Electronic Banking Terms and Conditions Agreement


Electronic Banking


This Agreement describes your rights and obligations as a user of the Electronic Banking Service (the “Service”). It also describes the rights and obligations of First Foundation Bank. Please read this Agreement carefully. As an authorized account holder, you must abide by the terms and conditions of this Agreement, and those provided to you at account opening, in order to use this Service. This Agreement supplements, and does not supersede, the Terms and Conditions governing your accounts with First Foundation Bank, and any other agreements you may have with us.

Customer Disclosure and Agreement to Receive Electronic Communications

Federal Law requires that we obtain your consent before providing disclosures electronically. By selecting the "I Accept" button the first time you login to Electronic Banking, you are (1) acknowledging your receipt of the information listed below, (2) agreeing that any contract you enter into with First Foundation Bank for the provision of certain Electronic Banking Services, may be in electronic form, and (3) agreeing that certain information that may be delivered in connection with the Service may also be in electronic form.

You are also acknowledging receipt of the following information and agree that:

• We may provide you with this Agreement and any revisions and amendments thereto in electronic form, and that, if you choose to accept the Agreement, you are consenting to enter into and are entering into an agreement electronically that will govern all future transactions you conduct using the Service.
• We may provide you revisions and amendments to the Agreement and such other information, including but not limited to information under Regulation E and under other applicable banking or financial services laws or regulations in connection with the Service, electronically as a part of the Agreement or otherwise as a part of the Service. While you may print and retain a copy of the Agreement or any information provided to you in relation to the Service, we only provide these documents electronically.
• You have a right at any time to withdraw, without service charges, your consent to receive information electronically. However, because the Agreement and the information are provided only in electronic format, your withdrawal of consent will terminate the Service.
• If you wish to withdraw consent to receive information electronically, to terminate the Service, or to update your information such as a change of address, or email address, you may call First Foundation Bank (877) 763-0244, or write a letter and send it to:

First Foundation Bank
Attention: Electronic Banking Department
3560 Kraft Road
Naples, FL 34105

• You are able to access information that is provided through the Service via the Internet
• If at any time you suspect unusual activity may have occurred with your sign on credentials, please contact us immediately at (877) 763-0244 or email ebanking@ffibank.com.
• If we suspect unusual activity may have occurred with your sign on credentials or account activity, we may contact you by telephone or email to verify the legitimacy of the suspected activity.

Definitions

The following definitions apply in this Agreement.
"Electronic Banking" is the Internet-based service providing access to your account(s) under the terms set forth in this Electronic Banking Terms and Conditions Agreement
"Online Account" is a First Foundation Bank account from which you will be conducting transactions using a Service.
"Business Day" refers to Monday through Friday, excluding holidays as determined by First Foundation Bank. All Electronic Banking transaction requests received after 7:00 p.m. EST, or on a non-Business Day, will be processed immediately, but will not appear in the electronic history until the following Business Day.
"Password" is a series of numbers and/or letters that you select after the initial sign-on that establishes your connection to the Service. You will then choose your password in the First Foundation Bank initial application process.
"Time of day" references are to Eastern Standard Time.
“Token” is a small security device or smart-phone application that provides an extra level of multi-factor authentication (MFA) to authorize access to a network service.
"We," "us" "our" or "First Foundation Bank" refer to First Foundation Bank, which offers the Service provided under this Agreement and holds the accounts accessed by the Service.
“You” and “your” means you, the individual(s) who is identified on the account as the owner or authorized signer as the account holder on the account(s).

Access to Services

First Foundation Bank will provide online instructions describing how to use the Electronic Banking Service. To gain access to this Service you will need the bank issued user ID and password.

Hours of Operation

The Service is generally available 24 hours-a-day, 7 days a week, except during special maintenance and upgrade periods, which routinely are scheduled between 12:00 a.m. and 5:00 a.m.

Use of Your Security Password and/or Token

The safety of our customers' accounts and account information is of paramount importance to First Foundation Bank. We go through great lengths to protect confidentiality and the security of your account, and urge you to do the same. You agree not to allow anyone to gain access to the Service or to let anyone know your Password and/or Token used with the Service. You agree to assume responsibility for all transactions initiated through the Service with your User ID, up to the limits allowed by applicable law. While First Foundation Bank continues to provide our customers with the level of online security we believe necessary and appropriate, customers who share their User IDs and Passwords and/or Tokens are giving up the full benefit of our security measures and legal protections to which they may be entitled. No First Foundation Bank representative will ever call and ask for your Password and/or Token pass code.

If Your Password and/or Token Has Been Lost or Stolen

If your Password and/or Token has been lost or stolen, call First Foundation Bank immediately at (877)763-0244, between 8:00 a.m. and 5:00 p.m., Monday through Friday. Business account holders will assume complete liability for all fraudulent transactions. Telephoning First Foundation Bank is the best way of minimizing your losses. You may also restore the security of your Service by immediately changing your Password.

Consumer Accounts

a. Access Devices and Passwords

If you believe your Password and/or Token has been lost or stolen and you notify us within two (2) Business Days after you learn of the loss or theft, you can lose no more than $50.00 if someone uses your Password and/or Token to conduct unauthorized electronic fund transfers without your permission. If you do NOT notify us within two (2) business days after you learn of the loss or theft of your Password and/or Token, and we can prove we could have stopped someone from using your Password and/or Token to conduct unauthorized electronic fund transfers without your permission if you had told us, you could lose as much as $500.00.
Also, if your statement shows transfers that you did not make, including those made by card, code or other means, tell us at once. If you do not tell us within 60 days after the statement was mailed to you, you may not get back any money you lost after the 60 days if we can prove that we could have stopped someone from taking the money if you had told us in time. If a good reason (such as a long trip or a hospital stay) kept you from telling us, we will extend the time periods.

b. Consumer Protections Provided For Electronic Fund Transfers Under Regulation E

