ESBD_487185_1770225441697_TRS000656_RFP_Draft Contract.pdf

SolicitaƟon SecƟon IX:

DraŌ Contract*

*This is a draŌ and not a binding document.

Agency:

TO:

Item Unit Total No. Qty Unit Price Price

1 961-72 208-11 208-21

1 YR -$ $0.00

4655 Mueller Boulevard Austin, Texas 78723

To ensure prompt payment, the Contract/PO number must be on all receiving documents and invoices

[insert vendor name] ("Contractor") DELIVER TO:

Effective Date: Date of the latest signature or [Insert month, day, year], whichever comes later.

VID #____________________________

PCC Code: 9, Gov. Code 825.103

[insert street address] [insert city, state, zip code]

TRS

Attn: Contract No. CTR00XXXX 4655 Mueller Boulevard Austin, Texas 78723 Deliver to garage at corner of Mueller Boulevard and Robert Browning Street

PAC 421

PURCHASE ORDER ("PO")

Teacher Retirement System of Texas ("TRS")

Rev. 9/17/2025

CTR00XXXXContract/PO Number:

STATE OF TEXAS

Class-Item: Description

This Contract is entered into by and between the Teacher Retirement System of Texas (“TRS”), with a principal place of business at 4655 Mueller Boulevard, Austin, Texas 78723, and [Insert Contractor name] (“Contractor”), with a principal place of business at [Insert Address, City, State, Zip Code]. TRS and Contractor are referred to collectively herein as “Parties” and each, “Party.”

Initial Term: From Effective Date through [Insert month, day, year] Optional Renewal Term(s): Three (3) one-year optional renewal terms

Contractor shall provide a Software-as-a-Service (SaaS) Commercial Off- The-Shelf (COTS) meeting transcription and conversation intelligence platform. The solution must automatically capture audio from virtual, in-person, and hybrid meetings; generate accurate, time-stamped transcripts; identify speakers; and provide searchable notes, summaries, and action items. It shall be integrated with TRS collaboration tools such as Microsoft Teams, Zoom, Google Meet, and Microsoft 365 applications, while meeting stringent security, compliance, and accessibility standards.

Adding Like and Similar Items - TRS reserves the option to add or subtract like items or services (including additional locations) to or from this PO at negotiated price rates during the term of the PO, including any period of renewal or extension

Vendor Notice - Electronic communications about software licensure or maintenance renewal shall be sent to the TRS Contract Manager's e-mail address noted below. This notice applies, but is not limited to, software confirmations, acknowledgements, licensure information, access codes, software keys, software serial numbers, download instructions, support instructions, upgrade/update information, maintenance Information, etc. Such communications shall be deemed received by TRS only if sent to the TRS Contract Manager's email address noted below.

Agency:

TO:

4655 Mueller Boulevard Austin, Texas 78723

To ensure prompt payment, the Contract/PO number must be on all receiving documents and invoices

[insert vendor name] ("Contractor") DELIVER TO:

Effective Date: Date of the latest signature or [Insert month, day, year], whichever comes later.

VID #____________________________

PCC Code: 9, Gov. Code 825.103

[insert street address] [insert city, state, zip code]

TRS

Attn: Contract No. CTR00XXXX 4655 Mueller Boulevard Austin, Texas 78723 Deliver to garage at corner of Mueller Boulevard and Robert Browning Street

PAC 421

PURCHASE ORDER ("PO")

Teacher Retirement System of Texas ("TRS")

Rev. 9/17/2025

CTR00XXXXContract/PO Number:

STATE OF TEXAS

Total: $0.00

By:

Contact Information

TRS Contract Manager:

TRS Contract Manager Phone:

TRS Contract Manger Email:

Vendor Contact Name:

Vendor Contact Phone:

Vendor Contact Email:

TRS P&C Email:

Purchaser, CTCD, CTCM

Information on submitting an invoice in the PAVES portal:

https://www.trs.texas.gov/TRS%20Documents/PAVES-create-invoice.pdf https://trstexas-supplier.ivalua.app/page.aspx/en/usr/login?ReturnUrl=/page.aspx/en/buy/homepage

Invoicing:

TRS P&C Phone:

TRS P&C Representative:

Contract Documents List

Contract Documents List The enƟre Contract between TRS and Contractor consists of the Contract documents listed on this page. In the event of any conflict or contradicƟon between or among the documents aƩached to or otherwise incorporated into the Contract, the following order of precedence will govern this Contract in the following order:

1. Purchase Order

2. Contract Documents List

3. Business Associate Agreement

(“BAA”)4. BAA CerƟficaƟon Regarding TRS Personal Health InformaƟon

5. TRS General Terms and CondiƟons

6. Data Security – Terms and CondiƟons

7. Scope of Work

8. NoƟces, RepresentaƟves, and Records LocaƟon

9. Price Form

10. Insurance Requirements

11. Contractor’s Insurance CerƟficate (incorporated by reference)

12. Veteran Heroes United in Business SubcontracƟng Plan Requirements and InformaƟon

13. InformaƟon Security - Risk Assessment HIPAA Compliance – Supplemental Risk Assessment (incorporated by reference)

14. InformaƟon Security - Third-Party Assessment Form (incorporated by reference)

15. Signed CerƟficaƟon Regarding the Public Nature of Responses (incorporated by reference)

16. Exhibits

A. TRS ConfidenƟality Policy B. SolicitaƟon Number TRS000656 Posted on February 4, 2026 and Related Addenda (incorporated by reference) C. Contractor’s Best and Final Offer (incorporated by reference) D. Contractor’s IniƟal Response to SolicitaƟon (incorporated by reference)

Business Associate Agreement (“BAA”)

This is a placeholder for the BAA.

