Deluxe Provent : Protecting against expanded threats. Providing for expanded opportunities.

(1)

i n t r o d u c t i o n

Identity thieves are smarter and more organized than ever before,

claiming over 8.1 million victims in 2010, accounting for more than

$37 billion in losses.

1

_{It is still the fastest growing crime in America,}

but the number of victims has declined by 27% since 2009, an

indication that solutions like Deluxe Provent are helping consumers/

businesses win the battle against identity thieves.

The problem of identity theft demands an aggressive, innovative response with services that are more comprehensive in nature, providing more than just traditional credit monitoring services alone. That’s why Deluxe offers Deluxe Provent, an integrated suite of identity theft protection services that provides identity theft protection on all fronts, including: Prevention, Detection and Restoration.

Offering Solutions For Your Small Business Owners

One of the biggest threats to small business owners today is the risk of a data breach or identity fraud. Small businesses are in the crosshairs of cybercriminals who see them as easier and more profitable marks. Nearly three quarters of all U.S. small businesses experienced a breach attack in 2010.2

Small businesses suffer more than their larger counterparts due to their inexperience in preparing for and responding to these threats — they are under-resourced and overwhelmed by the options. In addition, small business owners have more assets and that puts them at greater risk of being a target for identity theft, and therefore, you need to protect those assets from exposure.

t h e d e l u x e P r ov e n t S o l u t i o n

Deluxe Provent offers one of the widest arrays of solution options in the industry, combining both Financial Institution (FI) Paid service options and a Consumer Paid service suite into a complete solution.

It all starts with our FI Paid service options, which allow you to protect the consumers/businesses of your choice. For example, you may want to provide an FI Paid service as a loyalty benefit or account holder reward, or you may want to bundle an FI Paid option within an account, either as a way to differentiate that account and add value, or as part of the account package, for which you would charge a fee. It is up to you to decide which FI Paid options meet your needs, as well as how you would like to utilize those solutions to: deepen account holder relationships, set you apart from the competition, earn additional fee income and enhance profitability, and position you to acquire new accounts.

(2)

Trademarks shown are the property of their respective owners.

S o l u t i o n S f o r Yo u r c o n S u m e r Ac c o u n t S

We have packaged our value-added services into four easy FI-Paid options:

(see Service Details for a description of each service) 1. ID RestorationSM 2. ID ProtectSM ID Restoration Internet Monitoring 3. ID Protect PlusSM ID Restoration Internet Monitoring

Credit Monitoring (1 Bureau) 4. VaultSM

Once you have communicated with Deluxe regarding whom you want to protect with which FI Paid product, Deluxe and its partner (EZShield®_{) take it from there. We will reach out to the account holder via email}

to reinforce the value of the service they have been provided by your financial institution, welcome them to the program, and direct them to a secure website to activate their service. If your customer does not have an email, we will provide your financial institution a custom landing page where you direct them to activate their service. Once the consumers/businesses have activated their FI Paid services, they will be able to access their membership information via a secure member dashboard. With this dashboard, they will be presented with additional service options. Consumers/businesses get to pick and choose which services they want to enroll in. Ultimately, they have the ability to configure their unique, ideal identity protection solution. This easy upgrade model is unique in the identity theft solution industry. Instead of offering predefined packages or bundles of product components, we more often present the consumer/business with the components individually. This ultimately allows the consumer/business to pay for only what he/she is interested in, and allows the consumer/business to customize his/her own ideal identity theft solution. The consumer/business will not be paying for services within a predefined package that he/she will not use. (See page six for detailed descriptions of the various service options that are available.)

(3)

S o l u t i o n S f o r Yo u r S m A l l B u S i n e S S Ac c o u n t S

Why choose Deluxe Provent®_{Small Business Solutions?}

Market Differentiation

Strengthen your position in the market by offering your small business customers a comprehensive security and breach services solution. Bring a vital and uniquely designed offering to market before competitors. Most small businesses are inundated with their day-to-day operations, and unable to recognize that they need these solutions. Two-thirds believe that it won’t happen to them while less than half have completed an assessment to verify their readiness.3_{A partner that educates a small business on the threat to the company}

and offers a comprehensive and easy-to-implement solution will gain both trust and loyalty from their small business customers.