To the extent a transaction is an electronic fund transfer from a personal account, Regulation E and the federal Electronic Fund Transfer Act afford protections only to individual consumers which do not apply to business/commercial organizations. Any protection from fraudulent ACH or wire transactions in your accounts would be addressed in our Your Deposit Account Terms and Conditions Agreement and/or state laws. By far the best protection against such fraud is careful attention to safe computing practices, use of dual control features and other practices such as reviewing daily transactions in the account. According to the FDIC law, regulations, and related acts 6500 (consumer protection) Part 205 (electronic fund transfers) Sections 1-18, the primary objective of Regulation E is to protect individual consumers engaging in electronic fund transfers (EFT). Regulation E, under the Electronic Fund Transfer Act, provides a framework that establishes the rights, liabilities, and responsibilities of consumers participating in EFT such as ATM transfers, bill payment services, point-of-sale transfers in stores, and preauthorized transfers including direct deposit and Social Security payments. Regulation E covers an individual consumer who authorizes a financial institution to electronically transfer funds to debit or credit his/her account.
Under Regulation E, a consumer is not responsible for any unauthorized EFT involving the consumer’s account only if they have complied with the disclosed requirements, including reporting time of the unauthorized transfer, and other conditions are met by the consumer (see 205.7b(1)(2)(3)). If a consumer abides by these timelines and reporting guidelines, the consumer will not be held responsible for unauthorized transfers.

c. If Your Statement Shows Transfers That You Did Not Make

If your statement shows transfers that you did not make, notify First Foundation Bank immediately at (877) 763-0244, email ebanking@ffibank.com or write a letter and send it to:
First Foundation Bank
Attention: Account Servicing
3560 Kraft Road
Naples, FL 34105
If you do not notify First Foundation Bank within sixty (60) days after the statement was mailed to you, you may not recover any money lost after the sixty (60) days which would not have been lost if First Foundation Bank had been notified in time.

d. Errors and Questions

In case of errors or questions regarding an Electronic Banking transaction, you may call First Foundation Bank at (877) 763-0244, email ebanking@ffibank.com or write a letter and send it to:
First Foundation Bank
Attention: Electronic Banking Department
3560 Kraft Road
Naples, FL 34105
We must hear from you at the specified telephone number or address no later than sixty (60) calendar days after we sent you the first statement on which the problem or error appeared. We will need:
• Your name and account number
• A description of the error or the transfer in question, and an explanation concerning why you believe it is an error or need more information
• The dollar amount of the suspected error
• The date on which it occurred
If the report is made orally, we may require that you send the complaint or question in writing within ten (10) Business Days from your initial contact. We will notify you with the results of the investigation within ten (10) Business Days after you contact us and will correct any error promptly. If more time is needed, however, we may, at our sole discretion, take up to forty-five (45) calendar days to investigate a complaint or question. If this occurs, we will credit your account within ten (10) Business Days for the amount you think is in error. This will allow you to use the money during the time it takes us to complete our investigation. If your complaint or question is not received in writing within ten (10) Business Days from your original contact, we may not credit your account until the investigation is completed.
If your notice of error concerns a transaction that occurred during the first thirty (30) days after the first deposit to the account was made, the applicable time periods are twenty (20) Business Days in place of ten (10) Business Days and ninety (90) calendar days in place of forty-five (45) calendar days.
If we determined that no error occurred, we will send you a written notice within three (3) Business Days. You may request copies of the documents that were used in the investigation.
You agree that First Foundation Bank may respond to you by email with regard to any claim of unauthorized electronic fund transfer related to the Service. Any such electronic mail sent to you by First Foundation Bank shall be considered received within three (3) Business Days of the date sent by First Foundation Bank, regardless of whether or not you sign on to the Service within that time frame.

e. Online Bill Payments

With respect to any bill payments made using Online Bill Pay, if we have reasonable proof, within our sole discretion, that the Payee has received your bill payment, we will not credit your account, it being understood that we are not responsible for any Payee's failure to credit your payment promptly upon receipt. We will make reasonable efforts to work with the Payee to resolve the issue on your behalf. In our investigation of any such bill payment transactions, we will request from the Payee a refund of any interest and/or fees which you may have been wrongly assessed, provided that we will have no obligation to further pursue such request if the Payee denies such request. You will be notified of the final resolution.

Mobile Devices

First Foundation Bank does not guarantee that your Mobile Device service plan will be compatible with our Electronic Banking service. You are responsible for understanding the operation and maintenance of your Mobile Device. First Foundation Bank is not responsible for any errors or problems related to your Mobile Device, or mobile internet access. Nor are we responsible for any fees assessed by your telephone company, internet service provider, or any other outside party. You agree that only your mobile service provider is responsible for its products and services.

Mobile Devices with internet capabilities are susceptible to viruses. First Foundation Bank provides layered security measures including security tokens which reside on a customer’s Mobile Device. Customers are responsible for making sure that the Mobile Devices they are using to access First Foundation Bank’s Electronic Banking is protected from and free of viruses, worms, Trojan horses, or other similar harmful components (collectively, referred to as “viruses”), which could result in damage to programs, files and/or your device could result in information being intercepted by a third party. First Foundation Bank will not be responsible or liable for any indirect, incidental, special or consequential damages that may result from such harmful components being present on a Mobile Device, nor will First Foundation Bank be responsible or liable if sensitive information accessed via our Electronic Banking service is intercepted by a third party due to any of the above named “viruses” residing or being contracted by the customer’s Mobile Device at any point or from any source.

You agree to take the following precautions to ensure the safety, security and integrity of your account and transactions when using First Foundation Bank’s Electronic Banking from a Mobile Device.

• You agree not to leave your Mobile Device unattended while logged into Electronic Banking on a Mobile Device and to log off immediately at the completion of each access.
• You agree to enable access password protection on your Mobile Device.
• You agree not to use a "jail broken" device to access the Bank's Electronic Banking.
• You agree to notify us if your Mobile Device which contains a bank token is lost or stolen.

Banking Transactions with Electronic Banking

In addition to viewing account information, you may use Electronic Banking to conduct the following transactions:

• Transfer funds among your linked checking, savings, and money market accounts as well as make payments to your loan and line of credit accounts. NOTE: Because regulations require First Foundation Bank to limit pre-authorized transfers (including Electronic Banking transfers), the following limitations apply:
Statement Savings and Money Market Accounts: You are limited to six (6) transfers to another account by means of pre-authorized, automatic transfer, telephone, electronic banking or mobile banking. Of these six (6), transfers may be by check, draft, debit card or similar order made payable to third parties. There is a fee of $10.00 per excess transfer per statement cycle; excludes in person and ATM withdrawals.
• Bill Pay users can send payments to any U.S. address. Users establish and manage payees in Electronic Banking. Once the payee is established, the user can schedule payments to that payee. Users can schedule one-time payments and recurring payments, manage their payments, and have access to their bill pay history. Payments established through Electronic Banking Bill Pay are processed twice a day: 1:00 p.m. and 2:00 a.m. The Bill Pay service is based on a processing schedule, not a due-date schedule. This means during a payment setup, users should enter the day on which the payment is to be processed, not the day on which the payment is due. An estimated payment arrival date will be displayed. This is the date on which your payment is estimated to arrive to your payee. This is based on the processing date entered and the delivery method of the payment. Two methods of payment delivery are available through Electronic Banking Bill Pay: Electronic and Check. During the payee setup process, the payee profile will reflect if the payment can be sent electronically or by check.
Electronic - If the payee is included on the electronic payee database, all payments sent to the payee will be electronic. Users should allow at the minimum two (2) or three (3) business days for electronic payments to reach the payee.
Check - If the payee is not registered as an electronic payee, your payment will be made by check and mailed via standard delivery by the U.S. Postal Service. The check is drawn on your account and made payable to the payee. The User’s account name and address is listed as the remitter on the check. Checks are created and mailed from Oklahoma City, Oklahoma within 24 hours of receiving payment instructions. Users should allow at the minimum seven (7) business days for check to reach the payee.
• Bank-to-Bank Transfers may be performed within Electronic Banking. You may separately enroll for the Bank-to-Bank Transfer service (“Service”). This Service allows you to transfer funds between your linked deposit accounts at First Foundation Bank and certain deposit accounts at other financial institutions. An inbound transfer moves funds into an account at First Foundation Bank. An outbound transfer moves funds from an account at First Foundation Bank to an account outside of First Foundation Bank. You will need to enroll each of your non-First Foundation Bank accounts that you wish to use for this Service. You agree that you will only attempt to enroll accounts for which you have the authority to transfer funds. All accounts requested to be used as part of this Service will be verified in accordance with First Foundation Bank procedures. The verification process must be completed by you prior to using the Service. You will have 7 days after enrolling an account to complete the verification process. Verification instructions are displayed to you during the enrollment process Funds requested to be transferred will be debited/credited from/to your First Foundation Bank account the business day following the day you initiate the transfer, provided you have met the bank’s cutoff time for submitting Bank-to-Bank transfers. In the case of a future dated or recurring transfer, these time limits will be the business day following the scheduled date of the transfer. The cutoff time for initiating transfers is 4:00 p.m. Funds requested to be transferred will be debited/credited to the non-First Foundation Bank account according to the receiving bank’s availability and transaction processing schedule. Request for immediate transfers of funds cannot be cancelled. Future dated and recurring transfers can be canceled unless the transfer status is In Process, Pending, or Processed. Otherwise, you cannot cancel these transfers. There currently are no fees for the Service. Fees are subject to change. Transfers are subject to the following limits unless otherwise agreed upon by you and First Foundation Bank:

o Ten (10) transfers per day not to exceed a total of $5,000.00

The above limit applies to the total of all Bank-to-Bank transfers for all accounts enrolled in the Service. We may change your dollar limits and transfer limits at any time.
Bill Pay and Bank-to-Bank transfers: these services are automatically turned on for every electronic banking customer. If you wish to NOT to have access to these services, contact us immediately at (877) 763-0244 or email ebanking@ffibank.com. New services may be introduced for Electronic Banking from time to time. First Foundation Bank will notify you of the existence of these new services. By using these services when they become available, you agree to be bound by the rules that will be made available to you concerning these services.

Requesting Paper Copies

We will not send you a paper copy of any Communication from us, unless you request it or we otherwise deem it appropriate to do so. You can obtain a paper copy of an electronic Communication by printing it yourself or by requesting that we mail you a paper copy, provided that such request is made no later than seven years after we first provided the electronic Communication to you. To request a paper copy, contact us by telephone at (239) 348-8000 or toll free at (877) 763-0244. We may charge you a reasonable service charge for the delivery of paper copies of any Communication provided to you electronically pursuant to your authorization. We reserve the right, but assume no obligation, to provide a paper (instead of electronic) copy of any Communication that you have authorized us to provide electronically.

Statements

You will continue to receive your regular account statement monthly, via paper and/or electronically depending on the options you request through our Electronic Banking service.

Limit of First Foundation Bank’s Responsibility

First Foundation Bank agrees to make reasonable efforts to ensure full performance of Electronic Banking. First Foundation Bank will be responsible for acting only on those instructions sent through Electronic Banking that are actually received, and cannot assume responsibility for circumstances over which the bank has no direct control. This includes but not limited to, the failure or malfunctions in communication facilities, which may affect the accuracy or timeliness of messages you send. Any information you receive from First Foundation Bank is believed to be reliable. However, it can only be provided on a best-efforts basis for your convenience and is not guaranteed. First Foundation Bank is not liable for any deficiencies in the accuracy, completeness, availability, or timeliness of such information or for any investment or other decision made using this information. First Foundation Bank is not responsible for any fees incurred for Internet access, or for any computer virus or related problems that may be attributable to services provided by any Internet access service provider. You are responsible for obtaining, installing, maintaining, and operating all computer hardware and software necessary for performing Electronic Banking. First Foundation Bank will not be responsible for any errors or failures from the malfunction or failure of your hardware or software. The limit of First Foundation Bank's liability shall be as expressly set forth herein. Under no circumstances will First Foundation Bank be liable in contract, tort, or otherwise for any special, incidental, or consequential damages, whether or not foreseeable. By consenting to use the Service, you agree to waive any and all right to any of the aforesaid, and you acknowledge that the limit of your remedy is as otherwise expressly set forth herein.

First Foundation Bank's Responsibility

First Foundation Bank will be responsible for your actual losses if they were directly caused by our failure to:
• Complete an Electronic Funds Transfer as properly requested
• Cancel an Electronic Funds Transfer as properly requested.

However, we will not be responsible for your losses if:
• Through no fault of First Foundation Bank, you do not have enough money in your account to make the transfer.
• Through no fault of First Foundation Bank, the transaction would have caused you to exceed your available credit.
• Circumstances beyond our control (e.g., fire, flood, power outage, mail delivery delays, equipment or technical failure or breakdown) prevent the transfer, despite reasonable precautions that we have taken.
• There is a hold on your account, or if access to your account is blocked in accordance with banking policy.
• Your funds are subject to legal process or other encumbrance restricting the transfer.
• Your transfer authorization terminates by operation of law.
• You believe someone has accessed your accounts without your permission and you fail to notify First Foundation Bank immediately.
• We have received incomplete or inaccurate information from you or a third party involving the account or transfer.
• We have a reasonable basis for believing that unauthorized use of your Password and/or Token or account has occurred or may be occurring, or if you default under this Agreement, the Deposit Account Terms and Conditions Agreement, a credit agreement, or any other agreement with us, or if we or you terminate this Agreement.
There may be other exceptions stated in this agreement and in other agreements with you. In no event shall we be liable for damages in excess of your actual loss due to our failure to complete a transfer, and we will not be liable for any incidental or consequential damages. If any of the circumstances listed above shall occur, we shall assist you with reasonable efforts in taking appropriate corrective action to reprocess the transactions that may not have been completed or to correct incorrect transactions that have been processed.