BAA CerƟficaƟon Regarding TRS Personal Health InformaƟon

This is a placeholder for the BAA CerƟficaƟon Regarding TRS Personal Health InformaƟon.

TRS General Terms and Conditions

Teacher Retirement System of Texas

General Terms and Conditions

These General Terms and Conditions ("Terms and Conditions") are incorporated for all purposes into the contract (“Contract”) between the Teacher Retirement System of Texas ("TRS") and Contractor. To the extent any provision contained in these Terms and Conditions conflicts with any provision contained elsewhere in the Contract, it is expressly understood and agreed that the provision contained in these Terms and Conditions shall control to the extent necessary to resolve the conflict.

1. Independent Contractor. Contractor and its employees, representatives, agents, subcontractors, suppliers, and third-party contractors shall serve as independent contractors in providing the services under this Contract. This Contract shall not create any joint venture, partnership, agency, or employment relationship between Contractor and TRS. Neither Contractor nor TRS is an agent of the other or may make commitments on the other party’s behalf. Contractor shall have no claim against TRS for vacation pay, sick leave, retirement benefits, social security, worker’s compensation, health or disability benefits, unemployment insurance benefits, or employee benefits of any kind.

2. E-Verify Program. Contractor certifies that for contracts for services it shall utilize the U.S.

Department of Homeland Security's E-Verify system to determine the eligibility of all persons hired by Contractor during the term of the Contract to perform duties in Texas and all persons, including subcontractors, assigned by Contractor during the term of the Contract to perform work pursuant to the Contract within the United States of America.

3. Subcontractors. For purposes of this clause, “subcontractor” does not include an affiliate of Contractor. Contractor may not subcontract the work or obligations due under this Contract without the prior written approval of TRS. Contractor expressly understands and acknowledges that in entering such subcontract(s), TRS is in no manner liable to any subcontractor(s) and all acts and omissions of any subcontractor(s) are imputed to Contractor.

In no event shall this provision relieve Contractor of the responsibility for ensuring that services performed under subcontracts are rendered in compliance with this Contract.

4. Criminal Background Checks. Contractor shall comply with, and cause any subcontractor provided by Contractor to comply with, TRS’ Background Check Policy ("BCP"). Contractor agrees pursuant to the BCP that when TRS determines that a criminal background check ("CBC") is required, TRS will conduct the CBC and Contractor shall reimburse TRS for the costs incurred by TRS in conducting the CBC. All information pertaining to a CBC shall only be provided to an authorized representative of TRS’ Organizational Excellence division.

5. No Conflicts of Interest. Contractor represents and warrants that the provision of goods and services or other performance under the Contract will not constitute an actual or potential conflict of interest or reasonably create an appearance of impropriety. Contractor will not have any relationship with a third party that could be construed as a violation of TRS’ Code of Ethics for Contractors (“TRS Code”). Contractor shall give notice to TRS of any actual, apparent, or potential conflict of interest as defined in, and in the manner required by, the TRS Code or applicable law.

6. Dealings with Public Servants Affirmation. Contractor represents and warrants that it has not given, offered to give, or intends to give at any time hereafter any economic opportunity, future employment, gift, loan, gratuity, special discount, trip, favor, or service to a public servant in connection with the Contract.

7. Financial Participation Prohibited Affirmation. Contractor certifies that neither Contractor, nor any person or entity represented by Contractor, has received compensation from TRS to participate in the preparation of any specifications or solicitation on which this Contract is based. Contractor certifies that the individual or business entity named in this Contract is not ineligible to receive this Contract and acknowledges that the Contract may be terminated, and payment withheld, if this certification is inaccurate.

8. Intellectual Property. Except as it concerns software-as-a-service products, to the extent services include deliverables created and produced by Contractor pursuant to the Contract, the term “Work” is defined as all work products, designs, specifications, systems, software, programs, intellectual property, deliverables, or other property generated for the benefit of TRS in connection with services provided under the Contract. TRS and Contractor each consider the Work and all products and results of services to be a work made for hire.

Contractor agrees that the Work, and all rights therein, belongs to and shall be the sole and exclusive property of TRS. If for any reason the Work would not be considered a work-for-hire under applicable law, Contractor does hereby sell, assign, and transfer to TRS, its successors and assigns, the entire right, title, and interest in and to the copyright in the Work and all works based upon, derived from, or incorporating the Work. Contractor shall execute all papers and perform such other property rights as TRS may deem necessary to secure for TRS the rights herein assigned. Failure to timely deliver such Work to TRS shall constitute a material breach of Contract. Contractor shall not retain copies of the Work without TRS’ prior written consent.

To the extent Work includes intellectual property created before the Effective Date or otherwise independent of the Contract (“Independent Assets”), Contractor hereby grants TRS a perpetual, irrevocable, royalty-free license solely for TRS’ internal business purposes for TRS to use, reproduce, create derivative works from, and distribute any such Independent Assets embodied in or delivered in conjunction with Work.

9. Taxes. Purchases made for State of Texas use are exempt from state sales and federal excise taxes. TRS will furnish tax exemption certificates upon request. Contractor represents and warrants that it shall pay all taxes or similar amounts resulting from the Contract, including, but not limited to, federal, State, or local income, sales, or excise taxes of Contractor or its employees. TRS shall not be liable for taxes resulting from the Contract.

