About this article

This article explains how Cofactr handles the quality, sourcing, traceability, and regulatory clauses that customers commonly include in a purchase order, quality clause exhibit, or supplier questionnaire. It applies whether Cofactr is procuring, kitting, storing, or drop-shipping product on your behalf.

Each clause below is numbered CF-QC-### and organized into eight families (000 series through 800 series). For each clause you'll find:

• Summary (scope) — what the clause covers.

• Cofactr internal applicability — whether Cofactr applies this control to every order by default (Global), only when the order specifies it (Optional), or with an intermediate status such as Global when selected.

• Flow-down eligibility / handling — whether, and how, Cofactr passes this requirement to its own upstream suppliers. Global means Cofactr flows it to every supplier by default; Global when selected means Cofactr flows it once the order calls for it; Optional means flow-down is negotiated per supplier; NA means the obligation is Cofactr's own and there is nothing to flow down.

The full text of each clause — the actual commitment language Cofactr recommends and agrees to — follows the table.

Clause index

Full clause text

Roles: "Customer" means the party issuing the Order to Cofactr. "Cofactr" means Cofactr, Inc. and its affiliates, acting as Seller. "Order" means the Customer's purchase order, including attachments and any incorporated quality clauses. "Products" means the goods, materials, and services Cofactr delivers under the Order. "EEE" means electrical, electronic, and electromechanical. "OCM"/"OEM" mean original component/equipment manufacturer. "Authorized Distributor" means a distributor holding a current written franchise from the OCM/OEM for the specific Product. "COTS" means a commercial off-the-shelf catalog item not designed to a Customer specification.

000 — Framework

CF-QC-001 · Order of Precedence and Clause Applicability In the event of conflict among the documents comprising the Order, the following order of precedence governs: (a) applicable statutes and regulations, including flowdowns required by a United States Government prime contract; (b) the face of the Order; (c) Customer's quality clauses or exhibits incorporated into the Order; (d) Cofactr's Terms and Conditions of Sale; (e) these clauses; (f) specifications referenced on the Order; (g) drawings; (h) exhibits and attachments. Cofactr shall not resolve any apparent conflict, ambiguity, or omission unilaterally, and shall request written direction from Customer's designated representative before proceeding.

CF-QC-002 · Sub-Tier Flowdown Obligation Cofactr shall flow down to its own suppliers, in substance and without dilution, all requirements of the Order applicable to the work those suppliers perform, including any Customer or Government flowdowns identified on the Order. Cofactr shall maintain evidence of flowdown and shall furnish it to Customer on request. Flowdown to a Cofactr supplier does not relieve Cofactr of any obligation under the Order.

CF-QC-003 · Right of Access and Audit Cofactr shall grant Customer, Customer's own customer, and any regulatory or statutory authority the right of access, on reasonable advance notice and at no additional charge, to Cofactr facilities, processes, personnel, and records involved in performance of the Order. Access includes the right to conduct quality audits, source inspection, and cause-and-extent-of-condition investigations. Where the purpose of access is investigation of a suspected escape, flight-safety condition, or suspect counterfeit condition, Cofactr shall accommodate access within twenty-four (24) hours of request. This right of access is limited to the facilities, product, records, and personnel involved in performance of Customer's own Order. Cofactr operates a multi-tenant facility; access does not extend to another customer's product, program information, or records co-located at the same site.

CF-QC-004 · Records Retention Cofactr shall retain all records relating to the Order — including inspection and test records, certifications, traceability records, nonconformance and corrective action records, and process records — for not less than ten (10) years following final shipment, or for the life of the program where the Order so states, whichever is longer. Where the Order is placed under a United States Government prime contract, retention shall in no case be less than the period required by FAR 4.703. Records shall not be destroyed during any period in which Cofactr has been notified of a pending audit, investigation, claim, or proceeding. Records shall be legible, retrievable within five (5) business days of request, and furnished to Customer at no charge.

100 — Quality System and Organizational Controls

CF-QC-101 · Quality Management System Cofactr shall maintain throughout performance of the Order a quality management system certified to AS9120B (distributor QMS) and AS6081A (counterfeit avoidance for EEE parts). Cofactr's certifications are held directly and are not contingent on the certification status of any individual upstream supplier.