Limitation of Actions

Any claim, action or proceeding by You to enforce the terms of this Agreement or to recover for any Service-related loss must be commenced within one (1) year from the Date that the event giving rise to the claim, action or proceeding first occurs. You agree to cooperate with Us in any loss recovery efforts we undertake to reduce any loss or liability that arises in connection with your Services. IN NO EVENT SHALL WE BE LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES, INCLUDING LOST PROFITS (EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF THESE DAMAGES) CAUSED BY THE SERVICES OR THE USE OF THE SERVICES, OR ARISING IN ANY WAY OUT OF THE INSTALLATION, USE, OR MAINTENANCE OF YOUR PERSONAL COMPUTER, SOFTWARE, OR ANY INTERNET ACCESS SERVICES.

Electronic Mail (Email)

If you send First Foundation Bank an electronic mail message through the Service, First Foundation Bank will be deemed to have received it on the following Business Day. Emails will be answered within a reasonable timeframe. You should not rely on electronic mail if you need to communicate with First Foundation Bank immediately (e.g., if you need to report an unauthorized transaction from one of your accounts, or if you need to stop a payment that is scheduled to occur). You agree that First Foundation Bank may respond to you by electronic mail with regard to any matter related to the Service, including responding to any claim of unauthorized electronic funds transfer that you make. Any such electronic mail sent to you by First Foundation Bank shall be considered received within three (3) days of the date sent by First Foundation Bank, regardless of whether or not you sign on to the Service within that time frame.

Other Agreements

In addition to this Agreement, you and First Foundation Bank agree to be bound by and comply with the requirements of the agreements applicable to each of your Online Accounts. Your use of the Electronic Banking service is your acknowledgment that you have received these agreements and intend to be bound by them. You should review other disclosures received by you when you open your accounts at First Foundation Bank, including the charges that may be imposed for electronic funds transfers or the right to make transfers listed in the fee schedules accompanying those disclosures and the fee schedule at the end of this Agreement. We will automatically deduct any fees related to this Service from your account each month. All terms and conditions of the disclosures provided to you at account opening, including but not limited to, the Truth in Savings, Electronic Fund Transfer Disclosure. Your Deposit Account Terms and Conditions Agreement apply to this Service.

Modifications to this Agreement

First Foundation Bank may modify the terms and conditions applicable to the Service from time to time upon mailing or delivering a notice of the modifications to you at the address shown on our account records, and the revised terms and conditions shall be effective at the earliest date allowed by applicable law. We may send any notice to you via electronic mail and you will have been deemed to have received it three (3) days after it is sent. We reserve the right to terminate this Agreement and your use of the Service in whole or in part at any time without prior notice.

Disclosure of Information to Third Parties / Privacy Policy

A copy of First Foundation Bank's Consumer Privacy Statement is available upon request at any of our branches, or can be mailed to you upon request by calling First Foundation Bank at (877) 763-0244, or writing a letter and sending it to:

First Foundation Bank
Attention: Compliance Officer
3560 Kraft Road
Naples, FL 34105

You can also access our Policy online by clicking on the Privacy Policy link on the First Foundation Bank Website: www.firstfloridaintegritybank.com

Inactivity / Termination

You are responsible for complying with all the terms of this Agreement and with the terms of the agreement governing the deposit accounts which you access using electronic banking services. We can terminate your Electronic Banking privileges under this Agreement without notice to you for any reason; or if you do not pay any fee required by this Agreement when due, if you do not comply with the Agreement governing your deposit or loan accounts, or your accounts are not maintained in good standing. We will promptly notify you if we terminate this Agreement or your use of the service for any other reason. You are not paying a monthly service charge for the Service. We may convert your account to an inactive status if you do not sign on to the Service or have any transaction scheduled through the Service during any consecutive six month (180 day) period. If your account is considered inactive, you must contact us to have the Service activated before you will be able to schedule any transaction through the Service. To cancel the Electronic Banking, you must notify First Foundation Bank. Your notification should include your name, address and the effective date to stop the service. You may notify First Foundation Bank by one of the following methods:

• By calling (877) 763-0244
• By writing a letter and sending it to:

First Foundation Bank
Attention: Electronic Banking Department
3560 Kraft Road
Naples, FL 34105

Federal Law

You acknowledge and agree that your consent to electronic Communications is being provided in connection with a transaction affecting interstate commerce that is subject to the federal Electronic Signatures in Global and National Commerce Act (E-SIGN), and that you and we both intend that the Act apply to the fullest extent possible to validate our ability to conduct business with you by electronic means. This Agreement is governed by the laws of the State of Florida and applicable federal law(s).

Fee Schedule

First Foundation Bank offers the benefits and convenience of the Electronic Banking service to you at no monthly charge. Account research, wire transfer and stop payment charges will be assessed at the rates published in First Foundation Bank's Fee Schedule and deducted from your account when initiated by you. All fees are subject to change. First Foundation Bank will notify you in writing regarding any fee changes at least thirty (30) days in advance of the effective date of these changes.

Security Measures

First Foundation Bank is constantly developing and implementing security enhancements to ensure the integrity of our Electronic Banking system. Our goal is to protect the confidentiality of your account and personal data and comply with all applicable banking regulations relating to the safeguarding of your data. The use, collection and retention of client information is detailed in our Privacy Policy; however, there are certain topics related specifically to online banking we would like to share with you.
We strive to insure the security of your banking information online. These standards include:

• Your banking information never travels the internet without encryption protection. When you click on "Login", we encrypt your Electronic Banking User ID and Password using Secure Sockets Layer (SSL) technology. The secure connection is established before your User ID and Password are transmitted and maintained for the duration of your online banking session.
• After initial login, we require you to change your Electronic Banking password before any transactions can be requested.
• Password guessing is deterred with a lock-out feature. The system will automatically lock a user out of the banking system when an incorrect password is used three times consecutively.
• We provide the date of last access to the system after login for your own monitoring purposes.
• Login sessions have a time-out limit requiring you to login again after a ten (10) minute period of inactivity.

