Search

DocuSign Envelope ID: 66E73965-BAEF-4791-B930-DABA97 14DC55

°o° DARKTRACE

information and acknowledges that special service rates may apply thereto.

16.12. Government End-User Notice (applicable to United States government customers only). The Offering is commercial within
the meaning of the applicable civilian and military Federal acquisition regulations and any supplements thereto. If the user
of the Appliance is an agency, department, employee, or other entity of the United States Government, the use,
duplication, reproduction, release, modification, disclosure, or transfer of the Appliance, including technical data or
manuals, is governed by the terms, conditions and covenants contained in the Darktrace standard commercial licence
agreement, as contained herein.

16.13. Waiver. Each Party agrees that the failure of the other Party at any time to require performance by such Party of any of
the provisions herein will not operate as a waiver of the rights of such Party to request strict performance of the same or
like provisions, or any other provisions hereof, at a later time.

16.14 Insurance. Darktrace shall maintain the insurance coverage described as Appendix 3 hereto or an equivalent throughout
the Term, and Darktrace shall furnish Customer with a copy of its insurance certificate, from time to time during the Term,
upon Customer's reasonable request

16.15. Headings. All headings used herein are for convenience of reference only and will not in any way affect the interpretation
of this Agreement.

16.16. Equitable Remedies. The Parties agree that with respect to a breach by a Party of Clauses 5, 8 or 14, monetary damages
may not be an adequate or sufficient remedy for a breach of this Agreement. Therefore, in addition to any applicable
monetary damages, a Party will also be entitled to apply for injunctive relief and other equitable relief to prevent breaches
of the Agreement, without proof of actual damage.

IN WITNESS WHEREOF, the Parties have caused this Agreement to be executed as of the date written below

Darktrace: Darktrace Holdings Limited Customer: City of Nashua, New Hampshire
OocuSigned by:

Kodul Clias—Jones

By: Elis b By: _—
Rachel Elias-Jones

Name: aene Name:

Title: Financial Director Title:

Date: 5/3/2022 Date:

V09.12.2020 MCA SHRINKWRAP 10

DocuSign Envelope ID: 6BE73965-BAEF-4791-B930-DABA9714DC55

11.

DARKTRACE

Appendix 1 - Definitions
DEFINITIONS:

Defined Terms. Terms defined in this Appendix 1 will have the meanings given below. Defined terms may be used in the singular
or plural depending on the context.

“Affiliate” means any corporation or other business entity that directly or indirectly controls, is controlled by or is under
common control with a Party. Control means direct or indirect ownership of or other beneficial interest in fifty percent (50%)
or more of the voting stock, other vesting interest, or income of a corporation or other business entity;

“Alerts” means features of the Software that generates alerts of suspected malicious activity on a Customer's network;
“ Applianc e(s}"_means the Software, or Software combined with Hardware, as more fully described on the Product Order Form
“Call Home” means the secure and encrypted channel that connects the Appliance to Darktrace central management;

“Confidential Information” means any information, however conveyed or presented, that relates to the business, affairs,
operations, customers, suppliers, processes, budgets, pricing policies, product information, strategies, developments, trade
secrets, Intellectual Property, and know-how of a Party, and any other information clearly designated by a Party as being
confidential to it (whether or not it is marked "confidential"), and information that ought reasonably be considered to be
confidential, but in all circumstances excludes any Personal Data.

“Customer Data” means all data and information provided by Customer to, or accessible by, Darktrace under this Agreement
in connection with the performance of the Services (which may include information about network traffic on Customer's
network (metrics), log/metadata collection, as well as the raw packet capture data from Customer's network);

“Datasheet” means the document providing the specification for the Hardware, Software or Services, as applicable and as
may be updated by Darktrace from time to time;

“Data Privacy Laws” means the Data Protection Act 2018, the Privacy and Electronic Communications {EC Directive}
Regulations 2003, the General Data Protection Regulation (Regulation (EU) 2016/679} (“GDPR”), the California Consumer
Privacy Act of 2018 (“CCPA”), and laws of similar purpose or effect in any retevant jurisdiction, in each case as amended,
updated, re-enacted or replaced from time to time:

