Common use of Onboarding Clause in Contracts

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Offboarding • The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Collaboration agreement Not required. Limit on Parties’ liability The annual total liability for Buyer Data defaults will not exceed £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). The annual total liability for all other defaults will not exceed the greater of £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Insurance The insurance(s) required will be: ● A minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● Professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employers' liability insurance with a minimum limit of £5,000,000 or any higher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. Buyer’s equipment No equipment will be provided to the supplier, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and payment

Onboarding. The onboarding plan for this Call-Off Contract is not requiredto introduce the Supplier to the key stakeholders in CO-D and GDS who are responsible for the CO technical services used for the BDS. See Additional Services fieldRequired security clearances to be assessed and addressed where necessary. Offboarding • The onboarding offboarding plan for this Call-Off Contract is minimal where the Supplier will not retain any data or digital exclusivity related to the BDS at Call-Off Contract expiry. The Supplier shall provide training to IPA to ensure minimal service operation can be exercised, specifically data upload, once the Supplier leaves. IT infrastructure is compliant with CO-D and CDDO guidance, thereby minimising the documentation required. See Additional Services fieldThe Supplier shall provide: 1. Documentation on service operation and features, including change control; and 2. User Guide for the BDS, developed with the Buyer. Collaboration agreement Not required. Limit on Parties’ liability The annual total liability for Buyer Data defaults will not exceed £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). The annual total liability for all other defaults will not exceed the greater of £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Applicable Insurance The Supplier insurance(s) required will be: ● A minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● Contract] Professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employers)] employers' liability insurance with a minimum limit of £5,000,000 or any higher minimum limit required by Law Force majeure A Party may End Buyer’s responsibilities The Buyer is responsible for the provision of data the BDS requires to deliver its intended value to stakeholders and end users. This includes identifying what data is required and the corresponding format. Since the Buyer does not yet have direct access to most of the required data, there is a dependency on the data owner, i.e., HMG department. The Buyer is also responsible for the payment of Charges and fulfilment of responsibilities as set forth in this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be deliveredContract. Buyer’s equipment No equipment will be provided required from the Buyer. The Supplier does not require a Cabinet Office Laptop during this Call-Off Contract since the appropriate Cabinet Office Platforms are accessible to support the supplier, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the serviceBenchmarking Data Service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Evalian Limited (▇▇▇▇▇▇▇▇) Call-Off Contract charges and paymentpayment The Call-Off Contract charges and payment details are in the table below. See Schedule 2 for a full breakdown. Payment method The payment method for this Call-Off Contract is BACS Payment profile The payment profile for this Call-Off Contract is monthly in arrears.

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services fieldto be agreed between the Parties. Offboarding • The onboarding offboarding plan for this Call-Off Contract is not required. See Additional Services fieldto be agreed between the Parties. Collaboration agreement Not requiredused. Limit on Parties’ liability Defaults by either party resulting in direct loss to the property (including technical infrastructure, assets or equipment but excluding any loss or damage to Buyer Data) of the other Party will not exceed 125% of the charges paid or payable by the Buyer to the Supplier per year. The annual total liability of the Supplier for Buyer Data defaults Defaults resulting in direct loss, destruction, corruption, degradation or damage to any Buyer Data will not exceed £1,000,000.00 1,000,000 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). The annual total liability of the Supplier for all other defaults Defaults will not exceed the greater of £1,000,000.00 1,000,000 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Insurance The Supplier insurance(s) required will be: ● A a minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● Professional professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employers● employers' liability insurance with a minimum limit of £5,000,000 or any higher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit Buyer’s responsibilities The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access Granting access to the necessary UK Government/MOD IT relevant site; and telecommunications resources Granting access to carry these services • The issue the appropriate people, documentation, data, and systems. Timely on-boarding of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be deliveredSupplier resources. Timely approval of Supplier timesheets. Holding back-up copies of Buyer data. Buyer’s equipment No equipment will be provided Not applicable to the supplier, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the servicethis software only contract. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A • Tenable Inc. Call-Off Contract charges and payment