Most breach solutions in the market today are aimed at larger corporations, and not geared for the needs of the typical small business. Uniquely tailored to the smaller enterprise, the Deluxe Provent breach offering guides small businesses through the steps required to ensure they are current on security best practices and have a detailed breach response plan.

Stronger Customer Relations

Provide valuable advice and highly complex services that secures your role as trusted partner. Small businesses are understandably cautious with respect to spending. They value products and services that help them stay in business. By proactively offering a solution to help your customers head off a potentially lethal business problem, you will be seen as an advisor and not simply a vendor. Helping small businesses shift from fear to possibilities is key to developing and deepening long-term, high-value relationships.

Reduce Churn

Satisfaction of small businesses with banks is on the decline. Only 19% of small business customers are committed to remain with their current financial institutions.4_{They are choosing to shop around for}

better banking options and prefer to work with financial institutions whom they trust and will address the individual concerns of their small business clients. And they are not forgiving of perceived transgressions. When credit card fraud or a breach occurs, the small business associates the negative consequences with the financial institution where the account is held. A 2011 Javelin study found that nearly 350,000 small business owners are switching banks or credit unions due to fraud loss each year.5

Higher Revenue

Provide new revenue streams to strengthen and increase overall bottom line.

With customized breach solutions for your small business customers, you can drive more revenue into your business. In addition to retaining existing customers who may be lured away by competitors, you can attract a new set of customers who may not have considered your product set before. In addition, you can build incremental revenue on top of your customer base, selling additional services to those customers who are loyal and increasing their total purchases.

Perhaps the most important role you play is helping to protect the viability of the most vulnerable in your customer base. While all small businesses are at risk, those with 1–4 employees are most vulnerable due to the lack of resources and technical know-how. Representing 55% of the small business market,3_{this group}

can potentially grow and provide even more revenue streams in the future. Keeping them in business is an investment in your own growth.

(4)

Deluxe Provent® for Business Services

The Deluxe Provent Security and Breach Services solution provides a comprehensive package that spans the diverse needs of the small business. Deluxe Provent does more than simply provide your small business with a response to the breach once the damage is done, we help the small business get ahead of the problem. Our suite leads with our award winning restoration services then adds in-depth self-assessment to pinpoint vulnerabilities and progresses through a series of customizable offerings, culminating in a breach response plan. The recommendations offered are created with Safe Harbor, PCI, Red Flag, and HIPAA compliance in mind to ensure that the Deluxe Provent offering produces value and keeps ahead of the most critical regulatory requirements across small business industries.

We package these services into four easy FI-Paid options for easy inclusion in your value-added account bundles and service upgrades. (see Service Details for a description

of each service) 1. Business ID RestorationSM 2. Business ID AssessSM Business Restoration Sycurity ScoreSM 3. Business ID ProtectSM Business Restoration Sycurity Score Internet Monitoring 4. Business ID Protect PlusSM

Business Restoration Sycurity Score Internet Monitoring Credit Monitoring

From these service bundles, your business account holders can upgrade into our more comprehensive small business breach offerings:

Sycurity AssistSM

Security is the first line of defense against fraud and breach. Sycurity Assist is designed to assist small businesses in strengthening overall security and reduce the chance of a breach incident occurring therefore ensuring the safety of the sensitive information stored.

Sycurity PrepareSM

Sycurity Prepare provides a comprehensive solution that educates your business on what is required in successful handling of a breach including breach process flow, forensic checklists, team roles, escalation criteria, external notification guides and notification templates to help respond quickly and effectively in the case of a breach.

(5)

e n t e r P r i S e f r Au d S e r v i c e S

In addition, the Deluxe Provent®_{solution suite includes several Enterprise Fraud Service options. These}

services are designed to address your financial institution’s needs regarding fraud and identity theft. They include:

• Breach Prevent: custom-scoped consulting, which could include things like a data breach risk assessment to identify risks and gaps; the development of a data protection and security manual; and training.

