DDocuSign Envelope ID: 02498998-BAFT-4514-8E0E-F683S78OFAES a gy Data Processor Agreement DDATA PRIVACY AND SECURITY ~ DATA CONTROLLER TO DATA PROCESSOR AGREEMENT ‘is document (“Exh shal become an integral pat othe Orr Fem signed by Customer (he “Ageamen ering to thee tems, This EAN {ives a's tlton comission deta processing agramedtbelween SAP ena each Dal Contolr rrodting Personal Da n comacton wh ts ‘Serine Sanco and tuermore datos he applstl ecvieal and erarizalioal measures SAP mplsnens ad masa fo protec Personal Dato ‘ited Inthe Sonic, Thelen frm ef le Exnat eh be doomed io be evdoncad upen SAP's receipt of any ote follwing: slned orgie Ore ey) ein os enn erat 6) neni Cer om ware Dosa a ued by SX rec an Ce customer als a the Data Controller concerring Personal Data of ts cnn Named Ura a vel oso bahalf fad inthe nams of ts Aas cx tir Satis In te capacly ae Data Controlone of Name Users euerzed by Custer o use the Serve. Customer sal en ilo dala processing gieemen’s wih a Bats Contllors that re roqutes to alow SAP {as Data Processor or Subprocessor, a the case may be) sdf ‘Etbprocessors to process any Personal Dats es escrbed In bls Eei Cuore shal serve 96 ange pol of conf for SAP and is sce ‘esrorsle forte blr! cootnaton, reve ana sutmasion of ucone o reat oohet Data Convllers to SAP. SAP shal be dschargesof fs ebigaon to inform coy Data Controller when bes proved Susn fomaton or nes to Customer. SAP ls ena refuse any requests or trefucten proved deci by @ Data Controller te not Curomer. itary provion ofthis Ei four by any curt competent jute io be vat or unanernsto the nvalityof suc rovion shall ot ack ther powelon of is xt and provlone nl affected by such Illy shal rena n llc eee. 4, ata Processing Purposes 41. Customer ands Aisles, othe respecve Data Controls). shal denne the poses of collecting, processing, ond eherse sig Peroonal Data sored he Sen, Unies posed hese inthe Ageemer, Append t ofthe Standard Contactal lauses andthe BAYS! ‘hal apy to such daa procescing. 412 The purposes for processing Personal Osta by SAP and its Subprocessors under bis Exit are ite ‘Seting un, operating, montrng ana frovng tne Senes, nclng the underngIfesiuetue hardware, sta, Secure dala certer {Roiie, cemecviy aa Data Processor er Subprocestor as ce fr inthe Agresment. Dy Freweng iectneal suppor ao aan cbigaen of SAP under te Agreeret, ©) Proving Conttng Serces as a man oblgaton of SAP, and be exert agreed by te pates: Commune to Nemes Users and oer adminstatve purposes a8 crea ne toms exceed wih apart Senice sn 9) Exeuutngmatbetors othe Customer accrdaros wih Sectors 21 and 22 bel. 2. SAP Obligations 2:1. SAP shall process Personal Data ory in accordance wth the Data Controle’ inure submited by Customer, SAP shall use reasonable ‘anme'i fts to feton and comply wih Use sctons received rom Custer as fg a they ee egy reqared and tecnica fees and do fol requre any male nedesiore tothe Anenaly ofthe Sorc or undying sofa. SAP shal oil Curler SAP considers aniston Sibmited by Gusener fo ba in vlatlon of the spofeale Dela Protacen Law. SAP chat rol be cbigled to pero » conprehenshe las ‘tarinalon ae o hs eent SAP fe unable to comply wah an iaracton shal prompt (mal permite) Customer hare, 22 SAP may, upon the nscton of Customer and wih Customers necessary cooperation, coe, erase andlor block any Personal Dal if ang lie extent te freien ft Sendce does nt alow te Cust, Ho Data Controllers e Nard Users odo s. Inthe event thal SAP needs 0 sce ary of Guslrers tsiems or Customers iatance of Ne Sendce rarolly 10 execute an Insbucion or provide tenia suppor. wa. va pleston shan, Custer hereby gate to SAP the permission for such roma access. Further, Custer wl neme a coniact person that = ‘eeessary—can grr to SAP he requedeoease rts 25. For processing Peronal Data, SAP ands Subprocessors shal ony use perseone! who ae subject fo tndng obtain fo cbsene dia Seroty of secrety of teeurminlstona fo ho ent epoca, pursuant ta we appicable Data Protcton Law. SAP shal self and shat requee fate Subprocassors vue anni to wee they gran acess to Personal Data n Sats cea ad Gta prey. 24 SAP shat. oo minimum, inpement and mansin appropne lees sn eganizsoral measures a decribed in Appendix 2 f ta Ei o ‘chp Boreonal bate sce and poten kagohet unouhorzed er raw proceasing and acaderal oss, cesteton or darage. Since SAP proves tre ‘Selice ol costomers union ws hosted vebbesod appa, all apprise snd then curont tchieal snd organizational messes apoyo ‘SAP enbie caster tas howd cut of te some dala ever and supseoed fo the samo Secs. Customer understards nd agres tet he {vical and orgeicstondl meesue are eutjct to ecrical potest ar development In hat rger, SAP is expesty alowed to mplementacoqute ‘tomsve mecoures as ng ss te scary lve ofthe meaties fe mathe. In De event of ay deiner change SAP stall proud anoifleaion ‘Mgt San ony neceseny deca tats Cusine y ena ox pabienton on nba cant ease By Customer. 25 SAP shall regula teat he measure deserted In Appendix 2 fa Data Conrllorbofowes that addons measures are requted under the gpcable Data Protocten Law Customer shal stmt an atten czardeg to Seaton 21 sBove. 26 SAP shal promply nfm Custer as soon as 8 Becomes aware of seus dsuptons cf the processing operations, easenable suspected or ‘dual dala potacon voabne or any Securty Breach It eonnacion wh th precescing f Personal Data wich each ease, may sirifeartly ham the lmarect the Data Subjects concemed 27. AlCusleme' expense, SAP shal estenably suprrt Cute or cher Data Contoters in dosing wt rquoss fom ntl Dat Subjects “nwore eupenieory ao wih respec oto rocessiry of Personal Data heres ‘SAP Cloud and HEC SevicesDeta Protection Exhibit enGLOBAL.