Common use of Personnel Security and Training Clause in Contracts

Personnel Security and Training. ☒ ClickDimensions maintains personnel policies including having appropriate use guidelines, written confidentiality agreements ☒ Background checks are performed in accordance with Applicable Data Protection Laws ☒ Annual trainings on Information Security, Security Awareness, and Data Privacy are required of all employees and contractors ANNEX III SUBPROCESSORS Infrastructure These subprocessors make up the infrastructure that supports the ClickDimensions Marketing Automation application Subprocessor Geographic Location Role Data Transfer Mechanism Microsoft Azure US: North-Central AU: New South Wales EU: North Europe (IE) CA: Central Azure Data Center Locations Cloud Service Provider for ClickDimensions application Standard Contractual Clauses MessageGears US IE Email Provider Standard Contractual Clauses Data center locations are chosen by the customer during the account registration process. Accounts hosted on the EU data center will use the Microsoft Azure EU/IE data center for ClickDimensions hosting and the MessageGears EU/IE data center for email messaging. Some limited amount of data may be provided to a sub processor outside the EU for purposes of providing the services. Accounts hosted on the US data center will use the Microsoft Azure US data center for ClickDimensions hosting and the MessageGears US data center for email messaging. Accounts hosted on the AU data center will use the Microsoft Azure AU data center for ClickDimensions hosting and the MessageGears US data center for email messaging. Accounts hosted on the CA data center will use the Microsoft Azure CA for ClickDimensions hosting data center and the MessageGears US data center with Secure PII for email messaging. These subprocessors make up the infrastructure that supports ClickDimensions Intelligent Dashboards Subprocessor Geographic Location Role Data Transfer Mechanism Amazon Web Services North Europe (IE) Cloud Service Provider for ClickDimensions Intelligent Dashboards Not Applicable – no personal data is stored in AWS. Google Cloud Platform EU: Distributed Cloud Service Provider for ClickDimensions Intelligent Dashboards Not Applicable – personal data is not transferred from the EU. Embedded Functionality These subprocessors provide additional functionality in the marketing automation solution application. Subprocessor Geographic Location Role Data Transfer Mechanism InsideView US Data Services Standard Contractual Clauses Oktopost US Social Posting Standard Contractual Clauses Support These subprocessors are used to provide customer support for our Services Subprocessor Geographic Location Role Data Transfer Mechanism Zendesk US Customer Support Services Standard Contractual Clauses Acuity US Customer Support Services Standard Contractual Clauses Pendo US Customer Support Services Standard Contractual Clauses Ring Central US Customer Support Services Standard Contractual Clauses OneTrust US Customer Support Services Standard Contractual Clauses Affiliates The following affiliate companies are members of ClickDimensions LLC and function as subprocessors Subprocessor Geographic Location Role Data Transfer Mechanism ClickDimensions Ireland IE Customer Success and Support N/A ClickDimensions Spain ES Research & Development N/A

Personnel Security and Training. ☒ ClickDimensions maintains personnel policies including having appropriate use guidelines, written confidentiality agreements ☒ Background checks are performed in accordance with Applicable Data Protection Laws ☒ Annual trainings on Information Security, Security Awareness, and Data Privacy are required of all employees and contractors ANNEX III SCHEDULE 3 SUBPROCESSORS Infrastructure These subprocessors make up the infrastructure that supports the ClickDimensions Marketing Automation application Subprocessor Geographic Location Role Data Transfer Mechanism Microsoft Azure US: North-Central AU: New South Wales EU: North Europe (IE) CA: Central Azure Data Center Locations Cloud Service Provider for ClickDimensions application Standard Contractual Clauses MessageGears US IE Email Provider Standard Contractual Clauses Data center locations are chosen by the customer during the account registration process. Accounts hosted on the EU data center will use the Microsoft Azure EU/IE data center for ClickDimensions hosting and the MessageGears EU/IE data center for email messaging. Some limited amount of data may be provided to a sub processor outside the EU for purposes of providing the services. Accounts hosted on the US data center will use the Microsoft Azure US data center for ClickDimensions hosting and the MessageGears US data center for email messaging. Accounts hosted on the AU data center will use the Microsoft Azure AU data center for ClickDimensions hosting and the MessageGears US data center for email messaging. Accounts hosted on the CA data center will use the Microsoft Azure CA for ClickDimensions hosting data center and the MessageGears US data center with Secure PII for email messaging. These subprocessors make up the infrastructure that supports ClickDimensions Intelligent Dashboards Subprocessor Geographic Location Role Data Transfer Mechanism Amazon Web Services North Europe (IE) Cloud Service Provider for ClickDimensions Intelligent Dashboards Not Applicable – no personal data is stored in AWS. Google Cloud Platform EU: Distributed Cloud Service Provider for ClickDimensions Intelligent Dashboards Not Applicable – personal data is not transferred from the EU. Embedded Functionality These subprocessors provide additional functionality in the marketing automation solution application. Subprocessor Geographic Location Role Data Transfer Mechanism InsideView US Data Services Standard Contractual Clauses Oktopost US Social Posting Standard Contractual Clauses Support These subprocessors are used to provide customer support for our Services Subprocessor Geographic Location Role Data Transfer Mechanism Zendesk US Customer Support Services Standard Contractual Clauses Acuity US Customer Support Services Standard Contractual Clauses Pendo US Customer Support Services Standard Contractual Clauses Ring Central US Customer Support Services Standard Contractual Clauses OneTrust US Customer Support Services Standard Contractual Clauses Affiliates The following affiliate companies are members of ClickDimensions LLC and function as subprocessors Subprocessor Geographic Location Role Data Transfer Mechanism ClickDimensions Ireland IE Customer Success and Support N/A ClickDimensions Spain ES Research & Development N/A.

