CVAD Quickstart SOW

CVAD Quickstart SOW V1.0 11/1/2021 This SOW (as defined below) is proprietary to Forthright (as defined below) and contains confidential information. It may not be disclosed, in whole or in part, to a third party without the express written authorization of Forthright. No portion of this SOW may be duplicated or used for any purpose […]
Speak With An IT Expert

CVAD Quickstart SOW

V1.0 11/1/2021

This SOW (as defined below) is proprietary to Forthright (as defined below) and contains confidential information. It may not be disclosed, in whole or in part, to a third party without the express written authorization of Forthright. No portion of this SOW may be duplicated or used for any purpose other than to receive Services or Deliverables (each as defined below) from Forthright described herein.

1. INTRODUCTION

This Statement of Work (“SOW”) is made pursuant to the Master Services Agreement V2.1 Dated 02/18/2022 (“Agreement”) located at https://www.forthright.com/legal/msa/ made effective with the execution of this SOW by and between a business entity defined in a Proposal that references this Agreement (“COMPANY”), for the use and benefit of itself and its Affiliates, and Forthright Technology Partners, Inc., a Florida corporation, with offices at 2893 Executive Park Drive, Weston, FL 33331 (“Consultant” or “Forthright”). For purposes of this SOW, the term “Affiliate” means any entity or person that is directly or indirectly controlling, controlled by, or under common control with a party hereto. The terms and conditions of the Agreement are hereby incorporated herein by reference.

If not executed, Forthright reserves the right to expire this SOW according to the expiration date of the accompanying quote or, if unspecified, thirty (30) days from the date this SOW was issued.

2. PROJECT OVERVIEW

Forthright will provide professional services required to deploy a new Citrix Cloud CVAD deployment for COMPANY on suitable on-premise server hardware and\or in a new or existing Azure Tenant, depending on which Quickstart package was purchased by COMPANY. The goal of the engagement is to provide a seamless deployment experience to the Citrix Cloud solution.

Forthright will deploy a unified workspace via a secure Windows virtual desktop delivering controlled access to applications & data, anytime and anywhere via Citrix Cloud. By accessing all desktop, web and SaaS applications from your Workspace (along with SSO support), your users will be exposed to far fewer passwords for hackers to exploit while also keeping your data secure from browser-based attacks. Our Quickstart deployment includes advanced security controls to automatically restrict activities, such as copying, pasting, printing, and downloading at any time the risk of data exfiltration is high.

Deploying new technology can be complicated with many variables & dependencies to consider. Each Quickstart package takes into consideration the core decisions and most critical components required to successfully deploy Citrix Cloud. Using best practices and a security first approach, Forthright offers two standardized deployment bundles at a fixed cost to ensure your project is successful. This Quickstart deployment is designed to meet the requirements for most clients.

The Quickstart service will include a core deployment of Citrix Cloud CVAD, delivering a robust and reliable environment. Forthright will work with the existing COMPANY staff to conduct a review of the configuration and documentation of the core infrastructure assets and ensure that the environment is prepared for production use. The Quickstart program consists of the following offerings:

BuildIT Citrix Quickstart program Description
CVAD Quickstart Suitable for customers requiring a standard CVAD deployment
with no pre- existing infrastructure and deployed in Azure.
CVAD+ Quickstart Suitable for customers with pre-existing infrastructure (cloud or on-premise),
or other components needing integration.

3. PROJECT SCOPE

The engagement will consist of the activities described below. Activities not listed are considered out of scope.

3.1 Readiness Phase

  • Kickoff session with COMPANY and Forthright team to align expectations and validate success
  • criteria’s
  • Determine targeted user base and expected cutover date(s)
  • Determine and define a suitable Citrix-ready on-premise environment (If necessary)
  • Review details provided by COMPANY to Forthright pertaining to how and if the following requirements need to be addressed:
    1. Azure Cloud Tenant deployment or suitable access to a pre-existing Tenant when applicable
    2. Azure AD Integration with MFA or Active Directory
    3. Citrix Cloud Workspace Authentication & MFA
    4. File Storage
    5. Application deployments
    6. Peripheral mapping
    7. Printing
    8. Session and user policies

3.2 Deployment Phase

Forthright will deploy and optimize the latest stable Citrix Cloud Apps and Desktop version using Forthright and vendor recommended best practices. The solution will be implemented for a single COMPANY site on-prem or in Azure unless otherwise indicated with the following tasks performed:

Services provided for CVAD QuickStarts: (Fixed fee of $7,500)

