The URL can be used to link to this page

Amendment No. 1 to the Software Subscription Agreement between Origami Risk LLC and the CMB pursuant to RFP 2020-056-WG Risk Management and Claims Software Docusign Envelope ID:7AE59C11-1275-4C83-9039-F72AE3A96F1C � �� _ _ _ Ju�� z Docusign Envelope ID:A1 BBgF29 83F0-4B4C A221 OA19FD2DC66C �� 02,� #� fi 'A�, r'«��,�� MIAMI BEACH . �': .� �°:� � : f --k _. . . 2020-056-01 Risk Management and Claims Software System Origami Risk LLC Human Resources Marla Alp�zar �A,"Nut'�q� , 9/15/2025�2 27 EDT Mark Taxis „_��-;_.v 9!16/2425�3 51 EDT x Type 1-Contrad,amendment,change order,or task order resulting from a prowrement-issued competitive solicitation. Type 2-Any other contract,amendment,cha�ge order,or task order that does not result from a procurement-issued competitive solicitation. Type 3-Independent Contractor Agreement(ICA) Type 6-Tenant Agreement Type 4-Grant agreements with the City as the recipient Type 7-Inter-governmental agency agreement Type 5-Grant agreements with the City as the grantor Type 8-Other On February 5,2018,the City and Contractor entered into an Agreement pursuant to RFP 2020-056-WG for the provision of a Risk Management and Claims Software System. On August 13, 2020,the City Manager executed the Agreement with Origami Risk, LLC. Section 3 of the RFP established a contract term of an initial five(5)years, with an option for five(5) additional one(1)year renewal periods on a year-to-year basis. Throughout the initial five(5) year term of the Agreement, Origami Risk, LLC ("Origami") has delivered a comprehensive risk management system for the City of Miami Beach,incorporating real-time risk identification,assessment,mitigation,and compliance tools. along with setup, training, and ongoing support to enhance operational oversight and decision-making. Furthermore, the Contractor has provided training and ongoing technical support to ensure effective risk ove�sight and informed decisions. The pricing for the initial five-year term was negotiated at the time the Agreement was executed. Prior to exercising the renewal option,the I luman Resources Department negutiated updated�enewdl�ales.Duriny lhis prcx:ess,the Department identified potential cost savings by consolidating the five(5)one-year renewal options into a single five-year renewal term. Therefore,the Procurement Department,in collaboration with the Risk Management team,presented Amendment No. 1 to the City Commission forconsideration and approval. On July 23,2025,the Mayor and City Commission approved Amendment No.1 to the Agreement with Origami,incorporating the amended renewal term and the negotiated pricing for years six(6)through ten (10). The Commission also delegated authority to the City Manager to execute the Amendment. This item seeks the City Manager's signature based on the justification herein and pursuant to Commission item No.C2 E, which dele ated authorit to the Cit Mana er to execute Amendment No. 1 with Ori ami. 5 years 5 years 10 years Grant Funded: Yes No State Federal Other: I 1 $124,713.00 54Q-1790-00�325-13-413-582-00-00-00 Yes No 1.For contracts longer than five years,contact the Procurement Department.2.Attach any supporting explanation needed.3.Budget approval indicates approval for the current fiscal year only. Future years are subjed to City Commission approval of the annual adopted operating budget. i ___ _ -- -- — i City Commission Approved: x Yes No Resolution No.: CC Agenda Item No.: CC Meeting Date: N/A Routine item C2 E July 23,2025 If no,explain why CC approval is not required: Legal Form Approved: x Yes No If no,explain below why form approval is not necessary� Rev.3/25 Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID A18BSF29-83F0-484C-A221-OA19FD2DC66C � . .(.e'�Y'.. � . . ' _ .. . . . Procurement: Grants� N/A Kristy Bada � � ��., � � 9/9/2025�11�54 EDT Budget: ""'"""' � Information Technology: N/A Yelina Iglesias '.(! 9�IZl2025�9 37 EDT Tameka Otto Stewart _ �, �. (!He$liwal,T�nn��at2l2025�11�57 EDT � Risk Management: �J�� Fleet&Facilities: N/A : Marc Chevalier p� � u, 9/15/2025�12:53 EDT Human Resources: �yA��' Other. —a Monica Garcia ll� 9��2025�8:07 EDT ` Theresa Buigas iY� 9/9�2025�11.06 EDT Docusign Envelope ID:1AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A1B68F29-83F0-484C-A221-OA19FD2DC66C AMENDMENT NO. 1 TO THE SOFTWARE SUBSCRIPTION AGREEMENT BETWEEN THE CITY OF MIAMI BEACH, FLORIDA AND ORIGAMI RISK LLC PURSUANT TO RFP 2020-056-WG RISK MANAGEMENT AND CLAIMS SOFTWARE 9/19/2025�10:41 EDT This Amendment Na. 1 ("AmendmenY'}to that certain Software Subscription Agreement(together with the City of Miami Beach Addendum attached thereto, the "Agreement"), dated August 13, 2020, is effective as of August 13, 2025 ("Effective Date"), by and between the City of Miami Beach, Florida, a municipal corporation organized and existing under the laws of the State of Florida, having its principal place of business at 1700 Convention Center Drive, Miami Beach, Florida 33139 ("City"), and Origami Risk LLC, a Delaware limited liability company, having its principal place of business at 222 N. LaSalle Street, Suite 2125, Chicago, Illinois 60601 ("Contractor"), and hereby amends the Agreement as follows: RECITALS WHEREAS, on August 13, 2020, the City and Contractor (collectively, the "Parties") executed the Agreement pursuant to RFP 2020-056-WG for risk management and claims software; WHEREAS, the initial term of the Agreement is five (5) years, with an option for five (5) additional one (1}-year renewal periods on a year-to-year basis WHEREAS, accordingly, the initial term expired on August 12, 2025; WHEREAS,when the Agreement was originally established,the City negotiated pricing only for the initial five-year term, and no rates were set for the renewal years; WHEREAS, prior to the expiration of the initial term, the City's Human Resources Department began negotiation of rates for the remaining five (5)years of the Agreement; WHEREAS, during this process, the Human Resources Department also identified an opportunity for savings by consolidating ihe five (5) remaining one-year renewal periods into a single five-year renewal term, saving the City $215,266.00 over the five-year period; WHEREAS, on July 23, 2025, the City Cammission approved C2 E, Item No. 2, authorizing the single five-year renewal term at the negotiated rates, and further delegated authority to the City Manager to execute Amendment No. 1 to the Agreement memorializing same; and WHEREAS,on July 31, 2025,the City and Contractor executed a letter agreement agreeing to the renewal of the Agreement, subject to the execution of this Amendment. NOW THEREFORE, in consideration of tfie mutual promises and conditions contained herein, and other good and valuable considerations, the sufficiency of which is hereby acknowledged, the City and Consultant hereby agree to amend the Agreement as follows: 1. ABOVE RECITALS. The above recitals are true and correct and are incorporated as part of this Amendment. Docusign Envelope ID:7AE59C11-1275-4C83-9039-F72AE3A96F1C Docusign Envelope I�:A16BSF29-83F0-4B4C-A221-0A19FD2DC66C 2. MODIFICATIONS. The Agreement is hereby modified (deleted items s#rt�c-�c� and inserted items underlined)as follows: a) Section 7(a)of the Agreement is hereby amended to read as follows: (a) Term, This Agreement shail commence on the Effective Date and remain in effect for five years, unless terminated sooner in accordance with this Section. t e � Client shall have the option to extend this Agreement for a one(1)five-vear rgnewal term. b) The Renewal Term Pricing and Invoice Schedule attached hereto as Exhibit A is hereby incorporated by reference into the Agreement and shall govern the pricing and invoicing for the five-year renewal term. 3. RENEWAL TERM. Pursuant to Section 7(a) of the Agreement, as amended herein, the City hereby exercises its option to renew the Agreement for one five-year period. Accordingly, the term of the Agreement is hereby extended for an additional five (5) years, commencing on August 13, 2025, and expiring on August 12, 2030, uniess sooner terminated in accordance with the provisions of the Agreement. 4. ORDER FORM.The Order Form attached hereto as Exhibit B is hereby acknowledged by the Parties and incorporated into this Amendment for the purposes of identifying the products and!or services to be provided during the renewal term. In the event of a conflict between the terms of the Order Form and the terms of the Agreement (as modified by this Arnendment), the terms of the Agreement shall govern. 5. RATIFICATION. Except as amended herein, all other terms and conditions of the Agreement shall remain unchanged and in full force and effect. In the event there is a conflict between the provisions of this Amendment and the Agreement, the pravisions of this Amendment shall govern. [THE REMAINDER OF THIS PAGE IS INTENTIONALLY LEFT BLANK] Page 2 of 5 Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID A1BB8F29-83F0-4B4C-A221-OA19FD2DC56C IN WITNESS WHERE�F, the Parties hereto have caused this Arnendment to be executed lay their appropriate officials, as of the date first entered above. FOR CITY: CITY OF MIAMI BEACH, FLORIDA ATTEST: DxuSigned by: � � K��1, Gr�,a.�e py: -- ___ _ _ ---- � -- a�ae�'�anado. City Clerk Eric T. Carpen er,City Manager 9/19/2025� 10:41 EDT --- --...----- ---..___..-- n3te FOR GONTRACTOR: ORIGAMI RISK LLC ATTEST: - n, ��,.��, ��1. ,_-- � �� — ------------�--- Sy Secretary �-- President � -._ ._��.�� Neil B Hayes Earnest Bentley --- _ __ — ----- -- ----- Print Name Print Name September 3, 2025 ------ --- Date APPROVED AS TO FORM & LANGUAGE & FOR EXECUTI�N :-, �2, Z,5 �,1 � ,�� City Attomey -:_ Date f':,nt� 3 0�6 Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope f0:A166gF29-83F0-464C-A221-OA19FD2DC66C EXHIBIT A RENEWAL TERM PRICING AND INVOICE SCHEDULE CONTRACT No. RFP 2020-056-WG . 6 $ 124,713 __ -- � _-- _ -- - c� 124,713___ _ B----__... � 124,713 9 -------- $ 130,949.65 - -- ---._____._._—___-- -__ .---�__.____- 10 $ 137,496.08 �. ;, � r)�Ilr�r�l r� � Renewa) Option 1: 5 Year Term Curr��nr f�uih��t S Ycar Renewal Nocas .NMii Lr rntr .kntl\l:hvi�c n��Mt ih!Nky', •U(IiUSF!�AVSe;. •��IobMWlUsI•!e .ltl.lA4U1�:.i�1�k1A('�ISd1��1 •Up tn]CIVmc Admin Utnc •Up lo]C�alnn Admin UiNt pNlcic; •UpinilUgntUtrn .Up1o+�tgyrUuv7 . rntatnon..r.¢na��rrtlr � � ' •l}�>��1.00OC��I�v�u�srWkMR��.N�f: .UplolO�fif.��le��i�cW41r0.et<��u AIWr.Inxen15inr�a��y •S.u�cc CoUc Eutox .Suxa CuJe Lcro.. .MWr1�tu Ud1�W:c S�w�Re . . � S:lN.rb:� �byMr�nmci��l .I IMrrS VJiay�' ,� . . .tht to S�.OpO Ci�kn;.I��r�nml�,.anA i'-ykic, �Uf�IO I S CrR RaVt(/.H.IIF�u'SIiH.I:r� +/f17A.711J4'/.I lvnu� , . . tppfdlNnnhrnn'uNrFUrAn�donarn .'IOpf.�4Mnu�L�.xJ.iMrf�k•Aua.�nur•,I .>mi.7n�nqlM*��. . 51^1.�Itt� .t.,.� Slni.�t.r G�In';tl) ll)77�Ji,7:1 1.'i I,�un. �f'nrr�•t Wrrl IY�'1.:4n F.7i.x�.u li�v�Fir.wl .f:..lv�1 Wrvkly(la��I:Tr.nr�.v Il�wi Ci�r�l . 11��.S Yrt�i��nnw.A��'vinC irl(.•� .M�u.V,f�R C..�..I .M�n.i.tl4 C�.n� �.��.r;...,1 n��1F°t. . . •Mr�U Lccaliun foaU •A(lC.IS LOUion{'^CJ •Nu:Unonl o/d�a co:i ol , . � .Iri,�l�nlflal�l�.l'..(rorlenSVR .IrKuknlH.H<�CalwrlinTt'A ,.-.I�tmpp�niF,<Itmtl.e�H•.�• •t;MS 111 L�lul�cc •CMf 3l1 tnlrl,n� lo:Ycc:�1 7.•iiU�an adJi4unol .Flrri 5�1�r�Mdc Frrvl .ik,i ScM:v�dr(.nl �b H.rYr..r�..r.1 5";for v�:ai i .1,'.O.leim fecJ .t:0 Cl�ini('eeJ 7>+�f kh:��e.uv�rt��.;: rt',. .� d2`LA)�) .n+real��Xntin�M��Ix�nhN�nilA i,wo-��.