Common use of Issue Date Comment Clause in Contracts

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 Support 7 Incident handling 7 Service requests 8 Service level targets 8 Limitations and constraints 8 Communication, reporting and escalation 9 General communication 9 Regular reporting 10 Violations 10 Escalation and complaints 11 Information security and data protection 11 Responsibilities 11 Of EGI Foundation 11 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 Review, extensions and termination 13 The present Service Level Agreement (“the Agreement’) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx (the Customer) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using data. The Customer is a consortium represented by ATOS. This Agreement is valid from 01/08/2020 to 31/12/2022. The Component Provider will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022). The Agreement was discussed and approved by the Customer and the Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 Memory per core (GB): 336 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost.

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA 28/05/2021 First version agreed with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, Component Provider Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 25/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. OLA template (v2.13) Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of 11/06/2022 New capacity allocation in the clustertenancy: 36 60 vCPU cores and 32cores, 122 GB of RAM and 2TB of block storage Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 5 Service hours and exceptions 6 9 Support 7 9 Incident handling 7 9 Service requests 8 10 Service level targets 8 10 Limitations and constraints 8 10 Communication, reporting and escalation 9 10 General communication 9 10 Regular reporting 10 11 Violations 10 11 Escalation and complaints 11 Information security and data protection 11 12 Responsibilities 11 13 Of the Component Provider 13 Of EGI Foundation 11 13 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 14 Review, extensions and termination 13 14 References 14 The present Service Operational Level Agreement (“the Agreement’”) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx IFCA-LCG2 (the CustomerComponent Provider) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness OpenRiskNet1 is operating an open e-Infrastructure providing resources and services for supporting different scientific communities requiring risk assessment, including chemicals, cosmetic ingredients, therapeutic agents and nanomaterials. More specifically, OpenRiskNet and NanoCommons provide concepts and guidelines for data management and sharing, specialized databases and software as well as a standardized cloud setup for the potential core infrastructure, and guidelines for the deployment of digitisation, big data and cloud technologies to improve the modelling, creation and implementation compute services on top of policythis core. In three years (2020the context of the EGI-2023) ACE project the project OpenRiskNet risk assessment infrastructure will address challenges faced by many businesses be further optimized to better integrate with other services of EGI-ACE, including AAI, HPC, Cloud and public administrations of improving how they make policy decisions by accessing Jupyter for making the provided data sources more visible and using datainterlinkable with data from other relevant communities. The resulting e-infrastructure will be offered to EOSC users interested to test their functionalities and their applicability to their own specific study requirements. The Customer is a consortium represented by ATOSEdelweiss Connect, Uni Birmingham. This Agreement is valid from 01/08/2020 01/06/2021 to 31/12/202230/06/2023. The Once approved, this Agreement is automatically renewed, as long as the Component Provider will guarantee does not express a decision to terminate the availability of the platform for Agreement at least a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months month before the end date of this agreement (September-October 2022)the Agreement. The Agreement was discussed and approved by the Customer EGI Foundation and the Component Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 Memory per core (GB): 336 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost.on

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA 01/03/2016 OLA signed with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, cloud provider Xxxxxxxxxx Xxxxxxxxx Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 20/02/2017 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. OLA until 12/2020 Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources 24/07/2019 Change of Provider contact person Xxxxxxxxxx Xxxxxxxxx v0.4 25/07/2019 Change user name from MoBrain to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM WeNMR Xxxxxxxxxx Xxxxxxxxx v0.5 11/12/2020 Extend agreement till 06/2023 Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% v0.6 11/12/2021 Updated OLA template (from 104 to 136 vCPUsv2.13) Xxxxxxxxx Xxxx-Xxxxxx Xxxxxxxx Xx Xxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 5 Service hours and exceptions 6 9 Support 7 9 Incident handling 7 9 Service requests 8 10 Service level targets 8 10 Limitations and constraints 8 10 Communication, reporting and escalation 9 10 General communication 9 10 Regular reporting 10 11 Violations 10 11 Escalation and complaints 11 Information security and data protection 11 12 Responsibilities 11 13 Of the Component Provider 13 Of EGI Foundation 11 13 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 14 Review, extensions and termination 13 14 References 14 The present Service Operational Level Agreement (“the Agreement’”) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx XXXX-MATRIX (the CustomerComponent Provider) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims The main objective of WeNMR is to harness lower barriers for scientists to access modern e-Science solutions from micro to macro scales. By building on grid- and cloud-based infrastructures and on the potential of digitisation, big data existing expertise available within WeNMR1 and cloud technologies to improve the modelling, creation N4U2 and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses integrating molecular structural biology and public administrations of improving how they make policy decisions by accessing medical imaging services and using data. The Customer is a consortium represented by ATOSthe Faculty of Science – Chemistry, Utrecht University. This Agreement is valid from 01/08/2020 01/01/2016 to 31/12/202230/06/2023. The Once approved, this Agreement is automatically renewed, as long as the Component Provider will guarantee does not express a decision to terminate the availability of the platform for Agreement at least a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months month before the end date of this agreement (September-October 2022)the Agreement. The Agreement was discussed and approved by the Customer EGI Foundation and the Component Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 Memory per core (GB): 336 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost.on

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 16 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 Support 7 Incident handling 7 Service requests 8 Service level targets 8 Limitations and constraints 8 Communication, reporting and escalation 9 General communication 9 Regular reporting 10 Violations 10 Escalation and complaints 11 Information security and data protection 11 Responsibilities 11 Of EGI Foundation 11 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 Review, extensions and termination 13 The present Service Level Agreement (“the Agreement’) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx (the Customer) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using data. The Customer is a consortium represented by ATOS. This Agreement is valid from 01/08/2020 to 31/12/2022. The Component Provider will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022). The Agreement was discussed and approved by the Customer and the Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 84 Memory per core (GB): 336 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost.

