AMENDMENT NO. 1 TO MASTER SERVICE PROVIDER AGREEMENT

Exhibit 10.44

▇▇▇▇▇▇▇▇ ▇▇ ▇▇. ▇▇▇▇▇▇▇▇

▇▇▇▇▇▇▇▇▇ NO. 1 TO MASTER SERVICE PROVIDER AGREEMENT

This Amendment No. 1 to the Master Service Provider Agreement (together with any Exhibits attached hereto or incorporated into this document, this “Amendment”) is entered into as of the effective date indicated in the signature box below (the “Effective Date”) by and between JPMORGAN CHASE BANK, NATIONAL ASSOCIATION, a national banking association (“JPMC”) and the supplier named in the signature box below (“Supplier”).

JPMC and Supplier are parties to a Master Agreement dated December 6, 2004 (“Agreement”).  JPMC and Supplier, by signing in the signature blanks below, agree to amend the terms of the Agreement to include the terms set forth in this Amendment.  Sections references in this Amendment refer to the Section of this Amendment unless otherwise noted. In the event of a conflict between the terms of this Amendment and the terms previously set forth in the Agreement, the terms set forth in this Amendment will prevail.  Except as expressly stated in this Amendment, the terms of the Agreement remain in full force and effect.

Master Contract ID Number:  70575

Effective Date:  Novmeber 1, 2014

For JPMC, notice must be sent to the following address:

For Supplier, a copy of each notice must be sent to the following addresses:

Virtusa Corporation

▇▇▇▇ ▇▇▇▇ ▇▇▇▇ ▇▇▇▇▇

▇▇▇▇▇▇▇▇▇▇▇, ▇▇▇▇▇▇▇

1

NOW, THEREFORE, in consideration of the foregoing premises and the promises, terms and conditions set forth below and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the parties hereto, intending to be legally bound, agree as under.

I.                To amend the Agreement as follows:

1.              Section 1, Definitions and Construction, is hereby amended as follows:

A.            Section 1.1, Definitions, is hereby amended as follows:

(i)            Section 1.1(i), Change of Control, is hereby deleted in entirety.

B.            Section 1.2, References, is hereby amended to append the following provision at the end thereof:

“The term “days” refers to calendar days.  “Business Day” means Monday through Friday, excluding any official JPMC holidays.  “Agent” mean third party consultants, outsourcers, contractors and other service providers.  When used in this Agreement, the phrases “represents and warrants” and “represents, warrants and covenants” mean that the representations, warranties, and covenants are deemed given as of the Effective Date and on an ongoing basis throughout the term of this Agreement and throughout each Schedule Term.”

C.            Section 1, Definition and Construction, is hereby further amended to include the following new sections:

“1.5 Schedules

The parties will agree on the goods, licensed materials or services that Supplier will provide (each, a “Deliverable”), the prices that JPMC will pay and other transaction-specific terms through schedules to this Agreement (“Schedules”).  Each Schedule will either be (a) a separate document that is signed by both JPMC and Supplier; (b) a proposal or other offer to provide goods or services by Supplier that is accepted by an authorized representative of JPMC via email; or (c) a JPMC purchase order, electronic (e.g., “Procure to Pay”) or otherwise, that is accepted by Supplier and references either this Agreement or a Schedule.  Each Schedule will be deemed to incorporate all of the terms of this Agreement.  If a term in a Schedule conflicts with a term in this Agreement, the provisions of this Agreement will prevail unless the term in the Schedule specifically states that it will prevail. If a term in a Schedule conflicts with a term in a purchase order that is issued pursuant to that Schedule, the provisions of the Schedule will prevail unless the purchase order specifically states that the term in the purchase order shall prevail.  If terms in this Agreement conflict, the term most closely describing the type of transaction giving rise to the issue will prevail.”

“1.6 Entities Entering into Schedules

JPMC or any of its Affiliates (each, a “JPMC Entity” and collectively, “JPMorgan Chase & Co.”) may enter into Schedules.  The term “Affiliate” means an entity owned by, controlling, controlled by, or under common control with, directly or indirectly, a party.  For this purpose, one entity “controls” another entity if it has the power to direct the management and policies of the other entity (for example, through the ownership of voting securities or other equity interest, representation on its board of directors or other governing body, or by contract).  The benefits of any Schedule extend to the JPMC Entity that signs the Schedule and to other JPMC Entities, customers, employees, suppliers, business partners and divested companies (each, a “Recipient”).”

“1.7 Each Schedule Is a Separate Agreement

Each Schedule will be a separate agreement between Supplier and the JPMC Entity that signs the Schedule.  All subsequent references to “JPMC” in this Agreement will be deemed references to the JPMC Entity that signed the Schedule.  Only the JPMC Entity and Supplier entity that signs a Schedule will be liable for such JPMC/Supplier Entity’s obligations under that Schedule.  Notwithstanding anything to the contrary contained in this Agreement or any Schedule, in no event will any JPMC Entity that is a bank be deemed to be a guarantor of, or otherwise liable for, any performance or payment obligation of any other JPMC Entity in connection with this Agreement or any Schedule.”

“1.8 Schedule Term

A Schedule may state a term for that Schedule (the “Schedule Term”).  A Schedule that does not state a Schedule Term will be effective from its effective date until the termination of this Agreement, unless otherwise terminated in accordance with this Agreement or the Schedule.  Unless otherwise agreed in the applicable Schedule, following the Schedule Term stated in any Schedule, JPMC will have the right to renew the Schedule Term with respect to services for up to five additional one year renewal terms.”

“1.9 Country Specific Terms

JPMC and Supplier agree that outside of the United States, the Deliverables may be subject to mutually acceptable country unique terms and conditions which may require amending or supplementing this Agreement as appropriate.

2

To the extent possible, the JPMC Entity located outside of the United States will order Deliverables directly from Supplier entity in the applicable country. Supplier entity in the applicable country will supply the Deliverables and invoice such JPMC Entity in local currency and such JPMC Entity will pay Supplier entity in the applicable country in local currency.”

2.              Section 2, Services, is hereby amended as follows:

A.            Section 2.4, Applicable Laws; Country-Specific Legal and Regulatory Requirements, is hereby amended to be deleted in its entirety and replaced with the following:

“2.4 Compliance with Laws

(a)                            Supplier represents and warrants that Supplier will perform all of its obligations to JPMorgan Chase & Co. in compliance at all times with all foreign, federal, state and local statutes, orders, conventions, regulations, self-regulatory standards, and regulatory interpretations and guidance including those of any governmental agency (collectively, “Laws”) that are applicable to Supplier in performing its obligations to JPMorgan Chase & Co. or that would be applicable to JPMorgan Chase & Co. if JPMorgan Chase & Co. were performing those obligations using its own employees and assets.

(b)                            To the extent Supplier is providing, serving, or hosting Internet, email or portable device ready user interface elements or functionality, Supplier represents and warrants that such elements and functionality will conform to the W3C Web Content Accessibility Guidelines Version 2.0 Level A & AA Success Criteria, as well as any state or federal laws applicable to Internet, email or portable device accessibility including, but not limited to, the U.S. Americans with Disabilities Act.

(c)                             To the extent any Supplier Personnel are performing any services within the United States or any territory to which U.S. immigration Laws apply, Supplier represents, warrants and covenants that, during the Schedule Term of any applicable Schedule (i) Supplier and all applicable subcontractors will comply with all (x) U.S. immigration Laws, including but not limited to the Immigration and Nationality Act and the Immigration Reform and Control Act of 1986; and (y) Laws, regulations, orders, and policy guidance relating to all forms of work authorization such as H-1B and L-1 visas, including guidance from the U.S. Citizenship and Immigration Service on H-1B visas and third-party site placements; (ii) all Supplier Personnel assigned to a JPMC U.S. location shall have valid, unexpired work authorization; and (iii) Form I-9, Employment Eligibility Verification has been completed for all Supplier Personnel assigned to a JPMC U.S. location and I-9s with expiring work authorizations shall be re-verified as necessary.”

B.            Section 2, Services, is hereby further amended to include the following new sections:

“2.7Timing of Services

Supplier will begin providing the Services on the date specified in the applicable Schedule.  If the Schedule does not specify a start date, Supplier will begin providing the Services on the effective date of the applicable Schedule.  Supplier will complete the Services on the date(s) specified in the Schedule.  If the Schedule does not specify completion date(s), Supplier will complete the Services in a timely manner.

“2.8 Materials, Facilities and Assistance for Performance of Services

Supplier will provide all necessary equipment and related materials, including specialized equipment and the like, to perform the Services and neither JPMC nor any Recipient will be required to provide any work space, equipment, materials, training, supervision or other assistance in connection with the Services.”

“2.9 Right of Supplier Personnel to Work in a Country

For Services performed within a given country, Supplier will assign only Supplier Personnel who are either citizens of that country or legally eligible to work there.  Supplier represents and warrants that it has complied and will comply with the immigration Laws of the countries in which the Services are performed.”

“2.10 Termination Assistance for Critical Services

In addition to the general provisions for termination assistance services in this Agreement, for all Critical Services, Supplier agrees that:

(a)         Disengagement Plan.

Supplier will, within 90 days after the commencement of Services provide to JPMC for its approval a draft plan for the disengagement and transfer of the Services upon the expiration or termination of the Services (upon approval, the “Disengagement Plan”). Supplier will ensure that the Disengagement Plan:  (i) specifies Supplier Key Personnel and other resources that will be used to perform Termination Assistance Services; (ii) provides an estimate of

3

incremental fees for the additional resources, if any, required to provide the Termination Assistance Services; (iii) specifies substantially all things necessary to efficiently carry out the Termination Assistance Services; and (iv) sets out a timetable and process for the Termination Assistance Services that will enable JPMC to have completed disengagement as quickly as reasonably possible without materially disrupting the quality of the Services and without limiting Supplier’s obligation to meet any applicable services levels during the Termination Assistance Period.

Supplier will provide updates to the Disengagement Plan during the Schedule Term as necessary to take into account changes to the Services and submit the updates to JPMC for approval.  Upon approval the updates will be incorporated into the Disengagement Plan.

(b)         Termination Assistance Services.

“Termination Assistance Services” means (i) the Services to the extent JPMC requests the Services during the Termination Assistance Period, (ii) Supplier’s cooperation with JPMC or another supplier designated by JPMC in the transfer of the Services; and (iii) any other services requested by JPMC in order to facilitate the transfer of the Services to JPMC or another supplier designated by JPMC. In addition to the general provisions for termination assistance service in this Agreement, Supplier will, upon the expiration or termination of the applicable Schedule, provide the Termination Assistance Services in accordance with the Disengagement Plan.  Except as otherwise set forth in this Agreement, the Termination Assistance Services will be provided at the applicable rates set forth in the applicable Schedule(s) or, if the applicable rates are not set forth in the Schedule(s), at Supplier’s rates then in effect for like services immediately prior to the expiration or termination of the applicable Schedule, except to the extent that resources included in the fees being paid by JPMC to Supplier after expiration or termination of the applicable Schedule can be used to provide the Termination Assistance Services.

