Network as a Service (NAAS) - Service Terms

The following service terms apply to all TELUS Network as a Service services.

Network as a Service, also refer as NaaS Services, is a group of services offered by TELUS that enables you to send and receive data using the Internet protocol and your communications equipment and systems. These services provide connections to the Internet and private networks. TELUS Network as a Service is described in subsections 1.1 to 1.8. TELUS Managed Internet is the foundational service that is ordered with TELUS Network as a Service and is described under Section 1.9. Next Generation Firewall service is an option that can be ordered with TELUS Network as a Service and is described under Section 2.

From time-to-time we will conduct activities to maintain the performance and reliability of your network connection. We will inform you of scheduled maintenance via e-mail notification based on yours e-mail address provided at time of installation.

We will provide you with a customer interface unit that will deliver Network as a Service to your service location. Should that equipment malfunction, we will replace within one business day where overnight courier is available.

We use standard IP addressing and routing standards to deliver Network as a Service. It is your responsibility to maintain your Local Area Network (LAN) in accordance with these standards to ensure service functionality. You must also provide one public static IP address for the Wide Area Network (WAN) port of the Network as a Service customer interface unit.

If it is determined that either the necessary infrastructure is not available, or you do not agree to pay for unforeseen costs to complete the installation, we may cancel the installation and terminate the NaaS Service at that service location. In such a case only, you will not be required to pay the cancellation charges. We will return any installation fees you may have paid, and we will not be required to provide the NaaS Service at that service location.

When using the NaaS Services, you must comply with our acceptable use policy, published at www.telus.com/aup (“AUP”). We may change the AUP at any time. We will publish the changed AUP at the same site, and you are responsible to review this policy to see any changes. You require Internet access network based connectivity.

For any service location that is not using Internet access provided by us or one of our National HSIA Partners (NHP), you are responsible for resolving access issues. This access is referred to as “Bring Your Own Access or BYOA”. We remain your first point of contact for a service issue(s). If we determine that the issue is with the access provider, you will need to resolve the issue and notify us immediately upon resolution.

We provide 24x7 support for Network as a Service. TELUS advanced technical support for escalated issues operate from 8am-8pm EST Monday-Friday, excluding statutory holidays.

Network as a Service includes a Service Availability Threshold. The Service Availability Threshold is the percentage of time in a calendar month that the NaaS Services product should be available for your use on a per service location basis as set in the table below. If the NaaS Service product does not meet the threshold, we will provide you, if you make such a request in accordance with the following, a credit on your bill. Requests for such credits must be made within thirty-one (31) calendar days following the end of the month during which the failure has occurred. Requests must be made in writing to the address you have provided us during implementation of the NaaS Services.

If the NaaS Service fails to meet this Service Availability Threshold, we will calculate site availability and consider whether site availability can be reached by either the primary or backup connection and apply the associated credits. We use our remote monitoring and other systems to measure the actual availability result each month and expresses the result as a percentage. When we measure and calculate the result, we assume each month is 30 days, but we include all periods of unavailability over the calendar month, except for any period of unavailability that is caused or contributed to by:

(a) networks or equipment of another carrier or service provider, (b) you, your network, or your other services, (c) an event beyond our’ reasonable control, and (d) except for any period of unavailability that occurs when we are performing maintenance activities. (e)The total periods of unavailability over the calendar month, less these exceptions, are called the “Total Outages”.

The credit is a percentage of the monthly fixed charge for the NaaS Service at the affected service location up to a maximum of 80% of that monthly fixed charge.

Although we make reasonable efforts to meet the Service Availability Threshold, if a NaaS Service does not meet a threshold, we will not be in breach of this agreement, and the credit provided is your only remedy for such failure. We will not be obligated to pay any other compensation and will have no other liability to you for any failure to meet a threshold.

Notwithstanding the foregoing, if i) in any month the Service Availability Threshold in all the service locations is less than ninety percent (90%), you may terminate Network as a Service entirely, or ii) if for three (3) consecutive months, we fail to meet its Service Availability Threshold at the same service location, you may terminate Network as a Service at that service location; both without payment of any cancellation charges, provided that notice of cancellation must be given within ten (10) days after the end of that month, and cancellation will be effective on a date you specify in you notice of cancellation, but not more than ninety (90) days after the date of the notice of cancellation.