• Breach Response — Retainer: development of a comprehensive, pre-breach preparation guide and plan of action that helps an FI respond immediately in the case of a breach. The plan of action includes processes and procedures for engaging EZShield® immediately. EZShield is “on call” to help

should a breach event occur.

• Breach Response — Notification Services: support and assist an FI in notifying impacted account holders of a breach event. Includes things like notifications via mail; FAQ development; custom landing page development; and a contact phone center.

(6)

S e r v i c e d e tA i l S

E Z S h i E l D®_{i D E n t i t Y R E S t O R at i O n}® ( i n d i v i d u a l , F a m i l y [ i n c l u d e s $ 2 5 , 0 0 0 e x p e n s e r e i m b u r s e m e n t ] , o r B u s i n e s s ) highlights • Preventive Measures • EZShield Wallet • Activity Reports

• Ongoing 24/7 Expert Advice • Notification Services

• The EZShield®_Promise

Description of Service

Preventive Measures

Provides access to up-to-date education, checklists, and free or recommended resources for prevention of identity theft (ongoing 24/7 access for term of Service). Provides best-of-industry tips to help protect individuals against the many forms of identity theft, as well as links to free identity theft prevention and education resources

EZShield Wallet

24/7 access to password-protected, encrypted secure information area containing essential personal information you want to manage and protect: identification, contact information, credit cards and bank accounts. EZShield Wallet helps to eliminate paper trails and reduces the risk of fraud and identity theft.

Activity Reports

Monthly emails detailing services in effect, latest education on fraud trends to look out for, reminder of how to access services and exclusive offers for recommended services.

Expert Services

During the term of the Service, Customer shall be entitled to access a Resolution Specialist who will provide support directly to Customer and timely expert advice regarding the best procedures and documents for helping to prevent an identity theft event, and for responding to a Customer identity theft event.

Notification Services

In addition to advising Customer on the best procedures and documents to help prevent an identity theft event or to respond to an identity theft event, a Resolution Specialist can also act on behalf of Customer. For the Resolution Specialist to act on Customer’s behalf *, the Customer must:

1. submit to EZShield the EZShield Identity Restoration packet; 2. complete and execute a limited power of attorney form;

3. provide proof of the criminal complaint filed with the applicable law enforcement authority; and 4. provide other documents as required by EZShield in its discretion.

(7)

Resolution Specialists are available to assist as follows:

1. notify and request government issued identification such as State’s Drivers License, Social Security card or Passport;

2. notify the three national credit bureaus (Equifax®, Experian® and TransUnion®) to place a fraud alert

on Customer’s credit reports, and review such reports to identify evidence of the identity theft event; 3. notify banks, credit card companies and merchants as directed by Customer to freeze or close any

business accounts compromised by or resulting from the identity theft event;

4. notify the Federal Trade Commission and file a complaint to report the identity theft event; 5. otherwise coordinate with credit bureaus, banks, credit card companies, government agencies, and/

or merchants as suggested by the Federal Trade Commission in its February 2006 publication entitled Take Charge: Fighting Back Against Identity Theft; and

6. review the status of notification and correction requirements.

The EZShield®_Promise

EZShield will continue engaging in these services on behalf of Customer either until the records identifying the fraudulent transactions associated with the identity theft event are corrected, or until EZShield reasonably determines that further efforts to revise such records would not be successful. When EZShield determines that the circumstances of your case puts your identity at a continued risk for further identity theft events, EZShield will deploy certain preventive and complementary services to Customer, free of charge, to help mitigate such risks.

Service level Definitions

Individual Restoration: Limited to individuals properly registered as a Customer

Family Restoration: Limited to the individual properly registered as a Customer and his/her Affiliated Persons

Business Restoration: Limited to the business properly registered as a Customer and one selected

primary business owner. Notification services will be extended to Authorized Persons should the business owner or business fraud event effect these persons.

