Common use of Authorized Sub-processors Clause in Contracts

Authorized Sub-processors. (a) Account Holder acknowledges and agrees that Workato may (i) engage its Affiliates and other Authorized Sub-Processors to access and Process Personal Data in connection with the Services and (ii) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the Processing of Personal Data. (b) Workato’s current Authorized Sub-Processors include the third-party Sub-Processors and the Workato Affiliates listed at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ (such URL may be updated by Workato from time to time, the “List”), as updated from time to time. At least thirty (30) days before enabling any third-party Sub-Processors other than Authorized Sub-Processors to access or participate in the Processing of Personal Data, Workato will add such third-party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via email. Account Holder may object to such an engagement in writing within ten (10) days of receipt of the aforementioned notice by Account Holder.‌ (i) If Account Holder reasonably objects to an engagement in accordance with this Section 4(b), Workato may provide Account Holder with a written description of commercially reasonable alternative(s), if any, to such engagement, including without limitation modification to the Services. If Workato, in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provided, either party may terminate this DPA and the Agreement upon written notice. Termination shall not relieve Account Holder of any fees owed to Workato under the Agreement. (ii) If Account Holder does not object to the engagement of a third-party Sub-Processor in accordance with this Section 4(b) within ten (10) days of notice by Workato, that third-party Sub- Processor will be deemed an Authorized Sub-Processor for the purposes of this DPA.‌ (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every Authorized Sub-Processor is subject to obligations regarding the Processing of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors to the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account Holder’s prior written consent to the subcontracting by Workato of the Processing of Personal Data if such consent is required under the Standard Contractual Clauses; and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato to Account Holder pursuant to Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato beforehand, and that such copies will be provided by Workato only upon request by Account ▇▇▇▇▇▇.

Authorized Sub-processors. Customer hereby generally authorizes Billtrust’s appointment Sub-processors in the context of the Processor Services on the following terms: (a) Account Holder acknowledges and agrees that Workato Billtrust may (i) engage its Affiliates and other Authorized continue to use those Sub-Processors to access and Process Personal Data in connection with processors already engaged by Billtrust as of the Services and (ii) from time to time engage additional third parties for the purpose date of providing the Servicesthis Addendum, including without limitation the Processing of Personal Data. (b) Workato’s current Authorized Sub-Processors include the third-party Sub-Processors and the Workato Affiliates listed as set out at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ - processors. (such URL may be updated by Workato from time to time, the “List”), as updated from time to time. At least thirty (30b) days before enabling any third-party Sub-Processors other than Authorized Sub-Processors to access or participate in the Processing of Personal Data, Workato will add such third-party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via email. Account Holder may object to such an engagement in writing within Billtrust shall provide Customer ten (10) days’ prior written notice of the appointment or replacement of any new Sub-processor by offering Customers a mechanism to subscribe to updates to the list of Billtrust Sub- processors. Within five (5) days of receipt posting each such notice, Customer may object to the appointment or replacement of a Subprocessor provided such objection is in writing and based on reasonable grounds relating to data protection. If Customer’s concerns cannot be resolved in a commercially reasonable manner within twenty (25) days of Billtrust receiving notice of Customer’s objection, Billtrust will either not appoint or replace the Sub- processor or, if this is not possible (in Billtrust’s discretion), either Party may terminate all or part of the aforementioned notice Agreement (without prejudice to any payments owed or fees incurred by Account Holder.‌ (i) If Account Holder reasonably Customer prior to termination). This termination right shall constitute Customer’s sole and exclusive remedy if Customer objects to an engagement Billtrust engaging a new or replacement Sub-processor, in accordance with this the above. Notwithstanding the foregoing, Billtrust may add or replace a Sub-processor (meeting the requirements of Section 4(b3.3(c)) immediately if it is necessary to ensure continuity of Processing or recovery in case of emergency, Workato may except as prohibited by Applicable Data Protection Laws. In such case, Billtrust will provide Account Holder with a written description of commercially reasonable alternative(s), if any, to such engagement, including without limitation modification to notice as far in advance as reasonably possible. In the Services. If Workato, in its sole discretion, event that the Customer does not provide any such alternative(s), or if Account Holder does not agree exercise its right to any such alternative(s) if provided, either party may terminate this DPA and the Agreement upon written notice. Termination shall not relieve Account Holder of any fees owed to Workato under the Agreement. (ii) If Account Holder does not object to the engagement of a third-party Sub-Processor processor in accordance with this Section 4(b) within ten (10) days of notice by Workatothe terms described above, that third-party Sub- Processor will silence shall be deemed to constitute an Authorized Sub-Processor for the purposes approval of this DPA.‌such engagement. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every Authorized With respect to each Sub-Processor is subject to obligations regarding the Processing of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato processor, Billtrust shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors to the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) carry out adequate due diligence to ensure that the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account Holder’s prior written consent to Sub-processor is capable of providing the subcontracting by Workato level of the Processing of protection and security for Personal Data if such consent is required under by this Addendum before the Standard Contractual ClausesSub-processor first Processes Personal Data; and (ii) impose terms between Billtrust and the parties agree .Sub-processor that offer substantially the copies same level of the agreements with Authorized Sub-Processors that must be provided by Workato to Account Holder pursuant to Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato beforehand, and that such copies will be provided by Workato only upon request by Account ▇▇▇▇▇▇protection for Personal Data as those set out in this Addendum.

Authorized Sub-processors. Customer hereby generally authorizes Billtrust’s appointment Sub-processors in the context of the Processor Services on the following terms: (a) Account Holder acknowledges and agrees that Workato Billtrust may (i) engage its Affiliates and other Authorized continue to use those Sub-Processors to access and Process Personal Data in connection with processors already engaged by Billtrust as of the Services and (ii) from time to time engage additional third parties for the purpose date of providing the Servicesthis Addendum, including without limitation the Processing of Personal Data. (b) Workato’s current Authorized Sub-Processors include the third-party Sub-Processors and the Workato Affiliates listed as set out at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇/sub-▇▇▇▇▇▇▇▇▇▇ processors/. (such URL may be updated by Workato from time to time, the “List”), as updated from time to time. At least thirty (30b) days before enabling any third-party Sub-Processors other than Authorized Sub-Processors to access or participate in the Processing of Personal Data, Workato will add such third-party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via email. Account Holder may object to such an engagement in writing within Billtrust shall provide Customer ten (10) days’ prior written notice of the appointment or replacement of any new Sub-processor by offering Customers a mechanism to subscribe to updates to the list of Billtrust Sub-processors. Within five (5) days of receipt posting each such notice, Customer may object to the appointment or replacement of a Sub- processor provided such objection is in writing and based on reasonable grounds relating to data protection. If Customer’s concerns cannot be resolved in a commercially reasonable manner within twenty (25) days of Billtrust receiving notice of Customer’s objection, Billtrust will either not appoint or replace the Sub-processor or, if this is not possible (in Billtrust’s discretion), either Party may terminate all or part of the aforementioned notice Agreement (without prejudice to any payments owed or fees incurred by Account Holder.‌ (i) If Account Holder reasonably Customer prior to termination). This termination right shall constitute Customer’s sole and exclusive remedy if Customer objects to an engagement Billtrust engaging a new or replacement Sub-processor, in accordance with this the above. Notwithstanding the foregoing, Billtrust may add or replace a Sub-processor (meeting the requirements of Section 4(b3.3(c)) immediately if it is necessary to ensure continuity of Processing or recovery in case of emergency, Workato may except as prohibited by Applicable Data Protection Laws. In such case, Billtrust will provide Account Holder with a written description of commercially reasonable alternative(s), if any, to such engagement, including without limitation modification to notice as far in advance as reasonably possible. In the Services. If Workato, in its sole discretion, event that the Customer does not provide any such alternative(s), or if Account Holder does not agree exercise its right to any such alternative(s) if provided, either party may terminate this DPA and the Agreement upon written notice. Termination shall not relieve Account Holder of any fees owed to Workato under the Agreement. (ii) If Account Holder does not object to the engagement of a third-party Sub-Processor processor in accordance with this Section 4(b) within ten (10) days of notice by Workatothe terms described above, that third-party Sub- Processor will silence shall be deemed to constitute an Authorized Sub-Processor for the purposes approval of this DPA.‌such engagement. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every Authorized With respect to each Sub-Processor is subject to obligations regarding the Processing of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato processor, Billtrust shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors to the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) carry out adequate due diligence to ensure that the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account Holder’s prior written consent to Sub-processor is capable of providing the subcontracting by Workato level of the Processing of protection and security for Personal Data if such consent is required under by this Addendum before the Standard Contractual ClausesSub-processor first Processes Personal Data; and (ii) impose terms between Billtrust and the parties agree that the copies of the agreements with Authorized Sub-Processors Processor that must be provided by Workato to Account Holder pursuant to Clause 9(c) offer substantially the same level of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato beforehand, and that such copies will be provided by Workato only upon request by Account ▇▇▇▇▇▇protection for Personal Data as those set out in this Addendum.

Authorized Sub-processors. Customer hereby generally authorizes Billtrust’s appointment Sub-processors in the context of the Processor Services on the following terms: (a) Account Holder acknowledges and agrees that Workato Billtrust may (i) engage its Affiliates and other Authorized continue to use those Sub-Processors to access and Process Personal Data in connection with processors already engaged by Billtrust as of the Services and (ii) from time to time engage additional third parties for the purpose date of providing the Servicesthis Addendum, including without limitation the Processing of Personal Data. (b) Workato’s current Authorized Sub-Processors include the third-party Sub-Processors and the Workato Affiliates listed as set out at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ ▇. (such URL may be updated by Workato from time to time, the “List”), as updated from time to time. At least thirty (30b) days before enabling any third-party Sub-Processors other than Authorized Sub-Processors to access or participate in the Processing of Personal Data, Workato will add such third-party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via email. Account Holder may object to such an engagement in writing within Billtrust shall provide Customer ten (10) days’ prior written notice of the appointment or replacement of any new Sub-processor by offering Customers a mechanism to subscribe to updates to the list of Billtrust Sub-processors. Within five (5) days of receipt posting each such notice, Customer may object to the appointment or replacement of a Sub- processor provided such objection is in writing and based on reasonable grounds relating to data protection. If Customer’s concerns cannot be resolved in a commercially reasonable manner within twenty (25) days of Billtrust receiving notice of Customer’s objection, Billtrust will either not appoint or replace the Sub-processor or, if this is not possible (in Billtrust’s discretion), either Party may terminate all or part of the aforementioned notice Agreement (without prejudice to any payments owed or fees incurred by Account Holder.‌ (i) If Account Holder reasonably Customer prior to termination). This termination right shall constitute Customer’s sole and exclusive remedy if Customer objects to an engagement Billtrust engaging a new or replacement Sub-processor, in accordance with this the above. Notwithstanding the foregoing, Billtrust may add or replace a Sub-processor (meeting the requirements of Section 4(b3.3(c)) immediately if it is necessary to ensure continuity of Processing or recovery in case of emergency, Workato may except as prohibited by Applicable Data Protection Laws. In such case, Billtrust will provide Account Holder with a written description of commercially reasonable alternative(s), if any, to such engagement, including without limitation modification to notice as far in advance as reasonably possible. In the Services. If Workato, in its sole discretion, event that the Customer does not provide any such alternative(s), or if Account Holder does not agree exercise its right to any such alternative(s) if provided, either party may terminate this DPA and the Agreement upon written notice. Termination shall not relieve Account Holder of any fees owed to Workato under the Agreement. (ii) If Account Holder does not object to the engagement of a third-party Sub-Processor processor in accordance with this Section 4(b) within ten (10) days of notice by Workatothe terms described above, that third-party Sub- Processor will silence shall be deemed to constitute an Authorized Sub-Processor for the purposes approval of this DPA.‌such engagement. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every Authorized With respect to each Sub-Processor is subject to obligations regarding the Processing of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato processor, Billtrust shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors to the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) carry out adequate due diligence to ensure that the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account Holder’s prior written consent to Sub-processor is capable of providing the subcontracting by Workato level of the Processing of protection and security for Personal Data if such consent is required under by this Addendum before the Standard Contractual ClausesSub-processor first Processes Personal Data; and (ii) impose terms between Billtrust and the parties agree that the copies of the agreements with Authorized Sub-Processors Processor that must be provided by Workato to Account Holder pursuant to Clause 9(c) offer substantially the same level of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato beforehand, and that such copies will be provided by Workato only upon request by Account ▇▇▇▇▇▇protection for Personal Data as those set out in this Addendum.

Authorized Sub-processors. (a) Account Holder acknowledges and agrees that Workato may (i) engage its Affiliates and other Authorized Sub-Processors to access and Process Personal Data in connection with the Services and (ii) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the Processing of Personal Data. (b) Workato’s current Authorized Sub-Processors include the third-party Sub-Processors and the Workato Affiliates are listed at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ (such URL may be updated by Workato from time to time, the “List”), as updated . Workato may from time to time. At time engage new Sub-Processors, provided that at least thirty (30) days before enabling any third-party Sub-Processors other than Authorized new Sub-Processors to access or participate in the Processing of Process Personal Data, Workato will add such third-party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via emailthe email address provided by Account Holder. Account Holder may object to such an engagement in writing based on reasonable grounds within ten (10) days of receipt of the aforementioned notice by Account Holder.‌ (i) If Account Holder reasonably objects to an engagement in accordance with this Section 4(b), Workato may provide Account Holder with a written description of commercially reasonable alternative(s), if any, to such engagement, including without limitation modification to the Servicesnotice. If Workato, the parties cannot resolve Account Holder’s objection in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provideda reasonable manner, either party may terminate this DPA and the Agreement affected Services upon written notice, and Workato will refund any unused, pre-paid fees for the affected Services following the effective date of the termination. Termination shall not relieve Account Holder of any fees owed to Workato under the Agreement. (ii) If Account Holder does not object to the engagement of a third-party proposed Sub-Processor in accordance with this Section 4(b) within ten (10) days of notice by Workatothe period above, that thirdthe new Sub-party Sub- Processor will be deemed an Authorized Sub-Sub- Processor for the purposes of this DPA.‌DPA. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every Authorized Sub-Processor is subject to obligations regarding the Processing of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors to the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data)Clauses, (i) the above authorizations in Section 4(b) (Authorized Sub- Sub-Processors) will constitute Account Holder’s prior written consent to the subcontracting by Workato of the Processing of Personal Data if such consent is required under the Standard Contractual Clauses; and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato to Account Holder pursuant to Clause 9(c) of the EU SCCs (or the similar provisions under other applicable Standard Contractual Clauses) may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato beforehand, and that such copies will be provided by Workato only upon request by Account ▇▇▇▇▇▇Holder.