This table sets out the “Service Availability Thresholds” and credit calculation for Network as a Service. This Service Availability Threshold is calculated on a per-month and per-site basis. Credits can be claimed by contacting us and any outstanding credits for a month can be claimed for 31-days after the month’s results have been published.

The table below is applicable for those service locations that have the High Availability option.

If applicable, prior to the commencement of the service period set out in Your Services & Summary Charges section, we agree to provide you with Network as a Service for a trial period not to exceed the time period outlined in the “Service Trial Attachment” jointed to this document. The service period for the Network as a Service will then begin upon the successful completion of the trial period as outlined in the Service Trial Attachment, if applicable. If the NaaS Services under trial fails to meet the agreed upon success criteria, you may cancel the Network as a Service without cancellation charges or any penalty. If you are renewing the Network as a Service and the Network as a Service is already installed when you sign this agreement the service period begins from signing without the possibility for the NaaS Services to be under trial.

You are responsible for the security of your network, for implementing your own security policies, and for obtaining any security services to protect your network. We provide a built-in transmission control protocol (TCP) firewall on the Network as a Service customer premise equipment, also known as customer interface unit (“CPE”). You are required to configure the TCP firewall using the Network as a Service portal according to the desired policies. An optional chargeable White Glove configuration service is available to provide a TELUS agent to work with you to configure the desired policies. No guarantees, warranties or service levels are provided regarding the performance of this TCP firewall.

If security services are separately purchased from and provided by us, the service terms associated with that purchase would govern the security services.

A monthly fixed charge applies for each Network as a Service based on selected NaaS Services product and service period. A one-time charge for installation will be billed. In the event you wish that we set up your service configuration, an additional one-time charge will also be billed. All such charges are set out in Your Services & Summary Charges section.

We will start the billing cycle for each service location 30 days after the Network as a Service has been installed in that service location.

After 3 months from the installation of each NaaS Services product, you may request us to upgrade or change Network as a Service product, although your monthly fixed charge may change.

When your Network as a Service is cancelled, we calculate the service cancellation charge using the table below. The service cancellation charge is the aggregate of the percentage of the total monthly charges remaining for the service period after cancellation:

We may, at our sole discretion, waive the cancellation charges if you replace the terminated NaaS Services with a TELUS service where the value of the replacement service is greater than the value of the terminated service(s).

Should the Network as a Service be terminated and the equipment is not returned within 30 days of cancellation, you will be charged for the equipment.

These Service Terms and Conditions apply to all TELUS Network as a Service - Managed Internet specified in Your Services & Summary Charges section

NaaS Service - Managed Internet is for customers who rely on the Internet for critical business functions such as access to cloud hosted applications. It provides un-policed connectivity to the public IPv4 Internet and is suitable for any Internet Protocol version 4 (IPv4) application.

The NaaS Service - Managed Internet products available from TELUS are:

The maximum bandwidth provided by each of the above products cannot exceed your Internet access available bandwidth. In the event of a mismatch between the bandwidth of the access and Network as a Service, the actual bandwidth will be the lower of the two.

Your Services & Summary Charges section lists the products you have selected. At any time, you may ask us to change the product, although the monthly fixed charge may change and one-time charges may apply.

The NaaS Service - Managed Internet standard features include:

We must install NaaS Service - Managed Internet at each of your service location to cable, power up and activate the equipment and LTE modem according to our standards. We will also configure all WAN facing policies including WAN ports, Access Control List (ACL), Flow-based Quality of Experience (QoE) and resiliency options.

The Managed Internet service optional features include (charges also listed in the Summary Charges table):

If you have service locations in the United Sates one of the following product is mandatory for those service locations.

TELUS Managed NaaS replaces the NaaS Managed Internet service detailed above when NaaS Services are provided by TELUS Communications (U.S.) Inc. to service locations in United States

The installation of the TELUS provided CPE at US service locations can be performed by one of our field installation partners (under separate agreement directly with such pre-approved third party) or by you with guidance from us

US Service locations will not have a TELUS-provided LTE backup and in order to get the standard 99.9% Service Availability, you must provide two (2) diverse accesses for each NaaS US service location.

