Passive maintenance
Bug fixes, dependency security updates, monthly health-check, response within one business day for non-critical issues and four hours for P1 production incidents during business hours.
Active maintenance
Everything in Passive plus a defined capacity for ongoing analytics support and small new-feature development each month. Exact figure within the band agreed after launch.