Authorized Sub-processors. 4.1 Customer agrees that (a) Account Holder acknowledges and agrees that Workato Sigma may (i) engage its Affiliates and other Authorized Sub-Processors to access and Process Personal Data in connection with the Services and (ii) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the Processing of Personal Data. (b) Workato’s current Authorized Sub-Processors include the third-party Sub-Processors and the Workato Affiliates processors as listed at ▇▇▇▇▇://▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇.▇▇▇ ▇/product/security/subprocessors/ (such URL “Sub-Processor Page”) which may be updated by Workato from time to time, the “List”), as updated from time to timetime and (b) such Affiliates and Sub-Processors respectively may engage third party Sub-Processors to process the Personal Data on Sigma’s behalf. By way of this Addendum, Customer provides general written authorization to Sigma to engage Sub-Processors as necessary to perform the Service. 4.2 At least thirty ten (3010) days before enabling any third-party Sub-Processors other than Authorized Sub-Processors to access or participate in the Processing processing of Personal Data, Workato Sigma will add such third-third party to the Sub-Processors and Affiliates Processor Page. Sigma will provide written notification of a new Sub-Processor before authorizing any new Sub-Processor to the List and notify Account Holder of such updates via emailprocess any Personal Data. Account Holder Customers may reasonably object to such an engagement on legitimate grounds by informing Sigma in writing within ten (10) days of receipt being informed of the aforementioned notice by Account Holder.‌such new Sub-Processor. (i) 4.3 If Account Holder Customer reasonably objects to an engagement in accordance with this Section 4(b)4.2, Workato may and Sigma cannot provide Account Holder with a written description of commercially reasonable alternative(s)alternative within a reasonable period of time, if any, to such engagement, including without limitation modification to the Services. If Workato, in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provided, either party Sigma may terminate this DPA Addendum as Customer’s sole and the Agreement upon written noticeexclusive remedy for such objection. Termination shall not relieve Account Holder Customer of any fees owed to Workato Sigma under the Agreement. (ii) 4.4 If Account Holder Customer does not object to the engagement of a third-third party Sub-Processor in accordance with this Section 4(b) 4.2 within ten (10) days of notice by Workato▇▇▇▇▇, that third-third party Sub- Processor will be deemed an Authorized Sub-Processor for the purposes of this DPA.‌Addendum. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every 4.5 Sigma will enter into a written agreement with the Authorized Sub-Processor is subject imposing on the Authorized Sub-Processor data protection obligations comparable to obligations regarding those imposed on Sigma under this Addendum with respect to the Processing protection of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato shall be liable to Account Holder for the acts and omissions of Data. In case an Authorized Sub-Processors fails to fulfil its data protection obligations under such written agreement with Sigma, Sigma will remain liable to Customer for the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account Holder’s prior written consent to the subcontracting by Workato performance of the Processing of Personal Data if such consent is required under the Standard Contractual Clauses; and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato to Account Holder pursuant to Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato beforehand, and that Processor’s obligations under such copies will be provided by Workato only upon request by Account ▇▇▇▇▇▇agreement.

Authorized Sub-processors. (a) Account Holder acknowledges and agrees that Workato may (i) engage its Affiliates and other Authorized Sub-Processors to access and Process Personal Data in connection with the Services and (ii) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the Processing of Personal Data. (b) Workato’s current Authorized Sub-Processors include the third-party Sub-Processors and the Workato Affiliates are listed at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ (such URL may be updated by Workato from time to time, the “List”), as updated . Workato may from time to time. At time engage new Sub-Processors, provided that at least thirty (30) days before enabling any third-party Sub-Processors other than Authorized new Sub-Processors to access or participate in the Processing of Process Personal Data, Workato will add such third-party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via emailthe email address provided by Account Holder. Account Holder may object to such an engagement in writing based on reasonable grounds within ten (10) days of receipt of the aforementioned notice by Account Holder.‌ (i) If Account Holder reasonably objects to an engagement in accordance with this Section 4(b), Workato may provide Account Holder with a written description of commercially reasonable alternative(s), if any, to such engagement, including without limitation modification to the Servicesnotice. If Workato, the parties cannot resolve Account Holder’s objection in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provideda reasonable manner, either party may terminate this DPA and the Agreement affected Services upon written notice, and Workato will refund any unused, pre-paid fees for the affected Services following the effective date of the termination. Termination shall not relieve Account Holder of any fees owed to Workato under the Agreement. (ii) If Account Holder does not object to the engagement of a third-party proposed Sub-Processor in accordance with this Section 4(b) within ten (10) days of notice by Workatothe period above, that thirdthe new Sub-party Sub- Processor will be deemed an Authorized Sub-Sub- Processor for the purposes of this DPA.‌DPA. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every Authorized Sub-Processor is subject to obligations regarding the Processing of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors to the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data)Clauses, (i) the above authorizations in Section 4(b) (Authorized Sub- Sub-Processors) will constitute Account Holder’s prior written consent to the subcontracting by Workato of the Processing of Personal Data if such consent is required under the Standard Contractual Clauses; and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato to Account Holder pursuant to Clause 9(c) of the EU SCCs (or the similar provisions under other applicable Standard Contractual Clauses) may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato beforehand, and that such copies will be provided by Workato only upon request by Account ▇▇▇▇▇▇Holder.