We have implemented security features that allow you to verify an image that you have an option of selecting yourself. This will provide additional checks to verify your identity once you are logged in to your accounts. Users will also be prompted to select three (3) security questions out of the random ten (10) available. After answering the questions and clicking on Submit, you must confirm the answers to continue. If multi-factor authorization is triggered by logging in using a device not recognized, you will be prompted with two of the challenge questions previously answered. If the correct answers are submitted, you may continue as normal. If the incorrect answer is entered for any of the security questions, you will receive an error message and be re-prompted with the same questions. The customer has three (3) opportunities to correctly answer the security questions. After the third invalid try, they are logged off of Electronic Banking and locked out until unblocked by the Electronic Banking Department.
For additional information on this security feature, login to your Electronic Banking account and review the Security Feature FAQs. In addition, there are steps that you can take to protect your account and personal information while performing online financial transactions. While we continue to do everything possible to ensure the security of our system, we are not responsible for any breach of security that is outside of our control.

Electronic Banking Security Guidelines

• Always create a strong unique Electronic Banking password comprised of four (4) to sixteen (16) alpha numeric characters.
• Select a password that is hard to guess by using random letters, numbers and symbols. Do not use a word that can be found in the dictionary. Do not use readily identifiable information such as your name, birth date, child's name, etc.
• Your Electronic Banking User ID and password are assigned to you and verify who you are when you begin an online banking session with First Foundation Bank. Do NOT share your password with anyone else.
• Do NOT use the “save password” option with your internet browser software (example: Explore, Firefox, etc…) on your computer.
• Do NOT write down your password or reveal it to anyone, including bank associates. If you feel your Electronic Banking User ID or Password have been stolen or compromised, change your Electronic Banking password.
• Change your password regularly. We recommend changing your password every sixty (60) to ninety (90) days.
• Remember to log out when you are finished banking online or leave the room for a few minutes.
• Avoid using Public Internet Access Terminals when conducting your online banking session.
• For added security, use a secure token in conjunction with a user ID and password. For more information or to obtain one, contact us at (877) 763-0244.

Personal Computer Security Guidelines

• Always use a current Internet browser with 128-bit encryption that supports secure and private transactions. Use the built-in security features that some browsers provide. Choosing certain security settings and options will help protect the privacy of your accounts and personal information. The Help Option or Properties on your browser should provide you with the security options available on your system.
• Keep your operating system and Internet browser updated with patches from the vendor's website. For example, use Microsoft's Windows Update feature and install the Critical Updates and Service Packs since these address critical security issues.
• Use virus and spyware protection software and update the software regularly in order to detect new threats.
• Use personal firewall software, especially if you connect to the Internet with a broadband (i.e. cable or DSL) connection.
• If your computer is on a wireless network, ensure that the router settings are secure.
• Use caution when downloading files, installing software or opening email attachments from unverified or unknown sources.

Helpful links:

http://www.microsoft.com/athome/security
http://staysafeonlineinfo.com/

First Foundation Bank provides an educational website to assure that our customers have the most up to date security information at their finger tips. This link will be provided once you log into Electronic Banking.

Internet Fraud "Phishing"

Phishing is a method developed by scammers and hackers to get unsuspecting victims to reveal their personal information and is a contributing factor to the rise in identity theft. The most common method of phishing involves cleverly designed e-mails which claim to be from reputable companies with whom the recipient may or may not have a relationship. The bogus e-mail requests the recipient to confirm personal information such as client ID, passwords, account numbers, etc. The e-mail may instruct you to "update" or "validate" your personal information via e-mail or direct you to a phony web site that looks like a legitimate web site.

• First Foundation Bank will not ask you to enter your personal information in an e-mail link or send such information in an e-mail. You should only share information about your account through the secure Message Center in Electronic Banking. If you receive such a request in an e-mail, notify First Foundation Bank immediately at (877) 763-0244 or send a secure e-mail to First Foundation Bank through Electronic Banking.
• Look for secure web pages when entering your password or financial information. Using Internet Explorer, most secure web pages begin with https:// and display a padlock icon in the bottom right corner of the browser window. A locked padlock, or a key, indicates a secure connection and an unlocked padlock, or a broken key, indicates an unsecured connection. If this is not apparent, you can review the Properties of the web page to verify that it is secure. If you are not using Internet Explorer, consult the Help Option or Properties on your browser to determine the security of web pages on your system.
• Look for legitimate web pages when entering your password or financial information. Non-legitimate web pages may use a common misspelling of the company's name in the web address or may add a word, symbol, or number before or after the name.

Cash Management Administrator / Authorized Users

First Foundation Bank is authorized to receive and process any electronic communication or instruction from the Authorized User on behalf of the Company which are submitted through the Cash Management Electronic Banking Service, using your credentials.

Cash Management Electronic Banking (CMEB) Administrator(s) Full Access Rights include

• Access accounts via Secure Token/VIP Access
o View recent account history – Checking, Savings & Loans
o View check images
o Obtain real-time balances
o Access eStatements
o EDI Reporting

• Customize user functions for each user
o Establish individual authority levels for each user
o Dual control features for each user for Wire Transfer, Bill Pay and ACH services

• Transfer funds between accounts and make loan payments

• Submit Stop Payments

• Initiate Domestic & International wire transfers
o One-time wire or repetitive

• Initiate ACH for collection and payments
o Future date ACH up to twenty-one (21) days

• Initiate Bill Pay/IPAY• Initiate Bill Pay/IPAY

• Access Account Reconciliation

• Access Remote Deposit Capture site

• Review and decision ACH Block/ Filter exceptions

• Import Check issue files for Positive Pay
o Decision Positive Pay check items, as needed

• Decision Reverse Positive Pay check exceptions

• Ability to generate summary/activity report
o Download transactions Microsoft Money (OFX), Intuit Quicken (QFX), Intuit QuickBooks (QBO), Intuit QuickBooks (IIF), Personal Finance (QIF), Spreadsheet (CSV) and Word processing (TXT)

