Commerce contractually requires all service providers, contractors, subcontractors or other third parties that process, transmit, access, or store company or customer data to be in compliance with all applicable laws and to comply with all relevant company policies (including, but not limited to, retention, encryption, transmission and application security policies) and safeguards.