|
| 1 | + |
| 2 | + |
| 3 | +# Service Level Agreement for Specify 7 Hosting |
| 4 | + |
| 5 | +between |
| 6 | + |
| 7 | + |
| 8 | + |
| 9 | +the University of Kansas Center for Research (KUCR), Inc, affiliated with the University of Kansas, on behalf of the Specify Collections Consortium, having an address at 2385 Irving Hill Rd, Lawrence, KS 66045-7568, USA |
| 10 | + |
| 11 | + |
| 12 | + |
| 13 | +and |
| 14 | + |
| 15 | + |
| 16 | + |
| 17 | +\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ |
| 18 | + |
| 19 | + |
| 20 | + |
| 21 | +1. # **Agreement Overview** |
| 22 | + |
| 23 | +This Agreement represents a Service Level Agreement (“SLA” or “Agreement”) between KUCR, |
| 24 | +on behalf of the Specify Collections Consortium, henceforth known as “SCC”, and |
| 25 | +\_\_\_\_\_\_\_\_\_\_\_\_\_\_, henceforth known as “Client” for SCC technical (system |
| 26 | +and application) support services, and for Specify Cloud Hosting (“Specify Cloud” or |
| 27 | +“Service”) on Amazon Web Service (AWS) servers located in \_\_\_\_\_\_\_\_\_\_\_\_\_\_ |
| 28 | +for the \_\_\_\_\_\_\_\_\_\_\_\_\_\_ collection databases and their associated digital |
| 29 | +assets using Specify collections software. |
| 30 | + |
| 31 | +2. **Purpose** |
| 32 | + |
| 33 | +The purpose of this SLA is to: |
| 34 | + |
| 35 | +describe how SCC enables the Client to remotely access and use the Specify software and |
| 36 | +all its customer data in “Software as a service” mode. |
| 37 | + |
| 38 | +explicitly identify the Specify Cloud Service hosting technical support services, |
| 39 | +software maintenance and updates, price, online availability, backup protocols, |
| 40 | +access restrictions, data ownership, and stakeholder responsibilities. |
| 41 | + |
| 42 | +3. **Duration** |
| 43 | + |
| 44 | +This SLA is valid from the initial hosting date until December 31st of the same year. |
| 45 | +It will then be tacitly renewed from year to year unless terminated by either party. |
| 46 | +Any amendments, modifications, or other terms outside of those stated herein must be |
| 47 | +agreed upon by both parties. The SLA may be terminated by the Client at any time. SCC |
| 48 | +will give 30 days written notice of the termination of the SLA, after the start of a |
| 49 | +new service period if the Client payment is more than 90 days late for the current |
| 50 | +service year. |
| 51 | + |
| 52 | +4. # **Price** |
| 53 | + |
| 54 | +The fixed price for SCC technical support services and for Specify Cloud Hosting on |
| 55 | +AWS servers is \_\_\_\_\_\_\_\_\_\_\_\_\_\_ USD per year. At the end of each year, |
| 56 | +the price may be increased in line with development and AWS costs provided that SCC |
| 57 | +notifies the customer at least 3 months before the contractual expiry date. |
| 58 | + |
| 59 | +5. # **Contractors and subcontractors** |
| 60 | + |
| 61 | +SCC’s cloud hosting subcontractor is Amazon Web Services (AWS). |
| 62 | + |
| 63 | +SCC does not use contractors and may not add subcontractors without the customer's |
| 64 | +prior written consent. |
| 65 | + |
| 66 | +6. # **Service Agreement** |
| 67 | + |
| 68 | +## 6.1. Service Scope |
| 69 | + |
| 70 | +The following services are covered by this SLA: |
| 71 | + |
| 72 | +* Technical support in accordance with the conditions described in SCC’s Support |
| 73 | + Services Guide (Item C of the Specify Collections Consortium Membership Agreement) |
| 74 | + for technical issues related to Specify Cloud database hosting that arise. |
| 75 | +* Online availability of Specify Cloud virtual server, collection SQL database, and |
| 76 | + Specify software application. |
| 77 | +* Continuous server, database and application status monitoring. |
| 78 | +* SCC management of Specify 7 software (or any later version) and security updates, |
| 79 | + updates by AWS to Hosting Services, and other integral software as required. |
| 80 | +* Backup and recovery of hosted data as described in Section 6.9 |
| 81 | + |
| 82 | +## |
| 83 | + |
| 84 | +## 6.2. Support Availability |
| 85 | + |
| 86 | +The SCC Help Desk acts as the point of contact for all hosting and technical support |
| 87 | +issues. Technical Support Issue requests may be sent via email to the Help Desk: |
| 88 | +support@specifysoftware.org. The Specify Help Desk staff will respond in accordance |
| 89 | +with the conditions described in SCC’s Support Services Guide. |
| 90 | + |
| 91 | +Live technical support is available 8:00 AM \-- 5:00 PM |
| 92 | +(U.S. Central Time, UTC \-6) Monday \- Friday, excluding U.S. federal and State of |
| 93 | +Kansas holidays. |
| 94 | + |
| 95 | +In case of emergency outside of normal technical support hours, an issue that |
| 96 | +interferes with the Client’s ability to fulfill their duties, SCC staff will assert |
| 97 | +their best effort to resolve the issue once notified. SCC staff may be reached for |
| 98 | +emergencies via both phone and email at the following contact information: |
| 99 | + |
| 100 | +director@specifysoftware.org |