«id,+<.,ra�a ir�,wo-; . � •Up la GA harts+vear ,,;.��.;� .Tler 7:Ulr�a 5 Ln.i�i/n�a�N� 515.000 I+A�M.•n,1�n!I.u�.��Mk�� .. �xru4iu>i.�rM:vml b�yp�il6..mnv Wuoortco comparetl m ou� !,��.I.r. . .. � rC,u 1 J:'.I.:�.Tii iu�ii+rt�w�ri�lp�xury, � ��•�„ ,� , . :n�r.< ro.r•�g�s29�tY ..t..l"i�.fi�-�i . .. YC.Y j:)1.1!ri'1� Page 4 of 5 Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Fnvelope ID A18B8F29-83F0-4B4GA221-DA19FD2DC66C I Xlllt3l'I�R ORD1��:R I�Qlili 1 to he atta�.h�d) I',,,,c° i n{'� Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A1B68F29-83F0-4B4C-A221-OA19FD2DC66C CO`F(DF:17'IAf. C►RIGA��1' ORDER FORM#20250813 j---- — ---�-CONTACTINFORMATION -------- - ---- ----- - __----_ ---- _ __- _ _.----- --- ------- Client: Ciry of M�ami Beach Bill To Contact: Address: 1700 Convention Center Dr Bill To Email: payabies@miamibeachfl.gov Miami Beach, FL 33139 Is purchase order(PO)required?❑ � Upon entenng into this Order Form,please send any Pos, vendor registration links or tax exemption certificates to finance on amirisk.com SUBSCRIPTION DETAILS � � Subscription Term: 60 Months Effective Date: 2025-OS-13 RECURRlNG SUBSCRIPTIONS-LICENSES —� Subscription Quantity I Functionality Purchased � Source Code Escrow � Client may elect to enroll as a beneficiary to Origami's ! source code escrow deposit accou�t(currenily maintained i � by Iron Mountain). {n order to enrolL Client must complete a � ; Beneficiary Enrollment Form and return the comp►eted form i to Ori ami. __ _� Enterprise-Wide Record Entry Up to 1000 records added per year � ; Light User(s) 3 User(s) 1 � Full User(s) 6 User(s) � I RMIS Functionality Selected ---__ _._ -- -- � j Claims Admin User(s) � 3 Claims Admin User(s) � Annual Total Year 1-3:$50,295.00 ; ' Annual Total Year 4: $52,809.75 ; ' Annual Total Year 5: $55,450.24 � --- --_..------------- _ _ ---- ---------------- RECURRING SUBSCRIPTIONS-HOSTING --------- _ _------- Subscription �Quantity!Functionality Purchased � �Additional Non-Searchable File Attachment Storage ' 300 Additional GBs o(Non-Searchable File Attachment ;. Stora9e �� _..-- _ _--- --- — _ ___ ------- - ' Free Non Searchable File Attachment Storage Includes 100 GBs of Non-Searchable file storage ------- ------ - �.�_ __. _ _.__----- � Hosting,Nerivork 8�Storage Up to 15 GBs of DaEabase Size Annuaf Total Year 1-3: $48,530.00 � Annual Total Year 4: �,50.956.50 � Annual ToEal Year 5:$53,504.33 ------ - -- - - -_.__=--_ --___ __ --- ------- __ .. RECURRING SUBSCRIPTIONS-DATA PROCESSING Subscription _ _ _�Quantity/Functionality Purchased i ISO Claim Search!Fraud Index�ng i IntegraUon Selected ' --_.._...--- --- --- __ _ --____ -------- Location Feed Data Fred Selec.ted � ---------- ----- ----_ _ __---- i Fleet Schedule Feed Inleyration Selected ; CMS-111 Interface Integration Selected Incident Batch ImportlExport to TPA Import/Export Feed!o Munis - -_ _ __ HR Employee Demographic Import Integration Selected Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Oocusign Envelope ID A16B8F29-83F0-484C-A221-OA19FD2DC66C � C�O\FIDEVTI:�L .!'r-; i�� :il�i: ; Cla�ms and Transactions Feed ' Weekiy Feed From CorVei _-- - — ..___._ __--------__ ---+- - — ' Annual Total Year 1-3 $43,125.00 ' Annual Total Year 4: $45,281.25 Annual Total Year 5:$47.545.31 _ -- `— . _ ------_ __ ___- - --- ----- , RECURRING SUBSCRIPTIONS-Ciient Support ! Subscription Quantity/Functionality Purchased . _ _ _ _ _ _ -- —— --- ; Client Support Tier Selected Client Support tier includes support resourcing based on up to 5 hours of Client � ' Support services pe�month beginning on the , Effective Date. , _ --- ----- --------— Annual Total Year 1-3:$15,000.00 Annual Total Year 4: $15,750.00 ' Annual Total Year 5 $16.537 50 Annual Fees Year 1-3(before discount): S156.950.00 Annual Fees Year 4(before discount): 5164.797.50 Annual Fees Year 5(before discount): 5173,037.40 Annual Discount Year i-3(applied to 5156,950.00): 1,S32.237.00) Annua{Discount Year 4(applied to 5164,797.50): (533.848.85) Annual Discount Year 5(applied to E173,037.40): (535.541.32) Total Annual Fees Year 1-3: 5124.713.OU Total Annual Fees Year 4: S130,948.65 Total Annual Fees Year 5: St37.496.08 i BILLING DETAILS AND ADDITIONAL TERMS This Order Form is effective as of the Effective Date(as identified abovel for the purchase of the subsc�ipt�on services listed above from Origami Risk LLC ( i�rigam�'�. This Order Form is subject to all the , terms and conditions of the Software Subscription Agreement between Client and Origami dated August 13, � 2020, including General Addendum (collectively the"Agreement"). To the extent the Agreement does not I conternplate order forms. this Order Form will be deemed a Statement of VVork for purposes of the ; Agreemen`. This Order Form will be deemed a part of the Agreement. Origami and Client agree that the term of the Agreement shall be extended through the duration of the term of this Order Form. ! Fees for the first year of recurnng subscriphon fees and ali one-time fees under this Order Fonn will be invoiced and due upon execution of this Order Form. Fees for ongoing contract years are due annually ; upfront on each anniversary date thereafter. All travel costs and expenses will be pre-approved by Client in writing and billed to Client as incurred. ' Service descriptions and service-specitic terms and conditions are attached as Exhibit A, which are hereby ' incorporated as of the Effective Date. Additional profess:onal services may be set forth in other Statements ' of Work as agreed be?ween the parties. In the event the terms of this Order Form conflict with the terms of the Agreement, Ihe terms of the Agreement, as mod�f�ed by[he Addendum, shall govern. Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID:A1BBSF29-83F0-4B4C-A221-OA19FD2DC66C t�F�1GAM� � ORIGr��11 RISti SERVICE UESCNINTtO\S :1tiD SER�'ICE-SPECIFtC TER;�1S AVD COtiU1T10tiS Effccti�c For Order Eorms Executed;1ftcr\9arch 13,2U25 SI;BSCRIPTION/L[CENSE DESCRIPTIONS ^ Base Suhscri tion Funetionaiit i Risl.�iana�emen�tnformation lncludes risk managemcnt funciionahn in iud,ng inadcnts,claims,insurancc polic�management, `Sys�cm(R�41S1 ----- locations.and safcry -_--_-_— � Claims�1d udiwcion Includes cla(ms adiudication functionaGn PpliCv l-ndenvntin and Issuance lncludes 1ic unden��rinn and issuance funcnonaluy _ _._. ... ,..._._ ___.._---�— ! Go�emance.Risk and Includes GRC funcr,onality.whi�h includeti.tr d;c extent sclected:L-nterpnse Risk 1lanagement(f R`1), � ('omp6ance(GRC) intemal Controi�tanagemen��1('�1),Cnmpliance�fanagemer:t,HusinessCon�inuity�1anag�mem(BC'N). � Intemal Aud�t.S�nevs.�'endor Ris6 Maua�cmor,t(\`Rt4 ,and Policie�&Procedures � ! t:mironment.Health,and Safcty Inciudes GttS funetionaliiq,whi:h includes,,o the extent selected:Generai EIIS(including m�ident � (EfIS} managcment,root cause anal}sis,in.�etion,and audu,.saCrry meetings.locauon hierarchies.tmpfo}ee tables,and cerrccu�e acttun�and tasks),Prucess Safet}�tanagement(PS�fI(mcluding chemicals manaeement.safety daia sheets,)SA.�JHA.lockouvtagoutl.Emironmental(includin¢enrimnmental permit cum hanczl,and Ckcu ahcma!Nca�th(includins:IH and Fir onomics manaerment) f_mplopee Healch lndudrs employee health funct�onality for tracking heanng and��sion asxssments,respirator fit[ests. 1 l3 tcsiing drug and alcohol resting,ph�s�cai esaminaUor.s.radiniogy,and Cov�d cests.in addinon co tracking �acc�nativns e. ..Co�id-19.t�flucnza,and I le auns E3) Contract Management Includcs functionaliry fur ducument rontrols reiated te contract managemcnt,inclus�ve o(a contract rc �sitory and the rc•.ated�corkilow tcwis thcrein •Ori•a�ni:nav uRer othcr basc iunc��onalit�ihat i;nnt es licitl�iutcd at�nc. � Lser(.icenses � Fu�i Lser Thesc licenszs providc the nght for a named individual io access all the capabilities and features oCthe Senice.ercept those features utili�ed for adiusting daims sueh as check wriung,setung resenes and calculaung indemnity benefits. � Chese licenses ha�e a�cess to FatendeJ Fun.uonafity features to chz extent selecced. I�ghc User Thcx iicenses procidc tne right for a named indi�idual to aceess the dashboard.repons pre-configurcd for them,and read- � unlp access w uther areas u1'�he Ser�ice. Light L;scrs do noi havc a<<rss[o:ldminis2ration fean�res or F:xtendeA i Ifunctional�tv features. Cfaims.4djus�ing fhcsc li�enses pro�ide thc nght for a namcd ind�vidual to acccss�II the Ccat:irec and capabitities of thc Senict,including t;scr � those features utihzed for adJusnng daims such as checl:wn�inn.srtting rescnes and calculatine mdemnity benetits. l hese licenses hace acccss to Ext�nded f�unetiorality features�o the extent selec:ted. ---- --- - ._...._ _--__ --- ----- -- E.xternal User Acccs►Liccnses --- _- - _---- --- — --- — Eizternal Pc�nal 1 1�hese Eicenses are gzared toaard Chem inwred membedclien[users 1 hey��II have ac�;ess ro pre-defined dashboards. � t ser � 1 hey µill be able ro virK cla�ms,transa..nons and notrs%tasks and the� «ill be ahle ro ron reports utilinng pre-defined re rt tem lates. !hcse user�uili not ha}e access to Adn3mistration features nr Extendecl FuncUnnalit��eaNres tixtrrnal Full l hese Iicenses are geared to�vard Chent insund memher�client users. l hese hcensts ha�e access to afl th�capabilitics anei :lcctss User Ccatures of the Sercl.e under the base funetional:t�s�l�•cted abo�e as uutimed hy t'lient.e�.�pt those featurcs utilized for i aci.�usung claims such as chee:k«r.tmg.setting resenr>and calculating mdcmnit�brnefiu l hese users wiil not ha�e acces�t�Administration fea�ures ur Extendrd Funcuonalih-features. _____ Fxtrmai Claims Thrse hcenses are eearcd tol+ard Cl�cnt insured:mmber/client users. t hese hcenses have access to alI the feaWres and `, Adjusting t;ser � capabiii�ies of the Ser�ic�reauircd to adjudica:e cfaims,inciudin�;those that ere not under the care of Client. l hese ustrs � ; ��ill imt ha�e acce:ti en Adn:imsuauon fcatures or ti�tendrd I imc�ionali�} features � -- -------------_ _ _ ---- -- — Brol.er Customer Cser Liccnses Bruker Customir I'hesc ficenses arc geared toward 6rokcr Cliems'cusiomcr uscrs. 1 hey will ha�e accrss to prc-d�fin d dasht±oxrds. l hcy C;scr ��i!1 be abir i�t ie��claims.tnnsact�ons and notr:%tasks and the}•��II he able to n�n re�rts ut�liring pre-defined repe�rt templates. l hesc users wiii noI ha�c aceess!e Admtni,tretion ita;ures or[:.ctended Functional;ty(eatures. ' t)]PORIA�'I': i 11 an. uf th�tielii,��ing statrmenu arr tnie,ihr clicnt��ill rcyuiri a"1);rrc[l�u;umi�r R�91�.a:dc�crih�d atxi�c: I • Customer is seli-admtni�trnng claim,or n;aking payments�i;hin che R�1tS. f � ' • l hc�ustomzr reyui«s direc�daca frcd cnmcnion fmm a iPA or Camcr ( � • Thc cu:tomer requires admini,traiion a.cess in On�?anv Risk. I � • fhe cu<tomcr rcyuires its own srt of curtcncy convcrsion ratcs in Ongami Risl.. � , ' � • I he cusromer reyuires the abdity;ur custom�r users to add claims or inadcnts ti�th�s�n icc abm e'?Oi1 p�r year. � Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:AIBBSF29-83F0-484C-A221-OA19FD2DC66C _�!"i!�✓'f�i�i t P��r clarit}.