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 Support 7 Incident handling 7 Service requests 8 Service level targets 8 Limitations and constraints 8 Communication, reporting and escalation 9 General communication 9 Regular reporting 10 Violations 10 Escalation and complaints 11 Information security and data protection 11 Responsibilities 11 Of EGI Foundation 11 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 Review, extensions and termination 13 The present Service Level Agreement (“the Agreement’) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx (the Customer) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using data. The Customer is a consortium represented by ATOS. This Agreement is valid from 01/08/2020 to 31/12/2022. The Component Provider will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022). The Agreement was discussed and approved by the Customer and the Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUDRECAS-BARI 1 xxxxx://xxxxxxxxxxx.xx/ ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 68 Memory per core (GB): 336 304 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUDRECAS-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost. Duration: 01/08/2020 - 31/12/2022 Payment ode offer: Pay-for-use 2 See service offer for specifications (e.g. pricing, administration) Allocation type: Pledged Virtual Organisation Supported VOs: xx.xxxxxxxxxxx.xx VO ID card: xxxxx://xxxxxxxxxx-xxxxxx.xxx.xx/vo/view/voname/xx.xxxxxxxxxxx.xx VO-wide list: xxxxx://xxxxx.xxx.xx/store/vo/xx.xxxxxxxxxxx.xx Provider AUP link xxxxx://xxxxxxxxx.xxx.xx/document/2623 Service Offer/Cost [€] Compute 20,000€ Storage Free (included in the compute costs) Technical support 5,000€ Total3 25,000€4 The Services are supported by additional services: • Accounting5 • Service Monitoring6 (EGI operational Virtual Organization only) Note: Please note that the following services are not provided by EGI Foundation: • Monitoring of xx.xxxxxxxxxxx.xx • Monitoring of services provided by the Customer on agreed resources 2 Service hours and exceptions The Services operate during the following hours: twenty-four (24) hours a day, seven (7) days a week, three hundred sixty-five (365) days a year. The following exceptions apply: 3 For the duration of the agreement, subject to changes depending on customer requests 4 Excluding VAT (reverse charging) 5 xxxx://xxxxxxxxxx.xxx.xx/ • Planned maintenance windows or service interruptions (“scheduled downtimes”7) will be notified via email in a timely manner i.e. 24 hours before the start of the outage8. • Downtime periods exceeding 24 hours need justification. • Human support is provided during support hours. 3 Support Support is provided via EGI Service Desk9. Access requires a valid X.509 or the login via an EGI SSO account10. Support is available between: • Monday to Friday. • From 9:00 to 17:00 CET/CEST in the time zone of the relevant Resource Centres. Service times always apply with the exception of public holidays in the country of the supporting Resource Centres.