¥4-2015. Page’ of7DDocusign Envelope ID: 0248B894-BAF7-1514-SEOE-FSES37B9FAEB 3. Subprocessors EE 31. Customer (ao on bstlf fle Data Controllers) hereby auorues SAP (leo forthe puspose of Clause 11 pa A te Standard ‘Contacte! Clauooo) to engage toon forthe prOcseig of Pareoral Data (esch 2 "Subprocossor) io We ext necessary for uling fs ‘onrectial obigatore under Agfeemant 3 ng an SAP reman espa or ny cls or emsson of fs Subprocassors athe samie MANN? 85 {or le oun act ana ombsions hareser. SAP shal pass on 10 Sobprocessors SAPs oblgaion 2s Data Processor fo Subprocessor} vs: ‘ue Caturar and te reepecove Data Controle ae el out nie Bait. SAP undertakes fo Nave oseecUonprooess by wich evausies the Seuuny, povecy ‘and ‘cenfooninlty protean oa ‘Subprocessar in fegats to. data handing on schessed tas (ternabvely. the ‘Suoproceseor sna poceor a soc cotcaion tat evens appropiate scat measutes ae place wheat othe Subprocessors Serene tobe poded to SAP) ‘32. SAP wil ifr Guster upon its rues by email bout he name, eds an rle ofeach Subprocessor it use provide the Senice. SAP inay remove of appar sale and flab oer Subpooessos af fa ovm dcreten in accra wh ths Secien 3. SAP vl form Customer by Sra rece out Enmgoey Mevacor at Swi © a yl ft uence le ad Sccepled ne ong 2s ty comp iho icaie Osta Protection Law af 8 Sumprocassor i Ineorporaed sie te CEA, he Standard Contracts! Clases, Customer hos lina earon fo blac fo SAPs use a2 Subprocessor (the Suppressor ls ocd In = unin witout an adie level of dla gotecon and Cuter hacds to complete adaonalfomasios as 6 Data Cone prit toa ura Sich Bubprocessor) Custener shal nelly SAP Pereof i rig win tity (0) days afer recep of SAPs noice, I Customer doesnt objet dung {uch tne paid tho now Srbprocoseors shal be dome accepted. Cuslorar oles to the use oe Subprocessorconcered SAP shal have the fight to ure the objecon tough one of the folonrg eptons (o be selected a SAPs sole cretion: (2) SAP wil aborts plans (0 use the Subprocossor with fogrdto Persoval Data x () SAP wil tke the cece spe requested by Curcme ys objection (hc remove Casters fnjeston and proceed to se the Subprocsasr yi regard to Personal Dats or () SAP may cease to prove o Customer may agree Alt ws (termporaiy er rmanery the pal aspect ofthe Senace fat wad vave tse ofthe Subproceasor sah regard fo Personal Osta oe. {he shove optore are reuioeby avalab and to ejocion has not boon cured WEIN Uity (30) daye aor SAME vecelpt of Customer objection, thar party mey terminate the ected Sonen wih reasonate por wien ntce 43 “Emergency Replacement ofr to 8 sudien replacement of « Subprocescor wore such change Is outs of SAP resonate cael uch a5 ifthe Subprocavsorcenara busines, shyly eszoninoes aeroes to SAP, of breaches Es covtecal des oved to SAP) n such caba, SAP wl Inform Customer of the wlacement Subprocessor 20 soon as pessiis nd the process to forall appan such Subrocessor pursuant fo ‘Seton 12 shall ogee. 4 Informational Transtrs and Country Specie Deviations 444 Persona Data tat SAP has received rom any Data Controle Heseunder sh only be exparted by SAP ots Subprocessors fom the Data ‘Sentero or eveeeed fora county or aiory cutie tho E24 CIlemationel Tranter) if (9) te repent leaf ort Surry of enon nach ‘operate (Le whore ofa ware processes cr accesses Personal Data os been fund fo ets an adore love pretation forte gs ard trsncoms of data sujet relation othe processing of Personal Ona as ele mine by to Etsopean Corsten ne ajc te ape estos {any euch detention, or en a Non EU Endy fil the requirements of Secbon 42 bron, Thw same thal ao fo SAP rocatang Pareonsl Dota est tom a Data Cantolor tha EA, vie nice acoss to a Serves hosted 9 Data Contr cusda EEA. 442. SAP @vough SAP SE) has erkered into the Standard Contractual Clauses with each Now-EU Eni processing Persona Data hereunder by ‘means of sn Intaatlonal Tensor, Curomer hceby secdes (othe Standard Contractual Clauses art May thn del erfrcs tom agaist Une revert Nem U ent. Customer frermore Wl posure tht each Data Conte’ wil secede fo auch Standard Conarual Clases entered Ino batvaen SAP and Customer In the avert sch crest ight oes nol ei the Data Controle or 8 sucsesstly cheng bya Subprocessor, ‘SAP chal efoes euch Standard Conractual Clauses aga! he Swprocetto1 on bea othe Data Conia In comptance wh fue Ex. Ure ‘menae agreed bythe pares, Appendses 1 and 2 of the Standard Contractual Causes as stated thal py Natingin the Moreen al be const a preva ver any conticng Clause ote Standard Contractual Causes. Caterer selnodeages thas haste panty ore ‘Standard Contractual Claus or obla a fl copy rm SAP 443. The Standard Contractual Clauses shale goernad by he aw ofthe Marbe Staten uhich he EEA based Data Expororsesabshed, 444. Suitzortand Tote exert a Data Conor in Swzeront ris Named User intnd to esr parson dea f loge! onis (aso consired personal ta unde he Sass Fedetl Aen Oe Proton in he Serle, Customer agoes to st btn re corr (mtn sare st AM 6 para. 2 EC's tthe Soss Feder at on Osta Protecter) of such gal erly (Data Subject before usiy the Serica, a descsbec erin, for sozh Daa ‘Subjete) SAP apreee tier to seh personal data a ordar va of prtecsn 2 el fothin Secon 1, 2 snd Sots Es 45_Auatia. To the edont a Data Control In Austia os Namod Usors ine to ontor personal dia of logl ens (ako considered preona data inder he Feder Ae enearg tha Prtacton of Parsnal Data (OSG 2000) Fro ne Servic, Customer ages te et cia the concert Jno ‘enue of§ 12 ata, 3 of Bo OSG 200) of such galery (Data Sues) before using the Serve, as desceed ree, fo such Data Subjects). SAP Secs to tora such pesonal des a sar oval of prtocien ae elon Saclors 1,2 and 6 cis ENE ‘45 Russian Federation To pars ages thet SAP is aocepSng fom the Customer oetln Pereonel Data of Russian Gtzen for storing ond shal ‘eure svateiiy of such stored Personal Data to the exit lecvicaly feashle forthe. Cusloma’'s oun processing. Cusomer of Customer ‘tate as Data Contolar remain opraters of Personal Data subd ft processing to SAP and are responce x dateting () Customer wll be ale to comely wih epaleabla Fusion pvacy lawn use of Serves Wich Invave processing of Ruslan cuze’s Perecnal Data and (heer none ean be sed nado ose te Russi Federston 47. Turkay. To he exten» Data Conrlor in Tukey es Named Users inland oecter Personal Data no the Sere, Custer agrees to st ‘ain th conan ofeach Data Subject to a lntarnational Trenser as contemplated under is Ea an ote enter requeed unde the aplectle ‘eta potetan ann Tircy. Tho Castors Pauby conn ané commits Ina has recov the Personal Data and roms the relied parsons ‘egarding the taraferpcees of he Personal Data sesotdance wh Be apes. In 48 Unltod,Statos. let SAP and Customer have eveculed 2 Bushess Assodsle agreement fr tbe exchange of protected heath ‘ntaaton (PHI) 8 dafted nw United States Hoch Inutence PetabRly and Acccurabity AG ot 1995, s8 amended, Intaston 1a ts Page 20f7‘DoouSign Envelope ID: 02498004. BAFT-4514-8EOE-FEB39769FAEB ‘Service, Customer hereby presents hat Custer wl not submit PHI tothe Serve nar sols such ifomaton fom p par of ‘oe ofthe Series ‘49 South Korea To te ete Data Controlir in Repuc af Korea ors Named User nen! fo eter Personal Dta lt e Sve, Customer ‘htecs to fst blan the coneert of each Data Subject fo an Intemational Tranefor a+ covtrpald under this Exit and tthe eet ‘Stured undo he eplate Personal Information Pretocion Aen Republe Korea. The Customer ereby conan and comms tht has receives {he Personal Data nd tiomed te rated poreone regaing the Wancferroces ofthe Personal Dat In e2zorance wth Me appicabe