• Order checks

• Real-time Online Chat for assistance & questions

Your Responsibility

You or your designee shall be the Administrator of all Online Banking Services pertaining to your Accounts. It is your and your Administrator(s) sole responsibility to:

i. Comply with the procedures that we provide to You;
ii. Take reasonable steps to safeguard the confidentiality and security of your Credentials the Security Procedure, and any other proprietary property, devices (e.g. tokens) or information we provide to You in connection with the Services;
iii. Designate which of your employees shall have access to your accounts through the Services (“Authorized Users”);
iv. Assign passwords for use by your Authorized Users having access to the Service;
v. Establish transaction limits and authority levels (“Account Entitlements”) for Authorized Users;
vi. Delete employees as Authorized Users who You determine should no longer have access to your accounts through the Service;
vii. Change Authorized User passwords periodically, but no less frequently than every ninety (90) days;
viii. Closely and regularly monitor the activities of Authorized Users, representatives and employees who access the Services; and notify Us immediately if You have any reason to believe the security or confidentiality required by this provision has been or may be breached.
You assume full responsibility for the Online Banking Services pertaining to your accounts and agree to indemnify and hold us harmless from any and all claims, demands, actions or damages arising out of wrongful or unauthorized acts of your Authorized Users and employees.
Our Security Procedures are not designed for the detection of errors (e.g., duplicate payments or errors in your funds transfer instructions). We will not be obligated to detect errors by you or others, even if we take certain actions from time to time to do so.
We may require You to change your login Credentials at any time. We may deny access to the Services without prior notice if we are unable to confirm (to our satisfaction) any person’s authority to access the Service or if we believe such action is necessary for security reasons.
We shall not be liable for executing any transaction or for any other act performed by us relating to such transaction, nor any claims, expenses, damages or loses arising therefrom, if such transaction or act is made by us pursuant to electronic instructions given in accordance with the Security Procedure.
Each time You make a transfer or payment with the Service, You warrant that our Security Procedures are commercially reasonable. Some of our Services allow you or your designee, as Administrator(s), to set transaction limitations, and Account Entitlements for Authorized Users and establish other internal controls. Your failure to set such limitations and implement such controls increases your exposure to, and responsibility for, unauthorized transactions. You agree to be bound by any transfer or payment order we receive through the Services using your or your Authorized Users’ Credentials or which is processed by us in accordance with our Security Procedures, even if the order is not authorized by you.

AUTHORIZATION TO CONTACT YOU ABOUT YOUR ACCOUNT – By providing us with your home telephone number, cellular telephone number, email address or other contact information, you authorize us, and our affiliates to contact you using any Automatic Telephone Dialing System, Prerecorded Voice, Voicemail, or Messaging Service or E-mail alert. You agree to notify us promptly if any of your contact information changes. In addition, you agree that we may also contact you at any telephone number that we may obtain for you in the future using any Automatic Telephone Dialing System, Prerecorded Voice, Voicemail, or Messaging Service. Any complaint received via e-mail will be responded to in the same manner to the same address(es) from which the e-mail was sent and that any communication by e-mail constitutes your agreement to accept notices and other important communication by e-mail.

Business Computer Security Guidelines


Sound Business Practices for Companies to Mitigate Corporate Account Takeover

Corporate Account Takeover is a type of business identity theft in which a criminal entity steals a company’s valid online banking credentials. Small to mid-sized businesses remain the primary target of criminals, but any business can fall victim to these crimes. Attacks today are typically perpetrated quietly, by the introduction of malware through a simple email or infected website. For businesses that have low resistance to such methods of attack, the malware introduced onto its system may remain undetected for weeks and even months. Introducing layered security processes and procedures, technological and otherwise, and other tightened security efforts, can help protect businesses from criminals seeking to drain accounts and steal confidential information. These increased security procedures may help reduce the incidence of, and mitigate the financial losses, business risks, and reputational damage that can result from such attacks.
Sound business practices for companies of all sizes to consider when reviewing and implementing security procedures is to mitigate the threat of Account Takeover. The sound business practices outlined are not meant to be taken as the exclusive approach businesses should implement to address the risks associated with Account Takeover, nor are they meant to be considered mandatory requirements. No single security measure alone is likely to be effective in preventing or mitigating all risks associated with Account Takeover. Similarly, some of these sound business practices may not be appropriate for all businesses. Accordingly, each business must identify its own risks, and design and implement the appropriate security measures to prevent, and mitigate the risks associated with Account Takeover.

The sound business practices for companies outlined in this document are:

Computer Security:
o Layered System Security
o Online Banking Safety
o Education
o Websites
o User Accounts
o Staying Informed

Account Security:
o Dual Control
o Reconcilement
o Account Services
o Reporting of Suspicious Activity
o Credentials

Layered System Security

It is recommended that a business:
• Use appropriate tools to prevent and deter unauthorized access to its network and periodically review such tools to ensure they are up-to-date. These tools include:

o Firewalls
o Security suites
o Anti-botnet, anti-malware, and anti-spyware programs
o Encryption of laptops, hard drives, VPN’s or other communications channels
o Education of all computer users

• Install robust anti-virus and security software for all computer workstations and laptops and ensure that such software automatically is patched regularly and remains current.
• Implement multi-layered system security technology. Anti-virus software alone will not protect a business from most threats. Layering security software constructs a multi-level barrier between business’ networks and criminals attempting to access such networks.
• Implement security suites so all security options (i.e., firewall, anti-virus, anti-spyware, anti-malware, etc.) work harmoniously to provide superior protection since security programs from multiple companies sometimes do not work well together, often working against each other which could leave the computers just as vulnerable as if they had no protection.

Online Banking Safety

It is recommended that a business:

• Create a secure financial environment by dedicating one computer exclusively for online banking and cash management activity. This computer should not be connected to the business network, have email capability, or connect to the Internet for any purpose other than online banking.
• Disallow a workstation used for online banking to be used for general Web browsing and social networking.
• Verify use of a secure session (“https”) in the browser for all online banking.
• Disallow the conduct of online banking activities from free Wi-Fi hot spots like airports or Internet cafes.
• Cease all online banking activity if the online banking application ‘looks’ different than usual. Do not continue and contact the financial institution immediately.

Education

It is recommended that a business:
• Educate all computer users about cybercrimes so everyone understands that even one infected computer can lead to an account takeover. A user whose computer becomes infected can infect the entire network. For example, if an employee takes their laptop home and accidentally downloads credential-stealing malware, criminals could gain access to the business’ entire network when the employee connects at work. All users, even those with no financial responsibilities, should be educated about these threats.
• Always ask, “Does this email or phone call make sense?” Educate all employees to think critically about each email and phone call received. A business should advise its employees to:

o Do not open suspicious emails or emails from unknown persons. Even opening an email may expose a computer and the network to malware.
o Ask, “Does this make sense?” before taking action in response to an email. If an email is suspicious, do not click on the link or open the attachment. The link can take the user to an infected website or download a malware program. Likewise, attachments and .zip files (compressed files) can contain malware. Users should be instructed to simply delete the suspicious email and not to click the link or open the attachment. Users can also inquire of a domain lookup service like “whois.net” or similar service that allows users to view the domain registration information of an email sender. If the user does not stop to think and take appropriate action, criminals maybe able to lure an unsuspecting user into an action that may infect their computer.
o Be particularly suspicious of emails or calls purporting to be from a financial institution, government agency or other organization requesting account information, account verification or banking access credentials such as usernames, passwords, Personal Identification Numbers (PINs) and similar information. If such a suspicious email is identified or call received, the business should call the financial institution to verify legitimacy. The business should not call the phone number included in the email, click on the link or reply to the sender of such an email.

First Foundation Bank requires all business customers that initiate high risked transactions to participate in our online educational security training annually. Log in information and instructions will be provided at the time of your initial set up and annually thereafter.

Websites

It is recommended that a business:
• Block access to unnecessary or high-risk websites. At a minimum, a business should prevent access to websites that employees should not visit during work hours. Common sites that carry a high-risk are adult entertainment, online gaming, social networking, and personal email.

User Accounts

It is recommended that a business:
• Establish user accounts for every computer and limit administrative rights. Many malware programs require the user to have network administration privileges to infect the computer.
• Employ “user” settings to avoid accidentally downloading a credential-stealing program. Many small and mid-sized businesses allow all employees to be the network administrator of their computer. Most malware requires the user to be logged in as the network administrator for the malicious program to download.
• Require all employees use strong passwords and change their passwords frequently on both the computer and online banking access.
• Promptly deactivate or remove access rights from employees that no longer require access (e.g., inactive, transferred or terminated employees).
• Take full advantage of options offered by First Foundation Bank to reduce the risk of a large payment being initiated fraudulently. First Foundation Bank allows customers to set a “user limit” for ACH and wire transfer initiation. In addition, a dual security setup will protect from these high risk transactions.

Linked Accounts

In the event that Personal and Business Accounts under common ownership or control that can be accessed through the Service are linked for access purposes ANY AUTHORIZED USER MAY HAVE ACCESS TO LINKED ACCOUNTS. The limitations on our liability as contained in this Agreement include transfers to and from linked Accounts which are accessed through the Service.

Staying Informed

It is recommended that a business:
• Stay informed about defenses to account takeover. Since cyber threats change rapidly, it is imperative that all businesses stay informed about evolving threats and adjust security measures timely. Among other things, this can be done by connecting with alert groups, businesses and industry resources about threats and frauds.
• Perform an internal risk assessment annually to determine the vulnerabilities within your own environment. If you are interested in performing an assessment, please contact Electronic Banking Department at (877) 763-0244.

Dual Control

It is recommended that a business:
• Initiate payments under dual control, with assigned responsibility for transaction origination and authorization. Dual control involves file creation by one employee with file approval and release by another employee on a different computer. Or, require dual use of tokens where a single employee creates a file, but can only release the same file by logging in a second time using a new passcode on the token. Avoid having employees initiate and authorize payment transactions with administrator credentials.

Reconcilement

It is recommended that a business:
• Reconcile accounts online daily; at a minimum, review pending or recently sent ACH files and wire transfers.

Account Services

It is recommended that a business:
• Take advantage of appropriate account services offered by First Foundation Bank like positive pay, security tokens, debit blocks, callbacks etc. It is a requirement of First Foundation Bank that all customers that are initiating high risked transactions use Secure Tokens.
• Use multi-factor and multi-channel authentication for accounts that are permitted to initiate funds transfers. Multi-factor authentication includes at least two (2) of the following: 1) something the person knows (User ID, PIN, password), 2) something the person has (password-generating token, USB token), and 3) something the person owns (biometrics, i.e. fingerprint scan).

Higher risk transactions, such as ACH origination and wire transfers, are controlled with extra layers of security. First Foundation Bank requires:
• Symantec VIP hard token or VIP Access app (or approved similar device) for all companies that perform high risk transactions unless a waiver is signed.
• Multi-factor authentication (MFA) security questions on transaction processing.
• Establish transaction dollar limits per user, per day and number of transactions.
• Dual Security which requires two users to sign into electronic banking to perform the transaction (one to input the transaction and one to approve it) is highly recommended for ACH origination and wire transfers.
• Alerts may be set up by each user so that an email is sent when each transaction is performed.
• 24/7 monitoring performed on all high risk transactions.
• “Out of Band” verification is performed by phone call, email or text to verify all anomalies that are detected.
• Require annual self assessments performed by Cash Management users performing high risk transactions.
• Monitoring of certain type of administrative changes are performed and verified when suspicious changes are made.
First Foundation Bank also offers other controls to its customers to mitigate transactional risk:
• Positive Pay services are offered to all Cash Management customers. The customer provides the bank a file of issued transactions. Anything that posts to the account that was not in the file, with an incorrect amount or check number will be considered an exception and requires the customer to review for acceptance or return.
• ACH blocking prevents unwanted ACH activity form certain originators or all ACH debits or credits from posting to the account.

Reporting of Suspicious Activity

It is recommended that a business:
• Monitor and report suspicious activity. Ongoing monitoring and timely reporting of suspicious activity are crucial to deterring or recovering from fraud. A business should report anything unusual to First Foundation Bank at (877) 763-0244 or ebanking@ffibank.com immediately such as log-ins at strange times of day, new user accounts, unauthorized transfers, etc., so we can immediately block the account and monitor activity.

Credentials

It is recommended that a business:
Not use administrator credentials issued for day-to-day processing. Criminals gain access to these credentials, they will set up their own users and profiles on your system to facilitate fraudulent transactions. The criminals can even use the administrator credential to lock legitimate users out of the system. First Foundation Bank will also monitor administrative changes and alert you to verify any changes.

