Consumer Onboarding and Identification Services

View all our T&Cs and policies.

Effective date: -
Last updated: -

Unless otherwise defined below, terms used in this Managed Service Appendix shall have the meaning given to them in the Terms and Conditions.

1. Definitions

“Change” means the addition, modification or removal of anything that could have a material impact on the Supported Service;
“Client Environment” means any assets the Client is directly responsible for managing, including any sub-contractors of the Client or third party service providers to the Client, excluding Experian, required for the usage of (including resilience (system/data back-ups)) or connectivity to the Supported Service;
“Client Reported Incident” means the notification by the Client to the Service Desk of an Incident;
“Configuration Management” means the process for ensuring that the assets required for hosting (including resilience (system/data back-ups)) or connecting to the Supported Service are properly controlled, and that accurate and reliable information about those assets is available when and where it is needed. This information includes details of how the assets have been configured and the relationships between assets;
“Core Hours” means Monday to Friday, 08:30 – 18:00, excluding bank holidays in England and Wales;
“Disaster” means any abnormal, unstable, complex, high impact condition or situation that represents a threat to Experian’s personnel or operations or presents reputational, legal, regulatory, compliance or significant financial risk, or the disaster recovery plan has been invoked by Experian;
“Emergency Maintenance” means a change that must be introduced as soon as reasonably practicable to mitigate against either; an identified regulatory or security risk, or a Priority 1 Incident occurrence;
“Emergency Maintenance Window” means the period during which the Supported Service is unavailable due to Emergency Maintenance but, for the avoidance of doubt, not as part of an Incident;
“Fulfilment Time” means the time taken to fulfil a Service Request measured from the acknowledgement of the Service Request, by email, or as otherwise agreed in writing, to the fulfilment of that Service Request;
"Incident" means an unplanned interruption to, or reduction in the quality of the Supported Service;
“Known Error” means a Problem that has a documented root cause and a Workaround;
“Known Error Record” means a record containing the details of a Known Error which documents the lifecycle of that Known Error, including the status, root cause and Workaround;
“Live Date” means the date on which the Supported Service is made available to the Client in a live environment other than for testing purposes;
“Normal Service Operation” means the operational state where the Supported Service is operating
in accordance with the Specification;
“Planned Maintenance Windows” means those periods of time during which access to the
Supported Service may be unavailable due to the performance by Experian of housekeeping and/or
maintenance related activities and/or Change to the Supported Service, (as defined in Table 1-
Planned Maintenance Windows);
“Priority 1 Incident” means an Incident where functionality of the Supported Service is either:
unusable; is or has the potential to be no longer available, resulting in significant disruption or
impact; or poses a potential security, regulatory or compliance breach;
“Problem” means the cause of one or more Incidents for which the cause is not usually known at the
time a Problem Record is created;
“Problem Record” means a record containing the details of a single Problem which documents the
lifecycle of that Problem;
“Record On Hold” means activity in relation to a record is paused whilst Experian is awaiting
information from the Client, preventing the continuation of work, or where remote access to the
Client Environment has been reasonably requested by Experian;
“Request for Change” means a formal request for a Change from the Client to be made, via email, or
as otherwise agreed in writing. It shall include details of the Request for Change, and must be
recorded electronically.
“Restoration Time” means the duration of time from the acknowledgement of a Client Reported
Incident, or the detection of the Incident by Experian, until the resumption of Normal Service
Operation, or the application of a Workaround, such time only being measured during Core Hours;
“Resolution” means the action taken to repair the root cause of an Incident or Problem;
“Service Catalogue” means a database or document listing Service Requests available from Experian
in relation to the Supported Service, updated from time to time;
“Service Level” means the relevant target times stated in the tables contained herein;
"Service Request" means a Client request, by way of email, or as otherwise agreed in writing, to the
Service Desk for a service from the Service Catalogue to be provided by Experian e.g. a password
reset request;
“Specification” means the functional specification of the Supported Service as defined within the
Schedule or Agreement;
“Support Services” means the following Services as defined herein:

  • Service Desk (as defined in section 4.1.1 (Service Desk));
  • Incident Management (as defined in section 5.1 (Incident Management));
  • Problem Management (as defined in section 6.1 (Problem Management));
  • Service Request Management (as defined in section 7.1 (Service Request Management);
  • Change Management (as defined in section 8.1 (Operational Change Management));

“Services” means the Services supported by Experian as defined within the Schedule or Quotation;
“Supported Software” means the Software supported by Experian as defined within the Schedule or
Quotation;
“Workaround” means the agreed reduction or elimination of the impact of an Incident, contained in
a Problem Record or in a Known Error Record (where the root cause is known), but for which a
Resolution is not yet available.

