Ownership and Processing of Customer Data. Customer and/or its licensors shall retain all right, title and interest in all Customer Data stored in the Service, including any revisions, updates or other changes made to that Customer Data. Customer grants HashiCorp a worldwide, non-exclusive license to host, copy, process, transmit and display Customer Data as reasonably necessary for HashiCorp to provide the Service in accordance with this Agreement. HashiCorp and Customer will comply with all applicable data privacy laws and process all Customer Data in compliance with its Data Protection Addendum located at xxxxx://xxxx.xxxxxxxxx.xxx/DataProtectionAddendum-Cloud.pdf, which is incorporated by reference into this Agreement. In addition, HashiCorp shall maintain a written information security program of policies and controls (“Security Program”) that will govern the processing and security of Customer Data, a copy of which is available at xxxxx://xxxx.xxxxxxxxx.xxx/CloudSecurityExhibit.pdf. The Security Program includes industry standard practices designed to protect Customer Data from unauthorized use, disclosure or destruction. HashiCorp may update the Security Program from time to time as new threats and standards emerge but shall not reduce the overall level of security it provides during the Subscription Term. Customer will implement the legally required technical and organizational measures to comply with applicable data privacy laws as data controller.
