IMPACT's Service Catalog | Version 2026.08.03 | Effective upon publication

Preamble

Preamble. This Service Catalog (“Service Catalog”) summarizes services IMPACT Technology Group, Inc. (“IMPACT”) may provide under a signed Master Services Agreement (“MSA”) and one or more Orders/Statements of Work (“Orders”). This Catalog is intended to describe what services are offered at a high level and does not describe operational methods, implementation details, or the full scope of any specific engagement.

Contract control. The MSA and the applicable Order(s) control in the event of any conflict. Not every service below is included in every plan or engagement; services are provided only when included in an applicable Order and subject to the MSA, the Order, and any third-party terms that apply, including applicable addenda.

Service Plans. Where an Order identifies a Service Plan, the Services included in that Plan are set forth in the Service Plans section of this Catalog. Service Plans identified as Closed are not available for new Orders or renewals and are published solely to define scope under Orders executed prior to closure.

Updates and substitutions. This Catalog may be updated from time to time. Where a service is delivered using third-party tools or platforms, IMPACT may substitute vendors, platforms, or components at its discretion to deliver substantially similar outcomes, unless an Order expressly identifies a required vendor or platform.

No Guarantees.
This Service Catalog does not promise or guarantee security, availability, compliance, business continuity, or specific outcomes. All services are provided subject to the limitations set forth in the MSA, applicable Addendums, and Orders.

Notices

AI & automation notice. For AI & Automation Services, outputs are informational and assistive and may require Client review and approval before use or reliance. AI & Automation Services are subject to the AI & Automation / Managed Intelligence Services Addendum.

Surveillance notice. Surveillance and access control services are subject to the Surveillance & Access Control Systems Addendum and are not live monitoring, guard, or alarm response services.