Authorized Sub-processors. (a) Account Holder 4.1 Customer acknowledges and agrees that Workato Company may (i1) engage its Affiliates affiliates and other the Authorized Sub-Processors listed in Exhibit B to this Addendum to access and Process process Personal Data in connection with the Services and (ii2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the Processing processing of Personal Data. By way of this Addendum, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. (b) Workato4.2 A list of Company’s current Authorized Sub-Processors include (the third-party Sub-Processors and the Workato Affiliates listed “List”) will be made available to Customer, either attached hereto, at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ (such URL a link provided to Customer, via email or through another means made available to Customer. Such List may be updated by Workato from time to time, the “List”), as updated Company from time to time. Company may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Customer agrees to subscribe to such notifications where available. At least thirty ten (3010) days before enabling any third-third party Sub-Processors other than existing Authorized Sub-Processors to access or participate in the Processing processing of Personal Data, Workato Company will add such third-third party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via emaillist. Account Holder Customer may object to such an engagement in writing by informing Company within ten (10) days of receipt of the aforementioned notice by Account Holder.‌Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. (i) 4.3 If Account Holder Customer reasonably objects to an engagement in accordance with this Section 4(b)4.2, Workato may and Company cannot provide Account Holder with a written description of commercially reasonable alternative(s)alternative within a reasonable period of time, if any, Customer may discontinue the use of the affected Service by providing written notice to such engagement, including without limitation modification to the ServicesCompany. If Workato, in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provided, either party may terminate this DPA and the Agreement upon written notice. Termination Discontinuation shall not relieve Account Holder Customer of any fees owed to Workato Company under the Agreement. (ii) 4.4 If Account Holder Customer does not object to the engagement of a third-third party Sub-Processor in accordance with this Section 4(b) 4.2 within ten (10) days of notice by WorkatoCompany, that third-third party Sub- Processor will be deemed an Authorized Sub-Processor for the purposes of this DPA.‌Addendum. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every 4.5 Company will enter into a written agreement with the Authorized Sub-Processor is subject to obligations regarding imposing on the Processing of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors Processor data protection obligations comparable to those imposed on Company under this Addendum with respect to the same extent that Workato would itself be protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under this DPA had it conducted such acts or omissions. agreement. 4.6 If Account Holder Customer and Workato Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account HolderCustomer’s prior written consent to the subcontracting by Workato Company of the Processing processing of Personal Data if such consent is required under the Standard Contractual Clauses; , and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato Company to Account Holder Customer pursuant to Clause 5(j) of the UK SCCs or Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato Company beforehand, and that such copies will be provided by Workato the Company only upon request by Account ▇▇▇▇▇▇Customer.

Authorized Sub-processors. (a) Account Holder 5.1 Controller acknowledges and agrees that Workato Processor may (i1) engage its Affiliates affiliates and other the Authorized Sub-Processors listed in Exhibit C to this Addendum to access and Process Personal Data in connection with the Services and (ii2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the Processing of Personal Data. By way of this Addendum, Controller provides general written authorization to Processor to engage sub-processors as necessary to perform the Services. (b) Workato5.2 A list of Processor’s current Authorized Sub-Processors include (the third-party Sub-Processors and the Workato Affiliates listed “List”) will be made available to Controller, either attached hereto, at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ (such URL a link provided to Controller, via email or through another means made available to Controller. Such List which may be updated by Workato from time to time, the “List”), as updated Processor from time to time. The List may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and Controller agrees to subscribe to such notifications where available. At least thirty ten (3010) days before enabling any third-third party Sub-Processors other than Authorized Sub-Processors to access or participate in the Processing of Personal Data, Workato Processor will add such third-third party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via emailList. Account Holder Controller may reasonably object to such an engagement on legitimate grounds by informing Processor in writing within ten (10) days of receipt of the aforementioned notice by Account Holder.‌Controller. Controller acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Processor from offering the Services to Controller. (i) 5.3 If Account Holder Controller reasonably objects to an engagement in accordance with this Section 4(b)5.2, Workato may and Processor cannot provide Account Holder with a written description of commercially reasonable alternative(s)alternative within a reasonable period of time, if any, to such engagement, including without limitation modification to the Services. If Workato, in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provided, either party Processor may terminate this DPA and the Agreement upon written noticeAddendum. Termination shall not relieve Account Holder Controller of any fees owed to Workato Processor under the Agreement. (ii) 5.4 If Account Holder Controller does not object to the engagement of a third-third party Sub-Processor in accordance with this Section 4(b) 5.2 within ten (10) days of notice by WorkatoProcessor, that third-third party Sub- Processor will be deemed an Authorized Sub-Processor for the purposes of this DPA.‌Addendum. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every 5.5 Processor will enter into a written agreement with the Authorized Sub-Processor is subject imposing on the Authorized Sub-Processor data protection obligations comparable to obligations regarding those imposed on Processor under this Addendum with respect to the Processing protection of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato shall be liable to Account Holder for the acts and omissions of Data. In case an Authorized Sub-Processors fails to fulfill its data protection obligations under such written agreement with Processor, Processor will remain liable to Controller for the performance of the Authorized Sub-Processor’s obligations under such agreement 5.6 Pursuant to the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 7 (Transfers of Personal Data), (i) the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account HolderController’s prior written consent to the subcontracting by Workato Processor of the Processing processing of Personal Data if such consent is required under the Standard Contractual Clauses; , and (ii) the parties agree that the copies of the agreements with Authorized Sub-Sub- Processors that must be provided by Workato Processor to Account Holder Controller pursuant to Clause 9(c5(j) of the EU SCCs Standard Contractual Clauses may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato Processor beforehand, and that such copies will be provided by Workato the Processor only upon request by Account ▇▇▇▇▇▇Controller.