Affiliated Persons: Limited to the spouse or domestic partner of registered Customer (where “domestic partner”

is defined as any person living in a legally recognized domestic partnership with Customer in their state of residence; provided that, this definition does not affect the location in which the Service is being provided as set forth in the EZShield Terms and Conditions), dependent children under the age of 21 who live with Customer and dependent children under the age of 25 who are full-time students, as determined by IRS dependency requirements.

Affiliated Person Extension: Upon request by Customer, EZShield will provide the Service for Customer’s

Affiliated Persons if:

1. During the Term, the Affiliated Person is the victim of an identity theft event; and

2. the Affiliated Person (or his/her authorized representative) submits the required documentation to EZShield and cooperates in the delivery of the Service as reasonably requested by EZShield.

Authorized Persons: Those individuals associated with the Customer who directly own at least five percent (5%)

of the Customer’s outstanding equity.

EZShield will provide the Service for Customer’s qualified “Authorized Persons” if: 1. During the Term, the Authorized Person is the victim of an identity theft event; and 2. such Authorized Person’s identity theft event is directly associated with Customer’s identity

theft event; and

3. the Authorized Person submits the required documentation to EZShield and cooperates in the delivery of the Service as reasonably requested by EZShield.

(8)

What to Expect

When your account holders suffer from fraud or an identity theft event, Deluxe personally assigns them a Resolution Specialist. This Resolution Specialist will provide expert advice regarding the procedures they need to follow and the documents they need to gather.

The steps the Resolution Specialist takes to help restore the account holder’s credit file and good name are: 1. Receives customer call regarding suspected/actual fraud/identity theft event.

2. Communicates the basic initial steps and offers to assist as follows: a. Report all missing/stolen credit and debit cards to creditors. b. Place fraud alert with all three credit bureaus.

c. Advise all banks where you hold accounts (we recommend closing your existing accounts). d. Contact check verification companies and advise them to not accept checks from

the affected accounts. e. File a police report.

f. Complete and file an FTC Fraud Complaint Form online.

g. Request and review your credit report from each of the three credit bureaus.

h. Notify the Department of Motor Vehicles if your driver’s license and/or car registration are missing.

i. Notify the Social Security Administration if your social security card/number has been stolen. 3. Sends a restoration packet to the customer. This package includes:

a. EZShield®_{IDR Checklist (includes all information mentioned above)}

b. IDR Terms & Conditions c. Incident Forms

d. Limited Power of Attorney Form

4. Reviews the information returned to them to ensure it is complete.

a. Resolution Specialist contacts customer to outline the recovery plan and/or to gather additional information.

5. Continues to update and review case on a weekly basis until all fraudulent data has been removed from the customer’s credit report.

a. If Resolution Specialist is unable to receive a response from the customer for a month, the case will no longer be considered “in progress.”

(9)

i n t E R n E t M O n i t O R i n g highlights

• Continuous access to an online dashboard • “CyberScan” searches

• Identity Theft Protection Tips (Preventive Measures) • Identity Theft Risk Notification Services

In performing and displaying the Identity Theft Protection service (“Service”), EZShield®_{will securely review}

and store customer’s Protected Identity Elements as follows: • 1 individual name

• 1 street address • 2 email addresses • 3 telephone numbers • 1 Social Security Number

• 6 bank account or credit card numbers Additional services provided:

• CyberScan Searches: is an ongoing customized search of hundreds of thousands of identity elements available on the Internet’s black market to determine if any of the Protected Identity Elements are identified as compromised data.

• Identity Theft Protection Tips: provide best-of-industry tips to protect individuals and businesses against the many forms of identity theft, as well as links to complementary theft prevention and education resources.

• Identity Theft Risk Notifications: provides timely email notifications of discovered activities and data suggesting that an identity theft event may have occurred.

