Sema4 Data Security Clause Samples

Sema4 Data Security. 7.6.1 Sema4 will complete a review of its data transfer and data storage security controls by the Mount Sinai Parties’ Information Security Team ("Mount Sinai IT"). In the event Mount Sinai IT does not approve the Sema4 data transfer and data storage security controls, the Mount Sinai Parties may suspend their performance under this Agreement until Mount Sinai IT provides its approval. If the Parties do not agree as to whether any such suspension is warranted, the disagreements will be referred to a special information technology committee made up of an equal number of appointees of the Mount Sinai Parties and Sema4. If such special committee is not able to resolve the disagreements, the disagreements will be referred to the Steering Committee for final resolution. Pending final resolution of the disagreements, the Mount Sinai Parties may suspend their performance under this Agreement. 7.6.2 Sema4 will limit access to the Data to Sema4 personnel who have been approved by Sema4’s Data Governance Committee and are required to deliver Services to the Mount Sinai Parties. 7.6.3 Sema4 will house the Data in a cloud-based storage environment that has been approved by Mount Sinai IT. Pursuant to SEC Release 34-85381, certain identified information has been excluded from this Exhibit because it is (i) not material and (ii) would be competitively harmful if publicly disclosed. 22 7.6.4 Sema4 will implement, maintain and enforce security procedures and practices that comply with applicable laws, and that are designed to protect the security and confidentiality of Data and prevent unauthorized access, acquisition, destruction, use, modification and/or disclosure of such Data. Sema4 shall have a process in place for the continuous validation of the existence and effectiveness of appropriate security controls within all Sema4 environment (including any maintained by third party service providers or subcontractors) where Data is received, transmitted, stored or processed (collectively, “Sema4 Data Environments”). The measures to be implemented by Sema4 will include: