Orange County NC Website
Browse       Search
Yes <br /> <br />If No, Explain: Click here to enter text. <br /> <br />8. What are the Cloud provider’s contractual obligations with respect to litigation holds on <br />County data? <br />VetPro will not respond to subpoenas, service of process, litigation holds and other legal <br />requests related to the County without first notifying the County. Upon request by the <br />County, VetPro must provide to the County, its proposed response to the third-party <br />request with adequate time for the State to review, and, as it deems necessary, to revise <br />the response, object, or take other action. <br /> <br />9. What are the Cloud provider’s contractual prohibitions on disclosing data to individuals, <br />groups or organizations making record requests, unless so directed by an authorized <br />County official? <br />VetPro will not respond to subpoenas, service of process, litigation holds and other legal <br />requests related to the County without first notifying the County. Upon request by the <br />County, VetPro must provide to the County, its proposed response to the third-party <br />request with adequate time for the State to review, and, as it deems necessary, to revise <br />the response, object, or take other action. <br /> <br />10. Does the contract obligate the Cloud provider to allow third-party audits and/or <br />certifications related to infrastructure and security, including penetration testing and <br />vulnerability assessment, as requested by the County? <br />Yes <br /> <br />If No, Explain: Click here to enter text. <br /> <br />11. Does the contract obligate the Cloud provider to allow third party onsite inspections of <br />the Cloud provider’s infrastructure and security practices on a specified basis? <br />No <br /> <br />If No, Explain: Our infrastructure is built in the AWS cloud. 3rd party reports on their <br />security practices and infrastructure are available upon request, however Amazon does <br />not allow on-site inspection. <br /> <br />12. Does the contract obligate the Cloud provider to provide security documentation upon <br />request by the County? <br />Yes <br /> <br />If No, Explain: Click here to enter text. <br /> <br />13. Does the contract obligate the Cloud provider to supply the County with the provider’s <br />performance records, including access to daily and weekly service quality statistics? <br />Yes <br /> <br />Docusign Envelope ID: 55C10F80-889A-4F10-9C76-7F6DB067F1FE