NPSS1 EGBA 2026000144 Ensono OIT Signed - to post.pdf

Docusign Envelope ID: 64704180-DBBA-451E-A663-44EA871434A5

3/23/2026

Office of Information TechnologyDirector - DC & MF

Scott Stephens Acme CorporationOIT Procurement Official

3/23/2026

STATEMENT OF WORK

HOSTED MAINFRAME AS A SERVICE (MFaaS)

Introduction and Project Overview

This Statement of Work (“SOW” or “Statement of Work”) is effective as of the date the applicable Task Order is executed by the State and Contractor (“SOW Effective Date”), by and between the State of Colorado Governor’s Office of Information Technology (“State” or “Client”) and Ensono, LLC (“Contractor”). This SOW sets forth the scope of work and terms and conditions applicable to the Services to be provided to the State by Contractor.

Deliverables

Contractor will provide the Services as detailed in Exhibits G, H, I, J, and K, attached, and described in the applicable Service Descriptions (“Scope of Work”). “Service Descriptions” refers to the product-specific technical descriptions of the Services, which are attached to this

SOW.

The Services under this SOW will begin on the date Contractor begins providing the Service and will continue for 17 months (the “Service Term”).

Assumptions

The following assumptions apply to the Services throughout the Service Term:

a. While performing the Services, if Ensono encounters: (i) any concealed or unknown condition, (ii) a Client responsibility contained in this SOW which has not been met, or (iii) a delay, including migration project delays or holds, caused by Client, then the scope, schedule and/or fees for this SOW may be equitably adjusted as necessary via execution of an Amendment to the Task Order. If the parties cannot agree to the Amendment, Ensono shall not be obligated to deliver the affected Services.

b. The Services may be performed at a Client facility or remotely, at Ensono’s sole discretion.

c. All project documentation, presentations and communication will be in the English language using standard Ensono templates and formats, which constitute Ensono proprietary and confidential information.

d. Ensono has the sole discretion to determine the staffing assignments for its Services.

e. If, in connection with the provision of the Services, Ensono requires access to any Client facilities, systems or applications, for purposes of obtaining all applicable user IDs, badges or other forms of identification or authorization for all applicable Ensono associates, Ensono agrees to perform Ensono’s standard background screens (information relating to which is available upon request) and to provide the applicable associates’ full legal names, work phone numbers and work e-mail addresses. A background check (which may be satisfied by a CJIS check, if required) performed within 30 days prior to the date such employee or agent begins performing services for the Contractor, shall be deemed to be current. If Client requires any additional information, screening, or training Client agrees to request such information prior to execution of this SOW and acknowledges that such additional information, screening, or training may result in additional charges.

f. Anything not expressly specified in the Scope of Work in the SOW is out of scope. Any request to modify the Scope of Work will be subject to an Amendment to the Task Order.

If Ensono, in its discretion, agrees to perform any out-of-scope services upon Client’s request without an Amendment, such services will be priced at Ensono’s then-current list rates.

g. Ensono has agreed to assume financial responsibility for certain Software products as described in more detail on Exhibit A. However, with respect to the following Software products, Ensono shall pass through to Client (and Client shall be responsible for paying) any increase in cost more than the Assumed Cost identified below: Not applicable.

h. Client agrees and acknowledge that, while Ensono may provide certain security services hereunder, Ensono is not responsible for Client’s compliance with legal and regulatory requirements and guidelines, including but not limited to IRS Publication 1075 (Tax Information Security Guidelines for Federal, State and Local Agencies). Any such regulatory or standard-based compliance remains the obligation of the Client. Ensono is solely responsible for providing the Services as described in this SOW.

Client Obligations

In supporting delivery of the Services, Client will perform the obligations described below.

a. Provide any notices and obtain any consent required for Ensono to perform Services.

b. Provide Ensono with access to any necessary Client environments (including third party products) to receive and support the Services.

c. Make available such subject matter experts as required by Ensono.

d. Ensure that any applicable third-party service providers attend any workshops as reasonably required by Ensono. Client will further ensure that any such third-party service providers have signed commercially reasonable non-disclosure agreements governing any information exchanged in connection with such workshops. Ensono will use commercially reasonable efforts to provide Client with not less than 5 business days’ prior notice before any workshop where third party service providers are required to attend.

e. Ensure that existing Client procedural and business process documentation is made available to Ensono in a timely manner prior to the start of the Services.

f. Notify Ensono promptly, but in no event later than 5 business days, following discovery of any inaccuracies or incomplete information in any project documents provided by or to Client.

g. Provide a single point of contact to be the primary interface to Ensono (the “Client Contact”). The Client Contact will be empowered to allocate resources and make decisions on behalf of Client in a timely fashion and responsible for:

i. Specifically identifying and providing Ensono with access to all relevant Client-controlled information, resources and locations required in connection with the Services.

ii. Providing Ensono the contact information (including name and office and mobile phone numbers) for all Client team members with whom Ensono will interface.

iii. Attending periodic status meetings to discuss progress and any other issues that arise during the Service Term.

h. Ensure Client team members fulfill their obligations and assigned tasks as defined in the SOW and as agreed between the parties.

i. Manage all necessary communications and change management activities within Client organization in connection with the Services, including but not limited to: Corporate communications, business process changes, procedural or policy changes, and escalation management on behalf of Client.

j. Ensure that any third parties that may have or acquire an interest in Client’s assets are informed and understand that all equipment, peripherals and other assets owned by Ensono that are used in providing the Services belong to Ensono and that Client does not own or have any interest therein, and Client shall cooperate with Ensono in providing any notices or making any filings with governmental entities or otherwise that Ensono deems necessary to clarify or denote its ownership of such assets.

k. Ensure that Client does not provide third party system access to a Client environment managed by Ensono, without: (i) first providing Ensono with at least five (5) business days’ prior written notice which shall include a description of such access; and (ii) ensuring such access is subject to a confidentiality agreement no less restrictive than the obligations under the Agreement. Ensono shall not be responsible for any degradation or failure of the Service resulting from such access including but not limited to Service Level failures.

l. Client retains responsibility for mainframe access control and Client is responsible for the security related thereto.

Controls

Status Reports. Ensono and Client will each make reasonable efforts to meet or speak periodically to review the progress of this SOW and adherence to any applicable schedule. Prior to the performance of this SOW, each party will designate the appropriate personnel to take part in any such meeting.

Change Control. Client or Ensono may, at any time, request changes to this SOW by submitting a written change request which identifies in reasonable detail each of the following, collectively (each a, “Change Request”): summary of the requested change, why the change is needed and timing of when the change is needed. Proposed changes to this SOW may impact the project schedule, price, or scope.

Ensono and Client will evaluate each Change Request, considering the feasibility of the change and impact on other project components. Once a Change Request is accepted by the parties, Ensono will prepare a “Change Order” documenting the revisions to the SOW. Changes to the SOW become effective when an Amendment to the Task Order is executed by both Client and Ensono. In the event of any conflicts or inconsistency, the terms of an executed Amendment will prevail over those of this SOW. Notwithstanding the foregoing, Client acknowledges and agrees that if a Change Request is raised by Ensono due to a change in assumption or dependency listed in Section 5 (Assumptions) or a failure of the Client to perform a Client Obligation listed in Section 6 (Client Obligations), such Change Request shall be deemed a mandatory change (“Mandatory Change”). If Client does not agree to a Mandatory Change, Ensono may terminate this SOW for cause and Client will be obligated to pay early termination charges as described in this SOW.