CF-QC-102 · Certification Status Change Notification Cofactr shall notify Customer's designated representative in writing within two (2) business days of any suspension, withdrawal, lapse, reduction in scope, or adverse finding affecting Cofactr's AS9120B or AS6081A certification. Cofactr shall identify in that notification all Product delivered to Customer during the period of the suspension or lapse.

CF-QC-103 · Calibrated Measuring and Test Equipment All inspection, test, and measurement Cofactr performs in acceptance of Product shall be performed using equipment controlled under Cofactr's documented calibration system, traceable to national or international measurement standards, at a test accuracy ratio of not less than 4:1. Calibration records shall be furnished to Customer on request.

CF-QC-104 · Personnel Training and Certification Cofactr shall maintain a documented training and qualification program covering all personnel performing receiving, handling, inspection, kitting, packaging, and quality functions, including initial qualification, periodic recertification for electrostatic discharge and moisture-sensitive device handling, and task-specific qualification for counterfeit-detection inspection. Individual training records are retained for the period specified in CF-QC-004 and are available for review under CF-QC-003.

CF-QC-105 · Foreign Object Debris Prevention Cofactr shall maintain a foreign object debris and damage (FOD) prevention program conforming to AS9146 or an equivalent standard, covering receiving, kitting, and pack-out areas. Cofactr shall deliver Product clean and free of FOD; FOD contamination is cause for rejection at Customer's option, at Cofactr's expense.

CF-QC-106 · Facility and Process-Site Change Notification Cofactr shall notify Customer's designated representative in writing not less than ninety (90) days in advance of any change in the location at which Product is stored, kitted, or processed by Cofactr, and of any sale, merger, or change of control affecting cf-ny-1 or cf-ca-1.

200 — Authenticity, Source of Supply, Prohibited Sources and Materials

CF-QC-201 · Approved Source of Supply Cofactr shall procure all Products delivered under the Order directly from the OCM or OEM, or through an unbroken chain of that manufacturer's Authorized Distributors. Procurement from independent distributors, brokers, or the open market is prohibited absent Customer's prior written authorization under CF-QC-203. Where a drawing or the Order designates a source-controlled part, Cofactr shall procure only from the manufacturer identified as an approved source on that drawing.

CF-QC-202 · Counterfeit Avoidance Program Cofactr shall operate a documented counterfeit parts avoidance, detection, mitigation, and disposition program conforming to AS5553 for EEE parts and AS6081 for EEE parts sourced through distribution, certified under Cofactr's own AS6081A accreditation. Where the Order is placed under a United States Government prime contract, the program satisfies DFARS 252.246-7007 and DFARS 252.246-7008. Cofactr shall not deliver counterfeit, suspect counterfeit, fraudulent, or misrepresented Product. Suspect counterfeit Product identified by Cofactr shall be quarantined and shall not be reintroduced to the supply chain absent Customer's written direction.

CF-QC-203 · Independent and Open-Market Procurement Controls Where Product conforming to CF-QC-201 is not obtainable from the authorized manufacturer channel, Cofactr shall not procure from an independent distributor, broker, or the open market without Customer's prior written authorization. Cofactr's request for authorization shall include: (a) documented evidence of authorized-channel unavailability; (b) commitment to test and inspect the delivered lot in accordance with AS6081 at a test level acceptable to Customer, performed by a laboratory acceptable to Customer; and (c) delivery of the complete test report with the shipment. Authorization, once granted, applies to the specific lot only.

CF-QC-204 · Part Substitution Prohibition Cofactr shall not substitute any part, material, process, revision, manufacturer, or manufacturing location for that specified on the Order without Customer's prior written approval. Cofactr shall notify Customer promptly upon becoming aware of any end-of-life, last-time-buy, obsolescence, allocation, or form, fit, or function condition affecting Product under the Order.

CF-QC-205 · Prohibited Sources and Country of Origin Cofactr represents that Products delivered under the Order do not originate from, and were not produced or acquired by, any organization, entity, or element of the Russian Federation or the People's Republic of China that is state-owned or state-controlled, where the Order states that this restriction applies. Cofactr shall furnish country-of-origin documentation for each lot delivered where the Order identifies a covered-nation or country-of-origin restriction. This representation is scoped to Products delivered under this Order.

