Extract to table

In the event that the Controller objects to a proposed new or replacement sub-processor in accordance with the procedures established in the DPA, the parties shall engage in good-faith consultations to address the Controller's concerns

Any changes to the list of sub-processors contained in this Annex III — including the addition of new sub-processors, the removal of existing sub-processors, or the modification of processing activities performed by any sub-processor — shall be communicated to the Controller in writing at least thirty (30) calendar days in advance of the effective date of such change

The Controller retains the right to object to such changes in accordance with the DPA, and an updated version of this Annex III shall be provided to the Controller promptly upon any such change becoming effective

In the event of any conflict between the provisions of this Annex III and the DPA with respect to sub-processor management, the provisions of the DPA shall prevail, except to the extent that the SCCs impose more stringent obligations, in which case the SCCs shall take precedence

In the event that the DPF certification is invalidated, suspended, or withdrawn for any reason, the Standard Contractual Clauses shall continue to serve as the lawful transfer mechanism for such data transfers without interruption

The SOC 2 Type II audit report must cover the Trust Services Criteria for Security and, where applicable, Availability, Processing Integrity, and Confidentiality