Issue Date Comment. Author FINAL 13/10/2020 16/05/2022 Agreed SLA OLA with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxxx Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary xxxxx://xx.xxx.xx/glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 9 Support 7 9 Incident handling 7 9 Service requests 8 10 Service level targets 8 10 Limitations and constraints 8 11 Communication, reporting and escalation 9 11 General communication 9 11 Regular reporting 10 12 Violations 10 13 Escalation and complaints 11 13 Information security and data protection 11 14 Responsibilities 11 15 Of the Component Provider 15 Of the EGI Foundation 11 15 Of the Customer 12 15 Finance and administration 12 9.1 Administration 16 Service Offers 12 9.2 16 Invoicing and Payment Schedule 13 16 Review, extensions and termination 13 17 The present Service Operational Level Agreement (“the Agreement’”) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx IN2P3-IRES - Institut Pluridisciplinaire Xxxxxx Xxxxxx Grid and Cloud Computing site at IPHC (the CustomerComponent Provider) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 The PITHIA-NFR1 project aims to harness build a European distributed network that integrates observing facilities, data processing tools and prediction models dedicated to ionosphere, thermosphere and plasmasphere research. For the potential of digitisationfirst time, big data all European researchers, key national and cloud technologies to improve the modellingregional research infrastructures such as Ionosondes, creation Digisondes, GNSS receivers, Doppler sounding systems, riometers, and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses VLF receivers are integrated, ensuring optimal use and public administrations of improving how they make policy decisions by accessing and using datajoint development. The Customer is a consortium represented by ATOSthe EGI Foundation. This Agreement is valid from 01/08/2020 01/06/2022 to 31/12/2022. The Component Provider will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022)31/03/2025. The Agreement was discussed and approved by the Customer EGI Foundation and the Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 Memory per core (GB): 336 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost.Component Provider

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA 17/12/2018 OLA signed with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, provider Xxxxxxxxxx Xxxxxxxxx Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host 24/07/2019 Changed the name of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx provider from CESNET-MetaCloud to CESNET-MCC Xxxxxxxxxx Xxxxxxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM 22/11/2019 Extended OLA till 12/2020 Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% 15/09/2020 Extended OLA till 12/2021 Xxxxxxxx Xx Xxxxx v0.5 11/12/2021 Updated OLA template (from 104 to 136 vCPUsv2.13) Xxxxxxxxx Xxxx-Xxxxxx Xxxxxxxx Xx Xxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 5 Service hours and exceptions 6 9 Support 7 9 Incident handling 7 9 Service requests 8 10 Service level targets 8 10 Limitations and constraints 8 10 Communication, reporting and escalation 9 10 General communication 9 10 Regular reporting 10 11 Violations 10 11 Escalation and complaints 11 Information security and data protection 11 12 Responsibilities 11 13 Of the Component Provider 13 Of EGI Foundation 11 13 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 14 Review, extensions and termination 13 14 References 14 The present Service Operational Level Agreement (“the Agreement’”) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx CESNET-MCC (the CustomerComponent Provider) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims GEO DAB1 is a key component of the GEOSS Common Infrastructure (GCI), transparently connecting GEOSS User’s requests to harness the potential of digitisation, big data and cloud technologies to improve resources shared by the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using dataGEOSS Providers. The Customer User is a consortium represented by ATOSthe CNR2. This Agreement is valid from 01/08/2020 01/12/2018 to 31/12/202230/06/2023. The Once approved, this Agreement is automatically renewed, as long as the Component Provider will guarantee does not express a decision to terminate the availability of the platform for Agreement at least a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months month before the end date of this agreement (September-October 2022)the Agreement. The Agreement was discussed and approved by the Customer EGI Foundation and the Component Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 Memory per core (GB): 336 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost.on

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 Support 7 Incident handling 7 Service requests 8 Service level targets 8 Limitations and constraints 8 Communication, reporting and escalation 9 General communication 9 Regular reporting 10 Violations 10 Escalation and complaints 11 Information security and data protection 11 Responsibilities 11 Of EGI Foundation 11 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 Review, extensions and termination 13 The present Service Level Agreement (“the Agreement’) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx (the Customer) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using data. The Customer is a consortium represented by ATOS. This Agreement is valid from 01/08/2020 to 31/12/2022. The Component Provider will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022). The Agreement was discussed and approved by the Customer and the Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 104 Memory per core (GB): 336 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost.

