9%, We will provide Service Credits to the Customer.

Support Contact
A Support Contact is an individual, with an assigned email and phone number, whom You have designated as a point-of-contact with riskCanvas’ Technical Support personnel. Only Support Contacts may contact riskCanvas Technical Support. Support Contacts will maintain technical ownership of all issues escalated into riskCanvas Technical Support. riskCanvas will engage in all case-related communication with these named individuals. Up to two Support Contacts (a primary contact and a secondary contact) may contact riskCanvas Technical Support. It is Customer’s responsibility to advise riskCanvas Technical Support when You desire to change a Support Contact.

Prior to Logging a Case
Before logging a case with riskCanvas Technical Support, the Support Contact should follow the steps below:

1. Verify that the issue is with the Products and not third-party software.

2. Verify that the system is using a currently supported version of the Products.

3. Attempt to reproduce the issue and determine if it occurs consistently.

4. Determine if the issue occurs on a local machine or on multiple machines in the customer environment.

Engaging Technical Support
When You have an issue that you cannot solve on Your own or by using any of the self-service resources provided, Your Support Contact may contact riskCanvas Technical Support to log a case for their issue via email, telephone, or the online case logging portal. You shall have direct access 24 hours per day, 7 days per week, and 365 days per year, excluding scheduled or unscheduled maintenance periods, to riskCanvas’ technical support portal to report any service issues. In the event of a failure in the case of SL1 or SL2 (as described below), riskCanvas will promptly apply additional technical resources to the issues.

Technical Support
Technical support issues are grouped into the following four categories, in each case pertaining to issues that are caused by and in the sole control of riskCanvas.

Severity Level Definitions
SL1
Severe problem with the Products resulting in complete work stoppage for a large number of eg. users. No alternatives or work-around identified and work cannot continue. example: All users see an error message from the application when trying to access the application.

SL2
Critical issue which interferes with a major function of the Products or causes major usability concerns. example: riskCanvas Global Search feature is not functioning and therefore there is no way to lookup account details (no workaround available).

SL3
Issue which interferes with a minor function of the Products but an acceptable workaround is in place. example:riskCanvas productivity dashboard not loading correctly. Managers forced to run custom report and export to excel to view case assignment metrics.

SL4
Cosmetic issues such as typographical errors, misaligned text, or incorrect images. example: Line of text is wrapping to a new line and is causing unusual spacing within the riskCanvas interface.

Reporting & Responses
riskCanvas will respond to logged cases from its customers within the response times below:
Severity Level Target Response Times*

SL1 – 1 hour
SL2 – 4 hours
SL3 – 1 business day
SL4 – 5 business days

*Response is a real-time response from a riskCanvas representative to begin the process of troubleshooting the issue.

riskCanvas shall provide an update by telephone or email to a Support Contact every two (2) hours in the case of SL1 problems and every four (4) hours in the case of SL2 problems. Updates will not be required for SL3 or SL4 issues. When Customer logs SL1 and/or SL2 issues, Customer staff must be available to work full-time throughout the resolution process with riskCanvas to resolve the issue(s). riskCanvas shall not be responsible for providing regular updates (as noted above) and resolution may be delayed if a customer does not have staff available to provide timely information and support. You must be willing to involve the level of staff needed to resolve the issue effectively and be available to assist riskCanvas with tasks such as testing, sending appropriate information, and implementing suggestions.

Service Credits for Technical Support Response Times
We will use commercially reasonable efforts to meet or exceed the Target Response Times listed above. In the event riskCanvas does not meet the Target Response Times, You will be eligible to receive a one-time Service Credit in the amount of 5% of the total monthly Technical Support Subscription fee (excluding one-time payments) for each instance in which riskCanvas failed to meet the Target Response Time. Service Credits will only apply to future invoices relating to the Product or associated Technical Support. To receive a Service Credit, you must submit a claim by sending an email to [email protected] within 30 days of an incident occurring.