CF-QC-206 · Prohibited and Restricted Materials Unless expressly permitted by the drawing or the Order, Cofactr shall not deliver Product containing pure tin or tin plating exceeding ninety-seven percent (97%) tin by weight; cadmium or cadmium plating; zinc plating; mercury or mercury-bearing compounds; or beryllium, without Customer's written exception. Selection by Customer of a part number that contains these materials shall constitute a written exception.

CF-QC-207 · GIDEP and ERAI Participation and Reporting Cofactr maintains participation in the Government-Industry Data Exchange Program (GIDEP) and in ERAI, monitors alerts and advisories applicable to Product it handles, and reports confirmed and suspected counterfeit occurrences to both programs. Cofactr will notify Customer promptly upon determining that Product delivered to Customer is, or contains a component that is, subject to a recall, alert, or authenticity concern.

CF-QC-208 · Prohibited Packaging Materials Cofactr shall not deliver Product in pink polyethylene or other amine-based antistatic packaging. Cofactr's own outbound packaging shall not use pink poly. Where Product is received from an upstream source in non-compliant media, Cofactr shall repackage into compliant media before shipment.

300 — Traceability and Deliverable Documentation

CF-QC-301 · Certificate of Conformance Cofactr shall furnish with each shipment a Certificate of Conformance, issued under Cofactr's AS9120B system, stating that the Product furnished conforms to all requirements of the Order. The certificate shall be dated, shall bear the signature and title of an authorized representative of Cofactr's quality function, and shall contain at minimum: Cofactr's full legal name and address; the Customer purchase order number, revision, and line number; the part number and revision as ordered; the original manufacturer's name and part number; quantity shipped; manufacturer lot number, batch number, or date code as applicable; serial numbers where applicable; expiration date where applicable; and a list of all closed or approved nonconformances applicable to the shipment. Statements qualified by "to the best of our knowledge" without supporting documentation are not used.

CF-QC-302 · Traceability to Original Manufacturer Cofactr shall maintain and furnish an unbroken documented chain of traceability from the delivered Product to the original manufacturer, established from the authorized distributor or OCM invoice and packaging documentation, the original unopened package markings, and Cofactr's own lot record created at receipt, carried forward through every subsequent split, kit, and shipment. COTS items are traceable to the original manufacturer only, unless the Order provides otherwise.

CF-QC-303 · Lot Segregation and Identification Cofactr shall segregate and separately identify each manufacturer lot within a shipment, including lots of the same part number. Each lot is individually bagged or containerized and labeled with part number, manufacturer, lot or batch number, date code, and quantity, from receiving through kit build and shipment.

CF-QC-304 · Pass-Through of Manufacturer Certifications and Test Data Cofactr shall furnish with each shipment, for each lot delivered, all manufacturer certifications and test data required by the Order and obtainable from the OCM or the authorized distribution channel, including material property test reports, material certifications, and acceptance test procedure data as applicable. Where documentation is not yet complete, Cofactr shall hold the shipment until the package is complete rather than ship with an incomplete certification package.

CF-QC-305 · End Item Data Package and As-Built Configuration For kit and configured-assembly deliverables, Cofactr shall furnish an End Item Data Package containing: Cofactr's Certificate of Conformance; certificates of conformance from each contributing supplier identifying supplier name, part number, revision, lot, and serial number as applicable; the as-built configuration, including a parts list identifying all part numbers, revisions, lot numbers, quantities, manufacturers, and life-limiting information; evidence of traceability to material lot for every line; and all nonconformances with evidence of Customer acceptance. Cofactr will obtain Customer's written approval for any deviation from the specified data package content.

CF-QC-306 · Electronic Submittal of Quality Data Cofactr shall transmit required quality data and documentation electronically in the format, naming convention, and channel specified by Customer, including submission through a Customer supplier portal, secure file transfer, or the Cofactr platform. Documentation subject to export control is transmitted only through approved encrypted channels and is not accessible by non-United-States persons absent authorization under CF-QC-701.

CF-QC-307 · Manufacturer Identification on Shipping Documents Where Cofactr is a distributor and not the manufacturer of the Product, Cofactr shall identify the manufacturer's name on the packing list, populated from Cofactr's part master and receiving records.

CF-QC-308 · CAGE on Shipping Documents Cofactr shall additionally identify the original manufacturer's Commercial and Government Entity (CAGE) code on the packing list and container, populated from Cofactr's part master.

