. "User information may include additional information 508, including billing information, employment information, or other information needed by particular implementations of the ASP. Finally, the user information includes a list of policies 510." . . .