(10)

C R E D i t M O n i t O R i n g highlights

• Continuous access to an online dashboard • Credit Report Monitoring (1 or 3 bureau)

Monitoring: As part of the service, EZShield®_{will monitor activity associated with customer’s identity}

and make available to the customer the following search results, which may indicate identity theft or misrepresentation:

• 1-Bureau Credit Report Monitoring: provides alerts for any activity in the TransUnion®_{credit file}

that relate to Customer’s Identity.

• 3-Bureau Credit Report Monitoring: provides consolidated alerts for any activity from any of the three credit bureaus, allowing the customer to validate that the credit-related activity was in fact their own activity. Offered as an alternate to 1-Bureau Credit Report Monitoring; additional fees may apply. Additional services provided:

• Identity Theft Protection Tips: provides best-of-industry tips to protect individuals and businesses against the many forms of identity theft, as well as links to complementary identity theft prevention and education resources.

• Identity Theft Risk Notifications: provides timely email notifications of discovered activities and data suggesting that an identity theft event may have occurred.

(11)

P u B l i C R E C O R D S M O n i t O R i n g highlights

• Continuous access to an online dashboard • USPS Change of Address Monitoring • Court Record Monitoring

• Sex Offender Registry Monitoring

Monitoring: As part of the Service, EZShield®_{will monitor activity associated with customer’s identity}

• USPS Change of Address Monitoring: provides alerts for any activity in the U.S. Postal Service Change of Address system.

• Court Records Monitoring: provides alerts for activity detected in criminal records from 46 states, 200+ counties and other jurisdictions totaling more than 500 aggregated sources.

• Sex Offender Registry Monitoring: provides alerts for activity detected in an aggregated database of state Sex Offender Registries.

(12)

n a M E S & a D D R E S S E S M O n i t O R i n g highlights

• Continuous access to an online dashboard • Customized Names and Aliases List • Customized Known Addresses List

Monitoring: As part of the service, EZShield®_{will monitor activity associated with customer’s identity}

• Customized Names and Aliases List: identifies the different names associated with customer’s protected identity elements in the credit header file.

• Customized Known Addresses List: identifies the different street addresses associated with customer’s protected identity elements in the credit header file.

Additional services provided:

(13)

Vau ltS M

highlights

• Preventive Measures • EZShield®_Wallet

• Activity Reports

• Digital organization and storage of important documents and information • Top-level data security to prevent unauthorized access to stored files

Preventive Measures

Provides access to up-to-date education, checklists, and free or recommended resources for prevention of identity theft (ongoing 24/7 access for term of service). Provides best-of-industry tips to help protect individuals against the many forms of identity theft, as well as links to complementary identity theft prevention and education resources.

EZShield Wallet

24/7 access to a password-protected, encrypted secure information area containing essential personal information you want to manage and protect: identification, contact information, credit cards, bank accounts. It helps eliminate paper records and reduces risk of fraud and identity theft.

Activity Reports

Monthly emails will be sent detailing services in effect, providing the latest education on fraud trends to watch for, and reminders of how to access services and exclusive offers for recommended services.

Organization and Storage of Digital Files

Organize and store digital copies of important records, legal and personal documents, and other items in a secure, remote location.

• Manage information about content for ease of search and retrieval • Easily stage incoming content for proper categorization and storage

Top-Level Data Security

• Files stored in a SAS 70 Type II-compliant data center • Password access set and managed by customer

(14)

SYC u R i t Y a S S i S tS M

highlights

• Sycurity ScoreSM_{Self-Assessment}

• Security & Privacy Planning

• Employee Security & Privacy Training Materials

Sycurity Score Self-Assessment

This assessment will serve as a best practice evaluation in the area of Personally Identifiable Information (“PII”). The assessment will walk Customer through a series of questions pertaining to the policies and procedures it has in place based on Customer’s industry and the PII it collects. The results of the assessment will provide Customer with a guideline to determine areas of improvement in its PII protection practices. This assessment will touch on Red Flag, Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry Security Standards (PCI) and EU-US Safe Harbor compliance (allowing data transfer between the United States and the European Union) needs in addition to general best practices in information security.

