Customer Data Rights and Responsibilities
The below rights and responsibilities will govern your use of the Subscription Services in addition to and in accordance with the terms of your Agreement and an applicable Schedule.
During the term of the Subscription Services, Customer will:
Be responsible for the accuracy, integrity and legality of content and data;
Not use customer data or other personally-identifiable data in a non-Production Environment;
Not include Protected Health Information in a Production Environment unless using Pega Cloud HIPAA Edition;
Not include confidential or sensitive data in the Customer Application log files;
Create and protect security credentials related to Customer’s use of the Subscription Services;
Notify Pegasystems within twenty-four (24) hours if it becomes aware of any actual or alleged data security incident at the application layer;
Be responsible for third party data flows that the Customer integrates with and into the Environments;
During the term of the Subscription Services, Pegasystems will:
Immediately notify Customer within twenty-four (24) hours if it becomes aware of any actual or alleged security incident involving customer data at the infrastructure layer, including a notification of loss or suspected loss of data whether or not such data has been encrypted. In the event of such data breach, Pegasystems will cooperate with Customer in any manner reasonably requested by Customer and in accordance with applicable law and regulations, including conducting the investigation, cooperating with authorities, and notifying affected persons and other appropriate entities;
Upon request made within 15 days from termination of the Subscription Services, provide Customer’s data in a Production Environment database backup file encrypted to customary standards. Pegasystems may delete any Customer data once provided to Customer or that is not requested within 15 days from termination of the Subscription Services, unless legally prohibited.
Published October 3, 2018 — Updated October 5, 2018