[he Coliowir.g table scts lonh thc funclionaiity acailabic tp t3roker Customer Csers: � Enterprisc Widc � Enterprise�'dues Broker Customer User i � _ Record Entrn , � Coiiecdoo (Insuredl _ Von-named user incident reporting t'ES � VU � ti0 � Von-named user vaiues reporting VO i Y"F,S \n ! Dashtward tiU ' \O ti'FS '' �'icw daims and associaied transactions VO ��O YFS Edit ctaims and asxxiated transacuons \O �O VO — 4'ie�+and add tasks and notes \O , �O 1'ES �tiliee template repoRs _ _ \U ! `C) _ 1'ES i Custom template builder \Q I \O \O ! �ldministrati�n modulc VO � �O NO C'ertificatc tracking �O ; VO \O i View allocanons&TCUR \O : \O ' YES � Edit allocahons& fCOR �O � W � \O C�heck uriting __ — \O : \O j \O C�iS 1I I VO � \O -- 10 I Features tha:requirc 3`d party agreemrnt VO �O \U ----- -- - _ __ _ __—i � Self-administration of cfaims \O I \Q \O '� EHS User I.icenses I I.HS l,scr l hesc licenses proaidc�he righ�f�r a namcd indi�idual to acccsc all the(�FiS capabilities and fcatures ofthe Senice. �"1'hcx licenses hate aaess to Eatended Functionaht�Iratures to the cttent sciccted. —--- —_ _ __ -- Lif IS!'ortal Gser EHS portai ailows for either anonymous or namcd u,er�tn input data to the FH5 platform using configured�rtals on tablets or other de�ices. Ponafs ean alsu he eonfigurcd w retneac specified records from the platfortn inciuding but not ' limiicd to JSAs.LUI Os,and SDS documentauoil. GRC Cser Liteoses ' f uU l;srr ihese user licenses provide authorir.auon for the staicd number uf uxrs[�access Uie base funcuonality set forth abo�e. iI.�ght l'ser These user licenses ha�e access to the dashhoard,npons prc-configun.d for them,and read-only access to the basr ` funcuonalrtv set ti�rth abu�e. (hev do not ha�c access to ihe.4drmnistraiion fraturea. � Special Lser I hrse user licenses have a:cess to the dashhoard,repons proconfigured for them.and add`edit ace:ess tu the base __ functionalit�`et tbnh atw�r. l he�do rrot ha�e acccx<_to tl�e Ad:nfiiistration fratures. ' Data Entn Licenaes r f n�erpnse Wide T hese licenses arc not na�ned licen�es and ha�r acress only to enter recerds either br(1)an anonymous cotlection portal, , Record F.ntry b}clicking an ani�mmuus coUcawn luik�cncraicJ cia thc adntinistntion Icatures in thc ticnicc("Yonal 1)ata hntn"�or (2)granting access io a IiRL sem f'rom the Sercice as�Data Ent.ry Eoent email notificaunn,gi�ing timr 6m�tcd ac.ess co a � iin Ic rcconll"Grant:lcccis' . Fnterprisc Valucs � lhcsc liccn,c.allo��rcpre;cn[ati�c;in thc licl�tu cmu data through[hc Scn icc�c onlinc plallonn�xrtninine to CoIlecUon ` informatron nccessary for rencual submissions.such as TfV,$quare Footage,COP6 infortnabon.or other such assr�and j rxpnsurc data, j � :lsscssments 1'hese ticenses are not named I�ce��.es and ha�c access only to enter re�ords by cli�king a link gentra�ed by the Sen�ce ro I : �iew a rccord or conduct an assr�srncnt. Disrase and ; f hese licenses are non-nanzcd licenses and ha�c axes�tv add recurd;either by an anonymous colicct�un portal.by 4'a4cmalian F.ntry ' elicking ntt nnon)m�>u1 cullrction link gcncratcd�ia Orig:mii�<admmistratiun Icawrcs.c�r�ia Ongami's mubilc timi�� Portal � application to capwre onl�dixase related infortna�ii�n such a;crposure,.accine daca,and t�sting information.Fur the � a�oidan�e of doubt,these uniimited rea�rds arr IimiteA to the Vaccinauen Solution and shall not apph•to anv othrr base ; ' CuncuonaLt� which ma�be�urch�scYi under a separate 5ta;emer,t of«brk. u � t:�tcndcd Functioaalih Licenscs � r — ' 1P1 A�cess f his liccmr proviJ�S a�ce5;?c�<)riLami�s Hcb<cn icc RPS'I�API:u.ing calls Includci acccss ii,r up to 5,(HN)calls�xr ! i da� ,1PI calls may be rtiade concurrentlp,subi�t 10 rrasonablr lim�tation µhcn necdcd to preservc system perfomiance. ' Reywrcs a mirumwn o(f;cr(Sf F�II l sers anci'ur('laims.Ad�usting l sers. �Securc F:mail This liccnsr pm�ide.<rcure cma:l furcuonalm.�•+h,ch pm�idr,�a>s«ord pn�tccted hos�inL for email commur.icatiom ,�n �d! 'I.. ��r��• Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope I�:AtB88F29-83F0-464GA221-OA19FD2DC66C ORlGAMf Q('R Scanning This liccnsc providrs opticaf charac[er mcognition(OCRj fun��tionatity for mapping specified date from scanncd ; dotumcnts to daia ficlds wtthtn the Serv�cc. Certifi.ate oP 1'his license pro�ides eertificate of insurance tracking for third party msureds.such as tenants,tendurs,contractors or Insurame Trockm customers. SMS bTessaging iliis license pro�idcs the abiLry to send and rccei4e SM11S mecsages as work(loN actions within the Senicc's ' admmistration fcatures. � � Cl�ent agrtes to use the'l�witio seniccs in acc�rdanet u-ith the Twilio Temi;af Srn icr set forth at https:�iww��.twilio.com�legai,ros in no z�ent shall Origami be responsibte or liable for any acts or omissions of TN ilio. Client hercby consents to Qnganu pro�id�n� I Hilio with rts daia ro the cxc�m nc.zssary Io perform such serviccs. If the rciationship betwee�ti Ongam;and �Hilio is terniinated dunng the trrm of the Order Form,Ongami shall proeide promp[ written nouec to Clicnt and thc l,silio scn ices under the Order Form shall be�ertninated as of such date(and Ongami will rocidc a rcfund tu Client uf env prcpaid and unused fccs�or the T'wiho services). Cwo Factor l his license prnv�dcs th��ahi{itp to scnd SR9S anclior emaii messages to users to�andate their idcnuty beforc Inggmg in :�u�hendcanan from a neµ de�ice and'or n��ce e�ery 3�1 da�•s from the same de�ice �tobile Fomis A I h�s license mati he used h�an�amed user for no additu�nai l�cense fee,6uc srnice hours are re uired for confikuretion. �tohlle Claimant l his hcensr may be uud hv any namcd user for no additional licenx fee,but senice hours are!rquired for configuratinn. A R wres a minimum of three(3)Claims Ad�usting l;sers. Vl'orkcrs� lhis hcensr includes the followir�g Ongami Compliance solutions(this Func[ionality is only available to C{aims�\dlus[ing Compensation Lsers): � ! Solutions . Autumated EDI FRUf SR01 State Reportmg via Mnchell I • Ir.demni[v Benrfits Ratcs • �1'orkcrs'Compcnsation titatc Fortns � l hi�liccnu Ki�c�.tce�»to Origami s Intcr�:icc«iih�litchcil lar thc purpu,�nl statc��orkcrs'com�nsation rcpurting. Punuaru to thi>liccnx.(higumi�,aill pro�id�ii.I mt Rc�wrts oi tnjun t"I KOf i'`uMcyucnt Rc�wrts of lnjuq("SRQf") :lutomanon�1odule��ithin!he Sen icc to Pacilitate trackmg and reportiug uf F Rql and SROI related data,carfigured nn a j Fxr-statc basis;and�aiEl allow Clicnt to maintam�nd procas ctaim and transactional data for submission to states c�a ' L•lectromc Uata Intcrchangc t"F.DC'1. Urigami',intcrf�cc�cnh�t��chcll allows 1'or thc crcation,�aliJation and whmission ol Fint Rc�x�n of Injun suhmis,ions. (hi�ami'.intcrlacc�e�ll recci�c a fi[c back noting am cucptions.Jm ir��adjustcr notifications and workflou. • t:Dl FROL SROI Rc�nmg v�a lfitcheli is a subxnpf�on sen�ce whicn requires a separate agrcemem whh�lnchrlL Client � undcrsiends that Orieami is pro�iding an interface w�th�tuchell and chat�9nche1l�r�ll pro�ide its senices pursuant�o an agrCcmrnt bct��ccn Clicnt and�litchelL (ingami makr�no reprcunwtions or��arranGcs�vith rc.pr�K to�ti�chcll', srn itts and in no esent shall Ongami bc rtsponsible or liablt for any acts or omtssions of ktitchell. Ongam�'s automatrd L•DI f RUI-SRU[solution rcquirc:tht Clirnt lu utilii�Qrig;tmi's;tandard POI PKOf1SK01 funct�oaa�it�and la�outs. �ncluding Enl rclatcd claim Eiclds.codes,finanaal buckets,and finannal catago�a. lf the agmment between Origami and�titchNl i;tcrminated dunng:hc temi of the(hder Form.(higami shal!provide prompt wntten notice to Clicn[.and � the�titchcll srrc�tes undcr thc Onier I orm shalt 6c temtmated as of such date(and Origam�will prn�ide a refund ro Client � � of am prepaid and unused fze.(or the�titchell srnices).Ungam�µill only suppon this feature in ari ongoing phase if no mod�fications to thcsc arcas ha�e been madc. ODr Intcgration 1�6is li�cnac pru�iJr,integration�citli OU(i',Kcn�rn to\Vork guidrlinc,.Only Cleimx:��jusling l;scrs and Full Usan may Uscr uutin:his Icaturc.l lu;;caturr yucric<OIXi�s RT11'and ircatment uuidclinc.bxscd on Y�"('cluim Siag�wsi,axics. Client undrrstands arid agrecs that Orieami makcs no rcprescntations or warrantics Kith rcspcct to Ihc data pro��ded hy OlXJ In no e�enc shall Ongami ot liable for am damage5 in connrcuon with data procided b}ODG or for anv acts or omissions of OCX;. If thc refationship betwrcn Ongami and OD(i is;ermmated dunng the temi of the Order Form, Origami sha11 proride prompt Hntten nouce[o Client and the 0[X',sen,crs under the Ordrr Furni;hall be iermmated as of such date and Ori ami w�ll ro�ide a rcfund[o Cl�ent oi an rc id and unused fcrs fur the VDG sen ices?. Tableau This liccnsr allo�oy usm[u acces�Tableau withm the Srrvicr,prociding enhanced daea visualirauon. Clicnt understands and agrccs[hat'l ab!eau shall ha�e no�camir,p,suppvrt or eth�r obligauon or liabiliiy iu Clirnc. fliam ', widcrs�ands and agrcds diat dal.i amtaincd in I ahlceu daia�isualiiations i>not rcstricicd b. Ori�.ami�pcnni,:ion�anct that(�lient u responsible for cnsunng ihat any such data�isuelizations arr shar��1 onl� H i:l�apprvpnate u�crs. If the j rclaGonship hchrcen Ori¢anu and Cahleau is ternimaied dunng the[etm of the C)rder Porni,Origami shall prucidc prompt fwntten notice ro Client aod die 1 abieau srn icc,under the Order F�rm shal I be ternunated as uf such date�and Ongami i aill ro�idc a ref'und�o Clicm of anv rc aid arid unuxd fees ti�r dte i ableau seni:ts►. Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A1BB8F29-83F0-484C-A221-OA19FD2DC66C ��G��1 eSignature This license pm��ides thc abiliq�co tag mail merge documents uith eiectronic signa�urr ficids,authenticating tnrough a � IntcgraUon third-party cSignatun ton!(currently DoeuSignl. i fn no e�cnt shafl Ongami be:csponsible or hable for any acts or omissiom af f.)ocuSign ('tient hrrchy consents to prigami pru�iJing DocuSign Hith its data to thc extenl necrssan•to perform such senices. If[he relauonship betwecn ; Ongami and DocuSign is termmated during the tenn of the Ordcr Ponn.Origarni shall pro��de prompt written noticc to ` Ctient and the DocuS�gn services under thc Order Fomi shal(be temiinated as of sa,h date(and Ongami will pro�idt a ; rcCund ro Client of a��Y re aid and unused fces for thc DocuSi n;en ices�. TCOR Ai Anal��tia ! CCOK:11 lnalphcs pro�ides the abiliri•for users to creatc standard and custom�isualizations of;heir TCOR data using natural language prompts.l.�c of l CUR AI Anafytics is suhjcct tc thc Additional Tcmis and Condition;fer�f Functionaliiy set fortn at w«µ.ori��aminsk.comrsenicedescri tions. Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A1B68F29-83F0-4B4C-A221-OA19FD2DC66C �.��IUHi"tt �r�ea R�sk I his hccn-s�is suhject ta the followmg E:nd l,'ser Terms: I. 1'ou (thr End-lser) acknowiedge that all mfortnanon (the "fnformaUon") furnished b� Argos Risk, LLC � ("Company""1 is ficenstd for the exclusi�e usr of F:nd-l;sers. Y'ou acknc��icdge that some o(the Infonnation pro�ided f to yuu may have bc�cn pro�idrd ro Company by Thfrd•Party Infarmatian Prociders,such as Argos Risk,LLC. Regardiess � ' of thc fortn or fortnut in µfiich the Information is fum�shed,nont oF the Infortnation pro�ided m you may be made a4ailable by you in whole or in part to any third party t'ou agree that you aill not duplicate any magneuc tapes,disks, � diskeUes and uthcr ma�hine-readablc media in any forni or manner whatsoever,except that you may rnake onc copy � solcly for ba.kup purposts. You arr cxpressly prohibrted from usinK thc Information as a factor �n cstablishing an � indniduaPs eligit+ilin for p)credit or insurance to be used primaniy for personal.(am:l}or househotd purposes.or�ii) � employment. Y'ou agrce no:to usc the lnfortnauon to engage in unfair�r decepti�e pra.