Agmt22 Granicus - Laserfiche WebLink

Browse Search

REV: 06-24-22 RL measures will be implemented at Granicus to provide the agreed-upon service levels (for example, encryption and lead-lined containers): 3.1 Personal Data in transfer over Granicus internal networks will be protected according to the Granicus Information Security Policies. 3.2 When data is transferred between Granicus and its Customers, the protection measures for the transferred Personal Data will be mutually agreed upon and made part of the relevant agreement. This applies to both physical and network-based data transfer. In any case, the Customer assumes responsibility for any data transfer once it is outside of Granicus-controlled systems (e.g., data being transmitted outside the firewall of the Granicus data center). 4 JOB CONTROL Granicus will ensure that Personal Data being processed on commission (i.e., Personal Data processed on a customer’s behalf) is processed solely in accordance with the Master Subscription Agreement and related instructions of the customer. Granicus takes the following measures: 4.1 Granicus will use controls and processes to monitor compliance with contracts between Granicus and its customers, subprocessors or other service providers. 4.2 In accordance with Granicus Information Security Policies, Personal Data will require at least the same protection level as “confidential” information according to the Granicus Information Classification standard. 4.3 All Granicus employees and contractual subprocessors or other service providers will be contractually bound to respect the confidentiality of all sensitive information including trade secrets of Granicus customers and partners. 5 DATA SEPARATION CONTROL Granicus will employ technical measures to ensure that data is properly segregated: 5.1 Where feasible, Granicus will use the technical capabilities of the deployed software (for example: multi- tenancy, or separate system landscapes) to achieve data separation among Personal Data originating from multiple customers. 5.2 If Personal Data is required to handle a support incident from Customer, the data is assigned to that message and used only to process that message; it is not accessed to process any other messages. This data is stored in dedicated support systems. 6 DATA INTEGRITY CONTROL Granicus will ensure that Personal Data remains intact, complete, and current during processing activities. 7 SECURITY INCIDENTS AND REPORTING Granicus maintains a process to receive input regarding potential security incidents and violations. Granicus will respond and report to actual incidents in accordance with the Granicus Incident Response Plan and Information Security Policies. ATTY/AGR.2022.156/Granicus (Online agenda and meeting hosting and indexing) (Page 31 of 32)