“Documentation” means user manuals for the Appliance consisting of the applicable instaltation guides, Datasheets; service
descriptions, technical specifications and online help files provided by Darktrace or available on Darktrace’s online portal, as
may be updated by Darktrace from time to time;

“Effective Date” means the Effective Date specified in the Product Order Form;

“EU Model Clauses” means the standard contractual clauses for the transfer of personal data to processors established in third
countries which do not ensure an adequate level of data protection under Directive 95/46/EC, pursuant to the European
Commission Decision of 5 February 2010;

"Fees" means all applicable fees as set out in the Product Order Form;

“GPL Software” means third party software provided by Darktrace on the Hardware to support use of the Software that is
licensed directly to Customer and the relevant Customer Affiliates by the relevant rights holder on the terms of the version
included or provided with it of the GNU General Public Licence, GNU Lesser General Public Licence or other comparable licence.

“Hardware” means any hardware device (including embedded firmware) shipped and installed as part of the Offering;

“Information Security Standards” means Darktrace’s information security code of conduct, as amended from time to time in
Darktrace’s sole discretion and available upon request;

“Intellectual Property” means patents, trademarks, service marks, rights (registered or unregistered) in any designs,
applications for any of the foregoing, trade or business names, copyright (including rights in computer software) and
topography rights, know-how and other proprietary knowledge and information, internet domain names, rights protecting
goodwill and reputation, database rights (including rights of extraction} and all rights and forms of protection of a similar
nature to any of the foregoing or having equivalent effect anywhere in the world and all rights under licences and consents
in respect of any of the rights and forms of protection mentioned in this definition (and “tntellectual Property Rights” will be
construed accordingly);

V01.04.2020 MCA SHRINKWRAP 11

DecuSign Envelope ID: 68E73965-BAEF-4791-6930-DABA9714DC55

1.2.

DARKTRACE

“Offering” means collectively the Appliance(s), Software, Services and the Documentation;

“Open Source Software” means third party software that Darktrace distributes with the Software pursuant to a licence that
requires, as a condition of use, modification or distribution of such software, that the software or other software combined
and/or distributed with it be: (i) disclosed or distributed in source code form; (ii) licensed for the purpose of making derivative
works; {iii} redistributable at no charge; or (iv) redistributable but subject to other limitations;

“Product Order Form” has the meaning set forth in the introductory paragraphs;

“Personal Data” means, generally, information relating to an identified or identifiable natural person, or other regulated
data types as defined by applicable Data Privacy Laws;

“Services” means the Darktrace Support Services, and any Installation Services, training or professional services which may
be provided by Darktrace as specified in the Product Order Form;

“Support Service Options” means the optional support services, if any, as specified in the Product Order Form and further
described in the Support Services Data Sheet;

“Site(s)” means the Customer's business location or its datacentre at the locations described in a Product Order Form;

“Software” means the Darktrace and the Third Party Software (in object code form) delivered to Customer as part of the
Offering or ona standalone basis, together with all enhancements, error corrections, and/or updates which are generally
made available by Darktrace as part of the Offering. The GPL Software does not form part of the Software and is licensed
to Customer and the Customer Affiliates directly on the terms of the applicable licences, provided that the GPL Software will
nevertheless be deemed to form part of the Software for the purposes of the Support Services, such that Darktrace will
support it as if it were part of the Software;

“Standard Support Services” means the standard support services provided by Darktrace as set out in the Darktrace Support
Services Data Sheet;

“Support Services Data Sheet” means the Documentation describing the terms of the Support Services.
“Third Party Licensors” means the suppliers of the Third Party Software to Darktrace; and

“Third Party Software” means: (i) any software or other technology that is licensed to Darktrace from Third Party Licensors for
the purpose of making the Offering available commercially; and (ii) Open Source Software.