•tices 2. You a¢ree to indemniCy,defend,and hnld harmless Company and its Third-Pany Information Pro�iders fmm ` � any claim or caux af acnon against Compan}or rts Third-Party lnfomiation Pro�iders ansing out of or relating to use f of thc Information b< (i)individuals or rnuties��hich have not been authonrc�d hy this.Agrecment to ha�e access to aad-or use the Infomiation and(ii)you,which u,e ma}be in�iolation of your license. 1. 1'ou represcnt and wament that your use ofany Informauon shaii m all casrs complp wrth all appl�cablc fcderal. s�aic and tocal laµs anci rcgulahens and �hat all mail or other markziing programs using am Infortnation shall confomi ' to gcnerally nwgnin�d standards of high mte�erity and uocxi iaste. i � 4. 1'ou acknowledge [ha[ Company and its 1 hud-Pany fnforn�ahon Pro�iders makc no represcntat�ons or j I warranties of any kind with respect w the Infomiauon, inctuding but not Itmrted lo, the ac�uracy. completen�ss, i iumel inc,ss,merchantabi6ty or fitness for a panicular purpose of the fnfortnation or uf the mrAia on which the Infortnation is pro�idecl and you agrce that Company and rts ih�rd-Party Informatwn Pro�iders shall not be{iable to you for any loss or injur} arising out of or caused.in uhole or In pan.hy Campanv s ne¢lieent acts om�ssions in procunng,compiling, ' �rollacting,in�erprcting,reporting, communicatinX or deli�enng the Infonnation. S. l'ou agree that Company and its Third-Pan} Infi�nnatipn Pro�ider5 aili not bc liable for consequential, in�idental, sprcial, puniti�e,or other indinet damages.c�en iP ad�is�xJ of the possibiirty ot such damages. l'ou alsci ! agrec that Company's and its Third•Party Inlvnnaliou Provid.rs ag�regate liabilue. if any. for any and all loss�s or I mjunes to you an sing aut oCanc acts or omis>ions of Compan�m connection with a particular ordrr or sen ice, reKardless � of the cause of the loss or injury(including negiigrncel and regardtesc of the naturc of the Icgal ur equitable ngh�daimeA i ( to ha�c been�iolated. shalt ne�er exceed the amount paid by you for the Infom�utiun fumished pursuant to such order or scn ice or SSU00,µhiche�er is greater.and you co�enant and promise not to sur Company for an amount great�r than � � ruch sum. l'ou also agree t.i give Companq immediate H ntten neti:e of ail actiuns, claims,lasses.or damages arisins i out of tne licrnsing ur usr uf O�e lufuima�iun. � 6. l'ou ackno�vledge and agrec that the Information is proprietary �o Companp and compnses: (a) works af Iongmal authorship.including compiled informatian contaming Company's selection,arrangrmrnt and coordination and i expression of such inFi�rtnation or pre-ezisting marenal it hns created, gathercd or assembled:tb)cunGdenual and trade � secret infomiation;and(c)infumiation ihat ha�6rrn creaicd,dr�eloped and mamtalntci by('ompany at great cxprnse ' ! of timc and money,such that misappropnauon or unnuthorized use ba ethers for cummercial gain would unfairly or irteparably harm Compan}. You agrec that you will not commit or pennit any act or omissiun by}•our agents,employees, I ; or any third pany that.tould impair Company's copyright or other intelkctual property nghts�r propnetan•nghts in thr � Infoemation. You will not u;e any Company aade names,trademarks,xn ice marks or cupynghtcYl materials in listings ior ad�emsing cn any manner�tuhout the prior u nnen appro�al of Compan}'. You shall reproduce Company's wpyngh[ � notice and propnetary rights legend on all authunrcd copies of such Infoemauon. 7. You acknowledge and agrcr that t'ompany shall Fx ailocated and lim�ted co rhe numher of accounts moniiond I { and,vou may changc ihc accoun[s monitorcd at any ume pro�ided you do nor changr more than trn per�rnt i 1`1°b1 of iyour account�m am n�rhe{t_)month penat Yeu agree busmess entiues for��hieh a rcpcttt is�iewed will be counted as an accuunt being momtorcd arid�f you w ish to monitor accounts or��eu one-time reports abooe the ren percent(I 0°�e) limit,}rou agrrc to incrcasr the Subscnption Lcccl or purchasc the nght io�i.��unrtimr re{wits. 8. l`ou agrrr that thi,Agrecmcnt is emcrcd into bet��een yourself and('ompam fi�r the benrfit of Company and I tfle�Chire�•Pnrt•;lnfonnatwn Pm4�ders and that thc l�hvd-Party�nfarmation Pro�idrn arr third-party benefi�ianes hereof. You agrec tha�Company may, m its u�vn name or in thc namc of is l'hird-Party I�fnrtnation Pre.iders enforce this I Agrecmcm against}ou:prorid��i,lioµe�er,that you agrre that gou will look only�o C'ompany and not [o the Thirci- � Pany Inf'nrniation Pro�idcn for prrformancc hy Company of its obligation;hcreunder. i 9. L'pon espiration or temiinatiun of an ordcr with respect to gamcular Inti�rmation,you Kha!I immed�atcly delete. destroy or return all onginak� and copies of any Companq Information.unless you are otherwisc rostructed by(�ompany j or the Argos Risk:and upon rrques�,provide Company wuh cemfi�aucm th�r�rof i Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID A16B8F29-83F0-4B4C-A221-pA19FD2DC66C ORIGAr1; �5�1'P (licnt hcreby agreea to bc bound b}the SfP CompiianceLiiS End User License Agreemem,acaiiabic at (;otnphanceEHS � 1_ii�,. ,.�a >�pu� m....p ,n;c:�upload,I nd-t ,�r-I i - i -1,, . �tt-" ==1x1i. In no e�en[shall Onqami bo i Pass Throu¢h re>pomibic or liabie for am acts or omiss�ons of ti1 P Publi,,ations L�mued Pannership DBn STP CompiianceFHS i"STP ('ompliancclJlS ►. Client h�reby conxnu±o Origami pm�iding STP ComplianceFliS�cith its data to the extent necessary•ro pc:rfortn such senices. If the rcietionship betwecn Origami and STP CumplianceEHS is tennina�ed dunng the �emi ofthis SOW,Ortgami shal!pro�tde prampt wntten notice to(�fient and the UowS�gn serv�ces under this SUVv'shall bc termroated as of such date(and Ongami wi11 providr a rcfund[o ftient of anp prepaid and unused fees for tht S1 P ('om tianceEillSsenicesl. Subscriotion�otes: i.Origami adds gcnerally atiailahic features from time to:ime that ma} require contiguration prior to usc If Client reyuc�ts Orgami',assi5tance in this conli�uratiim,Origami may rcyuirc�upport hours ar profetisiunal servicc hwrs lor any such contiguration. 2.In addition to the generally available feature>.Origami may occasionally deploy ncti Cunctionality that w�ill require a separate licensc. These features may reyuirc additional fccs bascd on n�cord volume,number of additional users accessing the ncw features,or some o:her incremental coci dn�er. Client may agree to add such a new license in an Order Form. HO�TI�G AND CL()UD �1AN�GED SER�ICES Un�;ami ��ili host thc application an��fata and uill back up Ciient Data at periodic intervals each dav ai set tonh in the Sereicc t.e�cl Agreement. �DDIT(O\AL PRODUCTION'TE\A�T il ( licnt ha,purchased an addihonal production tcnant.the follo�cin�!tcnns and conditiun.appi�. • 17pcm(�licnt's rcqucst(no morc uftcn th;�n oncc in any three-month period),Origami wiil r�frcsh thc additional tenant with data from Ciirnt'S livc tcnant. • l;pon Client request,additional rcfreshes can be reyuested and��ill erc�e Client Suppon huurc. • Origami's tiervicc Lc�el,lgrccmcnt docs not aprh to additional production tCnants. • An} data manipulation or transition of configuration bctwccn thc cm�ironmcn�s wili crodc Ciicm Su�pon hour;. PRE-PROUI;CTiOti N;\4'IRO�i�IF,�T If Clicnt has purcha,ed a tenant in the pre-prociuction emironment(thc"Prr-Prod�:m ir<mmcnt"1.the follo�ring terms and conditiuns apply: • Grant af�cerss.Subject to the Agreement.Origarni grants the Clien[acces.to!he Pre-Pr�d Encironment solely for the purpusr uf evaluating upcommg updates and features in a non-production sctting. • �lonthy C'ode Relw�e.. Phc Prc-Prod t:nvironment will reccivc neu beta codc on a monthiy basis.This code release +�ill occur in con}unction with the monthly updatc release.��hich wilt inciude re!ea,e notes detailing the changcs and impro�cmcnt.. • lutomaGc Code l.ndate..l lient acknowledges that all updates to thc Pre-Prod f:nv�ronmcnt wi.i br applied automatical(y by Origami. • �u.SI_,.a.Anp Sen•ice I.c�-el:lgrcement contained m the Agreement is not applicablc ro the Pre-Prc�F.mironment OnKami doe.not guarantee any specific Ievel of perfiarmance,availahilit}'.��r,uppun tor thi.cecironment. • Additional Restriaions.In additiun to thc re,tricucros set forth�n the:lgreement,the Clicnt is permittcd to eonduct te,ting oniy uithin tncir spc�itic em�ironmcnt in the P��-Prrnl Emironment \o tc;ting or eva'uetinn«f the;ystem ati a uh�,l�•�,r��thrr c:icnt. rmimnmcnis is ailowed. Termination;Susucnsion • viscontinuation.Origami reserve,the right eo discontinue the procision of the Pre-Prod E:n4ironmcnt at any hme and for any rcason Nithuut prior noticc.!f Origami discontinurs the provision of:hr Prc-Proc1 Emironmcnt,it�ciil providt a refund of any prepaid but uneamed fec.paid hy Ciient for the Pre-Proc'.E.m ironmcnt. • Suspensivn or Rrmo�al of Access.Or;gami may su�pend ur remu�c the ClienC,accr.s to th�Nre-Prud Lnvironmeni at its,ole di:crctio^ifthc Client breaches the termi and condition, (or the P�c-Prod fimimnmcnt. DISCI.AI�It:R OF��ARR:1\'fIH:S. I Hf:PKf.-PKOI>f \�"lkt)\'\if \I IS I'(2O1,�11)FI) .1i IS":1\[) 1ti �\�'AlLABLL.L\CLl Sl�f:OF A\}� 1VARR:�\i l 1�'IIA fSUI:�'FR.ORIGA�ti(i l�tARI S �O RGPRFSl.�T:ltIU\SUR�'4ARR:A�"flEiS OF A\Y hl\D.«IiE�.Tlli R FXPRFSS. l�tYLIFD.S I A"ft TOKY UR (�i 11ER«'IS[.t�'ITH Rf SP(:(�"(TO A\Y y1AI I FK.t\Ct.l'l)I\Ci��\1" REPRl=.SE'\`{r1T10\ ff[:1T THh.PRI•- PROn[ �VIRO\�1k:\1 WILL SE l �i��l f RRl PTI.D OR l RROR-FRF'L,:1\D(_'1 EXPRLSSL�" UISCI.AI�tS Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A1BBSF29-83F0-464C-A221-OA19FD2DC66C oR��f�r�� AI.L 1�1Pl,IFD W'AKRANTIL•SOR CO\Df"CIO\SO{ �i0'�-I�F'RI�GEV1li\I, Mf RCf1A�'i'ABILITt'AtiD FI"I\GSS FOR A\Y PARTICI LAR PURPOSE.THf PRF-PROD E`VIRO\'viF.\i IS PRF.LEASE.IS E�(PEC"I�FD 1�O CO�1 A1\ DGFFCTS,SO�tf;OF 14 HICH �tAY'BE'�tAT[RIAL.A\D IS \OT E\PECTED 1'O UPERATF A7' THE LEVf:t.OK PERFOR�IA�CF OR Cnti1PA'I IHiI fi l'OF,A FI\AL.Pl.BLfCLt'AVAILAI3LE PROULCT OFFGRItiG.I\ VO EVE\'1 S}{ALL ORIGA�11 t3E L1:1BL[: FOR A\Y DA�1AGti5��'I IATSOE�'GR ARISItiG (.)U C Of I HL I;SL OI�UR 1\AF31LfTY' i0 USE I Fll.:Pftf:-PRUD F\\'(RO\�iE�\T. llATA PROCESSING Ongami ��ill proce.�the ciaim�Jata recee�ed IFom Ciienl dsta pro�iJer,and mamtain i�i�port and or export routine�and schedules with third partics a,r indicateJ in the applicable Order Form. In connection with these da[a processing activitics,if any.Client agrees ihat it will: • l;se cools ir.ihe Service to retiohe erceptions.if any.�uch a.mitising location.,incomplete code maps,and ocher exceptions, which may occur in the update a.a re,ult of data errors or missing data from data pro��iden. • \otify Carrier-TPA of data exceptions when appropriate to have data corrected at source. • [.��,ure the ongoing perfortnance of import and ex�rt rc�ponsibilides of eaeh 3`'Party system. :1DD[TIO��AL SER�'ICES A�.iitional;uh;crirt�ur.,user�.ho.ting or other use beyond that��hich is:isted in the Ord�r 1 orm shall reyuire additional fees. Origami shall in�oice Ciient,and Client shall pay for any additional licenses,hosting.sen-icc hours or other�sage in excess of what iti �pccified in the applicable Order Form. A(I such(ccs�ti•ill he at Origami's then-currcnt rates. If nceded,additional tierrices can bc purchased through an Order Form or Statement of W'ork,as applieah;c. Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID:A1B88F29-83F0-484C-A221-pA19FD2DC66C ,-��.., �f^. F� {l.,,f. �. "� 7 P"�.