Hello,
Are there any terms regarding organizations being notified in the event of an incident or breach that occurs within your organization outside of PII? If not, is this something that would be able to be added to the terms? Looking through your terms of service only seemed to state that notification would be given to an organization if their PII was exposed, not for data.
Thanks