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx v0.5 30/09/2022 Added Check-In and IISAS as new component provider for PolicyCLOUD backups. Xxxxxxx Xxxxxxxxx, Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 Support 7 Incident handling 7 Service requests 8 Service level targets 8 Limitations and constraints 8 Communication, reporting and escalation 9 General communication 9 Regular reporting 10 Violations 10 Escalation and complaints 11 Information security and data protection 11 Responsibilities 11 Of EGI Foundation 11 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 Review, extensions and termination 13 The present Service Level Agreement (“the Agreement’) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx (the Customer) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using data. The Customer is a consortium represented by ATOS. This Agreement is valid from 01/08/2020 to 31/12/202230/04/2023. The Component Provider Providers will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022). The Agreement was discussed and approved by the Customer and the Provider initially on 13/10/2020, and later on 30/04/2023 to add a new component provider to backup PolicyCLOUD services. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: properties 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI IISAS-FedCloud ServiceCategory: Cloud Compute Cloud Compute Number of virtual CPU cores: 136 136 Memory per core (GB): 336 336 in total Local disk (GB): 40 See Online Storage Public IP addresses: Yes. Access to the VPN is also provided. 15 Allocation type: Pledged Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Members of the Virtual Organisation "xx.xxxxxxxxxxx.xx" need permission to create images in the OpenStack project. Payment mode offer: Pay-for-use2 use Pay-for-use Duration: 01/08/2020 - 31/12/2022 31/12/20222 01/10/2022 - 30/04/2023 2 Or until the last project review. GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) xxxxx.xx.xxxxx.xx (xxx.xxxxxxxxx.xxxx) Online Storage ComputeResource Resource Centre INFN-CLOUD-BARI IISAS-FedCloud Category Online Storage Online Storage Guaranteed storage capacity [TB]: 2TB 2 TB Opportunistic storage capacity [TB]: N/A N/A Standard interfaces supported: POSIX/Object Storage Block storage Storage technology: N/A Ceph distributed storage and NFS storage backed by disk array. Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost. Duration: 01/08/2020 - 31/12/20223 01/10/2022 - 30/04/2023 Payment ode offer: Pay-for-use Pay-for-use 3 Or until the last project review. Allocation type: Pledged Pledged Check-In (as community AAI/IdP) Resource Centre GRNET Category Check-In Deployment type Shared AAI Protocol OIDC, XXXX User registration and group management Operated by EGI: xxxxx://xxx.xxx.xx/registry/ COmanage group: xx.xxxxxxxxxxx.xx Enrollment URL: xxxxx://xxx.xxx.xx/registry/co_petitions/start/coef:100 Duration 01/08/2020 - 30/04/2023 Payment mode offer: Sponsored Check-In (for services / resource providers) Resource Centre GRNET Category Check-In Service name PolicyCLOUD keycloak Service URL xxxxx://xxxxxxxxxxx-xxxx.xxxxxxxxxx.xxx/auth/ AAI protocol XXXX Communities All. Duration 01/10/2021 - 30/04/2023 Payment mode offer Sponsored Virtual Organisation Supported VOs: xx.xxxxxxxxxxx.xx VO ID card: xxxxx://xxxxxxxxxx-xxxxxx.xxx.xx/vo/view/voname/xx.xxxxxxxxxxx.xx VO-wide list: xxxxx://xxxxx.xxx.xx/store/vo/xx.xxxxxxxxxxx.xx Provider AUP link xxxxx://xxxxxxxxx.xxx.xx/document/3600 Service Offer/Cost INFN-CLOUD-BARI IISAS-FedCloud Compute 34,000€ 0.025 € per vCPUh Storage Free (included in the compute costs) Included in the compute costs. Technical support 5,000€ Included in the compute costs. Total4 39,000€ 17,299.2 € 4 Excluding VAT (reverse charging) The Services are supported by additional services: • Accounting5 • Service Monitoring6 (EGI operational Virtual Organization only) Note: Please note that the following services are not provided by EGI Foundation: • Monitoring of xx.xxxxxxxxxxx.xx • Monitoring of services provided by the Customer on agreed resources 2 Service hours and exceptions The Services operate during the following hours: twenty-four (24) hours a day, seven (7) days a week, three hundred sixty-five (365) days a year. The following exceptions apply: • Planned maintenance windows or service interruptions (“scheduled downtimes”7) will be notified via email in a timely manner i.e. 24 hours before the start of the outage8. • Downtime periods exceeding 24 hours need justification. • Human support is provided during support hours. 3 Support Support is provided via EGI Service Desk9. Access requires a valid X.509 or the login via an EGI SSO account10. Support is available between: • Monday to Friday. • From 9:00 to 17:00 CET/CEST in the time zone of the relevant Resource Centres. Service times always apply with the exception of public holidays in the country of the supporting Resource Centres.