� 1� outcn;�� K�sx DESCR(PTION A�ll TF:[2�TS Atill CON1)1"CIONS FOR CLIEV'C SUPYOR"C A!�U PRt)FESS[ONAL SERVICES F,ffective For Order Forms Executed After April !2,2U23 S G PPO}Z"I' CI.IE�T St;PPORT Ori�zami pruvides Client Suppvrt thrc�ugh a subscription package fix the term af the coniract C'lient Suppon indudes an Urigami- as.igned,fc�cused cuveragc team that can be contacted directfy by cli�nt adminictrators for real time,point-of�-�ontact production support inquiries. Client SuppoR inciudes the foHowing work performed by yueh co��eragc team on behalf ofthe clicnc • Sen�ice Case\tana�;ement,meaning the receipt and capturc of all ciient prociuction suppon inquirics as Service C'ases.and the timciy aekizowledgement,revi�w arid qualification�f those cases. SeR�ice Cases wiil be evaluated and addressed foUowing Origami's prucess based on industry siandazds.Service Cases F+ill be qualified as Service Kequests.Incidents ur f'rofessional Seroices. Sen�ice Requests and tncidcnts arc includcd in Clicnt Suppurt while Prczfessional Services arc not included in E'lient Suppart and are furttrer de(ined belo�}•. • 5ervice Reyuests include reyuests fc�r informativn,guided assistance to wer�administrators,cuordination of aetivities rclated ta ciient-reyuesied basic security changes in the C3rigami platform je.g..SSO link chariges and f-fP site modifications).mutir�e madificetions and maintenance of exirting system configuraticros.data feeds.interfaces, intcgratiuns or custamizations,and triage and erecution of minor eahancements and changes that do not rcquirc a Chan�e Request(sec definiticm belowl. • Irtcidents(Qualified and Unqualified)include any unplanned interruptions or degradations in thc yuality of the Ori�arni delivered software-as-a-service. • Quafitied Incidents include any interruption or degradation that��ccurs as a result of(!!an Origami softwaze defect or cloud intiastructurr issuc or!2)a client configuration issuc caused by standard Origa�ni i�pdatcs ta Chc(�rigami Risk platform.bu[onl}�to thc cxtcnt 9uch:licni conF��uration wati originxlly designed,tested and delivered b}�Origami in accordance with direction received and approved during implementaiion. • Unqualificd Incidrnts inc(ucic any intcrruption or degradation tEiat docs not quafify as a Quatiticd Incident. �nc(uding t 1)issues that occur as a result af cun�gurations cmated by�the client or a third party,t2)issucs caused br the clicnt car a third party,or t:}issucs tliat are kno�vn or existing at Go-Live for the applicable Sc:rvice. . High-level csti¢iates for ProCessional Services,provided that time required for funetianal specifications,detailed design or technical revicw�is not included and reyuires PraCessional Services. • Access ta current and future Origami pri�duct documentaEion.knowledge and best practice education that Orieaini�enerally rnaf:a availabie co clients. • t:ftorts reyuired bg Ori;zami to address routine client-specific regulatory and complian�e changes or data security updates to configurations. • Itoutine assistance�+ith tcchnicai audits,product revirws,qualih assurance and data exccptions hs�nciling. • Gfions as needed as an advisor.escalation puint and advocate throughaut the custumerjaumel. tn} �+�ork that is not includeci in the definiti�ns et'C�lient Support Gas detennined in C)rigami's reasonable discretion}must be �e�aratefy euntrac:ed as Fr�fessiona(Services. Clicnt Support�ubscription Origami offers a Clicm Suppurt subscriptiUn to align Ori�ami's�uppurt resourcin�and staifing for the appropriate necds of the dient. �t�lient Suppon subscription provides the client�vith resourcin;�and sta(lin<�basrd on a speci(ied number of houn of Client Suppon \crsi��n'.).uc� :A��ri; I_'._:)�; Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96FiC Docusign Envelope I�:A1B68F29-83F0-4B4C-A221-OA19FD2DC66C Q��iA�"'� services per calendar month,af}cr which there may be substantiai delays in response times. I'hese hours allocations allow Origami ta staf(�Client Suppan engagements appropriate(y and d�not cumulate or roll over. 7 hc staCfin�huurs allocatic>n for the client�s selected Client Suppvrt,ubscription will be srt fonh in the contract. Quxiifed Incidents(as detinod above�are addressed by Origami as part of Client Support without tal:ing into account a cfient's support sut�scription or a�y hoor aUoca[ions. Origxmi reservrs lhr right tt�revie�c a client's selectcd Ciient Support subscription periodicaily,includine when clicnt resourc(ng and staf�fing demands exceexi the se{ected subscription,tu ensure there is suffieient resourcing and staffing for the ciient's suppc7rt needs. Origami account management�viil propose adjustments if a c{ient's support necds shou{d increasc in order tc�avoid dela}s in Ciient Support case prucessing,a�aitability and responsiti�eness. PROFESSIQ\Al.St:R�`ICE4 Any Hark performed by Qrigami sen iee ar suppon profcssianals that does not fall inta the definition of Client Suppon ab<rve is decmed to be Pro{essionai Services. Fxamples of�vo�k that requires Professianal Services includc: • lmpfementations and Projects: include the crcatian or imp{ementation of new product tunctionality and anq related ne�s configuratiuns,customizations,enh�uicEment,,data feeds,interfaces or integrations(i.e.,muitiple distinct deliverables) requiring dctailed scoping and dcsign,prujcct manngemen�tspecitied resources,documented plans and artifacts,etc.).multi- functional resource commitments(e.g.,professionaE scn ices and de�elupment resourees or third party service integrators); pro}ect adininistration,calls and meetin�s related to such work;detailed Origami testing and/or dien�user acceptance tesung ('UATl;and sc6eduledlpfann��deployments. • Chanee Reyuests: mclude cc�mplex modifications or maintenancc of functionaiity,configuratiems.customizations, rnhancemenls.data feeds,interl'aces or intcerations,and othcr changes that are not mutually agrced to be reasonabiy deli�ered by the eVient's assi�ned�ocused coverage tean�reiources under Client Support.generally requiring some scoping, design,change managerT�ent t,approval and•'or authorization tu deptc�yl,testing and past-deployment�alidation fram Ori�ami. • O�her work or e�tgagemcnts that requires spec�alized skills or rcsc�urce�uther th:u�the assigned 1�>cused coverage team resources for Clicnt Support. • (�edicated on-catl support during special projects or specific events. • ('lient-requested travcl and tasks mnducted during such visits. :1 clicnt may purehase Professic�na(Servicas in an initidl sontract or at any Urne during the then-current cuntract tenn. Pees for Proi'essional Senice hc�urs wilE be at C>rieami's prcvailing haurl�rates at the time of purchase. ACCOI`tiT'�t.AtiAGb:��IE;NT Origami also provides account mana=ement services to ciients in ordcr to understand and support client on-going and future business requ'vements,objectities and strategic development plans. i ivnc spent bV Ori�ami aecount rnanagement rcsources is prnrided withoui cost and is separate from Client Supp�,n or Pmtessional Senices. CLIE�T ROLES A'�D RESPO\SIBILtI'IE5 l:ach ciicnt is responsib(e fi�r ide�uifying an administratur who tivili bc respiinsible fc>r ctient-side s}stem maintcnance and�tiorking ��ith Origami tci provide suppoR to end users,as well�s a;signin�srcurih�rights and maintaining user tDs for all wers. OriKami dues not providc support directic to end u<ers of the clicnt,and unl� these cliem administrators��il!ha�e direct acecss to Origami's assigned fixused cuverage team. Client administrators are the first point��f contact for cfient end users and respvnsibl�for trias�ing anq suppi�rt necds«herc the Origarni[eam needs ta be en�aged. Client administrators and,from timc to time.other client empluyc�s are responsib(c i�x providing timel� diree:tior,and feedback xs nreded by Origami tcr cumplete implementatiun arid sup�ort ta;hs. ('iicn�admini;traters are alsc�respon.ibl�for gatherin��appropriatc infornaation abc�ut any issue in advancc c�f cantaetine Oricami. l�he client«�iii ha��e tinai responsibility For decisions re�ardi��c�m�i,tiurations or custvmiraticans tsuch a,fi7rnis.dashboards. interfacei.rcports.workfia�vs and data llow�sl created bv or ior a ciicnt c�r iu users in th�Origami plaUbrm. I�or ail such contigurations and customization>,ttre clicnt shall bc rcsponsihlc Cor yualit} assurancc tu cnsurc that such configuratiu�is and Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A16B8F29-83F0-484C-A221-OA19FD2DC66C OR{GAMf customizations operatc as intended(including functionality,usability and data access rights),and Origami shall not be responsiblc for any damages caused by any such configurations or customizations_ Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID A18B8F29-83F0-4B4C-A221-OA19FD2DC66C _'i'•�i� . , ORIGAMI RISK ADDITIONAL TERMS AND CONDITIONS FOR AI FUNCTIONALiTY This is a legally binding agreement. Please read it carefully. By clicking"I Accept",or using the Service(as defined below),you(1�acknowledge that you have read this Agreement,understand it and agree to be bound by its terms and(2)represent that you have been authorized by Customer to use the Service. If you are not an authorized User,or do not agree to these terms,you may not use the Service. 1. Definitions "Qrigami AI" means any generative tools, features, or functionality made available to you via the Origami platform(the "Service"j that utilize data models trained by artificial intelligence.Origami AI has two distinct sets of Origami features powered by AI: • Pawered by Origami: This first set of features is powered by Origami's own proprietary machine learning models. • Powered by AI partners: This second set of features leverages generative AI and large ianguage mode(s(LLMs) from third-party AI partners.A list of Origami's third-party AI partrters is available at •.v�_�Uv ori�;am;,�,k c;rn/sc�Licede�c�s�_�or,.. Neither Origam�nor any third-party AI partners shall use Client Data or inputs to train the Origami AI. 2. Optional Feature You acknowledge that the Ongami AI is an optional feature of the Service,is in no way required in orde�to use the Service, and that you are free to stop using the Origami Al at any time. 3. Ownership A�d Use of Origami AI Inputs and Outputs � You acknowledge that all content or information submitted through use of the Origami AI, including your data stored in the Se�v�cP("►nput�")an�i all rnntPnt or other results generated by the Or"rgami AI ("Outputs")shall be your CEient Data. Origami AI may include features which are powered by AI models operated by a third party,in which case you permit the relevant third-party provider of such AI functionality to use the Inputs and Outputs or other Client Data submitted to the Gen AI Functionality as necessary to provide and maintain the Origami AI, comply with applicable laws, and enforce its policies. Where Inputs and Outputs are submitted to a third-party provlder,those Inputs and Outputs may be retained temporarily by the third-party provider as part of the operation of their service.However,Origami shall contractually restrict any third- party provider of Gen AI Functionality from using Inputs and Outputs for. (ij training, (ii� otherwise Improving its large language models or other services,and/or(iiij general use beyond the use required to provide and maintain the Origami AI or as otherwise set out in this Addendum. Any third-party provider