Attachment 1 – Cross-Border Data Transfers

1. Transfer Mechanisms

1.1 DPF

If DQLabs maintains a valid DPF certification, DQLabs will process relevant Personal Data in accordance with DPF principles for transfers from the EEA/UK/Switzerland to the U.S. DQLabs will notify Customer if it withdraws from DPF certification.

1.2 SCCs

If DPF is unavailable/invalidated for a transfer or otherwise required, the SCCs apply as set forth below.

2. SCC Configuration

• Clause 7: not applicable
• Clause 9(a): Option 2; subprocessor notice/objection per Section 7.3
• Clause 11(a): optional language not applicable
• Clause 17: Option 1; Ireland law
• Clause 18(b): Ireland courts

Annex I – Parties

Exporter: Customer (Controller)

Importer: DQLabs, Inc. (Processor)

Importer contact: privacy@dqlabs.ai

Annex II – TOMs

TOMs are described at https://www.dqlabs.ai/legal/toms.

Annex III – Subprocessors

Subprocessors are listed at https://www.dqlabs.ai/legal/subprocessors.

3. UK Transfers

UK Addendum incorporated by reference; UK Addendum controls to extent applicable.

4. Swiss Transfers

SCCs apply with Swiss-required modifications.