Common use of TO THE STANDARD CONTRACTUAL CLAUSES Clause in Contracts

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is the Customer identified above. Data importer The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of Processing of Personal Data by data importer is the performance of the Services pursuant to the Agreement. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxxxxxxx Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the Customer identified above. transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… Data importer The data importer is: APTTUS Corporationis (please specify briefly activities relevant to the transfer): Higher Logic, 0000 Xxxxxxx Xxxxxx XxxxLLC is a provider of email marketing, Xxxxx 000marketing automation, Xxx Xxxxxand community and collaboration software services which involves sub-processing personal data provided by, XX 00000and pursuant to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreement. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors subjects (please specify): Customers or prospective customers of data exporter (who are natural persons)  Employees or contact persons ), individuals, employees, agents, contractors, and affiliates of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: Data exporter may submit Personal Data to the ServicesFirst, the extent of which is determined Middle and controlled by the data exporter in its sole discretionLast Name; Email Address; Company Name, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. data (please specify): None Processing operations The personal data transferred will be subject to the following basic processing activities: activities (please specify): The objective of Processing of Personal Data by data importer is the performance of the Services processing services pursuant to the Agreement, as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxx Xxxxxxxx Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the Customer identified above. transfer): ……………………………………………………………………………………………………… ……………………………………………………………………………………… Data importer The data importer is: APTTUS Corporationis (please specify briefly activities relevant to the transfer): Higher Logic, 0000 Xxxxxxx Xxxxxx XxxxLLC is a provider of email marketing, Xxxxx 000marketing automation, Xxx Xxxxxand community and collaboration software services which involves sub-processing personal data provided by, XX 00000and pursuant to the instructions and directions of, the processor in accordance with the terms of the relevant processing agreement. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors subjects (please specify): Customers or prospective customers of data exporter (who are natural persons)  Employees or contact persons ), individuals, employees, agents, contractors, and affiliates of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. Categories of data The personal data transferred concern the following categories of data (please specify): Non-sensitive demographic data: Data exporter may submit Personal Data to the ServicesFirst, the extent of which is determined Middle and controlled by the data exporter in its sole discretionLast Name; Email Address; Company Name, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. data (please specify): None Processing operations The personal data transferred will be subject to the following basic processing activities: activities (please specify): The objective of Processing of Personal Data by data importer is the performance of the Services processing services pursuant to the Agreement, as requested by the data exporter, which may include collection, organization, storage, adaptation or alteration, retrieval, consultation, use, or alignment or combination. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxxxxxxx Xxxxx Xxxxx Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Appendix Data exporter The data exporter is is: Is the entity defined as Customer identified abovein the DPA. Data importer The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000. AppsFlyer Ltd. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to As set forth in Appendix 1 of the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. DPA Categories of data The personal data transferred concern As set forth in Appendix 1 of the following categories of data: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data DPA. Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicableIt is not intended that AppsFlyer receive any special categories of data. Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of Processing of Personal Data by data importer is the performance of the Services pursuant collection, recording, organisation, structuring, storage, deletion, aggregation, analyzaion, anonymization and pseudonymization in order to provide analysis services as described in the Agreement. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:…………: ……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxxxxxxx Xxxx Xxxxxx, CEO Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter, , is a provider of . The data exporter is has appointed the Customer identified abovedata importer to provide [describe services]. To facilitate the provision of these services, the data exporter may provide to the data importer access to the personal data described below. Data importer The data importer, [Company Name], is a provider of [describe services]. The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000will be the recipient of personal data which is exported by the data exporter to the data importer as described below. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Servicessubjects (please specify): [Whose data will be transferred (e.g. riders, the extent of which is determined and controlled by the data exporter in its sole discretiondrivers, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. employees)?] Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the Services, the extent data (please specify): [What types of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information will be transferred (companye.g. name, email, phonephone number, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data UUID, device ID)?] Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. data (please specify): [What special types of data will be transferred (e.g. race, gender, political affiliation, sexual orientation), if any?] Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of Processing of Personal Data by activities (please specify): [How will the data importer is the performance of the Services pursuant to the Agreement. be used or processed?] FOR DATA IMPORTER – [ ] FOR DATA EXPORTER – Name:: … …………………………………………………………………………… Authorised Signature ……………… Name: … …………………………………………………………………………… DATA IMPORTER Name……………… Authorized Signature: Xxxxxxx Xxxxxxxx Authorised Signature … ………………………………………………………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):Authorized Signature: … …………………………………………………………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Appendix Data exporter The data exporter is the Customer identified aboveCompany which has an account with Vendor for provision of Services, and any affiliates of that Company. Data importer The data importer is: APTTUS Corporationis Webgroup Media, 0000 Xxxxxxx Xxxxxx XxxxLLC, Xxxxx 000, Xxx Xxxxx, XX 00000. which processes Personal Data on behalf of and on the instruction of Company Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to • Customers, prospective customers, and other persons with a business relationship with the Services, Company • Employees or agents of the extent of which is determined and controlled Company. • Other persons authorized by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter Company to use the ServicesServices provided by Vendor. Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the ServicesNames, the extent of which is determined and controlled by the data exporter in its sole discretioncontact information, identification data, and which may include, but is not limited others as necessary to provide the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicableService or for Company to serve their customers. Processing operations The personal data transferred will be subject to the following basic processing activities: The objective activities necessary to provide Services to Company, including but not limited to transmission, storage, and display of Processing of Personal Data by data importer is the performance of the Services pursuant to the Agreementsaid data. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxxxxx, Xx Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Appendix Data exporter The data exporter Data Exporter is the Customer identified aboveuser of ANALEC Products and services and provides client data as part of the use of the Services. Data importer The data importer is: APTTUS CorporationData Importer is a software product company providing ANALEC products (ResearchWise, 0000 Xxxxxxx Xxxxxx XxxxClientManager, Xxxxx 000, Xxx Xxxxx, XX 00000Conference Management) to its Client(s). Data subjects The personal data transferred concern the following categories of data subjects: • Data exporter relating to individuals provided to ANALEC via the Services, by (or at the direction of) the Client or by Client’s End Users. • Data subjects include the individuals about whom data is provided to ANALEC via the Services. Categories of data The Client may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter Client in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  • First and last Last name  Title  Position  Employer  • Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  • Connection data  Loaclisation • IP Address and other cookie data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. do not include sensitive data Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of Processing of Personal Data by importer will process personal data importer is as necessary to perform the performance of the Services services pursuant to the Agreement. The processing operations performed on the personal data will depend on the scope of data exporter's services. Such services may include: • Collecting, Recording, Organising, Storage, Use, Alteration, Disclosure, Transmission, Retrieval, Destruction, Archival DATA EXPORTER Name:…………: ……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxxxxxxx ……………………………… Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is a customer of the Customer identified abovedata importer’s custom software applications and/or proprietary platform for the secure transmission and storage of data resulting from the use of these applications. Data importer The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000is a provider of custom software applications and platform for the secure transmission and storage of data resulting from the use of these applications. Data subjects The personal data Personal Data transferred concern the following categories of Data Subjects: • Authorized Users of the Solution and the Platform; • Employees of the data subjects: Data exporter may submit Personal Data to exporter; • Consultants of the Services, data exporter; • Contractors of the extent data exporter; • Agents of the data exporter; and/or • Third parties with which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Servicesconducts business. Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to Any personal data comprised in Customer Data. “Customer Data” means all data and information submitted by Users of the ServicesSolution and the Platform and includes names, the extent of which is determined contact details and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data email addresses. Special categories of data (if appropriate) The personal data transferred may concern the following special categories of data: Not applicableAny personal data comprised in the Customer Data, as defined above, which may be used to uniquely identify an individual, including but not limited to a User’s biometric data or data concerning health, as defined in the GDPR. Processing operations The personal data Personal Data transferred will be processed in accordance with the Principal Agreement and may be subject to the following basic processing activities: The objective of Processing of Personal Data by data importer is the performance of • Storage and other processing necessary to provide, maintain and update the Services pursuant provided to the data exporter; • To provide technical support to the data exporter; and • Disclosures in accordance with the Principal Agreement, as compelled by law. DATA EXPORTER Name:…………: ……………………………… Authorised Signature ……………………………… DATA IMPORTER Name: Xxxxxxx Pieter-Xxxxxxxx