Common use of Compliance Certifications and SOC Reports Clause in Contracts

Compliance Certifications and SOC Reports. Google will maintain at least the following for the Audited Services in order to evaluate the continued effectiveness of the Security Measures: a. certificates for ISO 27001, ISO 27017 and ISO 27018, and b. SOC 2 and SOC 3 reports produced by Google’s Third Party Auditor and updated annually based on an audit performed at least once every 12 months (the “SOC Reports”). Google may add standards at any time. Google may replace a SOC Report with an equivalent or enhanced alternative.

Compliance Certifications and SOC Reports. Google will maintain at least the following for the Audited Services in order to evaluate the continued effectiveness of the Security Measures: a. certificates for ISO 27001, ISO 27017 and ISO 27018, and 27018 (the “Compliance Certifications”); and b. SOC 2 and SOC 3 reports produced by Google’s Third Party Auditor and updated annually based on an audit performed at least once every 12 months (the “SOC Reports”). Google may add standards at any time. Google may replace a Compliance Certification or SOC Report with an equivalent or enhanced alternative.

Compliance Certifications and SOC Reports. Google will maintain at least the following for the Audited Services in order to evaluate verify the continued effectiveness of the Security Measures: a. certificates for ISO 27001, ISO 27017 27001 and ISO 27018, and any additional certifications described in Appendix 4 (Specific Products) (the “Compliance Certifications”); and b. SOC 2 and SOC 3 reports produced by Google’s Third Third-Party Auditor and updated annually based on an audit performed at least once every 12 months (the “SOC Reports”). Google may add standards at any time. Google may replace a Compliance Certification or SOC Report with an equivalent or enhanced alternative.

Compliance Certifications and SOC Reports. Google will maintain at least the following for the Audited Services in order to evaluate the continued effectiveness of the Security Measures: ▪ a. certificates for ISO 27001, ISO 27017 and ISO 27018, and ▪ b. SOC 2 and SOC 3 reports produced by Google’s Third Party Auditor and updated annually based on an audit performed at least once every 12 months (the “SOC Reports”). Google may add standards at any time. Google may replace a SOC Report with an equivalent or enhanced alternative.

Compliance Certifications and SOC Reports. Google will maintain at least the following for the Audited Services in order to evaluate the continued effectiveness of the Security Measures: a. (a) certificates for ISO 27001, ISO 27017 and ISO 27018, and b. its PCI DSS Attestation of Compliance (the “Compliance Certifications”); and (b) SOC 2 and SOC 3 reports produced by Google’s Third Party Auditor and updated annually based on an audit performed at least once every 12 months (the “SOC Reports”). Google may add standards at any time. Google may replace a Compliance Certification or SOC Report with an equivalent or enhanced alternative.

Compliance Certifications and SOC Reports. Google will maintain at least the following for the Audited Services in order to evaluate the continued effectiveness of the Security Measures: ■ a. certificates for ISO 27001, ISO 27017 and ISO 27018, and ■ b. SOC 2 and SOC 3 reports produced by Google’s Third Party Auditor and updated annually based on an audit performed at least once every 12 months (the “SOC Reports”). Google may add standards at any time. Google may replace a SOC Report with an equivalent or enhanced alternative.

Compliance Certifications and SOC Reports. Google will maintain at least the following for the Audited Services in order to evaluate the continued effectiveness of the Security Measures: a. : (a) certificates for ISO 27001, ISO 27017 and ISO 27018, and b. its PCI DSS Attestation of Compliance (the "Compliance Certifications") and (b) SOC 2 and SOC 3 reports produced by Google’s Third Party Auditor and updated annually based on an audit performed at least once every 12 months (the “"SOC Reports”"). Google may add standards at any time. Google may replace a Compliance Certification or SOC Report with an equivalent or enhanced alternative.

Compliance Certifications and SOC Reports. Google will maintain at least the following for the Audited Services in order to evaluate the continued effectiveness of the Security Measures: a. : (a) certificates for ISO 27001, ISO 27017 and ISO 27018, and b. its PCI DSS Attestation of Compliance (the “Compliance Certifications”); and (b) SOC 2 and SOC 3 reports produced by Google’s Third Party Auditor and updated annually based on an audit performed at least once every 12 months (the “SOC Reports”). Google may add standards at any time. Google may replace a Compliance Certification or SOC Report with an equivalent or enhanced alternative.