RETURN AND DESTRUCTION OF CUSTOMER DATA Sample Clauses

RETURN AND DESTRUCTION OF CUSTOMER DATA. Except as set forth in an Order Form, upon termination or expiration of all Order Forms for a particular Software application, Veeva shall ensure that Customer has access to the Customer Data via such Software application for a period of no less than thirty (30) days (“Retrieval Period”). In no event may Veeva preclude Customer from accessing or retrieving the Customer Data during the Subscription Term or during the Retrieval Period. Except as set forth in an Order Form, after termination or expiration of all Order Forms for a particular Software application (i) Veeva shall permanently delete all Customer Data held in the production environment and any sandboxes for such Software application within 120 days, and (ii) Veeva will ensure that Customer Data included in system back-ups for any such Software application are stored in encrypted form and are deleted pursuant to Veeva’s then-current back-up deletion process. Upon written request from Customer, Veeva will provide written certification from an executive officer confirming Veeva’s compliance with this clause. Customer may, at Customer expense, audit Veeva one time per year to confirm compliance with Veeva responsibilities pursuant to this Agreement. The Customer representative(s) performing such audit or inspection shall execute a nondisclosure agreement with Veeva in a form acceptable to Veeva with respect to the confidential treatment and restricted use of Veeva’s Confidential Information. Access at Veeva’s and its third-party hosting facilities shall be subject to Veeva’s and its hosting partner’s reasonable access requirements and security policies. Customer must give Veeva at least thirty (30) days’ prior notice of an audit.

Related to RETURN AND DESTRUCTION OF CUSTOMER DATA

  • Data Destruction When no longer needed, all County PHI or PI must be cleared, purged, or destroyed consistent with NIST Special Publication 800-88, Guidelines for Media Sanitization such that the PHI or PI cannot be retrieved.