Xxxxxx Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the Customer identified above. transfer): [Please Complete] …………………………………………………………………………………………………………………………………… Data importer The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000is (please specify briefly activities relevant to the transfer): Splash is a provider of event software. …………………………………………………………………………………………………………………………………… Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit subjects (please specify): Personal Data relevant to the Services, the extent of which is determined and controlled by the data exporter Client in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  • Prospects, customers, business partners and vendors Suppliers of data exporter Client (who are natural persons)  • Employees or contact persons of data exporterClient’s prospects, customers, business partners and vendors  Suppliers • Employees, consultants, agents, advisors, freelancers of data exporter Client (who are natural persons)  Data exporter• Client’s Users users authorized by data exporter Client to use the Services. Services • Attendees of Client’s events Categories of data The personal data transferred concern the following categories of data: Data exporter may submit data (please specify): Personal Data relevant to the Services, the extent of which is determined and controlled by the data exporter Client in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  • First and last name  • Title  • Position  • Employer  • Contact information (company, email, phone, physical business address)  • ID data  • Device data • Professional life data  • Personal life data  • Connection data  Loaclisation • Localization data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: data (please specify): Not applicableApplicable unless specified. …………………………………………………………………………………………………………………………………… Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of activities (please specify): Processing of Personal Data by data importer is the performance of to perform the Services pursuant to the Agreement. DATA EXPORTER Name:……………………………… : [Controller, Inc.] Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxxxxxxx One Clipboard, Inc. Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the Customer identified above. transfer): …………………………………………………………………………………………………………………………………………………… …………………………………………………………………………………………………………………………………………………… Data importer The data importer is: APTTUS Corporationis (please specify briefly activities relevant to the transfer): Buildscale, 0000 Xxxxxxx Xxxxxx XxxxInc. is a provider of video marketing and sales services which involves processing personal data provided by, Xxxxx 000and pursuant to the instructions and directions of, Xxx Xxxxx, XX 00000the data exporter in accordance with the terms of the Agreement. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Servicessubjects (please specify): • Customer employees, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employeescontractors, agents, advisorsand/or representatives • Customer customers and affiliates, freelancers and their employees, contractors, agents, representatives, prospects, and website visitors (some of data exporter (who are natural personswhich may be end users of Buildscale’s software products and services)  Data exporter’s Users authorized by data exporter to use the Services. Categories of data The personal data transferred concern the may include following categories of data: Data exporter may submit Personal Data to the Servicesdata (please specify): • Standard contact information such as name, the extent of which is determined and controlled by the data exporter title, email address, physical address, phone number, etc. • information about an individual’s computer or mobile device or technology usage, including (for example) IP address, MAC address, unique device identifiers, unique identifies set in its sole discretioncookies, and which may includeany information passively captured about a person’s online activities, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (companybrowsing, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data application or hotspot usage or device location Special categories of data (if appropriate) The personal data transferred concern the may include following special categories of data: Not applicable. data (please specify): • N/A unless configured by Customer Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of activities (please specify): Processing of Personal Data by data importer is the activities in performance of the Services pursuant to video marketing and sales services as set forth in the Agreement, such as storing, copying, summarizing, aggregating, deleting data. SIGNATURE PAGE FOLLOWS DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxxxxxxx Buildscale, Inc. Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the Customer identified above. transfer): ………………………………………………………………………………………………………………………… ………………………………………………………………………………………………………………………… …………………………………………………… Data importer The data importer is: APTTUS Corporationis (please specify briefly activities relevant to the transfer): Buildscale, 0000 Xxxxxxx Xxxxxx XxxxInc. is a provider of video marketing and sales services which involves processing personal data provided by, Xxxxx 000and pursuant to the instructions and directions of, Xxx Xxxxx, XX 00000the data exporter in accordance with the terms of the Agreement. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Servicessubjects (please specify): ● Customer employees, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employeescontractors, agents, advisorsand/or representatives ● Customer customers and affiliates, freelancers and their employees, contractors, agents, representatives, prospects, and website visitors (some of data exporter (who are natural personswhich may be end users of Buildscale’s software products and services)  Data exporter’s Users authorized by data exporter to use the Services. Categories of data The personal data transferred concern the may include following categories of data: Data exporter may submit Personal Data to the Servicesdata (please specify): ● Standard contact information such as name, the extent of which is determined and controlled by the data exporter title, email address, physical address, phone number, etc. ● information about an individual’s computer or mobile device or technology usage, including (for