Changed
·
5
5 changes need your attentionChanges that may affect your rights or add new obligations.
0
0 changes in your favorImproved clarity, better protections, or expanded rights.
6
6 minor changesFormatting, typos, or clarifications with no material impact.
Free preview. Showing 1 of 11 redlines — the most consequential change. The other 10 are available with a free email signup.
The contract no longer promises an incident-response team
Splunk has an incident response plan (the Splunk Incident Response Framework or SIRF) and team to assess, respond, contain and remediate (as appropriate) identified security issues, regardless of their nature (e.g., physical, cyber, product). Splunk reviews and updates the SIRF annually to reflect emerging risks and "lessons learned."
BadChanges that may affect your rights or add new obligations.Customers lose an explicit assurance that a named incident-response team will assess, contain, and remediate security issues.
10 MORE REDLINES IN THIS UPDATE
§ 4.3 Subprocessor disclosure window
Notification window for new subprocessors reduced from 30 days to 7 days, limiting customer review time before changes take effect.
§ 8.1 Output ownership and licensing
Model output ownership clarified: vendor retains a perpetual license to use customer prompts and outputs for safety research.