Security & Privacy Planning

Customer will receive access to a portfolio of various policy, procedure and process templates. These templates help the Customer ensure that appropriate levels of security are in place. Together, these various documents then serve as the Customer’s working security & privacy plan.

• Security & Privacy Policy • Back-up & Recovery Process • Vendor Due Diligence Process • Red Flags Compliance Process

• Employee Screening and training policy

Employee Security & Privacy Training Materials

The Security & Privacy Training portion of Sycurity Assist allows the Customer to educate its employees on the importance of protecting their customers and their fellow employees’ personal information. “Small Business Employee Privacy Training” will be provided to the Customer in the form of a PowerPoint presentation focused on Privacy and Security imperatives that all employees need to know and do. Also included are a post-training quiz, employee sign-off form, and quarterly newsletters to keep Customer’s employees’ security and privacy knowledge up to date.

(15)

SYC u R i t Y P R E Pa R ES M

highlights

• Prepared Breach Response materials (including an Incident Response Plan, Victim List Template, and Incident Response Sheet)

• Notification plan recommendation to adhere to current applicable Laws

Sycurity Prepare

EZShield®_{’s Sycurity Prepare services help Customer prepare for how it may handle a breach incident should}

one occur. There are three sub-areas to this service that can be leveraged to help guide the business through identifying a process flow it can execute in the event of a breach incident. The following materials will be available:

• Incident Response Plan • Victim List Template • Incident Response Sheet

Incident Response Plan

In order to meet tight timelines for notification of victims once a PII Breach is recognized, certain materials and processes need to be pre-positioned for action, including:

• incident response process

• incident response team roles and contact information • specified data breach “assessment and escalation policy” • prepared notification messages

Victim List Template

Customer will have access to EZShield’s victim list template form allowing Customer to assess pre-breach incident, how it will execute delivery of this information for a faster turnaround time should an incident occur, mitigating potential legislative risks.

Incident Response Sheet

EZShield will provide Customer with an incident response sheet to use as a guide in outlining the various information points that will be required to determine an effective and compliant notification plan should a breach occur.

Supplemental Services

Customer may purchase through EZShield consulting services (to identify issues or concerns with Customer’s proposed data breach response policies and procedures) and/or training services (to implement Customer’s data breach response policies and procedures).

Notification Plan Recommendation

Upon Customer’s report of a Breach Incident and completion of a Breach Incident Response Report, EZShield shall provide Customer a Breach Assessment Report which will provide a recommendation as to the course of action(s) Customer should take based on the facts provided and available to EZShield at the time of the Breach Incident Response Report is submitted. The recommendation may include a notification requirement of Customer’s breach victims.

(16)

S e r v i c e S S u m m A r Y

conSumer

fi-PAid Service oPtionS unitS coSt to fi

ID RestorationSM Person/month $0.16 N/A

Dedicated Resolution Specialist

Expert Assistance or full Advocacy on account holder’s behalf EZShield®_{Wallet; secure data storage}

Lost Wallet and Identity Theft recovery services

ID ProtectSM Person/month $1.60 N/A

Restoration and Internet Monitoring

ID Protect PlusSM Person/month $2.75 N/A

Restoration, Internet Monitoring and Credit Monitoring

VaultSM Person/month $2.20 N/A

EZShield Wallet; secure data storage

Digital offsite storage of important documents High Encryption

coSt to Account holder

SmAll BuSineSS

fi-PAid Service oPtionS unitS coSt to fi

Business ID Restoration Business/month $0.85 N/A

Dedicated Resolution Specialist for business and business owner Expert Assistance or full Advocacy on business owner’s behalf EZShield Wallet; secure data storage

Lost Wallet and Identity Theft recovery services

Business ID AssessSM Business/month $3.50 N/A

Business ID Restoration

Sycurity ScoreSM; evaluation of your data security measures

Business ID Protect Business/month $4.50 N/A

Sycurity Score and Internet Monitoring

Business ID Protect Plus Business/month $5.50 N/A

Sycurity Score, Internet Monitoring and Credit Monitoring

coSt to Account holder

(17)