(c)          Termination Assistance Period.

“Termination Assistance Period” (i) means a period of time designated by JPMC commencing on the date JPMC delivers to Supplier a notice of intent to terminate the applicable Schedule, or (ii) where no such time is so designated, means the period between the effective date of the termination notice and the 120th day after the effective date of the termination of the applicable Schedule. In any event, during the Termination Assistance Period Supplier will provide the Termination Assistance Services in accordance with this Section. The quality and level of performance of the Services during the Termination Assistance Period will not be degraded as compared to the quality and level of performance of the Services prior to the Termination Assistance Period.  After the expiration of the Termination Assistance Period, Supplier will (i) answer questions from JPMC regarding the terminated Services on an “as needed” basis at Supplier’s then standard billing rates and (ii) deliver to JPMC any remaining JPMC owned reports and documentation relating to the terminated Services still in Supplier’s possession.”

“2.12 Exit Rights

Upon the later to occur of (a) the expiration or termination of the applicable Schedule or (b) the last day of any Termination Assistance Period (the “End Date”), (i) the access right, if any, granted to Supplier and Supplier Personnel to JPMC networks or computing systems will immediately terminate; and (ii) if and to the extent the applicable Schedule gives JPMC license rights, Supplier will deliver to JPMC a copy of any software in the form in use as of the End Date, which JPMC has such rights.”

“2.13 Supplier Personnel Information

Upon the delivery of a notice of intent to terminate the applicable Schedule or a determination that the Schedule Term will not be renewed, with respect to the then current Supplier Personnel who are providing Critical Services (each an “Affected Supplier Personnel”). Supplier will (i) not terminate, reassign or otherwise remove from providing the Services or Termination Assistance Services any Affected Supplier Personnel; and (ii) to the extent not prohibited by applicable Law, provide JPMC and its designees full access to the Affected Supplier Personnel to the extent such access does not adversely impact Supplier’s delivery of the Services or Termination Assistance Services to JPMC.”

“2.14 Complaints

If Supplier receives any communication from or on behalf of a JPMorgan Chase & Co. customer indicating a complaint with respect to Supplier’s Services or other Deliverables, JPMorgan Chase & Co. or any JPMorgan Chase & Co. product or service (whether or not related to any Services or other Deliverables), Supplier will report that communication to JPMC and take only such actions as reasonably requested by JPMC or as set forth in the

4

applicable Schedule with respect to the reporting and other handling of complaints.  Any such communications will be deemed JPMC Confidential Information.”

3.              Section 4, Covenants and Obligations of the parties, is hereby amended to append the following provision at the end of Section 4.1 (b) Financial Reports thereof:

“Further, JPMC may use any Supplier information already in JPMC’s possession, whether received as a result of this Agreement or any other relationship Supplier has with JPMC.  Supplier will promptly notify JPMC of any material adverse changes in Supplier’s financial stability.”

4.              Section 5, Project Team, is hereby amended as follows:

A.            Section 5.2 (d), is hereby deleted in its entirety.

B.            Section 5.2 (f), is hereby deleted in its entirety and replaced with the following:

“(i) If JPMC or Recipient determines that the continued assignment to JPMC’s account of any Supplier Personnel is not in the best interests of JPMC due to material performance issues, JPMC may request in writing that the individual be replaced.  On receipt of such notice, Supplier will have two weeks chance to cure.  If Supplier is unable to cure within such two week period, then Supplier will remove that individual from JPMC’s account and all JPMorgan Chase & Co. facilities and within a reasonable time period  replace that individual with Supplier Personnel of suitable ability and qualifications at no additional cost to JPMC.  JPMC will not be invoiced for any work performed by that individual if JPMC’s request for removal and replacement of that individual is made within the first 10 Business Days of that individual’s assignment to JPMC’s account.  Additionally, JPMC shall not be obligated to pay for any time that replacement Supplier Personnel spend performing Services until such time as the replacement Supplier Personnel have reached the level of proficiency required to effectively perform their required roles such ramp-up period not to exceed 10 business days.

(ii) Supplier agrees to notify JPMC immediately in the event that any Supplier Personnel ceases to work on behalf of Supplier with respect to the provision of the Services.  Supplier’s notice will contain the name of the Supplier Personnel, the date of the cessation of the Services by such Supplier Personnel, the JPMC Standard or Global Identification Number, as the case may be, for such Supplier Personnel, if applicable, information with respect to the systems, if any, to which such Supplier Personnel had access, and a list of all JPMC property, assets and equipment, if any, held by such Supplier Personnel (“JPMC Returnable Property”).  Supplier will collect and secure all JPMC Returnable Property and will promptly return it to JPMC together with any identification cards, secure tokens and other access or status authorizations issued to such Personnel, or to Supplier for use by such Supplier Personnel.  All notices pursuant to this Section will be given as provided in this Agreement unless otherwise specified in the applicable Schedule.”

C.            Section 5.5, Supplier Personnel’s Compliance with JPMC Requirements, is hereby amended to be deleted in its entirety and replaced with the following:

“5.5 Fingerprinting; Drug Testing; Background Checks of Supplier Personnel

(a)         As a participant in a highly regulated industry, JPMC has certain requirements (as may be amended from time to time by JPMC, the “JPMC Requirements”) that will apply to Designated Supplier Personnel.  There are two types of Designated Supplier Personnel:  Category I Designated Supplier Personnel and Category II Designated Supplier Personnel.  Category I Designated Supplier Personnel and Category II Designated Supplier Personnel are collectively referred to as “Designated Supplier Personnel”.  Supplier represents, warrants and covenants that it will not assign any Designated Supplier Personnel to JPMC if such person has been convicted of, pled guilty or no contest to, or participated in a pre-trial diversion program for felony or multiple misdemeanor offenses involving crimes of dishonesty or breach of trust including theft; money laundering; embezzlement; or the manufacture, sale, distribution of, or trafficking in drugs or controlled substances or criminal conspiracy.  Supplier will comply with all JPMC Requirements (where permitted by applicable Law) and agrees that all assignments of Designated Supplier Personnel made pursuant to this Agreement or any applicable Schedule will be made in accordance with the JPMC Requirements.

(b)         “Category I Designated Supplier Personnel” are:  (i) Supplier Personnel that are assigned to provide Services on-site at a JPMorgan Chase & Co. location and that will receive a JPMorgan Chase & Co. identification access badge; or (ii) Supplier Personnel that have access to networks or systems of JPMorgan Chase & Co. whether such Supplier Personnel are working on-site at a JPMorgan Chase & Co. location or off-site.

5

(c)          “Category II Designated Supplier Personnel” are Supplier Personnel who, as part of the Services, have access to either sensitive data (including Personal Information about JPMC’s customers, clients or employees (current, former or prospective), customer property (tangible or intangible), or any JPMC Data.

(d)         If, at any time, JPMC determines, in its sole discretion,  that any Category II Designated Supplier Personnel has or will have access to any highly sensitive JPMC Data, JPMC may, upon notice to Supplier convert the relevant Category II Designated Supplier Personnel to Category I Designated Supplier Personnel and the JPMC Requirements for Category I Designated Supplier Personnel specified in Section 5.5(f) below will apply as of the date of Supplier’s receipt of such notice from JPMC, Supplier having a reasonable period of time to comply with JPMC Requirements.

(e)          Any Designated Supplier Personnel who do not successfully meet or comply with any of the then-current JPMC Requirements will not be assigned, or if applicable, will not continue in an assignment, to provide Services to JPMC and Supplier will promptly replace such Designated Supplier Personnel at no additional charge to JPMC; provided, however, such failure to meet or comply with any of the applicable JPMC Requirements will not affect such individual’s eligibility for employment with Supplier or any Supplier subcontractor, as the case may be.

(f)           The JPMC Requirements require that on or before the first day of the assignment, all Category I Designated Supplier Personnel:

(i)             Accurately complete, sign and submit to Supplier a JPMC Pre-Assignment Statement (a current copy of which is located at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇/▇▇▇▇▇-▇▇▇▇/▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇.▇▇▇  or is otherwise available from JPMC upon request).  Supplier will retain original signed copies of each executed JPMC Pre-Assignment Statement and, upon JPMC’s request, Supplier will promptly deliver to JPMC original signed copies of each such document.  If any Category I Designated Supplier Personnel answers questions three or four in the Pre-Assignment Statement in the affirmative, Supplier will report this fact to JPMC prior to such Category I Designated Supplier Personnel’s first day of assignment for review and consideration by JPMC with the understanding that JPMC may require Supplier to assign different Category I Designated Supplier Personnel based on this information.  The affirmative answers of all Category I Designated Supplier Personnel to questions five and six of the Pre-Assignment Statement will be reported to JPMC prior to such Category I Designated Supplier Personnel’s first day of assignment for use in conjunction with JPMC-administered background checks, Supplier acknowledging that JPMC may require Supplier to assign different Category I Designated Supplier Personnel based on this information;

(ii)          Submit to fingerprinting (at a location designated by JPMC) in accordance with the then-current JPMC Fingerprinting Policy (a current copy of which is located at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇/▇▇▇▇▇-▇▇▇▇/▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇.▇▇▇ or is otherwise available from JPMC upon request); provided, that if any fingerprints are not readable then the relevant Category I Designated Supplier Personnel will submit to an alternative form of background check as required by JPMorgan Chase & Co., all at JPMC’s sole cost and expense;

(iii)       Submit to and successfully pass a drug test (administered by Supplier or a third party hired by Supplier, in each case at Supplier’s sole cost and expense) that complies with the then-current JPMC Drug Testing Policy (a current copy of which is located at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇/▇▇▇▇▇-▇▇▇▇/▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇.▇▇▇ or is otherwise available from JPMC upon request);

(iv)      Agree to have his/her photograph taken; and

(v)         Agree to complete privacy and data protection training, subject to local employment law, as required and as defined by the JPMC line of business or corporate group engaging the Category I Designated Supplier Personnel.

(g)          The JPMC Requirements require that on or before the first day of the assignment, all Category II Designated Supplier Personnel:

(i)             Will have been submitted to and passed a background check (including criminal background checks) conducted by Supplier or a third party vendor contracted by Supplier (“Supplier Background Checks”).  As between Supplier and JPMC, Supplier is solely responsible for all expenses associated with such Supplier Background Checks.  Upon request, Supplier will provide JPMC with the written policies and procedures governing such Supplier Background Checks.  The Supplier Background Checks will, if permitted by law, at a minimum, meet the national standards for employment screening as set forth in the Federal Fair Credit Reporting Act (FCRA), as updated from time to time and include, at a minimum, a certification of county, state & federal criminal records, national criminal database records, international criminal records searches, social security number validation, OFAC and other prohibited parties searches and sex offender registry searches.  In the event of a conflict between the

6

FCRA and any state law (including state labor codes and guidelines), the more thorough requirements will govern.  Supplier will not provide the detailed results of the Supplier Background Checks to JPMC.  No less than quarterly, Supplier will review the roster of current Category II Designated Supplier Personnel and ensure that each one passed the Supplier Background Checks.

