In the event of an actual or suspected Data Breach or Information Security Incident, Heka Health will
promptly take all reasonable corrective actions and immediately notify the Customer and all registered
users that were impacted by the incident. Heka Health will cooperate fully with the Customer in all
reasonable efforts to mitigate the consequences, correct Heka Health’s applications and systems, and
reduce the risk of occurrence of a Data Breach or Information Security Incident in the future.