  • Setup new Microsoft Azure Tenant environment.
  • Configure and deploy a new Azure subscription with Active Directory instance. (Does NOT include active directory deployment outside of the Azure tenant.)
  • Deploy Multi-Factor Authentication via Azure AD including configuration for supporting single-sign on and multi- factor to Citrix Workspace.
  • Prepare the Microsoft Active Directory infrastructure
    1. Create new Organizational Units (OUs) to support virtual desktop configuration
    2. Create new Group Policy Objects based on Citrix and Forthright’s recommended practices with customer specific settings
    3. Define Security and user groups as required
    4. Add and configure user accounts specified by COMPANY
  • Deployment of Citrix Workspace for Virtual Apps and Desktops & Secure Browser if required.
  • Deploy Azure Files or a Windows File Server in Azure.
  • Setup new or update Citrix Cloud Tenant
    1. Deploy up to one (1) resource location
    2. Deploy Citrix Workspace with Azure AD Authentication
    3. Configure Azure hosting integration
    4. Configure Citrix baseline policies
    5. Install and configure up to two (2) Citrix Cloud Connectors
    6. Deploy Citrix VDI Infrastructure components in Azure
  • Deploy VDA workloads
    1. Configure Monitoring (Director)
    2. Deployment of FSLogix for profile management
    3. Build and configure an optimized image of the latest Windows OS that is compatible with COMPANY applications and environment. This standard image includes the deployment of Microsoft’s Office Suite, Teams, OneDrive, Citrix, Adobe Reader, Chrome and Edge Enterprise, all optimized for VDI deployments.
    4. Configure user environment customization including Desktop, taskbar, and Start Menu settings.
    5. Perform VDA image performance optimization and hardening
  • Provide requested professional Services (up to 10 hours) to assist with the following as needed:
    1. Data migration services
    2. Advanced Policy Configuration
    3. Deployment of additional applications
    4. Integration with existing client domain name
    5. User Provisioning and on-boarding support
    6. Deployment of NAT Gateway for Advanced Security Policies
    7. Knowledge Transfer sessions.
  • Perform 1 week of functional and Pilot testing with up to five (5) total test users
    1. Manage and troubleshoot issues and perform Optimization as required.
    2. Produce environment build documentation
    3. Provide 14 days of Post Cut Over support to the designated Admin.
  • Perform an Azure optimization evaluation within 90 days of deployment. The initial Azure machine types and configuration are deployed on a month-to-month basis. Within 90 days of operations and tuning, Forthright will provide options to lower your monthly Azure consumption bill by making some changes to your Azure configuration when applicable such as reserved instances.

Services provided for CVAD+ QuickStarts (Fixed fee of $15,000)

  • Setup new Microsoft Azure Tenant subscription as required or deploy to pre- existing on prem environment.
  • Configure Azure Active Directory (if needed) or integrate with a pre-existing on-prem Active Directory.
    1. Prepare the Microsoft Active Directory infrastructure
    2. Create new Organizational Units (OUs) to support virtual desktop configuration
    3. Create new Group Policy Objects based on Citrix and Forthright’s recommended practices with customer specific settings
    4. Define Security and user groups as required
    5. Add and configure user accounts specified by COMPANY
  • Deploy Multi-Factor Authentication via Azure AD integration or leverage any supported pre -existing SAML 2.0 authentication tool (e.g., DUO, OKTA, etc.)
  • Deployment of Citrix Workspace for Virtual Apps and Desktops & Secure Browser, if required.
  • Deploy Azure Files or integrate with existing Azure or On-Prem file shares.
  • Setup new or update Citrix Cloud Tenant
    1. Deploy up to one (1) resource location
    2. Deploy Citrix Workspace with Standard AD Authentication
    3. Configure Azure hosting integration when applicable
    4. Configure Citrix baseline policies
    5. Install and configure up to two (2) Citrix Cloud Connectors
    6. Deploy Citrix VDI Infrastructure components in Azure or On-Prem
  • Deploy VDA workloads
    1. Configure Monitoring (Director)
    2. Deployment of FSLogix for profile management
    3. Build and configure an optimized image of the latest Windows OS that is compatible with COMPANY applications and environment. This standard image includes the deployment of Microsoft’s Office Suite, Teams, OneDrive, Citrix, Adobe Reader, Chrome and Edge Enterprise, all optimized for VDI deployments.
    4. Configure user environment customization including Desktop, taskbar, and Start Menu settings.
    5. Perform VDA image performance optimization and hardening
  • Provide requested professional Services (up to 15 hours) to assist with the following as needed:
    1. Data migration services
    2. Advanced Policy Configuration
    3. Deployment of additional applications
    4. Integration with existing client domain name
    5. User Provisioning and on-boarding support
    6. Deployment of NAT Gateway for Advanced Security Policies
    7. Knowledge Transfer sessions.
  • Perform 1 week of functional and Pilot testing with up to five (5) total test users
    1. Manage and troubleshoot issues and perform Optimization as required.
    2. Produce environment build documentation
    3. Provide 14 days of Post Cut Over support to the designated Admin.
  • When applicable, Forthright will perform an Azure optimization evaluation within 90 days of deployment. The initial Azure machine types and configuration are deployed on a month-to-month bases. Within 90 days of operations and tunning, Forthright will provide options to lower your monthly Azure consumption bill by making some changes to your Azure configuration when applicable such as reserved instances.