(ii)          Agree to complete privacy and data protection training consistent with Supplier’s obligations under this Agreement with respect to Personal Information, subject to local employment law.”

5.              Section 8, Payments to Supplier, is hereby amended as follows:

A.            Section 8.2, Payment Schedule and Invoices, is hereby amended to include the following sub-clauses:

“(a)                      General

All invoices will identify:  (i) the applicable Schedule and Agreement numbers, (ii) the applicable purchase order number (if any), (iii) dates when each Deliverable was provided and, if applicable, (iv) the taxing jurisdiction(s) in which each Deliverable was provided.

(b) Invoices for Licensed or Purchased Goods

Invoices for licensed or purchased goods will also include:  (i) the name and description of the good, (ii) the part number or other identifier of the good, (iii) the quantity of Deliverables being licensed or purchased, (iv) the unit price for the good, (v) if applicable, the level of discount being applied and (vi) the total dollar amount owed.

(c) Invoices for Services

Invoices for services and maintenance will also include, if applicable:  (i) a brief description of the services provided, (ii) the quantity of hours worked, (iii) the names and hourly rates of each individual performing the services, (iv) the tasks performed, (v) the dates of performance, (vi) the service code number or other identifier for the services (if any) and (vii) the total dollar amount owed.

(d) Address

Unless otherwise specified by JPMC, Supplier will send all invoices to the address specified in the applicable Schedule.”

B.            Deleted.

C.            Section 8.5, Increase in Fees, is hereby deleted in its entirety and replaced with the following:

“8.5 Increase in Fees

The rates and prices provided under any Schedule will not be increased by Supplier during the Schedule Term.  For any renewal terms, rates and prices will not be increased by Supplier more than once annually and by more than the lower of:  (i) for personnel in each respective geography, the cumulative rise in the applicable “Country CPI” as defined below; (ii) the percentage increase in the rates or prices generally charged by Supplier; or (iii) three percent.  The term “Country CPI” means (i) for the United States, the Consumer Price Index for All Urban Consumers for the US City Average for all Items, 1982-1984 Equal 100 Base, as reported by the US Department of Labor’s Bureau of Labor Statistics and (ii) for India, the Linked All India CPI (UNME) on base 1984-85 = 100; Published by Govt. of India, Ministry of Statistics and Programme Implementation, Central Statistical Organization...

D.            Section 8.6, Audit of Fees, is hereby deleted in its entirety and replaced with the following:

“8.6, Audit of Fees

Upon JPMC’s request with reasonable notice, Supplier will permit, for each Schedule, technical, financial and operational audits of Supplier and its Affiliates, related to the subject matter of this Agreement as applicable to each Schedule, by the internal and external auditors and personnel of JPMorgan Chase & Co. and regulators (collectively, “Auditors”).  Audits by internal or external auditors and personnel of JPMorgan Chase & Co. will not occur more than twice in any calendar year per Schedule unless such audit is materially different in scope from a preceding audit or JPMC has a good faith belief that Supplier is in material breach of the Agreement.  During each audit, Supplier will grant the Auditors reasonable access to Supplier’s books, records, third-party audit and examination reports, systems, facilities, controls, processes, procedures, service level measurement systems, and actual service levels to the extent related to a reasonable assessment of Supplier’s performance of its obligations to JPMC.  Supplier will, in a timely manner, fully cooperate with the Auditors and provide the Auditors all assistance as they may reasonably

7

request in connection with the audit.  The Auditors will seek to avoid disrupting Supplier’s operations during the audit.  If the Auditors document either an overcharge of the fees for the audited period or a material breach of Supplier’s obligations, Supplier will promptly (a) reimburse JPMC for its reasonable cost of performing the audit if the overcharge is more than two percent of the fees for the audited period, (b) reimburse JPMC for any overcharge (c) promptly correct any identified breach, and (d) such audit shall not be counted for the purposes of the limitation in the second sentence above.”

E.            Section 8, Payments to Supplier, is hereby amended to include the following sections:

“8.7 Payments

All payments will be made in U.S. Dollars.  JPMC will pay all undisputed amounts on each invoice within 45 days after JPMC’s receipt of an accurate invoice, i.e., an invoice showing only undisputed amounts.  JPMC will have no obligation to pay any charges and expenses that Supplier fails to invoice to JPMC within 120 days after the charges or expenses were incurred.”

“8.8Expenses

Only when agreed to in the applicable Schedule will JPMC pay reasonable and actual (meaning without ▇▇▇▇-up or administrative fee), pre-approved in writing travel and communications expenses (for which Supplier can provide receipts) incurred by Supplier to perform services under this Agreement and only in accordance with the JPMorgan Chase Supplier Travel and Expense Policy (a current copy of which is located at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇/▇▇▇▇▇-▇▇▇▇/▇▇▇▇▇▇-▇▇▇▇▇▇.▇▇▇ or is otherwise available from JPMC upon request).  For the avoidance of doubt, JPMC will benefit from any rebates provided to Supplier by the travel and communications service providers regardless of whether they are reflected on the receipts or are applied at some other time.  If JPMC reimburses for meals or entertainment costs incurred by Supplier, any Internal Revenue Code Section 274 limitation on deductibility of the costs will be assumed by Supplier, not JPMC.”

“8.9 Credits

Any undisputed credits due to JPMC will be applied on the next invoice for the applicable Schedule against amounts then due and owing.  If any credit is due to JPMC after the termination or expiration of the applicable Schedule, Supplier will pay the amount of the credit to JPMC within 30 days after such termination or expiration.  All credits will be credited or paid in U.S. Dollars only.”

“8.10 Right to Set Off

JPMC will have the right to set off undisputed amounts owed by Supplier or any of Supplier’s Affiliates to JPMorgan Chase & Co. against amounts payable under this Agreement, if Supplier agrees in writing that such amount is due and payable to JPMC.”

“8.11 Invoice Disputes

In the event of a good faith dispute with regard to one or more item(s) appearing on an invoice, JPMC may withhold the disputed amount while the parties attempt to resolve the dispute in accordance with Section 19.14, 19.15, 19.25, & 19.26.  JPMC’s withholding of that payment prior to resolution of the dispute will not constitute a breach of this Agreement or be grounds for Supplier to suspend its provision of Deliverables.”

6.              Section 11, Confidentiality; Compliance with Privacy Policies is hereby amended as follows:

A.            Section 11.4(e) is hereby deleted except the last sentence of the paragraph, to be replaced with the following:

“If Supplier receives, has access to or processes personal information protected by the Privacy Regulations (“Personal Information”) from JPMorgan Chase & Co., or from other person within the scope of this Agreement, Supplier will be subject to applicable Laws restricting collection, use, disclosure, processing and free movement of personal data (collectively, the “Privacy Regulations”).  The Privacy Regulations include the Federal “Privacy of Consumer Financial Information” Regulation (12 CFR Part 40) and Interagency Guidelines Establishing Information Security Standards (App B to 12 CFR Part 30), as amended from time to time, issued pursuant to the ▇▇▇▇▇-▇▇▇▇▇-▇▇▇▇▇▇ Act of 1999 (15 ▇.▇.▇. §▇▇▇▇, et seq.), the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. §1320d), The Data Protection ▇▇▇ ▇▇▇▇ and Directives 95/46/EC, 2009/136/EC and 2002/58/EC of the European Parliament and of the Council , as amended from time to time, and applicable implementing legislation.  JPMorgan Chase & Co. may provide guidelines to help Supplier comply with the Privacy Regulations, but Supplier using its own legal advisors will remain fully responsible for interpreting and complying with the Privacy Regulations with respect to Supplier’s business.”

8

B.            Section 11, Confidentiality; Compliance with Privacy Policies is hereby further amended to include the following sections:

“11.5 Return or Destruction

Supplier will return or destroy any of JPMC”s Confidential Information in Supplier’s possession or under Supplier’s control, as soon as possible after the earlier of:  (a) JPMC’s request, or (b) the date Supplier no longer requires that Confidential Information to perform its obligations to JPMC.  Supplier will provide JPMC with a certificate, signed by an officer of Supplier, certifying that all of that Confidential Information has been destroyed or returned to JPMC or its designee (e.g., JPMC’s escrow agent).  JPMC is entitled to withhold payment of any and all amounts due to Supplier so long as Supplier fails to comply with this Section or any other provisions of this Agreement or the applicable Schedule with respect to destruction or return of Confidential Information (collectively and individually, “Supplier’s Purge Obligations”).  The limitations of liability and disclaimers in this Agreement will not apply to any breach of Supplier’s Purge Obligations.  This provision shall survive termination or expiration of this Agreement.”

7.              Section 12, Representation and Warranties, is hereby amended as follows:

A.            Section 12.1(c) is hereby deleted in its entirety and replaced with the following:

“Each party represents and warrants that it has:  (a) all requisite legal and corporate power to execute and deliver this Agreement and each Schedule, (b) taken all corporate action necessary for the authorization, execution and delivery of this Agreement and each Schedule, (c) no agreement or understanding with any third party that interferes with or will interfere with its performance of its obligations under this Agreement and each Schedule, (d) obtained and will maintain all rights, approvals and consents necessary to perform its obligations and grant all rights and licenses granted under this Agreement and each Schedule, and (e) taken all action required to make this Agreement and each Schedule a legal, valid and binding obligation of such party, enforceable against such party in accordance with its terms.”

B.            Section 12.1(j) is hereby deleted in its entirety and replaced with the following:

“Supplier represents and warrants that each Deliverable will:  (a) be free from errors and defects caused by Supplier in workmanship and materials categorized as a Severity 1 (defect which crashes the deliverable and renders it unusable in the production environment or Severity 2 (defect in major functionality with significant impact on the user for which no workaround is available) for ninety (90) days after Acceptance of the Deliverable.  Within ten days after JPMC informs Supplier in writing during the warranty period that a Deliverable does not conform to this warranty, Supplier will, at its own expense, replace the nonconforming Deliverable with a Deliverable that is in Compliance.  If Supplier fails to do so within that period, JPMC may, at its option:  (i) extend the correction period or (ii) bring a claim against Supplier for the damages caused by the non-conforming Deliverable and any other Deliverables that JPMC is unable to use as a consequence of the nonconformity.

The forgoing warranty shall not apply to the extent the defect is caused by (i) JPMC’s hardware malfunction, environment or infrastructure, or other causes beyond the reasonable control of Supplier, (ii) third party software not licensed through Supplier, (iii) the installation of the Deliverable in a hardware or operating environment not expressly stated in the applicable Schedule; (iv) modification to the Deliverables (other than by Supplier), (v) failure of any assumption agreed by the parties, of (vi) the non-performance of JPMC of its obligations under any Schedule.”

