This Data Processing Addendum (“DPA”) forms part of the Terms of Service - Subscription Agreement (the “Agreement”) entered into by and between Customer and Drata Inc., pursuant to which Customer has purchased a subscription to Drata’s software-as-a-service (“Services”, as described at www.drata.com).

The purpose of this DPA is to reflect the Parties’ agreement with regard to the Processing of Personal Data, in accordance with the requirements of Applicable Data Protection Law. All capitalized terms not defined herein shall have the meaning set forth in the Agreement or the DPA, as applicable.

In the course of providing the Services to Customer pursuant to the Agreement, Drata may Process Personal Data on behalf of Customer and the Parties agree to comply with the following provisions with respect to any Personal Data, each acting reasonably and in good faith.

Please follow the instructions below to review and electronically sign the DPA.

How to execute this DPA:

Review & Sign

• To begin click here and complete the required fields and click on ‘Begin Signing’.

• You will receive an email with a validation code and click on the ‘Resume Signing’.

• If you are not the signatory, you are able to ‘Assign to Someone Else’ in the ‘Other Actions’ drop-down in the upper right hand corner.

• If you are the signatory then complete the required fields in the DPA.

Option to Download to Review Prior to Signing You will have the option to download the DPA for review prior to completing the execution process. To do so, after clicking ‘Continue’ simply click on the ‘Download’ icon located top center of the page (see image below).

File Copy After Execution Once you have completed the execution process, the DPA will become legally binding and you and the signatory will automatically receive a fully signed copy of the DPA for your files.

Additional information about our privacy and information security practices can be found in Drata’s Trust Center, please visit: https://trust.drata.com/.

Should you have any questions, please contact [email protected].