Construction. In this Agreement (except where the context otherwise requires):

1.2.1. any reference to a clause or schedule is to the relevant clause or schedule of or to this Agreement and any reference
to a paragraph is to the relevant paragraph of the clause or schedule in which it appears;

1.2.2. the index and clause headings are included for convenience only and will not affect the interpretation of this Agreement;
1.2.3. use of the singular will include the plural and vice versa;
1.2.4. use of any gender will include any other gender;

1.2.5. any reference to persons includes natural persons, firms, partnerships, companies, corporations, associations,
organisations, governments, foundations and trust (in each case whether or not having separate legal personality);

ca} oa

1.2.6. any phrase introduced by the terms “including”, “include”, “in particular” or any similar expression will be construed as
illustrative and will not limit the sense of the words preceding those terms;

1.2.7. any reference to any other document is a reference to that other document as amended, varied, supplemented, or
novated (in each case, other than in breach of the provisions of this Agreement) at any time.

V01.04.2020 MCA SHRINKWRAP 12

DacuSign Envelope ID: 6BE73965-BAEF-4791-B930-DABA9714DC55

DARKTRACE

Appendix 2: Data Processing Agreement

1, DEFINITIONS. For the purposes of this DPA, the terms defined in this Appendix shall have the meanings as set forth in the
Agreement. Any terms not specifically defined by this DPA or the Agreement shall have the meaning given by GDPR.

2. SUBJECT MATTER OF THE DATA PROCESSING AGREEMENT

2.1 This Data Processing Agreement (“DP4”) applies to the processing of Customer Personal Data under the Agreement.

2.2 Customer will be the Data Controller and Darktrace will be the Data Precessor as defined under GDPR. Each Party agrees
that it shall comply with its obligations as a Data Controller and a Data Processor, respectively under the Data Privacy Laws
in exercising its rights and performing its obligations under this Agreement.

2.3 This DPA is an Appendix to the Agreement.

3. NATURE AND PURPOSE OF PROCESSING REGULATED DATA

3.1 The Data Processor shall process Personal Data in order to provide the Support Services as set forth in the Support
Services Datasheet.

3.2 In the event that the Data Controller has purchased Antigena Email, the additional data protection provisions of the
Antigena Email Schedule shall apply and be incorporated into this OPA.

4, TYPES AND CATEGORIES OF PERSONAL DATA
41 Categories of Data Subjects.
Employees inciuding volunteers, agents, temporary workers, independent contractors;
Contractors
- Customer clients, prospects
Suppliers, vendors
Advisors, consultants and other professional experts
Customer officers, directors
- And any other categories of Data Subjects that may be contained in the Data Controller's network.
4.2 Types of Personal Data:
- IP addresses
- Host names
- File names
- Email addresses
- And any other types of Personal Data that may be contained in the Data Controller's network.
5. RIGHTS AND OBLIGATIONS OF THE CONTROLLER

5.1 The Data Controller hereby instructs the Data Processor to take such steps in the processing of Personal Data as are
reasonably necessary for the performance of the Data Processor’s obligations under the Agreement, and agrees that such
instructions, comprising the terms of this DPA and the Agreement, constitute its full and complete instructions as to the
means by which Personal Data shall be processed by the Data Processor.

6. RIGHTS AND OBLIGATIONS OF THE PROCESSOR

6.1 The Data Processor shall only process Personal Data in accordance with the Data Controller's written instruction as
specified herein and shail not use Personal Data except to deliver the Offering and the Services as instructed by the
Agreement, unless such processing is required by Jaw to which the Data Processor is subject, in which case the Data
Processor shall, to the extent permitted by law, inform the Data Controller of that legal requirement prior to carrying
out the applicable processing.

6.2 The Data Processor shall immediately inform the Data Controller if, in the Data Processor’s reasonable opinion, an
instruction from the Data Controller infringes the Data Privacy Laws.

6.3 The Data Processor shall not transfer Personal Data outside the European Economic Area (“EEA”) without the prior
written consent of the Data Controller and not without procuring provision of adequate safeguards (as defined by the
European Commission from time to time);

6.4 In the event that the UK ceases to be a member of the European Union or ceases te be considered by the European
Commission to be an adequate country pursuant to Article 45 of GDPR, then the parties agree that Darktrace shall apply
the EU Model Clauses as set out at https://www.darktrace.com/en/resources/legal-customer-model-clauses.pdf, to
any relevant transfer of data and such EU Model Clauses shall be deemed incorporated from the date of first transfer.

