California Consumer Privacy Act Addendum

This CCPA Addendum (the “ CCPA Addendum ”) is incorporated into the Terms of Service (“ Agreement ”) between inPhronesis, Inc. (“ inPhronesis ”), and you, the customer (“ Customer ”) that has signed up for the Services and agreed to the terms of the Agreement pursuant to the Order Form (as defined in the Agreement) with which you purchased the Services and any subsequent Order Forms (submitted in written or electronic form). This CCPA Addendum applies where inPhronesis processes Personal Information on behalf of Customer pursuant to the Agreement. This CCPA Addendum is effective from January 1, 2020 until the Agreement is terminated. This CCPA Addendum shall control in the event of any inconsistencies between this CCPA Addendum and the Agreement.

2. CCPA

a. The parties agree that, for purposes of the CCPA, Customer is a Business and inPhronesis is a Service Provider. Customer represents and warrants that it will only provide or make Personal Information available to inPhronesis in compliance with the CCPA.

b. inPhronesis shall not (1) retain, use, or disclose Personal Information other than as provided for in the Agreement, as needed to perform the Services, to build or improve the quality of the Services, to detect security incidents, to protect against fraudulent or illegal activity, to employ subcontractors that qualify as Service Providers, or as otherwise permitted by the CCPA; or (2) sell such Personal Information.

c. Notwithstanding anything else in this CCPA Addendum or in the Agreement, Customer agrees that inPhronesis, its affiliates, and each of their directors, officers, employees, agents, representatives, successors and assigns will not be liable under the Agreement for any claim arising from any action or omission by inPhronesis that resulted from the Customer’s instructions or from Customer’s failure to comply with its obligations under the CCPA.