example) IP address, MAC address, unique device identifiers, unique identifies set in its sole discretioncookies, and which may includeany information passively captured about a person’s online activities, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (companybrowsing, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data application or hotspot usage or device location Special categories of data (if appropriate) The personal data transferred concern the may include following special categories of data: Not applicable. data (please specify): ● N/A unless configured by Customer Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of activities (please specify): Processing of Personal Data by data importer is the activities in performance of the Services pursuant to video marketing and sales services as set forth in the Agreement, such as storing, copying, summarizing, aggregating, deleting data. SIGNATURE PAGE FOLLOWS DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name: Xxxxxxx Xxxxxxxx Buildscale, Inc. Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): Data exporter is the Customer identified abovebeing (i) the legal entity that has executed the Standard Contractual Clauses as a data exporter and (ii) all Affiliates (as defined in the agreement) of Customer established within the European Economic Area (EEA); that have purchased or have access to the data importer’s products and/or services under the Services Agreement. Data importer The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000. is (please specify briefly activities relevant to the transfer): A provider of software solutions for tax and accounting experts who provide products and/or services to the data exporter as more fully described in the Agreement Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit subjects (please specify): Personal Data to the Servicesdata transferred is that of employees, the extent of which is determined and controlled by the data exporter in its sole discretionworkers, consultants, and which may include, but is not limited to Personal clients of Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (Exporter who are natural persons)  Employees persons or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. as specified at Annex 1 DPA Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data please specify): As specified at Annex 1 DPA Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. As specified at Annex 1 DPA Processing operations The personal data transferred will be subject to the following basic processing activities: activities (please specify): The objective purpose of Processing of Personal Data processing by data importer is the performance of the Services its obligations pursuant to the Agreement. Services Agreement or as specified at Annex 1 DPA DATA EXPORTER IMPORTER Name:………………………… Xxxxxxx Xxxxx …………………… Authorised Signature …………………… DATA IMPORTER EXPORTER Name: :…………… Xxxxxxx Xxxxxxxx Xxxxx ………………… Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter Data Exporter is the Customer identified abovelegal entity specified in Section 3.1 of Schedule 1 of the DPA. Data importer The data importer is: APTTUS Corporationis OpenExchange Interfaces, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000Inc. OpenExchange is a provider of enterprise software as a service solutions which process personal data upon the instruction of the data exporter in accordance with the terms of the Agreement. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter subjects (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  please specify): Data exporter’s Users users authorized by data exporter to use the Services on behalf of data exporter and attendees of virtual events hosted by Customer using the Services. Categories of data The personal data transferred concern the following categories of data: Data data (please specify): For data exporter may submit Personal Data access to the ServicesOpenExchange service, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to at a minimum provide the following categories of Personal Datapersonal data elements:  Employee First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation Last Name Employee Email Address Employee Mobile Phone Number Employee title or position Company Business Address Employee password or other service authentication credential Localization data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicabledata (please specify): None. Processing operations The personal data transferred will be subject to the following basic processing activities: activities (please specify): The objective of Processing of Personal Data by data importer is the performance of the Services pursuant to the Agreement. DATA EXPORTER DATA IMPORTER Name:………………………………… …….… Name: ………………………………….… Authorised Signature …………………… DATA IMPORTER NameAuthorised Signature: Xxxxxxx Xxxxxxxx Authorised Signature …………………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):………….…

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the Customer identified above. transfer): Data importer The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000. is (please specify briefly activities relevant to the transfer): …………………………………………………………………………………………………… Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter subjects (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. please specify): Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data please specify): Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. data (please specify): Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of Processing of Personal Data by data importer is the performance of the Services pursuant to the Agreement. activities (please specify): DATA EXPORTER Name:…………………………………………………………………………………………… Authorised Signature …………………………………… …………………………………………. DATA IMPORTER Name: Xxxxxxx Xxxxxxxx :…………………………………………………………………………………………… Authorised Signature …………………………………… …………………………………………. APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):) (or document/legislation attached): Data importer (COMPANY) will maintain technical and organizational security measures for protection of the security, confidentiality and integrity of Personal Data Processed in the context of the provision of the Services as described in Section 9 of Addendum (Data Security and Privacy) which is hereby incorporated by reference in its entirety.

