(c) The Authorized Auditors may use the Audit Access Rights for the following audit purposes (each, an “Audit Purpose” and collectively, the “Audit Purposes”):
(i) examine, evaluate and verify Service Provider’s compliance with the Agreement;
(ii) examine, evaluate and verify the integrity of Customer Data;
(iii) examine, evaluate and verify the systems that process, store, support and transmit the Customer Data;
(iv) examine, evaluate and verify the control points and other Service Provider internal controls, processes and procedures (e.g., financial controls, organizational controls, input/output controls, system modification controls, processing controls, system design controls, and access controls) and the security, disaster recovery and back-up practices and procedures associated with the Services;
(v) examine, evaluate and verify Service Provider’s performance of the Services;
(vi) examine, evaluate and verify Service Provider’s reported performance against the applicable Service Levels;
(vii) examine, evaluate and verify the accuracy of Service Provider’s invoices to Customer; and
(viii) enable Customer to meet the regulatory, financial reporting, and other requirements imposed by applicable Laws.
(d) Service Provider and Customer will develop and agree upon an action plan to promptly address and resolve any deficiencies, concerns and/or recommendations arising out of any audit, and Service Provider, at its own expense, will undertake remedial action in accordance with such action plan and the dates specified therein.
Notwithstanding anything in this Schedule F:
(a) Service Provider will not be obliged to provide (unless required by applicable Law):
(i) internal data of Service Provider generated in connection with the performance of Services but not reasonably related to its obligations under the Agreement;
(ii) Service Provider’s internal costs in providing the Services (except Pass-Through Expenses and any Fees charged on a cost or cost-plus basis);
(iii) any privileged or attorney work product information of Service Provider or its Affiliates, customers, Subcontractors or third parties; or
- 77 -