| 101 | +membership@specifysoftware.org |
| 102 | +support@specifysoftware.org |
| 103 | +\+1 785-864-1363 |
| 104 | + |
| 105 | +## 6.3. Data Location |
| 106 | + |
| 107 | +Specimen data and collection catalog associated files of digital assets (images, |
| 108 | +documents, etc.) will be housed and maintained on AWS servers. Backups of the database |
| 109 | +and asset data will also be created and stored on AWS servers. Unless explicitly |
| 110 | +granted permission by the Client for diagnostic or troubleshooting services, SCC staff |
| 111 | +will not access, copy, download, etc., primary or backup data for any purpose. The |
| 112 | +location of the customer's data and backups may not be changed without the customer's |
| 113 | +prior written consent. |
| 114 | + |
| 115 | +## 6.4 Server Accessibility |
| 116 | + |
| 117 | +Designated SCC and Client staff shall be given access to the Client’s database instance |
| 118 | +on the Specify Cloud for normal technical support and adjustments. SCC staff will not |
| 119 | +have credentials for Specify database access, unless they are explicitly granted by the |
| 120 | +Client. SCC will provide the Client with account credentials to access database |
| 121 | +instances and servers via SSH. |
| 122 | + |
| 123 | +## 6.5 Software Availability |
| 124 | + |
| 125 | +Specify software and specimen data and collection catalog associated files of digital |
| 126 | +assets (images, documents, etc.) will be available to the Client on a 24x7 basis except |
| 127 | +for pre-scheduled and announced Specify platform software update and maintenance. |
| 128 | + |
| 129 | +The SCC targets 99.5% annual average software and customer data availability (uptime) |
| 130 | +during client peak hours (i.e. between 6 am and 8 pm local Client time Monday through |
| 131 | +Friday), with the exception of planned downtime and maintenance events, and force |
| 132 | +majeure events. |
| 133 | + |
| 134 | +In case this target is not reached, the Client is entitled to a discount on the |
| 135 | +following year’s invoice, calculated as 1% per 0.1 percentage point below the uptime |
| 136 | +threshold. |
| 137 | + |
| 138 | +## 6.6 Monitoring |
| 139 | + |
| 140 | +To verify the Specify application and database are available to the Client, the SCC |
| 141 | +will automatically monitor database server operating status and availability at |
| 142 | +10-minute intervals, through the updown.io service. During the period of 8 AM to |
| 143 | +10 PM U.S. Central Time, if a Specify Cloud server does not return to online status |
| 144 | +within 30 minutes, the SCC will attempt to determine and remedy the cause of the server |
| 145 | +outage. If the SCC cannot remedy the server failure and return it to operation after |
| 146 | +30 minutes, the server’s unavailability status will be communicated to the Client via |
| 147 | +email. When the outage is resolved, the server is back online, and the Specify platform |
| 148 | +is accessible for use, the Client will be notified of the return to operation via email. |
| 149 | + |
| 150 | +Designated Client personnel will also be notified of server availability disruption |
| 151 | +within 10 minutes of the disruption, through the updown.io service. The Client will |
| 152 | +provide the SCC with a list of designated personnel and their emails to be notified. |
| 153 | + |
| 154 | +## 6.7 Maintenance |
| 155 | + |
| 156 | +The SCC may occasionally perform minor maintenance on Specify Cloud servers and AWS |
| 157 | +virtual machines to optimize performance. Maintenance may require Specify Cloud hosted |
| 158 | +databases to be unavailable for a short period, typically 15-30 minutes. SCC will |
| 159 | +strive to schedule server and application maintenance during Client non-peak hours |
| 160 | +(i.e. between 8 pm and 6 am local Client time). SCC will notify the Client prior to any |
| 161 | +brief expected maintenance with at least 24-hour notice, or with as much time as |
| 162 | +possible in cases of a degraded system performance or emergency. |
| 163 | + |
| 164 | +In providing technical support, SCC staff will not access (open, read, copy, etc.) the |
| 165 | +data records and information contained within the Specify Cloud hosted databases or |
| 166 | +associated collection data files without explicit prior approval from the Client. |
| 167 | +Senior SCC software engineers will have access to the accounts of the server platforms |
| 168 | +for normal technical support and adjustments, but will not have credentials for Specify |
| 169 | +database access, unless they are explicitly granted by the Client. |
| 170 | + |
| 171 | +## 6.8. Server Storage Capacity |
| 172 | + |
| 173 | +Allotted storage capacity for assets and backups will be granted up to 25 GB. If |
| 174 | +server storage capacity is exceeded, data will not be lost but access to the files may |
| 175 | +be temporarily prevented. Allotted storage capacity can be increased as needed by |
| 176 | +revised service terms between the Client and the SCC. |
| 177 | + |
| 178 | +## 6.9. Backups |