Services

ActivTrak: Provides access to and/or administration support for the ActivTrak workforce analytics and productivity platform, as included in the applicable Order. ActivTrak is a third-party service subject to vendor terms and changes.
Adobe Creative Cloud: Provides access to and/or administration of Adobe Creative Cloud and its portfolio of creative software and applications, as included in the applicable Order and subject to Adobe terms.
AI & Automation Consulting & Implementation: Provides consulting, design, configuration, integration, and implementation services for AI and automation workflows and related systems as defined in the applicable Order. These services are subject to the AI & Automation / Managed Intelligence Services Addendum and may rely on third-party AI platforms.
AI Use Policy & Governance Starter: Provides template artifacts supporting Client's development of an internal artificial-intelligence acceptable-use and governance policy, including a policy template, a permitted-and-prohibited-use framework, and guidance on tool approval and data-handling considerations, as included in the applicable Order. Deliverables are templates and operational artifacts only. IMPACT does not provide legal advice and does not certify or guarantee that any policy satisfies any legal, regulatory, ethical, professional-responsibility, or insurance requirement. Client is the author and owner of its policies and is responsible for review by its own counsel and insurer. Governed by the AI & Automation Addendum and, where advisory in nature, the Cybersecurity Addendum Section 7 (vCISO Advisory).
Annual Cybersecurity Risk Assessment: Provides a point-in-time cybersecurity risk assessment and gap analysis of the environments within the scope of the applicable Order, delivered on an annual cadence where included. Governed by the Cybersecurity Addendum. Assessments are advisory and do not constitute certification, audit opinion, attestation, or a representation of compliance with any framework.
Backup Monitoring & Testing: Provides oversight activities for backup services, including verification actions intended to support data recoverability. Verification confirms backup completion. Test restoration, where included, is set forth in Schedule B and the applicable Service Plan entry.
Business Continuity & Data Backups: Provides backup services designed to support data protection and restoration efforts following qualifying data loss events, as included in the applicable Order. Vendor platforms may change at IMPACT’s discretion.
Cisco Meraki Network, Device & Platform Management: Provides administration and management of Cisco Meraki network devices and cloud-managed platforms, as included in the applicable Order and subject to Cisco terms.
Client Success Manager: Provides a designated relationship owner responsible for overseeing the Client's technology relationship, coordinating Services, facilitating recurring reviews, and supporting alignment of technology with business objectives, as included in the applicable Order. IMPACT may substitute assigned personnel.
Cloud Platform Management & Tenant Oversight (Microsoft 365 / Google Workspace): Where expressly included in an applicable Order, provides ongoing management and oversight of a Client-owned cloud productivity tenant, including maintenance of IMPACT's administrative relationship to the tenant, maintenance of the tenant security baseline and conditional access posture, license count and subscription reconciliation, platform configuration management, and monitoring of platform health and configuration drift. Where IMPACT acts as Cloud Solution Provider, reseller, or partner of record for Client's subscriptions, subscription transition upon termination is governed by the Managed IT Services Addendum. Client is and remains the owner of its tenant and its data. This service is a recurring service within the meaning of MSA Section 1 (Recurring Services) and does not include Moves, Adds, or Changes, Projects, or Out-of-Scope Services. Without limiting the foregoing, the following are Moves, Adds, or Changes and are not included unless expressly stated in an Order: user provisioning and deprovisioning; changes to permissions, mailbox access, delegation, or sharing; creation or modification of groups, distribution lists, or shared mailboxes; license assignment changes; and configuration of new applications, connectors, or integrations within the tenant. The allocation of administrative authority between IMPACT and Client is governed by the applicable Assignment Zones under Schedule F. Vendor platforms and terms may change, and are subject to third-party provider terms. Governed by the Managed IT Services Addendum.
Cloud Print Management: Provides administration and management of cloud-based print infrastructure, including print queue and driver management, secure print release, and support for mobile and remote printing across supported devices and platforms, as included in the applicable Order.
Compliance Management: Provides administrative support to help organize, track, and coordinate technology-related compliance activities within the agreed scope. IMPACT does not provide legal or regulatory advice, certify, or guarantee compliance unless expressly stated in an applicable Order.
Compliance Program Development (WISP & Incident Response Plan): Provides collaborative development of a written information security program and an incident response plan oriented to a framework identified in the applicable Order, including drafting support, working sessions, and template artifacts. Governed by the Cybersecurity Addendum Section 7 (vCISO Advisory). IMPACT does not provide legal or regulatory advice and does not certify, attest to, or guarantee compliance with any statute, regulation, professional-responsibility rule, insurance requirement, or framework. Client is the author and owner of its program documents and is responsible for review by its own counsel, compliance advisors, and insurer.
CoreTello Hosted VoIP Platform: Provides access to hosted Voice over IP (VoIP) telephony services delivered through the CoreTello platform or an equivalent hosted telephony provider, subject to third-party carrier availability, applicable carrier terms and the VoIP / UCaaS Addendum. Services rely on third-party carriers and platform.
