All CyberTwice Services are offered and can be subscribed to by You via the Microsoft Marketplace (both Microsoft Azure Marketplace and the Microsoft AppSource). Any subscription is subject to the general terms and conditions specified on the marketplaces, further detailed by the CyberTwice contractual framework, specifically the CyberTwice Subscription Agreement. As stated therein, every solution can have specific terms relevant to the nature of the service, i.e. the Subscription Details. These CyberTwice ATTEST Subscription Details provide subscription details for the CyberTwice ATTEST Service, which captures and centrally stores all surveillance and communication streams within the Microsoft Teams environment for attestation purposes.
2.1 The CyberTwice ATTEST Service is offered via the Microsoft Marketplace, where four Pricing Plans are available, namely:
2.2 The price for each Plan is given on the CyberTwice ATTEST Pricing page. Each Plan is based on a combination of two elements, namely:
2.3 Pricing Components
The CyberTwice Attest Services pricing is based on the following Pricing Components:
2.4 Pricing metrics
The Pricing Components given in §2.3 are, or have underlying, metrics resulting in the actual pricing. We determine the various pricing metrics as follows:
2.5 Price Metrics Billing & Insights
The Microsoft Marketplace handles the billing and charging of the CyberTwice Attest Service. We provide the usage details, components, and underlying metrics to the Microsoft Marketplace. The ATTEST Management Portal makes usage available to the Customer for reference purposes.
2.6 Plan - Offer Specific Pricing Components
2.6.1 Currently, four (4) Pricing Plans (or Offers) are available in the Microsoft Marketplace as stipulated in §2.1. The basis for these plans is to provide for an increase in usage and accommodate different approaches in terms of the underlying metrics, i.e., either "User" or "Usage" based.
2.6.2 It is noted that each plan has certain Pricing Components, which have a zero (0) pool size and thus are inherently Overage and charged "as-you-go", e.g., "Speech-to-Text".
2.6.3 You can vary between the Pricing Plans to obtain the most economical Pricing Plan. When switching between Pricing Plans, the new plan will become effective from the moment of the switch, so when We push the information to the MS Marketplace, the new plan will be applied, including the in-/decrement of the fixed monthly fee.
When your account has been Suspended, the recording and processing of the resulting data function will remain active. However, the ATTEST Replay application in Microsofr-Teams will be blocked, so access to all your data is blocked, i.e., Customer can, amongst others, no longer play the calls. The ATTEST Management Portal remains available, but a clear banner indicates that the Subscription is Suspended. At the same time, a notification email will be sent to the Registered User, the user from whom the email account is used to subscribe to the CyberTwice ATTEST Service or any other email address entered for this purpose in the Attest Management Portal.
3.3 Cancellation (or Unsubscribe)
When a Customer Unsubscribes or Cancels a Subscription the recording and all processing of corresponding data will stop on the end date of the Subscription and access to the ATTEST Replay application will be blocked for all users. The ATTEST Management Portal remains available displaying a clear banner indicating that the Subscription is Unsubscribed or Cancelled. Three (3) working days after the end date of the Subscription Term all data will be removed from the CyberTwice ATTEST Service, irrespective of the Retention Period set. The Registered User will be informed of the exact end date by email in a timely manner, typically ten (10) calendar days before and on the end date of the Subscription
Note: If Customer wants to retain any data upon cancellation, Customer must download all relevant data for the CyberTwice ATTEST Service before the end date using the ATTEST Replay application. As per §3.1, We cannot be held responsible or liable for any loss of data caused by Customers' neglect in this matter.
3.4 Cancellation upon Suspension
In case the Subscription is Suspended as per §3.3 the only option for the Customer to access, and if desired retrieve, it's data is by paying the outstanding fees before the Subscription is automatically cancelled and the data is deleted as described in §3.3. Customer will be notified by email to the Registered User in a timely manner as per §3.3.
3.5 Cancellation Notice
Irrespective of the reason for Cancellation of the CyberTwice ATTEST Subscription it remains the sole responsibility of the Customer to ensure a proper abandonment of our CyberTwice Service, taking due notice of the stated in §3.3 Cancelation and §4.1(.3) Compliance Recording. At the same time, the sole obligation of Us is to inform the Registered User as stated in these Articles.
Retention is the total period that Interactions, including any associated data, like the Transcription, meta-data, remain stored in the Cybertwice ATTEST Service. The Retention Period can be set in the ATTEST Management Portal for all Recorded Groups. When the Retention Period for an Interaction ends all Interaction Data will be automatically deleted from the CyberTwice ATTEST Service.
4.1 Compliance Recording
4.1.1 A selectable feature of the CyberTwice ATTEST Service is Compliance recording. Compliance recording is an inherent feature within Microsoft Teams, mainly intended for financial services organizations to ensure that every Interaction is recorded for attestation. A consequence of setting this feature is that, if for whatever reason a call from the Microsoft Teams environment is not accepted, or better said not recorded, by the CyberTwice ATTEST Service the Microsoft Teams call will not be established. In essence, the Microsoft Teams user will be prohibited by Microsoft Teams from interacting, i.e. prohibited from making phone calls, teams calls and teams meetings.
4.1.2 As this feature is inherent to Microsoft Teams, We are bound by the workings of Microsoft Teams. The Compliance recording functionality can only be set by the running of a specific script by a properly authorized Administrator of a Microsoft tenant. This can only be done manually and not automatically by the CyberTwice ATTEST Service. The required script, including the instructions for running it, can be found in the ATTEST Management Portal. The en/-disabling of Compliance Recording can be set and controlled in the ATTEST Management Portal, but this will require, as indicated, manually (re-)running the appropriate script.
4.1.3 In case of cancellation of the CyberTwice ATTEST Subscription, the Customer itself needs to ensure that the recording function and especially the Compliance Recording feature is disabled before the end of the Subscription Term. We will inform the Registered User via email of this requirement in a timely manner, but cannot be held responsible or liable in any way if the Customer fails to take the appropriate actions causing Recorded Users to be prohibited to work with Microsoft Teams as per §4.1.2.
4.3 Encryption & Authenticity
4.3.1 Data Encryption
The CyberTwice ATTEST Service ensures that all Interactions with the CyberTwice ATTEST Service are fully encrypted using an AES-GCM encryption with a 256-bit length Key, a 96-bit Nonce (IV) and a 128-bit authentication tag. For each blob, a new random 256-bit key is generated. This key is only used once per blob.
The unique key is encrypted/wrapped with a 2048-bit RSA stored in an Azure-hosted (HSM) (Key Vault).
The authenticity of all Interactions stored within the CyberTwice ATTEST Service is ensured by signing of all the data. The signature is created by hashing (SHA256) a selected set of metadata/properties of the blob that includes the encryption metadata, tenant ID, the encrypted size and the original size. In order to verify the actual blob is authentic at least one block of data needs to be decrypted (this verifies the encryption key is correct). The hashed data is signed with an RSA-2048 key using RS256 (RSA signature with SHA-256)
4.4 Transcription (speech-to-text)
The CyberTwice ATTEST Service has an option to automatically convert captured speech/audio (also within a video interaction) to text using Microsoft Azure Cognitive Services. This service can be en-/disabled in the CyberTwice ATTEST Management Portal. We herewith note that unless explicitly included in the Pricing Plan the enabling of this service incurs Overage (=cost) to the Customer on a per-minute basis as per §2.4 and §2.6.3.