Common use of SS&C Disaster Recovery Plan Clause in Contracts

SS&C Disaster Recovery Plan. The SS&C Disaster Recovery Plan is an overview of the recovery processes for SS&C’s Primary Data Center infrastructure. In the US, the Winchester Data Center is the primary facility for a majority of SS&C’s data processing infrastructure. In Canada, the primary facility is Adelaide, SS&C maintains alternate data centers in both the US and Canada, commonly referred to as the Recovery Centers. The Recovery Center in the US is the Bridgeton data center (BRC), near St. Louis, Missouri. The Recovery Center in Canada is Markham. The Recovery Centers are equipped with the hardware and software designed to achieve certain Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) if a disaster disables the Primary Data Centers. Recovery Time Objectives begin after SS&C declares a disaster at the Primary Data Center. The specific RTO and RPO depend on the application being recovered. SS&C Data Center personnel take action designed to protect employees, organizational assets, and client data. They evaluate the emergency and make a preliminary estimate of damages and downtime. The Recovery Center is placed on alert and the following information is then provided to the Incident Response Team (IRT): • Time disaster occurred. • Location of disaster • Type of disaster • Injuries • Estimate of damage • Estimate of downtime • Recommendation to declare a disaster or repair If a situation warrants a disaster declaration, the IRT will recommend data center failover to the Managing Director of Risk and IT Solutions, who in consultation with SS&C’s Chief Technology Officer, will make a recommendation to SS&C’s President. SS&C’s President will make the ultimate decision for disaster declaration, its timing, and failover to the recovery center. Upon declaration, Global Crisis Management (GCM) will coordinate and synchronize the execution of the following actions and maintain reporting through SS&C’s Crisis • Notify SS&C’s BRC to begin recovery operations • Execute employee notification procedures (execute client notification include timeframe or max timeframe) • Convene a bridge call to communicate with client relationship managers • Provide status reports as defined at declaration SS&C recovers client connectivity at the Recovery Center according to the following processes: SS&C Supported Connectivity - SS&C has designed its Wide Area Network (WAN) to allow the redirection of client connections from Winchester to the Recovery Center. SS&C accomplishes this through established commands. Client Provided - SS&C has implemented a secured network infrastructure at the Recovery Center, which allows client-provided connectivity. Customers who provide their own network connectivity to Winchester are responsible for providing connectivity into the Recovery Center. SS&C uses various forms of data back-up and recovery designed to meet product RTO and RPO, SS&C backs up and recovers data and systems according to contracted product availability. Due to a wide range of client and application specific requirements, this document does not contain the list of SS&C recovered products. Client service representatives can provide specific product recovery. The following section covers the types of data processing used to back up and recover each of the platforms supported at the Primary Data Center(s).

SS&C Disaster Recovery Plan. The SS&C Disaster Recovery Plan is an overview of the recovery processes for SS&C’s Primary Data Center infrastructure. In the US, the Winchester Data Center is the primary facility for a majority of SS&C’s data processing infrastructure. In Canada, the primary facility is Adelaide, SS&C maintains alternate data centers in both the US and Canada, commonly referred to as the Recovery Centers. The Recovery Center in the US is the Bridgeton data center (BRC), near St. Louis, Missouri. The Recovery Center in Canada is Markham. The Recovery Centers are equipped with the hardware and software designed to achieve certain Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) if a disaster disables the Primary Data Centers. Recovery Time Objectives begin after SS&C declares a disaster at the Primary Data Center. The specific RTO and RPO depend on the application being recovered. SS&C Data Center personnel take action designed to protect employees, organizational assets, and client data. They evaluate the emergency and make a preliminary estimate of damages and downtime. The Recovery Center is placed on alert and the following information is then provided to the Incident Response Team (IRT): • Time disaster occurred. • Location of disaster • Type of disaster • Injuries • Estimate of damage • Estimate of downtime • Recommendation to declare a disaster or repair If a situation warrants a disaster declaration, the IRT will recommend data center failover to the Managing Director of Risk and IT Solutions, who in consultation with SS&C’s Chief Technology Officer, will make a recommendation to SS&C’s President. SS&C’s President will make the ultimate decision for disaster declaration, its timing, and failover to the recovery center. Upon declaration, Global Crisis Management (GCM) will coordinate and synchronize the execution of the following actions and maintain reporting through SS&C’s Crisis • Notify SS&C’s BRC to begin recovery operations • Execute employee notification procedures (execute client notification include timeframe or max timeframe) • Convene a bridge call to communicate with client relationship managers • Provide status reports as defined at declaration SS&C recovers client connectivity at the Recovery Center according to the following processes: SS&C Supported Connectivity - Connectivity—SS&C has designed its Wide Area Network (WAN) to allow the redirection of client connections from Winchester to the Recovery Center. SS&C accomplishes this through established commands. Client Provided - Provided—SS&C has implemented a secured network infrastructure at the Recovery Center, which allows client-provided connectivity. Customers who provide their own network connectivity to Winchester are responsible for providing connectivity into the Recovery Center. SS&C uses various forms of data back-up and recovery designed to meet product RTO and RPO, SS&C backs up and recovers data and systems according to contracted product availability. Due to a wide range of client and application specific requirements, this document does not contain the list of SS&C recovered products. Client service representatives can provide specific product recovery. The following section covers the types of data processing used to back up and recover each of the platforms supported at the Primary Data Center(s).

SS&C Disaster Recovery Plan. The SS&C Disaster Recovery Plan is an overview of the recovery processes for SS&C’s Primary Data Center infrastructure. In the US, the Winchester Data Center is the primary facility for a majority of SS&C’s data processing infrastructure. In Canada, the primary facility is Adelaide, SS&C maintains alternate data centers in both the US and Canada, commonly referred to as the Recovery Centers. The Recovery Center in the US is the Bridgeton data center (BRC), near St. Louis, Missouri. The Recovery Center in Canada is Markham. The Recovery Centers are equipped with the hardware and software designed to achieve certain Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) if a disaster disables the Primary Data Centers. Recovery Time Objectives begin after SS&C declares a disaster at the Primary Data Center. The specific RTO and RPO depend on the application being recovered. SS&C Data Center personnel take action designed to protect employees, organizational assets, and client data. They evaluate the emergency and make a preliminary estimate of damages and downtime. The Recovery Center is placed on alert and the following information is then provided to the Incident Response Team (IRT): • Time disaster occurred. • Location of disaster • Type of disaster • Injuries • Estimate of damage • Estimate of downtime • Recommendation to declare a disaster or repair If a situation warrants a disaster declaration, the IRT will recommend data center failover to the Managing Director of Risk and IT Solutions, who in consultation with SS&C’s Chief Technology Officer, will make a recommendation to SS&C’s President. SS&C’s President will make the ultimate decision for disaster declaration, its timing, and failover to the recovery center. Upon declaration, Global Crisis Management (GCM) will coordinate and synchronize the execution of the following actions and maintain reporting through SS&C’s Crisis • Notify SS&C’s BRC to begin recovery operations • Execute employee notification procedures (execute client notification include timeframe or max timeframe) • Convene a bridge call to communicate with client relationship managers • Provide status reports as defined at declaration SS&C recovers client connectivity at the Recovery Center according to the following processes: SS&C Supported Connectivity - – SS&C has designed its Wide Area Network (WAN) to allow the redirection of client connections from Winchester to the Recovery Center. SS&C accomplishes this through established commands. Client Provided - SS&C has implemented a secured network infrastructure at the Recovery Center, which allows client-provided connectivity. Customers who provide their own network connectivity to Winchester are responsible for providing connectivity into the Recovery Center. SS&C uses various forms of data back-up and recovery designed to meet product RTO and RPO, SS&C backs up and recovers data and systems according to contracted product availability. Due to a wide range of client and application specific requirements, this document does not contain the list of SS&C recovered products. Client service representatives can provide specific product recovery. The following section covers the types of data processing used to back up and recover each of the platforms supported at the Primary Data Center(s).