Issue Date Comment. Author FINAL 13/10/2020 16/07/2021 Agreed SLA with the Customer Xxxxxx Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 Support 7 Incident handling 7 Service requests 8 Service level targets 8 Limitations and constraints 8 Communication, reporting and escalation 9 General communication 9 Regular reporting 10 Violations 10 Escalation and complaints 11 Information security and data protection 11 Responsibilities 11 Of EGI Foundation 11 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 Review, extensions and termination 13 The present Service Level Agreement (“the Agreement’) is made between EGI Foundation (the Service Provider) and PolicyCLOUDBinaré Oy/xx.xxxxxxxxxxx.xx xx.xxxxxx-xx.xx (the Customer) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using data. The Customer Binareé Oy1 is a consortium represented by ATOSrecent spin-off from the University of Jyväskylä (Finland), doing research and development in embedded device and IoT security, Binaré offers both professional services and an automated analysis platform to meet various needs for IoT security. Binaré’s advisory services leverages both the automated platform and the team’s expertise to offer penetration testing and detailed cyber security assessments of IoT devices/firmware in an online environment that closely simulates the real-world. This Agreement is valid from 01/08/2020 22/06/2021 to 31/12/2022. The Component Provider will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022)31/12/2021. The Agreement was discussed and approved by the Customer and the Provider on 13/10/202016/07/2021. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Service Cloud Compute Number of virtual CPU cores: 136 320 1 xxxxx://xxxxxx.xx/ Memory per core (GB): 336 A total of 640GB is provided Local disk (GB): 40 5TB of block storage (overall) Public IP addresses: Yes. Access to the VPN is also provided. 12 Allocation type: Pledged Pledged2 Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. n/a Payment mode offer: PayPer-for-use2 use3 Duration: 01/08/2020 22/06/2021 - 31/12/2022 31/12/2021 GOCDB endpoints URLs Service: xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online - xxx.xxxxxxxxx.xxxx Storage ComputeResource Resource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 25 TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A POSIX Other technical requirements: Additional 50n/a Duration: 22/06/2021 - 31/12/2021 Payment ode offer: Pay-100GB for-use Allocation type: Pledged GOCDB endpoints URLs Service: xxxxx.xxxxx.xx.xxxx.xx - xxx.xxxxxxxxx.xxxx 2 Resources are exclusively reserved to the Customer 3 See service offer for specifications (e.g. pricing, administration) Storage Virtual Organisation Supported VOs: xx.xxxxxx-xx.xx VO ID card: xxxxx://xxxxxxxxxx-xxxxxx.xxx.xx/vo/view/voname/xx.xxxxxx-xx.xx Provider AUP link xxxxx://xxx.xxxxx-xxxx.xx/servizi/recasupload/files/AUP-ReCaS-EN-2021 0616.pdf VO-wide list: xxxxx://xxxxx.xxx.xx/store/vo/xx.xxxxxx-xx.xx The Services are supported by additional services: • Accounting4 • Service Monitoring5 (EGI operational Virtual Organization only) Note: Please note that the following services are not provided by EGI Foundation: • Monitoring of OpenStack Swift Storage xx.xxxxxx-xx.xx • Monitoring of services provided by the Customer on agreed resources 2 Service hours and exceptions The Services operate during the following hours: twenty-four (24) hours a day, seven (7) days a week, three hundred sixty-five (365) days a year. The following exceptions apply: • Planned maintenance windows or service interruptions (“scheduled downtimes”6) will be made available, without notified via email in a timely manner i.e. 24 hours before the start of the outage7. • Downtime periods exceeding 24 hours need justification. • Human support is provided during support hours. 4 xxxx://xxxxxxxxxx.xxx.xx/ 5 xxxx://xxxx.xxx.xx/ 6 xxxxx://xxxx.xxx.xx/wiki/GOCDB/Input_System_User_Documentation#Downtimes 7 xxxx://xxx.xxx.xx/ 3 Support Support is provided via EGI Service Desk8. Access requires a valid X.509 or the login via an additional costEGI SSO account9. Support is available between: • Monday to Friday. • From 9:00 to 18:00 CET/CEST in the time zone of the relevant Resource Centres. Service times always apply with the exception of public holidays in the country of the supporting Resource Centres.

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA with the Customer Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx v0.5 30/09/2022 Added Check-In and IISAS as new component provider for PolicyCLOUD backups. Xxxxxxx Xxxxxxxxx, Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 Support 7 Incident handling 7 Service requests 8 Service level targets 8 Limitations and constraints 8 Communication, reporting and escalation 9 General communication 9 Regular reporting 10 Violations 10 Escalation and complaints 11 Information security and data protection 11 Responsibilities 11 Of EGI Foundation 11 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 Review, extensions and termination 13 The present Service Level Agreement (“the Agreement’) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx (the Customer) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using data. The Customer is a consortium represented by ATOS. This Agreement is valid from 01/08/2020 to 31/12/202230/04/2023. The Component Provider Providers will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022). The Agreement was discussed and approved by the Customer and the Provider initially on 13/10/2020, and later on 30/04/2023 to add a new component provider to backup PolicyCLOUD services. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: properties 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI IISAS-FedCloud ServiceCategory: Cloud Compute Cloud Compute Number of virtual CPU cores: 136 136 Memory per core (GB): 336 336 in total Local disk (GB): 40 See Online Storage Public IP addresses: Yes. Access to the VPN is also provided. 15 Allocation type: Pledged Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Members of the Virtual Organisation "xx.xxxxxxxxxxx.xx" need permission to create images in the OpenStack project. Payment mode offer: Pay-for-use2 use Pay-for-use Duration: 01/08/2020 - 31/12/2022 31/12/20222 01/10/2022 - 30/04/2023 2 Or until the last project review. GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) xxxxx.xx.xxxxx.xx (xxx.xxxxxxxxx.xxxx) Online Storage ComputeResource Resource Centre INFN-CLOUD-BARI IISAS-FedCloud Category Online Storage Online Storage Guaranteed storage capacity [TB]: 2TB 2 TB Opportunistic storage capacity [TB]: N/A N/A Standard interfaces supported: POSIX/Object Storage Block storage Storage technology: N/A Ceph distributed storage and NFS storage backed by disk array. Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost. Duration: 01/08/2020 - 31/12/20223 01/10/2022 - 30/04/2023 Payment ode offer: Pay-for-use Pay-for-use 3 Or until the last project review. Allocation type: Pledged Pledged Check-In (as community AAI/IdP) Resource Centre GRNET Category Check-In Deployment type Shared AAI Protocol OIDC, XXXX User registration and group management Operated by EGI: xxxxx://xxx.xxx.xx/registry/ COmanage group: xx.xxxxxxxxxxx.xx Enrollment URL: xxxxx://xxx.xxx.xx/registry/co_petitions/start/coef:100 Duration 01/08/2020 - 30/04/2023 Payment mode offer: Sponsored Check-In (for services / resource providers) Resource Centre GRNET Category Check-In Service name PolicyCLOUD keycloak Service URL xxxxx://xxxxxxxxxxx-xxxx.xxxxxxxxxx.xxx/auth/ AAI protocol XXXX Communities All. Duration 01/10/2021 - 30/04/2023 Payment mode offer Sponsored Virtual Organisation Supported VOs: xx.xxxxxxxxxxx.xx VO ID card: xxxxx://xxxxxxxxxx-xxxxxx.xxx.xx/vo/view/voname/xx.xxxxxxxxxxx.xx VO-wide list: xxxxx://xxxxx.xxx.xx/store/vo/xx.xxxxxxxxxxx.xx Provider AUP link xxxxx://xxxxxxxxx.xxx.xx/document/3600 Service Offer/Cost INFN-CLOUD-BARI IISAS-FedCloud Compute 34,000€ 14,300 € Storage Free (included in the compute costs) Included in the compute costs. Technical support 5,000€ Included in the compute costs. Total4 39,000€ 14,300 € 4 Excluding VAT (reverse charging) The Services are supported by additional services: • Accounting5 • Service Monitoring6 (EGI operational Virtual Organization only) Note: Please note that the following services are not provided by EGI Foundation: • Monitoring of xx.xxxxxxxxxxx.xx • Monitoring of services provided by the Customer on agreed resources 2 Service hours and exceptions The Services operate during the following hours: twenty-four (24) hours a day, seven (7) days a week, three hundred sixty-five (365) days a year. The following exceptions apply: • Planned maintenance windows or service interruptions (“scheduled downtimes”7) will be notified via email in a timely manner i.e. 24 hours before the start of the outage8. • Downtime periods exceeding 24 hours need justification. • Human support is provided during support hours. 3 Support Support is provided via EGI Service Desk9. Access requires a valid X.509 or the login via an EGI SSO account10. Support is available between: • Monday to Friday. • From 9:00 to 17:00 CET/CEST in the time zone of the relevant Resource Centres. Service times always apply with the exception of public holidays in the country of the supporting Resource Centres.

Issue Date Comment. Author FINAL 13/10/2020 16/07/2021 Agreed SLA with the Customer Xxxxxx Xxxxx Cauhé Enol Xxxxxxxxx, Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. 2022 06/12/2021 SLA extended Xxxxxx Xxxxx Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 Service hours and exceptions 6 Support 7 Incident handling 7 Service requests 8 Service level targets 8 Limitations and constraints 8 Communication, reporting and escalation 9 General communication 9 Regular reporting 10 Violations 10 Escalation and complaints 11 Information security and data protection 11 Responsibilities 11 Of EGI Foundation 11 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 Review, extensions and termination 13 The present Service Level Agreement (“the Agreement’) is made between EGI Foundation (the Service Provider) and PolicyCLOUDBinaré Oy/xx.xxxxxxxxxxx.xx xx.xxxxxx-xx.xx (the Customer) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims to harness the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using data. The Customer Binareé Oy1 is a consortium represented by ATOSrecent spin-off from the University of Jyväskylä (Finland), doing research and development in embedded device and IoT security, Binaré offers both professional services and an automated analysis platform to meet various needs for IoT security. Binaré’s advisory services leverages both the automated platform and the team’s expertise to offer penetration testing and detailed cyber security assessments of IoT devices/firmware in an online environment that closely simulates the real-world. This Agreement is valid from 01/08/2020 22/06/2021 to 31/12/2022. The Component Provider will guarantee the availability of the platform for a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months before the end of this agreement (September-October 2022)28/02/2022. The Agreement was discussed and approved by the Customer and the Provider on 13/10/202016/07/2021. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used. The Services are defined by the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Service Cloud Compute Number of virtual CPU cores: 136 320 Memory per core (GB): 336 A total of 640GB is provided 1 xxxxx://xxxxxx.xx/ Local disk (GB): 40 5TB of block storage (overall) Public IP addresses: Yes. Access to the VPN is also provided. 12 Allocation type: Pledged Pledged2 Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. n/a Payment mode offer: PayPer-for-use2 use3 Duration: 01/08/2020 22/06/2021 - 31/12/2022 28/02/2022 GOCDB endpoints URLs Service: xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online - xxx.xxxxxxxxx.xxxx Storage ComputeResource Resource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 25.5 TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A POSIX Other technical requirements: Additional 50n/a Duration: 22/06/2021 - 28/02/2022 Payment ode offer: Pay-100GB for-use Allocation type: Pledged GOCDB endpoints URLs Service: xxxxx.xxxxx.xx.xxxx.xx - xxx.xxxxxxxxx.xxxx Storage 2 Resources are exclusively reserved to the Customer 3 See service offer for specifications (e.g. pricing, administration) Virtual Organisation Supported VOs: xx.xxxxxx-xx.xx VO ID card: xxxxx://xxxxxxxxxx-xxxxxx.xxx.xx/vo/view/voname/xx.xxxxxx-xx.xx Provider AUP link xxxxx://xxx.xxxxx-xxxx.xx/servizi/recasupload/files/AUP-ReCaS-EN-2021 0616.pdf VO-wide list: xxxxx://xxxxx.xxx.xx/store/vo/xx.xxxxxx-xx.xx The Services are supported by additional services: • Accounting4 • Service Monitoring5 (EGI operational Virtual Organization only) Note: Please note that the following services are not provided by EGI Foundation: • Monitoring of OpenStack Swift Storage xx.xxxxxx-xx.xx • Monitoring of services provided by the Customer on agreed resources 2 Service hours and exceptions The Services operate during the following hours: twenty-four (24) hours a day, seven (7) days a week, three hundred sixty-five (365) days a year. The following exceptions apply: • Planned maintenance windows or service interruptions (“scheduled downtimes”6) will be made available, without notified via email in a timely manner i.e. 24 hours before the start of the outage7. • Downtime periods exceeding 24 hours need justification. • Human support is provided during support hours. 4 xxxx://xxxxxxxxxx.xxx.xx/ 5 xxxx://xxxx.xxx.xx/ 6 xxxxx://xxxx.xxx.xx/wiki/GOCDB/Input_System_User_Documentation#Downtimes 7 xxxx://xxx.xxx.xx/ 3 Support Support is provided via EGI Service Desk8. Access requires a valid X.509 or the login via an additional costEGI SSO account9. Support is available between: • Monday to Friday. • From 9:00 to 18:00 CET/CEST in the time zone of the relevant Resource Centres. Service times always apply with the exception of public holidays in the country of the supporting Resource Centres.