6.5 The Data Processor shall take reasonable steps to ensure the reliability of its agents and employees who have access to

any Personal Data.

V01.04.2020 MCA SHRINKWRAP 13

DocuSign Envelope ID: 6BE73965-BAEF-4791-B930-DABA9714DC055

re

&.

a

11.

12.

‘g° DARKTRACE

SECURITY

71

Taking into account the nature, scope, context and purposes of processing, the Data Processor has implemented
and will maintain the administrative, physical, technical and organisational measures as described in the Darktrace
Information Security Policy to protect any Personal Data accessed or processed by it against unauthorised or unlawful
processing or accidental loss, destruction, damage or disclosure. The parties agree that for the purposes of the
processing hereunder, the measures contained within the Darktrace Information Security Policy are appropriate, given
the nature of the data to be processed and the harm that might result from such unauthorised or unlawful processing
or accidental loss, destruction, disclosure, access or damage.

PERSONAL DATA BREACH NOTIFICATION

8.1

In the event that the Data Processor suffers a Personal Data Breach, the Data Processor shall inform the Data Controller
within twenty-four (24) hours upon learning of the same and reasonably cooperate with the Data Controller to mitigate
the effects and to minimise any damage resulting therefrom. To the extent reasonably possible, the notification to the
Data Controller shall include: (i) a description of the nature of the incident, including where possible the categories and
approximate number of data subjects concerned and the categories and approximate number of Personai Data records
concerned; (ii) the name and contact details of the Data Processor’s data protection officer or another contact point
where more information can be obtained; (iii) a description of the likely consequences of the incident; and {iv} a
description of the measures taken or proposed to be taken by the Data Processor to address the incident including,
where appropriate, measures to mitigate its possible adverse effects

SUBPROCESSORS

9.1

9.2

9.3

Save as expressly provided herein, the Data Processor will not use subprocessors for the processing of Personal Data.
For the purposes of providing Support Services alone: (i) The Data Controller hereby authorises the Data Processor to use
its affiliates specified in the Support Services Datasheet to process Personal Data (the “Affiliate Subprocessors”}; (ii} The
Data Processor shall have in place with the Affiliate Subprocessors a written agreement equivalent to the terms contained
herein to protect Personal Data; and (iii) The EU Model Clauses shall appiy to the extent the processing of Personal Data
by the Affiliate Subprocessors involves a transfer of Personal Data which originates in the EEA to a third country outside
of the EEA. For such purposes, the Data Controller hereby authorises the Data Processor to enter into the EU Model
Clauses with the Affiliate Subprocessors on the Data Controller's behalf.

Save for the foregoing, the Data Processor shall not engage any subprocessors without the prior written authorisation of
the Data Controller. In the event that the Data Controller authorises the use by the Data Processor of any other
subprocessors, the Data Processor shall procure that such subprocessors enter into a written agreement containing
provisions no less stringent than this DPA.

The Data Processor shall be fully liable for any breach by the subprocessors of any data protection obligations set
out in this Clause.

ASSISTANCE WHEN HANDLING REQUESTS FROM DATA SUBJECTS

10.1

AUDIT
11.1

Taking into account the nature of processing and the information available to the Data Processor, the Data Processor will
provide reasonable support to the Data Controller: (i) in complying with any legally mandated request for access to or
correction of any Personal Data by a data subject under Chapter III GDPR (and where such request is submitted to the
Data Processor, the Data Processor will promptly notify the Data Controller of it); (ii) in responding to requests or
demands made to the Data Controller by any court or governmental authority responsible for enforcing privacy or data
protection laws; or (iii) in its preparation of a Data Protection Impact Assessment.