D.            Section 12, Representation and Warranties, is hereby further amended to include the following new sections:

“12.3 No Inducements

Supplier represents and warrants that Supplier has not provided, and will not provide, to any JPMorgan Chase & Co. employee or contractor any gift, gratuity, service or other inducement or favor to influence or reward that employee or contractor in connection with any Schedule.  By way of example and for the avoidance of doubt, meals and tickets are considered inappropriate under this Section.”

“12.4 Adequate Documentation

To the extent Documentation is included in the scope of the Schedule, Supplier represents and warrants that the Documentation will describe fully and accurately the features and functions of the version(s) of the Deliverables then in use by JPMC or Recipient well enough to allow a reasonably skilled JPMC or Recipient user to effectively use all of its features and functions without assistance from Supplier.  If Supplier provides source code, the Documentation will also include all information that a reasonably skilled programmer needs to maintain, modify and implement the applicable Deliverables without assistance from Supplier.”

9

“12.5 Pass Through of Third Party Warranties

In addition to its other representations and warranties given in the Agreement, Supplier will provide to JPMC and Recipients the full benefit of all covenants, warranties, representations and indemnities granted to Supplier by third parties in connection with any Deliverables. Where the third party prohibits Supplier from passing through any indemnities, representations or warranties to JPMC, Supplier shall either (a) provide them directly to JPMC as part of this Agreement or (b) enforce them against the third party and provide the benefits of that enforcement to JPMC.”

“12.6 Adequate Assurances

With respect to any Schedule to be entered into between a JPMC Entity and a Supplier Affiliate, the JPMC entity may request and Supplier shall provide, contemporaneous with the execution of the applicable Schedule, an adequate assurance of such Supplier Affiliate’s ability to deliver the Deliverables in the form of a parent guarantee, letter of credit or performance bond (each, an “Assurance Document”) acceptable to the JPMC Entity in its reasonable discretion. However, in the absence of such Assurance Document at the time the Schedule is executed, and in connection with any Schedule to which Supplier itself is a part, Supplier covenants and agrees that during the Schedule Term of each Schedule, if the JPMC Entity becomes aware of facts or circumstances that it reasonably believes would cause Supplier Affiliate not to be willing or able to deliver the Deliverables or a significant portion of the Deliverables, the JPMC Entity may request, and Supplier shall provide within 48 hours after receipt of a request, adequate assurances (which may include furnishing an Assurance Document), acceptable to the JPMC Entity in its reasonable discretion, of Supplier Affiliate’s continuing ability and willingness to deliver the Deliverables as required by the applicable Schedule; provided, that any dispute with respect to this provision will trigger an immediate executive level face-to-face meeting at JPMC’s offices in accordance with Section 19.14.”

“12.7 Financial Interests

Supplier represents and warrants that it will reveal all financial interests related to any hardware, software, services, or provider thereof that Supplier might recommend to JPMC.”

8.              Section 13, Indemnities in hereby deleted in its entirety and replaced with the following:

“13 Indemnities

13.1  Supplier will indemnify, defend and hold harmless JPMorgan Chase & Co. and all of its direct and indirect officers, directors, employees, agents, successors and assigns (each, an “Indemnified Person”) from any and all losses, liabilities, damages (including taxes), and all related costs and expenses, including reasonable legal fees and disbursements and costs of investigation, litigation, settlement, judgment, interest and penalties (collectively, “Losses”), and threatened Losses due to, arising from or relating to third party claims, demands, actions or threat of action (whether in law, equity or in an alternative proceeding) (“Claim”) arising from or relating to:  (a) Supplier’s actual or alleged breach of the warranties set forth in Sections 12.1(a), 12.1(b), 12.1(c),12.1(d), 12.1(e), 12.1(f), 12.1(g), 12.1(h). 12.1(i), 12.1(n), 12.1(o), 12.3, 12.5, 12.6 in this Agreement; (b) any actual or alleged infringement, violation or misappropriation of the Intellectual Property Rights of any third person by (i) any Deliverables provided by Supplier or (ii) JPMC or a Recipient’s use of those Deliverables; (c) Supplier’s actual or alleged breach of any of the confidentiality or privacy provisions in this Agreement; (d) the failure of Supplier or any of its subcontractors or anyone acting on its or their behalf to pay any withholding or other employment-related taxes or other obligations in connection with Supplier Personnel; (e) fraud, grossly negligent, willful or reckless acts or omissions of or by Supplier or any Supplier Personnel or (f) death, bodily injury, personal injury or property damage caused by Supplier or Supplier Personnel or incurred during the performance of the Services (each, an “Indemnified Claim”).  No settlement or compromise that imposes any liability or obligation on any Indemnified Person will be made without the Indemnified Person’s prior written consent (not to be unreasonably withheld).  If Supplier fails to defend an Indemnified Person as provided in this Section after reasonable notice of an Indemnified Claim, Supplier will be bound:  (i) to indemnify and reimburse any Indemnified Person for any Losses incurred by the Indemnified Person, in its sole discretion, to defend, settle or compromise the Indemnified Claim; and (ii) by the determination of facts common to an action and subsequent action to enforce the Indemnified Person’s reimbursement rights. Notwithstanding the above, Supplier shall have no obligation under this Subsection 12.1or other liability for any infringement or misappropriation claim resulting or alleged to result from: (1) third party software not licensed by Supplier or  if the Deliverable has been modified or altered by any person or entity other than Supplier without the written approval of Supplier (such writing may include Documentation and comments to the source code); (2) any aspect of JPMC software, documentation or data which existed prior to

10

Supplier’s performance of Services; or (3) JPMC continuing the allegedly infringing activity after being notified thereof and provided with modifications that would have avoided the alleged infringement.  This Subsection 12.1sets forth the exclusive remedy and entire liability and obligation of Supplier with respect to intellectual property infringement or misappropriation claims, including patent or copyright infringement claims and trade secret misappropriation.

13.2  Indemnification Procedures.

(a)         If any Claim is commenced against any Party entitled to indemnification under this Article 12 (“Indemnified Party”), written notice thereof shall be given to the Party that is obligated to provide indemnification (“Indemnifying Party”) promptly upon receipt of the Claim by the Indemnified Party.  Failure to give such notification shall not affect the indemnification provided hereunder except to the extent that the Indemnifying Party has actually been materially and adversely affected as a result of such failure (except that the Indemnifying Party shall not be liable for any expenses incurred during the period in which the Indemnified Party failed to give notice if such Indemnified Party failed to give prompt notice).  To the extent received, the Indemnified Party shall make reasonable efforts to deliver copies of all notices and documents related to the Claim, including court papers, to the Indemnifying Party within five (5) business days of the Indemnified Party’s receipt thereof.

(b)         After such notice, if the Indemnifying Party shall acknowledge in writing to such Indemnified Party that this Agreement applies with respect to such Claim, then the Indemnifying Party shall be entitled, if it so elects, in a notice delivered to the Indemnified Party not less than fifteen (15) days prior to the date on which a response to such Claim is due, to immediately take control of the defense and investigation of such Claim and to select and engage attorneys reasonably satisfactory to the Indemnified Party to handle and defend the same, at the Indemnifying Party’s sole cost and expense.

(c)          The Indemnified Party shall cooperate in all reasonable respects with the Indemnifying Party and its attorneys in the investigation, trial and defense of such Claim and any appeal arising therefrom; provided, however, that the Indemnified Party may, at its own cost and expense, participate, through the Indemnified Party’s own attorneys or otherwise, in such investigation, trial and defense of such Claim; and any appeal arising therefrom.  The Indemnifying Party will bear the costs of counsel engaged by the Indemnified Party by reimbursing the Indemnified Party, as such costs are incurred and upon request therefor, if: (i) the use of counsel chosen by the Indemnifying Party to represent the Indemnified Party would present such counsel with a conflict of interest that would preclude such counsel from representing the Indemnified Party or (ii) the Indemnifying Party has failed to engage counsel reasonably satisfactory to the Indemnified Party within thirty (30) days after the Indemnifying Party has received notice of a Claim.

(d)         If the Indemnifying Party does not assume full control over the defense of a Claim subject to such defense as provided in this Section 13.3 (Indemnification Procedures), the Indemnifying Party may participate in such defense, at its sole cost and expense, and the Indemnified Party shall have the right to defend the Claim in such manner as it may deem appropriate, at the cost and expense of the Indemnifying Party, and the Indemnifying Party will bear the costs incurred by the Indemnified Party in connection therewith by reimbursing the Indemnified Party, as such costs are incurred and upon request therefor.

(e)          Supplier shall not settle any claim, action or proceeding in respect of which indemnity may be sought hereunder, whether or not JPMC is an actual or potential party to such claim, action or proceeding without JPMC’s written consent, which consent shall not be unreasonably withheld, delayed, or conditioned.  Notwithstanding the foregoing, JPMC may withhold, delay and/or condition its consent to any settlement of a Claim, in JPMC’s sole and absolute discretion, if:

(1)                                 such settlement: (A) involves a remedy other than the payment of money by the Indemnifying Party, (B) affect any rights of JPMC, including any rights with respect to the Work Product, (C) impose any actual liability upon JPMC, or (D) contain or imply (1) a factual admission by or with respect to JPMC, (2) any adverse statement or implication with respect to the character, professionalism, due care, loyalty, expertise, or reputation of JPMC, or (3) any wrongful action or inaction by JPMC; or

11

(2)                                 Supplier and all plaintiffs or claimants do not affirmatively and unconditionally absolve and release JPMC from any responsibility or liability with respect thereto and the subject matter thereof and any responsibility or liability with respect to the same, similar, or related facts or circumstances.

(f)           If JPMC is enjoined, or is otherwise prohibited, from using Deliverable or Documentation (or any part thereof) as a result of or in connection with any claim under Section 12.1, Supplier promptly shall, at its sole expense and in the following order of precedence: (i) procure for JPMC the right to continue to use the Deliverable or Documentation; (ii) modify the Deliverable or Documentation so that it becomes noninfringing and nonviolative, without diminishing the functionality or performance of the Deliverable or Documentation or (iii) replace the Deliverable or Documentation with software and documentation that are noninfringing and nonviolative with equivalent functionality and performance.  If Supplier cannot, after using its best commercial efforts to do so within a reasonable period of time, so procure, modify or replace the Deliverable or Documentation, the Supplier shall terminate the applicable Schedule with respect to the Deliverable or Documentation involved and promptly refund to JPMC the fees for the Deliverable or Documentation involved under such Schedule.

9.              Section 14.2 Exclusions, sub-clause (d), is hereby amended to include the sub-provision towards the exclusions from the Liability provided:

“(viii) death, personal injury or tangible property damage caused by either party”

10.       Section 15, Insurance, is hereby deleted in its entirety and replaced with the following:

“15 Insurance

Within five Business Days after the execution of this Agreement or before commencing the provision of Deliverables or permitting any subcontractor to commence the provision of Deliverables, whichever is earlier, Supplier will, at its own cost and expense, procure and maintain in full force and effect throughout the Schedule Term the insurance policies listed in the Insurance Exhibit attached hereto.”

Insurance Exhibit is hereby added by way of this Amendment.