Authorized Sub-processors. (a) Account Holder acknowledges 4.1 You acknowledge and agrees agree that Workato we may (i1) engage its Affiliates our affiliates and other the Authorized Sub-Processors to access and Process Personal Data in connection with the SignalWire Services and (ii2) from time to time engage additional third parties for the purpose of providing the SignalWire Services, including without limitation the Processing of Personal Data. By way of this Addendum, you provide general written authorization to us to engage Sub-Processors as necessary to perform the SignalWire Services. (b) Workato’s 4.2 A list of our current Authorized Sub-Processors include (the third-party Sub-Processors and the Workato Affiliates listed “List”) will be made available to you, either at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ (such URL a link provided to you, via email or through another means made available to you. Such List which may be updated by Workato from time to time, the “List”), as updated SignalWire from time to time. The List may provide a mechanism to subscribe to notifications of new Authorized Sub-Processors and you agree to subscribe to such notifications where available. At least thirty ten (3010) days before enabling any third-third party Sub-Processors other than Authorized Sub-Processors to access or participate in the Processing of Personal Data, Workato we will add such third-third party Sub-Processors and Affiliates to the List and notify Account Holder of such updates via emailList. Account Holder You may reasonably object to such an engagement on legitimate grounds by informing us in writing within ten (10) days of receipt of the aforementioned notice by Account Holder.‌you. You acknowledge that certain Sub-Processors are essential to providing the SignalWire Services and that objecting to the use of a Sub-Processor may prevent us from offering the SignalWire Services to you. (i) 4.3 If Account Holder you reasonably objects object to an engagement in accordance with this Section 4(b)4.2, Workato may and we cannot provide Account Holder with a written description of commercially reasonable alternative(s)alternative within a reasonable period of time, if any, to such engagement, including without limitation modification to the Services. If Workato, in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provided, either party we may terminate this DPA and the Agreement upon written noticeAddendum. Termination shall not relieve Account Holder you of any fees owed to Workato us under the Agreement. (ii) 4.4 If Account Holder does you do not object to the engagement of a third-third party Sub-Processor in accordance with this Section 4(b) 4.2 within ten (10) days of notice by Workatous, that third-third party Sub- Processor will be deemed an Authorized Sub-Processor for the purposes of this DPA.‌Addendum. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every 4.5 We will enter into a written agreement with the Authorized Sub-Processor is subject imposing on the Authorized Sub-Processor data protection obligations comparable to obligations regarding those imposed on us under this Addendum with respect to the Processing protection of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato shall be liable to Account Holder for the acts and omissions of Data. In case an Authorized Sub-Processors fails to fulfill its data protection obligations under such written agreement with us, we will remain liable to you for the same extent that Workato would itself be liable performance of the Authorized Sub-Processor’s obligations under this DPA had it conducted such acts or omissions. agreement 4.6 If Account Holder you and Workato SignalWire have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), , (i) the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account Holder’s your prior written consent to the subcontracting by Workato us of the Processing processing of Personal Data if such consent is required under the Standard Contractual Clauses; , and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato us to Account Holder you pursuant to Clause 9(c5(j) of the EU SCCs Standard Contractual Clauses may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato us beforehand, and that such copies will be provided by Workato us only upon request by Account ▇▇▇▇▇▇you.

