7. Sub‐processing

    1. Authorised Sub‐processors. Customer agrees that We may use sub‐processors to fulfil Our contractual obligations under this DPA or to provide certain services on Our behalf, such as providing infrastructure and database services. Our website lists sub‐processors that are currently engaged by Us to carry out specific processing activities on behalf of the Customer. At least 45 days before We engage any new sub‐processor to carry out specific processing activities on behalf of Customer, We will issue the Customer a Change Notice as provided in the Master Subscription Agreement. Customer hereby consents to Our use of sub‐processors as described in this Section. Except as set forth in this Section, or as Customer may otherwise authorise, We will not permit any sub‐processor to carry out specific processing activities on behalf of Customer. 

    2. Sub‐processor Obligations. If We authorise any sub‐processor as described in Section 7.1 above: 

      1. We will restrict the sub‐processor’s access to Customer Data only to what is necessary to maintain the Service or to provide the Service to Customer in accordance with the Documentation, We will prohibit the sub‐processor from accessing Customer Data for any other purpose; 


      2. We will enter into a written agreement with the sub‐processor and, to the extent that the sub‐processor is performing the same data processing services that are being provided by Us under this DPA, We will impose on the sub‐processor the same contractual obligations that We have under this DPA; and 


      3. We will remain responsible for Our compliance with the obligations of this DPA and for any acts or omissions of the sub‐processor that cause Us to breach any of Our obligations under this DPA. 


Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.