av. Monitoring Rights c Customer 51_For ine prodacton syste whieh run the Sere Rel ard dung the torn cf the Agreement SAP shal makin, st & on expense, spplable eriseaions oF oud repos, Unees provided ore in Supplement, SAP ergages on ermaonaly recognized npencent tie party sot {S'torew the measues in piace in proteston ofthe Servees)Cerfeaions may be based on ISO 27001 or ahr lances (scope a dened In ‘feats For ten SAP Olud Servers, SAP peror Yea’ oust (east anual va ceed airs to prove vale OC Sys 2 GSSAE fo exiGAe 900) andlor SOC 2 Type’? fepo. Aust reports sre svetabe tough te apart RUT Or SAP. 3 appa. Upon Casters request SAP anes iver fhe Ciera about the aplae eorflestere and aud standards avelable forthe Seniceconcerre, 52 IL SAP fas fo pero is aut cbigalons under Section 6.1 and as not provided suicient evidence ots complance ster Customer's wien ‘equest Customer (or an nepencert I pay aude obec cube fo conidrcalycbgatenscarsstet vt se inte Agee) ney evit SAP coral ecrmert end socunty practors relevent to Personal Data processoa heteurde or Cuomet once in any twelve (2}vth fared, wih reasonable porn notee at lac! 60 eaye les. dala potcien auhory requres Customers eariercatrel under appteale Bata Protection Law sounder reasonable tre, place and manereanons. 183. Furhenor,()florng an event st ci in Secton 26 above, er) Hf Customer of enon Data Controle has resscnible ground to suspect the nonoomphana of SAP wir te oblgatone under ths Exit, orl) ¥ a father mc rere by Cuntamars oe anor Data Controle? dle Ppoiceton ahoty, Gusoner (oan independent fr pay aceon to bal tate sbjct to caritentaltyebigabons conten ah fose Inthe ‘eroomont may st SAPs ent! envenmart and sect practos relevent o Personal Data processed teu fr Custona naccrdance uh ‘prlcatle Data PretetonLaw, 4 SAP shal reasonabiy suport Custer tioughau these veriicaon processes and rode Customer wth the requ nfrmation. Customer Sha bear any cots (reucny So's hem rezourc bared on thn-carek daly polessond serve rates per SAPS pce it ary efos en SAP's fide exceeding more Mn Aer pr yet. Definitions. ‘ry capiced to used nein, euch se Altes, Aarcamert, Customer, Named User (eretines leo rfared to as Use or Aushoried User, ‘rte font Sere, shal hve the mening given to hem the Agreement. ata Contr” means ection whore te poston Irstanc cf tho Cloud Series hosed fe he Customer ns regjon as pbs eaon-o-datscenteril or noid 10 Coste oF ‘oherwlee agreed an Order Fon, “ata Control” his the nearing gen oth ane splcable Data Protection Law. "Data Exportr” ss wed athe Standard Contract Gunes means Customer assed nan Order Frm os Data Contrllets. "Data importer” a8 used athe Standars Corral Causes meas the applicable Non EU Eniy. ‘ata Processor’ hes thmeaning given oth te Ue aplcable Osta Protacton Lew. Data Protection Law’ means the lglaton protecting he fundamental his and feeds of parsons and, n arr ter ght privacy, wih ‘egurd tthe prosscig of Peecnal Gola bye data proceseo bolt nthe EEA an I rer, such legion of he courdry wets the dea center {oeated, SAP may epee i an Orr Form t compl ith ter comping local as protection tae appeble to SAP the Ota Procecr, and fo the extent agreed, Data Subject” means andesite or intite India oa logl entity vere 20 desired under the appt Data Protector Law) “EEA means the European Economic ee. “NomEU Entity" means any SAP ery or SubgroceesrIncrparaed in & exit whieh does not prove an adequate Ie of dala proton ‘ovarding toSuropaan Un (EU) ue sr regulatons. “Personal Data” has the neaning vento tht expression bth Date Proteeson Law and forthe purposes ofthis Ei, ncues only such persenal tat nore by Customer os Numed Ue ae eed tm hai ure ofthe Serco pind to or eecssad by SAP or fs Subprocentors nore {S'prowde support aececance wh the Agfoemes. Perwarl Deals subset of Custer Ola anc used heen when any Dala Freon Law sopes. "SAP" mesns the SAP ent thatthe pry othe Oder Form, Security Broach” meant any acs ox omisions by SAP ots Subprocessors ha ed oan authorized clelosure of Persona Data breach of re ‘mesaures se forts in Anh 2 or ar Inder for wich te Bata Conrllore aga rau fo provide note tothe Daa Subject or te 08 ‘olen authertyeotered ‘Standard Contractual Causes" mean he (Standard Conketial Causes (proceser) batad on te Commission Dain of § February 2010, on ‘onc confocal uae forth tonefr of Peer Osta to processors esablshed thd counties, under Diectva GU4BIEC (otiod under ocumont number C010} 5}, any subeequet vraton Meret eacsed by tia orien hich shal esac app, reudeg Appendices ene 2atachod hort, “ubprocessor" as used nth Stnderé Conrail (suse andthe ExNEM moans tho SAP Ales and thi pay subprocess engaged by SAP or SAPs Ate in secoceoe wih Section. Pagesot7DDocusign Envelope ID: 0248890A-BAF7-4514-8C0E-F6339789FAES ‘Th partes may provide funher details nan Order Form or the Supplement i rquled, or adjusted in the description below by Customer. ata Exporter ‘The Data Exporters: ‘Te Data Exporter subsites to cern SA? Cloud Serves which low is Nard Utes oe, anand, ue, doe ooze toes Personal Dataae contplted und he Agreamnt Dtaimperter “re Data importer: ‘SAP ond is Swprocesors woud cus Cau Snes whch reuse the Note ofthe Sendce os! he proven of ectrel supa Caster, te ‘Alles en he texpsctveNoned User ss conerpltes wer te Agee Data subjects ‘Tha Personal Dela vanfezed concem he folowing ealgares of ee suns LUntoss provided ceeruise by Data Exporter Data Subjects may ici employes, carro, business parrers coher nid ose Persona! Dalai oredin te Sone, Categories of dats ‘The Personal Daa vanefeved concer he flouing eatgooe of aa ‘Cte datarines tho cxegeries of dla per Sone subnenbed. Cstorers dl ts can be configure as parc the inplamarten cf be Senos or a chavo ported the Svice, To Prsoral ata Vanstoed wualyconcar (a sweet oe elowra calegares dat ae pai rab, ‘nal adses, tn no, assess da. sytem acces veage avhoreaten das corpan ram, cetactcala, Ive ca, so ppleaton ‘pectic dsta which Cusemas’ Nard Users rerio the Sere nung Bark coun dela, Cred or Debt Card da, Special categories of data appropriate) ‘The Personal bata nefen concer a floing spacial eategores of da: Asie by Custras, Processing operations ‘The Porsoal Data Yate lb subject othe olor bal roessng athe: : ‘20 of Personal Datato prvi he Senic ado rove ssstarce to ecrcal supper : ‘storage of Parcnal Data cease Sere date cnr lena srchtectue) z ‘ood any sac update, ura ewes to Be Service : ‘bac up of reer Data . ‘computer processing of Poreonal Data, inctng data tarsi. dt tia, eta access “ atk teas slow Personal Daa arse, troqured age 4007DDoouSign Envelope IO: 02498994 BAF7-45 14-8EDE-F6ES3789F AES APSENDIK 2 