Service Credits for Missing Hosted Services SLA
We will use commercially reasonable efforts to meet or exceed the SLA listed above. In the event that the total annual uptime does not meet 99.9%, you will be eligible to receive a one-time Service Credit in the amount of 5% of the total annual Hosted Services Fees (excluding one-time payments) for every one-tenth percentage point that the SLA has been missed. The difference between the SLA and the actual uptime will be rounded up to the nearest whole one-tenth of a percentage point (eg if the total uptime for the year is 99.76, (.14 off of the SLA), this will be rounded to .2% deviation from the SLA and qualify for a 10% service credit). Service Credits will only apply to future purchases of the Products or associated Technical Support. To receive a Service Credit, you must submit a claim by sending an email to [email protected] within 30 days of an incident occurring.

Service Credit Exclusion
Service credits are not available for any unavailability of riskCanvas Technical Support during United States federal holidays, force majeure events, or these other causes, except to the extent caused by riskCanvas error, omission or other default: unavailability or inaccessibility of Your data center or technical infrastructure, due to a lack of internet access, scheduled Product maintenance, or suspension or termination of your access to riskCanvas Technical Support.

Providing Data to Technical Support
During the course of troubleshooting an issue, it may be necessary to provide riskCanvas Technical Support personnel with data from Your systems. For the convenience of our customers, and except as otherwise stated in this document, riskCanvas provides several methods to transmit this data including, but not limited to, email and the Technical Support portal Unless requested by riskCanvas, You will not directly transfer to riskCanvas Technical Support resources any data or information that is subject to regulation under Applicable Data Protection Law (“Protected Data”), including without limitation Personal Data, Protected Health Information and Personally Identifiable Information (as such terms are defined in Applicable Data Protection Law), except for Protected Data related to Your Support Contacts. “Applicable Data Protection Law” means all applicable international, federal, state, provincial and local laws, rules, regulations, directives and governmental requirements currently in effect and as they become effective relating in any way to the privacy, confidentiality or security of Protected Data including, without limitation, the European Union Directives governing general data protection and all applicable industry standards concerning privacy, data protection, confidentiality or information security. If Company Personal Data or Protected Data is requested by riskCanvas, You will only share the requested Company Personal Data or Protected Data and shall transmit the same to riskCanvas through the mutually agreed upon secure methodology and to the location designated by riskCanvas. In the event such data is transmitted to riskCanvas through a method other than the secure method mutually agreed upon by the parties or to an unspecified location, riskCanvas shall have no liability to Customer for any damages of any kind (including loss of revenue or use), whether in contract or tort, relating to such transmission, even if riskCanvas has been advised of the possibility of such damages. RiskCanvas will ensure that its instructions to You for the transfer of Company Personal Information or Protected Data will, if followed, result in the Company Personal Data or Protected Data only being transmitted to and accessible only by RiskCanvas personnel who are level three support personnel that have been subject to background checks.

Third-Party Software
The Product depends on multiple third-party components to operate properly. These components may include but are not limited to databases, operating systems, firewalls, and web servers. riskCanvas aids in the deployment of the Product with these components; however, we do not provide direct support for third-party components. It is the customer’s responsibility to configure those components and ensure other applications function in the desired configuration before calling riskCanvas Technical Support for any issue related to the Product. In certain instances, riskCanvas Technical Support may be available to work with and provide information to the third-party vendors. If a defect in third-party software causes the Product to perform less optimally, riskCanvas Technical Support will identify the third-party component so that the customer may pursue a solution with the correct vendor.

Changes to Policy
Except as set forth in this Section with respect to material changes, riskCanvas reserves the right to change this Policy without prior notification to you. If we make a change to this Policy, we will change the effective date above. We suggest you review this Policy from time to time. If we materially change this Policy, we will attempt to provide you with notice of such changes via email or by posting a notice on this website. riskCanvas shall not materially decrease the services provided or modify the service level responses without the express written acknowledgment of Customer.

Contact
If you have any questions regarding this Policy, please contact us at [email protected].