Common use of Customer’s Security Responsibilities Clause in Contracts

Customer’s Security Responsibilities. The Customer agrees that, without prejudice to IRIS Connect’s obligations under Section 10.6 (IRIS Connect’s Security Measures, Controls and Assistance) and Section 11 (Data Incidents): 12.1.1 The Customer is solely responsible for its use of the Services, including: 12.1.1.1 making appropriate use of the Services and the Additional Security Controls to ensure a level of security appropriate to the risk in respect of the Customer Data; 12.1.2.2 securing the account authentication credentials, systems and devices the Customer uses to access the Services; and 12.1.2.3 IRIS Connect has no obligation to protect Customer Data that the Customer elects to store or transfer outside of IRIS Connect’s and its sub-processors’ systems (for example, offline or on-premise storage), or to protect Customer Data by implementing or maintaining Additional Security Controls except to the extent the Customer has opted to use them.

Customer’s Security Responsibilities. The Customer agrees that, without prejudice to IRIS Connect’s obligations under Section 10.6 12.1 (IRIS Connect’s Security Measures, Controls and Assistance) and Section 11 13 (Data Incidents): 12.1.1 The (a) Customer is solely responsible for its use of the Services, including: 12.1.1.1 (i) making appropriate use of the Services and the Additional Security Controls to ensure a level of security appropriate to the risk in respect of the Customer Data; 12.1.2.2 (ii) securing the account authentication credentials, systems and devices the Customer uses to access the Services; and 12.1.2.3 (b) IRIS Connect has no obligation to protect Customer Data that the Customer elects to store or transfer outside of IRIS Connect’s and its sub-processorsSubprocessors’ systems (for example, offline or on-on- premise storage), or to protect Customer Data by implementing or maintaining Additional Security Controls except to the extent the Customer has opted to use them.