TO THE STANDARD CONTRACTUAL CLAUSES AND THE EXHIBIT ‘Some Service ar subject to diferent echnical support tems, a St forth inthe respective Supplement or Order For. other case, the desripton of to tecnica and organizational eocurty mazsure (TOs) implomanted by the Data Inportor for tonal Data in accordance ith Clauses 4) and Se) shal epBy: 1. Technical and Organizational Measures ‘The foloneg sectons deine the current security messurs extbished by SAP. GAP may change these at ary time vt noice by Keeping & rrparable oe beter lve of secu. The may mean hat MoMdial Measure aro “opaced by raw measures el sere he same purse Wao SGrieing Secu ev titaunorzed persone shal te preveiad fom gag physi access o premises, bung or rooms where data proctesing gstems ae lostad ile proceso andor uso Frsonal Dats. Measures. ‘AL Dals Gontersachere stick secrty procedues enlered by guar, suvelanca camer, maton detectors, acess oon mechanlams and tuber measures to prevent squpmnt and Dala Cota faites rar bel compraised. Orly auihozed represeniaves have acres tosses ans nese win foe Data Contr feltes. To enue proper funcnaly,piyseslsectly expr (eg. tolon sens, camera, ec) ee Ishisned on. equa bac. neti te foot pyical secy measures we plemented sal Data Caters : ‘SAP protec ts enocn ar aie tng the appropiate mears baced on a secury Cassicadon conducted ly an imal secuy ‘eparent, : 'n goer, buléngs ar secured trough scoees contol estes (sms card aczees system) 7 ‘As a minknu reqaromet, the outros! shel of te bullng mus! be fied wih a ceifled key sysem Incadig modem, active Key Franagemert : ‘Depending on he seculycaeliation, buings, indus areas and surounng premises re futher protested by addtional mente, “nse near spec sores pote, video suvelance, Furor alam systems and bloneleacose conf ys : ‘Access gis wl be gard lo suhotees persans on an ial Bass ecco fo te Systm and Data Acoets Con measures (see Section 12nd 12 below, Tis lo apie fo vor sore, Gut ond ers fo SAP buldngs must outer Wa nznes at wcepin and must be sccomparied by auhonzed SAP persoanel SAP and at Od pry Oata Centr rowers oe logged Ine nares and ines operons erring he Biv ares of SAP wahinine Data Centos : "SAP employees ond extemal personnel must wear te 1D cards at SAP lestons 4.2 systam Access Control: ‘ata procetsng syste et provi the Cloud Sendce must bé prevented fom being used witout athena, Messuree : ultple eutnorzaon ives are usd to grant coe o senaive eyteme Including tose storing and processing Posonal Data, Processes lve in place ensre that uhorzed use'shave te sprepteauhoesicn to de, deee, or meaty USTs. : “Aare acces SAP's ates wi a iu erie user 0). : SAP hes procedures In pace lo eres na requested aurizslon changes ae inpeented oly in acondance wi the guielnes (or ‘rempe, nights ae grave withetauharzator Ia se eaves the company. Rs abate Ts ae reve. : "SAP hae eaatlahed a parevor’! polly al phils the shang ef pesswors, gover what fo do fa passed i dsclosed,vequres pessworcs fo be change on egar bass an dou posswas lobe alte. Preoalzed Use Ds ae acslonod for aurbeston Ad pastords ‘ust dd mar regarements and sre sod enenped form. Incase of domain passwords, the seta rcs a posword charge every ek ‘moni complvg an theraqareants or complx passwords, Each compra a password pcacled Sreensae, : "fo compary rtwor protcie tom he pute network y revels «patton? Soon Dae ers ees ass as Be caneay et or ema et) sen ‘rstatlons, : ‘secant paler management simplest to onsure deployment of relevent scurlyupdaes. 3 Fu remeteaocse fo SAP's cperaterevork oe tcl astute speotected by song authentication. ie seners anda 43 Data Access Cento Feteone efit fo uso dt pressing systems sal gan acoess ely othe Personal Data hat hey hav aight fo ects, snd Persona Data must fetbe read. coped, mode or removed mut suataatanin he cave of rocosshng, so end eaage. Measures: : ‘Access to peo, cnn! or seniiveinfrmaon ie grated co a nee okrow bess In ther words, empayos or extra id baste have acess fo hentai ht hay qu n cert compe ther wor. SAP uses aufoizalion concepts tha docuent how auherzallons lr asigna and vain aoreatons are sign. Al person, conidril, cr oforweo cen Gla le poected in acerdsro wn the SAP secsty ples en slander : "Al production servers of ary SAP Cloed Sec ar operat in he relevant Data Centerssere: roars. Secuty measures that pote “ppicafions povessng petens conceal oor Sense Information ate regu checked. To ths end. SAP canduce hte and eral cecusy ‘hocks and peneaton eds one ystems : EAP doc nt sow hs install of personal stare ar ear oftware not approved by SAP o sya bang use fo ny Clu Sesion : (A’3ap voc sardan yves ea n ela casi oe ee Sesto. 44 Dats Transmission Contra ‘Porsonal Bata us lb ad, cop, roded oemoved whut suthrzalon du rans, Measures, Wee atta canlers ce sysialy Vanspered, adequate measures are implemen at SAP fo ensure the ayeed sence els (or example, tenon sn lad ined ota). Bersonal Data rans over SAP rein nctwork are pcacios as any other confidential data according to SAP Secu Pal. Winen the data being anfeved beluaan SAP and fs cantons, he prolecton measures fr the Worse Personal Daia ae mutual agrees Upon end made pat of te ngreement Ths spe to beth pill and netoxk bated dats Want’ nan ease the Customer assunes respons Pago $017Docusign Envelope ID: 0248898A-BAF7-4514-8EOE-FS8337BSFAEB APEENDIX2 TO THE STANDARD CONTRAGTUAL CLAUSES AND THE Exi81T ‘Some Serdcos are subjet to efferanttochnlcal support terms, as et forth in tho respective Supploment or Order Fem. fer any et ans rom SAP's Pint of Demereaon 9, ougcng eval of he SAP Data Cees which hosts the Goud Sere). 15 Data put contrat Rahal te penne reteapecnely examine and elabish wheter ancby whom at SAP Personal Dats have been ete ‘nodfed or emowed fem data procesting sya used fo rods th Cows Soe assures: ‘SAP oly alls suborized persons o access Personal Data 2s reauied inthe cours of her work. SAP niet a acing ‘tem fr ep etc a cl, or loaning c Personal ata by SAP ot Subpracessora ore pretest exe Stppored bye caus Sonic. Personal Data bing recessed en commision shall be processed sco n accordance wh the Agreement andrei Fetes oft Cutone eau ‘SaP wes conol and processes to enue complance wih cnals between SAP and its custome, Sstproceasrs le ance ones ‘Ae ptf the BAP Seca Poy, Customer Dsta aquias a east he same potction evel at “content” inenaton aos the [SAP lnermatin Castcatn stanare : 'AS/2 emlojece and contacts ares ara eontreculy Bound to respect he coneay ofa sestve Invomaton incur ade cecrels of SAP custome’: ard pana. 47 vatabtty Cont: Porsonal Data sabe potted against aciental or unauhozed ‘Sesrcton ores, : “SAP