11.       ▇▇▇▇▇▇▇ ▇▇, ▇▇▇▇; Termination is hereby amended as follows:

A.            Section 16.4, Termination for Insolvency; Change of Control is hereby amended to be deleted in its entirety and replaced with the following:

“16.4, Termination for Insolvency; Change of Control

Either party may terminate this Agreement or any Schedule, in whole or in part, for cause as of the date specified in a termination notice if the other party, or, in the case of Supplier, any of Supplier’s Affiliates providing Deliverables to JPMC:  (a) files for bankruptcy, (b) becomes or is declared insolvent, (c) is the subject of any proceedings (not dismissed within 30 days) related to its liquidation, insolvency or the appointment of a receiver or similar officer for that party, (d) makes an assignment for the benefit of all or substantially all of its creditors, (e) takes any corporate action for its winding-up, dissolution or administration, (f) enters into an agreement for the extension or readjustment of substantially all of its obligations, or (g) recklessly or intentionally makes any material misstatement as to financial condition.”

B.            ▇▇▇▇▇▇▇ ▇▇, ▇▇▇▇; Termination is hereby further amended to include the following new sections:

“16.7 Termination Assistance Services

In connection with the termination of any Schedule, Supplier will provide any and all services reasonably requested by JPMC, or as otherwise provided in the Schedule, to make a smooth transition from the use of Deliverables provided under the applicable Schedule to internal functions or alternate providers.  JPMC will pay Supplier the most applicable rates in any Schedule or in accordance with the Pricing Schedule Exhibit, in consideration of those services.  However, if JPMC terminates the Schedule for cause, Supplier will provide to JPMC these termination assistance services at rates in effect at time of termination.”

“16.8 Survival

(a)         Effect on Schedules

12

After this Agreement terminates, the terms of this Agreement will remain in effect with respect to any Schedule entered into before the termination.  However, no Schedule may be entered into under this Agreement after it terminates.

(b)         Surviving Provisions

After this Agreement or a Schedule terminates or expires, the terms of this Agreement and that Schedule that expressly or by their nature contemplate performance after such termination or expiration will survive and continue in full force and effect.  For avoidance of doubt, the provisions protecting Confidential Information, permitting audits, providing for rights of quiet enjoyment, granting perpetual licenses, requiring reimbursement of Losses, requiring indemnification and setting forth limitations of liability each, by their nature, contemplate performance or observance after this Agreement or a Schedule expires or terminates.”

12.       Section 18, Security; Information Technology Control Policies is hereby amended as follows:

A.            Section 18.3, Compliance with JPMC Information/Technology Control Policies, is hereby amended to be deleted in its entirety and replaced with the following:

“18.3 Compliance with JPMC Information/Technology Control Policies

(a)         Whenever Supplier has JPMC Data, Supplier will (i) comply with ISO/IEC 27002 (Information Technology — Code of Practice for Information Security Management), (ii) comply with JPMC’s Minimum Control Requirements (a current copy of which is located at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇/▇▇▇▇▇-▇▇▇▇/▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇-▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇ or is otherwise available from JPMC upon request), and (iii) if Supplier stores, processes or transmits payment card primary account numbers or other cardholder data, comply with the then current Payment Card Industry Data Security Standard as well as any procedures set forth in the applicable Schedule (collectively, the “IT Risk Management Policies”).  JPMC may update the Minimum Control Requirements from time to time on reasonable notice, and Supplier will comply with the updated Minimum Control Requirements within the time required by applicable Law or as reasonably requested by JPMC.  Additionally, whenever Supplier has JPMC Data, Supplier will have policies and procedures to detect patterns, practices, or specific activity that indicates the possible existence of identity theft (“Red Flags”) that may arise in the performance of Supplier’s obligations under this Agreement and either report the Red Flags to JPMC or take appropriate steps to prevent or mitigate identity theft.  Supplier will not provide any JPMC Data to any subcontractor unless the subcontract requires the subcontractor to comply with the IT Risk Management Policies and the Privacy Regulations and to permit security audits by Auditors.

(b)         Unless and until JPMC is satisfied that Supplier is fully complying with this Section, Section 18.5 and Section 20, JPMC will not be bound by any obligation to allow Supplier access to JPMC Data.  Any breach of this Section 18.3, 18.5 and Section 20 that is not corrected within 30 days after JPMC gives Supplier a notice describing the breach will be deemed a material breach of this Agreement (even if the breach was not otherwise material).

(c)          Before Supplier may modify its systems in a way that could adversely impact the security of its systems, Supplier must send a 30 day advance notice to JPMC containing a reasonably detailed description of the proposed modification and a representation and warranty that:  (i) the proposed modifications will not pose any new or additional risks to the JPMC Data, and (ii) Supplier’s systems will continue to comply with JPMC’s IT Risk Management Policies.

(d)         In addition to any reporting requirements set forth in the applicable Schedule, Supplier will provide the following written periodic reports to the JPMC Relationship Manager:  (i) on a quarterly basis:  (A) summary system and network security incident reporting and access violation reporting, and summary of any Supplier remediation or action plans; (B) summary of incidents and breaches as to which Supplier was required to inform JPMC under Section 20.1 and Section 11, and summary of any Supplier remediation or action plans; and (C) the status of any existing remediation or action plans, including those that are related to security or that may impact the Deliverables; (ii) on a semi-annual basis, a then current list of names, user IDs and access levels for any JPMC personnel having access to Supplier applications and systems; and (iii) on an annual basis, summary security vulnerability scan or penetration test reporting with respect to the Deliverables and Supplier’s system and networks, including the perimeter, and summary of any Supplier remediation or action plans.”

13

B.            Section 18.5, Reports & On-Site Review, is hereby amended to delete sub-clause (c) in its entirety and replace with the following:

“(c)  In addition to JPMC’s other audit rights under this Agreement, Auditors may conduct on-site security reviews, vulnerability testing and disaster recovery testing for Supplier’s systems containing JPMC Data and otherwise audit Supplier’s operations for compliance with the Minimum Control Requirements.  Auditors, other than regulators, will provide reasonable notice of such reviews. If vulnerabilities are identified, Supplier will (i) promptly document and implement mutually agreed upon remediation plan, and (ii) upon JPMC’s request, provide JPMC with the status of the implementation. JPMC is not responsible for any harm that results from these tests except to the extent it is a result of JPMC’s gross negligence, reckless or willful misconduct.

(d)         At least annually, Supplier will have a certified independent public accounting firm or another independent third party reasonably acceptable to JPMC:  (i) to the extent applicable/required as set forth in the Schedule, conduct a review or assessment and provide a full attestation, review or report under (A) SSAE 16 (Statement on Standards for Attestation Engagements No. 16)SOC (Service Organization Control) 2; (B) ISAE 3402 (International Standards on Assurance Engagements No. 3402) Type II; (C) BITS Financial Institution Shared Assessment Program (Standardized Information Gathering plus Agreed Upon Procedures); (D) SysTrust review (in accordance with principles and criteria developed by the American Institute of Certified Public Accountants); (E) a replacement for one of the foregoing approved by JPMC; or (F) other third party reviews and reports reasonably acceptable to JPMC, in each case, of all key systems and operational controls used in connection with any JPMC Data; and (ii) conduct and provide a full report of an independent network and application penetration test.  Each of these attestations, reviews, reports and tests will be for a scope approved by JPMorgan Chase & Co. in its reasonable discretion.  Supplier will provide all findings from these attestations, reviews and tests to JPMC upon receipt from the third party.  Supplier will (A) implement all recommendations set forth in such attestations, reviews, reports and any other reasonable recommendations made by JPMC arising out of JPMC’s analysis of such reviews and (B) upon JPMC’s request, provide JPMC with the status of the implementation.”

C.            Section 18.6, Changes that may affect Services, is hereby deleted in its entirety and replaced with the following:

“18.6, Changes that may affect Services

Supplier will notify JPMC promptly of any actual or threatened occurrence of any event described in Section 16.4 or any other event that materially affects in an adverse manner, or that could reasonably be expected to materially affect in an adverse manner, Supplier’s ability to perform fully its obligations to any Recipient.  Events or conditions that Supplier must report include (a) any material breach (whether or not cured) of any (i) representation, warranty, covenant or obligation of Supplier or any Supplier Affiliate or subcontractor under this Agreement, or (ii) other agreement between Supplier or any Supplier Affiliate and JPMC or any JPMC Affiliate; (b) any actual, threatened or reasonably alleged violation of any applicable Law (including any criminal conviction of, or charge of a criminal violation, or imposition of any sanctions or professional disciplinary action that relate to provision of Deliverables) against, (i) Supplier, (ii) any Supplier Affiliate, (iii) any Supplier Personnel or (iv) any entity that is a party to or an Affiliate of a party to any agreement for the merger, acquisition, divestiture of any similar arrangement involving Supplier or any Supplier Affiliate; and (c) any risks or control issues that have been identified that could prevent fulfillment of Supplier’s obligations under this Agreement, along with, where applicable, information on any systems and processes that have been established to monitor and manage them.”

D.            Section 18.9, Disaster Recovery Plan is hereby deleted in its entirety and replaced with the following:

“18.9, Disaster Recovery Plan and Business Continuity Plan for Resources Required to Provide Critical Services.

Unless Services are identified in a Schedule as “non-critical” to JPMC, all Services provided are considered critical (“Critical Services”).  If the Services are Critical Services, then throughout the Schedule Term:

(a)         Supplier will maintain a disaster recovery  and business continuity plan (a “DRBCP”) for all technology, operational, financial, human or other resources required to provide the Services, together with the capacity to execute the DRBCP, with respect to Supplier’s primary, backup and other Systems, resources and locations.  The DRBCP will, at a minimum, conform to the standards set by the Federal Financial Institutions Examination Council, if applicable, as well as the requirements set forth in the applicable Schedule.  In addition, the DRBCP will address (to JPMC’s reasonable satisfaction) planning for pandemic and other circumstances that may result in material loss

14

of availability of Supplier Personnel. Any breach of this Section will be deemed a material breach of this Agreement.

(b)         Within five days after signing the applicable Schedule and on an annual basis thereafter, Supplier will provide JPMC with an executive summary of Supplier’s then-current version of the DRBCP.  (If Supplier provided that summary to JPMC before signing, then within five days after signing, Supplier will provide JPMC a written confirmation that the DRBCP has not materially changed from that previously summarized.) Upon request, Supplier will provide Auditors and other JPMC designees access to the full DRBCP. In connection with each Schedule, Supplier will revise the DRBCP to adequately address concerns that JPMC raises from time to time.

(c)          Supplier will perform disaster recovery and business continuity tests at least annually.  Supplier will give JPMC reasonable notice of, and JPMC will be entitled to participate in, each test. Supplier will provide JPMC a written description of all DRBCP test results in sufficient detail to allow JPMC to assess the success of each test. Supplier will also participate and otherwise cooperate with JPMC, as reasonably requested by JPMC, in connection with JPMC’s development and testing of JPMC’s own disaster recovery and business continuity plans.

