CUSTOMER DATA INCIDENT MANAGEMENT AND NOTIFICATION. Thunderhead maintains security incident management policies and procedures specified in the Security and Privacy Documentation and shall notify Customer without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to any Personal Data comprised within the Customer Data, which is transmitted, stored or otherwise Processed by Thunderhead or its Sub-processors of which Thunderhead becomes aware (a “Customer Data Incident”). Thunderhead shall make reasonable efforts to identify the cause of such Customer Data Incident and take those steps as Thunderhead deems necessary and reasonable in order to remediate the cause of such a Customer Data Incident to the extent the remediation is within Thunderhead’s reasonable control. The obligations herein shall not apply to incidents that are caused by Customer or Customer’s Users or any Third Party Application.
Appears in 2 contracts
CUSTOMER DATA INCIDENT MANAGEMENT AND NOTIFICATION. Thunderhead maintains security incident management policies and procedures specified in the Security and Privacy Documentation and shall notify Customer without undue delay after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to any Personal Data comprised within the Customer Data, which is transmitted, stored or otherwise Processed by Thunderhead or its Sub-processors of which Thunderhead becomes aware (a “Customer Data Incident”). Thunderhead shall make reasonable efforts to identify the cause of such Customer Data Incident and take those steps as Thunderhead deems necessary and reasonable in order to remediate the cause of such a Customer Data Incident to the extent the remediation is within Thunderhead’s reasonable control. The obligations herein shall not apply to incidents that are caused by Customer or Customer’s Users or any Third Party ApplicationApplication (including the SFDC services).
Appears in 1 contract
Sources: Data Processing Addendum