Common use of Authorized Sub-processors Clause in Contracts

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable may (1) engage its affiliates and the Authorized Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable to engage sub-processors as necessary to perform the Services. 4.2 A list of Noteable’s current Authorized Sub-Processors (the “List”) will be made available to Customer, either at a link provided to Customer, via email or through another means made available to Customer. Such List may be updated by Noteable from time to time. Noteable may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Noteable in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to Noteable. Discontinuation shall not relieve Customer of any fees owed to Noteable under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Noteable, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Noteable, Noteable will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable beforehand, and that such copies will be provided by Noteable only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Company may (1) engage its affiliates and the Authorized Sub-Processors identified on the List (as defined below) listed in Exhibit B to this Addendum to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable Company to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableCompany’s current Authorized Sub-Processors (the “List”) will be made available to Customer, either attached hereto, at a link provided to Customer, via email or through another means made available to Customer. Such List may be updated by Noteable Company from time to time. Noteable Company may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Company will add such third party to the List and notify Customer via emaillist. Customer may object to such an engagement by informing Noteable in writing Company within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableCompany. Discontinuation shall not relieve Customer of any fees owed to Noteable Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by NoteableCompany, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableCompany, Noteable Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable the Company beforehand, and that such copies will be provided by Noteable the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Company may (1) engage its affiliates and the Authorized Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable Company to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableCompany’s current Authorized Sub-Processors (the “List”) will be made available to Customer, either at a link provided to Customer, via email or through another means made available to Customer. is set forth on Exhibit B. Such List may be updated by Noteable Company from time to time. Noteable Company may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten thirty (1030) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Noteable Company in writing within ten thirty (1030) days of receipt of the aforementioned notice by Customer, provided such objection is based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-sub- processor may prevent Noteable Company from offering the Services to Customer. 4.3 If a Sub-Processor change would cause Company to breach its obligations under the Agreement and this Addendum, Customer reasonably objects to an engagement may terminate the Agreement in accordance with Section 4.2, Sections 7.2 (Defaults) and Noteable cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use 7.3 (Termination; Other Remedies) of the affected Service by providing written notice to NoteableAgreement. Discontinuation shall not relieve Customer of any fees owed to Noteable under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten thirty (1030) days of notice by NoteableCompany, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable 4.4 Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableCompany, Noteable Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 4.5 With respect to the Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs Standard Contractual Clauses may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable the Company beforehand, and that such copies will be provided by Noteable the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Company may (1) engage its affiliates and the Authorized Sub-Sub- Processors identified on the List (as defined below) listed in Exhibit B to this Addendum to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable Company to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableCompany’s current Authorized Sub-Processors (the “List”) will be made available to Customer, either at a link provided to CustomerCustomer at xxxxx://xxxxxxx.xxxxx.xx/en/articles/1944353-data-categories-subcontractors, via email or through another means made available to Customer. Such List may be updated by Noteable Company from time to time. Noteable Company may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Noteable in writing Company within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableCompany. Discontinuation shall not relieve Customer of any fees owed to Noteable Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by NoteableCompany, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableCompany, Noteable Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable the Company beforehand, and that such copies will be provided by Noteable the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Company may (1) engage its affiliates and the Authorized Sub-Sub- Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable Company to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableCompany’s current Authorized Sub-Processors (the “List”) will be made available to Customer, either Customer at a link provided to Customer, via email or through another means made available to Customer. xxxxx://xxxxxxxxxxx.xxx/terms/data-protection/. Such List may be updated by Noteable Company from time to time. Noteable may Company will provide a mechanism to subscribe to notifications (which may include but are not limited to email) of new Authorized Sub-Processors and Customer agrees to Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Company will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Noteable Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableCompany. Discontinuation shall not relieve Customer of any fees owed to Noteable Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by NoteableCompany, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableCompany, Noteable Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable the Company beforehand, and that such copies will be provided by Noteable the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Recurly may (1) engage its affiliates and the Authorized Sub-Processors identified on the List (as defined below) listed at xxxxx://xxxxxxx.xxx/legal/privacy/subprocessors to access and process Process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing Processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable Recurly to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableRecurly’s current Authorized Sub-Processors (the “List”) will be made is available to Customer, either at a link provided to Customer, via email or through another means made available to Customerxxxxx://xxxxxxx.xxx/legal/privacy/subprocessors. Such List may be updated by Noteable Recurly from time to time. Noteable may provide a mechanism to subscribe Customer acknowledges and agrees that it is solely responsible for subscribing to notifications of changes, which notification mechanism will be available through the List, in order to be notified of new Authorized Sub-Processors Processors. Customer also acknowledges and that, aside from updating the List and informing Customer agrees that the List has been updated, Recurly shall have no obligation to subscribe to such notifications where availableinform Customer of any additional Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing Processing of Personal Data, Noteable Recurly will add such third party to the List and notify Customer via emailList. Customer may reasonably object to such an engagement the addition of a third party to the List on legitimate grounds by informing Noteable Recurly in writing within ten five (105) days of receipt of the aforementioned notice by Customer, provided such objection is based on reasonable grounds relating to data protectionthat the List has been updated. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Recurly from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Recurly cannot provide a commercially reasonable alternative within a reasonable period of time, Customer Recurly may discontinue terminate the use of the affected Service by providing written notice to NoteableAgreement or this Addendum. Discontinuation Termination shall not relieve Customer of any fees owed to Noteable Recurly under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by NoteableRecurly, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable Processor will enter into a written agreement with the Authorized Sub-Processor imposing the same data protection obligations on the Authorized Sub-Processor data protection obligations comparable to as those imposed on Noteable Processor under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableProcessor, Noteable Processor will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the If Customer and Processor have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Processor of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Processor to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs Standard Contractual Clauses may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable Recurly beforehand, and that such copies will be provided by Noteable Recurly only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Company may (1) engage its affiliates and Affiliates as well as the Authorized Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this AddendumDPA, Customer provides general written authorization to Noteable Company to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableCompany’s current Authorized Sub-Processors (the “List”) will be made is available to Customer, either Customer at a link provided to Customer, via email or through another means made available to Customerxxxxx://xxxxxxx.xxxxx/resources/trust-centre/sub-processors. Such List may be updated by Noteable Company from time to time. Noteable may Company will provide a mechanism to subscribe to notifications (which may include but are not limited to email notifications) of new Authorized Sub-Processors and Customer agrees to Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer waives any right it may have to receive prior notice of changes to Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Company will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Noteable Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableCompany. Discontinuation shall not relieve Customer of any fees owed to Noteable Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by NoteableCompany, that third party will be deemed an Authorized Sub-Processor for the purposes of this AddendumDPA. 4.5 Noteable Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Company under this Addendum DPA with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableCompany, Noteable Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable the Company beforehand, and that such copies will be provided by Noteable the Company only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Company may (1) engage its affiliates and the Authorized Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable Company to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableCompany’s current Authorized Sub-Processors (the “List”) will be made available to Customer, either Customer at a link provided to Customer, via email or through another means made available to Customer. xxxxx://xxxxxxxxxxxxxx.xxx/privacy-policy/subprocessors/ Such List may be updated by Noteable Company from time to time. Noteable may Company will provide a mechanism to subscribe to notifications (which may include but are not limited to email) of new Authorized Sub-Processors and Customer agrees to Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Company will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Noteable Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableCompany. Discontinuation shall not relieve Customer of any fees owed to Noteable Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by NoteableCompany, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableCompany, Noteable Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable the Company beforehand, and that such copies will be provided by Noteable the Company only upon request by Customer.

Authorized Sub-processors. 4.1 4.1. Customer acknowledges and agrees that Noteable UsabilityHub may (1) engage its affiliates and the Authorized Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this AddendumDPA, Customer provides general written authorization to Noteable UsabilityHub to engage sub-processors as necessary to perform the Services. 4.2 4.2. A list of NoteableUsabilityHub’s current Authorized Sub-Processors (the “List”) will be made is available to Customer, either Customer at a link provided to Customer, via email or through another means made available to Customerxxxxx://xxx.xxxxxxxxxxxx.xxx/legal/sub-processors. Such List may be updated by Noteable UsabilityHub from time to time. Noteable may UsabilityHub will provide a mechanism to subscribe to notifications (which may include but are not limited to email) of new Authorized Sub-Processors and Customer agrees to Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten fourteen (1014) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable UsabilityHub will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Noteable UsabilityHub in writing within ten fourteen (1014) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable UsabilityHub from offering the Services to Customer. 4.3 4.3. If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable UsabilityHub cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableUsabilityHub. Discontinuation shall not relieve Customer of any fees owed to Noteable UsabilityHub under the Agreement. 4.4 4.4. If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten fourteen (1014) days of notice by NoteableUsabilityHub, that third party will be deemed an Authorized Sub-Processor for the purposes of this AddendumAgreement. 4.5 Noteable 4.5. UsabilityHub will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable UsabilityHub under this Addendum Agreement with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableUsabilityHub, Noteable UsabilityHub will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the 4.6. If Customer and UsabilityHub have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable UsabilityHub of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable UsabilityHub to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable UsabilityHub beforehand, and that such copies will be provided by Noteable UsabilityHub only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Company may (1) engage its affiliates and the Authorized Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable the Company to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableCompany’s current Authorized Sub-Processors (the “List”) will be made available to Customer, either the Customer at a link provided to Customer, via email or through another means made available to Customerxxxxx://xxx.xxxxxxxxxxx.xxx/compliance. Such List may be updated by Noteable Company from time to time. Noteable may Company will provide a mechanism to subscribe to notifications (which may include but are not limited to email) of new Authorized Sub-Processors and Customer agrees to Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Company will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Noteable Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableCompany. Discontinuation shall not relieve Customer of any fees owed to Noteable Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by NoteableCompany, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableCompany, Noteable Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the If Customer and Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable the Company beforehand, and that such copies will be provided by Noteable the Company only upon request by Customer.

Authorized Sub-processors. 4.1 4.1. Customer acknowledges and agrees that Noteable Lyssna may (1) engage its affiliates and Affiliates as well as the Authorized Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this AddendumDPA, Customer provides general written authorization to Noteable Lyssna to engage sub-processors as necessary to perform the Services. 4.2 4.2. A list of NoteableLyssna’s current Authorized Sub-Processors (the “List”) will be made is available to Customer, either Customer at a link provided to Customer, via email or through another means made available to Customerxxxxx://xxx.xxxxxx.xxx/legal/sub-processors. Such List may be updated by Noteable Lyssna from time to time. Noteable may Lyssna will provide a mechanism to subscribe to notifications (which may include but are not limited to email) of new Authorized Sub-Processors and Customer agrees to Customer, if it wishes, will subscribe to such notifications where available. If Customer does not subscribe to such notifications, Customer will have waived any right it may have to prior notice of changes to Authorized Sub-Processors. At least ten fourteen (1014) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Lyssna will add such third party to the List and notify Customer subscribers, including Customer, via emailthe aforementioned notifications. Customer may object to such an engagement by informing Noteable Lyssna in writing within ten fourteen (1014) days of receipt of the aforementioned notice by Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Lyssna from offering the Services to Customer. 4.3 4.3. If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Lyssna cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableLyssna. Discontinuation shall not relieve Customer of any fees owed to Noteable Lyssna under the Agreement. 4.4 4.4. If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten fourteen (1014) days of notice by NoteableLyssna, that third party will be deemed an Authorized Sub-Processor for the purposes of this AddendumAgreement. 4.5 Noteable 4.5. Lyssna will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Lyssna under this Addendum Agreement with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableLyssna, Noteable Lyssna will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the 4.6. If Customer and Lyssna have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Lyssna of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Lyssna to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable Lyssna beforehand, and that such copies will be provided by Noteable Lyssna only upon request by Customer.

Authorized Sub-processors. 4.1 Customer acknowledges and agrees that Noteable Company may (1) engage its affiliates and the Authorized Sub-Processors identified on the List (as defined below) to access and process Personal Data in connection with the Services and (2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Noteable Company to engage sub-processors as necessary to perform the Services. 4.2 A list of NoteableCompany’s current Authorized Sub-Processors (the “List”) will be made available to Customer, either at a link provided to Customer, via email or through another means made available to Customerthe following link: xxxxx://xxxxx.xxx/help/gdpr-compliance#third-parties. Such The List may be updated by Noteable Company from time to time. Noteable Company may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least ten (10) days before enabling any third party other than existing Authorized Sub-Processors to access or participate in the processing of Personal Data, Noteable Company will add such third party to the List and notify Customer via email. Customer may object to such an engagement by informing Noteable Company in writing within ten (10) days of receipt of the aforementioned notice by Customer, provided such objection is based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Noteable Company from offering the Services to Customer. 4.3 If Customer reasonably objects to an engagement in accordance with Section 4.2, and Noteable Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service by providing written notice to NoteableCompany. Discontinuation shall not relieve Customer of any fees owed to Noteable Company under the Agreement. 4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by NoteableCompany, that third party will be deemed an Authorized Sub-Processor for the purposes of this Addendum. 4.5 Noteable Company will enter into a written agreement with the Authorized Sub-Processor imposing on the Authorized Sub-Processor data protection obligations comparable to those imposed on Noteable Company under this Addendum with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with NoteableCompany, Noteable Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 With respect to the Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations will constitute Customer’s prior written consent to the subcontracting by Noteable Company of the processing of Personal Data if such consent is required under the Standard Contractual Clauses, and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Noteable Company to Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by Noteable the Company beforehand, and that such copies will be provided by Noteable the Company only upon request by Customer.