Government & Public-Sector Addendum
Sector-specific terms for federal, state, local, tribal, and territorial agencies, and for critical-infrastructure operators subject to public-sector security requirements.
1. Compliance frameworks
Where the deploying Authority is a U.S. federal agency, contractor to a federal agency, or state, local, tribal, or territorial ("SLTT") entity subject to public-sector security requirements, the following frameworks apply, per the Capability Statement's Certified / Compliance-Ready designations:
- FedRAMP Moderate — WCE targets Q3 2027 authorisation; controls implemented in the interim.
- StateRAMP — package targeting Q3 2027.
- NIST SP 800-53 Rev. 5, Moderate baseline — controls implemented; System Security Plan available under NDA.
- Criminal Justice Information Services ("CJIS") Security Policy — controls implemented; per-state Management Control Agreements executed as required.
- DFARS 252.204-7012 — where a Coverage Area handles Covered Defense Information; WCE will not knowingly process such information without prior written agreement.
2. Freedom of Information Act ("FOIA") and state open-records laws
Where the Authority receives a request under FOIA (5 U.S.C. § 552) or an analogous state open-records law, WCE will support the Authority's response as reasonably requested. WCE Confidential Information, including any portion of the Trade-Secret Schedule inadvertently in Authority hands, is protected from disclosure under Exemption 4 (trade secrets and commercial or financial information obtained from a person and privileged or confidential) and, where a court so orders, under a protective order sought jointly by the Parties. The Authority shall notify WCE promptly of any request that may implicate WCE Confidential Information.
3. Sunshine and public-records disclosures
Categorical Notification data may be disclosed at the Authority's discretion under sunshine laws. Chain-of-Custody Records shall be disclosed, if at all, together with a Verifier report and a categorical summary; the underlying signature material is public. Trade-Secret Schedule material shall not be disclosed under sunshine laws.
4. Federal contract flow-downs
Where the Authority incorporates federal contract clauses into the Order Form (FAR, DFARS, or agency supplements), those clauses apply between the Parties to the extent they are consistent with commercial-item terms. Non-commercial clauses are modified to the extent necessary under FAR Part 12.
5. Data residency
Personal Data collected by a U.S. government Authority is stored and processed in the United States, at data centres located in the United States, using U.S. persons for support access where required by contract or clearance.
6. Section 508 and Rehabilitation Act
The Platform conforms to Section 508 of the Rehabilitation Act and WCAG 2.2 AAA per the Accessibility Conformance Attestation.
7. Buy-America and export controls
WCE cooperates with the Authority regarding Buy America Act, Trade Agreements Act, and export-control obligations as required by the Order Form or by law.
8. Public-safety coordination
Where a Coverage Area is a public space owned or operated by a governmental Authority, the Platform is deployed as an aid to the Authority's public-safety operations. Any interaction with a law-enforcement partner is subject to Section 9 of the AUP and to Section 5 of the Chain-of-Custody Rider.
9. Order of precedence
In the event of a conflict with the body of the MSA, this Addendum governs to the extent required by federal law or by the Authority's applicable procurement regulation.
This Addendum attaches to the MSA and is effective concurrently with it.