10. Excess Obligations Prohibited. This Contract is subject to termination or cancellation, without penalty to TRS, either in whole or in part, subject to the availability of state funds.

Contractor understands that nothing in the Contract creates an obligation or liability exceeding budgeted funds currently available to TRS during the current biennium, except to the extent that TRS' Board of Trustees ("Board") determines that expenditure of pension trust funds exceeding the amounts currently budgeted to compensate Contractor for performance of services is necessary for fulfilling the Board's fiduciary duties.

11. Invoices and Payment. Contractor shall submit invoices through TRS’ Procurement and

Vendor E-System (PAVES). Vendors will be required to activate an account in PAVES to submit invoices. Payment to Contractor will be made within thirty (30) days of TRS’ receipt of Contractor’s undisputed invoice. No increase in any amount due by TRS under this Contract shall be binding on TRS without TRS’ prior written consent. Interest for late payments shall be governed by the Texas Prompt Payment Act, chapter 2251 of the Texas Government Code.

Contractor shall not bill TRS for required training pursuant to the Non-TRS Workers (Contract Workers, Unpaid Interns and Volunteers) Policy, unless such costs are specifically authorized in the Contract. In the event such costs are specifically authorized, they shall be itemized in Contractor’s invoice.

12. Reimbursement for Travel. Travel reimbursement is limited to actual costs incurred by Contractor and shall not exceed the maximum allowed for State employees by the Texas Comptroller of Public Accounts. Contractor will not be compensated for any travel expenses, unless contemplated by this Contract and otherwise pre-approved by TRS in writing. Under no circumstances will Contractor be compensated for off-duty hours while traveling.

13. Release of Payment Claims by Contractor. Contractor agrees that its acceptance of final payment under the Contract constitutes a complete and legally effective release of TRS and waiver of all known or unknown payment claims against TRS related to the Contract.

14. Contracting Information Responsibilities. In accordance with Section 552.372 of the Texas Government Code, Contractor agrees to (1) preserve all contracting information related to the Contract as provided by the records retention requirements applicable to TRS for the duration of the Contract, (2) promptly provide to TRS any contracting information related to the Contract that is in the custody or possession of Contractor on request of TRS, and (3) on termination or expiration of the Contract, either provide at no cost to TRS all contracting information related to the Contract that is in the custody or possession of Contractor or preserve the contracting information related to the Contract as provided by the records retention requirements applicable to TRS. Except as provided by section 552.374(c) of the Texas Government Code, the requirements of subchapter J of chapter 552 of the Texas Government Code may apply to the Contract and Contractor agrees that the Contract can be terminated if Contractor knowingly or intentionally fails to comply with a requirement of that subchapter.

15. Records Retention; Inspection of Records. Contractor shall maintain and retain all records relating to Contract performance, including supporting fiscal documents that are adequate to ensure that claims for contract funds are made in accordance with applicable State of Texas requirements. Contractor shall maintain and retain these records in accordance with TRS' records retention schedule for a period of seven (7) years after the Contract expiration date or until all associated audit, claim, and litigation matters are resolved, whichever is later. During any term of the Contract, Contractor shall, at reasonable times and upon reasonable notice, permit TRS, its agents, and authorized state and federal agencies to have access to all records pertaining to the Contract, as necessary, for purposes of inspection, monitoring, copying, audit, and evaluation.

16. TRS Data and Confidentiality.

16.1 The term “TRS Data” refers to TRS information, as well as other entity information in the possession of TRS, other than Contractor’s intellectual property, that is processed, stored, or transmitted by a computer, including data generated by Contractor in performance of Contract services. For purposes of the Contract, TRS Data maintained by or for TRS constitutes confidential information and includes information confidential by law or otherwise excepted from disclosure under the TPIA. Contractor shall maintain the confidentiality of TRS Data and prevent unauthorized disclosure. Contractor will not collect, access, use, disclose, or retain TRS Data other than as necessary to perform Contract services or as otherwise authorized in writing by TRS. Contractor will restrict access to TRS Data to only those personnel who must have the information on a “need to know” basis. Contractor will not use TRS Data or any information derived from TRS Data for its own benefit or the benefit of any other person or entity. Except to the extent required to perform Contract services, Contractor will not share TRS Data with its parent company or other affiliate without TRS’ express written consent.

Contractor shall not disclose TRS Data to any third party, except as specifically provided in the Contract or as required by applicable law or court order. Contractor shall notify third parties to whom TRS Data is disclosed of the confidentiality terms of the Contract. Where disclosure of TRS Data to any third party is required by applicable law or court order, Contractor, as permitted by law, shall notify TRS prior to its disclosure.

16.2 Contractor shall disclose to TRS all artificial intelligence (“AI”) technology it uses to provide Contract services and not use services or any data forming a part thereof: (i) to train any generative AI or large language models; or (ii) in the development of any such generative AI or large language models, except as may be expressly agreed to in writing by TRS.

Contractor shall use its best efforts to mitigate risks associated with the use of AI. Contractor shall comply with all applicable federal and state laws, regulations, and guidelines, including those that regulate privacy, security, employment discrimination, intellectual property rights, and consumer protection regarding the use of AI in the provision of Contract services.