Personnel Security and Training. ☒ ClickDimensions maintains personnel policies including having appropriate use guidelines, written confidentiality agreements ☒ Background checks are performed in accordance with Applicable Data Protection Laws ☒ Annual trainings on Information Security, Security Awareness, and Data Privacy are required of all employees and contractors ANNEX III SUBPROCESSORS Infrastructure These subprocessors make up the infrastructure that supports the ClickDimensions Marketing Automation application Subprocessor Geographic Location Role Data Transfer Mechanism Microsoft Azure US: North-Central AU: New South Wales EU: North Europe (IE) CA: Central Azure Data Center Locations Cloud Service Provider for ClickDimensions application Standard Contractual Clauses MessageGears US IE Email Provider Standard Contractual Clauses Data center locations are chosen by the customer during the account registration process. Accounts hosted on the EU data center will use the Microsoft Azure EU/IE data center for ClickDimensions hosting and the MessageGears EU/IE data center for email messaging. Some limited amount of data may be provided to a sub processor outside the EU for purposes of providing the services. Accounts hosted on the US data center will use the Microsoft Azure US data center for ClickDimensions hosting and the MessageGears US data center for email messaging. Accounts hosted on the AU data center will use the Microsoft Azure AU data center for ClickDimensions hosting and the MessageGears US data center for email messaging. Accounts hosted on the CA data center will use the Microsoft Azure CA for ClickDimensions hosting data center and the MessageGears US data center with Secure PII for email messaging. These subprocessors make up the infrastructure that supports ClickDimensions Intelligent Dashboards Subprocessor Geographic Location Role Data Transfer Mechanism Amazon Web Services North Europe (IE) Cloud Service Provider for ClickDimensions Intelligent Dashboards Not Applicable – no personal data is stored in AWS. Google Cloud Platform EU: Distributed Cloud Service Provider for ClickDimensions Intelligent Dashboards Not Applicable – personal data is not transferred from the EU. MailGun US Data Transfer for ClickDimensions Intelligent Dashboards Standard Contractual Clauses Subprocessor Geographic Location Role Data Transfer Mechanism BrickFTP US Data Transfer for ClickDimensions Intelligent Dashboards Standard Contractual Clauses Embedded Functionality These subprocessors provide additional functionality in the marketing automation solution application. Subprocessor Geographic Location Role Data Transfer Mechanism InsideView US Data Services Standard Contractual Clauses Oktopost US Social Posting Standard Contractual Clauses Support These subprocessors are used to provide customer support for our Services Subprocessor Geographic Location Role Data Transfer Mechanism Zendesk US Customer Support Services Standard Contractual Clauses Acuity US Customer Support Services Standard Contractual Clauses Pendo US Customer Support Services Standard Contractual Clauses Ring Central US Customer Support Services Standard Contractual Clauses OneTrust US Customer Support Services Standard Contractual Clauses Affiliates The following affiliate companies are members of ClickDimensions LLC and function as subprocessors Subprocessor Geographic Location Role Data Transfer Mechanism ClickDimensions Ireland IE Customer Success and Support N/A ClickDimensions Spain ES Research & Development N/ADevelopment