Genemod will: (i) implement and maintain appropriate security measures, including, without limitation, technical, physical, administrative, and organizational controls, designed to maintain the confidentiality, security, and integrity of Customer Data; (ii) implement and maintain systems and procedures for detecting, preventing, and responding to attacks, intrusions, and system failures, and regularly test and monitor the effectiveness of such systems and procedures (including through vulnerability scans and penetration testing); (iii) designate employees to coordinate implementation and maintenance of its security; and (iv) identify internal and external risks to the security, confidentiality, and integrity of Customer Data that could result in the unauthorized disclosure, misuse, alteration, destruction, or other compromise of Customer Data, and assess the sufficiency of systems and procedures in place to control these risks. If Genemod becomes aware that Customer Data was accessed or disclosed in breach of this Agreement, Genemod will notify Customer without undue delay, immediately act to mitigate the breach and preserve forensic evidence, and provide information to Customer regarding the nature and scope of the breach. If and to the extent applicable, Genemod and Customer agree to comply with the relevant privacy exhibits made available at
https://genemod.net/dpa each of which is incorporated by reference into this Agreement as Exhibit A: EU Privacy Annex (DPA) (Exhibit A-1) and the US Privacy Annex, (Exhibit A-2)