400 — Material Condition, Handling, Storage, Age and Life

CF-QC-401 · Electrostatic Discharge Control Program Cofactr shall maintain an electrostatic discharge control program conforming to ANSI/ESD S20.20, covering all areas in which electrostatic-sensitive Product is handled, stored, or packaged, including documented personnel training, periodic recertification, and verification of grounding and workstation compliance.

CF-QC-402 · Electrostatic Discharge Packaging Cofactr shall package all electrostatic-sensitive Product in static-shielding or static-dissipative material, with the appropriate ESD sensitivity marking applied to the exterior of the unit package as applicable to the part type. Discrete EEE parts are individually isolated and are not delivered in bulk absent Customer's written authorization. Customer selection of a part number that specifies bulk packaging shall constitute written authorization.

CF-QC-403 · Moisture Sensitivity and Dry Pack Cofactr shall identify the moisture sensitivity level of moisture-sensitive Product in accordance with J-STD-020 and shall package, label, and deliver it in accordance with J-STD-033, using dry storage cabinets and bake capability where floor life has been exceeded. Dry-pack shipments include a moisture barrier bag sealed with desiccant and a current humidity indicator card, labeled with moisture sensitivity level, bag seal date, and applicable floor life.

CF-QC-404 · Date Code Age Unless otherwise specified on the Order, EEE parts delivered under the Order shall bear an original manufacturer date code no older than twenty-four (24) months at the time of shipment, or as specified on the Order, whichever is more stringent. Date code is recorded on the Certificate of Conformance and enforced at allocation and pick, so a lot exceeding the applicable limit cannot be reserved against Customer's demand.

CF-QC-405 · Shelf Life and Remaining Life on Delivery For temperature-controlled, perishable, and age-sensitive material, Cofactr shall furnish with each lot the date of manufacture, lot or batch number, total shelf life, expiration date, and required storage temperature. Product shall have not less than eighty percent (80%) of its total shelf life remaining upon receipt, or the percentage stated on the Order, whichever is greater. Cofactr operates first-expired-first-out rotation and blocks pick of any lot that would fail the remaining-life threshold at the projected delivery date.

CF-QC-406 · Storage Environment and Handling Cofactr shall store and handle Product in accordance with GEIA-STD-0003 Level 1 requirements, including controlled temperature and humidity, electrostatic discharge control, segregation of nonconforming and quarantined material, and controlled dry storage for moisture-sensitive devices. Storage conditions are monitored and recorded.

CF-QC-407 · Temperature-Controlled Handling and Transport Where Product is temperature-controlled, Cofactr shall furnish packaging qualified to maintain the required temperature range in transit and shall include temperature monitoring equipment sufficient to demonstrate that the required range was maintained, with monitoring data delivered with the shipment.

CF-QC-408 · Solderability Shelf Life and Terminal Finish Condition Product with solderable terminations shall be delivered with not less than eighty percent (80%) of its applicable solderability shelf life remaining — three (3) years from date of manufacture for immersion and electroplated finishes, six (6) months for hot air solder leveled finishes, unless the Order states otherwise. Terminations are free of oxidation, contamination, and mechanical damage.

CF-QC-409 · Cleanliness Unless otherwise specified on the drawing or the Order, Cofactr shall deliver Product free of coolant, oils, process residue, temporary marking, and debris, inspected at receipt and again at pack-out.

CF-QC-410 · MIL-PRF-81705 Type I Packaging Cofactr shall package all electrostatic-sensitive Product in static-shielding material conforming to MIL-PRF-81705 Type I or equivalent, applying the correct sensitivity marking. Where Product is received in non-compliant media, Cofactr repackages before release.

500 — Packaging, Marking, Shipping, Delivery

CF-QC-501 · Packaging and Preservation Cofactr shall package and preserve Product so as to prevent deterioration, contamination, and damage in transit, appropriate to the size, weight, fragility, and sensitivity of the Product. Product is individually bagged and tagged, with the full lot bagged or boxed and identified. Silver-plated Product is packaged with anti-tarnish material; reactive or pyrophoric chemicals are packaged in airtight or inert-gas containers. Corrugated containers are sized and rated to withstand transit, taped closed, and do not exceed fifty (50) pounds gross weight without exterior weight marking. Palletized shipments use standard 48" x 40" four-way-entry pallets without overhang.