(d)         Upon the occurrence of any disaster or other event requiring use of the DRBCP, Supplier will promptly:  (i) notify JPMC of the disaster or other event and (ii) provide JPMC and each Recipient access to the Services in a manner that is at least equal to the access provided to Supplier’s other customers.  If JPMC determines that Supplier has not complied or cannot comply with the provisions of this Section or implement the DRBCP quickly enough to meet JPMC’s needs, Supplier will promptly assist and support JPMC in obtaining the Critical Services from an alternate provider.”

E.            Section 18, Security; Information Technology Control Policies is hereby further amended to include the following additional section:

“18.10 Compliance with Procedures in Performance of Services

Supplier will, and will ensure that the Supplier Personnel will:  (a) while visiting or accessing JPMorgan Chase & Co.’s or any Recipient’s facilities, comply with JPMorgan Chase & Co.’s or any Recipient’s then-current safety and security procedures, including pre-screening requirements, and other rules and regulations applicable to JPMorgan Chase & Co. or Recipient personnel at those facilities, (b) comply with all reasonable requests of JPMorgan Chase & Co. or Recipient personnel, as applicable, pertaining to personal and professional conduct, including Supplier Personnel training requirements, (c) comply with JPMorgan Chase & Co.’s Supplier Code of Conduct, a current copy of which is located at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇/▇▇▇▇▇-▇▇▇▇/▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇▇.▇▇▇ or is otherwise available from JPMC upon request, (d) comply with the JPMorgan Chase & Co. Supplier Anti-Corruption Policy, a current copy of which is located at ▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇/▇▇▇▇▇-▇▇▇▇/▇▇▇▇▇▇▇▇-▇▇▇▇▇▇▇▇▇.▇▇▇ or is otherwise available from JPMC upon request and (e) otherwise conduct themselves in an ethical, professional and businesslike manner.  Supplier will provide Supplier Personnel with adequate training regarding JPMorgan Chase & Co. Supplier Code of Conduct, JPMorgan Chase & Co. Supplier Anti-Corruption Policy, compliance with applicable Laws and the proper provision (including as may be otherwise described in this Agreement or the applicable Schedule) of Services and other Deliverables.  If JPMC so requests, based on a reasonable belief that any Supplier Personnel has breached any of the foregoing obligations, Supplier will immediately, within 24 hours, remove any such Supplier Personnel from performing Services to JPMC.”

13.       Section 19, Miscellaneous, is hereby amended as follows:

A.            Section 19.2, Notices, is hereby amended to append the following provision at the end thereof:

“All notices must be in writing and in the English language. In addition, where this Agreement states that notice will be given “immediately” after an event occurs, the notifying party will also send an immediate e-mail message to the other party’s Relationship Manager.  Notices to be given “promptly” will be given, in any event, within five days.  A party may change its address for notices by sending a change of address notice using this notice procedure.”

C.            Section 19.4, Waivers, is hereby deleted in its entirety and replaced with the following:

“19.4 Waivers

The failure of either party to enforce strict performance by the other party of any provision of this Agreement or to exercise any right under this Agreement will not be construed as a waiver to any extent of that party’s right to assert

15

or rely upon any provision of this Agreement or right in that or any other instance.  A delay or omission by JPMC or Supplier to exercise any right or power under this Agreement will not be construed to be a waiver of that right or power.  Waiving one breach will not be construed to waive any succeeding breach.  All waivers must be in writing and signed (not in electronic form) by the party waiving rights.”

D.            Section 19.6, EEOC, is hereby amended to be deleted in its entirety and replaced with the following:

“19.6 EEOC

If Supplier is a U.S. legal entity, then Supplier will not, and will ensure that Supplier Personnel do not, discriminate against any of its employees or applicants for employment because of age, race, color, religion, creed, citizenship status, marital status, sexual orientation, sex, gender identity, genetic information, national origin,  disability, veteran status or any other protected status under applicable law (e.g., civil union status, height, weight, arrest record and status with regard to public assistance, to the extent protected under applicable law). Supplier further agrees, unless exempt, to comply with all applicable requirements of the equal opportunity and affirmative action clauses set forth in Executive Order 11246 (applicable to subcontractors), as amended, in the regulations of the Department of Labor implementing the Vietnam Era Veterans Readjustment Act of 1974, and in the Rehabilitation Act of 1973, as amended, which, together with the implementing rules and regulations prescribed by the Secretary of Labor, are incorporated into this Agreement by reference.  The Supplier will abide by the requirements of 41 CFR §§ 60-1.4(a), 60-300.5(a) and 60-741.5(a).  These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, or national origin.  Moreover, these regulations require that Supplier takes affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, national origin, protected veteran status or disability.  Supplier will comply with JPMorgan Chase & Co.’s policy of maintaining a business environment free of all forms of discrimination, including sexual harassment.”

E.            Section 19.7, Publicity, is hereby amended to delete the last sentence of the section and replace with the following:

“No exceptions are granted without the prior written consent of both the JPMorgan Chase & Co. Global Media Relations Department and a Managing Director within JPMorgan Chase & Co.’s sourcing organization.”

F.             Section 19.14, Dispute Resolution, is hereby amended to include the following provision at the end thereof:

“If either party invokes executive level dispute resolution pursuant to Section 12.6, the executive sponsors designated by each party will convene at a meeting at JPMC’s offices, or other location designated by JPMC, within 48 hours of notice by either party.”

F.             Section 19.22, Supplier Diversity is hereby amended to include Service Disabled Veteran Business Enterprises (“DVBE”) within the definition and scope of “Diverse Suppliers”

G.           Section 19, Miscellaneous is hereby further amended to include the following new sections:

(i) “19.23 Relationship Manager

Each party will name one of its employees as the primary liaison with the other party for each Schedule (each, a “Relationship Manager”).  The Relationship Managers will serve as the parties’ points of contact.”

(ii) “19.24 Executive Order 13496 Compliance

The Supplier agrees to comply with all regulations issued pursuant to Executive Order 13496, if applicable, including 29 CFR Part 471, Appendix A to Subpart A of Part 471.”

(iii) “19.25 Immediate Injunctive Relief

Supplier acknowledges that JPMC will be irreparably harmed and Section 19.14 will not apply if Supplier breaches (or attempts or threatens to breach):  (a) its obligation to provide critical services to JPMC or Recipients (such as the termination assistance services as provided in Section 16.7), (b) its obligation respecting continued performance in accordance with Section 16.4, or (c) its obligations with respect to JPMC’s Confidential Information or JPMC Data.  If a court of competent jurisdiction finds that Supplier has breached (or attempted or threatened to breach) any of those obligations, Supplier agrees that, without any additional findings of irreparable injury or other conditions to injunctive relief, it will not oppose the entry of an appropriate order compelling performance by Supplier and restraining it from any further breaches (or attempted or threatened breaches).”

16

(iv) “19.26 Waiver of Jury Trial

BOTH PARTIES AGREE TO WAIVE ANY RIGHT TO HAVE A JURY PARTICIPATE IN THE RESOLUTION OF THE DISPUTE OR CLAIM, WHETHER SOUNDING IN CONTRACT, TORT OR OTHERWISE, BETWEEN ANY OF THE PARTIES OR ANY OF THEIR RESPECTIVE AFFILIATES ARISING OUT OF, CONNECTED WITH, RELATED TO OR INCIDENTAL TO THIS AGREEMENT.”

(iv) “19.27 Interpretation

Each party acknowledges that this Agreement has been the subject of active and complete negotiations, and that this Agreement should not be construed in favor of or against any party by reason of the extent to which any party or its professional advisors participated in the preparation of this Agreement.”

(v) “19.29 Disablement of Software and Hardware

Except if and to the extent expressly necessary for performance of maintenance or any other servicing or support expressly authorized in writing by JPMC, in no event will Supplier, its agents or employees or anyone acting on its behalf, intentionally disable or interfere, in whole or in part, with JPMC or Recipient’s use of any Deliverables or any software, hardware, systems or data owned, utilized or held by JPMorgan Chase & Co., Recipients or customers without the written permission of a corporate officer of JPMC, whether or not the disablement is in connection with any dispute between the parties or otherwise.  Supplier understands that a breach of this provision could cause substantial harm to JPMC and to numerous third parties having business relationships with JPMorgan Chase & Co.  No limitation of liability, whether contractual or statutory, will apply to a breach of this Section.”

(vi) “19.30 Nature of Licenses

All rights and licenses granted by Supplier pursuant to this Agreement by Supplier are, and will otherwise be deemed to be, for purposes of Section 365(n) of the United States Bankruptcy Code (or any replacement Law) (the “Code”), licenses to rights to “intellectual property” as defined in the Code.  The parties agree that each licensee, as licensee of those rights under this Agreement, will retain and may fully exercise all of its rights and elections under the Code.  The parties further agree that, if bankruptcy proceedings are brought by or against Supplier under the Code, each licensee will be entitled to retain all of its rights under this Agreement.”

(vii) “19.31 JPMC Delays

If a failure of JPMC to perform any of its obligations within the timeframes set forth in this Agreement or any Schedule prevents Supplier from timely performing its obligations, then the relevant dates of Supplier’s performance will be extended by an amount equal to the delay caused by JPMC.  The provisions of this Section will apply only if Supplier:  (a) notifies JPMC promptly (not more than seven days) after the occurrence of an event that constitutes a delay by JPMC under this Section, and (b) uses commercially reasonable efforts to perform notwithstanding JPMC’s failure to perform.  JPMC’s failure to perform any of its stated operational responsibilities or provide any JPMC resources expressly required pursuant to a Schedule will neither constitute a breach nor give rise to any right to terminate this Agreement or any Schedule.”

(viii) “19.32 Model Analysis

To the extent a Deliverable is used by or for JPMC to value positions, measure exposure or evaluate risk (collectively, the “Models”), including to facilitate JPMC’s compliance with regulatory and management requirements to fully understand and explain the Models used for its businesses, promptly after request from JPMC and at no additional charge, Supplier will (a) deliver to JPMC documentation sufficient to enable a detailed understanding of the methodology, analysis and calculations that are referenced, included or implemented in the development or use of the Models (collectively, “Model Analysis”) so as to enable JPMC to review and explain the Models; and (b) make qualified Supplier Personnel available to JPMC and its designees (including regulators and other Auditors) to provide “plain English” explanations of any such Models or Model Analysis.  Any such documentation and explanation is subject to Section 11.”

(ix) “19.33 Time is of the Essence

Supplier acknowledges that time is of the essence with respect to the performance of Supplier’s obligations to JPMC.”

(x) “19.34 English Language

The official language of the Agreement, its Exhibits and Schedules will be the English language.”

