Common use of Data Security Compliance Clause in Contracts

Data Security Compliance. Affirm will permit Shopify to review Affirm’s documents and records confirming its compliance with this Section 15 (Affirm Data Security) and provide Shopify with the relevant portions of audits and system test results acquired by Affirm in relation to the data security policies and procedures designed to meet the requirements of this Section 15 (Affirm Data Security). Affirm shall submit to [***] assessments of Affirm’s security policies, standards and practices by Shopify, make reasonable efforts to resolve deficiencies noted as a result of these assessments in a manner commensurate to the risk those deficiencies represent and promptly notify Shopify of any material changes to Affirm’s security policies, standards and practices. Affirm shall also comply with the data protection agreement set forth in Exhibit E (the “Data Protection Agreement”), which may be amended from time to time by Shopify, subject to Section 15.2. In the event of a conflict or contradiction between this Section 15 (Affirm Data Security) and the Data Protection Agreement, the Data Protection Agreement will take precedence over Section 15 (Affirm Data Security) to the extent necessary (subject to the provisions set forth in Section 15.2 relating to updates and amendments).

Data Security Compliance. Affirm will permit Shopify to review Affirm’s documents and records confirming its compliance with this Section 15 (Affirm Data Security) and provide Shopify with the relevant portions of audits and system test results acquired by Affirm in relation to the data security policies and procedures designed to meet the requirements of this Section 15 (Affirm Data Security). Affirm shall submit to [***] assessments of Affirm’s security policies, standards and practices by Shopify, make reasonable efforts to resolve deficiencies noted as a result of these assessments in a manner commensurate to the risk those deficiencies represent and promptly notify Shopify of any material changes to Affirm’s security policies, standards and practices. Affirm shall also comply with the data protection agreement Data Protection Agreement set forth in on Exhibit E (the “Data Protection Agreement”)B, which may be amended from time to time by Shopify, subject to Section 15.2. In the event of a conflict or contradiction between this Section 15 (Affirm Data Security) and the Data Protection Agreement, the Data Protection Agreement will take precedence over Section 15 (Affirm Data Security) to the extent necessary (subject to the provisions set forth in Section 15.2 relating to updates and amendments).