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Offboarding • The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Collaboration agreement Not required. Limit on Parties’ liability The annual total liability for Buyer Data defaults will not exceed £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). The annual total liability for all other defaults will not exceed the greater of £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Insurance The insurance(s) required will be: ● A minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● Professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employers' liability insurance with a minimum limit of £5,000,000 or any higher anyhigher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. delivered Buyer’s equipment No equipment will be provided to the supplier, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and paymentpayment The Call-Off Contract charges and payment details are in the table below. See Schedule 2 for a full breakdown. Payment method The payment method for this Call-Off Contract is CP&F. Payment profile The payment profile for this Call-Off Contract is monthly in arrears. Invoice details The Supplier will issue electronic invoices by EXOSTAR monthly in arrears. The Buyer will pay the Supplier within 30 days of receipt of a valid invoice. Who and where to send invoices to Invoices will be sent to Navy Command Digital & IT Directorate via EXOSTAR & CP&F. Invoice information required All invoices must include: • Contract number – 701554435 • Analysis For The Exploitation Of O365 For The Joint Cross Domain Exchange (JCDX) Cloud Based System • Service provided & deliverables • Purchase Order number (when known) Invoice frequency Invoices will be sent to the Buyer monthly in arrears. Call-Off Contract value The total value of this Call-Off Contract is £99,992.00 ex VAT Additional Buyer terms Performance of the Service and Deliverables Not applicable – Billing for services delivered will be made monthly in arrears. Guarantee N/A Supplemental requirements in addition to the Call-Off terms Within the scope of the Call-Off Contract, the Supplier will ensure that all contractors engaged in the delivery of this task hold valid Security Check (SC) Security Clearance. The following Defence Conditions will apply: • DEFCON 658 (Edn 10/17) – Cyber Essentials • DEFCON 76 (Edn 12/06) - Contractor's Personnel at Government Establishments • JSP440 Part 2 V6.0 Leaflet 13 Para 35B – “The requirement under DEFCON 659A for the provision of a ▇▇▇ is waived as all work on the contract will be carried out on Government premises only”. Buyer specific amendments to/refinements of the Call-Off Contract terms Within the scope of the Call-Off Contract, the Supplier will [enter amendments or refinements]. [Delete if not relevant] Personal Data and Data Subjects Will Schedule 7 – Processing, Personal Data and Data Subjects be used - No

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Offboarding • The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Collaboration agreement Not required. Limit on Parties’ liability The annual total liability for Buyer Data defaults will not exceed £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). The annual total liability for all other defaults will not exceed the greater of £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Insurance The insurance(s) required will be: ● A minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● Professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employers' liability insurance with a minimum limit of £5,000,000 or any higher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. delivered Buyer’s equipment No equipment will be provided to the supplier, ; however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and paymentpayment The Call-Off Contract charges and payment details are in the table below. See Schedule 2 for a full breakdown. Payment method The payment method for this Call-Off Contract is CP&F. Payment profile The payment profile for this Call-Off Contract is monthly in arrears. Invoice details The Supplier will issue electronic invoices by EXOSTAR monthly in arrears. The Buyer will pay the Supplier within 30 days of receipt of a valid invoice. Who and where to send invoices to Invoices will be sent to Navy Command Digital & IT Directorate via EXOSTAR & CP&F. Invoice information required All invoices must include: • Contract number – 701582450 • Contract title - Data & Cloud Services Enablement for NDS • Service provided & deliverables • Purchase Order number (when known) Invoice frequency Invoices will be sent to the Buyer monthly in arrears. Call-Off Contract value The total value of this Call-Off Contract is £3,499,478.00 ex VAT Call-Off Contract charges * Additional Buyer terms Performance of the Service and Deliverables Not applicable – Billing for services delivered will be made monthly in arrears. Guarantee N/A Supplemental requirements in addition to the Call-Off terms Within the scope of the Call-Off Contract, the Supplier will ensure that all contractors engaged in the delivery of this task hold valid Security Check (SC) Security Clearance. The following Defence Conditions will apply: • DEFCON 658 (Edn 10/17) – Cyber Essentials • DEFCON 76 (Edn 12/06) - Contractor's Personnel at Government Establishments • JSP440 Part 2 V6.0 Leaflet 13 Para 35B – “The requirement under DEFCON 659A for the provision of a ▇▇▇ is waived as all work on the contract will be carried out on Government premises only”. Buyer specific amendments to/refinements of the Call-Off Contract terms Within the scope of the Call-Off Contract, the Supplier will [enter amendments or refinements]. [Delete if not relevant] Personal Data and Data Subjects Will Schedule 7 – Processing, Personal Data and Data Subjects be used - No

Onboarding. The onboarding plan for this Call-Off Contract is not requiredas follows; The Supplier will be required to work with the in-house Analysis & Design Team to establish a detailed API Design and Security specification for each integration. See Additional Services fieldEach Service Build will be packaged up ready for deployment - complete with Unit Test Scripts detailing the results of the testing carried out, which must be approved by the in-house Integration Architect or Analyst before deployment to the CI environment - the Supplier will then be responsible for carrying out integration testing on the deployed code to ensure no defects have arisen against the previous version deployed. Offboarding • The onboarding plan for this Call-Off Contract is not required. See Additional Services field. N/A Collaboration agreement Not required. N/A Limit on Parties’ liability The annual total liability of either Party for Buyer Data defaults all Property Defaults will not exceed £1,000,000.00 50,000 The annual total liability for Buyer Data Defaults will not exceed £500,000 or 125[200% of the r Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). [ The annual total liability for all other defaults Defaults will not exceed the greater of £1,000,000.00 50,000 or 125150% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Insurance The insurance(s) required will be: ● A a minimum insurance period of 6 years months following the expiration or Ending of this Call-Off Contract ● Professional Contract] professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employersemployers' liability insurance with a minimum limit of £5,000,000 or any higher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 14 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access as described in conditions 7.4 to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. Buyer’s equipment No equipment will be provided to the supplier, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery 7.13 of the service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and paymentFramework Agreement.

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Offboarding • The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Collaboration agreement Not required. Limit on Parties’ liability The annual total liability for Buyer Data defaults will not exceed £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). The annual total liability for all other defaults will not exceed the greater of £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Insurance The insurance(s) required will be: ● A minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● Professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employers' liability insurance with a minimum limit of £5,000,000 or any higher anyhigher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. delivered Buyer’s equipment No equipment will be provided to the supplier, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and paymentpayment The Call-Off Contract charges and payment details are in the table below. See Schedule 2 for a full breakdown. Payment method The payment method for this Call-Off Contract is CP&F. Payment profile The payment profile for this Call-Off Contract is monthly in arrears. Invoice details The Supplier will issue electronic invoices by EXOSTAR monthly in arrears. The Buyer will pay the Supplier within 30 days of receipt of a valid invoice. Who and where to send invoices to Invoices will be sent to Navy Command Digital & IT Directorate via EXOSTAR & CP&F. Invoice information required All invoices must include: • Contract number – 702636450 • Contract title - Provision of a Secure Cloud-based Virtual Private Network (VPN) Service to Navy Command Personnel when Deployed Outside the UK • Service provided & deliverables • Purchase Order number (when known) Invoice frequency Invoices will be sent to the Buyer monthly in arrears. Call-Off Contract value The total value of this Call-Off Contract is £414,867.00 ex VAT Call-Off Contract charges Breakdown of Charges Redacted under FOIA Section 43, Commercial interests Additional Buyer terms Performance of the Service and Deliverables Not applicable – Billing for services delivered will be made monthly in arrears. Guarantee N/A Supplemental requirements in addition to the Call-Off terms Within the scope of the Call-Off Contract, the Supplier will ensure that all contractors engaged in the delivery of this task hold valid Security Check (SC) Security Clearance. The following Defence Conditions will apply: • DEFCON 658 (Edn 10/17) – Cyber Essentials • DEFCON 76 (Edn 12/06) - Contractor's Personnel at Government Establishments • JSP440 Part 2 V6.0 Leaflet 13 Para 35B – “The requirement under DEFCON 659A for the provision of a ▇▇▇ is waived as all work on the contract will be carried out on Government premises only”. Buyer specific Within the scope of the Call-Off Contract, the Supplier will to/refinements of the N/A Call-Off Contract terms Personal Data and Data Subjects Will Schedule 7 – Processing, Personal Data and Data Subjects be used - No

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Offboarding • The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Collaboration agreement Not required. Limit on Parties’ liability The annual total liability of either Party for all Property defaults will not exceed £1M. The annual total liability for Buyer Data defaults will not exceed £1,000,000.00 or 125100% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater)Term. The annual total liability for all other defaults will not exceed the greater of £1,000,000.00 or 125100% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater)Term. Insurance The insurance(s) required will be: ● A minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● Professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employers' liability insurance with a minimum limit of £5,000,000 or any higher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligationsNo additional audit provisions are applicable. Buyer▇▇▇▇▇’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. Redacted under FOIA Section 43, Commercial interests Buyer’s equipment No equipment will be provided to the supplierRedacted under FOIA Section 43, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the service. Commercial interests Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and paymentpayment The Call-Off Contract charges and payment details are in the table below. See Schedule 2 for a full breakdown. Payment method The payment method for this Call-Off Contract is CP&F. Payment profile The payment profile for this Call-Off Contract is monthly in arrears. Invoice details The Supplier will issue electronic invoices by EXOSTAR monthly in arrears. The Buyer will pay the Supplier within 30 days of receipt of a valid invoice. Who and where to send invoices to Invoices will be sent to Navy Command Digital & IT Directorate via EXOSTAR & CP&F. Invoice information required All invoices must include: • Contract number – 701883454 • Contract title - Cloud Services - Extension of Data Integration Services • Service provided & deliverables • Purchase Order number (when known) Invoice frequency Invoices will be sent to the Buyer monthly in arrears. Call-Off Contract value The total value of this Call-Off Contract is £1,666,666.66 ex VAT Call-Off Contract charges 2 x months of PT-SOL-LIC-6 - Palantir Solution-Based Licence – Level 6, Redacted under FOIA Section 43, Commercial interests Additional Buyer terms Performance of the Service and Deliverables Not applicable – Billing for services delivered will be made monthly in arrears. Guarantee N/A Supplemental requirements in addition to the Call-Off terms Not Applicable Alternative Clause Not Applicable Buyer specific amendments to/refinements of the Call-Off Contract terms: Within the scope of the Call-Off Contract, the Supplier will in addition to the standard Terms and Conditions of this order form comply with: DEFCON 531 Edn (11/14) – Disclosure of Information DEFCON 659A Edn (02/17) – Security Measures The Buyer is purchasing a term licence (From Start Date to End Date (the “Term”)) to a pre-existing commercial off the shelf software platform and its configuration in support of the Outputs listed below. Redacted under FOIA Section 43, Commercial interests Public Services Network (PSN) Not Applicable Personal Data and Data Subjects Confirm whether either Annex 1 or Annex 2 of Schedule 7 is being used: Annex 1