CyberQP Auto-Elevate: Provides a controlled capability allowing end users to temporarily elevate privileges to perform approved administrative tasks on supported devices, as included in the applicable Order. Subject to third-party vendor terms and changes.
Cybersecurity Compliance Platform: Provides access to and administration of a platform used to organize, track, and evidence technology-related security and compliance activities within the scope of the applicable Order. Governed by the Cybersecurity Addendum. Platform access does not constitute compliance certification, audit readiness, or a representation that any framework requirement has been satisfied. Subject to third-party vendor terms and changes.
Data Loss Prevention (DLP): Provides tools and monitoring designed to help detect and reduce the risk of unauthorized data transmission or exposure across supported systems and applications.
Data Restoration & Recovery Services: Provides restoration of files, folders, mailboxes, datasets, or systems from backups maintained by IMPACT, including both individual-item restoration and full disaster-recovery restoration, as included in or billable under the applicable Order. Restoration is limited to data within the scope of backup services purchased and available within the applicable retention window. Restoration outcomes depend on backup completeness, platform behavior, and Client cooperation, and IMPACT does not guarantee recovery of any specific data.
Design Desk: Provides technical design and planning support for technology projects, including solution layout and implementation-ready specifications as defined in the applicable Order.
Disaster Recovery Runbook Development: Provides development of a written recovery runbook documenting recovery sequence, dependencies, contacts, and procedures for the systems within the scope of the applicable Order. Where included in a Service Plan, the runbook is developed once during onboarding and reviewed and updated annually in connection with the Strategic Business Review or annual planning session. The runbook covers only systems within IMPACT-controlled or shared Assignment Zones and does not extend to Zone 3 systems. The runbook is an operational reference document and does not constitute a guarantee of recovery time, recovery point, or business continuity outcome.
Domain Name Registration & DNS Services: Provides domain name registration, renewal, transfer, and DNS hosting services for supported domain extensions. Domain services are subject to third-party registrar terms, ICANN policies, and availability.
Duo Multi-Factor Authentication (MFA): Provides access to and/or administration of Duo Security multi-factor authentication services for supported systems and applications, subject to Duo (Cisco) terms and availability.
Email & SaaS Data Backups: Provides backup services for supported cloud email and productivity platforms to help protect critical business data.
Email & SaaS Security Filtering: Provides filtering services designed to reduce malicious, unwanted, or harmful content across email and supported SaaS applications.
End User Training Library: Provides access to a library of training content for commonly used business applications and technology tools, as available.
Endpoint Protection (Next-Generation Antivirus / EDR): Provides endpoint security software intended to help detect, prevent, and respond to malicious activity on supported devices. Vendor solutions may change at IMPACT’s discretion.
Firewall Management & Administration: Provides configuration, monitoring, and administration of network firewall devices and security appliances.
Hardware Concierge: Provides sourcing, specification, procurement coordination, and standards alignment for hardware, software, and technology components subject to availability and third-party terms.
HIPAA Compliance & Breach Prevention Services: Provides specialized compliance support, monitoring, training, and breach prevention capabilities designed for healthcare and other HIPAA-regulated environments. Services may include risk assessments, policy templates, training, and monitoring tools.
IMPACT App & Client Portal: Provides Client access to IMPACT's client-facing application and portal for support requests, ticket visibility, documentation access, and account information, as included in the applicable Order. Availability of specific portal features may change from time to time.
Internet & DNS Security Filtering: Provides security filtering intended to restrict access to known malicious destinations and help reduce exposure to web-based threats.
Internet Failover Services (LTE / Cellular): Provides backup internet connectivity through cellular LTE networks to support continuity during primary connection failures. Services rely on third-party cellular carriers and are subject to carrier availability, coverage, and terms.
IT Documentation Portal: Provides maintained centralized documentation for supported systems, configurations, and technology assets to support continuity and reference.
IT Policies & Procedures Templates: Provides access to standardized policy templates related to technology, security, and business continuity topics, as included in the applicable Order.
LastPass Management: Provides administration support for LastPass within the agreed scope. LastPass is a third-party platform subject to vendor terms and changes.
Lifecycle Management of Hardware & Applications: Provides oversight of supported hardware and software across its usable lifecycle, including asset tracking and replacement planning guidance.
Low-Voltage Cabling: Provides design, installation, termination, testing, or support of low-voltage and/or fiber cabling and related infrastructure as defined in the applicable Order.
Managed Detection & Response (MDR): Provides managed security monitoring and incident response services through a security operations capability within the scope defined in the applicable Order.
Microsoft 365: Provides access to and/or administration of Microsoft 365 services as included in the applicable Order and subject to Microsoft terms.
Microsoft Power Automate: Provides access to and/or implementation support for Microsoft Power Automate as part of AI & Automation Services where included in an applicable Order.
Mobile Device Management (MDM): Provides enrollment, configuration, policy management, and oversight of laptops, tablets, and mobile devices under a mobile device management platform, as included in the applicable Order. Applies only to devices enrolled and under IMPACT management. Subject to third-party vendor terms and changes.
