Reviews and Audits of Compliance. 2.2.1 Customer may audit Virsae’s compliance with its obligations under this Addendum up to once per year and on such other occasions as may be required by European Data Protection Laws, including where mandated by Customer’s supervisory authority. Virsae will contribute to such audits by providing Customer or Customer’s supervisory authority with the information and assistance reasonably necessary to conduct the audit.
2.2.2 If a third party is to conduct the audit, Virsae may object to the auditor if the auditor is, in Virsae’s reasonable opinion, not independent, a competitor of Virsae, or otherwise manifestly unsuitable. Such objection by Virsae will require Customer to appoint another auditor or conduct the audit itself.
2.2.3 To request an audit, Customer must submit a detailed proposed audit plan to Virsae at least two weeks in advance of the proposed audit date and any third party auditor must sign a customary non-disclosure agreement mutually acceptable to the parties (such acceptance not to be unreasonably withheld) providing for the confidential treatment of all information exchanged in connection with the audit and any reports regarding the results or findings thereof. The proposed audit plan must describe the proposed scope, duration, and start date of the audit. Virsae will review the proposed audit plan and provide Customer with any concerns or questions (for example, any request for information that could compromise Virsae security, privacy, employment or other relevant policies). Virsae will work cooperatively with Customer to agree on a final audit plan. Nothing in this Section 2.2 shall require Virsae to breach any duties of confidentiality.
2.2.4 If the controls or measures to be assessed in the requested audit are addressed in an SOC 2 Type 2, ISO, NIST or similar audit report performed by a qualified third party auditor within twelve (12) months of Customer’s audit request and Virsae has confirmed there are no known material changes in the controls audited, Customer agrees to accept such report lieu of requesting an audit of such controls or measures.
2.2.5 The audit must be conducted during regular business hours, subject to the agreed final audit plan and Virsae’s safety, security or other relevant policies, and may not unreasonably interfere with Virsae business activities.
2.2.6 Customer will promptly notify Virsae of any non-compliance discovered during the course of an audit and provide Virsae any audit reports generated in conn...
Reviews and Audits of Compliance a. ERP Maestro, Inc. has made available for review by Client ERP Maestro, Inc.’s Technical and organizational measures and Standard Contract Clauses with Subprocessors. The Client is responsible to confirm before processing is carried out that ERP Maestro, Inc.’s technical and organizational measures are appropriate and sufficient to protect the rights of the data subjects.
b. If the European Data Protection Legislation requires, ERP Maestro, Inc. will allow Client or an independent auditor appointed by Client to conduct audits to verify ERP Maestro, Inc.’s compliance with its obligations under this Data Processing Addendum. ERP Maestro, Inc. will contribute to such audits by providing information and documentation as described in Section (a) above or to the extend, required by GDPR and Bulgarian data protection legislation.
c. Following receipt by ERP Maestro, Inc. of a request for an audit, ERP Maestro, Inc. and Client will discuss and agree in advance on reasonable start date, scope and duration of and security and confidentiality controls applicable to any audit.
d. ERP Maestro, Inc. may charge a fee (based on ERP Maestro, Inc.’s reasonable costs) for any audit. ERP Maestro, Inc. will provide Client with further details of any applicable fee, and the basis of its calculation, in advance of any such review or audit. Client will be responsible for any fees charged by any auditor appointed by Client to execute any such audit.
e. ERP Maestro, Inc. may object in writing to an auditor appointed by Client to conduct any audit, if the auditor is, in ERP Maestro, Inc.’s reasonable opinion, not suitably qualified or independent, a competitor of ERP Maestro, Inc., or otherwise manifestly unsuitable. Any such objection by ERP Maestro, Inc. will require Client to appoint another auditor or conduct the audit itself.
Reviews and Audits of Compliance. 5.4.1 Customer may audit Oort’s compliance with its obligations under this Addendum up to once per year. In addition, to the extent required by applicable data protection laws, including where mandated by Customer’s regulatory or governmental authority, Customer or Customer’s regulatory or governmental authority may perform more frequent audits (including inspections). Oort will contribute to
5.4.2 If a third party is to conduct the audit, Oort may object to the auditor if the auditor is, in Xxxx’s reasonable opinion, not suitably qualified or independent, a competitor of Oort, or otherwise manifestly unsuitable. Such objection by Oort will require Customer to appoint another auditor or conduct the audit itself.
5.4.3 To request an audit, Customer must submit a detailed proposed audit plan to xxxxx@xxxx.xx at least two weeks in advance of the proposed audit date. The proposed audit plan must describe the proposed scope, duration, and start date of the audit. Xxxx will review the proposed audit plan and provide Customer with any concerns or questions (for example, any request for information that could compromise Oort security, privacy, employment or other relevant policies). Xxxx will work cooperatively with Customer to agree on a final audit plan. Nothing in this Section 5.4 shall require Oort to breach any duties of confidentiality.
5.4.4 If the requested audit scope is addressed in an SSAE 16/ISAE 3402 Type 2, ISO, NIST or similar audit report performed by a qualified third party auditor (“Audit Reports”) within twelve (12) months of Customer’s audit request and Oort confirms there are no known material changes in the controls audited, Customer agrees to accept those findings in lieu of requesting an audit of the controls covered by the report.
5.4.5 The audit must be conducted during regular business hours at the applicable facility, subject to the agreed final audit plan and Xxxx’s health and safety or other relevant policies, and may not unreasonably interfere with Oort business activities.
5.4.6 Customer will promptly notify Oort of any non-compliance discovered during the course of an audit and provide Oort any audit reports generated in connection with any audit under this Section 5.4, unless prohibited by applicable law or otherwise instructed by a regulatory or governmental authority. Customer may use the audit reports only for the purposes of meeting Customer’s regulatory audit requirements and/or confirming compliance with the requirements of ...
Reviews and Audits of Compliance. 6.4.1. Reviews of Security Documentation Customer’s independent, third-party auditor that is not a competitor of AIS) a copy of AIS’s most recent third-party audits or certifications, as applicable.
Reviews and Audits of Compliance. 7.5.1 If European Data Protection Law applies to the processing of Customer Personal Data, Actifio will allow Customer or an independent auditor appointed by Customer to conduct audits (including inspections) to verify Actifio’s compliance with its obligations under these Data Processing and Security Terms in accordance with Section 7.5.3 (Additional Business Terms for Reviews and Audits). Actifio will contribute to such audits as described in this Section 7.5 (Reviews and Audits of Compliance).
Reviews and Audits of Compliance. To demonstrate compliance by Clicknology Ltd with its obligations under these Data Processing Terms, Clicknology Ltd will make the Security Documentation available for review by Customer.
Reviews and Audits of Compliance. To demonstrate compliance by Smarter Inventories with its obligations under these Data Processing Terms, Smarter Inventories will make the Security Documentation available for review by Customer.
Reviews and Audits of Compliance