16.3 Contractor shall comply with TRS’ Confidentiality Policy and TRS’ information security requirements with respect to Contract services. Contractor shall implement and document a comprehensive information security program and use reasonable security practices to make its services secure. If the security of any TRS Data is compromised or breached, Contractor shall immediately notify TRS both orally by telephone and in writing, but no later than 12 hours after it becomes aware of the compromise or breach and reimburse TRS for reasonable out-of-pocket expenses directly resulting from such compromise or breach. In the event a compromise or breach involves a person’s sensitive personal information, Contractor shall comply with the notice requirements of section 521.053 of the Texas Business and Commerce Code and provide identity theft protection services for one (1) year for each affected person.

16.4 Contractor's obligations under this provision shall survive termination of the Contract.

17. Cybersecurity Training. Contractor represents and warrants that it will comply with section

2063.104 of the Texas Government Code relating to cybersecurity training and required verification of completion of the training program.

18. Data Management and Security Controls. In accordance with section 2054.138 of the Texas Government Code, Contractor certifies that it will comply with the security controls required under the Contract and maintain and make records available to TRS as evidence of Contractor’s compliance with the required controls.

19. Cloud Computing State Risk and Authorization Management Program (TX-RAMP).

Pursuant to section 2063.408(d)-(f) of the Texas Government Code relating to the cloud computing state risk and authorization management program, Contractor represents and warrants that it complies with the requirements of the state risk and authorization management program and agrees that throughout the term of the Contract it shall maintain its certifications and comply with program requirements.

20. Public Information Act. Information, documentation, and other material in connection with the Contract may be subject to public disclosure under chapter 552 of the Texas Government Code, also known as the Texas Public Information Act ("TPIA"). In accordance with section 2252.907 of the Texas Government Code, Contractor is required to make information created or exchanged with the State under the Contract and not otherwise excepted from disclosure under the TPIA available in a format accessible to the public at no additional charge to the State. Contractor waives any claim against and releases from liability TRS, its trustees, employees, agents, attorneys, and TRS as trustee of any trust fund managed by TRS, with respect to requested information related to the Contract determined by the Office of the Attorney General of Texas (“Attorney General”), a court of law, or TRS to be subject to disclosure under the TPIA.

21. Insurance. Contractor shall procure and maintain at Contractor’s expense throughout the Contract term and any renewals or extensions thereof insurance coverage as may be specified in the Contract. TRS may issue a written request for applicable certificates of insurance which Contractor shall provide to TRS within a reasonable amount of time.

22. Force Majeure. Neither Contractor nor TRS shall be liable to the other for any delay in or failure of performance of any Contract requirement caused by force majeure events, such as war or an act of war, order of legal authority, act of God, work stoppages due to labor strikes, lockouts, fires, explosions, hurricanes, floods, failure of transportation, epidemics, riots, sabotage, or other causes that are beyond the reasonable control of either party and that by exercise of due foresight such party could not reasonably have been expected to avoid, and which, by the exercise of all reasonable due diligence, such party is unable to overcome. The existence of such causes of delay or failure shall extend the period of performance until after the causes of delay or failure have been removed, provided the non-performing party exercises all reasonable due diligence to perform. TRS reserves the right to employ any means legally permissible to have Contract services performed during a force majeure event.

23. INDEMNIFICATION.

23.1 CONTRACTOR SHALL DEFEND, INDEMNIFY, AND HOLD HARMLESS THE STATE OF

TEXAS AND TRS AND THEIR OFFICERS, AGENTS, EMPLOYEES, REPRESENTATIVES,

CONTRACTORS, ASSIGNEES, AND DESIGNEES FROM ANY AND ALL LIABILITY, ACTIONS,

THIRD-PARTY CLAIMS, DEMANDS, SUITS, FINES, OR PENALTIES AND ALL RELATED COSTS,

ATTORNEY FEES, AND EXPENSES ARISING OUT OF OR RESULTING FROM ANY NEGLIGENT

ACTS OR OMISSIONS OR WILLFUL MISCONDUCT OF CONTRACTOR OR ITS AGENTS,

EMPLOYEES, SUBCONTRACTORS, ORDER FULFILLERS, OR SUPPLIERS OF SUBCONTRACTORS

IN THE EXECUTION OR PERFORMANCE OF THE CONTRACT AND ANY PURCHASE ORDERS

ISSUED UNDER THE CONTRACT. CONTRACTOR SHALL ALSO DEFEND, INDEMNIFY, AND HOLD

HARMLESS THE STATE OF TEXAS AND TRS FROM AND AGAINST ALL THIRD-PARTY CLAIMS

ARISING FROM INFRINGEMENT OR ALLEGED INFRINGEMENT OF ANY INTELLECTUAL

PROPERTY ARISING OUT OF THE PERFORMANCE OF SERVICES.

23.2 CONTRACTOR AND TRS AGREE TO FURNISH TIMELY WRITTEN NOTICE TO EACH

OTHER OF ANY CLAIMS. THE DEFENSE SHALL BE COORDINATED BY CONTRACTOR WITH THE

ATTORNEY GENERAL WHEN TEXAS STATE AGENCIES ARE NAMED DEFENDANTS IN ANY

LAWSUIT AND CONTRACTOR MAY NOT AGREE TO ANY SETTLEMENT WITHOUT FIRST

OBTAINING CONCURRENCE FROM THE ATTORNEY GENERAL. NOTWITHSTANDING ANY

OTHER PROVISION TO THE CONTRARY, TRS SHALL NOT INDEMNIFY CONTRACTOR OR ANY

OTHER ENTITY UNDER THE CONTRACT.

