ORACLE GLOBAL BUSINESS UNIT CLOUD SERVICES PILLAR DOCUMENT F E B R U A R Y

ORACLE GLOBAL BUSINESS UNIT CLOUD SERVICES PILLAR DOCUMENT F E B R U A R Y 2 0 1 8

Table f Cntents Scpe 2 Service Availability 2 Change Management 2 Disaster Recvery 3 Oracle Hspitality Clud Services Disaster Recvery 4 Infrmatin Transfer 4 Cmpliance 6 Oracle Utilities Opwer Clud Services 7 Change Management 7 Access Cntrl 7 Cmmunicatin and Operatins Management 7 Oracle Textura & Primavera Clud Services 8 Change Management 8 Oracle Textura and Primavera Clud Supprt 9 Terminatin Plicy 10 Backups 10.

Scpe This dcument applies t Oracle Glbal Business Unit Clud Services (frmerly knwn as Oracle Clud Services fr Industry (OCI)). The Oracle Glbal Business Unit Clud Services rganizatin supprts the clud fferings prvided by the fllwing: Cmmunicatins Glbal Business Unit (CGBU), Financial Services Glbal Business Unit (FSGBU), Health Sciences Glbal Business Unit (HSGBU), Hspitality Glbal Business Unit (HGBU) (frmer Micrs Clud Services), Cnstructin and Engineering Glbal Business Unit (CEGBU), Retail Glbal Business Unit (RGBU), and Utilities Glbal Business Unit (UGBU). This dcument is a supplement t the Oracle Clud Hsting & Delivery Plicies. Its purpse is t accunt fr exceptins and additinal terms specific t the Oracle Glbal Business Units. The cntent f this dcument takes precedence ver the Oracle Clud Hsting & Delivery Plicies. Service Availability Fr purpses f calculating the Service Availability Level f the Oracle Clud Services, Available r Availability means that Yu and Yur Users are able t lg in and access the OLTP r transactinal prtin f Clud Services. Target Service Availability Level bjectives are as utlined in the Oracle Clud Service Level Objective Plicy sectin in the Oracle Clud Hsting & Delivery Plicies dcument, r in the applicable Service Descriptin related t the specific Glbal Business Unit clud service. Oracle wrks t meet a Target System Availability Level fr the measurement perid f each calendar mnth, cmmencing at Oracle s activatin f the prductin envirnment. Change Management Applicatin Upgrades and Updates Oracle requires all Clud Services custmers t keep their Services current with the sftware versins that Oracle designates as generally available (GA) fr such Services. Sftware updates r upgrades will fllw the release f every GA release and are required fr the Services in rder t maintain versin currency. Fr certain Clud Services, Oracle perfrms upgrades by upgrading Yur nnprductin envirnment t the latest versin f the Clud prduct befre upgrading the prductin envirnment. Oracle Clud Hsting and Delivery Plicies, such as Service Levels Objective Plicy, and the Supprt Plicy, are dependent n Yu maintaining GA versin currency. Oracle is nt respnsible fr perfrmance r security issues encuntered with the Clud Services that may result frm running earlier versins. Oracle will prvide prir ntice fr updates r upgrades that invlve service interruptin t Yu.

Oracle typically schedules applicatin upgrades every 2 nd and 4 th Friday f the mnth between 21:00-06:00 (Saturday) data center lcal time. Fr sme sectrs such as Hspitality and Retail, Oracle will schedule the applicatin upgrade n a weekday t accmmdate Yur business peratins. If Yu are eligible t select Yur wn upgrade windw, Yu will either be cntacted by Oracle t crdinate the upgrade change windw, r Yu will be able t select target hur and date with the exceptin f blcked time perids that Oracle reserves fr cre system maintenance. Applicatin Changes Access t prductin servers at the perating system and database level is restricted t Oracle Glbal Business Unit Clud Services and Applicatin Management grups. Custmer changes t the applicatin are allwed nly via the defined user interface, web service, r a standardized API. Alteratin r extensin f the underlying base applicatin cde is nt allwed as a mechanism f custmizing the applicatin. Cre System Maintenance Cre system maintenance invlves changes t hardware, netwrk systems, security systems, perating systems, strage systems, r general supprting sftware f the clud infrastructure. Cre system maintenance may result in service interruptin. Oracle wrks t limit any service interruptin due t cre system maintenance t less than 2 hurs during a scheduled service perid. Oracle may elect nt t schedule a cre system maintenance event. Oracle typically schedules cre system maintenance n Fridays between 21:00-06:00 (Saturday) data center lcal time. Rutine Infrastructure Maintenance Oracle manages rutine infrastructure maintenance activities fr the purpse f prviding envirnment currency, capacity, and stability. Rutine maintenance is nt expected t result in a service interruptin. When pssible, rutine infrastructure maintenance will be perfrmed during the Cre System Maintenance windw and fllw the same ntificatin plicy. GA and End f Life (EOL) fr Oracle Business Unit Clud Services If Oracle is n lnger supprting r therwise making any f the Originally Ordered Clud Services generally available t its cmmercial custmers "End f Life Prducts", Oracle will prvide Yu with n less than twelve (12) mnths advance ntice prir t the date when the Originally Ordered Clud Services are n lnger generally available. Specific Clud Services have published GA and EOL practices infrmatin. Where applicable, the dcumentatin is available here: http://www.racle.cm/us/crprate/cntracts/clud-services Disaster Recvery Disaster Recvery services are intended t prvide service restratin capability in the case f a majr disaster, as declared by Oracle that leads t lss f a data center and crrespnding service unavailability. Fr the purpses f this Plicy, a disaster means an

unplanned event r cnditin that causes a cmplete lss f access t the primary site used t prvide the Oracle Clud Services such that Yur prductin envirnments at the primary site are nt available. The Recvery Time Objectives (RTO) and Recvery Pint Objectives (RPO) d nt apply t Yur custmizatins that depend n external cmpnents r third-party sftware. During an active failver event, nn-critical fixes and enhancement requests are nt supprted. Yu will be slely respnsible fr issues arising frm third party sftware and custmizatins t Oracle prgrams and services. The RTO and RPO Level bjectives are as utlined in the applicable Service Descriptin related t the specific Glbal Business Unit clud service. Upn Oracle s declaratin f a disaster, Oracle will cmmence the Disaster Recvery Plan t recver prductin data t the mst recent available state t recnstitute the prductin envirnments f the affected Clud Services with the Recvery Time and Recvery Pint Objectives as defined in the Service Descriptin fr the applicable Glbal Business Unit clud service. Prductin services may perate in a degraded state f perfrmance fr the duratin f the disaster event. A Recvery Time Objective (RTO) is Oracle s bjective fr the maximum perid f time between Oracle s decisin t activate the recvery prcess t the secndary site due t a declared disaster, and the pint at which Yu can resume prductin peratins in the secndary prductin envirnment. If the decisin t failver is made during the perid in which an upgrade is in prcess at the secndary site, the RTO extends t include the time required t cmplete the upgrade. A Recvery Pint Objective (RPO) is Oracle s bjective fr the maximum pssible length f time during which data culd be lst in the event f a disaster. The RPO time excludes any data lads that may be under way when the disaster is ccurring. Oracle Hspitality Clud Services Disaster Recvery In the event f a declared disaster, Oracle may recver and restre the prductin envirnment f the affected Hspitality Clud Service and wrk t restre prductin data using a recent backup made prir t the nset f the disaster. Oracle may elect t restre the prductin envirnment in an alternate, available data center f Oracle's chice. When using a backup fr recvery and restratin f the prductin envirnment and prductin data, published RTOs and RPOs, if any, will nt apply. Infrmatin Transfer Secure File Transfer Prtcl (SFTP) The secure file transfer prtcl (SFTP) services, if used fr Oracle Clud Services, are limited-access systems fr the purpse f uplading r dwnlading data files in a secure manner. SFTP dwnlads/uplads are recrded in an electrnic audit lg that includes: date and time, user name, and name f file up/dwnladed. Traceability f user requests fr SFTP access and mdificatins t access rights is prvided thrugh change cntrl prcesses. Accunt Usage Oracle reserves the right t restrict access, limit use f the SFTP Service, r remve access fr any nncnfrming users, sites, r custmers, withut prir ntificatin, whenever the use f the service is nt in cmpliance with the terms f use. Access is granted n each accunt t specific directries using the principle f least privilege. Custmer accunts have full read-write access t the data in each directry t which the user has access. Technical cntrls in place are designed t ensure cnfidentiality f data and t prevent unauthrized access t ther accunts data. Attempts t access directries nt authrized fr a given accunt are a vilatin f the terms f use, and the accunt may be

suspended. Oracle is nt respnsible fr unauthrized custmer access t data within a directry by an accunt which has authrized and apprved access. Accunt Prvisining Currently, SFTP accunts are created with a strng 10-character passwrd. The accunt passwrd will be sent in an email t the address assciated with the accunt. Fr this reasn, the email address assciated with an accunt must be a valid individual email and may nt be a shared accunt r cmpany e-mail distributin list. Inactive accunts will be disabled, and then deleted under the fllwing schedule: Accunts that are inactive fr 3 mnths will be disabled. Accunts that are inactive fr 6 mnths will be deleted. Yu must submit a request via the ticketing system t terminate accunts that are n lnger required r need t be revked. Accunt Authenticatin Passwrds are autmatically generated and cannt be changed by the accunt hlder r recvered by Oracle. If a passwrd needs t be changed r reset, the accunt hlder must submit a frmal change request via the ticketing system t have a new passwrd generated. The updated accunt passwrd will be sent in an email t the address assciated with the accunt. Accunt Authenticatin Alternate Autmatin Methds The SFTP service supprts public key authenticatin; a methd f autmatic passwrd-less lgin. Each accunt has a public key directry. By generating a lcal private and public key pair, uplading the public key file t this directry, and cnfiguring the client sftware t use public key authenticatin, an accunt user can lg in withut being prmpted fr a passwrd. Multiple public key files per accunt are supprted by Oracle. Acceptable Usage All data transferred via the SFTP service must be fr the specific business purpse and functin f supprting Yur hsted envirnment(s). The SFTP service may nt be used fr data backups, temprary strage, unlicensed cpyrighted materials, r ther illegal materials. Yur integratins emplying the use f autmated data transfer agents r 'scripts' are permitted, hwever they shuld either run manually r n a peridic schedule nt t exceed a SFTP cnnectin rate f 10 times per hur. The use f autmated prcesses that aggressively cnnect, r that d nt prperly cnnect, authenticate, perfrm an apprpriate file transfer peratin, r prperly discnnect, is a vilatin f the terms f use.

Data Strage Data stred n the SFTP server will autmatically be deleted after 60 days. All incming and utging SFTP data is cnsidered transient data and nt subject t backup retentin. The nly exceptin is that the directry structure and any ssh lgin key file infrmatin is retained and nt autmatically deleted Paylad Encryptin Requirements Data-at-Rest If the service ffering is subject t external regulatry requirements such as PCI DSS that mandates data-at-rest encryptin, the cnfiguratin f the Oracle SFTP service fr the deplyment will emply the use f whle disk encryptin, r the service will be designed t accept incming encrypted data files with an Oracle prvided public key r x.509 certificate. Cnversely, if the service ffering has utbund data and file transfer integratins, then Yu must prvide Oracle with a bnafide x.509 certificate fr SFTP data integratins. Encryptin Requirements Transprt Industry security standards and Oracle security plicies mandate end-t-end (scket-t-scket) based transprt encryptin fr data exchange. Use f FTP ver SSL (FTPS) and FTP des nt guarantee transprt encryptin is either prperly enfrced r negtiated during the initiatin f the data cnnectin, and the latter prtcl (FTP) is cmpletely lacking any transprt encryptin. Therefre, Oracle data transfer standards is limited t SFTP with the gal f ensuring cnfidentiality f data transfers between Oracle and Yu. Cmpliance Audit Reprts Audit reprts and letters f cmpliance fr Oracle Clud Services are peridically published by Oracle s third party auditrs. Reprts and letters may nt be available fr all services r at all times. Yu may request a cpy f the current published audit reprt r letter available fr a particular Oracle Clud Service, as applicable, by cntacting the Oracle Sales Representative r designated Oracle accunt cntact and prviding the fllwing infrmatin: Cmpany name Cntact name Title Recipient e-mail address Request justificatin (e.g., purpse and intended use descriptin)

Oracle Utilities Opwer Clud Services Fr details regarding specific Oracle Utilities Opwer Clud Services, please refer t the Oracle Utilities Opwer Service Descriptins. Change Management Applicatin Upgrades and Updates Fr Oracle Utilities Opwer Clud Services, Oracle schedules applicatin upgrades between 11:00 15:00 Eastern US time every third Sunday. Custmer ntificatins are sent 72 hurs in advance f such upgrades. Cre System Maintenance Fr Oracle Utilities Opwer Clud Services, Oracle schedules cre system maintenance between 03:00 07:00 Eastern US time n the last Thursday f each mnth. Custmer ntificatins are sent 72 hurs in advance f such upgrades. Access Cntrl Privilege Management In lieu f a bastin hst, Oracle Administrative access t the Oracle Utilities Opwer Clud Services envirnment requires administratrs t first cnnect t a trusted netwrk t be able t access the systems. Access t the trusted netwrk requires physical access t the netwrk r authenticatin t the netwrk by means f a username and passwrd. All access t the trusted netwrk frm remte lcatins requires multifactr authenticatin. Cmmunicatin and Operatins Management Backups The Data Integratin Platfrm cmpnents f the Oracle Utilities Opwer Clud Services includes custmer AMI (r smart meter ) data which is nt backed up t disk r tape. Instead, disaster resiliency fr this cmpnent relies n a data replicatin strategy. Nnpersnally identifiable AMI data resident within this cmpnent is autmatically replicated t a standby cluster within the same jurisdictinal regin n a daily basis. Persnally-identifiable infrmatin is handled in a manner cnsistent with the requirements specified in the Backups sectin f the Oracle SaaS Security Practices dcument. Daily backups are used t recver Oracle Utilities Opwer Services in the event f a disaster. Oracle perates nly ne data center in Canada. Backups fr disaster recvery purpses are stred in an encrypted frmat at a secndary site in the United States.

Oracle Textura & Primavera Clud Services Fr details regarding specific Oracle Textura Clud Service r Oracle Primavera Clud Services, please refer t the applicable Service Descriptins at www.racle.cm/cntracts. Change Management Applicatin Upgrades and Updates Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service ** Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service US Instance, Oracle schedules applicatin upgrades between 07:00 11:00 Eastern US time every first and third Sunday. Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service AU Instance, Oracle schedules applicatin upgrades between 07:00 11:00 Eastern US time every first and third Sunday. Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service EU Instance, Oracle schedules applicatin upgrades between 16:00 20:00 Eastern US time every Mnday fllwing the US/AU applicatin upgrade. Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service US Instance, Oracle schedules applicatin patches between 00:00 01:00 Eastern US time (Mnday Friday). Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service AU Instance, Oracle schedules applicatin patches between 09:00 10:00 Eastern US time (Mnday Friday). Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service EU Instance, Oracle schedules applicatin patches between 16:00 17:00 Eastern US time (Mnday Friday). Oracle Textura Pre-Qualificatin Management Clud Service Fr the Oracle Textura Pre-Qualificatin Management Clud Service*, Oracle schedules applicatin upgrades between 23:30 03:30 Eastern US time n the Friday befre the secnd Sunday f each mnth. Fr the Oracle Textura Pre-Qualificatin Management Clud Service*, Oracle schedules applicatin patches between 23:30 03:30 Eastern US time every Friday. Primavera Submittal Exchange Clud Service Fr the Primavera Submittal Exchange Clud Service Azure Instance, Oracle schedules applicatin upgrades between 09:00 11:00 Eastern US time every Sunday. Fr the Primavera Submittal Exchange Clud Service AWS Instance, Oracle schedules applicatin upgrades between 20:00 23:00 Eastern US time every weekday. * Oracle Textura Pre-Qualificatin Management Clud Service is targeted fr release in late Spring 2018. ** All references t Textura Early Payment Direct Clud Service in the Change Management sectin abve als apply t Textura Early Payment Clud Service.

