By contrast, Google continues to leave wiggle room in their contracts in matters related to data use and does not offer the best data privacy terms by default to all enterprise users. Unless enterprises put in the effort to opt-in to Google’s Data Processing Amendment (DPA), Google will continue to have the right to process customer data for purposes other than providing the services. Furthermore, while Google claims in its online policies and principles that it complies with the EU and Swiss Safe Harbor programs, this does not appear to be a contractual guarantee in its DPA. Indeed, in its DPA, Google states that it will either remain enrolled in the Safe Harbor program or adopt an alternative compliance program. Moreover, Google does not appear to offer the EU model clauses by default, choosing instead to say that it “may enter into” the EU model clauses with the customer.