24. LIMITATION OF LIABILITY. TRS’ LIABILITY UNDER THE CONTRACT IS SUBJECT TO CHAPTER

2260 OF THE TEXAS GOVERNMENT CODE. NEITHER PARTY SHALL BE LIABLE TO THE OTHER

FOR INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES OR LOSS OF

PROFITS OR REVENUES, ANTICIPATED OR OTHERWISE, IN CONNECTION WITH OR ARISING

OUT OF THE SUBJECT MATTER OF THE CONTRACT, EXCEPT AS IT CONCERNS CONTRACTOR’S

POTENTIAL LIABILITY UNDER ANY BUSINESS ASSOCIATE AGREEMENT (“BAA”) ASSOCIATED

WITH THE CONTRACT. NOTWITHSTANDING ANY OTHER PROVISION TO THE CONTRARY, NO

DISCLAIMER OR LIMITATION OF LIABILITY SHALL APPLY TO: (1) CONTRACTOR’S

INDEMNIFICATION OBLIGATIONS; (2) DAMAGES CAUSED BY CONTRACTOR’S GROSS

NEGLIGENCE, FRAUD, OR WILLFUL MISCONDUCT; AND (3) TO THE EXTENT A BAA IS

EXECUTED BY THE PARTIES, LOSSES ARISING UNDER THE BAA.

25. Termination. TRS may terminate all or any part of the Contract for cause, default, or breach by providing Contractor with advance written notice. Upon Contractor's receipt of the notice, Contractor shall cease performing services, except those directly pertaining to Contractor's efforts to cure the breach. Within ten (10) days of Contractor's receipt of the notice, Contractor must cure the breach or demonstrate to TRS’ satisfaction that a breach has not occurred. If Contractor does not timely cure the breach or demonstrate to TRS' satisfaction that a breach has not occurred, TRS may immediately terminate the Contract. TRS may also terminate all or any part of the Contract for convenience, without cost or penalty, by providing Contractor with thirty (30) calendar days' advance written notice. Upon receipt of the notice, Contractor shall, unless otherwise mutually agreed upon in writing, cease all work immediately upon the effective date of termination. TRS shall be liable for payments limited only to the portion of work authorized by TRS in writing and which Contractor has completed, delivered to TRS, and which has been accepted by TRS. TRS shall have no other liability, including no liability for costs associated with termination.

26. Suspension. TRS may suspend with immediate effect all or part of Work for cause by giving notice to Contractor. The suspension will continue until TRS notifies Contractor that it is lifted.

TRS has no obligation to lift the suspension until satisfied that Contractor will comply with relevant requirements. Contractor is not entitled to compensation or reimbursement while Work is suspended for cause. TRS may also suspend with immediate effect all or part of Work for convenience by giving notice to Contractor. The suspension will continue until TRS notifies Contractor that it is lifted. TRS may reimburse Contractor for reasonable, documented, direct, and non-recoverable expenses resulting from suspension for convenience that could not have reasonably been avoided by Contractor.

27. Non-Exclusive Remedies. If Contractor defaults, TRS shall have the right to exercise its legal and equitable remedies, including, without limitation, the right to suspend, terminate, or seek specific performance. In addition, TRS may (itself or through another contractor) complete Work and Contractor shall pay TRS costs and expenses reasonably incurred in completing Work, resulting from delay in completing Work, and in connection with Contract termination. These remedies are not exclusive and TRS reserves all other rights and remedies available under the Contract.

28. Debarment. Contractor certifies that it and its principals are not suspended or debarred from doing business with the State of Texas or the federal government as listed on the State of Texas Debarred Vendor List maintained by the Texas Comptroller of Public Accounts and the System for Award Management maintained by the General Services Administration.

29. Excluded Parties. Contractor certifies that it is not listed in the prohibited vendors list authorized by Executive Order No. 13224, "Blocking Property and Prohibiting Transactions with Persons Who Commit, Threaten to Commit, or Support Terrorism," published by the United States Department of the Treasury, Office of Foreign Assets Control ("OFAC"). Contractor also certifies that no principal, partner, member, director, officer, or holder of a controlling interest in Contractor is under sanctions programs or lists administered by OFAC, including the List of Specially Designated Nationals and Blocked Persons administered by OFAC, as such list may be amended from time to time.

30. Foreign Terrorist Organizations. Contractor represents and warrants that it is not engaged in business with Iran, Sudan, or a foreign terrorist organization, as defined under federal and state law.

31. Foreign Adversaries. Respondent or Contractor certifies that neither Respondent or Contractor, nor any of its holding companies or subsidiaries, is: a) listed in Section 889 of the 2019 National Defense Authorization Act (“NDAA”); b) listed in Section 1260H of the 2021 NDAA; c) owned by the government of a country on the U.S. Department of Commerce's (“USDOC”) foreign adversaries list under Section 791.4 of Title 15 of the Code of Federal Regulations (“CFR”); or d) controlled by any governing or regulatory body located in a country on the USDOC’s foreign adversaries list under Section 791.4 of Title 15 of the CFR.

32. Boycotts and Discrimination. Contractor certifies and verifies that it: 1) does not boycott Israel and will not boycott Israel during any term of the Contract; 2) does not boycott energy companies and will not boycott energy companies during any term of the Contract; and 3) does not have a practice, policy, guidance, or directive that discriminates against a firearm entity or firearm trade association and will not discriminate during any term of the Contract against a firearm entity or firearm trade association.

33. Critical Infrastructure Affirmation. Pursuant to section 2275.0102 of the Texas Government Code, Contractor certifies that neither it nor its parent company, nor any affiliate of Contractor or its parent company, is: (1) majority owned or controlled by citizens or governmental entities of China, Iran, North Korea, Russia, or any other country designated by the Governor under section 2274.0103 of the Texas Government Code or (2) headquartered in any of those countries.

