

Additional instructions provided by Customer (if any) require prior written agreement by Customer and Sumo Logic, including agreement on any additional fees to carry out such instructions. This DPA and the Master Agreement (including the instructions via configuration tools such as the Sumo Logic portal made available by Sumo Logic for the Services) constitute Customer’s documented instructions regarding Sumo Logic’s Processing of Personal Data. Customer instructs Sumo Logic to Process Personal Data to provide the Services and as otherwise authorized or permitted under the Master Agreement, including as specified in Attachment 2 (Scope of Processing). Sumo Logic will Process Personal Data only: (a) in a manner consistent with documented instructions as specified under Section 2.2 (Instructions), including with regard to transfers of Personal Data to a third country and (b) as required by Data Protection Law, provided that Sumo Logic will inform Customer (unless prohibited by such Data Protection Law) of the applicable legal requirement before Processing pursuant to such Data Protection Law (as further detailed in Section 2.3 (Confidentiality)).Ģ.2 Instructions. DATA PROCESSING AND PROTECTIONĢ.1 Limitations on Use. Notwithstanding the foregoing, Sumo Logic will continue to secure Personal Data in accordance with the terms in this DPA for so long as Sumo Logic has access to such Personal Data. This DPA will terminate automatically upon termination of the Master Agreement or as earlier terminated pursuant to the terms of this DPA. If the Customer makes any deletions or revisions to this DPA, then this DPA is null and void. This DPA will be effective as of the effective date of the Master Agreement. Customer and Sumo Logic (each, a “ Party” and collectively, the “ Parties”) acknowledge that Customer may be using the Services to Process Personal Data on behalf of itself, in which case Sumo Logic will be a processor and Customer will be a controller under this DPA, or Customer may be using the Services to Process Personal Data as a processor on behalf of its customers, in which case Sumo Logic will be a sub-processor to Customer (and such customers will remain the controller).ġ.3 Effectiveness.

Capitalized terms used but not defined below or in Attachment 1 (Definitions) to this DPA will have the meanings set forth in the Master Agreement.ġ.2 Background. DEFINITIONS AND BACKGROUNDġ.1 Definitions. This DPA amends the terms and forms part of the Master Service Agreement or other agreement between Customer and Sumo Logic governing the access to and use of Services (collectively, the “ Master Agreement”). This Data Processing Addendum (“ DPA”) is entered into by and between Sumo Logic, Inc.