SS&C Disaster Recovery Plan. The SS&C Disaster Recovery Plan is an overview of the recovery processes for SS&C’s Primary Data Center infrastructure. In the US, the Winchester Data Center is the primary facility for a majority of SS&C’s data processing infrastructure. In Canada, the primary facility is Adelaide, SS&C maintains alternate data centers center in both the US and CanadaUS, commonly referred to as the Recovery CentersCenter. The Recovery Center in the US is the Bridgeton data center (BRC), near St. Louis, Missouri. The Recovery Center in Canada is Markham. The Recovery Centers are equipped with the hardware and software designed to achieve certain Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) if a disaster disables the Primary Data CentersCenter. Recovery Time Objectives begin after SS&C declares a disaster at the Primary Data Center. The specific RTO and RPO depend on the application being recovered. SS&C Data Center personnel take action designed to protect employees, organizational assets, and client data. They evaluate the emergency and make a preliminary estimate of damages and downtime. The Recovery Center is placed on alert and the following information is then provided to the Incident Response Team (IRT): • Time disaster occurred. • Location of disaster • Type of disaster • Injuries • Estimate of damage • Estimate of downtime • Recommendation to declare a disaster or repair If a situation warrants a disaster declaration, the IRT will recommend data center failover to the Managing Director of Risk and IT Solutions, who in consultation with SS&C’s Chief Technology Officer, will make a recommendation to SS&C’s President. SS&C’s President will make the ultimate decision for disaster declaration, its timing, and failover to the recovery center. Upon declaration, Global Crisis Management (GCM) will coordinate and synchronize the execution of the following actions and maintain reporting through SS&C’s Crisis Copyright SS&C GIDS, Inc. 2023 44 • Notify SS&C’s BRC to begin recovery operations • Execute employee notification procedures (execute client notification include timeframe or max timeframe) • Convene a bridge call to communicate with client relationship managers • Provide status reports as defined at declaration SS&C recovers client connectivity at the Recovery Center according to the following processes: SS&C Supported Connectivity - SS&C has designed its Wide Area Network (WAN) to allow the redirection of client connections from Winchester to the Recovery Center. SS&C accomplishes this through established commands. Client Customer Provided - SS&C has implemented a secured network infrastructure at the Recovery Center, which allows client-provided connectivity. Customers who provide their own network connectivity to Winchester are responsible for providing connectivity into the Recovery Center. SS&C uses various forms of data back-up and recovery designed to meet product RTO and RPO, SS&C backs up and recovers data and systems according to contracted product availability. Due to a wide range of client and application specific requirements, this document does not contain the list of SS&C recovered products. Client Customer service representatives can provide specific product recovery. The following section covers the types of data processing used to back up and recover each of the platforms supported at the Primary Data Center(s).

SS&C Disaster Recovery Plan. The SS&C Disaster Recovery Plan is an overview of the recovery processes for SS&C’s Primary Data Center infrastructure. In the US, the Winchester Data Center is the primary facility for a majority of SS&C’s data processing infrastructure. In Canada, the primary facility is Adelaide, SS&C maintains alternate data centers center in both the US and CanadaUS, commonly referred to as the Recovery CentersCenter. The Recovery Center in the US is the Bridgeton data center (BRC), near St. Louis, Missouri. The Recovery Center in Canada is Markham. The Recovery Centers are equipped with the hardware and software designed to achieve certain Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) if a disaster disables the Primary Data CentersCenter. Recovery Time Objectives begin after SS&C declares a disaster at the Primary Data Center. The specific RTO and RPO depend on the application being recovered. SS&C Data Center personnel take action designed to protect employees, organizational assets, and client data. They evaluate the emergency and make a preliminary estimate of damages and downtime. The Recovery Center is placed on alert and the following information is then provided to the Incident Response Team (IRT): • Time disaster occurred. • Location of disaster • Type of disaster • Injuries • Estimate of damage • Estimate of downtime • Recommendation to declare a disaster or repair If a situation warrants a disaster declaration, the IRT will recommend data center failover to the Managing Director of Risk and IT Solutions, who in consultation with SS&C’s Chief Technology Officer, will make a recommendation to SS&C’s President. SS&C’s President will make the ultimate decision