34. Business Operations and Practices. Contractor represents and warrants that: a) it is in good standing and authorized to do business in the State of Texas; b) it is compliant with or exempt from State of Texas franchise tax requirements; c) it and its officers have not been the subject of allegations of deceptive trade practice violations under chapter 17 of the Texas Business and Commerce Code or unfair business practices in an administrative hearing or court suit; and

d) it and its officers have not been found liable for deceptive trade or unfair business practices in such proceedings. Contractor agrees to promptly notify TRS in writing upon any material change in its authorization, licensing, or certification status in any jurisdiction where authorization, licensure, or certification is required to perform Contract services.

35. Antitrust Affirmation. Contractor represents and warrants that neither Contractor nor the firm, corporation, partnership, or institution represented by Contractor or anyone acting for such has (1) violated any provision of the Texas Free Enterprise and Antitrust Act of 1983, chapter 15 of the Texas Business and Commerce Code or federal antitrust laws; or (2) communicated directly or indirectly the contents of the Contract to any competitor or other person engaged in the same line of business as Contractor.

36. Legal and Regulatory Actions. Contractor represents and warrants that it is not aware of and has received no notice of any court or governmental agency actions, proceedings, or investigations pending or threatened against Contractor or any individuals or entities who will provide services under the Contract within the five (5) calendar years immediately preceding the date of execution of the Contract that would or could impair Contract performance or otherwise relate to Contract services. Contractor shall notify TRS in writing within five (5) business days of any changes to this representation and warranty and agrees that failure to do so shall constitute breach of contract and may result in immediate termination of the Contract.

37. Child Support Obligation Affirmation. Under Section 231.006, Family Code, the vendor or applicant certifies that the individual or business entity named in this contract, bid, or application is not ineligible to receive the specified grant, loan, or payment and acknowledges that this contract may be terminated and payment may be withheld if this certification is inaccurate.

38. Executive Head of a State Agency Affirmation. In accordance with section 669.003 of the Texas Government Code, Contractor certifies that it is not (1) the executive head of TRS, (2) a person who at any time during the four years before the date of the Contract was the executive head of TRS, or (3) a person who employs a current or former executive head of TRS.

39. Disclosure of Prior TRS Employment. Contractor represents and warrants that none of its employees authorized to provide Contract services has been employed by TRS at any time during the two years immediately preceding the date of Contract execution.

40. Debts and Delinquencies Affirmation. Contractor agrees that payments due under the Contract shall be applied towards any debt or delinquency owed to the State of Texas.

41. Disaster Recovery Plan. Upon TRS’ request, Contractor shall provide descriptions of its business continuity and disaster recovery plans.

42. False Statements. Contractor represents and warrants that all statements and information prepared and submitted to TRS by Contractor prior to execution of the Contract are current, complete, true, and accurate. Contractor acknowledges that submission of false statements or material misrepresentations shall constitute material breach of and may void the Contract.

43. Computer Equipment Recycling Program. If the Contract concerns the purchase or lease of computer equipment, Contractor certifies that it complies with subchapter Y of chapter 361 of the Texas Health and Safety Code and chapter 328 of title 30 of the Texas Administrative Code.

44. Television Equipment Recycling Program. If the Contract concerns the purchase or lease of covered television equipment, Contractor certifies that it complies with subchapter Z of chapter 361 of the Texas Health and Safety Code.

45. Continuing Obligations.

45.1 Continuing Obligation to Comply with Law. Alterations, additions, or deletions to these Terms and Conditions required by changes in federal or state law or regulation are automatically incorporated into the Contract without written amendment and become effective on the date designated by such law or regulation. Contractor acknowledges and agrees that it is under a continuing obligation during any term of the Contract, and afterwards to the extent applicable, to comply with all laws, regulations, requirements, guidelines, and TRS policies applicable to Contractor.

45.2 Continuing Obligation to Notify TRS. Contractor shall promptly inform TRS in accordance with the “Notice” provision of these Terms and Conditions of any changes and updates related to any Contractor representations and services provided under the Contract.

46. Assignment.

46.1 Assignment of Payment. In accordance with the “Signature Authority” provision of these Terms and Conditions, Contractor shall provide TRS with notice of assignment of payment due under this Contract as promptly as possible.

46.2 Assignment of Contractual Performance. Contractor shall not assign its rights under the Contract or subcontract or otherwise delegate performance of its duties under the Contract without prior written approval from TRS. In the event approval is given, the assignee, subcontractor, or delegate shall be subject to all Contract terms and conditions. Any attempted assignment in violation of this provision is void and without effect. Contractor shall provide TRS with sufficient notice of the proposed assignment and supporting documentation which will enable TRS to timely complete its review.

47. No Third-Party Beneficiaries. The Contract is made solely and specifically among and for the benefit of the parties named herein and their respective successors and assigns and no other person shall have any right, interest, or claims hereunder or be entitled to any benefits pursuant to or on account of the Contract as third-party beneficiary or otherwise.

48. Publicity and Endorsement. Contractor shall not use TRS' name, logo, or other likeness in any press release, marketing material, or other announcement without TRS' prior written approval. TRS does not endorse any vendor, commodity, or service. Contractor is not authorized to make or participate in any media release or public announcement relating to the Contract or the services to which it relates without the prior written consent of TRS' Executive Director or Deputy Director.