2. General

2.1. Experian obligations

Experian shall:

2.1.1.

provide the Support Services on commencement of the Live Date;

2.1.2.

provide the Hosted Services on commencement of the Live Date;

2.1.3.

act reasonably in agreeing the prioritisation of Incidents with the Client;

2.1.4.

act reasonably in agreeing the closure of Incidents and Service Requests with the Client;

2.2. Client obligations

The Client shall:

2.2.1.

comply with the Specification agreed by both parties;

2.2.2.

provide and maintain contact details of the Client personnel to respond to queries and/or Incident investigations during Core Hours;

2.2.3.

provide input into the record prioritisation with Experian;

2.2.4.

provide a remote link to the Client Environment where reasonably requested by Experian;

2.2.5.

provide an agreed form of secure data transfer to enable the transfer of data between Experian and the Client;

2.2.6.

ensure all personnel are suitably skilled, having received appropriate and relevant application or systems administration training prior to using the Supported Service;

2.2.7.

ensure all personnel are aware of any available electronic/hard copy documents, help files and guidelines provided by Experian prior to using the Supported Service;

2.2.8.

ensure all personnel utilise the Supported Service in accordance with the available electronic/hard copy documents, help files and guidelines provided by Experian;

2.2.9.

keep full security copies of the Client's databases and computer records in accordance with best computing practice;

2.2.10.

promptly notify Experian, via email or as otherwise agreed in writing, of any unplanned change to the Client Environment;

2.2.11.

where reasonably practicable, provide at least 30 days’ prior notice, via email or as otherwise agreed in writing, to Experian of any change, planned or otherwise, to the Client Environment;

2.2.12.

where reasonably practicable, provide Experian with at least 30 days’ prior notice, via email or as otherwise agreed in writing, of any change, planned or otherwise, which could result in changes to business volumes;

2.2.13.

be responsible for all operating or interfacing systems in respect of the Client Environment with which the Supported Service is interfacing;

2.2.14.

maintain and make available a change log detailing any changes made in relation to the Supported Service;

2.2.15.

perform Configuration Management in respect of the Client Environment so to enable Experian to promptly diagnose any Incidents.

3. Hosted Services

3.1. Experian obligations

Experian shall perform the following Services (the “Hosted Services”):

3.1.1.

host the Supported Service in accordance with the Specification;

3.1.2.

perform Configuration Management so to enable prompt diagnosis of Incidents;

3.1.3.

make the Supported Service available to the Client in accordance with the Specification, subject always to Experian not being responsible for any failure to make the Supported Service available to the extent that such failure:
a. is due to a Force Majeure event; or
b. is due to a Disaster; or
c. is due to a third party (other than any sub-contractors of Experian or third party service providers to Experian); or
d. is due to default of the Client or any of its sub-contractors; or
e. occurs at the request of, or with the prior consent of, the Client, by way of email, or as otherwise agreed in writing.

3.1.4.

undertake housekeeping and/or maintenance related activities and/or changes to the Supported Service during the Planned Maintenance Windows and in doing so keep any outage during the Planned Maintenance Windows to a minimum;

3.1.5.

provide prior notice, by email or as otherwise agreed in writing, to the Client that any potentially impacting housekeeping and/or maintenance and/or Change related activities are scheduled to take place during a Planned Maintenance Window and the duration of such activities (the “Scheduled Maintenance Period”);

3.1.6.

in the event of the need for any potentially impacting Emergency Maintenance, Experian shall contact the Client, via email or as otherwise agreed in writing, providing as much notice as is reasonably practicable.

Table 1 - Planned Maintenance Windows

Monthly Planned Maintenance Windows

Maintenance Days Maintenance Regularity Maintenance Hours
Sunday Weekly 21:00 - 00:00

Notes: Experian reserves the right to undertake an extended period of maintenance one Sunday per month between 18:30 - 00:00

3.2. Availability Calculation

The availability of the Supported Service shall be calculated each calendar month as below:

A – B / A x 100 = % Availability

Where:
A = Total Core Hours in the relevant calendar month – (total Scheduled Maintenance Period(s) +
total Emergency Maintenance Window(s)) in the relevant calendar month;

B = Cumulative unplanned downtime – (total Scheduled Maintenance Period(s) + total
Emergency Maintenance Window(s)) in the relevant calendar month.

3.3. Availability Target

95% per calendar month (the “Availability Target”).

4. Service Desk

4.1. Experian obligations

4.1.1.

