Common use of Penetration Tests Clause in Contracts

Penetration Tests. The Client is authorised to carry out penetration tests on the Services (hereinafter "Penetration Test(s)") by itself or by a duly appointed third party auditor of its choice. The performance of these operations does not require OVHcloud to be notified. These Penetration Tests shall be carried out in accordance with the laws and regulations in force. The Client shall obtain the authorization of the Users and rights holders of the scope targeted by the test. The conditions whereby the Client entrusts the third party auditor with the performance of the Penetration Tests are the subject of a separate agreed concluded between the Client and the auditor, and include all the conditions of this article. The Client declares and guarantees to OVHcloud that all the conditions for conducting the Penetration Tests stipulated herein will be respected, including by the auditor who acts under the full responsibility of the Client.