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is the Customer identified above. is: Data importer The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000. Outreach Corporation Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users users authorized by data exporter to use the Services. Outreach’s Services Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the Services, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation Localisation data Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicableData exporter will not submit special categories of data to the Outreach Services. For the sake of clarity, special categories of data means personal data with information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of Processing processing of Personal Data personal data by data importer is the performance of the Outreach Services pursuant to the Agreement. DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Outreach Corporation Name: Xxxxxxx Xxxxxxxx :……………………………… Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter, , is a provider of . The data exporter is has appointed the Customer identified abovedata importer to provide [describe services]. To facilitate the provision of these services, the data exporter may provide to the data importer access to the personal data described below. Data importer The data importer, [Company Name], is a provider of [describe services]. The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000will be the recipient of personal data which is exported by the data exporter to the data importer as described below. Data subjects The personal data transferred concern the following categories of data subjects: Data exporter may submit Personal Data to the Servicessubjects (please specify): [Whose data will be transferred (e.g. riders, the extent of which is determined and controlled by the data exporter in its sole discretiondrivers, and which may include, but is not limited to Personal Data relating to the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the Services. employees)?] Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the Services, the extent data (please specify): [What types of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information will be transferred (companye.g. name, email, phonephone number, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data UUID, device ID)?] Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. data (please specify): [What special types of data will be transferred (e.g. race, gender, political affiliation, sexual orientation), if any?] Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of Processing of Personal Data by activities (please specify): [How will the data importer is the performance of the Services pursuant to the Agreement. be used or processed?] FOR DATA IMPORTER – [ _] FOR DATA EXPORTER – Name:: ……………………………………………………………………………… Authorised Signature ……………… Name: ……………………………………………………………………………… DATA IMPORTER Name……………… Authorized Signature: Xxxxxxx Xxxxxxxx Authorised Signature …………………………………………………………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):Authorized Signature: ……………………………………………………………………

TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Appendix Data exporter Exporter The data exporter is the Customer identified above. is: [TO BE COMPLETED] Data importer Importer The data importer is: APTTUS Corporation, 0000 Xxxxxxx Xxxxxx Xxxx, Xxxxx 000, Xxx Xxxxx, XX 00000. [TO BE COMPLETED] Data subjects Subjects The personal data transferred concern the following categories of data subjects: Categories of Data exporter may submit Personal Data to the ServicesSubjects, the extent of which is as determined and controlled by the Data Exporter, may include company representatives and (end) users, such as employees, job applicants, contractors, collaborators, partners, suppliers and customers of the Company. Data Subjects also may include consumers and individuals attempting to communicate or transfer personal data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating users of the services to be provided under the following categories of data subjects:  Prospects, customers, business partners and vendors of data exporter (who are natural persons)  Employees or contact persons of data exporter’s prospects, customers, business partners and vendors  Employees, agents, advisors, freelancers of data exporter (who are natural persons)  Data exporter’s Users authorized by data exporter to use the ServicesPrincipal Agreement. Categories of data The personal data transferred concern the following categories of data: Data exporter may submit Personal Data to the ServicesCategories of personal Data, the extent of which is as determined and controlled by the data exporter in its sole discretionData Exporter, may only include personal contact information such as name, home address, home telephone or mobile number, fax number, email address, employment details including employer name, job title and which may include, but is not limited to the following categories of Personal Data:  First and last name  Title  Position  Employer  Contact information (company, email, phone, physical business address)  ID data  Professional life data  Personal life data  Connection data  Loaclisation data function. Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: Not applicable. None Processing operations The personal data transferred will be subject to the following basic processing activities: The objective of Processing processing of Personal personal data by Data by data importer Importer is the performance of the Services services pursuant to the Principal Agreement. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name: Xxxxxxx Xxxxxxxx :……………………………… Authorised Signature …………………… APPENDIX 2 TO THE STANDARD CONTRACTUAL CLAUSES This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):……