Experian shall provide the Client with a point of contact via telephone and email during Core Hours (the “Service Desk”).

4.1.2.

Experian shall:
a. handle Incident and Service Request communications between the Client and Experian;
b. record all Client raised Incidents and Service Requests;
c. act reasonably in the categorisation of Incidents and Service Requests with the Client as follows;
i. Incidents shall be categorised in line with the definitions within Table 2- Incident Service Levels and based on input from the Client;
ii. Service Requests shall be categorised based on the Service Catalogue;
d. provide a formal response to the Client, by email or as otherwise agreed in writing, on receipt and acceptance of a Service Request or Incident, including a unique reference number;
e. provide initial investigation and attempt diagnosis (in each case, where applicable);
f. in case of Service Requests, fulfil where applicable;
g. escalate Incidents/Service Requests that cannot be resolved by the Service Desk;
h. escalate Incidents/Service Requests in the event of a reasonable request by either party;
i. provide regular updates to the Client as to the status of Incidents and Service Requests;
j. On resumption of Normal Service Operation, or the application of a Workaround, notify the originator of the Incident, by way of email, or as otherwise agreed in writing, and close the Incident after five working days if no further response from the originator;
k. act reasonably in the closure of Service Requests with the Client;
l. provide guidance, should the Client wish to raise a complaint.

5. Incident Management

5.1. Experian obligations

In respect of a Client Reported Incident or Incident otherwise detected by Experian, Experian shall perform Incident management during the Core Hours to either restore Normal Service Operation or apply a Workaround within the relevant Restoration Time stated in the Table 2- Incident Service Levels (“Incident Management”).

5.2. Client obligations

5.2.1. The Client shall:

a. undertake initial review, internal investigation and triage within the Client data, Client Environment or calling application prior to contacting Experian;
b. promptly notify Experian of any faults encountered with the Supported Service;
c. provide initial notification to Experian of all Priority 1 Incidents via telephone;
d. co-operate fully with Experian's personnel in the diagnosis of any error or defect in the Supported Service;
e. where Experian is required to attend any site of the Client’s in respect of Incident Management or Problem Management related activities, bear Experian’s travel and subsistence expenses, and make available at the Client’s cost; information, facilities and services reasonably required to enable Experian to perform the Incident Management or Problem Management services. Such will include but not be limited to; computer runs, core dumps, printouts, data preparation, office accommodation and photocopying, provided Experian shall ensure the Incident Management or Problem Management does not materially interfere with the day to day running of the Client’s normal operation.

5.3. Incident Service Levels

Table 2 - Incident Service Levels

PriorityLevel Priority Definition Restoration Time
P1 Major Operational Incident: Functionality of the Supported Service is either: unusable; is or has the potential to be no longer available, resulting in significant disruption or impact; or poses a potential security, regulatory or compliance breach. 2 hours
P2 Significant Operational Incident:Functionality of the Supported Service is degraded by more than 25% e.g. Response times significantly outside acceptable tolerance. 6 hours
P3 Minor Operational Incident: Functionality of the Supported Service is degraded by less than 25% or requires additional effort from the Client e.g. Response times outside acceptable tolerance. 20 hours
P4 Non-Operational Incident: No daily operational impact to functionality of the Supported Service e.g. a Known Error or aesthetic issue. 40 hours

5.3.1. Calculating Restoration Time

a. Table 2- Incident Service Levels apply to disaster recovery and live production instances only. For the avoidance of doubt, Restoration Time for Incidents occurring in the user acceptance test environment or development environment will be deemed a Non-Operational Incident and therefore be prioritised as a P4 Priority Incident.
b. When calculating Restoration Time, the following periods of time shall be excluded from the calculation:
i. any period of time when a Record On Hold situation exists;
ii. any time during a Scheduled Maintenance Period, or;
iii. any time outside of Core Hours, or;
iv. any time during a Force Majeure event, or;
v. where a Disaster has been invoked by Experian acting reasonably.

5.3.2. Excluded Services

Incident Management shall not include any of the following Excluded Services, except where Experian decides, at its sole discretion, to perform them on a chargeable basis.