enpoysbachupproesses and tbermestues hat ensue rapid resoation of business cra ystems and when sa coat tes btemiedpver supe reap UPS, tees, grease) esi power aii z "SAP hs dines covtingancy plans e wl as bias end aster recov eater Clout Senices : Emergancyprosesses and sper ae ely lied 49 Data Separation Gontot Poreonal Data eleted fo dierent purposes canbe rata saporay asian ‘SAP aes thw lcirical capitis ofthe ceployed sofa (or exarpo: mulerancy or separate ston inact atv dla spun between Paranal Baa um oe and ay oe extn. ‘SAP malar ceoated inlancee foreach Cusiare. : ‘Casters (nclsing the Actes) hee acess oly o crm Customer instance) 18 Data ntognty Control {Ensures tha Personal Data ul emsin tet, compe and cient rng roasting acivice: Moors: ‘SAP hes nplemerted defer svategy in several ners a a prerton agent urauitories modiexgons ‘Ths refs to cons as std Inthe contol and measure secons ot ceserbed above. In parlor eons Seeuty Mniting Carter, ‘niu sotware: Bachap and recovery emia ting Regus eter Edie prove acouty messes Page 8ot7DDoouSign Envelope ID: 02498094-BAF7.4514-8E0E-F5833780F AEB {AP?ENDDX2 TO THE STANDARD CONTRAGTUAL CLAUSES AND THE EXHIBIT ‘Some Services are subj to atferont technical support inns, 26 cot oth nth respective Supplement or Order Form. ‘anit © roduct-spacific Supplemental Terms (“Supplement”) for the Service ‘SAP SuccessFactors Business Execution Suite ‘Supplemental Terms and Conditions ‘These supplerrental terms and conditions ("the Supplement") are pot of an agreement fr certain SAP clu services Chareemant) between SAP anc Customer and apply solely to SAP SuccessFactors Business Execution Suite (the [gta Service end not amy ether SAP product or ae'vice, This Supplement ana any modineations to the Agreement mace Herelt appr soley to SAP Successractors Business Executen Sue ard not to any oller SAP proauct or 4. cLoup service 4.4 SAP may use Customer Data for developing and distributing benchmarks and similar reports and databases kecefrom so ng as SAP (a) st removes al references to Customer ond ony persoral iormation of an Authorized User included the Customer Data; (B) presents such Customer Uato in tha form of aggregate benchmarks; and (c) fSenerates and” publishes benchmark only when such Denchmarks Include data from at least seven (7) otter Srgarizations 1.2 Packages (Packages") consist of several SAP products ("Products") and some Products const of several AP modules. Psckeged pricing for the Cloud Service, it eppliable, wil nck be eleaggregated end Customer shall not be emiled to credits, swaps er other concessions associated theewth. Packages and Products Go nok include any few products or modules that may be released after the Effective Date of the applicable Order Form. Fackage.and Procuct daseristone are sot forth in Appandlx 1. 1.3. __Wot al content is availabe In each language but that language packs may only provide trensl:ions forthe ‘eit strings und in the sotware system Interface, not the content such as goels wizards texts and the Ne ‘an Enterprise Language Pack ("ELE"), which is included with Customer's subscription for so long 2s Customer Botinues to wbscrbe to the Claud Service, Includes language packs that SAP presently and in the fture makes (Generally avalable thereunder, Access to and delivery of any fwture language packs will oocur only when such LBrguage pocts are made generaly avaiable % all customers. Implementation service fees set forth in on Order Form, tay, ae ont for those language packs Customer hes intaly selected for implementation. Implementation of ny sdaltoal langutge packs vil result addtional service fees, which fees will be documented In sn addtional Order Forno” edgendum. For cary, ELP Is not Included with subscriptions to SAP lam, Employee Ceatral Payrol, Perform & Reward for Small Business, SuccessFactors Employee Central Service Center of SAP ana Cloud Plater, fxtension paciage for SuccessFactors. 114 Customer receiving Post-Production Service Units, as set orth in the applleable Order Form, the “Post-Production Service Units” ace service uns sed to perform change requests or acitonal services rated to the ‘oplicable Serie eter the nal configuration of ie same A minimum of one (1) Post-Production Service Unit wil be Charged for any chenge t the standard Cloud Service, Unused Post Production Service Unit expire twelve (12) ‘months fom te date they ae purchased in the applicable Order Form. The number of Post-Production Service Units [teoclated withthe applieble post production service wil be based upon the rate sheet In effct atthe time the post- production Seneas are agrood to in the applicable Order Form, 1.5. If Customer subscribes to Lomiager, the following shall apply: Lominger Linited, Ine. CLominger") content provided under an Order Form is a thi party product that wil be Eubject to the separate rms and condtions set forth below. SAP disclaims any responsiblity for such third party product. Lominger owns all igs in the tiles and text, Including all updates, revsions, and upgrades thereto, of the Pominger products known as (a) The Leadersnip Architect® Sort Cards O4.1bINTL English; (0) The Leadershia darchtece® Competency Aspects vO2.2a - English; (c) FYI For Your Improvernent™ ~ 4th Edtion ~ Englst; and (6) 10, Universe! Performance Dimensions Thies and Detilors (cllectvely the "Lominger Provided Conient"), Such Lominger Provided Content is subject to the following conditions: Customer's us ofthe Lominger Provided Content shall not extend utsige ofthe Cloud Service other than in mates “Specifically used in the cone of training around the Cloud service. In the event Customer wishes to use the iBminger Provided Content for any other purpose, i any form, or create ay dervatives thereot, Custiner sill fnler nto a seperate lzense agreement with Laminger fer such extended use ofthe Leminger Provided Content. ‘The Lominger Provided Content contains the proprietary works of Lomlnger and is deemed Confidential Informatie. Gistomes wil rot allow the Lomiager Provided Content to be disclosed, copied by, or otherwise transfered to any Derson or enbiy outside of Customer. The Lominger Provided Contant Is for Customers use In certain EAP modules, Ssmode genet avalale by Lominger, may ony be Used within the Cloud Service and may Rot be edits. Page 7 of7‘DocuSign Envelope ID; C249B98A.84F7-4514-SEOE-F6S33780FAES [ADUENDIA 2 TO THE STANDARD CONTRACTUAL CLAUSES AND THE EXHIBIT Some Services are sue: to iforont technical support toms, 28 sot oth nth respective Supplement oF Order Form. “6. The Cliud Service may be accessed By Authorited Users through a mobile application obtained by Authorized Users via third party websites (e.9.: Ancroid or Apple app store). The use of such mobile applications ls coverned by the terms and conditions presented to the Authorized User upon download/access tothe mobile application and not By the terms of the Agreement. The thi party that operates the website through which the motile application 1s lstributed may stop dstrbuting the mobile appieaten at any time, and SAP is net respansible forthe vravalobity fof the mobile appleation due to the actions ofthe tid party distributor. 