ISO Certifications and SOC Reports Clause Samples

ISO Certifications and SOC Reports. Google will maintain at least the following for the Audited Services during the Term: (a) certificates for ISO 27001, ISO 27017, and ISO 27018, and its PCI DSS Attestation of Compliance (the “ Compliance Certifications”); and (b) SOC 1, SOC 2, and SOC 3 reports produced by Google’s Third-Party Auditor and updated annually based on an audit performed at least once every 12 months (the “SOC Reports”). Google may add standards at any time. Google may replace a Compliance Certification or SOC Report with an equivalent or enhanced alternative.