For an Aplus franchise, what is included in the designated 'Information System'?

(a) Consistent with the foregoing, among other things, Franchisor reserves the right periodically to undertake technology initiatives, the purpose of which would be enhance the technology associated with the franchise system including, without limitation, enhanced internet capability, use of proprietary digital applications and enhanced support services. Although Franchisor cannot estimate the future costs of the computer system, technology, or required service or support, and although these costs might not be fully amortizable over the remaining term of this Agreement, Franchisee agrees to incur the costs of obtaining the computer hardware and software (the "Computer System") (or additions or modifications) and required service or support. Franchisor has no obligation to reimburse franchisee for any Computer System costs. As otherwise permitted in this Agreement, we may access the Computer System and retrieve all pertinent information relating to the operation of the APLUS Store business in areas

that we have the ability to control and/or remedy.

• (b) Notwithstanding the fact that franchisee must purchase, use, and maintain the Computer System consistent with our standards and specifications, franchisee will have sole and complete responsibility for: (1) the acquisition, operation, maintenance, updates and upgrading of the Computer System, including compliance with the standards that we periodically require; (2) the manner in which your Computer System interfaces with our computer system and those of other third parties; (3) the installation, maintenance and support of the Computer System, although Franchisor may from time to time require or recommend third parties to provide these functions; and (4) any and all consequences that may arise if the Computer System is not properly operated, maintained and upgraded, including but not limited to virus and spyware issues.
• (c) All of your Computer Systems must be compliant with all applicable laws, regulations, and commonly accepted industry standards, including without limitation those laws, regulations, and commonly accepted industry standards relating to privacy, data security, and the processing and protection of confidential personal information, including without limitation the Payment Card Industry Data Security Standards and all other standards applicable to electronic payments that may be published from time to time by payment card companies.

Source: Item 23 — RECEIPT (FDD pages 68–302)