Monitoring & Management (RMM): Provides centralized monitoring and management of supported systems to support operational visibility and administration.
Multi-Factor Authentication (MFA): Provides multi-factor authentication capabilities to strengthen access security for supported systems and applications.
n8n: Provides access to and/or implementation support for n8n automation workflows where included in an applicable Order.
Nerdio: Provides access to and/or administration support for Nerdio cloud management capabilities for virtual desktop and cloud environments, subject to vendor terms.
Network Management & Optimization: Provides management and optimization of supported network infrastructure to support stable connectivity.
Okta MFA / SSO: Provides access to and/or administration of Okta multi-factor authentication and single sign-on services, subject to Okta terms.
Onsite Support Services: Provides onsite technical support when required and included in an applicable Order or approved add-on service.
Password Management: Provides access to a password management solution for storing and managing credentials and related secure items.
Patch Management: Provides management of operating system and application updates across supported devices.
Penetration Testing: Provides cybersecurity penetration testing services to evaluate security posture within the scope defined in the applicable Order. Testing services do not constitute certification of security or compliance.
Phone System Support: Provides support and administration for covered telephone or VoIP systems as included in the applicable Order.
Preventative Maintenance: Provides routine maintenance activities on supported systems intended to reduce disruptions.
Procurement: Provides sourcing and procurement coordination for hardware, software, and technology components subject to availability and third-party terms.
Remote Access Tools: Provides secure remote access tools used by IMPACT to deliver authorized support services.
Remote Help Desk Support: Provides remote technical support for end users through approved support channels, as included in the applicable Order.
Security Awareness Training: Provides an employee-focused awareness platform designed to improve general cybersecurity knowledge.
SecureAI Chat: Provides access to a secure AI chat and collaboration capability delivered through a third-party platform or an equivalent provider, as included in the applicable Order. AI platforms are subject to third-party terms and changes, and outputs may require client review and approval.
Self-Service Password Reset & Account Reminders: Provides an end-user self-service capability for password reset and account unlock, together with automated expiration and account reminders, for supported identity platforms as included in the applicable Order. Subject to third-party vendor terms and platform capability.
stabilIT Managed IT Service Plans: Provides tiered managed IT support and IT services under IMPACT's stabilIT brand, including reactive and proactive support options tailored to client needs. Service tiers may include per-endpoint, per-location, or per-user pricing models.
Strategic Business Review (SBR or TBR or QBR): Provides a recurring structured review of technology performance, risk posture, roadmap, budget, and business alignment, delivered on the cadence set forth in the applicable Order. Reviews are scheduled in cooperation with Client. Client's failure to schedule or attend a scheduled review does not accrue a credit, refund, or carried-forward obligation.
Surveillance & Access Control Support: Provides support and administration for covered surveillance cameras and/or access control systems subject to the Surveillance & Access Control Systems Addendum.
Technology as a Service (TaaS) / Hardware as a Service (HaaS): Provides subscription-based access to technology hardware, software licenses, and related equipment. This service allows for predictable monthly expenses and lifecycle management of technology assets.
Technology Alignment: Provides guidance and coordination to align the Client’s technology environment with IMPACT operational and security standards.
Technology Platforms & Licensed Software: Includes access to third-party technology platforms and licensed software that may be resold or provided as part of IMPACT services.
Technology Strategy & Planning: Provides structured advisory and planning services to support technology decision-making.
TechRUG Cybersecurity Insurance Liaison: Provides coordination support between the Client and TechRUG or other cybersecurity insurance providers for technology-related insurance matters. IMPACT does not provide insurance advice or coverage determinations.
UniFi Ubiquiti Network, Device & Platform Management: Provides administration and management of UniFi Ubiquiti network devices and cloud-managed platforms, subject to vendor terms.
UPS Management: Provides monitoring and administration support for supported uninterruptible power supply (UPS) systems, as included in the applicable Order.
vCTO Advisory Services: Provides executive-level technology advisory support for strategy, risk, and roadmap planning.
Vendor Liaison & Coordination: Provides coordination and communication with third-party technology vendors on the Client’s behalf.
Video Surveillance Cloud Recording: Provides cloud-based video recording and retention services for surveillance camera systems, including storage, playback, and access management capabilities.
VoIP Telephony Platform: Provides access to hosted Voice over IP (VoIP) telephony services delivered through other Third-Party platforms or an equivalent hosted telephony provider, subject to third-party carrier availability, applicable carrier terms and the VoIP / UCaaS Addendum. Services rely on third-party carriers and platform.
Vulnerability Scanning & Testing: Provides periodic security scanning services intended to identify potential technology and security weaknesses.
Website Design: Provides website design and layout services as defined in the applicable Order. Website services do not include hosting unless expressly stated.
Website Hosting: Provides website hosting services as defined in the applicable Order and subject to third-party hosting provider terms.
Wireless (WiFi) Network Surveys: Provides wireless site survey services to assess coverage, capacity, and design considerations within the scope defined in the applicable Order.

