SECURITY ADDENDUM (ENTERPRISE SAAS)

Arizona Jurisdictional Version

1. SCOPE

Applies to Services under [SaaS Agreement].

2. SECURITY PROGRAM

Provider maintains security program complying with A.R.S. Section 18-552.

3-11. [Standard security controls - access, encryption, network, application, vulnerability, logging, BC/DR, segregation, pen testing]

12. INCIDENT RESPONSE

Per A.R.S. Section 18-552:
- Notification within 45 days of breach determination
- If >1,000 Arizona residents affected, notify Attorney General
- Content: description, type of info, contact, mitigation steps

13-18. [Audit, subprocessors, physical security, personnel, data deletion, changes]

19. ARIZONA-SPECIFIC REQUIREMENTS

19.1 Personal Information

Per A.R.S. Section 18-551: name with SSN, driver's license, financial account, health insurance, passport, biometric data.

19.2 Trade Secrets

Per Arizona UTSA (A.R.S. Section 44-401 et seq.).

19.3 E-Signatures

Per A.R.S. Section 44-7001 et seq.

20. GOVERNING LAW

Arizona law. Exclusive jurisdiction Maricopa County. Late payments: 10% maximum (A.R.S. Section 44-1201). JURY WAIVER.

CHECKLIST

☐ Master Agreement referenced
☐ Arizona-licensed counsel review