17

14.       The following additional provisions are included by way of this Amendment:

A.            “20 Data Handler Terms

20.1 Grant of License to Use JPMC Data; Obligation to Notify JPMC

JPMC hereby grants Supplier a limited license to use the JPMC Data solely to perform Supplier’s obligations to JPMC during the Schedule Term.  Supplier will not use JPMC Data to contact any person except if required by any applicable Law and in accordance with this Agreement, provided, however, that in no event will any such contact involve marketing or solicitation of products or services. JPMC reserves all other rights in the JPMC Data.  Supplier will immediately notify JPMC of any actual or reasonably suspected unauthorized access to or use of the JPMC Data under Supplier’s control and Supplier will include with that notice the reasonably expected impact that the breach or access may have on any JPMC Entity or its customers.  Supplier will cooperate fully with JPMorgan Chase & Co. to investigate any such unauthorized access.

20.2 Protection of JPMC Data in the Event of Data Handler Bankruptcy

If Supplier undergoes any of the events described in Section 16.4, JPMC will have the immediate right to take possession of and retain for safekeeping all JPMC Data then in Supplier’s possession or under Supplier’s control.  JPMC may retain the JPMC Data until the trustee or receiver in bankruptcy or other appropriate court officer provides JPMC with adequate assurances and evidence that the JPMC Data will be protected from sale, release, inspection, publication or inclusion in any publicly accessible record, document, material or filing.  Supplier and JPMC agree that this Section is a material term of this Agreement, and without it, JPMC would not have entered into this Agreement or permitted any access to or use of JPMC Data.

20.3 Regeneration of JPMC Data by Data Handler

Supplier will promptly replace or regenerate from Supplier’s machine-readable media any data, programs or information stored by Supplier that Supplier has lost or damaged or obtain a new copy of the lost or damaged data, programs or information.  Alternatively, if Supplier breaches this Section 20.3 and is unable to replace or regenerate such data, programs or information JPMC may replace or regenerate any data, programs or information that Supplier has lost or damaged or obtain a new copy of the lost or damaged data, programs or information, in which case, Supplier will promptly reimburse JPMC for all reasonable costs associated with its regeneration or replacement efforts.

20.4 Storage, Return or Destruction of JPMC Data

Supplier will accurately and completely collect and maintain information regarding the storage location, media, and method of storage of all JPMC Data on an ongoing basis.  Unless expressly set forth in the applicable Schedule, if Supplier stores JPMC Data (including any and all copies, whether in production, backup or archival) it will do so on media logically and physically separate from other media used to store data of other Supplier clients.  Further, in addition to the return and/or destruction obligations under Section 11.5, with respect to JPMC Data, prior to termination of the applicable Schedule, or on a date otherwise reasonably specified by JPMC, Supplier will:  (a) meet with JPMC representatives to prepare and implement a plan for the return of all JPMC Data (in a format reasonably requested by JPMC); and (b) return to JPMC all JPMC Data as requested by JPMC.  To the extent applicable record retention Laws require Supplier to have access to JPMC Data after termination or expiration of the applicable Schedule or JPMC’s request for return or destruction, unless expressly set forth in an applicable Schedule, Supplier will provide those requirements to JPMC.  Additionally, upon JPMC’s written direction, Supplier will either:  (i) Securely Delete electronic JPMC Data from all media within 10 Business Days of that direction or (ii) to the extent that JPMC Data is in a form or media other than electronic, comply with JPMC’s written instructions to Securely Delete that JPMC Data.  Within 15 Business Days of that direction, Supplier will cause an officer of Supplier to certify to JPMC in writing that Supplier has complied with its obligations under clause (i) and (ii), as the case may be, including in compliance with JPMC’s instructions.  To the extent that JPMC Data cannot be so Securely Deleted due to technical or other reasons reasonably acceptable to JPMC, and to the extent JPMC expressly agrees in writing, Supplier will promptly provide a written description of measures to be taken that will ensure, for as long as any JPMC Data remains under Supplier’s or its subcontractors’ control, the continued protection of such JPMC Data, in compliance with the requirements of Section 20 and Section 11.  “Securely Delete” means using any and all means (including shredding or incineration in compliance with the National Institute for Standards and Technology (“NIST”) 800-88 standard) of deleting all data and information to ensure that the data and information deletion is permanent and cannot be retrieved, in whole or in part, by any data or information retrieval tools or similar means in accordance with JPMC’s prior written instructions. In no event will Supplier remove or have removed any JPMC Data from Supplier’s or any subcontractor’s site without JPMC’s prior written authorization.

18

20.5 Survival of Data Handler Terms

The terms set forth in Section 20 will survive any expiration or termination of this Agreement or any Schedule for any reason.

20.6 Allocation of Risk

The limitations of liability and disclaimers in this Agreement will not apply to any breach of Section 20.”

B.            “21 Testing, Correction and Acceptance

Each Deliverable will be subject to acceptance by JPMC as follows:

21.1 Acceptance Testing

After a Deliverable has been delivered, installed and configured and is ready for production in Recipient’s environment in accordance with Section 22.1(c), JPMC will have 45 days (or another time period as may be agreed in writing by the parties in the applicable Schedule) (the “Acceptance Testing Period”) to verify that the Deliverable is in Compliance.  Supplier will provide all reasonable assistance to JPMC or Recipient in connection with this testing.

21.2 Correction

If, during the Acceptance Testing Period, JPMC or a Recipient finds that a Deliverable is not in Compliance, JPMC will describe to Supplier in reasonable detail why the Deliverable is not in Compliance.  Within five Business Days (or another time period as may be agreed in writing by the parties in the applicable Schedule) after receipt of that description (the “Correction Period”), Supplier will, at no additional cost to JPMC, render the Deliverable in Compliance.  If Supplier fails to render the Deliverable in Compliance within the Correction Period, JPMC may (a) extend the Correction Period; or (b) terminate the applicable Schedule, in whole or in part, for material breach immediately by notice.

21.3 Acceptance

(a)         Notice of Acceptance

If JPMC determines that a Deliverable is in Compliance, JPMC will notify Supplier that the Deliverable has been accepted (“Acceptance” or “Accepted”).  Acceptance will be implied:  (i) if Supplier gives JPMC notice after the Acceptance Testing Period requesting JPMC provide a formal notice of Acceptance and JPMC fails to respond within five Business Days; or (ii) if JPMC puts the Deliverable into full production for 15 Business Days.  Acceptance will not be implied from any other event.  Thus, for example, Acceptance will not be implied if JPMC uses the Deliverable in limited production, authorizes work on subsequent Deliverables, or makes a milestone payment.

(b)         Component Deliverables

For fixed fee Schedules, if a Deliverable (a “Component Deliverable”) associated with a particular Milestone is to be integrated with another Deliverable (which may be an enhancement) associated with that same Milestone (an “Integrated Deliverable”), JPMC’s Acceptance of the Component Deliverable will be not final until Supplier successfully integrates the Component Deliverable with the Integrated Deliverable and JPMC Accepts those Integrated Deliverables.  Such right shall only extend to Deliverables which have not been previously accepted pursuant to a previous Milestone and acceptance may not be revoked for previously accepted Deliverables

(c)          No Waiver

Acceptance does not waive any of JPMC’s rights to warranty and maintenance service for the Deliverable, even if JPMC knows of the problems prior to Acceptance.

21.4 Quiet Enjoyment

Upon Acceptance, Supplier will not disturb JPMC’s or Recipient’s quiet enjoyment of the Deliverables.”

C.            “22 Delivery, Installation and Training

22.1 Pre-Delivery Testing

(a) General

Before Supplier delivers any Deliverable to a JPMC Entity or a Recipient, or provides access to any Deliverable to the extent they will be delivered remotely, Supplier will verify that the Deliverable is in full compliance with all applicable specifications, including functional, performance and operational specifications described in the applicable Schedule (“Documentation”) or other written technical specifications provided to, or agreed with,

19

JPMorgan Chase & Co. about the Deliverable which are referred to and incorporated in to a Schedule (“Compliance”).  Upon JPMC’s request, Supplier will permit JPMC or any Recipient (or its designees) to observe that verification and obtain a report of all results.

(b)         Software Deliverables.

To the extent that Supplier is providing software, including software development services as set forth in a Schedule for JPMC, Supplier shall demonstrate the maturity of controls in its development process by providing JPMC with applicable documentation and/or artifacts that the following software development controls are in place for the scope of the Deliverables being provided to JPMC hereunder which may include, to the extent agreed in the Schedule, the following:  (i) security requirements in the requirements phase of the software development life cycle; (ii) application architectural framework(s) designed for resiliency; (iii) static code analysis during development; (iv) dynamic scanning in the quality assurance or build process; (v) manual penetration testing, and (vi) security vulnerability management.  If Supplier is unable to provide any of the documentation or artifacts described above, then before Supplier delivers any Deliverable to a JPMC Entity or a Recipient, the following shall be required:  (x) a dynamic scan of Supplier’s developed code in a JPMC quality assurance environment, or (y) a third party provided scan of the binaries in a run time environment (the cost of such scan to be at Supplier’s sole cost and expense).

(c)          Delivery.

Supplier will deliver or provide access to each Deliverable and Documentation to be provided under any Schedule to JPMC or the applicable Recipient(s) in the quantities, on the date(s) and/or to the place(s) specified in that Schedule, subject to JPMC obligations set forth in the Schedule, and, if so provided in the applicable Schedule install each Deliverable at JPMC or Recipient, in the quantities, at the locations and on or before the dates specified in the applicable Schedule.  If Supplier fails to do so, JPMC may, at its option:  (a) extend the required date and receive from Supplier, as liquidated damages and not as a penalty, the late delivery discount set forth in the applicable Schedule, or (b) terminate the applicable Schedule(s), in whole or in part

22.2 Postponement

JPMC may at any time, upon thirty (30) days prior written notice to Supplier, postpone Supplier’s scheduled provision of any Deliverable(s).  This notice will specify the commencement and estimated duration of the postponement, on mutually agreed terms.  Upon receiving the notice of postponement and expiration of the 30 day notice period, Supplier will implement the postponement and, during the period of postponement, properly care for and protect all Deliverables in progress.  JPMC may withdraw any postponement by notice to Supplier, in which case Supplier will resume its provision of the Deliverables after a reasonable resumption period, on mutually agreed terms.

22.3 Training

Training (if any) to be provided by Supplier with respect to the Deliverables will be specified in the applicable Schedule.”

15.       Exhibit C - Pre-JPMC Assignment Statement, Exhibit E - Statement of JPMC Domestic Fingerprinting Policy for Contingent Worker Providers/Servicing Agencies and Exhibit F - Statement of JPMC Domestic Drug Testing Policy for Contingent Worker Providers/Servicing Agencies and Appendix 1 to Master Agreement Exhibit F are hereby deleted by way of this Amendment.

II.           Except as expressly amended herein, the Agreement remains in full force and effect.

End of Document

20

INSURANCE EXHIBIT

Supplier, within five Business Days after the execution of this Agreement or before commencing the provision of Deliverables or permitting any subcontractor to commence the provision of Deliverables, whichever is the earlier, will procure, maintain and evidence, at its own expense, the following required insurance of the following kinds and limits, with companies carrying a financial strength rating of not less than “A-” and in a financial size category of Class VIII or better, each as rated in the most current Best’s Insurance Reports, and permitted to insure risks in each jurisdiction where a claim or claims might arise or who are otherwise acceptable to JPMC.  Supplier may carry, at its own expense, such additional insurance as it may deem necessary.  Supplier will not be deemed to be relieved of any responsibility by the fact that it carries insurance.