Service Plans

Application. A Service Plan is a defined bundle of Services offered under IMPACT's stabilIT brand. Where an executed Order identifies a Service Plan, the Services included in that Plan as set forth in this section are the Services covered under that Order, together with any add-on, optional, or project item expressly listed on the Order. Items marked as billable, custom, available, or add-on within a Plan are not included in the Plan's recurring fee and are provided only where expressly listed and priced on an executed Order.

Service Plans are subject to the MSA, the Managed IT Services Addendum, the Cybersecurity Addendum, and all applicable Schedules. In the event of conflict, the order of precedence in MSA Section 2.5 applies. Service level targets applicable to Service Plans, including any plan-specific response target, are set forth in Schedule B and are advisory operational targets only, carrying no service credit, refund, or other remedy.

Only Service Plans identified as Current below are available for new Orders or renewals.

Current Service Plans

stabilIT Assured — Current

The fully managed Service Plan, in which IMPACT serves as Client's primary technology function for the environments within IMPACT-controlled Assignment Zones. Priced per Managed User unless otherwise stated in the applicable Order, with a managed device allowance and overage as set forth in the Order. stabilIT Assured requires an executed Managed IT Services Addendum and an executed Cybersecurity Addendum. stabilIT Assured is a Fully Managed engagement for purposes of Schedule F.

Included: 24x7x365 monitoring of servers, desktops, network, applications, internet connectivity, and email; automated and managed operating system and third-party application patching for endpoints; automated preventative maintenance for endpoints; monthly system health and results reporting; mobile device management for laptops, tablets, and mobile devices; Microsoft 365 and Google Workspace data backups; file, folder, and disaster recovery restoration; quarterly test restoration of server backups, limited to IMPACT-provided backup solutions; managed endpoint detection and response; managed detection and response with 24x7 security operations center; employee cybersecurity awareness platform and training; employee phishing testing and reporting; multi-factor authentication for Windows and application logins; cybersecurity compliance platform; annual cybersecurity risk assessment; annual technology planning and roadmap session; lifecycle management of hardware and applications; IT policies and procedures templates; disaster recovery runbook development and annual review; Client Success Manager; quarterly Strategic Business Reviews; technology alignment to industry and IMPACT standards; compliance program development including a written information security program and incident response plan; hardware procurement, sourcing, and specification; AI use policy and governance starter; remote help desk support by telephone and email for in-scope incidents; IMPACT App and client portal; self-service password reset and account reminders; vendor liaison and coordination; onsite support; after-hours and weekend Emergency support as Emergency is defined in the Managed IT Services Addendum; cloud platform management and tenant oversight; IT documentation portal; and end user training library access.

Service levels. A plan-specific live-human telephone response target applies to stabilIT Assured during business hours, as set forth in Schedule B Section 2.6. Plan-specific operational targets, including quarterly server backup test restoration, are set forth in Schedule B Section 2.8. All targets are Service Level Targets governed by Schedule B Section 1 and carry no service credit, refund, or other remedy.

Not included, available as separately priced items: Moves, Adds, and Changes; Projects and project scoping; low-voltage cabling; audits and responses to insurance or government regulatory requirements; HIPAA compliance platform; local and cloud business continuity backups; endpoint backups; advanced multi-factor authentication platform with directory integration; password management platform; cloud managed printer platform; secure AI chat platform; AI and automation services; VoIP telephony; and surveillance or access control systems.

Conditions. Included support applies to in-scope incidents affecting Managed Users and Managed Devices in compliance with the Required Standards in Schedule A or operating under an Approved Alternative. Included support does not extend to Moves, Adds, and Changes, New to Environment device onboarding, Cascades, Projects, or Out-of-Scope Services, each as defined in the MSA and the Managed IT Services Addendum. Onsite support is subject to Schedule C. Included support is subject to the reasonable consumption provisions of the Managed IT Services Addendum. Cloud platform management and tenant oversight is subject to the scope and Move, Add, or Change exclusions set forth in the Managed IT Services Addendum.

Requires: Managed IT Services Addendum; Cybersecurity Addendum.

stabilIT Core — Current

The retainer-based Service Plan, retaining full monitoring, patching, and the security stack while providing support against a prepaid retainer rather than on an included basis, and excluding the recurring strategic advisory layer. Open to Clients of any size. stabilIT Core is a Fully Managed engagement for purposes of Schedule F. stabilIT Core requires an executed Managed IT Services Addendum and an executed Cybersecurity Addendum.

Support model. Remote and onsite support under stabilIT Core is provided against a prepaid support retainer purchased on the applicable Order. Retainer mechanics, including drawdown increments, the rate at which work is drawn against the retainer, roll-forward of unused balance, and replenishment, are set forth in the Managed IT Services Addendum and the applicable Order. Support is not provided on an unlimited or included basis.

Cloud platform administration. IMPACT retains administrative access to Client's Microsoft 365 or Google Workspace tenant for the purpose of delivering the included identity, security, and monitoring Services and to enable IMPACT to perform Client-requested work. The proactive oversight activities described in the Cloud Platform Management & Tenant Oversight service entry, including maintenance of the tenant security baseline and conditional access posture beyond the included multi-factor authentication Service, license count and subscription reconciliation, and monitoring of platform configuration drift, are not included under stabilIT Core. Client-requested work within the tenant, including Moves, Adds, or Changes, is drawn against the prepaid support retainer or billed as Out-of-Scope Services. Administrative authority over the tenant is allocated as set forth in Schedule F and the applicable Order.