CF-QC-502 · Labeling and Marking Cofactr shall identify every package with the Customer purchase order number and line number, part number, revision, manufacturer, lot or batch number, date code, quantity, and serial number where applicable. Expiration date, storage temperature, moisture sensitivity level, and electrostatic sensitivity marking are applied where applicable.

CF-QC-503 · Carrier, Routing, and Consignment Instructions Cofactr shall ship by the carrier, service level, and routing specified by Customer, shall enroll Customer's designated address in carrier notification events where Customer so directs, and shall furnish advance shipping notice in the specified format. Where the Order is a rated order under the Defense Priorities and Allocations System, or Customer's requirements so provide, Cofactr shall consign shipping documents to the applicable military department in care of Customer and shall reference the prime contract number where furnished.

CF-QC-504 · On-Time Delivery and Delay Notification Cofactr shall meet the delivery dates stated on the Order. Upon becoming aware of any circumstance likely to cause a delay, Cofactr shall immediately notify Customer in writing, stating the cause of the delay, the affected part numbers and quantities, and the revised delivery date.

CF-QC-505 · Customer-Owned and Consigned Material Control Cofactr shall identify, handle, store, and protect Customer-owned, consigned, and Customer-furnished material against damage, deterioration, loss, and unauthorized use, shall maintain it segregated and traceable to Customer, and shall maintain all associated documentation received with it. Upon receipt Cofactr verifies quantity and condition and notifies Customer of receipt and condition. Where furnished material is found unsuitable for use, Cofactr notifies Customer immediately and segregates it pending Customer disposition.

600 — Nonconformance, Change Control, Corrective Action

CF-QC-601 · Nonconforming Material Control Cofactr shall not ship nonconforming Product without Customer's prior written authorization. Cofactr's receiving inspection and quarantine process is designed to identify and hold nonconforming Product before it can be allocated or shipped. Where a nonconformance is identified before shipment, Cofactr shall submit a written disposition request identifying the part number, lot, quantity affected, and the nature of the nonconformance.

CF-QC-602 · Escape and Notification of Escapement Where Cofactr determines or suspects that Product already delivered is nonconforming, is suspect counterfeit, or contains an undisclosed condition affecting conformance, Cofactr shall notify Customer's designated representative in writing within twenty-four (24) hours where the condition affects flight safety, a critical safety item, or authenticity, and within three (3) business days in all other cases.

CF-QC-603 · Material Review Authority Limitation Cofactr has no authority to disposition nonconforming Product as use-as-is or repair for Product designed to a Customer specification, and shall not perform unauthorized repair without Customer's prior written consent. Nonconforming Customer-designed Product is referred to Customer for disposition. This clause does not apply to COTS Product.

CF-QC-604 · Change and Discontinuance Notification Cofactr shall not incorporate any change to the source, manufacturing location, or packaging of Product affecting the Order without prior written approval from Customer's designated representative, where the change is non-interchangeable or affects form, fit, or function. Cofactr monitors OCM product change notices, end-of-life notices, and lifecycle status feeds across its part master, and notifies Customer promptly of any last-time-buy, allocation, or extended-lead-time condition it becomes aware of.

CF-QC-605 · Corrective Action Response Upon receipt of a Customer corrective action request, Cofactr shall furnish an initial response within three (3) business days acknowledging receipt and stating containment actions taken, and a complete corrective action plan within ten (10) working days addressing root cause, corrective action, preventive action, and effectiveness verification method.

CF-QC-606 · First Article Inspection Where the Order is for Customer-designed or build-to-print product, Cofactr shall perform or flow to its fabricator a First Article Inspection in accordance with AS9102 and shall furnish the completed First Article Inspection Report with the Product on which it was performed.

700 — Regulatory and Government Flowdowns

CF-QC-701 · Export Control Cofactr shall comply with all applicable United States export control laws, including the International Traffic in Arms Regulations (22 CFR 120–130) and the Export Administration Regulations (15 CFR 730–774). Cofactr shall not export, re-export, retransfer, or otherwise provide access to any technical data, defense article, or controlled technology furnished by or on behalf of Customer, and shall not permit access by any person who is not a United States person as defined at 22 CFR 120.62, without Customer's prior written authorization and any required United States Government authorization.