3.3 Out of Scope

Pursuant to Section 3, any service not specifically mentioned in SOW is not provided as part of SOW. For clarity and emphasis, the following items are out of scope for this SOW. Unless otherwise specified in 3.4 – special provisions, services rendered under this agreement do not include:

  • The deployment of any optional services or functionality not specifically selected in Section 3.2
  • Installation and configuration of custom or third-party applications and operating systems on client workstations.
  • Deployment of unsupported or End of Life Operating Systems or Applications.
  • On-going operating system administration including the operating system itself or any operating system features or components.
  • Management of change to virtual machines, operating systems, custom or third-party applications, databases, and administration of general network changes within COMPANY control.
  • Remediation work associated with any problems resulting from information accuracy or the consistency of any data and materials supplied by COMPANY.
  • Remediation work resulting from the content, completeness, accuracy, and consistency of any data, materials, or information supplied by COMPANY.
  • Data migration of client-side data, or the managing of any failed data migration outside of any included professional Service hours in the purchased Quickstart package.
  • Managing and providing go live direct end user support
  • Deployment of print drivers outside of the Citrix Universal print drivers.
  • Deployment of VPN’s or mapping to remote file systems outside of any included professional Service hours in the purchased Quickstart package.
  • The cost of any software, licensing or software renewal or upgrade fees of any kind.
  • The cost of any third-party vendor or manufacturer support or incident fees of any kind.
  • Service and repair made necessary by the alteration or modification of equipment, software, or services other than that authorized by Forthright, including alterations, software installations or modifications of equipment made by COMPANY’s employees or anyone other than Forthright.
  • For CVAD+ deployments:
    1. The cost to bring Client’s environment up to minimum standards required for services outside of any included professional Service hours in the purchased Quickstart package.
    2. Customer must provide their own Security and AV suite. Images are deployed with Microsoft’s built-in Defender security service on VDI images. Antivirus is not deployed on the servers unless SecureIT service is purchased from Forthright.
    3. Required remediation work associated with preexisting Active Directory problems. If remediation work is required, Forthright will provide COMPANY with an estimate of service fees required and a recommended scope of work to be performed.
    4. Required remediation work associated with a preexisting Cloud Tenant. If remediation work is required, Forthright will provide COMPANY with an estimate of service fees required and a recommended scope of work to be performed.

3.4 Special Provisions

  • Professional Services hours may be utilized upon request for the following:
    1. 3rd Party Application Support – Forthright will provide “best effort” in getting 3rd Party vendor issues resolved in a timely manner
    2. Vendor Management – Forthright will assist the COMPANY in dealing with admin issues related to communications vendors and Forthright such as ISP’s, telecom, or Hosting providers that impact the COMPANIES overall network operations.
    3. Forthright will manage the use, allocation, and upgrading of any existing Azure or O365 licensing and new entitlements purchased from Forthright outside what is included in this SOW.

4. PROJECT ACTIVITIES

4.1 Phase 1: Initiate

Forthright performs one (1) project kickoff meeting with COMPANY project sponsors and stakeholders to review expectations about the purpose of the engagement, the delivery approach, and estimated timelines. The following are the objectives of the meeting:

  • Introducing the Forthright team, roles, and responsibilities.
  • Describing the project goals, phases, and key dates.
  • Agreeing on communication and reporting process and creating a communications plan.
  • Validating the project expectations and clarifying roles and responsibilities
  • Confirming prerequisites are met as detailed in the solution checklist for specified solutions.
  • Presenting the solution overview for specified solutions including expected project results and deliverables.
  • The Forthright Project Manager and the COMPANY designated project owner collaborate to develop the project plan.