After-hours posture. Managed detection and response is delivered in part through a third-party security operations center operating on a 24x7 basis. Outside IMPACT's business hours, monitoring, triage, containment, and initial response are performed by that provider using the automated and analyst-driven capabilities available under its platform, and that provider notifies IMPACT. IMPACT does not perform incident response, remediation, or recovery activity outside IMPACT's business hours under stabilIT Core. IMPACT's own remediation, containment, and recovery activity commences during IMPACT's next business hours unless after-hours coverage is expressly purchased on the applicable Order or authorized by Client as Out-of-Scope Services at IMPACT's then-current after-hours rates.

The third-party security operations center is a Third-Party Provider within the meaning of MSA Section 11. Its actions, capabilities, response times, containment measures, and outcomes are governed by the applicable third-party terms and Schedule E, are not warranted or guaranteed by IMPACT, and are subject to MSA Sections 11.3 and 11.4 and Cybersecurity Addendum Sections 13.4 and 13.5. IMPACT does not guarantee that any incident will be detected, contained, eradicated, or remediated, whether by IMPACT or by any Third-Party Provider.

Service levels. Service Level Targets applicable to stabilIT Core are the default Managed IT targets set forth in Schedule B Section 2.2 and the cybersecurity targets set forth in Schedule B Section 3. No plan-specific response target applies to stabilIT Core. All targets are Service Level Targets governed by Schedule B Section 1 and carry no service credit, refund, or other remedy.

Scoped and priced per Client, where purchased: Microsoft 365 and Google Workspace data backups.

Available for separate purchase: mobile device management for laptops, tablets, and mobile devices.

Billable when performed: file, folder, and disaster recovery restoration, where backup services have been purchased; backup testing, where backup services have been purchased; annual cybersecurity risk assessment; vendor liaison and coordination; and onsite support.

Not included: Client Success Manager; Strategic Business Reviews; technology alignment to industry and IMPACT standards; compliance program development; hardware procurement, sourcing, and specification; AI use policy and governance starter; the plan-specific response target under Schedule B Section 2.6; self-service password reset and account reminders; after-hours and weekend Emergency support; cloud platform management and tenant oversight; IT documentation portal; and end user training library access.

Not included, available as separately priced items: as set forth in the stabilIT Assured entry.

Conditions. Retainer-funded support applies to in-scope incidents affecting Managed Users and Managed Devices in compliance with the Required Standards in Schedule A or operating under an Approved Alternative. Support does not extend to Moves, Adds, and Changes, New to Environment device onboarding, Cascades, Projects, or Out-of-Scope Services, each as defined in the MSA and the Managed IT Services Addendum, except to the extent such work is drawn against the prepaid support retainer as set forth in the applicable Order. Onsite support is subject to Schedule C.

Requires: Managed IT Services Addendum; Cybersecurity Addendum.

Legacy Service Plans — Closed

IMPACT previously offered managed services under additional stabilIT Service Plan names, including stabilIT Basic, stabilIT Essentials, stabilIT Plus, stabilIT Premier, and stabilIT Ultimate (each a "Legacy Service Plan"). Legacy Service Plans are closed and not available for new Orders, plan changes, or renewals.

Scope under Legacy Orders. For any Order executed under a Legacy Service Plan and remaining in effect, the Services covered are those set forth in that executed Order and any Service Catalog version in effect as of that Order's Effective Date. Nothing in this Service Catalog, and no subsequent update to it, reduces, narrows, or excludes the scope of Services under a Legacy Order during its term, and the absence of a detailed inclusion list for a Legacy Service Plan in this section shall not be construed as excluding any Service from the scope of a Legacy Order.

Conflicts. Where a Legacy Order conflicts with this Service Catalog solely with respect to pricing, service quantities, or term, the Legacy Order controls until expiration, per Master Services Agreement Transition Addendum Section 4.

Renewal. Upon expiration of a Legacy Order, any continuation of Services requires a new Order under a Current Service Plan, per Master Services Agreement Transition Addendum Section 6.

stabilIT Basic — Closed
stabilIT Essentials — Closed
stabilIT Plus — Closed
stabilIT Premier — Closed
stabilIT Ultimate — Closed

References

IMPACT Master Services Agreement
This Catalog is intended to be referenced by URL and incorporated by reference into the MSA and applicable Orders.
In the event of any inconsistency, the MSA, applicable Addendums, and executed Orders shall control over this Service Catalog.

Prior Versions

12/29/2025

IMPACT Service Catalog