2. FEES. 2.1 Authorized User Usage Metric. “Authorized Users” chal n alton to that set forth inthe Ngreement, also Incude Customer's and fs Alates" employees and Susiness Partners whose information fs stored on the Cloud SSanice and wo hava an aeive profe/status ayarst which the Cloud Service processing traneacsone Pricing fot the SAP ‘SuccessFactors Advanced Learning Package, SAP Successractors Perform & Reward Package, SAP ‘SuccassFactors Performance & Goals product, SAP SuccessFactors Compensation Product, SAP Successt actors ‘Succession & Career Development Product, SAP SuccessFactors Learning Product, SAP SuccessFaclo™ Validated {arning Pradua, SAP SuccessFactors employee Cental Produk, Employee Central Payroll Pracuct, SAP iam Progict and Perform & Reward for Small Business, fs based on Authorized Users. 2.2 Employee Usage Metric. Employees” means the number of Customers (and its participating Alster) {oral employee sopulatan. Prisng for the SAP Succasstaccrs Talent tanagement Package, SAP Sucesshactors Enterprise. Paccago, SAP SuccessFactors. Onboarding, SAP SuccessFactors Recruting Execution Product, SA ‘SuccessFactors "Retruting Marketing Product, “SAP SuccessFactors Reeruting Management Preducty SAP SuccessFactors Workforce Analytes & Plonnins) Product, SAP SuccessTeciors Werkforcs Planning Product, SAP ‘SuccessFactors Worlforea Analytics Product, SuccessFactors Employee Cental Service Center and SAP HANA Cloud Piatform, extension package for SuccessFactors, s based on Employees. 2.3 For purpores of calculating pricing, Authorized Users or Employees, as applicable, shell exclude (a) inaividuels ho do not have tn active profie/sintison the Cloud Service; (b) external cancicstes sing the Recrui Management Coud Service or Recruting Marketing Cloud Service to respond to employment eppertinies; and (6) ‘eternal raters using the 360 Degree Reviews Cloue Service to perform reviews. 3. SERVICE SPECIFIC ADDITIONAL TERMS. The terms below apply solely tothe Kdentifed Cloud Services anc Preval over any conflicting terms inthe Agreement. 34 Jam-Goud Service (@)__ “User Content” means information that's uploaded to the Jam Cloud Service by Authorized Jeers, User Content shal be considered Customer D383 (b) User Contant Disclaimer. If SAP & notied by an Authorzed User or an onner of User Cantent thatthe User content alegealy Infnges te rights, SAP may investigate the allegation (Including by consulting with Custerner) ‘and determine In good fata and In Rs reasonable dseretion whether to remove the User Content, which fe may do after providing Customer with prior notice regarding such removal within reasonable time in ght of the Sreurstances, SAP has io obligation to monitor User Cantent and interactions between Authorized Users ce Customer and fis Authorized Users. Customer shall take down any and all User Content of which It becomes avare that i= Intinging in a gronpt manner or promptly notify SAP to do so, (©) Storage. The fallowing Gigabyte (68) storage limits apply tothe Jam Cloud Service: ‘SA? Jam, basic elon: 2 68 per instance ‘SAP Jam, advanced edition: 100 GB per instance ‘SAP Jom, advonced pls eation: 200 G8 per instance ‘SAP Jom, entervise etion: 1000 GB per instance 1f subscribed to, “Jam Adtonal Storage" entitles Customer ta the szecied addtional unite of storage set forth inthe applicable Order Form, One unit of storage equals five hundred (500) GBs, 3.2 Recruiting Marketing (RI) Cloud Service 32.1 Definitions. (a) "Candidate Information” means personal data and personaly \dentiable lnformation associated with Setential eandaatas, inching, But not lied te, neme and email sddcere: Candiiststnformation hall be Considered Customer Data (b) “customer Content” means graphics, branding and job requisition content mace avaiable by Customer to SAD, Customer Content snl be consisted Customer Ost (©) “Recruiting Dashboard” means the or-line too ncused with the RM Cloud Service that provides Customer vith reports and metrics. Pago tot?(DocuSign Envelope 1D: 0249890 BAF7-4514-8EOE-F68337SOFAEB (oIK 2 TO THE STAN: ‘cLAUSES ‘Some Sorvices ar subject to diferent tachneal support terme, a8 set fri nthe eepecive Supplement or Order Form. ‘3.2.2 Customer Content. In connection wrth the RM Cloud Service, Customer wil make Customer Content valiable to SAP. The ROM Cloud Service requires access to Customer Content from Customer's career site ang/or pocant Tracking System CATS"), therfore Customer i respensible for ensuring that SAP has dally access to {Sistorer Corient, and Customer wll previde SAP with at least two weeks’ written notice of any mocticetions to Customer's career ste or ATS, ‘As applicable, SAP vill crate a Customer shste (‘Customer viebsite) wlth Customer Content within the standard RM Cloud Servee tayout, subiect ta an implementation reauitements document 1a be saulually sores toprioc.to the startof the implementation, 3.2.3 Condidate Znformation Restrictions and Authorized Uoo. Customer chall ues, diplay ard stitute Gerdiaets Internation for the expres limited purpose of recrukment for employment and in compllonce wh sl Spplleable lave, regulations, Jutieal orders and Customers privacy paley Including, but not limited to, ostanlng any ecossary third party consis such as optln consents, in conection nith the Candidate Tnformation. customer is Fesporaile for ensuring that all Customer Content and al use, splay, and distribution thereof in connection with the ‘Agreement each comply with applicable laws and regulations. 