49. Dispute Resolution. The dispute resolution process provided for in chapter 2260 of the Texas Government Code must be used to attempt to resolve any claim for breach of contract made by Contractor that cannot be resolved in the ordinary course of business. All remedies for claims of breach of contract shall be governed by chapter 2260 of the Texas Government Code.

50. Sovereign Immunity. Nothing in the Contract shall be construed as a waiver of TRS' or the State of Texas' sovereign immunity or any of the privileges, rights, defenses, remedies, or immunities available to TRS or the State of Texas. The failure to enforce or any delay in the enforcement of any privileges, rights, defenses, remedies, or immunities available to TRS or the State of Texas under the Contract or applicable law shall not constitute a waiver of such privileges, rights, defenses, remedies, or immunities or be considered as a basis for estoppel.

TRS does not waive any privileges, rights, defenses, or immunities available to TRS by entering the Contract or by its conduct prior to or after entering the Contract.

51. Governing Law and Venue. The Contract shall be governed by and construed in accordance with the laws of the State of Texas without regard to conflict of law provisions.

The venue of any suit arising under the Contract shall be considered fixed in any court of competent jurisdiction of Travis County, Texas.

52. Notice. Except as otherwise specifically provided under the Contract, notice to TRS shall be made in writing and delivered to the following addresses, as applicable:

For Information Security Matters:

Information Security Office Teacher Retirement System of Texas 1900 Aldrich Street Austin, Texas 78723 InfoSec@trs.texas.gov

For Legal and Compliance Matters:

Legal and Compliance Teacher Retirement System of Texas 4655 Mueller Boulevard Austin, Texas 78723

LegalNotices@trs.texas.gov

Notice shall be deemed to have been duly given to TRS: (a) if delivered by hand, courier, or overnight delivery service upon delivery; (b) if sent by certified or registered mail return receipt requested with first-class postage prepaid two business days after deposit in the mail; or (c) in the case of electronic mail, when sent. Notice must be sent to the applicable electronic mail address set forth above or at such other electronic mail address as TRS may furnish to Contractor. The parties shall promptly notify each other in writing of any change of address, telephone number, or electronic mail address.

53. Binding Effect. The Contract shall inure to the benefit of, be binding upon, and be enforceable against each Party and their respective permitted successors, assigns, transferees and delegates.

54. No Implied Waiver. Failure of a party to require performance by another party under the Contract will not affect the right of such party to require performance in the future. No delay, failure, or waiver of either party’s exercise or partial exercise of any right or remedy under the Contract shall operate to limit, impair, preclude, cancel, waive, or otherwise affect such right or remedy. A waiver by a party of any breach of any Contract term shall not be construed as a waiver of any continuing or successive breach.

55. Severability. If any provision of the Contract is construed to be illegal or invalid, such construction will not affect the legality or validity of any other provision. The illegal or invalid provision will be deemed severable and stricken from the Contract as if it had never been incorporated herein, but all other provisions will continue in full force and effect.

56. Survival. Expiration or termination of the Contract for any reason does not release Contractor from any liability or obligation set forth in the Contract that is expressly stated to survive any such expiration or termination, that by its nature would be intended to be applicable following any such expiration or termination, or that is necessary to fulfill the essential purpose of the Contract.

57. Entire Contract. All exhibits to the Contract are intended to be attached and incorporated herein by reference as if set forth in full. The Contract sets forth the final, complete, and exclusive understanding of the parties with respect to contemplated services and supersedes all prior and contemporaneous oral or written contracts, understandings, representations, and negotiations between the parties relating to the subject matter of the Contract.

58. Amendments. The Contract may be amended only in a writing signed by authorized representatives of TRS and Contractor.

59. Renewals and Extensions. TRS may renew the Contract in accordance with the terms of the Contract. TRS may also unilaterally extend the Contract for 180 days beyond its expiration.

60. Signature Authority. Each party represents and warrants that the individual signing the Contract has authority to execute it on the respective party’s behalf. The Contract may be executed in one or more counterparts, each of which is an original, and all of which together constitute only one agreement between the parties. Counterparts may be executed and delivered via electronic signature by either party and the receiving party may rely on the receipt of such counterpart as if the original had been received. Any written authorization provided by an individual of a party who lacks delegated authority is non-binding as to any purported agreement between the parties.

Data Security – Terms and CondiƟons

Teacher ReƟrement System of Texas Data Security Terms and CondiƟons

These InformaƟon Security Terms and CondiƟons ("InfoSec Terms") are incorporated for all purposes into the contract (“Contract”) between the Teacher ReƟrement System of Texas ("TRS") and Contractor. To the extent that any provision contained in these InfoSec Terms conflicts with any provision contained elsewhere in the Contract, it is expressly understood and agreed that the provision contained in these InfoSec Terms shall control to the extent necessary to resolve the conflict. If Contractor and TRS have entered into a Business Associate Agreement (“BAA”), the terms of the BAA shall control to the extent necessary to resolve the conflict.

The term “TRS Data” refers to all TRS informaƟon, as well as other enƟty informaƟon in the possession of TRS, that is processed, stored, or transmiƩed by a computer, including data that is generated by Contractor in the performance of services under the Contract.

1. Data ConfidenƟality. SecƟon 16 (TRS Data and ConfidenƟality) of the TRS General Terms and CondiƟons shall apply to these InfoSec Terms.

2. Auditable InformaƟon Security Framework. Contractor agrees to maintain security controls that, at a minimum, conform to an industry-accepted, auditable informaƟon security framework, including for example, NIST SP 800-53 or ISO 27001.

3. InformaƟon System Security. Contractor agrees, at all Ɵmes, to maintain commercially reasonable informaƟon security protecƟon(s) that, at a minimum, include idenƟty and access management, network firewalls, intrusion detecƟon/prevenƟon, and periodic vulnerability and penetraƟon tesƟng conducted by a qualified independent third-party. Contractor further agrees to maintain secure environments by employing vulnerability scanning tools and techniques to idenƟfy informaƟon systems flaws, improper configuraƟons, and vulnerabiliƟes. Contractor shall remediate and miƟgate vulnerabiliƟes in a Ɵmely manner.

4. Data Security. Contractor agrees to protect and maintain the security of TRS Data and agrees to conform to the following measures to protect and secure data:

4.1. Data in Transit. Contractor agrees that any and all transmission or exchange of system applicaƟon data with TRS shall take place using secure, authenƟcated, and industry-accepted encrypƟon mechanisms, such as (1) SFTP (FTP over SSH), (2) FTPS (FTP over TLS), (3) HTTPS (HTTP over TLS), and (4) virtual private network.

4.2. Data Custodianship. Contractor agrees that all TRS Data in Contractor’s custody will be stored, processed, and maintained solely on Contractor informaƟon systems as designated in the Contract. TRS Data in the custody of the Contractor shall not be stored on or transferred to any end-user compuƟng device or any portable storage medium by Contractor or its agents, unless that storage medium is in use as part of the Contractor’s designated backup and recovery processes (e.g., backup tapes or drives). All servers, storage, backups, and network paths uƟlized in the delivery of the service shall be contained within the states, districts, and territories of the United States unless specifically agreed to in wriƟng by an authorized agent of TRS. An appropriate officer with the necessary authority can be idenƟfied by TRS’ Chief InformaƟon Security Officer for any general or specific case.

Contractor shall ensure that TRS Data (i.e., primary and backup) remains, at all Ɵmes, within the conƟnental United States. Contractor shall receive, process, transmit, and store all TRS Data within the conƟnental United States. Contractor’s point of access to TRS Data shall be within the conƟnental United States.

4.3. Data at Rest. Contractor agrees to encrypt all TRS Data at rest, including its backup and recovery data, in encrypted form, using industry-accepted encrypƟon algorithms commensurate with the classificaƟon of the informaƟon being protected (e.g., AES 128-bit or higher).

5. Data Breach. Contractor agrees to comply with all applicable state and federal laws that require the noƟficaƟon of individuals in the event of unauthorized access to or release of personally idenƟfiable informaƟon or other event requiring noƟficaƟon. If an event occurs in which the security of any TRS Data results in the accidental or deliberate unauthorized access, loss, disclosure, modificaƟon, disrupƟon, or destrucƟon, Contractor shall immediately noƟfy TRS both orally by telephone and in wriƟng, via encrypted email to breachnoƟficaƟons@trs.texas.gov, but no later than 12 hours aŌer Contractor’s discovery or reasonable belief of an event.

Contractor shall reimburse TRS for reasonable out-of-pocket expenses directly resulƟng from such security incident. In the event a security incident involves a person’s sensiƟve personal informaƟon, Contractor shall comply with the noƟce requirements under SecƟon 521.053 of the Texas Business and Commerce Code and provide idenƟty theŌ protecƟon services for one (1) year for each affected person.

6. End of Agreement Data Handling. Contractor agrees within 30 days of terminaƟon of Contract or receipt of a wriƩen request submiƩed by an authorized agent of TRS, that it must:

6.1. Securely return all data, including backup and recovery data, in a Ɵmely manner, for no addiƟonal compensaƟon, following the terminaƟon of the services, to TRS in an agreed file format usable without the outsourced informaƟon system or cloud service;

6.2. SaniƟze (clear, purge, or destroy in a manner consistent with NIST Special PublicaƟon 800-88) all TRS Data in its enƟrety in a manner that prevents its physical reconstrucƟon through the use of commonly available file-restoraƟon uƟliƟes; and

6.3. Submit to TRS AƩachment A (Data DestrucƟon/Return CerƟficaƟon Regarding TRS Data) cerƟfying in wriƟng that these acƟons have been completed and provide to TRS a record of destrucƟon.

AƩachment A

TEACHER RETIREMENT SYSTEM OF TEXAS

DATA DESTRUCTION/RETURN CERTIFICATION REGARDING TRS DATA

Contract Name:_____________________ Contract Number:___________________ Contract Date:______________________

I _________________________________ (name/ Ɵtle) of __________________________ (organizaƟon), pursuant to SecƟons 6.1 and 6.2 of the TRS InformaƟon Security Terms and CondiƟons entered into as part of the contract for services idenƟfied above, cerƟfy the following:

The term “TRS Data” refers to all TRS informaƟon, as well as other enƟty informaƟon in the possession of TRS, that is processed, stored, or transmiƩed by a computer, including data that is generated by Contractor in the performance of services under the Contract.

The following TRS Data related to the above idenƟfied contract has been destroyed in the following manner on the following date:

The following TRS Data related to the above idenƟfied contract has been returned to TRS in the following manner and on the following date. :

Return or destrucƟon of the following TRS Data related to the above idenƟfied contract is infeasible for the following reasons:

Such informaƟon which for which return, or destrucƟon is infeasible will be protected under the terms of the TRS InformaƟon Security Terms and CondiƟons for as long as our organizaƟon retains it.