Common use of Provider Intellectual Property Clause in Contracts

Provider Intellectual Property. Altitude™ Subscription service includes multiple elements of intellectual property owned by Provider. All of the rights to the elements listed below are retained by Provider during the duration of this contract and are removed from INF CBA and CUSTOMER CBA upon termination of Altitude™ Subscription services. Customer has no rights to any of the following intellectual property items which include, but are not limited to: • Altitude™ Base Platform − Architectural design of Altitude™ Base Platform including, but not limited to, data flows, networking designs, end-user architecture, etc. − Automation to deploy Altitude™ elements (CloudFormation templates, Terraform scripts, etc.) − Automation to manage Altitude™ elements (tools, dashboards, support workflows, automated on-boarding/off- boarding elements, automated AMI creation pipeline, etc.) − Active Directory deployment, configurations, schema, and Group Policy Objects − Configuration management deployment, settings, configuration files, state files, etc. (SaltStack state files, Ansible playbooks, etc.) − Logging/Auditing elements including, but not limited to, SQS configurations, CloudTrail deployment and configuration code CloudWatch deployment and configuration code, CloudWatch configurations, NiFi deployment code, NiFi processor configurations, Kibana deployment code, Kibana dashboard configurations, Splunk deployment code, Splunk dashboard configurations, etc. − Configurations of security tools (such as ACAS, McAfee ePO, Zeek, etc.) and any automation in the distribution of security findings, alerting mechanisms, or remediation elements − Networking deployment and configuration, including but not limited to, Palo Alto firewall deployment and configuration, Transit Gateway deployment and configuration, Weave deployment and configuration, Virtual Network deployment and configuration, etc. − End user access deployment mechanisms including automated provisioning and configuration of both VDI and VPN resources • Altitude™ Add-On Managed Services − Architectural design of Altitude™ Add-On Managed Service inclusion into Altitude™ Base Platform − Automation to deploy Altitude™ Add-On Managed Services (CloudFormation templates, Terraform scripts, etc.) − Automation to manage Altitude™ Add-On Managed Services (dashboards, support workflows, automated on- boarding/off-boarding elements, automated project/space creation pipelines, etc.) − Code or processes for integration of Altitude™ Add-On Managed Services with Altitude™ Base Platform

Provider Intellectual Property. Altitude™ ai-AMCTM Subscription service includes multiple elements of intellectual property owned by Provider. All of the rights to the elements listed below are retained by Provider during the duration of this contract and are removed from INF CBA and CUSTOMER CBA upon termination of Altitude™ ai-AMCTM Subscription services. Customer has no rights to any of the following intellectual property items which include, but are not limited to: • Altitude™ ai-AMCTM Base Platform − Architectural design of Altitude™ ai-AMCTM Base Platform including, but not limited to, data flows, networking designs, end-user architecture, etc. − Automation to deploy Altitude™ ai-AMCTM elements (CloudFormation templates, Terraform scripts, etc.) − Automation to manage Altitude™ ai-AMCTM elements (tools, dashboards, support workflows, automated on-boarding/off- boarding elements, automated AMI creation pipeline, etc.) − Active Directory deployment, configurations, schema, and Group Policy Objects − Configuration management deployment, settings, configuration files, state files, etc. (SaltStack state files, Ansible playbooks, etc.) − Logging/Auditing elements including, but not limited to, SQS configurations, CloudTrail deployment and configuration code CloudWatch deployment and configuration code, CloudWatch configurations, NiFi deployment code, NiFi processor configurations, Kibana deployment code, Kibana dashboard configurations, Splunk deployment code, Splunk dashboard configurations, etc. − Configurations of security tools (such as ACAS, McAfee ePO, Zeek, etc.) and any automation in the distribution of security findings, alerting mechanisms, or remediation elements − Networking deployment and configuration, including but not limited to, Palo Alto firewall deployment and configuration, Transit Gateway deployment and configuration, Weave deployment and configuration, Virtual Network deployment and configuration, etc. − End user access deployment mechanisms including automated provisioning and configuration of both VDI and VPN resources • Altitude™ ai-AMCTM Add-On Managed Services − Architectural design of Altitude™ ai-AMCTM Add-On Managed Service inclusion into Altitude™ ai-AMCTM Base Platform − Automation to deploy Altitude™ ai-AMCTM Add-On Managed Services (CloudFormation templates, Terraform scripts, etc.) − Automation to manage Altitude™ ai-AMCTM Add-On Managed Services (dashboards, support workflows, automated on- boarding/off-boarding elements, automated project/space creation pipelines, etc.) − Code or processes for integration of Altitude™ ai-AMCTMC Add-On Managed Services with Altitude™ ai-AMCTM Base Platform

Provider Intellectual Property. Altitude™ Subscription service includes multiple elements of intellectual property owned by Provider. All of the rights to the elements listed below are retained by Provider during the duration of this contract and are removed from INF CBA and CUSTOMER CBA upon termination of Altitude™ Subscription services. Customer has no rights to any of the following intellectual property items which include, but are not limited to: • Altitude™ Base Platform − Architectural design of Altitude™ Base Platform including, but not limited to, data flows, networking designs, end-end- user architecture, etc. − Automation to deploy Altitude™ elements (CloudFormation templates, Terraform scripts, etc.) − Automation to manage Altitude™ elements (tools, dashboards, support workflows, automated on-boarding/off- boarding elements, automated AMI creation pipeline, etc.) − Active Directory deployment, configurations, schema, and Group Policy Objects − Configuration management deployment, settings, configuration files, state files, etc. (SaltStack state files, Ansible playbooks, etc.) − Logging/Auditing elements including, but not limited to, SQS configurations, CloudTrail deployment and configuration code CloudWatch deployment and configuration code, CloudWatch configurations, NiFi deployment code, NiFi processor configurations, Kibana deployment code, Kibana dashboard configurations, Splunk deployment code, Splunk dashboard configurations, etc. − Configurations of security tools (such as ACAS, McAfee ePO, Zeek, etc.) and any automation in the distribution of security findings, alerting mechanisms, or remediation elements − Networking deployment and configuration, including but not limited to, Palo Alto firewall deployment and configuration, Transit Gateway deployment and configuration, Weave deployment and configuration, Virtual Network deployment and configuration, etc. − End user access deployment mechanisms including automated provisioning and configuration of both VDI and VPN resources • Altitude™ Add-On Managed Services − Architectural design of Altitude™ Add-On Managed Service inclusion into Altitude™ Base Platform − Automation to deploy Altitude™ Add-On Managed Services (CloudFormation templates, Terraform scripts, etc.) − Automation to manage Altitude™ Add-On Managed Services (dashboards, support workflows, automated on- boarding/off-boarding elements, automated project/space creation pipelines, etc.) − Code or processes for integration of Altitude™ Add-On Managed Services with Altitude™ Base Platform