| 179 | + |
| 180 | +Backups of Specify Cloud hosted databases and digital asset data and documents will be |
| 181 | +created, managed, and stored on AWS servers. |
| 182 | + |
| 183 | +**Database Backups.** Daily, SCC staff will perform and compress SQL database dumps at |
| 184 | +a time outside of local working hours to minimize impact on the user experience and |
| 185 | +platform performance. |
| 186 | + |
| 187 | +**Asset Backups.** On the first Friday of each month, a complete backup (snapshot) will |
| 188 | +be created from the assets and stored in AWS S3 Standard for direct access. This |
| 189 | +snapshot will also be compressed and stored in AWS Glacier for long-term storage. |
| 190 | +Daily, incremental digital asset file backups using |
| 191 | +[rsync](https://github.com/RsyncProject/rsync) will be executed between the live data |
| 192 | +and the snapshot for one month. On the first Friday of each month, the process will |
| 193 | +repeat and the previous, rsync-ed backup will be replaced with the new snapshot. |
| 194 | + |
| 195 | +**Backup Retention.** SCC will retain Specify Cloud hosted database backup copies in |
| 196 | +the following manner: daily backups for one week, Friday backups for one month, the |
| 197 | +first Friday of each month for one year, yearly backups indefinitely. Daily or monthly |
| 198 | +backups can be maintained for longer or shorter periods as required by the Client, |
| 199 | +contingent on storage constraints. |
| 200 | + |
| 201 | +Digital asset backups will be contributed to daily with rsync, and retained for one |
| 202 | +month, at which time, a new asset archive will be created for rsync backups, and |
| 203 | +copied, compressed, and stored in Glacier for long-term storage. Monthly digital asset |
| 204 | +backups will be stored for one year or up to the storage capacity in the agreement. |
| 205 | +The last monthly backup for each year will be stored indefinitely. |
| 206 | + |
| 207 | +**Backup Access.** We will provide the Client with account credentials for SSH access |
| 208 | +to the servers and SQL credentials to access their database(s). |
| 209 | + |
| 210 | +The Client is encouraged to download regular database and asset backups, then move |
| 211 | +them offsite, according to a regular schedule. Upon request, SCC staff will work with |
| 212 | +the Client to assure access and automate the process. |
| 213 | + |
| 214 | +**Recovery.** If the SCC is notified of the need for a collection database or file |
| 215 | +recovery from backups, we will restore the last valid copy of the database and files |
| 216 | +and restore normal operations within 24 hours. The restoration process itself usually |
| 217 | +is accomplished in under 1 hour during U.S. Central Time Zone business hours |
| 218 | +(GMT \-5 or \-6). In the event of disaster recovery, the amount of lost data would be |
| 219 | +those entered into the database since the previous backup, typically within the |
| 220 | +previous 24 hours. |
| 221 | + |
| 222 | +# **7\.** **Ownership** |
| 223 | + |
| 224 | +All data created by the Client hosted in the Specify Cloud service are the Client’s |
| 225 | +property and SCC makes no claim of ownership to the Client’s data. The SCC will not |
| 226 | +access, inspect, use or distribute Client data for testing, technical support, |
| 227 | +problem-solving or for any other purpose without the express, written permission of the |
| 228 | +Client. A limited administrative account in MariaDB will be required to create |
| 229 | +and restore backup files using scripts, all within the cloud servers. |
| 230 | + |
| 231 | +# **8\.** **Responsibilities** |
| 232 | + |
| 233 | +## 8.1. Client Responsibilities |
| 234 | + |
| 235 | +Client responsibilities in support of the SLA include: |
| 236 | + |
| 237 | +* Payment for support costs at the agreed interval and period of service. |
| 238 | +* Providing reasonable availability of a Client representative when resolving a |
| 239 | +* service-related incident or request. |
| 240 | + |
| 241 | +## 8.2. SCC Responsibilities |
| 242 | + |
| 243 | +SCC responsibilities in support of the SLA include: |
| 244 | + |
| 245 | +* Meeting response times associated with service-related incidents. |
| 246 | +* Providing the Client with an annual report of the service’s uptime |
| 247 | +* Notification to designated Client representatives of all planned and emergency |
| 248 | + maintenance. |
| 249 | + |
| 250 | +IN WITNESS WHEREOF, the parties have accepted and executed this |
| 251 | +Agreement through their duly authorized representatives as of the date entered below. |
| 252 | + |
| 253 | + |
| 254 | +| | | KUCR, on behalf of the Specify Collections Consortium | |
| 255 | +| :---- | :---- | :---- | |
| 256 | +| | | | |
| 257 | +| | | | |
| 258 | +| Signature | | Signature | |
| 259 | +| | | | |
| 260 | +| Name | | Name | |
| 261 | +| | | | |
| 262 | +| Title | | Title: Chief Financial Officer | |
| 263 | +| | | | |
| 264 | +| Date | | Date | |
| 265 | + |
| 266 | + |
0 commit comments