CF-QC-702 · Restricted and Denied Party Screening Cofactr represents and warrants that neither Cofactr nor any of its principals is debarred, suspended, or proposed for debarment, or identified in the exclusions maintained in the System for Award Management, the Specially Designated Nationals and Blocked Persons List, the Denied Persons List, the Entity List, the Unverified List, or the DDTC Debarred List. Cofactr shall notify Customer in writing within one (1) business day of any change in the accuracy of this representation.

CF-QC-703 · Section 889 Covered Telecommunications Cofactr certifies that it does not use any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology, including equipment or services produced by Huawei Technologies Company, ZTE Corporation, Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, or Dahua Technology Company, or any subsidiary or affiliate of any of them, in the equipment, systems, and services Cofactr uses in performance of the Order. Where Cofactr identifies covered telecommunications equipment or services during performance, Cofactr shall notify Customer within one (1) business day of discovery and shall furnish a mitigation plan within ten (10) business days.

CF-QC-704 · Covered Application Prohibition Cofactr shall not use, or permit the use of, TikTok or any other application or service developed or provided by ByteDance Ltd. or any entity owned or controlled by ByteDance Ltd. on any information technology used in performance of the Order, including employee-owned devices used for work under the Order.

CF-QC-705 · Defense Priorities and Allocations System Rated Orders Where the Order bears a Defense Priorities and Allocations System priority rating, Cofactr shall comply with all provisions of 15 CFR part 700, including acceptance, scheduling to meet the delivery requirement, and extending the rating to Cofactr's own supplier orders for items needed to fill it. Cofactr shall acknowledge acceptance or rejection in writing within the period prescribed by 15 CFR 700.13.

CF-QC-706 · Domestic and Designated-Country Source Restrictions Where the Order specifically invokes 48 CFR 25.003 or DFARS 252.225-7008/-7009 and the drawing designates a qualifying source, Cofactr shall source alloys, metals, and materials furnished under the Order from the United States or a designated country as defined therein, and shall not source from any other origin absent Customer's prior written approval.

CF-QC-707 · Material Declarations Cofactr shall furnish, for each part number delivered, declarations of compliance as required by the Order, including RoHS status, REACH substances of very high concern content, conflict minerals sourcing information, and California Proposition 65 listed substance content, sourced from OCM data feeds and compliance databases held in Cofactr's part master. Response completeness is dependent on OCM disclosure for the specific part.

CF-QC-708 · Supplier Code of Conduct Cofactr shall comply with the Responsible Business Alliance Code of Conduct and the Trafficking Victims Protection Act, and shall complete the Responsible Business Alliance Self-Assessment Questionnaire on request.

CF-QC-709 · Customs, Duties, and Origin Documentation Cofactr shall furnish complete and accurate customs and shipping documentation for all shipments, including commercial invoice, packing list, Harmonized Tariff Schedule classification, and country of origin, and shall furnish country-of-origin certifications, and USMCA certifications where applicable and supportable, on Customer's request. Cofactr shall not make an origin claim it cannot substantiate from supplier documentation.

800 — Information Security, IP, Confidentiality, Publicity

CF-QC-801 · Confidentiality and Proprietary Information Information furnished to Cofactr by or on behalf of Customer in connection with the Order, including drawings, specifications, part numbers, and program identity, is the proprietary and confidential information of Customer. Cofactr shall use it solely to perform the Order, shall not disclose it to any third party other than a Cofactr supplier bound by equivalent written obligations and with a need to know, and shall return or destroy it on request or upon completion of the Order.

CF-QC-802 · Information Security and Controlled Unclassified Information Where Cofactr receives, stores, processes, or transmits controlled unclassified information or covered defense information in performance of a specific Order, Cofactr shall implement the security requirements of NIST SP 800-171 and comply with DFARS 252.204-7012 as applicable to that Order.

CF-QC-803 · Publicity and Public Release Restriction Cofactr shall not disseminate, publish, or publicly release any information developed under the Order, and shall not reference Customer, the Order, or the program in any public statement, press release, case study, or publication, without Customer's prior written approval or if expressly permitted under a separate agreement between Customer and Cofactr.

CF-QC-804 · Cyber Incident Reporting Cofactr shall report to Customer any cyber incident, unauthorized access, or data breach affecting Cofactr's information systems that may reasonably have affected Customer information or the performance of the Order, within seventy-two (72) hours of discovery. Where DFARS 252.204-7012 applies to the specific Order, Cofactr shall additionally report within twenty-four (24) hours as required by that clause and shall furnish Customer the incident report number.