Common use of Certifications and Audits Clause in Contracts

Certifications and Audits. 6.1. Customer Audit Customer or its independent third-party auditor reasonably acceptable to RELISH (which shall not include any third party auditors who are either a competitor of RELISH or not suitably qualified or independent) may audit RELISH’s control environment and security practices relevant to Personal Data processed by RELISH only if: a) RELISH has not provided sufficient evidence of its compliance with the Technical and Organizational Measures that protect the production systems of the Cloud Service through providing either: (i) a certification as to compliance with ISO 27001 or other standards (scope as defined in the certificate); or