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Offboarding • The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Collaboration agreement Schedule 3 - Not required. Required Limit on Parties’ liability The annual total liability for Buyer Data defaults will not exceed £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). The annual total liability for all other defaults will not exceed the greater of £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Insurance The insurance(s) required will be: ● A minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● Professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) Employers' liability insurance with a minimum limit of £5,000,000 or any higher anyhigher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. delivered Buyer’s equipment No equipment will be provided to the supplier, ; however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and paymentpayment The Call-Off Contract charges and payment details are in the table below. See Schedule 2 for a full breakdown. Payment method The payment method for this Call-Off Contract is CP&F. Payment profile The payment profile for this Call-Off Contract is monthly in arrears. Invoice details The Supplier will issue electronic invoices by EXOSTAR monthly in arrears. The Buyer will pay the Supplier within 30 days of receipt of a valid invoice. Who and where to send invoices to Invoices will be sent to Navy Command Digital & IT Directorate via EXOSTAR & CP&F. Invoice information required All invoices must include: • Contract number – 701551466 • Contract title - Sustainment of Cloud Enabling Technical Services Maritime Domain Awareness (MDA) • Service provided & deliverables • Purchase Order number (when known) Invoice frequency Invoices will be sent to the Buyer monthly in arrears. Call-Off Contract value The total value of this Call-Off Contract is £832,535.00 ex VAT Call-Off Contract charges Additional Buyer terms Performance of the Service and Deliverables Not applicable – Billing for services delivered will be made monthly in arrears. Guarantee N/A Supplemental requirements in addition to the Call-Off terms Within the scope of the Call-Off Contract, the Supplier will ensure that all contractors engaged in the delivery of this task hold valid Security Check (SC) Security Clearance. The following Defence Conditions will apply: • DEFCON 658 (Edn 10/17) – Cyber Essentials • DEFCON 76 (Edn 12/06) - Contractor's Personnel at Government Establishments • JSP440 Part 2 V6.0 Leaflet 13 Para 35B – “The requirement under DEFCON 659A for the provision of a ▇▇▇ is waived as all work on the contract will be carried out on Government premises only”. Personal Data and Data Subjects Will Schedule 7 – Processing, Personal Data and Data Subjects be used - No