The “Excluded Services” are:
a. remedying Incidents which arise as a result of the failure of the Client to perform its obligations herein or failure of the Client to follow Experian’s reasonable instructions, by way of email, or as otherwise agreed in writing;
b. any services performed outside of Core Hours;
c. any services performed at a location other than remotely or the location of the Supported Software defined in the Agreement or Schedule;

5.4. Incident Escalations

Table 3 - Incident Escalations

The parties will escalate issues or concerns in accordance with the following tables:

Experian Hierarchical Escalation levels

Levels Description
Level 1 Service Desk
Level 2 Incident Manager
Level 3 Account Manager
Level 4 Account Director

The Client Hierarchical Escalation levels

Levels Description
Level 1 -
Level 2 -
Level 3 -
Level 4 -

6. Problem Management

6.1. Experian obligations

In respect of Incidents for which a resolution is not known; or which are recurring; or where a Workaround is implemented, Experian will (during Core Hours) use reasonable endeavours to investigate and restore Normal Service Operation by either application of an agreed Workaround or resolving the root cause of the Incident (“Problem Management”).
Where a Problem exists, Experian shall create a Problem Record. Once a Root Cause and a Workaround is identified, Experian will create a Known Error Record and manage the Problem until Resolution.

7. Service Request Management

7.1. Experian obligations

In respect of Service Requests, Experian shall fulfil the Service Request during the Core Hours within the relevant Fulfilment Time stated in the Service Catalogue (“Service Request Management”).

7.2. Client obligations

The Client shall submit Service Requests to Experian, by email, or as otherwise agreed in writing.

8. Operational Change Management

8.1. Experian obligations

Experian shall:

8.1.1.

provide the Client with the function to raise a Request for Change via email, or as otherwise agreed in writing, to the Service Desk, to manage and control Change, minimising disruption to the Supported Service;

8.1.2.

manage Change Requests during Core Hours, including acknowledgement of Change Request receipt, communicated by way of email, or as otherwise agreed in writing, to the Client;

8.1.3.

provide the Client with an Initial Response, dependant on the Change Type, as stated within the Table 4 - Change Service Levels below. This will include any requests for further information and, where possible, inclusion of Change details, such as Implementation targets, resource requirements, etc. (“Initial Response”);

8.1.4.

reserve the right to revoke the classification of a “Standard” change, if deemed at risk. Reversal is subject to satisfactory evidence of sequential successful deployments.

8.2. Client obligations

The Client shall:

8.2.1.

if wishing to change the provision of the Supported Service, submit details of the Change Request, via email, or as otherwise agreed in writing;

8.2.2.

submit Change Requests with sufficient lead time to assure work is subjected to the necessary technical and procedural checks before being authorised;

8.2.3.

provide approval, via email, or as otherwise agreed in writing, and a confirmation of successful/satisfactorily performed during UAT, prior to moving into production;

8.2.4.

arrange further testing post Change implementation: If the Client is not able or willing to organise this activity, they must provide confirmation, via email, or as otherwise agreed in writing, that any risks associated with implementing a Change without post Change testing are understood and accepted.

8.3. Change Service Levels

Table 4 - Change Service Levels
Change Type Change Definitions Initial Response Implementation Time
Standard Change A pre-authorised Change that is always low risk, common and follows a predefined procedure or work instruction; 1 Working Day where defined, as per Service Catalogue
Normal Change Any Change that is not a Standard Change; requiring authorisation, presenting potential risk, anything relatively uncommon or does not follow a predefined procedure or work instruction;
e.g. Enhancements or Optimisations, Client Customisations, Solution/Design Build Changes.
10 Working Days varies; dependant on the complexity of the Change Request

8.3.1. Change Service Level Implementation Target:

a. Implementation Time applies to production instances only and do not apply to test or development environments.
b. On completion of post testing analysis and acceptance, any changes made to production must be replicated into the subsidiary instances by the relevant party.
c. When calculating Implementation Time, the following periods of time shall be excluded from the calculation:
i. any period of time when a Change is being tested in UAT;
ii. any period of time when a Record On Hold situation exists;
iii. any time during Scheduled Maintenance Periods;
iv. any time outside of the contracted Core Hours;
v. where a Disaster has been invoked by Experian.

8.3.2. Excluded Services

Operational Change Management shall not include any of the Excluded Services, except where Experian decides, at its sole discretion, to perform them on a chargeable basis. The “Excluded Services” are:

a. Implementing Change which arises as a result of the failure of the Client to perform its obligations herein or failure of the Client to follow Experian’s reasonable instructions or advice provided via email or as otherwise agreed in writing;
b. any request that constitutes a variation; this may pertain to the Supported Service, Specification or any other Terms of the Agreement or Schedule;
c. where larger project(s) are to be undertaken (in excess of twenty (20) Man Days) and which requires project management, consultancy and/or technical architect resources in addition to software engineers, then the rate(s) for such additional resources will be reasonably agreed between the parties on a case by case basis;
d. any Services performed outside the agreed supported Core Hours;
e. any Services performed at a location other than remotely;