Common use of Obligations under the CCPA Clause in Contracts

Obligations under the CCPA. AudioCodes shall not Sell Personal Data (as the term "Sell" is defined under the CCPA). AudioCodes will not retain, use, or disclose Personal Data for a commercial purpose other than providing the Services to Customer under the Agreement. For Customer: Name: Title: Date: For AudioCodes Name: Title: Date: Annex 1 - DATA PROCESSING APPENDIX This Appendix, including any relevant attachment, describes the types of Personal Data, and the purposes for which that Personal Data may be Processed by the Processor. Controller is: [To be completed] The Processor is: AudioCodes Ltd. For Live Teams and Zoom (Essentials, Pro, Premium), Live Express, Live CX (Enterprise, Provider), Live Cloud for Microsoft Operator Connect and Live Cloud for Zoom Provider Exchange Services provided by the Processor (processing operations): Live Teams and Zoom calls services. Nature of the Processing: Providing Phone calls via Teams and Zoom Special categories of data: NA Personal Data Processing Activities PURPOSE OF THE PROCESSING CATEGORIES OF PERSONAL DATA PROCESSED1 CATEGORIES OF DATA SUBJECTS RETENTION PERIOD FOR THE PERSONAL DATA2 DURATION OF THE PROCESSING Commercial correspondence, Technical correspondence Name, Email, Phone Number Employees As required by local law 7 years As long as the main contract is active Providing Teams live services First name, Last Name, IP, Phone numbers Employees, Customers CDR’s are saved for 45 days As long as the main contract is active 1 Where appropriate, special categories of personal data shall be defined.

Obligations under the CCPA. AudioCodes shall not Sell the Personal Data (as the term "Sell" is defined under the CCPA). AudioCodes will not retain, use, or disclose Personal Data for a commercial purpose other than providing the Services to Customer under the Agreement. For Customer: Customer Name: Title: Date: For AudioCodes Name: Title: Date: Annex 1 - DATA PROCESSING APPENDIX This Appendix, including any relevant attachment, describes the types of Personal Data, and the purposes for which that Personal Data may be Processed by the Processor. Controller is: [To be completed] The Processor is: AudioCodes Ltd. For Live Teams and Zoom (Essentials, Pro, Premium), Live Express, Live CX (Enterprise, Provider), Live Cloud for Microsoft Operator Connect and Live Cloud for Zoom Provider Exchange Managed Services Services provided by the Processor (processing operations): Live Teams and Zoom calls services. Nature of the Processing: Providing Phone calls via Teams and Zoom Special categories of data: NA Personal Data Processing Activities PURPOSE OF THE PROCESSING CATEGORIES OF PERSONAL DATA PROCESSED1 CATEGORIES OF DATA SUBJECTS RETENTION PERIOD FOR THE PERSONAL DATA2 DURATION OF THE PROCESSING Commercial correspondence, Technical correspondence Name, Email, Phone Number Employees As required by local law 7 years As long as the main contract is active Providing Teams live services First name, Last Name, IP, Phone numbers Employees, Customers CDR’s are saved for 45 days As long as the main contract is active 1 Where appropriate, special categories of personal data shall be defined.

Obligations under the CCPA. AudioCodes shall not Sell the Personal Data (as the term "Sell" is defined under the CCPA). AudioCodes will not retain, use, or disclose Personal Data for a commercial purpose other than providing the Services to Customer under the Agreement. For Customer: Customer Name: Title: Date: For AudioCodes Name: Title: Date: Annex 1 - DATA PROCESSING APPENDIX This Appendix, including any relevant attachment, describes the types of Personal Data, and the purposes for which that Personal Data may be Processed by the Processor. Controller is: [To be completed] The Processor is: AudioCodes Ltd. For Live Teams and Zoom (Essentials, Pro, Premium), Live Express, Live CX (Enterprise, Provider), Live Cloud for Microsoft Operator Connect and Live Cloud for Zoom Provider Exchange ) Services provided by the Processor (processing operations): Live Teams and Zoom calls services. Nature of the Processing: Providing Phone calls via Teams and Zoom Special categories of data: NA Personal Data Processing Activities PURPOSE OF THE PROCESSING CATEGORIES OF PERSONAL DATA PROCESSED1 CATEGORIES OF DATA SUBJECTS RETENTION PERIOD FOR THE PERSONAL DATA2 DURATION OF THE PROCESSING Commercial correspondence, Technical correspondence Name, Email, Phone Number Employees As required by local law 7 years As long as the main contract is active Providing Teams live services First name, Last Name, IP, Phone numbers Employees, Customers CDR’s are saved for 45 days As long as the main contract is active 1 Where appropriate, special categories of personal data shall be defined.

Obligations under the CCPA. AudioCodes shall not Sell Personal Data (as the term "Sell" is defined under the CCPA). AudioCodes will not retain, use, or disclose Personal Data for a commercial purpose other than providing the Services to Customer under the Agreement. For Customer: Name: Title: Date: For AudioCodes Name: Title: Date: Annex 1 - DATA PROCESSING APPENDIX This Appendix, including any relevant attachment, describes the types of Personal Data, and the purposes for which that Personal Data may be Processed by the Processor. Controller is: [To be completed] The Processor is: AudioCodes Ltd. For Live Teams and Zoom (Essentials, Pro, Premium), Live Express, Live CX (Enterprise, Provider), Live Cloud for Microsoft Operator Connect and Live Cloud for Zoom Provider Exchange Services provided by the Processor (processing operations): Live Teams and Zoom calls services. Nature of the Processing: Providing Phone calls via Teams and Zoom Special categories of data: NA Personal Data Processing Activities PURPOSE OF THE PROCESSING CATEGORIES OF PERSONAL DATA PROCESSED1 CATEGORIES OF DATA SUBJECTS RETENTION PERIOD FOR THE PERSONAL DATA2 DURATION OF THE PROCESSING Commercial correspondence, Technical correspondence Name, Email, Phone Number Employees As required by local law 7 years As long as the main contract is active Providing Teams live services First name, Last Name, IP, Phone numbers Employees, Customers CDR’s are saved for 45 days As long as the main contract is active 1 Where appropriate, special categories of personal data shall be defined.