S e r v i c e S S u m m A r Y ( c o n t i n u e d )

conSumer

minimum monthlY chArge for fi-PAid ServiceS unitS monthlY AnnuAllY

ID RestorationSM 500 $80 $960

ID ProtectSM 25 $40 $480

ID Protect PlusSM 25 $69 $825

VaultSM 25 $55 $660

SmAll BuSineSS

minimum monthlY chArge for fi-PAid ServiceS unitS monthlY AnnuAllY

Business ID Restoration 589 $500 $6000

Business ID AssessSM 143 $500 $6000

Business ID Protect 111 $500 $6000

(18)

S e r v i c e S S u m m A r Y ( c o n t i n u e d )

conSumer-PAid Suite unitS coSt to fi Account holdercoSt to

ID ProtectSM Person/month N/A $4.99

Restoration and Internet Monitoring

ID Protect PlusSM Person/month N/A $7.98

Restoration, Internet Monitoring and 1B Credit Monitoring

ID Protect Platinum Person/month N/A $14.49

Restoration, Internet Monitoring, 3B Credit Monitoring, Public Record Monitoring and Name/Address Monitoring

Internet Monitoring Person/month N/A $2.99

“CyberCheck” searches of certain data and records Identity Theft Protection Tips

1B Credit Monitoring Person/month N/A $2.99

Credit Report monitoring; Payday Loan scanning

3B Credit Monitoring Person/month N/A $6.00

Credit Report monitoring; Payday Loan scanning

Public Record Monitoring Person/month N/A $2.25

Change of address scanning; aggregated criminal records scanning; aggregated sex offender registry scanning

Name/Address Monitoring Person/month N/A $1.25

Customized Names and Aliases List Customized Known Addresses List

1B Credit Report* One time N/A $7.00

One-time review of Credit Report from 1 bureau (TransUnion). Optional

3B Credit Report* One time N/A $18.00

One-time review of Credit Report from 3 bureaus. Optional

1B Credit Score* One time N/A $1.99

One-time review of Credit Score from 1 bureau (TransUnion®)

3B Credit Score* One time N/A $3.99

One-time review of Credit Score from 3 bureaus

VaultSM * Person/month N/A $4.50

(19)

S e r v i c e S S u m m A r Y ( c o n t i n u e d )

enterPriSe frAud ServiceS unitS coSt to fi Account holdercoSt to

Breach Prevent Hour $250 N/A

Custom-Scoped Consulting

Breach Response – Retainer Month $600 N/A

Pre-Breach Preparation service

EZShield®_{“on call’ to help in case of breach}

Breach Response – Notification Services Affected Individual $7.25 N/A

Mailings, portal, inbound phone support, account holder locate services

BuSineSS-PAid Suite unitS coSt to fi Account holdercoSt to

Business ID ProtectSM Business/month N/A $10.94

Sycurity ScoreSM; evaluation of your data security measures

Internet Monitoring

Business ID Protect PlusSM Business/month N/A $13.93

Sycurity Score; evaluation of your data security measures Internet Monitoring and Credit Monitoring

Sycurity AssistSM * Business/month N/A $17.95

Self-assessment of security risks; action plan Policies and Procedures

Employee training Quarterly newsletter

Sycurity Prepare* Business/month N/A $21.95

Breach preparedness; process flow, escalation criteria, notification guidelines and templates

(20)

d e l u x e P r o g r A m S u P P o r t

Deluxe provides the following support for financial institutions that sign up for the Deluxe Provent®_program:

• We provide standard consumer/business marketing materials for your use in promoting the Program to your account holders. There is no additional cost to you for these items. Items include in-branch brochures, table tents, statement stuffers, Web linking instructions, and more.

• We set up a co-branded landing page for consumer activation for your institution, at no additional cost to you.

• If desired, we can set up a full co-branded website for the Program for your financial institution. There is a monthly fee associated with this. This fee covers configuration, set up, implementation, ongoing maintenance, and hosting of the site. This website would be unique to your institution. The cost for this is $1,250/month.

• We support your institution in driving consumer/business upgrades through our easy upgrade model. With this model, we will be communicating and presenting alternative service options to your consumers/ businesses on your behalf through things like:

– Activation/welcome communications: once you have indicated to Deluxe who you would like to cover (and on which Financial Institution Paid product), we will then send out a welcome/activation email to the customer. This communication reinforces the value of what they have been given, gives the customer important details about the service, and asks them to activate the service. These communications are co-branded at no additional cost to you.

– Ongoing alerts from the monitoring services: as we interact with customers via the various alerts associated with the various monitoring services, we will be reminding customers of the additional product options that are available to them.

– Online member dashboard: when customers go to their personalized dashboard to review their membership information, they will have access to and see the additional product options available to them.

– Monthly newsletters: We provide ongoing monthly newsletters to your account holders with relevant news, tips, suggestions, strategies for preventing identity theft.

• We provide your institution with a 15% rebate on all memberships paid for by customers identified with your institution.

• An implementation specialist will be assigned to assist you with all implementation steps associated with the program. This person will serve as a main point of contact for you throughout the implementation process.

• Deluxe and its partner handle billing, service delivery, and account holder service for the solution suite. In addition, the following account holder service support is provided with Deluxe Provent:

• Phone Support: Deluxe and EZShield®_{will provide a Customer Support Team to provide secure and}

superior service and support for all products. The Support team is staffed with Certified Fraud Specialists during our standard hours of operation: Monday through Friday, 8:00 am to 8:00 pm EST. We will supply sufficient staff to maintain an average call wait time of less than 20 seconds. During off hours, including weekends, representatives are available to answer basic questions and forward account holder questions/requests to a certified specialist for response on the next business day. Off-hours inquiries will be responded to within 12 hours.

• Email Support: To further support our account holders, Deluxe/EZShield will also provide email support for service inquiries, Frequently Asked Questions (FAQs), and other service-related questions. Our Email Response Team provides support Monday through Friday, 8:00 am to 8:00 pm EST. Email received during off hours will receive a response the next business day.

• Implementation Support: is available during normal Deluxe business hours, but can be made available outside of this, as needed.

• Technical Support: for file transmission issues, support is available 24 hours a day, 7 days a week, 365 days a year.

(21)

r e P o r t i n g

The following basic reports are available to your financial institution as a standard part of the program, at no additional cost:

• Member Report: a monthly report that will show the membership counts associated with each service option that we offer. This report will show you how many of your account holders have enrolled and into which service options. It will also show you the changes over time.

• Commission Report: quarterly report that will show you the commissions you are receiving from the program.

Additional reports can be generated on an ad hoc basis, as necessary.

i m P l e m e n tAt i o n

In all instances of implementation, basic billing and account information will be gathered, Deluxe will set up your financial institution in our systems, conduct training, and order and ship marketing materials. During the implementation process, our Delivery and Account Management teams will be working with your financial institution to define and document a rollout and implementation plan. In general, our set up processes are as follows:

1. A Delivery Consultant is assigned to the event. This person leads all aspects of the implementation. 2. The Delivery Consultant works with you to define and document an implementation plan, and to set

a target “go live” date.

3. The Delivery Consultant gathers required information in order to complete the set up in all appropriate Deluxe and EZShield®_systems.

4. The Delivery Consultant works with appropriate resources within Deluxe and EZShield to ensure appropriate set up within all systems.

5. The Delivery Consultant helps create and test an ongoing file transfer to Deluxe (for the FI Paid solution options).

6. The Delivery Consultant determines training needs and coordinates the completion of any said training.

7. The Delivery Consultant works with your financial institution to determine the marketing/ promotional approach that your institution would like to take, and then coordinates all printing/ shipping, customization, approvals, etc., of necessary marketing materials.

8. The Delivery Consultant verifies that everything is set up and your financial institution has everything it needs in order to launch.