Common use of Remote Access Clause in Contracts

Remote Access. Remote access to the Coinbase network by authorized personnel is encrypted and requires multifactor authentication (MFA) for remote access, including X509 certificate and username/password login credentials. For production infrastructure access, use of VPN is also enforced. Coinbase’s network follows zero trust principles; any non-Coinbase devices that may access the network have no privileged access and must rely on strong identity controls to access Coinbase resources. Coinbase office networks are treated as untrusted by default. While WPA-PSK encryption is required to access office Wi-Fi, devices on this network are not automatically granted access to corporate or production systems. Users that wish to have corporate email on their mobile devices must enroll in Coinbase’s mobile device management (MDM) solution. Rooted devices are not permitted. Company-owned computers are managed and kept up-to-date with the latest operating system, antivirus, and productivity software updates. All hard drives are encrypted. Upon return and prior to reissuance of an authorized laptop, the laptop must be completely wiped.