Deliverables:

  • Communications plan
  • One (1) project kick-off meeting
  • Project Plan overview

4.2 Phase 2: Execute

The key activities for this phase are organized in the following sub-phases:

  • Readiness Phase
  • Deployment Phase

Deliverables:

  • Summary Report of build with Documentation of Core Assets
  • Knowledge transfer session(s)

4.3 Phase 3: Close

The Forthright Project Manager conducts one (1) closure meeting with COMPANY covering project status, next steps, and how to engage further with Forthright.

Deliverables:

  • Engagement summary presentation
  • One (1) closure meeting
  • Any documentation, artifacts, or materials obtained by Forthright as part of this engagement
  • Transition of processes and responsibilities back to the COMPANY.
  • Passwords for relevant admin\test accounts are provided.

5. PROJECT MANAGEMENT

5.1 Requirements

The participation of the following COMPANY stakeholders is required for the services in this SOW to be performed:

  • Project Manager or Key Stakeholder
  • System / User Authentication Admin
  • Cloud or on Prem Administrator
  • Azure Administrator
  • O365 Administrator
  • Citrix Org Administrator

COMPANY must provide and have the required licensing and / or subscriptions for Microsoft, Citrix, & any deployed applications for this SOW.

5.2 Project Staffing

SOW will require, and Forthright will provide, the following skillsets:

Role Involvement
Project Manager Part Time
Citrix Administrator Full Time
Citrix Engineer Part Time
Microsoft Azure Administrator Part Time

Resources listed above as part time will be called in when evaluating the technology in which they specialize.

5.3 Estimated Schedule

This SOW is estimated to be completed no later than seven (7) weeks from the start date. Forthright will provide services according to a schedule agreed to by both parties. Once the deposit has been received, Forthright will schedule your kick off meeting within two (2) weeks. Quickstarts can be implemented and ready for production in as little as three to five weeks from your kick off meeting assuming there are no backlogs which can add minor delays.

The start date of SOW will depend on the following:

  • Date the project deposit was received.
  • Scheduled availability of Forthright Project Resources
  • Receipt of Product(s) and necessary equipment or subscriptions
  • Receipt of completed project readiness checklist which provides:
    1. Access to COMPANY resources such as:
      • COMPANY technical resource contact information
      • Required Licenses and Software install media
      • Remote Access
      • Network access
      • Domain Admin
      • Domain name for deployment
      • User list and defined group membership

5.4 Cancellations or Changes to Schedule

Forthright will work with COMPANY to assign resources based on the mutually agreed timeline and schedule for the SOW. Forthright will commit consulting resources based on the established schedule, as such COMPANY is required to provide a minimum of 2 business days notice for any non-emergency unplanned changes or cancellations to the schedule previously agreed upon. Should COMPANY fail to provide the adequate notice, Forthright, at its discretion, may bill COMPANY:

  • 4 hours at the established rack hourly rate of $275/hour as compensation for time and expenses incurred in preparation for the rescheduled or canceled services
  • 80% of the affected hours that were originally scheduled prior to the change or cancellation.

5.5 Change Management

In order to manage unexpected scope changes Forthright will perform the following Change Management procedure:

  • Discuss, confirm need, and request from COMPANY for additional work.
  • Document and communicate additional tasks and deliverables associated with the scope change.
  • Estimate the work effort associated with the additional tasks and deliverables.
  • Based on the work effort estimate, determine the impact on schedule and budget, including contingency.
  • Any change to the scope specified within this document will be documented and approved by COMPANY.
  • If the scope change does not require additional project budget, then Forthright will document any changes to project scope and/or deliverables in the form of a Scope Change Addendum. This will need to be signed -off by COMPANY prior to proceeding with the engagement under the new or modified Project Scope.
  • If the scope change requires additional project budget, a SOW addendum or new SOW will need to be drafted and attached to a COMPANY Change Authorization prior to any additional work commencing.