Issue Date Comment. Author FINAL 13/10/2020 Agreed SLA with 11/05/2020 First draft review Xxxxxx Xxxxx Xxxxx, EGI Foundation v0.1 12/04/2020 Final version, end of project update Xxxxxx Xxxxx Xxxxx, EGI Foundation v0.2 24/11/2021 Extended support after the Customer end of the EOSC-hub Xxxxxx Xxxxx Cauhé Enol XxxxxxxxxXxxxx, EGI Foundation v0.3 29/01/2022 Updated OLA template (v2.13) Xxxxxxxx Xx Xxxxx v0.2 03/01/2022 Updated host of the Component Provider and the new Project Coordinator. Updated Sections 7 and 8. Xxxxxxxx Xx Xxxxx v0.3 03/02/2022 Increased resources to run Spark on top of the cluster: 36 vCPU cores and 32GB of RAM Xxxxxxxx Xx Xxxxx v0.4 16/05/2022 Increased amount of allocated vCPU by 30% (from 104 to 136 vCPUs) Xxxxxxxxx Xxxx-Xxxxxx TERMINOLOGY The EGI glossary of terms is available at: xxxxx://xxxx.xxx.xx/wiki/Glossary For the purpose of this Agreement, the following terms and definitions apply. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", “MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119. Contents The Services 4 5 Service hours and exceptions 6 9 Support 7 9 Incident handling 7 9 Service requests 8 10 Service level targets 8 10 Limitations and constraints 8 10 Communication, reporting and escalation 9 10 General communication 9 10 Regular reporting 10 11 Violations 10 11 Escalation and complaints 11 Information security and data protection 11 12 Responsibilities 11 13 Of the Component Provider 13 Of EGI Foundation 11 13 Of the Customer 12 Finance and administration 12 9.1 Service Offers 12 9.2 Invoicing and Payment Schedule 13 14 Review, extensions and termination 13 14 References 14 The present Service Operational Level Agreement (“the Agreement’”) is made between EGI Foundation (the Service Provider) and PolicyCLOUD/xx.xxxxxxxxxxx.xx CESGA (the CustomerComponent Provider) to define the provision and support of the provided services as described hereafter. Representatives and contact information are defined in Section 6. PolicyCLOUD1 aims STARS4ALL (xxxx://xxx.xxxxx0xxx.xx) is a community and project to harness create awareness among citizens about the potential of digitisation, big data and cloud technologies to improve the modelling, creation and implementation of policy. In three years (2020-2023) the project will address challenges faced by many businesses and public administrations of improving how they make policy decisions by accessing and using datalight pollution problem. The Customer is a consortium represented by ATOSthe UNIVERSIDAD POLITÉCNICA DE MADRID. This Agreement is valid from 01/08/2020 01/04/2021 to 31/12/202231/03/2022. The Once approved, this Agreement is automatically renewed, as long as the Component Provider will guarantee does not express a decision to terminate the availability of the platform for Agreement at least a maximum of 90 days from the end of the agreement, or until the final PolicyCLOUD review takes place (with no additional costs). In order to review the terms and conditions for a possible additional extension, a check-point will take place 3 months month before the end date of this agreement (September-October 2022)the Agreement. The Agreement was discussed and approved by the Customer EGI Foundation and the Component Provider on 13/10/2020. 1 The Services All services provided by EGI are listed under: xxxxx://xxx.xxx.xx/services/ Possible allocation types: ● Pledged - Resources are exclusively reserved to the Community and the job will be executed immediately after submission. ● Opportunistic - Resources are not exclusively allocated, but subject to local availability. ● Time allocation - Resources are available in fair share-like mode for a fixed time period. Possible payment mode offer: ● Sponsored - Model where the customer uses services that are funded, or co-funded by the European Commission or government grants. ● Pay-for-use - Model where the customer directly pays for the service used24/11/2021. The Services are defined by Agreement extends the Resource Centre OLA [1] with the following properties: 1 xxxxx://xxxxxxxxxxx.xx/ Cloud Compute Resource Centre: INFN-CLOUD-BARI ServiceCategory: Cloud Compute Number of virtual CPU cores: 136 Memory per core (GB): 336 Local disk (GB): 40 Public IP addresses: Yes. Access to the VPN is also provided. Allocation type: Pledged Other technical requirements: The INDIGO-DataCloud PaaS orchestrator will be available on the same resources, without an additional cost. Payment mode offer: Pay-for-use2 Duration: 01/08/2020 - 31/12/2022 GOCDB endpoints URLs xxxxx.xxxxx.xx.xxxx.xx (xx.xxx.xxxxx.xx-xxxxxxxxxx.xxxx) Online Storage ComputeResource Centre INFN-CLOUD-BARI Category Online Storage Guaranteed storage capacity [TB]: 2TB Opportunistic storage capacity [TB]: N/A Standard interfaces supported: POSIX/Object Storage Storage technology: N/A Other technical requirements: Additional 50-100GB of OpenStack Swift Storage will be made available, without an additional cost.information: