Vendor Data Processing Agreement

2. The data importer and subcontractor guarantee, at the request of the data exporter and/or the supervisory authority, that they submit their computer facilities to review the measures covered in paragraph 1. b) “data exporter,” the person who transfers personal data; With respect to these scenarios, at the end of the various technical and organizational measures described below, the tables indicate the responsibility of the data importer (fields marked with an “X”). Personal data may be processed for: (a) for the provision of the service (including detection, prevention and resolution of security and technical issues); (b) respond to customer support requests; and (c) to meet its obligations under the agreement. 4. The parties do not object to a person being represented by an association or other body if the person concerned expressly wishes to do so and if national law permits it. Data exporter. The data exporter is (please briefly state your activities relevant to the transfer): “Non-European Data Protection Act” refers to any national/federal/national/provincial/emirati data protection or data protection law, with a law other than data protection legislation. “RGPD”, the European Parliament and Council Regulation 2016/679 on 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data and repealing Directive 95/46/EC.

These standards apply to all suppliers, third parties or subcontractors (“providers”) involved in the provision of services to Integration Appliance, Inc. and its related businesses, including Intapp Limited (known as “Intapp”). 2. The person concerned may enforce this clause to the data importer: Clause 5 (a) to (e) and (e) and (e) and g), clause 6, Clause 7, paragraph 8, paragraph 2, and clause 9 to 12, in cases where the data exporter has effectively disappeared or no longer exists legally, unless a successor organization has assumed, by contract or legal application, all of the legal obligations of the data exporter, thus assuming the rights and obligations of the data exporter, in which case the person concerned may enforce that person.