1. Permitted Disclosures: Used when there are specific circumstances where disclosure is permitted, such as to other team members or subcontractors

2. Intellectual Property Rights: Include when the VA will be creating or handling intellectual property beyond basic confidential information

3. Non-Competition: Optional section when the company wants to restrict the VA from working with competitors

4. Non-Solicitation: Include when there's a need to prevent the VA from soliciting clients or employees

5. Cross-Border Data Transfer: Required when the VA is located in a different country and will be accessing/transferring data across borders

6. Audit Rights: Include for high-security situations where the company needs rights to audit the VA's compliance

7. Insurance Requirements: Used when requiring the VA to maintain specific insurance coverage for data protection

1. Schedule A - Description of Services: Detailed description of the VA services to contextualize the confidentiality obligations

2. Schedule B - Specific Categories of Confidential Information: Detailed list of types of confidential information the VA will access

3. Schedule C - Security Protocols: Specific technical and organizational measures required for data protection

4. Schedule D - Approved Software and Tools: List of approved software, platforms, and tools for handling confidential information

5. Appendix 1 - Data Handling Procedures: Step-by-step procedures for handling different types of confidential information

6. Appendix 2 - Incident Response Plan: Procedures to follow in case of a data breach or security incident