Authorized Sub-processors. (a) Account Holder acknowledges and 4.1 Controller agrees that Workato may (i) Processor has general authority to engage third parties, partners, agents, or service providers, including its Affiliates and other Authorized Sub-Processors Affiliates, to access and Process Personal Data on Controller’s behalf in connection with order to provide the Services and solutions contemplated in the Agreement agreed to by Controller (ii) from time “Authorized Subprocessors”). Processor shall not engage a subprocessor to time engage additional third parties for carry out specific Processing activities which fall outside the purpose of providing general authority granted above without Controller’s prior specific written authorization and, where such subprocess is so engaged, Processor shall ensure that the Services, including without limitation the Processing of Personal Datasame obligations set out in this Addendum shall be imposed on that subprocessor. (b) Workato4.2 A list of Processor’s current Authorized Sub-Processors include (the third-party Sub-Processors and the Workato Affiliates listed “List”) is available to Controller at ▇▇▇.▇▇▇▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ (such URL ▇, which may be updated by Workato from time to time, the “List”), as updated Processor from time to time. Controller agrees to subscribe to receive notifications from the List of new Authorized Sub-Processors. At least thirty ten (3010) days before enabling any third-third party Sub-Processors other than current Authorized Sub-Processors to access or participate in the Processing of Personal Data, Workato Processor will add such third-third party Sub-Processors and Affiliates to the List. Controller may reasonably object to the addition of any such third parties to the List and notify Account Holder of such updates via email. Account Holder may object to such an engagement by informing Processor in writing within ten (10) days of receipt of the aforementioned notice by Account Holder.‌Controller. (i) 4.3 If Account Holder Controller reasonably objects to an engagement in accordance with this Section 4(b)4.2, Workato may and Processor cannot provide Account Holder with a written description of commercially reasonable alternative(s)alternative within a reasonable period of time, if any, to such engagement, including without limitation modification to the Services. If Workato, in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provided, either party Processor may terminate this DPA and the Agreement upon written noticeAgreement. Termination shall not relieve Account Holder Controller of any fees owed to Workato Processor under the Agreement. (ii) . If Account Holder Controller does not object to the engagement of a third-third party Sub-Processor in accordance with this Section 4(b) 4.2 within ten (10) days of notice by WorkatoProcessor, that third-third party Sub- Processor will be deemed an Authorized Sub-Processor for the purposes of this DPA.‌Addendum. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every 4.4 Processor will enter into a written agreement with each Authorized Sub-Processor is subject that imposes obligations to obligations regarding the Processing of protect Personal Data that are no less protective than comparable to those to which Workato is subject imposed on Processor under this DPA. (d) Workato shall be Addendum. Processor will remain liable to Account Holder Controller for the acts and omissions non-performance of the Authorized Sub-Processors to the same extent that Workato would itself be liable Processor’s data protection obligations under this DPA had it conducted such acts or omissions. agreement 4.5 If Account Holder Controller and Workato Processor have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account HolderController’s prior written consent to the subcontracting by Workato Processor of the Processing processing of Personal Data if such consent is required under the Standard Contractual Clauses; , and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato Processor to Account Holder Controller pursuant to Clause 9(c5(j) of the EU SCCs Standard Contractual Clauses may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato Processor beforehand, and that such copies will be provided by Workato the Processor only upon request by Account ▇▇▇▇▇▇Controller.

Authorized Sub-processors. (a) Account Holder 4.1 Merchant acknowledges and agrees that Workato may Recurly may, as specified in Annex B, (i1) engage its Affiliates affiliates and other the Authorized Sub-Sub- Processors listed at ▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇/legal/privacy/subprocessors to access and accessand Process Personal Data in connection with the withthe Services and (ii2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the Processing of Personal Data. By way of this Addendum, ▇▇▇▇▇▇▇▇ provides general written authorization to Recurly to engage sub- processors as necessary to perform the Services. (b) Workato4.2 A list of Recurly’s current Authorized Sub-Processors include (the third-party Sub-Processors and the Workato Affiliates listed “List”) is available at ▇▇▇.▇▇://▇▇▇▇▇▇▇.▇▇▇/legal/▇▇▇▇▇privacy/▇▇▇-▇▇subprocessors. Such List may be updated by Recurly from time to time. ▇▇▇▇▇▇▇▇ (such URL may acknowledges and agrees that it is solely responsible for subscribing to notifications of changes, which notification mechanism will be updated by Workato from time available through the List, in order to time, the “List”), as updated from time to time. At least thirty (30) days before enabling any third-party Sub-Processors other than be notified of new Authorized Sub-Processors to access or participate in the Processing of Personal DataProcessors. ▇▇▇▇▇▇▇▇ also acknowledges and that, Workato will add such third-party Sub-Processors and Affiliates to aside from updating the List and notify Account Holder informing Merchant that the List has been updated, Recurly shall have no obligation to inform Merchant ofany additional Authorized Sub-Processors. If the parties have entered into the Standard Contractual Clauses, the notification requirements set out in Clause 9 will control. Merchant acknowledges that certain sub- processors are essential to providing the Services and that objecting to the use of such updates via email. Account Holder a sub-processor may object prevent Recurly from offering the Services to such an engagement in writing within ten (10) days of receipt of the aforementioned notice by Account Holder.‌Merchant. (i) 4.3 If Account Holder Merchant reasonably objects to an engagement in accordance with this Section 4(b)4.2, Workato may and Recurly cannot provide Account Holder with a written description of commercially reasonable alternative(s)alternative within a reasonable period of time, if any, to such engagement, including without limitation modification to the Services. If Workato, in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provided, either party Recurly may terminate this DPA and the Agreement upon written noticeor this Addendum. Termination shall not relieve Account Holder Merchant of any fees owed to Workato under the Recurly underthe Agreement. (ii) 4.4 If Account Holder Merchant does not object to the engagement of a third-third party Sub-Processor in accordance with this Section 4(b) within ten (10) days of notice by Workato4.2, that third-third party Sub- Processor will be deemed an Authorized Sub-Processor for the purposes of this DPA.‌Addendum. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every 4.5 Recurly will enter into a written agreement with the Authorized Sub-Processor is subject imposing the same data protection obligations on the Authorized Sub-Processor as those imposed on Recurly under this Addendum and by applicable Data Protection Laws with respect to obligations regarding the Processing protection of Personal Data that are no less protective than those to which Workato is subject under this DPAData. (d) Workato shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors to the same extent that Workato would itself be liable under this DPA had it conducted such acts or omissions. If Account Holder and Workato have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the The above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account HolderMerchant’s prior written consent to the subcontracting by Workato Recurly of the Processing processing of Personal Data if such consent is required under the Standard Contractual Clauses; , and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato Recurly to Account Holder Merchant pursuant to Clause 9(c) of the EU SCCs Standard Contractual Clauses may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato beforehand, and that such copies will be provided by Workato Recurly only upon request by Account ▇▇▇▇▇▇▇▇.