for disaster declaration, its timing, and failover to the recovery center. Upon declaration, Global Crisis Management (GCM) will coordinate and synchronize the execution of the following actions and maintain reporting through SS&C’s Crisis Copyright SS&C GIDS, Inc. 2023 SS&C CONFIDENTIAL • Notify SS&C’s BRC to begin recovery operations • Execute employee notification procedures (execute client notification include timeframe or max timeframe) • Convene a bridge call to communicate with client relationship managers • Provide status reports as defined at declaration SS&C recovers client connectivity at the Recovery Center according to the following processes: SS&C Supported Connectivity - SS&C has designed its Wide Area Network (WAN) to allow the redirection of client connections from Winchester to the Recovery Center. SS&C accomplishes this through established commands. Client Customer Provided - SS&C has implemented a secured network infrastructure at the Recovery Center, which allows client-provided connectivity. Customers who provide their own network connectivity to Winchester are responsible for providing connectivity into the Recovery Center. SS&C uses various forms of data back-up and recovery designed to meet product RTO and RPO, SS&C backs up and recovers data and systems according to contracted product availability. Due to a wide range of client and application specific requirements, this document does not contain the list of SS&C recovered products. Client Customer service representatives can provide specific product recovery. The following section covers the types of data processing used to back up and recover each of the platforms supported at the Primary Data Center(s).

SS&C Disaster Recovery Plan. The SS&C Disaster Recovery Plan is an overview of the recovery processes for SS&C’s Primary Data Center infrastructure. In the US, the Winchester Data Center is the primary facility for a majority of SS&C’s data processing infrastructure. In Canada, the primary facility is Adelaide, SS&C maintains alternate data centers center in both the US and CanadaUS, commonly referred to as the Recovery CentersCenter. The Recovery Center in the US is the Bridgeton data center (BRC), near St. Louis, Missouri. The Recovery Center in Canada is Markham. The Recovery Centers are equipped with the hardware and software designed to achieve certain Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) if a disaster disables the Primary Data CentersCenter. Recovery Time Objectives begin after SS&C declares a disaster at the Primary Data Center. The specific RTO and RPO depend on the application being recovered. SS&C Data Center personnel take action designed to protect employees, organizational assets, and client data. They evaluate the emergency and make a preliminary estimate of damages and downtime. The Recovery Center is placed on alert and the following information is then provided to the Incident Response Team (IRT): • Time disaster occurred. • Location of disaster • Type of disaster • Injuries • Estimate of damage • Estimate of downtime • Recommendation to declare a disaster or repair If a situation warrants a disaster declaration, the IRT will recommend data center failover to the Managing Director of Risk and IT Solutions, who in consultation with SS&C’s Chief Technology Officer, will make a recommendation to SS&C’s President. SS&C’s President will make the ultimate decision for disaster declaration, its timing, and failover to the recovery center. Upon declaration, Global Crisis Management (GCM) will coordinate and synchronize the execution of the following actions and maintain reporting through SS&C’s Crisis Copyright SS&C GIDS, Inc. 2023 SS&C • Notify SS&C’s BRC to begin recovery operations • Execute employee notification procedures (execute client notification include timeframe or max timeframe) • Convene a bridge call to communicate with client relationship managers • Provide status reports as defined at declaration SS&C recovers client connectivity at the Recovery Center according to the following processes: SS&C Supported Connectivity - – SS&C has designed its Wide Area Network (WAN) to allow the redirection of client connections from Winchester to the Recovery Center. SS&C accomplishes this through established commands. Client Customer Provided - – SS&C has implemented a secured network infrastructure at the Recovery Center, which allows client-provided connectivity. Customers who provide their own network connectivity to Winchester are responsible for providing connectivity into the Recovery Center. SS&C uses various forms of data back-up and recovery designed to meet product RTO and RPO, SS&C backs up and recovers data and systems according to contracted product availability. Due to a wide range of client and application specific requirements, this document does not contain the list of SS&C recovered products. Client Customer service representatives can provide specific product recovery. The following section covers the types of data processing used to back up and recover each of the platforms supported at the Primary Data Center(s).