Cre System Maintenance Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service US Instance, Oracle schedules cre system maintenance between 07:00 11:00 Eastern US time every first and third Sunday. Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service AU Instance, Oracle schedules cre system maintenance between 07:00 11:00 Eastern US time every first and third Sunday. Fr the Oracle Textura Payment Management Clud Service and Textura Early Payment Direct Clud Service EU Instance, Oracle schedules cre system maintenance between 16:00 20:00 Eastern US time every Mnday fllwing the US/AU cre system maintenance. Oracle Textura Pre-Qualificatin Management Clud Service* Fr the Oracle Textura Pre-Qualificatin Management Clud Service*, Oracle schedules cre system maintenance between 07:00 11:00 Eastern US time every Sunday. Primavera Submittal Exchange Clud Service Fr the Primavera Submittal Exchange Clud Service Azure Instance, Oracle schedules cre system maintenance between 09:00 11:00 Eastern US time every Sunday. Fr the Primavera Submittal Exchange Clud Service AWS Instance, Oracle schedules cre system maintenance between 20:00 23:00 Eastern US time every weekday. Oracle Textura and Primavera Clud Supprt T cntact Oracle Textura supprt, please visit: https://www.racle.cm/crprate/acquisitins/textura/supprt.html Supprt Availability Supprt is prvided via email and telephne nly. Telephne supprt is prvided during business hurs as fllws: Prduct Textura Payment Management Clud Services (TPM), Hurs f Cverage Mn-Fri, 7am-8pm US Central Time Textura Early Payment Clud Services (EPP), Textura Pre-Qualificatin Management (PQM) Primavera Submittal Exchange Mn-Fri, 7am-6pm US Central Time Oracle Textura Payment Management Clud Service is targeted fr release in late Spring 2018.

Supprt prtal access is prvided fr the Latista prducts nly. N supprt prtal access is prvided fr ther Oracle Textura prducts Oracle s Severity Definitins and Severity 1 respnse time are nt applicable t Textura prducts and services. Oracle will prvide 24x7 cverage fr Severity 1 issues fr Latista prducts nly. Knwledge Base access is prvided fr GradeBeam and Latista prducts nly Cmmunity frum access is nt prvided fr any Oracle Textura prducts Terminatin Plicy Oracle Textura Clud Services: After terminatin r expiratin f the Oracle Textura Clud Services under Yur rder, r upn terminatin f the retrieval perid fllwing such Clud Services, Oracle will disable Yur access t the prductin Oracle Textura Clud Services envirnment and will delete r therwise render unrecverable Yur Persnal Data (as that term is defined in the Data Prcessing Agreement fr Oracle Clud Services) relating t Yu residing in the prductin envirnment, except as may therwise be required by law.. Users and ther third parties wh are enabled t interact with Yur the prductin Oracle Textura Clud Services envirnment may cntinue t access the envirnment and any data (including Yur transactinal data, Yur invice histry, Yur prject histry, etc.) that is nt Persnal Data relating t Yu. Fr a perid f n less than 60 days after the terminatin r expiratin f the Oracle Textura Clud Services under Yur rder, Oracle will make available Yur prductin data via secured prtcls, r keep Yur access t the prductin Oracle Textura Clud Services envirnment accessible, fr the purpse f data retrieval by Yu. During this perid, Yu shuld nt use the envirnment fr prductin activities. Oracle has n bligatin t retain yur data after this 60 day perid. Textura Payment Management (including Textura Early Payment Clud Service and Textura Early Payment Direct Clud Service) Fllwing the date n which Oracle determines that bth (i) all Prjects, Cntracts and Invices managed n the clud service have been paid in full and (ii) n Users frm the related rganizatin have lgged in t Yur prductin Oracle Textura Clud Services envirnment fr 180 days, Oracle will send an email ntice, t any User with administratr rights t the envirnment, indicating that all Persnal Data, f any User, that is in the envirnment will be deleted r rendered unrecverable unless a User lgs in t the envirnment within 30 days frm the date f the email ntice. If n User lgs in t the envirnment within 30 days f the date f the email ntice, then all Persnal Data, f any User, that is in the envirnment will be subsequently deleted r therwise rendered unrecverable, except as may therwise be required by law. Backups Oracle Primavera Submittal Exchange data is backed up in real-time t a site separate frm that at which the instance is running and may be used as recvery data in the event f a disaster. Backups f files are als synchrnized t the same separate lcatin site at least nce an hur. All data is encrypted during synchrnizatin.

Oracle Crpratin, Wrld Headquarters Wrldwide Inquiries 500 Oracle Parkway Phne: +1.650.506.7000 Redwd Shres, CA 94065, USA Fax: +1.650.506.7200 C O N N E C T W I T H U S blgs.racle.cm/racle Cpyright 2016, Oracle and/r its affiliates. All rights reserved. facebk.cm/racle twitter.cm/racle racle.cm