of AI functionality shall act as a Subprocessor of Client Data submitted to the relevant Origami AI, including Personal Oata that may be contained in Inputs or other Client Oata. ff applicable, aVl processing of Client Data will be governed by the DPA in place between Origami and you. In this Addendum, "Subprocessor"and "Personal Data" shatl have the meanings given to them in the DPA. 4. Use Restrictions You will not use the Origami AI: a to infringe any third-party rights; b to mislead any person or imply that Output generated using the Origami A1 is unique or solely human generated, or otherwise remove or alter any watermarks or metadata that may be generated with Output to identify Output as AI-generated; Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID:A1668F29-83F0-4B4C-A221-OA19FD2DC66C oR�caM� c. to generate Output to make,or to use as a substantial factor in making,consequential decisions,as such term is defined in applicable (aw, or in any way that would qualify the Origami AI as high-risk (or similar te�m) under applicable law; d use the Origami AI for automated decision-making that has legal or similarly significant effects on individuals, unless it does so with adequate human review and in compliance with Laws,or e. in a way that violates the Restrictions outlined in the applicable agreement between you and Origami for your use of the Service. Upon Origami's request,you will provide information about your intended use of Origami A!. 5. Risks and Limitations Artificial intelligence and machine learning technologies have known and unknown risks and limitations.You acknowledge that you are solely responsible for developing your own internal policies regarding the appropriate use of these technologies and training other Users on your account on such policies. By using the Origami AI,you acknowledge and agree that� a. Origami is not responsible for any inaccuracies, incompleteness,or errors in Output, b. Origami is not responsible for any biases or limitations of the underlying algorithms or data, c. Or{gami is not responsible for any Output that is similar or identical to outputs independently provided by Origami to others,and d. Origami is not responsible for any Output that you may find harmful, offensive, or otherwise unsu�table for its intended use. 6. Suspension Origami may, without liability, suspcnd or tCrminate�ccess to the Origami/11 immediately upon notice to Client in the event that any third-party provfder of AI functionality suspends,terminates or ceases to provide access to the relevant AI functionality. 7. Disclaimer VOD UNDERSTAND AND AGREE THAT ANY CONTENT QR OUTPUT OBTAINED THROUGH THE USE OF THE ORIGAMI AI IS PROVIDED"AS-IS"AND OBTAINED AT YOUR SOLE RISK.ORIGAMI OOES NOT REPRESENT OR WARRANT THAT THE OUTPUT WIIL NOT INCORPORATE THE INTELLECTUAL PROPERTY OF THIRD PARTIES ANO IS NO7 RESPONSIBLE TO INOEMNIFY YOU AGAINST ANY CLA(MS Df INFRfNGEMENT MADE BY THIRO PARTIES REIATED TO THE OUTPUT.YOU SHOULD NOT RELY ON FACTUAL ASSERTIpNS IN OUTPUT WITHOUT INDEPENDENTIY FACT CHECKING THEIR ACCURACY. NO INFORMATION OR ADVICE,WHETHER WRITTEN OR ORAL,OBTAINEO BY YOU FROM ORIGAMI OR THROUGH THE ORIGAMI AI SHALL CREATE ANY WARRANlY NOT EXPRESSLY MADE HEREIN. Docusign Envelope ID:7AE59C11-1275-4C83-9039-F72AE3A96F1C Dacusign Envelope ID.A1 B88F29-83F0-4B4C-A221-0A19F�2DC66C _ �,'V,'�!� t ORI6AMI RISK AIPARTNERS . Rmazon Web Services,lnc. • ThoughtSpot • CommandAi Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A16B8F29-83F0-4B4C-A221-OA19FD2DC66C ,,;;;��;�';r�;E ORIGAMI RISK SUB-PROCE550R5 Third-Party Sub-processors -- , I 5ub-processo� '; Services Location � --- _. _ _-- — __--- —+-----_ __ __.. __... ------- Amazon Web Services,Inc. Hosting, Data Storage, f United 5tates j � Generative AI functionality ! � (Bedrock) � I � ----_ _ __--� ___ _— - �___ . __._..--------------- � Mailgun Technologies,Inc. Platform Emaii Services j United States j � ---------- -_---- ' ----- ----+ ___----- � � Salesforce.com, Inc. � CRM and customer support United States i ticketing ' �---- -- _.___--- ------ ------- i Atlassian Customer support and ticket United States j � � handling f Twilio Customer communications, United States inciuding in-product messaging � and email � , � ThoughtSpot i � Generative Ai se►vices provider United States ffor intefiigence product features i -- -- � , CommandAl ' Generative AI servlces provider United States ' for intelligence product features � � Prismatic Workflow setup and integration � United States I Affiliate Sub-processors Entity Name Location � i_--__ ___ __ .__ -- ---— ----- -- __ ----------- � ; DAfS Technology LLC(wholiy-owned subsidiaryj � United States � � + ----- � Origami Risk ltd(whaliy-owned subsidiary) United Kingdom � � - ---- a ------------- � Origami Risk Inc. (wholly-owned subsidiary) I Canada � :.- - ---- --L--- Origami may update this list from time to time with notice to Client. Docusign Envelope ID:7AE59C11-1275-4C83-9039-F72AE3A96F1C Docusign Envelope ID:A1668F29-83F0-4B4C-A221-OA19FD2DC66C CONF►OENTIAL Data Processing Agreement This Data Processing Agreement("DPA")forms part of and is incorporated into the Software Subscription Agreement("Agreement")between Origami Risk LLC or the applicable subs�diary thereof that is a party ta the Agreement("Origami")and the entity identified as the client in the Agreement or the relevant order form("Client"J. The parties are referred to herein each as a"Party"and collectively the"Parties." This OPA sets forth Client's instructions for the processing of Personal Data in connection with the services provided pursuant to the Agreeme�t(the"Services"j and the rights and obligations of both Parties. All capitalized terms used in ihis DPA but not defined will have the meaning set forth in the Agreement or under data Protection Laws.In the event of any confiicts between this OPA and the Agreemeni,this DPA will govern. i. Definitians. a. "Data Protection Laws"means ail applicable faws,regulations,and other legal or regulatory requirements in any jurisdiction relating to privacy,data protection,data security,breach notification,or the Processing of personaf data in the U�ited States,the United Kingdom, the European Union,and Canada,including without fimitation,to the extent applicable,the General Data Protection Regulation, Regulation(EUj 2016/679("GDPR");the United Kingdom Data Protection Act of 2Q18("UK GDPR");the Swiss Federal Act on Data Protection ("FAOP");the Califamia Consumer Privacy Act,CaL Civ.Code§1798.100 ef seq.,as amended and including its regulations("CCPA");and other similar and applicable U.S.state and federal laws. b. "Data Subject"means an �dentified or identifiable natural person to whom Persanal Data relates,and is deemed to also inciude a"consumer"as defined under Data Protection Laws. c ��Data Privacy Frameworks'� means the EU-U.S Data F'r�vacy Fra�-,r>�:o�k j"t�U U S DPF";,ti�� ,�::��.•.�, J � •`�->ta 6�"iLi� E ..�r,n,l,hrk t '��.d1�,.�. It c, !', �.�- �' � '� F _ �i; , F � F �.n„ ' �t_�, _,�•� t=.'t i.� . _ � �, �` . .� ,. . � , .. . .. .i�_. . . _ .. _ . � . - . d. "EU SCCs"means the 5tandard Contracti:al Clauses issued pursuant to Commission impfementing Decision (EU} 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation(EU)2016/679 of the European Parliament and of the Council,available at _�:t��` �t .�a t�ar;rr��}��; c�� !f_r fr�.<<�h t��l �y�A�cj and completed as set forth herein. e. "Personal Data"includes"persanal data,""personal information,""personalfy identifiable information,"and analogous terms,as defined by applicable Data Protection Laws,that C)rigami Processes to provide the Services under the Agreement. t "'Protess","Processing,""Processed,"etc.,mean any operation or set of operations performed on Personal Data or on sets of Personal Data,whether or not by automated means,such as collection,recording,organization, creating,structuring,siorage,adaptation ar aiteration,retr�eval,consultation, use,disclosure by transmission,dissemination or otherwise making available, alignment or combi�ation, restrictiar.,erasure,or destruct�on. � Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A1B68F29-83F0-4B4C-A221-OA19FD2DC66C CONFIDENTIAL g. "Security Incident" means any breach of security that results in the accidentai or unlawful acquisition,destruction,loss,alteration,unauthorized disclosure of,or access to,Personai Data. h. "Subprocessor"means any third party that Origami engages to Process Personal Data to assist in providing the Services to Client. i "UK Adde�dum" means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses issued by the UK information Commissioner's Office,located at i�ti4s:;j�co-or�;.uk/rti�tlia,'tor-or�aniaat+oii</dUc,iinr,nt�5-'4v195i}'ir�ternational��7ata tr_;risier <3dderdun, pdf and completed as set forth herein. j. The terms"Business,""Controller,""Processor,"and "Service Provider"are defined as in Data Protection Laws."Controlfer"is deemed to also refer to"Business,"and"Processor"is deemed to also refer to"Service Prpvider." 2. Roles of the Parties;Scope and Purposes of ProcessinR. a. Roles of the Parties.To the extent that Client is the Controller of Personal pata,�rigami is its Processor.7o the extent that Client is a Processor of Personal Oata,Origami is its Subprocessor. The details of Origami's Processing of Client Personal Data are described in Schedule 1 to this DPA. b. Scope and Purposes of Processing.This DPA applies to all Personal Data that Origami Processes to provide the Services to Customer pursuant to the Agreement. Origami will Process Personal Data(i}in compliance with Data Protection laws;(ii)on Client's behalf and in accordance with Ctient's instructions as set forth in this DPA and the Agreement,and/or as otherwise provided by Cfient in writing;and (iii)to provide the Services to Client under the Agreement for the business purposes set forth in the Agreement,unless other Processing activities are required to comply with Data Protection Laws(in which case, Origami shall provide prior notice to Client of such legaf requirement,unless such law prohibits this disclosure). c. Client Rights.Client retains the right to take reasonable and appropriate steps to(i}ensure that Origami Processes Personal Data in a manner consistent with Data Protection Laws,and (ii)upon notice,stop and remediate unauthorized Processing of Personal Data, including any use of Personal Data not expressly authorized in this DPA. d. Client Obligations.Client shall comply with all applicable Data Protection Laws in providing Personal Data to Ongami in connection with the Services.Client represents and warrants that (aj the�ata Protection laws app{icable to Client do not prevent Origami from fulfilling the instructions received from Client and performing Origami's obligations under this DPA; and (b)Client has a lawful basis for disclosing the Personal Qata to Origami and in enabfing Origami to process the Personal Data as set out in this DPA.CGent shall notify Origami without undue delay if Client makes a determination that the processing of Personal�ata does not or will not comply with applicable Data Protection Laws, in which case,Origami shall not be required to continue processing such Personal pata. , Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope IQ:A1668F29-83F0-464C-A221-OA19FD2DC66C CONFIDENTIAL 3. Persanaf Data Processin�Requirements. a. Restrictions on Protessing.Origami wili: i. not retain, use,or