3.2.4 Marks, SAP acknowledges that Customer owns certain names and og0s, Including, but nt limited to, Rademarks ond tradenames of its products or services. Customer's nemes and loges along with propretary rights {ested to the some willbe referred to colectively ae "Marks", Subject to the terms and conditions ofthe Agreement nd only ard 36 appliable, Customer hereby gfants SAP a limited, nonexclusive, license to use tre Marks In ‘Connection wits the RM Cloud Service. SAP acknawledges thet Customer isthe sole own of ts Mere. 13.2.5 Privacy Paliey, Customer's consumer-facing privacy polcy shall provide for the following (2) & provision stating that hed party cookes may be pleced by service providers, such as SAP, on Customer's websites); ond (©) provion stating that Customer may share anonymaus/aggregate infrmation with thd partes, such os AP for purposes relating to the RM Cloud Service 3.2.6 Medie Spend Management. The folowing applies in the event Customer subscribes to Nedia Spend Management = Reeriter Licenses and/or Media Spend Management ~ Postings For commissinable media sources managad by SAP, SAP's media agency fee willbe paid by the applkable media Source. For nen-commissionable media sautees managed by SAP, SAP wil mark-up Wie actual media epend at the ‘arent standard ageney rate (17.65% net markup), For al managed medi Sources, minimums month commissions per media source may sop Customer authorizes SAP to represent tas the Agency of Record CAOR") to 3" party Interactive medi sources in Felation to tw customers sponsored recruting advertising in order to receive commission and to allow SAP to Durchase infetactve rele on behal of Custamer. If 2 3% party interactive mosia source requires 4 separate legal Errengement, the AOR designation does not provile SAP wth the authorzation to enter Into. any additional Soreemente thou Customer signeture. Upon termination or expiation of ary Order Form, all medla scurce contracts entered into by SAP or Customer's behav Witt Customers gutnorsation shell elther continue at the contacted fee cr, at Customers option, De transferes, contingent Upon opproval of any third partes i interest, to the entty designeted by Customer, or Cancslied by SAP. if posable. if customer propery terminates. an Order Form, pursuant to the terms of the Agreement, after the Start of SAP-designed media campaign(s), then an early termination fee of teen percent (isse} oF expected media spend under the eampaign(s) wil ply I Customer also torminates the macia campaign, then Customer wi be lable for any cencelation fees charged by the appleable vendors. Netwithaanding any termination, SAP shall be entitles tobe pal forall media planned or placed for Customer prior tothe effective date of termination se fg as such media planning end/orplecement has been requested and approved by Customer. “The third party media source shall be responsible for determintion, collection and remittance of all appcable taxes SAP shall poss through to Customer any applcable taxes due by Cystomer without validating the appropriateness of the tax amount or providing any representations regarding the taxation of third party media preducts, Rcuding the {Weatment of auch products as tavable or non-texable by any state or local jurisdiction. 3.3. Learning and Validated Learning Cloud Services 13.3.4 Types of Authorized Users. {fan as sat forth in an Order Form, the following shal poly (©) __ An External Aetive Authorlaed User le defined se 8 Lanning or Validated enening Cloud Servic Authorized Geer wes ot an employee of Customer, but whe fs alialed Inthe sare Leaning oF Validated Leering Cood Service istarce: Extemal Active Authorised Usere must be Wentiied Inthe Learning or Validated Learning Cloud Service by Customer sepacatsly rom other Authorized Users. (©) For “ransactional Active Authoraed Users, “Transaction” means: (i) each instance that a oon-employes ehvaing or Vaated Leaming Cloud Service Authorized User evalls or Is enrolled by a thi party, In an instructor fed training erent or oftering; or () each instance that a nen-employee Learning ot Valldated Learning Cloud Service [Suthorzed User enrolls in, enrolled n bya tied parey or italy launches, an enti traning event or offering that Pog9 9017DocuSign Envelope ID: 62408004-SAF7-4514-8E0E-F6BSS78OFAEB APEENDIK 2 TO THE STANDARD CONTRACTUAL CLAUSES AND THE ExHaIT Some Services ar sube to ferent technical suppart terms, 28 se oth in the resetve Supplement or Order Form. ‘il be charged. there wil be fee assoclated with each subsequent time that 9 non-employes Learning er Validatee Learning Cloud Service Authored User reventers a coures or each time 2 non-employee Leeming cr Validated {earning Cloud Service authorized User launches a content objec: that comprises an enlne Kem: (c)__ For Acvity-based Authorized Users, notwithstanding anything tothe contrary n the Agreement, an Actiity- Based authored User means a Learning or Validates Learaing Cloud Service Avthorzed User who, re anytime drng ‘he apileabe subscription year: (i) has had a learning event recorded (i) has had an item soslgnment made; (Hi) enrolled or waliisted for lesring offering; (What launcied online content; or {v) has hunched or attended 2 virtual learning system event, (GA Limited Active Authorized User is defined as Learning oF Validated Learning Cloud Serve Authorzed ‘Seer wn ws an employee ot Customer and wha takes no mre than three (3) courses (evening of eiatsrcn) Bet Subscription yesr. Lined Active Authorized Users must be Kentied in the Learning or Validated Lasming Cloud Service by Customer separately from other Authorized Users 3.3.2 [Content Storage. iContent storage is included as part of Customer's stendard subscription tothe Learning or Validated Lesrring Cloud Service, but not included as part ef a subscription to any of the addlonal Autorized User typos deserbedin Section 3.3.1 above, (@) iConeane Storage Included with the Learning or Validated Learning Cloud Service inciudes content berdvith and twonty fle (25) Gleabytes (GBs) of eLearning content storage. Content bandvldth is calevlated based on two hundred and fity (250) Megabytes (MES) per (active) Authorized User per year. In the event Customer exceeds the ‘mount of coment bandwidth set forth herein, Customer may subscribe to adconal GBs of bandwith, In one hhundred (100) GB increments, at SAP's then Current prices, prorated for the then current subseripten Year, bY ‘signing an addendum to tha applicable Order Form. Tn the event Customer exceeds the amaunt of content storage set forth herein, Customer may subscribe to addtional GBs of stage, in twenty fve (25) GB incramants, at SAP's then current prices, srorated fr the then current subscription year, By signing an 8édencum to the applicable Order Form, ‘The increased bandwidth andor storage levels, 88 epplesble, wil also be used for caleulating the ees for any subseauent yeas in the Subscription Term, (0) iContert storege Includes infrastructure, incloding web server and disc space, and uses Akamal as the Content Delivery Netwere (CON) provider. f Customer cannot support Akamai as ts CDN, IContent Storage cannot be provisioned to Customer. (Content is sot dependent on server-side software (databases, server side crits), (@) Content 3acked-up night. 