Common use of Reports and Certifications Clause in Contracts

Reports and Certifications. For Subscription Services, upon request and not more than once annually, Pegasystems will deliver to Client (i) the current SSAE 18 SOC II Type 2 report or equivalent, (ii) the current PCI- DSS Attestation of Compliance, (iii) the current penetration testing summary, (iv) an executive summary of Pegasystems’ Written Information Security Program and (v) executive summaries of the security, data backup, and monitoring events for the Client’s Environment(s) that are currently available.

Reports and Certifications. For Subscription Services, upon request and not more than once annually, Pegasystems will deliver to Client (i) the current SSAE 18 SOC II Type 2 report or equivalent, (ii) the current PCI- HIPAA compliance opinion letter, (iii) the current PCI-DSS Attestation of Compliance, (iiiiv) the a current penetration testing summary, (ivv) an executive summary of Pegasystems’ Written Information Security Program and (vvi) executive summaries of the security, data backup, and monitoring events for the Client’s Environment(s) that are currently available.