Processing Review Sample Clauses
The Processing Review clause establishes a mechanism for evaluating and verifying how data or materials are handled during the course of an agreement. Typically, this clause allows one party to periodically inspect, audit, or request reports on the other party’s processing activities to ensure compliance with agreed standards or legal requirements. By providing a structured process for oversight, the clause helps maintain transparency, ensures adherence to obligations, and mitigates risks associated with improper or unauthorized processing.
Processing Review. 6.1. Customer acknowledges Prosperoware is regularly audited by independent third-party auditors and/or internal auditors against its security policy. Prosperoware shall keep reasonably detailed, accurate and up-to-date records, documents and/ or electronic data relating to the processing of Customer Personal Data by Prosperoware and to the measures taken by Prosperoware under Sections 3.1 to 3.12 (“Records”). All copies of such Records (including any Reports) are Prosperoware’s confidential information under the Agreement.
6.2. Prosperoware shall permit Customer and its third-party representatives, on reasonable prior written notice during normal business hours, no more than once annually, to receive audit information in the form of summary report(s), audit sheets or table of contents that provides reasonable information on Prosperoware’s compliance without compromising Prosperoware security ("Report(s)").
6.3. Customer may review all Records related to the processing of Customer Personal Data by Prosperoware for assessing Prosperoware's compliance with its obligations under this DPA. Such review rights may be exercised only once in any calendar year during the Term. Customer shall conduct any such review in a prompt manner so as not to interfere in Prosperoware business operations.
6.4. Audit access by any third-party representative of Customer shall be subject to such representative agreeing to confidentiality obligations in respect of the Records and information obtained, provided that all Records obtained may be disclosed to Customer.
Processing Review. 4.1 Squiz shall keep at its normal place of business detailed, accurate and up-to-date records (whether in electronic form or hard copy) relating to the processing of Personal Data by Squiz and to the measures taken by Squiz under Clause 3.1.11 (Records).
4.2 Squiz shall permit Customer and its third-party representatives, on reasonable notice during normal business hours:
4.2.1 gain access to, and take copies of, the Records and any other information held at Squiz's premises or on Squiz's computer systems; and
4.2.2 inspect all Records, documents and electronic data and Squiz's computer systems, facilities and equipment (so far as they relate to the Customer and the Personal Data), for the purpose of auditing Squiz's compliance with its obligations under this Data Processing Agreement. Such audit rights may be exercised only once in any calendar year during the Term.
4.3 Squiz shall give all necessary assistance to the conduct of any such audits and the Designated Data Officer shall be present throughout any audit.
4.4 Audit access by any third party representative of Customer shall be subject to such representative agreeing confidentiality obligations in respect of the information obtained, provided that all information obtained may be disclosed to Customer.
4.5 During the term of the Agreement, Squiz shall appoint a Designated Data Officer who shall act as a readily available point of contact for Customer and who shall have as part of his/her responsibilities the obligation to respond to Customer queries in respect of Squiz's processing of Personal Data. Squiz shall notify Customer of the contact details of the Designated Data Officer as soon as practicable. If at any time Squiz is required under GDPR or otherwise to appoint a Data Protection Officer (DPO) (as defined in the Data Protection Legislation), then references in this Agreement to a Designated Data Officer shall be considered to be references to such DPO.
Processing Review. 6.1. Customer acknowledges and agrees that Jitterbit is regularly audited by independent third-party auditors and/or internal auditors with respect to its security policy. Jitterbit shall keep reasonably detailed, accurate and up-to- date records, documents and/ or electronic data relating to the processing of Customer Personal Data by ▇▇▇▇▇▇▇▇▇ and to the measures taken by ▇▇▇▇▇▇▇▇▇ under Clause 3.1 to 3.18 (“Records”). All copies of such Records (including any Reports, as defined below) are Jitterbit’s Confidential Information.
6.2. Jitterbit shall permit Customer and its third-party representatives, on reasonable prior written notice, no more than once annually, to receive electronic copies of the audit information in the form of summary reports, audit sheets or table of contents ("Report(s)") that provides reasonable information on Jitterbit’s compliance with its security policies within the scope of the audit without compromising Jitterbit’s security.
6.3. Customer may remotely review all Records related to the processing of Customer Personal Data by Jitterbit for assessing Jitterbit's compliance with its obligations under this DPA. Such review rights may be exercised only once in any calendar year during the Term. Customer shall conduct any such review in a prompt manner so as not to interfere in Jitterbit business operations.
6.4. Audit access by any third-party representative of Customer shall be subject to such representative agreeing to confidentiality obligations in respect of the Records and information obtained, provided that all Records obtained may be disclosed to Customer.
Processing Review. 4.1 The Records are 15Five’s Confidential Information.
4.2 15Five shall permit Customer and its respective third party representatives (at Customer’s sole cost and expense), on reasonable prior written notice during normal business hours, subject to agreement with 15Five’s onsite confidentiality and security procedures and policies, no more than once per calendar year or as otherwise required by law, to gain access to, and receive copies of, the relevant portions of the Records, for the sole purposes of assessing Customer’s compliance with Data Protection Laws and assessing 15Five’s compliance with its obligations under this DPA. Customer shall conduct any such review within a reasonable timeframe so as not to unreasonably interfere in 15Five business operations.
4.3 Access by any third party representative of Customer shall be subject to such representative’s agreement to confidentiality obligations no less restrictive than those set forth in the Agreement with respect to the Records and information obtained in connection with such review, provided that all such Records and information may be disclosed to Customer.