Data Processing &

Subprocessors

1. Purpose

This Data Processing Agreement (“DPA”) governs DTIS’s processing of Personal Information on behalf of Customer in connection with the Services.

2. Use of Subprocessors

Customer acknowledges and agrees that DTIS may engage third-party service providers (“Subprocessors”) to process Personal Information on DTIS’s behalf for purposes related to providing, maintaining, securing, and supporting the Services.

3. Customer Authorization

Customer hereby grants DTIS general authorization to engage Subprocessors to process Personal Information in connection with the Services.

4. Subprocessor Obligations

DTIS shall ensure that each Subprocessor is bound by written contractual obligations requiring appropriate technical and organizational measures to protect Personal Information and maintain confidentiality.

5. Subprocessor List

DTIS shall maintain a current list of authorized Subprocessors at Authorized Subprocessors or another location communicated to Customer.

6. Liability

DTIS remains responsible for the performance of its Subprocessors to the extent required by applicable law and the parties’ agreement.

7. Acceptance

This DPA is incorporated into and forms part of the applicable agreement between DTIS and Customer. By executing the applicable agreement or using the Services, Customer agrees to the terms of this DPA and authorizes DTIS’s use of approved Subprocessors.