On-site CPE spare is also required for all US service locations. If TELUS’ provided CPE fails, you are responsible to swap the TELUS provided CPE with the on-site CPE spare and activate it with our remote guidance. On-site CPE spare is not included in the monthly fixed charge and must be ordered separately from the Naas Service - Managed Internet US

These Service Terms and Conditions apply to all TELUS NaaS Service - Managed Next-Generation Firewall (NGFW) specified in Your Services & Summary Charges section.

Firewall provides a managed security offering leveraging Software Defined -- Wide Area Network and virtualized technology to address security concerns and threats. For each Managed NGFW Service as described in Your Services & Summary Charges section, we will provide a managed cloud based Next-Generation Firewall for your use to access the Internet.

The Managed NGFW Service offered throughput options available from TELUS are:

Offered throughput is based on total traffic, in both directions, going through the firewall at any time. Site to site communications for your network are using Network as a Service Internet Virtual Private Network (VPN) with encryption features and will not through the Next Generation Firewall. Only traffic destined to the Internet or external networks will be using the Next-Generation Firewall Service. Offered throughput is an estimate only, and not a commitment, as there can be several factors that will influence the final capacity, such as type and number of features enabled, size of the policy table, packet size, number of VPNs, speed of each site access and packet header as examples.

Use of the Managed NGFW Service may require interaction and communication with facilities hosted outside Canada which may result in your data being sent to and hosted on such facilities.

Your Services & Summary Charges section lists the Managed NGFW Service you selected. At any time, you may ask us to change the Managed NGFW Service, although the monthly fixed charge may change and one-time charges may apply.

The following Managed NGFW Service table contains the elements that form the foundation of the Managed NGFW Service along with the allocation of responsibilities between us. Additional service details for each Service Threshold offerings can be found at:

https://telus.my.salesforce.com/sfc/p/3000000006o0..

.

We can change some service elements in order to enhance the provision of the Managed NGFW Service. You will receive a notice of the change.

We will provide initial configuration based on the pre-configuration, pre-defined security policies and service configuration implementation as defined in Your Services & Summary Charges section, as a one-time charge. Initial configuration, when applicable, is based on the information you have provided at time of service ordering. If you need additional support to define the security policies to be implemented or to review existing security policies, we can provide additional support through a White Glove security consulting block of 6 hours that can be ordered. Additional charges may apply.

The Services do not include the installation, configuration and maintenance of anti-virus software, and without limiting anything else in this Agreement, we make no warranties relating to, and is not responsible for, the detection or prevention of viruses or the effect of any viruses on your hardware, software, LAN or facilities, even if the introduction of the viruses is related to the provision of the Services.

Managed NGFW Service provide ITIL (Information Technology Infrastructure Library) based change management process for all configuration changes included in the Service. The following table list includes change request based on the Service subscribed as well as the engagement method based on the change request type:

The following table outlines the NGFW Change Management Service Level Objectives (SLOs):

** Emergency changes are implemented following the incident management process and are implemented with 2 hours and following the pre-qualified assessment. Emergency changes requested through Incident management may have billable time associated to the change if the Emergency is related to a route cause outside of our responsibility or ownership.

*** Scheduled Maintenance will take place between 3:00 A.M. – 5:00 AM EST/EDT on Thursdays and 1:00 A.M. – 4:00 A.M. EST/EDT on Sundays, although we may change these time periods at any time with prior notice to you. These scheduled outage periods are excluded from any availability calculations. We reserve the right to execute emergency changes to ensure service availability without your prior approval.

Although we make reasonable efforts to meet the SLO, if a Service does not meet the SLO, we will not be in breach of this Agreement. We will not be obligated to pay any compensation and will have no other liability to you for any failure to meet the above SLOs.

You can perform certain changes to whitelists and blacklists by using the “Customized content list” feature available on the TELUS Security portal. Changes you perform are outside of the change management process described herein and any impact to the service or data remains your sole responsibility. If we need to intervene in order to fix or troubleshoot a change performed by you, charges may apply. The “Customized content list” feature can be de-activated upon your request.