A.            REQUIRED INSURANCE.

(i) Workers’ Compensation and Employer’s Liability Insurance in accordance with the applicable laws of (a) the State of New York or (b) the state in which the Deliverables are to be provided or performed or (c) the state in which Supplier is obligated to pay compensation to employees engaged in the performance or provision of the Deliverables.  The policy limit under the Employer’s Liability Insurance section will not be less than $1,000,000 for any one accident and will include a waiver of subrogation against JPMorgan Chase & Co. and its subsidiaries, agents, officers, directors and employees.  If the Supplier is a sole proprietor and qualifies for exemption, Supplier will provide to JPMC evidence of exemption in the form of a certificate of exemption, affidavit of exemption or its equivalent received from the State’s Workers Compensation Division.  The required limit of liability may be satisfied through a combination of primary Employer’s Liability and Umbrella Liability insurance.

(ii) Commercial General Liability Insurance written on ISO occurrence form CG 00 01 (or a substitute form providing equivalent coverage) covering claims related to or arising from the Deliverables, the performance and provision of the Deliverables and everything incidental thereto, with limits of not less than $2,000,000 per occurrence,  or in whatever higher amounts as may be requested by JPMC from time to time and mutually agreed, in writing, by the parties, and extended to cover:  (a) Contractual Liability, with defense provided in addition to policy limits for indemnitees of the named insured; (b) if any of the Deliverables are subcontracted, Independent Contractors Liability providing coverage in connection with such portion of the Deliverables which may be subcontracted; (c) Broad Form Property Damage Liability; (d) Products & Completed Operations;  (e) Personal  and Advertising Injury Liability and (f) Hired and Non-Ownership Automobile Liability, if not covered under Automobile Liability Insurance.  The policy will include: (x) a waiver of subrogation against all parties named as additional insureds, (y) a severability of interest provision and (z) “JPMorgan Chase & Co. and any and all subsidiaries, directors, officers, employees, and agents as their interest may appear” as additional insureds.  If such Commercial General Liability insurance contains a general aggregate limit, it will apply separately to the location or project that is the subject of the applicable Schedule.  The Commercial General Liability Insurance required under this paragraph will be raised to not less than $5,000,000 per occurrence combined single limit if Supplier’s provision of the Deliverables, in the ordinary course, involves hazardous trades (e.g., mechanical, electrical, plumbing or construction services or trades requiring the use of heavy machinery).  The required limit of liability may be satisfied through a combination of primary Commercial General Liability and Umbrella Liability insurance.

(iii) If automobiles or other vehicles are used in connection with the performance or provision of the Deliverables, Automobile Liability Insurance written on ISO occurrence form CA 00 01 (or a substitute form providing equivalent coverage) for any auto, including owned, hired, and non-owned automobiles and other vehicles, with bodily injury and property damage limits of not less than $2,000,000 each accident limit.  The policy will include “JPMorgan Chase & Co. and any and all subsidiaries, directors, officers, employees, and agents as their interests may appear” as additional insureds and a waiver of subrogation against all parties named as additional insureds.  The Automobile Liability Insurance required under this paragraph will be raised to not less than $5,000,000 each accident limit if Supplier’s provision of the Deliverables, in the ordinary course, involves hazardous trades (e.g., mechanical, electrical, plumbing or construction services or trades requiring the use of heavy machinery).  The required limit of liability may be satisfied through a combination of primary Automobile Liability and Umbrella Liability insurance.

(iv) If Supplier transports the property of JPMC or JPMC’s customers, All Risk Motor Truck Cargo Insurance or All Risk Transit and Premises Insurance with limits of not less than the replacement cost value, including reconstruction

21

coverage in an amount of not less than $250,000, with no per item limit, covering property of JPMC or JPMC’s customers while on the premises of, in transit with or otherwise in the possession of Supplier Personnel.  This policy will:  (a) have no coverage limitations, exclusions or warranties other than standard exclusions for war, nuclear accident and breakage and (b) name JPMC as loss payee.

(v) If Supplier will be performing or providing Deliverables on JPMC premises, have access to JPMC tangible property or have control of or access to JPMC systems, accounts, money, or securities, Commercial Blanket Bond or an equivalent insurance policy covering all Supplier Personnel while engaged in connection with the Deliverables with a limit of not less than $10,000,000 per loss and including coverage for property of others in possession of Supplier Personnel while performing or providing the Deliverables.  This policy will (a) have no coverage limitations, exclusions or warranties other than standard exclusion for war, nuclear accident and breakage; and (b) name JPMC as loss payee.

(vi) To the extent Supplier holds, stores, stages, works upon or in any manner possesses personal property that is owned, held, or leased by, or the responsibility of JPMC or any of its customers, All Risk property damage insurance or Special Causes of Loss Form property insurance including coverage for loss caused by fire, flood, sprinkler leakage, windstorm, or earthquake in an amount equal to the replacement cost of such property.  Flood insurance will be required only to the extent that the property is within an area designated as having special flood hazards pursuant to the National Flood Insurance Act of 1968 or the Flood Disaster Protection Act of 1973 (42 U.S.C. 4001-4128) or any amendments or supplements thereto or substitutions therefore (collectively, the “National Flood Insurance Program”).  The insurance carried in accordance with this subsection (vi) will contain an endorsement that provides that JPMC will be named as a loss payee relative to any loss or damage to the property described in this subsection (vi), and JPMC’s interest in any claim under Supplier’s insurance will be primary to and non-contributing with any interest of Supplier or any other party included under Supplier’s insurance.

(vii) To the extent that Supplier provides software, hardware, software or system development, consulting services, or Internet/Application Service Provider services (e.g., outsourced functions such as web-hosting), Technology Errors & Omissions (or technology professional liability coverage) insurance, including coverage for loss or disclosure of electronic data, media and content rights infringement and liability, network security failure and software copyright infringement liability and bodily injury and property damage due to the failure of Supplier’s products or services with limits of not less than $10,000,000 per occurrence.  If the policy is written on a claims-made basis, the coverage must remain in force for a period of at least two years following the provision or performance of the Deliverables.

(viii) To the extent that Supplier provides content, Media Errors & Omissions (or Media Liability) insurance, including coverage for loss or disclosure of electronic data, media and content rights infringement and liability, with limits of not less than $10,000,000 per occurrence.  If the policy is written on a claims-made basis, the coverage must remain in force for a period of at least two years following the provision or performance of the Deliverables.

(ix) If Supplier has access to Confidential Information, Privacy and Network Security (sometimes otherwise known as Cyber Liability) coverage which includes providing protection against liability for (a) system attacks, (b) denial or loss of service attacks, (c) spread of malicious software code, (d) unauthorized access and use of computer systems, (e) crisis management and customer notification expenses, (f) privacy regulatory defense and penalties and (g) liability arising from the loss or disclosure of confidential data with coverage limits of not less than $5,000,000 per occurrence. Such policy will include “JPMorgan Chase & Co. and any and all subsidiaries, directors, officers, employees, and agents as their interests may appear” as an additional insured.

(x) Professional Liability/Errors and Omissions Liability Insurance in the amount of not less than $10,000,000 per claim covering loss arising from claims alleging wrongful acts, errors or omissions committed by Supplier, its employees, or agents in the provision of or failure to render professional services.  If the policy is written on a claims-made basis, the coverage must remain in force for a period of at least two years following the provision or performance of the Deliverables.

Additional insured status for JPMorgan Chase & Co. and any of its subsidiaries, directors, officers, agents, employees or any other party required to be named as additional insureds under this Agreement will extend to the full limits of liability maintained by the Supplier even if those limits of liability are in excess of those required by this Agreement.

22

Supplier’s insurance will be primary and all insurance carried by JPMorgan Chase & Co. is strictly excess and secondary and will not contribute with Supplier’s insurance.

Any self-insurance retentions or deductibles maintained by Supplier must be approved in writing by JPMC.

The requirements of this Agreement as to insurance limits, acceptability of insurers, and insurance to be maintained by Supplier are not intended to and will not in any manner limit or qualify the liabilities and obligations assumed by Supplier under this Agreement.

B.            CERTIFICATES OF INSURANCE; GENERAL.

Supplier will have its insurance broker provide Certificates of Insurance to Supplier certifying that all insurance required is in force.  Supplier will maintain the certificates and, upon JPMC’s request, make them available for review.  Certificates of Insurance will include a copy of the insurance policy endorsements or policy form provisions providing the following: (i) JPMC is included as an additional insured where required, (ii) subrogation is waived where required; (iii) Supplier’s insurance is primary, and all insurance maintained by JPMorgan Chase & Co. is excess and secondary and shall not contribute with Supplier’s insurance; and (iv) all insurance will not be canceled or substantially changed without 30 days’ prior notice by certified mail to JPMC at the above address.

In the event of any renewal, termination, cancellation, or expiration in any policy of insurance required under this Agreement, Supplier will have its insurance broker provide a Certificate of Insurance to Supplier, which Supplier will maintain and make available at JPMC’s request for review.

Certificates must disclose all applicable policy deductibles and self-insured retentions (“SIR”).  Supplier agrees to be liable for all costs within the deductibles and SIR.  Any self-insured retentions or deductibles maintained by Supplier must be approved in writing by JPMC.

With respect to additional insured endorsements, coverage will be no less broad than one or the other of the following alternatives:  (a) the coverage afforded to the named insured under the policy with respect to the Deliverables to be provided or performed under this Agreement; or (b) the coverage afforded by Insurance Services Office Endorsement entitled (“Additional Insured — Designated Person or Organization”).

Supplier will, on request, permit JPMC to examine original insurance policies and certificates.

Where allowed or required by law to allow indemnification for “action-over” claims, Supplier specifically and expressly waives any immunity that may be granted it under the applicable State workers compensation/Industrial Insurance Act.  Further, the indemnification obligation under this Agreement will not be limited in any way by any amount or type of damages, compensation or benefits payable to or for any third party under workers compensation acts, disability benefit acts, or other employee benefits acts; provided Supplier’s waiver of immunity by the provisions of this paragraph extends only to “action-over” claims against Supplier by JPMC, and does not include, or extend to, any claims by Supplier’s employees directly against Supplier.

In the event that Deliverables are performed or provided by persons other than Supplier who are not parties to any Agreement with JPMC, Supplier will arrange to have such subcontractors furnish to Supplier evidence of insurance, subject to terms and conditions determined adequate to satisfy Supplier, at least two weeks prior to commencing with the performance or provision of such Deliverables.  It is understood and agreed that Supplier’s determination of the adequacy of the insurance carried by subcontractors in no way relieves Supplier from liability assumed by Supplier or insurance required of Supplier.

END OF DOCUMENT

23