Authorized Sub-processors. (a) Account Holder 4.1 Customer acknowledges and agrees that Workato Company may (i1) engage its Affiliates and other the Authorized Sub-Processors listed in Exhibit B to this DPA to access and Process process Personal Data in connection with the Services and (ii2) from time to time engage additional third parties for the purpose of providing the Services, including without limitation the Processing processing of Personal Data. By way of this DPA, Customer provides general written authorization to Company to engage sub-processors as necessary to perform the Services. (b) Workato4.2 A list of Company’s current Authorized Sub-Processors include (the third-party Sub-Processors and “List”) will be made available to the Workato Affiliates listed program manager or other administrative user of Customer, either attached hereto, at ▇▇▇.▇▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇/▇▇▇-▇▇▇▇▇▇▇▇▇▇ (a link provided to the program manager or other administrative user of Customer, via email or through another means made available to such URL the program manager or other administrative user. Such List may be updated by Workato from time to time, the “List”), as updated Company from time to time. At least thirty ten (3010) days before enabling any third-third party Sub-Processors other than existing Authorized Sub-Processors to access or participate in the Processing processing of Personal Data, Workato Company will add such third-third party Sub-Processors and Affiliates to the List and notify Account Holder the program manager or other administrative user of such updates Customer via email. Account Holder Customer may object to such an engagement in writing by informing Company within ten (10) days of receipt of the aforementioned notice by Account Holder.‌Customer, provided such objection is in writing and based on reasonable grounds relating to data protection. Customer acknowledges that certain sub-processors are essential to providing the Services and that objecting to the use of a sub-processor may prevent Company from offering the Services to Customer. (i) 4.3 If Account Holder Customer reasonably objects to an engagement in accordance with this Section 4(b)4.2, Workato may and Company cannot provide Account Holder with a written description of commercially reasonable alternative(s)alternative within a reasonable period of time, if any, Customer may discontinue the use of the affected Service by providing written notice to such engagement, including without limitation modification to the ServicesCompany. If Workato, in its sole discretion, does not provide any such alternative(s), or if Account Holder does not agree to any such alternative(s) if provided, either party may terminate this DPA and the Agreement upon written notice. Termination Discontinuation shall not relieve Account Holder Customer of any fees owed to Workato Company under the Agreement. (ii) 4.4 If Account Holder Customer does not object to the engagement of a third-third party Sub-Processor in accordance with this Section 4(b) 4.2 within ten (10) days of notice by WorkatoCompany, that third-third party Sub- Processor will be deemed an Authorized Sub-Processor for the purposes of this DPA.‌DPA. (c) Workato shall, by way of contract or other legal act under Data Protection Laws (including Standard Contractual Clauses), ensure that every 4.5 Company will enter into a written agreement with the Authorized Sub-Processor is subject to obligations regarding imposing on the Processing of Personal Data that are no less protective than those to which Workato is subject under this DPA. (d) Workato shall be liable to Account Holder for the acts and omissions of Authorized Sub-Processors Processor data protection obligations comparable to the same extent that Workato would itself be liable those imposed on Company under this DPA had it conducted with respect to the protection of Personal Data. In case an Authorized Sub-Processor fails to fulfill its data protection obligations under such acts or omissions. written agreement with Company, Company will remain liable to Customer for the performance of the Authorized Sub-Processor’s obligations under such agreement. 4.6 If Account Holder Customer and Workato Company have entered into Standard Contractual Clauses as described in Section 6 (Transfers of Personal Data), (i) the above authorizations in Section 4(b) (Authorized Sub- Processors) will constitute Account HolderCustomer’s prior written consent to the subcontracting by Workato Company of the Processing processing of Personal Data if such consent is required under the Standard Contractual Clauses; , and (ii) the parties agree that the copies of the agreements with Authorized Sub-Processors that must be provided by Workato Company to Account Holder Customer pursuant to Clause 9(c) of the EU SCCs may have commercial information, or information unrelated to the Standard Contractual Clauses or their equivalent, removed by the Workato Company beforehand, and that such copies will be provided by Workato the Company only upon request by Account ▇▇▇▇▇▇Customer.