disclose Personal Data outside of the direct business relationshYp between Client and Origami,or for any purpose(including any commercial purpose� not set forth in this DPA or the Agreement; if. not"sell"or"share"any Personal Oata,or use Personal Data for purposes of "targeted advertising,"as such terms are defined in Data Protection Laws;and iii. comply with any applicable restrictions under the CCPA on combining Personal Data with personai data that Origami receives from,or on behalf of,another person or persons, or that Origami collects from any interaction between it and any individual. b. Confidentiality.Origami will ensure that the persons Processing Personal Data are bound by obligations of confidentiality no less protective than those set forth in the Agreement or are under an appropriate statutory obligation of confidentiality. c. Assistance.Origami wifl provide Client with reasonable assistance: i. hy implementing appropriate technical and organizational measures for the fulfilment of Client's obligation to respond to requests for exercising Oata Subjects'rights ("Requests")as set forth in Data Protection Laws,taking into account the nature of the Processing. If Origami receives any Requests during the term of the Agreement, Origami will advise the Data Subject to submit the request d�rectfy to Client and then will provide Client with reasonabfe assistance in responding to the Request,where appropriate and requested by Client; ii. in performing any required data protection impact assessment of Processing or proposed Processing of Personal Data; iii. in consulting with regulatory authorities fn relation to the Processing or proposed Processing of Personal Data, including any applicable obligation upon Origami to consult with a regulatory authority in relation to Origami's Processing or proposed Processing of Personal Oata;and iv. as necessary for the fulfilment of Client's obligations under Data Protection Laws to maintain the security of Personal Data. d. Notice Regarding Compliance and fnstructions.Origami will promptly notify Client if Origam�determines that it can no longer meet its obligations under Oata Protection Laws or if it believes that Client's instruttions violate Data Protection Laws,and Origami is not deemed to be in breach of this DPA if it declines to Process Personal Data in a way that Origami reasonably and in good faith believes would cause Origami to violate Data Protection Laws. ; Docusign Envelope ID:1AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID:.AIBB8F29-83F0-484C-A221-OA19FD2DC66C CONFIDENTIAL 4. Data Securitv.�rigami wiU use appropriate adminutrative,technical, physical,and organizational measures to protect Personal Data as set foRfi in Schedule 2.Origami wiii provide the level of protection for Personai Data that is required under Data Protection Laws.Such measures will take into account the state of the art,the costs of impiementation and the nature, scope,context and purposes of Processing,as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons,so as to ensure a levet of security appropriate to the risk. 5. Securiri Incident. a. Notice.Origami will notify Client of any Security Incident without undue delay or within the time period required under Data Protections law. To the extent availahle,this notiflcation will include Origami's then-current assessment of the following:(i)the nature of the Security Incident,including,where possible,the categories and approximate number of Data Subjects concerned and the categories and approximate number of Personal Data records concemed;(u)the likely consequences of the Security Incident;and(lii)measures taken or proposed to be taken by Origami to address the Security Incident,including,where applicable,measures to mitigate its possible adverse effects.Origami will provide timely and periodic updates to Client as additiona!information regarding the Security Incident becomes available.Client acknowledges that any updates may be based on incomplete information. b. Responsibilities of the Parties.Origami will comply with the Security Incident-related obligations applicable ta it and will assist Client in Client's compfiance with its Security Incident related obligations, in each case to the extent required under Data Protection Laws. Client is solely responsible for complying with Security Incident notification requirements applicable to Client.Origami'; notice of or respon;e to a Security Incident undcr this;ection 5 will not be an acknowledgement or admission by Origami of any fault or liability with respect to the Security Incident. 6. Subprocessors. a. Authorization to Engage Subprocessors.Client agrees that Origami may,and provides general authorization far Qrigami to,engage Subprocessors to Process the Personal Data to assist in providing the Services.A list of Origami's Subprocessors is available at r;.•rw ori.;<�r,�ir�;k_�;nn;;,;:�rvi�_ede.�,r��tF ,:,�,,.,provided that such website may be updated by Origami upon written notice to Client. ("Sub-processors list Webpage"). Origami will impose contractual obligations on any Subprocessor it appoints requiring it to protect Personal Data to standards that are no less protective than ihose set forth under this DPA. Origami shall remain liable to Client for the performance of the Subprocessor's obligations under Data Protection Law. b. Subprocessor Notice and Objections.Origami will provide reasonable advance notice of new Subprocessors that it appoints during the term of the Agreement.To obtain such noticc,Client may subscribe to notifications from Origami. Client has fourteen(14�ca�endar days from receiving such notice to make a�objection on reasonable grounds relating to the protection of the Personal Data under Data Protection Laws by notifying Origami at dpo@origamirisk.com. In the event Client objects to a new Subprocessor,Origami will use corr�mercially reasonable efforts to make�vailable to Client a change in the Serviccs or i Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A1 B88F29-83F0-4B4GA221-OA19FD2DC66C �, ., .�n CONFIDENTIAL Client's configuration or use of the Services to avoid processing of Client Personal Data by the objected-to new Subprocessor. If Origami is unable to make available such a reasonahle change,then the parties shall negotiate in good faith on how to proceed.However,if the parties are not able to reach agreement within a reasonabie period of time,either Party may upon written notice terminate without penalty the applicablc Agreement. 7. Data Transfers. a. Authorization to Transfer Personal Data.Client authorizes Origami and its Subprocessors to make international transfers of Persona!Data in accordance with this DPA and Data Protection Laws. b. Order of Precedence.The Parties acknowledge that Data Protection Laws may require the Parties to implement certain safeguards(a"Transfer Mechanism")for C(ient to transfer Persona!Data to Origami. !n the event a Iransfer of Personal Data is covered by more than one Transfer Mechanism,the transfer will be subject to a singfe Transfer Mechanism,in accordance with the foliowing order of precedence� (i)the Data Privacy Frameworks;(ii)to the extent that the Data Privacy Frameworks do not appiy to a given transfer or are invalidated,the EU SECs and/or UK Addendum as set forth in Sections 7(c)-�e�,as applicable; and(iii)if neither of the preceding is appiicable,the Parties wi►I cooperate in good faith to enter into an alternative Transfer Mechanism to the extent required by Data Protection laws. . c. Oata Privacy frameworks.�u;i�e�Kterst On�;�:r�i processes Personal Da:a on�,r.at rg?r�m [he EEA, Uniled Kingdom, or Switzerland ond Or;€ami is se�f-certif�ed under tne Data Privacy Fr�nZevvorks,�ri�ami will�dhere to:he��ta Privacy Prirclpies wrth rtspect to Personal I;�ta tran,tcr!ed to Origami tmdcr th��thc>�� Princi�les,as appi��:�b[e. d. EU SCCs.To the eztent legally required,by entering into this OPA,Client and Origami are deemed to have signed the EU SCCs,which form part of this DPA and (except as described in Sections 7(ej and(f}below)are deemed completed as follows: i. Module 2 of the EU SCCs applies to transfers of Personal Oata from Client(as a ControllerM to Origami(as a Processor),and Module 3 of the EU SCCs applies to transfers of Personal Data from Client(as a Processor)to Origami(as a Subprocessor); ii. Clause 7(the optional docking clause)is not included; iii. Clause 9(Use of 5ub-processors):�ptio�2 (General written authorization)will apply and the time period for prior notice of Subprocessor changes is set forth in Section 6 of this DPA; iv. Cfause 11 (Redressj:The optional language wili not apply; v. Clause 17(Governing law):The Parties choose Optio� 1(the law of an EU Mernber State that allows for thlyd-Party 6eneficiary righ[s)and select the faw of treland; vi. Clause I8(Choice of forum and jurisdiction):The Parties select the courts of Ireland; vii. Annexes I (L�st of Parties)and II(Technical and organizational measuresj are compfeted as set forth in Schedules 1 and 2 of ihis DPA, respectively;and viii. Annex III(List of Subprocessors)is not applicable because the Parties have chosen General Authorization under Clause 9, but details regarding Origami's 5ubprocessors Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96FiC Docusign Envelope ID:A1BB8F29-83F0-484C-A221-OA19FD2DC66C CONFIDENTIAL can be found in Section 6 above. e UK Addendum.To the extent legalky required,by entering into this DPA,the Parties are deemed to have signed the UK Addendum,which forms part of this DPA and takes precedence over the rest of this DPA as set forth in the UK Addendum.The Tables within the UK Addendum are deemed completed as fotlows: i. Table 1�The Parties`detaiis shali be the Part�es to the extent any of them is involved in such transfer,and the Key Contact shall be the contacts set forth in the Agreement. ii. Table 2:The Approved EU SCCs referenced in Tabie 2 shall be the EU SCCs as executed by the Parties and completed in Section 7(d►of this DPA. ui. Table 3:Annexes i and II are set forth in Schedules 1 and 2 below,respectively.Annex i(I is inapplfcable. �v. Table 4:Either Party may end this DPA as set out in Section 19 of the UK Addendum. f. Transfers of Swiss Personal Data.Far transfers of Personal Data that are subject to the FADP,the EU SCCs form part of this DPA as set forth in Section 7(d)of this DPA.but with the foliowing differences to the extent required by the fADP:(i)references to ihe GDPR in the EU SCCs are to be understood as references to the FADP insofar as the data transfers are subject exclusively to the FAOP and not to the GQPR;(ii)tfie term"member state" in EU SCCs shall not be interpreted in such a way as to exclude data subjects in Switzeriand from the possibility of suing for their rights in their place of habituai residence(Switzerland}in accordance with Clause 18(c)of the EU SCCs;and(iii)the relevant supervisory authority is the Swiss Federai Data Protection and Information Commissioner(for transfers subject to the FADP and not the GOPR),or both such Commissioner and the supervisory authority identified in the EU SCCs(where the FADP and GOPR appiy,respectively). g. Order of Precedence. In the event of inconsistencies between the DPA and the EU SCCs,as completed in subsections(c)-(e)of this Section 7,the SCCs wiil prevaif. 