Common use of Inspections and Audit Clause in Contracts

Inspections and Audit. 6.1 Splunk will contribute to audits requested by Customer, not more than once annually (except in the event of a Personal Data Breach or request from a Supervisory Authority) to demonstrate Splunk's compliance with its obligations under this DPA by: (i) in the case of Hosted Services, providing to Customer (or Customer’s independent third-party auditor that is not a competitor of Splunk) a copy of the relevant and most recent third-party audit reports or certifications, or such other written documentation generally provided by Splunk if the Hosted Services are not audited by a third-party; (ii) in the case of On-Premises Products, providing such information generally provided to similarly situated customers to demonstrate Splunk's compliance with its obligations as a Processor; and (iii) such additional information in Splunk's possession or control requested or required by a Supervisory Authority to demonstrate its compliance with the Personal Data Processing activities carried out by Splunk under this DPA. 6.2 If a Customer who purchased Hosted Services is required under Data Protection Law to request any further information to confirm Splunk’s compliance with its obligations under this DPA, such additional information (including any on-site inspections) will be provided and/or conducted in accordance with Splunk’s fee-based Customer Audit Program. Splunk’s Customer Audit Program terms are available upon request by email to ▇▇▇@▇▇▇▇▇▇.▇▇▇. Customer and Splunk will mutually agree upon the scope, timing and duration of any on-site inspection, including with respect to any third-party inspector selected by the Customer. Customer will promptly notify Splunk of any non-conformance discovered during an on-site audit. 6.3 Requests or inquiries regarding audit services provided herein should be made to ▇▇▇@▇▇▇▇▇▇.▇▇▇ or such other location as Splunk may make available on its website from time to time.

Inspections and Audit. 6.1 Splunk will contribute to audits requested by Customer, not more than once annually (except in the event of a Personal Data Information Breach or request from a Supervisory Authorityregulatory authority) to demonstrate Splunk's compliance with its obligations under this DPA by: (i) in the case of Hosted Services, providing to Customer (or Customer’s independent third-party auditor that is not a competitor of Splunk) a copy of the relevant and most recent third-party audit reports or certifications, or such other written documentation generally provided by Splunk if the Hosted Services are not audited by a third-party; (ii) in the case of On-Premises Products, providing such information generally provided to similarly situated customers to demonstrate Splunk's compliance with its obligations as a ProcessorService Provider; and (iii) such additional information in Splunk's possession or control requested or required by a Supervisory Authority regulatory authority to demonstrate its compliance with the Personal Data Information Processing activities carried out by Splunk under this DPA. 6.2 If a Customer who purchased Hosted Services is required under Data Protection Law to request any further information to confirm Splunk’s compliance with its obligations under this DPA, such additional information (including any on-site inspections) will be provided and/or conducted in accordance with Splunk’s fee-based Customer Audit Program. Splunk’s Customer Audit Program terms are available upon request by email to ▇▇▇@▇▇▇▇▇▇.▇▇▇. Customer and Splunk will mutually agree upon the scope, timing and duration of any on-site inspection, including with respect to any third-party inspector selected by the Customer. Customer will promptly notify Splunk of any non-conformance discovered during an on-site audit. 6.3 Requests or inquiries regarding audit services provided herein should be made to ▇▇▇@▇▇▇▇▇▇.▇▇▇ or such other location as Splunk may make available on its website from time to time.