Extract to table

Capitalized terms not defined herein shall have the meanings ascribed to them in the Agreement

4 Processor shall obtain a new SOC 2 Type II report on at least an annual basis

5 If any SOC 2 Type II report identifies material control deficiencies or qualified opinions, Processor shall promptly notify Controller and provide a written remediation plan with estimated timelines for resolution

In the event that the DPF self-certification is invalidated, revoked, or otherwise ceases to constitute a valid transfer mechanism under applicable European data protection law, the Standard Contractual Clauses shall continue to serve as the lawful basis for the transfer of Personal Data from the European Economic Area to the United States

In the event Controller's infrastructure does not support mTLS, Processor shall implement alternative authentication and encryption mechanisms that provide a substantially equivalent level of protection

Emergency or out-of-band patches for actively exploited vulnerabilities shall be applied on an expedited basis