6. ENGAGEMENT ASSUMPTIONS

6.1 General Assumptions

The following are the general assumptions for the engagement. Should COMPANY not be able to meet these assumptions, Forthright may not be able to complete some or all of the activities defined within the ‘Project Scope’ and ‘Project Activities’ within the SOW fee structure. Accordingly, COMPANY would need to purchase additional hours in order to complete the project. Forthright will notify COMPANY of any potential risks to project completion and/or SOW budget in the form of a Project Risk Memorandum, which will detail all risks, recommendations for mitigation, and next steps:

  • COMPANY will ensure that the appropriate functional and technical resource(s) will be available throughout the engagement for technical discussions, build/configuration assistance, knowledge transfer, status meetings, questions, and requests.
  • The appropriate COMPANY resources will be available to cover the topics detailed in the ‘Project Scope’ section of this document.
  • COMPANY resources will be part of the project team and will be available throughout the project.
  • All required hardware, software and necessary licenses will be set up, configured and operational in the target environment.
  • Status reports to COMPANY are limited to a weekly interval.
  • COMPANY will appoint an individual as the designated COMPANY Project Owner
  • Project estimates assume that once the project has started it will continue without interruption (excluding Holidays) unless agreed upon by both Forthright and COMPANY.
  • All Services will be provided during Normal business hours unless otherwise stated in this Statement of Work. Normal business hours are Monday-Friday, 9:00am-5pm local time.

6.2 Service Delivery Assumptions

During the Initiate phase, it will be the responsibility of the Forthright Project Manager assigned to the engagement to work with the COMPANY and determine the best approach to deliver the services for the engagement. Depending on the Forthright Project Manager’s assessment of the COMPANY’s readiness, resource availability and taking into consideration several other factors, the engagement will be executed by:

  • Flexible Schedule Virtual Engagement. For virtual engagements that will be executed under a flexible schedule Forthright will:
    1. Assign a dedicated Project Manager and Project Lead.
    2. Assign additional project resources to complete project tasks as needed.
    3. Schedule virtual work sessions between COMPANY and Forthright virtual teams as far in advance as possible for dates/times that are agreeable to the COMPANY. Virtual sessions will be scheduled during regular business hours (unless otherwise specified) and will be at minimum 1 hour in length with AM and PM sessions as options. Time within this session will be used for:
      • Virtual working sessions with the COMPANY.
      • Documentation, including Design document, diagrams, status reporting and emails documenting recommendations and action items.
      • Work done on internal labs to validate recommended configurations.
      • Internal sessions with Architecture team to validate and do QA of recommendations/documentation.
  • Hybrid Engagements (Onsite/Virtual Delivery). For engagements where being onsite for certain parts of the engagements is deemed necessary, but where it is also possible to provide some portions of the project virtually, Forthright will:
    1. Assign a team of full-time consultants for the onsite portions of the engagement.
    2. Assign resources for the virtual portions of the engagement leveraging the appropriate virtual delivery (full time or flexible)

The following are the service delivery assumptions for the engagement:

  • COMPANY will provide Forthright with the name of a primary and backup project contact prior the official kickoff meeting.
  • COMPANY will provide workspace and meeting rooms for the Forthright project team throughout the duration of the project for any onsite portions of the engagement. For virtual engagements (or phases) COMPANYs must be able to connect to screen sharing and collaboration tools.
  • The Forthright project team should have access to the following for any onsite portions of the engagement:
    1. Workspace (desk, chair, etc.) and access to offices during normal work hours as well as after hours
    2. Network connections
    3. Internet access
    4. Telephone access
  • COMPANY must have executed the proposal or Quote prior to Forthright setting of the project start date which will be a maximum of two weeks from date SOW is executed. The start date will be set based on team and skills availability.
  • If any assumptions are not met within a reasonable amount of time prior to the project or phase start dates, the start dates may be delayed. Any delay may result in project timelines being extended and additional effort from Forthright. This additional effort may trigger the Change Management process as previously outlined. Any changes in the start date initiated by the COMPANY may result in a significant delay to the project start.
  • If a working session, request, or assigned Client task is not responded to within 5 business days of receiving a reminder notification, the project will automatically be placed on hold. When projects are placed on hold, the technical resources are assigned new tasks to work on unrelated to your project. It may require up to 2 weeks before resources can be assigned, and the resources assigned may not be the same that started the project.

6.3 Project Assumptions

The following are the project assumptions for the engagement:

  • Only support for one (1) Active Directory domain within one (1) Active Directory forest will be included as part of this engagement, unless otherwise specified.
  • Forthright will provide COMPANY with Admin access of the new deployment at the end of the project during the hand off meeting.
  • Microsoft Office, Azure, and Citrix subscriptions will start at the start of the project. COMPANY understands that project delays will cause additional client costs as the subscriptions are active, paid for but not driving value. As an example, if the project is delayed by a month, the month of subscriptions will be lost assuming the subscription period has started.
  • Forthright will follow COMPANY-defined change procedures where applicable.
  • Application media (installers) will be provided by COMPANY with application list for all deployed applications.
  • COMPANY has reliable topology, bandwidth, and services in place, as it pertains to the project.
  • COMPANY is properly licensed or is prepared to purchase and/or properly license products involved with the project (e.g., upgrade Outlook version).
  • COMPANY will inform Forthright of any technology (e.g., spam filters, firewalls, etc.) which may interfere with the project.
  • COMPANY will provide responses to questions and requests in manner that will not delay the project outcome or timeline (e.g., reboot servers and restore connectivity to current services/servers when required).
  • COMPANY will provide Forthright access to the production environment with appropriate role privileges to carry out the deployment tasks, including, but not limited to:
    1. Administrator access to source server(s), Services, and/ or Subscriptions required.
    2. Network
    3. Desktops
    4. Third-Party hardware/software that may impact the project
    5. Public DNS provider
    6. All necessary facilities, hardware, and software
  • FORTHRIGHT may refuse the deployment or support of any application of software where the COMPANY does not maintain an active and valid support agreement and agrees to facilitate access to that support resource if requested.
  • COMPANY will be responsible for handling end-user support, with unique problem instances being escalated to Forthright for troubleshooting.
  • COMPANY will be responsible for communicating with COMPANY end users to ensure they perform any required actions in a timely manner.
  • COMPANY will configure the selected migration tool to ensure proper access and authentication is enabled for both source and destination points.
  • COMPANY will be responsible for any Installation and uninstallation of client-side applications including the preparation of the users’ desktop, creating Outlook profiles, and migration of client-side data, or the managing of any failed user migration in post cutover.
  • COMPANY will provide self-service / Helpdesk documentation to facilitate users registering for MFA
  • COMPANY will manage and provide go live support for end users.

7. ORDER AND PAYMENT INFORMATION

7.1 Price

Forthright proposes to provide the Services and Deliverables for a fixed price of $7,500 for a CVAD Quickstart and $15,000 for a CVAD+ Quickstart. Travel expenses related to CVAD+ are not included in this price. The pricing in this SOW is valid for thirty (30) days after issuance of this SOW. COMPANY will pay all invoices in accordance with the Agreement. Forthright will issue invoices in accordance with the payment schedule specified in the SOW. Remit payment to:

Check:
Forthright Technology Partners, Inc.
2893 Executive Park Drive, Suite 204
Weston, FL 33331
Electronic payments (ACH) :
JPMorgan Chase Bank
Account#: 8320256634
Routing #: 267084131
Phase / Milestone / Deliverable Price
Invoiced upon execution of SOW –
50% of agreed upon Quickstart fees
CVAD QuickStart $3,500
CVAD+ QuickStart $7,500
Balance due upon the completion of Phase 3: CLOSE CVAD QuickStart $3,500
CVAD+ QuickStart $7,500
Estimate Travel Expenses related to CVAD+ N/A
Total Project Price CVAD QuickStart $7,500
CVAD+ QuickStart $15,000

7.2 Expenses

Forthright will track and invoice COMPANY for preapproved, necessary and reasonable expenses as incurred, including but not limited to travel, lodging, and meals, in accordance with Agreement. If COMPANY requests that Forthright personnel perform Services outside the city, state, province, or country in which such personnel are based, COMPANY agrees to reimburse Forthright for related out-of-pocket costs incurred by Forthright and/or its personnel as a result of providing such Services.

7.3 Acceptance of Milestones, Phases, or Deliverables

Upon Forthright’s completion of a Milestone or Phase performed, Forthright shall notify COMPANY Project Manager. COMPANY has five (5) working days from the completion of the Milestone, Phase, or Deliverable to accept the work as being complete. Signing off, or COMPANY’s failure to respond to the notice within the designated five (5) working day period, signifies COMPANY’s acceptance of the Milestone, Phase, or Deliverable and that Services have been performed as described in accordance with the SOW. In order to refuse acceptance of the Services, COMPANY must provide Forthright with full details that show that Services do not conform to the SOW. Forthright shall address such non-conformance shall compile an action plan to remediate any deficiencies. The acceptance process shall be repeated until all deficiencies have been resolved and the Services meet the requirements of the SOW.

8. AUTHORIZATION

Forthright agrees to provide the services described in this SOW provided COMPANY accepts this SOW, without modification, by signing the space below within 30 days from the effective date. COMPANY represents that their execution of this SOW is a binding commitment to purchase the Services described herein and is subject to Forthright’s Master Services Agreement V2.0 Dated 09/08/2021 located at https://www.forthright.com/legal/msa/