8. Audits. a. Standard Audit Process.Ongami uses an external auditor to examine�ts security and confidentia(ity controis in relation to the Service.This audit:(aj will be performed at least annually; (b)will be performed according to Service Orgamzation Control(SOC)2 standards or such other alternative or successor standards that are substantially similar to SOC 2;(c) will be performed by an independent third pariy auditor at Origami's selection and expense; and(d)will result in the generation of an audit report("Report"�,which will be Origami's Confidentia{Informatio�under the confidentiaGty provisions of the Agreement. Origami witl make avai[abte to Client the Report to demonstrate compliance with this OPA(an "Audit") provided the Agreement remains in effect.Client may request an Audit upon at least fourteen (14j days' prior written notice to Urigami,no more than once annually,except,in the event of a Sec�rity Incident ocwrring on Origami systems, in which case Customer may request an Audit within a reasonable period of time foliowing such Security incident. b. Written Requests and Inspections.If Client has a reasonable objection that thc Report provided is not sufficient to demonstrate Origami's compliance with this OPA,C{ient may,as reasonably necessary:(i}request additianal information from Origam+in writing,and Crigami wili !esponri to such written requests within a reasonable period of time("Written Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope 10:AtBB8F29-83F0-4B4GA221-OA19FD2DC66C CONFIDENTIAL Requests");and (�i}only where Origami's responses to such Wntten Requests do not provide the necessary level of informat�on reasonably required by Client, request access to Origami premises,systems and staff,upon at least thirty(30J days'prior written notice to Origami(an"inspection"a subject to the parties having mutually agreed upon(a)the scope, timing,and duration of the Inspection,(bi the use of a third-party auditar to conduct the Inspection,(c}the Inspection being carried out only during regular business hours,with minimal disruption to Origami business aperatians,and(d}aA costs associated with the inspection being borne by C{ient. Inspections wil!be permitted no more than once annually, except in the event of a Security Incident. c Audit Process. To request an Audit,make Written Requests,or engage in an Inspection, Client must notify Origami pursuant to the instructions above at dpo@origamirisk.com. d Duty of Confidentiality and EU SCC compliance. Nothing In this Section 8 shaU require Origami to breach any duties of confidentiality to any third parties. The Parties agree that the audits described in the EU SCCs,if applicable,shal!be performed in accordance with this Section 10. 4. Return or Destruction of Personal Data.Except to the extent required otherwise by Data Protection Laws,Origami will comply with the data retention and destruction requirements set forth in the Agreement. The Parties agree that the certification of deletion described in the EU SCCs, if applicable,shall be provided onfy upon Customer's written request. 10. Survival;Amendments.The provisions of this DPA survive the termination or expiration of the Agreement for so long as Origami or its Subprocessors Process Personal Data.Origami may amend this DPA in order to comply with Data Protection Laws and w�ll notify Client of such changes By continuing to use the Services after the DPA has been updated, Cfient is deemed to have agreed to the updated DPA. 11. Eiabili . Each party's I�ability towards the other party under or in connection with this DPA will be f�mited m accordance with the provisions of the Agreement Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID:A1BB8F29-83F0-4B4C-A221-OA19FD2DC66C i;;, t.q�1, CONFIDENTIAL SCHEDULE 1--ANNEX I TO THE EU SCCS ANO OETAILS OF THE PERSONAL DATA PROCESSING A. LIST OF PARTIES Data exporter(sj: • Name:Client,as identified in the Agreement. • Address:As provided in the Agreement. • Contact person's name,pos�tlon,and contact details:As provided in the Agreement. • Activities relevant to the data transferred under these Clauses:The data exporter receives the data importer's Services pursuant to their underlying Agreement. • Signature and date:The Parties agree that execution of the Agreement shall constitute execution of these EU SCCs by both parties. • Role: Controlle�or Processor,as relevant. Data importer(s): • Name:Origami,as identified in the Agreement. • Address:As provided in the Agreement. • Contact person's name, position,and contad details:As provided in the Agreement. • Activities relevant to the data transferred under these Clauses:The data importer provides the Services to the data exporter pursuant to the+r underlying Agreement. • 5ignature and date:The Parties agree that execution of the Agreement shall constitute execution of these EkJ SCCs by hoth parties. • Role Processor or Subprocessor,as applicable. B.DESCRIPTION OF TRANSFER Cafegories of dofo subjects whose penonal data is ironsferred:At its sole discretion,and in comp{iance with the applicable data protection laws,the data exporter may submit personal data to the data importer which may indude but is not limited to the categories below: • Customers,prospects,business partners and vendors who are natural persons.Customers, employees or agents of the data exporter's customers, praspects,business partners and agents who are naturai persons. • Oata exporter's users authorized by the data exporter who are natural persons Categories of personal doia transfer�ed:At its sole discretion after carefui evaluation of compliance with the applicable laws,the data exporter may submit personal data to the data importer which may include but is not limited to the categones below: • First and last name,Fmployer,title and position • Contact information • Personal life data • Personal Identification data • Connection and/or localization data Sensifive dato transferred(ij applicableJ and applied restrrctions or saJeguards tho!fully take rnto x Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID:A1668F29-83F0-4B4C-A221-OA19FD2DC66C ,��' CONFIDENTIAI consideration Lhe nature of the data and the risks involved,such as for instance sirict purpose limitation,access restrrctions(including access onfy jor staff having followed specialised troininq), keeprng a record of access to the doto,restridions for onward tronsfers or odditional security measures: At its sole discretion and subject to the qualification set forth hereunder,the data exporter may submit special categories of data to the data importer which is personal data with information reveafing racial or ethnic orig�n,religious or philosophical beliefs, politicai opinions,trade union or guild membership,and the processing of data regarding health or sex life. The choice of the type of data that will be processed usi�g the Origami Service remai�s solely within the discretion and choice of the data exporter. In selecting the personal data of any categories the data exporter shall ensure that such personal data is suitable for processing with and through Origami Service in compliance with the applicable data protection laws. The frequenty of the transfer(e.g.whether the daia is tronsferred on o one-off or coniinuous basisj: Continuous for the duration of the Agreement. Nature of the processing:The data importer's Processing activities shall be limited to those discussed in the Agreement and the OPA. Purpose(sj of the doto transfer ond further processing:The purpose of the transfer to and further Processing of Personal Data by the data importer is for the data importer to provide the Services to the data exporter as set forth in the Agreement. The period for which the personol dafa wil!6e retoined,or,if ihoi is not possible,the criteria used io deiermine that period:Personal Data will be retained for the period of time necessary for the data importer to provlde the Services to the data exporter under the Agreement and/or in accordance with applicable IeRal requirements. For transfers to(sub-)processors,olso specify subject matier,nafure and duration of the processinq: Same as above to the extent that Personal Data is provided to Su6processors for purposes of providing the Services. C.COMPETENT SUPERVISORY AUTHORITY To the extent legally permitted,the competent supervisory authority is the Irish Data Protection Commissioner. 9 Docusign Envelope ID:7AE59C11-1275-4CB3-9039-F72AE3A96F1C Docusign Envelope ID:A1BBBF29-83F0-4B4GA221-OA19FD2�C66C CONFIOENTIAL SCHEDULE 2—ORIGAMI DATA SECURITY MEASURES Origami maintains a comprehensive,written information security program that contains administraUve, technical,organizational,and physical safeguards that are appropriate to(a}the size,scope and type of Origami s business;(b)the type of information that Origami will store;and(c)the need for security and confidentiality of such information. Origami s Information Security Program includes security requirements for its personnel and all Subprocessors or agents who have access to Personal Data("Data Person�ei"�.Origami's security requirements cover the foflowing areas: 1. Information Security Policies and Standards. Origami will mai�tain written information security policies, standards and procedures addressing administrative, technical, and physical security controls and procedures.These policies,standards,and procedures shall be kept up to date,and revised whenever refevant changes are made to the infarmation systems that use or store Personal Data. 2. Physical Security. Ongami will maintam commercially reasonable security systems at all Origam� sites at which an information system that uses or stores Personal Data is located ("Processing Locations"} that include reasonably restricting access to such Processing Locations, and implementing measures to detect,prevent,and respond to intrusions. 3 Organizational Security. Origami will maintain information security policies and procedures addressing acceptable data use standards,data classification,and incident response protocols. 4 Network Secunty. Origami maintains commercially reasonable information security policies and procedures addressing network security. 5. Access Control. Origami agrees that:�1)only authorized Origami staff can grant,modify,or revoke access to an information system that Processes Personal Oata; and (2j it will implement commercially reasonable physical and technical safeguards to create and protect passwords. 6. Virus and Mafware Controls.Ongami protects Personal Data from malicious code and will install and maintain anti-virus and malware protection software on any system that handles Personal Data. i. PerSonneL Origami has implemented and maintains a security awareness program to train employees about thefr security obligations. Data Personnel follow established security policies and procedures.Disciplinary process is applied if Data Personnel fail to adhere to relevant poliues and procedures. 8. Business Continuity. Origami implements disaster recovery and business resumption pfans that are kept up to date and revised on a regular basis. Origami also adjusts its Information Security Program in light of new laws and circumstances, including as Origami's business and Processing Ch3n�e. Docusign Envelope ID:7AE59C11-1275-4C63-9039-F72AE3A96F1C Docusign Envelope ID:A1888F29-83F0-464GA221-OA19FD2DC66C '�:r:��.�+N Y:. CONFIDENTIAL Additional Details regarding Ongarni's information security program,in the form of its most recent SOC 2 Report,are available upon request. II