3.3.3 ICONTENT PREMIUM. if Customer is purchasing ‘Content Premium as set forth in an Order Form, the ilewing terms shall apa. (9) DEFINITIONS. ( *Custon Content” means Customer-specific content created by Customer or an external deveozer/vendor. Contert in this category isin standara e-learning format end communicates withthe Learning or Validated Learning Cloud Service va Ue AICC or SCORM communication standards, (1) "Non“tracking Content” means content tt does not have inberent tracking capabilities par the AICC or ‘SCORN corrunicaten standaés, but can sill be configured for coline access rough the Learning or YValiceted Learning Cloud Service, (lw) “External Vendor Content” means generic, of the shelf, content created by a thit-party content vendor. Under the assumption thatthe underlying code and structure is the same for all cantent from ® particular ‘vendor, content personnel wil load, verify Set-up nd suppor: all conten, bt mil only valldats asubeat (tan percent (10%) thereo. (b) DESCRIPTION OF ICONTENT PREMIUM. (i) Content Deployment Support (92) Customer's authorized content owners may upload courses to the iContent portal for management by the ‘Content service. Courses willbe deployed co the (Content hosting platform, set up and tested In Customers Learning or Vakdated Leorring Cloud Service, (0b) SAP is responsible for testing and verification of launch, play and tracking of the Custom Content and External Vendor Conta to ensure such content le communiesting correct mith the Learning er Valieted teaming Cloud Serve, per the AICC or SCORM including SCORM 2004). communication stancarcs, Now ‘Tracking Content is tested for such content launcnes. al External Vendor Content i tested for Inunch bit only an percent (10%) of External Vendor Contant i validated for commurteaton with the Leoming er Valldotoe {Earning Goud Servic, (62) SAP wil ciscus/revtew communicston complince issues with the content owner/ereator. Customer will provide e designated contact for the Custom Content and/or Non-Tracking Content on delvery of sich content foe, (44) Customer will approve al content before itis pushed for lve acess to Customer's production eavironment. Page 100f(DocuSign Envelope 1D: 0249890A-84F7-4514-BEOE-F68337BOFAEB ap2enOK2T cua ‘Some Sorvcos are subte to aforent technical suppor lenns, es st forth nthe respective Supplement or Oder For. (ee) Ongong updates/maintenance for al content wil Include! ‘© Receot of new content fle fram Custemer, or vender on is beha © Updating content, content object and pertinent contextual dota for approval in Customer's staging and production environment. © Testing content for launch and, where applicable, inteoration with the Learning or Validated Learning Cloud Service (i Service Level objective: (2) Custrmer will provide an appropriate level sponsor Croject Sponsor") to provide SAP with reasonebie Stakes te business and technical contacts, bockground lnformatien, data 2nd system sources, as needed, tO ‘uit Customer’ responses. (00) Customer may designate up to two (2) authorized account contacts forthe purpose of reporing content FEsues, dafects and suggesting enhancements through ther dedcated (Content constant. For Jarty, SAP will Provide dedicated \Content support to these two (2) authorized contacts. Customer, not SAP, wll provide Eupprt iecly to ts Authorized Users (ce) Custamer may designate up to ten (10) authorized content owners who are permitted to submit content to be managea by the (Content service. (ea) A content upload/update of a single course wil be completed within one (1) business day of SAP's receipt Dfany sich content, through the agreed upon channels. If content validation acts Indicate issues with Content bunch, ext or tacking Vor trackable content, SAP wil provide an issue report to the content owner tithin ore Cl) business day of receipt. Once the contest owner Res resolved the reported Issue and dolvars 3 fevised version of the content to SAP, content upload and update willbe completed win one (1) tusiness day OF SAPY revelps of the revised content. For clanty, this provision applies to all ofthe content types dened above (ee) Any content uplosdfupdate of multiple course tes ina single day wil be cornpleted in a tireline to be ‘utualy agreed to between the SAP Content consulant end an authorized account contact for Customer, (it) Assumptions and Adaltional Conditions (2a) Specie Customer iContent detalls may be defined in an Order Form. Changes to Customer's (Content Fremium subscroton or serves level objectives are managed via 8 change notifeation process that wil require CCustomesgnature, (bb) contents not dependent on server-side software (databases, server side scripts). (Co) As sart of icontent Premium, SAP utlzes”Akamral as ts Content Delvery Network (CDN) provider. If {Gistomer cannot support Akamal 5 its CON provider, Content Premium cannot be provisioned to Cistorer. (Ga) ony content that is hosted on the iCentent Servers fs subject to the applicable Support and services fderebed herein {e2) A single course may iocude up to ten (10) content objets (modules). A course that contains more then ten (10) cortent ebjects il count as multiple courses with respact to the IContent Premium biits and, as pliable, the service evel objectives described above. (B) Al courses that are active in the production instance of Customer's Learning or Valléated Lezrning Cloud Service ere included inthe total course count for purposes of tne IContent Premium its. Ga) Customer may deactivate and replace upto thety percent (30%) of ICantent Premium suppeted eaurses during 2 Subscription Term. {hn} Unless otherwise expressly specied,IContent Premium does not include support ar services related ta the ‘SAP SuctessFactors mobile application or offline player environments. {ip costumer can request testing in Upto thee (3) dilrent browser environments, These environments must be supperted environments for Customer's version ofthe Learning or Validated Leaming Cloud Servi (Gj) Contents backed-up righty. 3.4 Employee Central Cloud Service 3-41 Employee Central Non-Employee. If Customer subscribes to Employes Central Non-Enployee the Following satlapay: Employee Certral Nen-Employae is avallabe for any active non-employee Authorized User whese information wil be Stored'n te {mloyee Central Cloud Service, for example, retiree, contactors and contingent morkers, For puposes. SF clonty, Emplyee Central Non Employee is not avalable for any Authorized User who is Full-Time er Par=-Time employee. Page 1 oF