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Offboarding • The onboarding plan for this Call-Off Contract is not required. See Additional Services field. Collaboration agreement Not required. Limit on Parties’ liability The annual total liability for Buyer Data defaults will not exceed £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). The annual total liability for all other defaults will not exceed the greater of £1,000,000.00 or 125% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater). Insurance The insurance(s) required will be: ● • A minimum insurance period of 6 years following the expiration or Ending of this Call-Off Contract ● • Professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim or any higher limit the Buyer requires (and as required by Law) • Employers' liability insurance with a minimum limit of £5,000,000 or any higher minimum limit required by Law Force majeure A Party may End this Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. delivered Buyer’s equipment No equipment will be provided to the supplier; however, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and paymentpayment The Call-Off Contract charges and payment details are in the table below. See Schedule 2 for a full breakdown. Payment method The payment method for this Call-Off Contract is CP&F. Payment profile The payment profile for this Call-Off Contract is monthly in arrears. Invoice details The Supplier will issue electronic invoices by EXOSTAR monthly in arrears. The Buyer will pay the Supplier within 30 days of receipt of a valid invoice. Who and where to send invoices to Invoices will be sent to Navy Command Digital & IT Directorate via EXOSTAR & CP&F. Invoice information required All invoices must include: • Contract number – 701958454 • Contract title - Sustainment of Cloud Enabling Technical Services Maritime Domain Awareness (MDA) • Service provided & deliverables • Purchase Order number (when known) Invoice frequency Invoices will be sent to the Buyer monthly in arrears. Call-Off Contract value The total value of this Call-Off Contract is £3,063,000.00 ex VAT Call-Off Contract charges Redacted under FOIA Section 43, Commercial interests Additional Buyer terms Performance of the Service and Deliverables Not applicable – Billing for services delivered will be made monthly in arrears. Guarantee N/A Supplemental requirements in addition to the Call-Off terms Within the scope of the Call-Off Contract, the Supplier will ensure that all contractors engaged in the delivery of this task hold valid Security Check (SC) Security Clearance. The following Defence Conditions will apply: • DEFCON 658 (Edn 10/17) – Cyber Essentials • DEFCON 76 (Edn 12/06) - Contractor's Personnel at Government Establishments • JSP440 Part 2 V6.0 Leaflet 13 Para 35B – “The requirement under DEFCON 659A for the provision of a ▇▇▇ is waived as all work on the contract will be carried out on Government premises only”. Personal Data and Data Subjects Will Schedule 7 – Processing, Personal Data and Data Subjects be used - No

Onboarding. The onboarding plan for this Call-Off Contract is not required. See Additional Services fieldas defined in the Supplier’s G-Cloud 13 Service Definition on the digital marketplace and or the Statement of Work agreed between the Supplier and the Buyer, both of which are incorporated herein at Schedule 1 for ease of reference of the Parties (subject to any updates made by the Supplier during the course of the Call-Off Contract). Offboarding • The onboarding plan As applicable and agreed between the Supplier and the Buyer’s Operational Representative for this Call-Off Contract is not required. See Additional Services fieldContract. Collaboration agreement Not required. applicable Limit on Parties’ liability The annual total liability for Defaults by either party resulting in direct loss to the property (including technical infrastructure, assets or equipment but excluding any loss or damage to Buyer Data defaults Data) of the other Party will not exceed £1,000,000.00 or 125100% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is the greater)Term. The annual total liability of the Supplier for all other defaults Buyer Data Defaults resulting in direct loss, destruction, corruption, degradation or damage to any Buyer Data will not exceed the greater of £1,000,000.00 or 125100% of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term (whichever is Term. The annual total liability of the greater)Supplier for all other Defaults will not exceed 100%of the Charges payable by the Buyer to the Supplier during the Call-Off Contract Term. Insurance The Supplier insurance(s) required will be, also as more particularly detailed in clause 9 below: ● A minimum a insurance period of 6 3 years following the expiration or Ending of this Call-Off Contract ● Professional professional indemnity insurance cover to be held by the Supplier and by any agent, Subcontractor or consultant involved in the supply of the G-Cloud Services. This professional indemnity insurance cover will have a minimum limit of indemnity of £1,000,000 for each individual claim and annual aggregate basis, or any higher limit the Buyer requires (and as required by Law) Employers● employers' liability insurance with a minimum limit of £5,000,000 for each individual claim and annual aggregate basis, or any higher minimum limit required by Law Force majeure A Party may End this Buyer’s responsibilities The Buyer is responsible for System access, Configuration workbook and the provision of licenses. The Buyer is responsible for such matters as set out in the Statement of Work agreed between the Supplier and the Buyer, which is included herein at Schedule 1 for ease of reference of the Parties (subject to any updates made by the Supplier during the course of the Call-Off Contract if the Other Party is affected by a Force Majeure Event that lasts for more than 60 consecutive days. Audit The following Framework Agreement audit provisions will be incorporated under clause 2.1 of this Call-Off Contract to enable the Buyer to carry out audits Each Party is responsible for covering all their own other costs incurred from their compliance with the Audit obligations. Buyer’s responsibilities Navy Command Digital & IT Directorate will provide: • A suitable working environment for the performance of these services • Access to the necessary UK Government/MOD IT and telecommunications resources to carry these services • The issue of necessary security passes/permits for site access • The necessary Health & Safety briefings for all environments where the service is to be delivered. Buyer’s equipment No equipment will be provided to the supplier, however access will be granted to MOD/Navy Command Telecoms and IT networks as required for the delivery of the service. Supplier’s information Subcontractors or partners The following is a list of the Supplier’s Subcontractors or Partners: N/A Call-Off Contract charges and paymentContract).