Security Controls that First Foundation Bank Provides for Your Online Account Transactions

• Enables alerts on unusual online account activity
• Blocks wire transfers to countries that are on the sanctions list from the Office of Foreign Assets Control
• Delays transactions or batch processing of money transfers
• Gives the option to create a “white list” containing all the approved accounts between which transactions may take place
• Provides ability to require dual control to complete transactions
• Security monitoring of online transactions for anomalies
• Provides education to customers on how to protect their online transactions
• Provides multi-factor authentication
o Out of band token/pin delivery, via text, or automated phone calls
o Uses out-of-wallet security questions for online account access
• Assists commercial customer with internal risk assessment for transaction environment

Remote Deposit Capture

First Foundation Bank offers Remote Deposit Capture “RDC” which includes Remote Deposit Anywhere “RDA”. RDC allows customers to scan checks and transmit the images for processing. Upon enrollment into RDC, First Foundation Bank will send to the primary email address on file the Remote Deposit Capture Disclosure Agreement. You are responsible for reading the disclosure agreement prior to using RDC. You will comply with all the terms of this Agreement and with the terms of the agreement governing the deposit accounts which you access using electronic banking services. We can terminate your RDC privileges under this Agreement without notice to you for any reason. Additionally, this Agreement has been incorporated into our Electronic Banking Terms and Conditions Agreement which is available within Electronic Banking under the Agreements link.

Electronic Check / Electronic Returned Check

Means an electronic image of, and electronic information derived from, a paper check or paper returned check, respectively, that (1) is sent to a receiving bank pursuant to an agreement between the sender and the receiving bank; and (2) conforms with ANSI X9.100-187, unless the Board by rule or order determines that a different standard applies or the parties otherwise agree.
If you truncate a paper check into an electronic check image (including, without limitation, by using RDC or RDA), you agree to properly affix on the paper check the below respective restrictive endorsement within the 1½” area that starts on the top of the back of the check.
Via Remote Deposit Capture: For Remote Deposit Only Via Mobile Deposit: For Mobile Deposit Only
To First Foundation Bank To First Foundation Bank
Account Number Account Number
Signature as applicable Signature as applicable
Upon truncation, you certify the electronic check image accurately represents all information on the front and back of the original paper check at the time the original paper check was imaged. Additionally, you warrant that the original paper check has not been presented for payment and that it will not be presented for payment elsewhere. You agree to indemnify us from any loss for any electronic check image created by you. If an electronic check image is returned for any reason, we allocate liability to you and you owe us the amount of the item regardless of when it is returned. We have right of setoff, and if there are non-sufficient funds available, you are liable for the difference owed. Unless otherwise agreed upon, we reserve the right to examine all electronic check images and do not have to accept for deposit any electronic check image.

E-Statement(s)/Notice(s) Delivery Terms and Conditions


This Agreement is made between you and First Foundation Bank and provides your request and consent to receive statements and notices for your account(s) by electronic delivery. These electronic statements and notices are called "E-Statements & Notices".

By not opting out of E-Statements & Notices, you are electing to receive your statement electronically. Although you are opting out from receiving your statement(s)/notice(s) by U.S. mail, you have the option to receive a paper statement at any time, by request.

There are currently no service charge fees for the use of e-Docs. However, you agree that First Foundation Bank has the right to institute or change the fees for E-Statements & Notices upon ten (10) days prior written notice to you. In addition, First Foundation Bank has the right to amend these terms and conditions from time to time providing you with written notice of the amended terms and conditions.

You agree to waive and release any claims against First Foundation Bank arising out of or that may in any way be related to the use of E-Statements & Notices, except for those claims resulting solely from the negligent acts or omissions of the Bank. You agree that you are solely responsible for any loss due to use of E- Statements & Notices by you, any authorized user, or any unauthorized user or recipient who gains access to E-Statements & Notices through your computer or information obtained directly or indirectly from you.

You must be a First Foundation Bank’s Electronic Banking customer to enroll for E-Statements & Notices and have at least one First Foundation Bank demand deposit account. Adobe Acrobat Reader® version 6.0 or higher is required to open and view your statement(s)/notice(s)*. Download the latest version of Adobe Acrobat Reader® at www.adobe.com/. We also recommend that you use the latest browser version available that supports 128 bit SSL Encryption.

*Acrobat and Reader are registered trademarks of Adobe Systems Incorporated in the United States and in other countries. THIS PRODUCT IS NOT ENDORSED OR SPONSORED BY ADOBE SYSTEMS INCORPORATED, PUBLISHER OF ACROBAT READER.

You will need email access with at least 1MB of free space to receive your statement(s)/notice(s). Your statement(s)/notice(s) will be sent to the email address that’s on file with First Foundation Bank’s Electronic Banking Department. It is your responsibility to keep your email address updated on First Foundation Bank’s Electronic Banking. You have the option to have your statement(s)/notice(s) emailed to three additional recipients. It is your responsibility to maintain the ID, Password and/or Token, and email addresses for these additional recipients.

With E-Statements & Notices, you receive next day delivery of your statement(s)/notice(s). The delivery method used is a 'Pull' method meaning an email notification containing a link to a secure log in page prompts you for your user ID and Password. Once the security verification takes place, then you can view your statement via a secure socket layer (SSL) connection.

Statement(s)/notice(s) are sent as a "shell" PDF without customer data. Once the user logs into E-Statements & Notices, the ID and Password are authenticated and the data fills the PDF document. The data included in the statement(s)/notice(s) is streamed via a secure 128-bit SSL encryption.

Your First Foundation Bank’s Electronic Banking ID and Password are your keys to E-Statements & Notices. It takes both identification keys to gain access. No one representing First Foundation Bank will ask for your Password. You should never give your Password to anyone who asks for it in an email or by phone or anyone else who you do not want to have access to your account.

All Communications in either electronic or paper format from us to you will be considered “in writing.” You should print or download for your records a copy of your First Foundation Bank statements, this Disclosure, your initial authorization to receive First Foundation Bank electronic statements, any changes to that authorization, and any other Communication that is important to you. The past twelve (12) months’ statement(s)/notice(s) will be available on First Foundation Bank’s Electronic Banking for your convenience.

You will receive check images with your electronic statement.

You have the right to terminate E-Statements & Notices at any time by logging into Electronic Banking and changing your E-Statements & Notices settings from the Document Settings tab. You may also call First Foundation Bank at (877) 763-0244, or write a letter and send it to:

First Foundation Bank
Attention: Electronic Banking Department
3560 Kraft Road
Naples, FL 34105

First Foundation Bank has the right to terminate its obligation to provide electronic statement(s)/notice(s) services to you upon ten (10) days prior written notice.