The Data Processor agrees to maintain ISO 27001 certification for the duration of the Term. The Data Processor will use
an external auditor to verify that its security measures meet ISO 27001 standards in accordance with the ISO certification
process. On the Data Controllers written request, and subject to appropriate confidentiality obligations, the Data
Processor will make available to the Data Controller: (i} a copy of the current certificate in relation to the [SO 27001
certification; and (ii) Information reasonably requested by the Data Controller in writing with regards to the Data
Processor’s processing of Personal Data under this DPA. The Data Controller agrees to exercise any right it may have to
conduct an audit or inspection under GDPR (or the EU Model Clauses if they apply) by requesting the foregoing
information.

RETURN/DESTRUCTION OF PERSONAL DATA

12.1

Upon termination of the Agreement, the Data Processor shall delete or return all Personal Data in accordance with the
Data Controller’s written instructions.

V01.04.2020 MCA SHRINKWRAP 14

DocuSign Envelope ID- 6BE73965-BAEF-4791-B930-DABA97 14DC55

Appendix 3: Darktrace Insurance

VG1.04.2020 MCA SHRINKWRAP

‘ DARKTRACE

15

DocuSign Envelope ID- 6BE73965-BAEF-4791-B930-DABA97 140055

@8 MARSH

9" December 2021
To whom it may concern

Dear Sirs

Ishe Mugwira
Client Adviser

Marsh Ltd

Milton Keynes (PO Box}
Milton Keynes Postal Address:
PO Box 3264

NR7 7BH

+44 (0} 1908 846029

Ishe. Mugwia@marsh.com

www.marsh.com

CONFIRMATION OF INSURANCE - Darktrace PLC and Subsidiaries

As requested by the above client, we are writing to confirm that we act as Insurance Brokers to the client and that we
have arranged insurance(s) on its behalf as detailed below:

PROFESSIONAL INDEMNITY &

INSURER:

POLICY NUMBER:

PERIOD OF INSURANCE:

LIMIT OF LIABILITY:

DEDUCTIBLES:

GEOGRAPHICAL LIMITS

EMPLOYERS LIABILITY

INSURER:

POLICY NUMBER:

PERIOD OF INSURANCE:

LOSS LIMIT:

DEDUCTIBLES:

CYBER LIABILITY

American Intemational! Group

0034033810

1 December 2021 te 30 November 2022, both dates inclusive

Blended Professional Indemnity and Cyber Liability - GBP Smillion in the
aggregate.

GBP 350,000 each and every claim or loss and 12 hour waiting period (Network
Interruption).

Worldwide

CHUBB European Group SE
UKINTC92535.
1 December 2021 to 30 November 2022, both dates inclusive

GBP 10,000,000 per occurrence
GBP 5,000,000 per occurrence {Terrorism)

NIL

ADVERTISER AGREEMENT

PAGE 1 OF 7

SUTFRONT/

OUTFRONT Media
40 Water Street

Lower Mezzanine
Boston,MA 02109
781-792-2123
781-792-2736

CONTRACT NO.: 3434613

DATE: 04/05/22

Copy must meet Production specifications and be received 10 working days prior to each advertising period.

ADVERTISER: City of Nashua, Department of Public Hea CLIENT SUPPLIES PRODUCTION: No
BRAND: ACCOUNT EXECUTIVE: MaryAnne Carpenter (J86)
CAMPAIGN:

THIS AGREEMENT AND THE COPY TO BE DISPLAYED HEREUNDER IS SUBJECT TO THE APPROVAL OF OUTFRONT MEDIA'S
MARKET GENERAL MANAGER AND THE OWNER OF THE LOCATION AS APPLICABLE

Advertiser Bill-To# 1130608

City of Nashua, City Hall
229 Main Street

Nashua, NH 03060
603-589-3260

Attn: Bobbie Bagley

Subject to the terms of the Production Information Addendum Page and the OUTFRONT Media Terms and Conditions of Advertising Service each attached
hereto and made a part hereof, the advertiser and/or agency listed on this page (collectively, "Advertiser") hereby contracts with Outfront Media LLC ("Company")

for the display of advertising copy ("Copy") on the advertising display(s) described below, commencing approximately on the commencement date of the
Advertising Period listed below and delivered in accordance with and subject to Company's Specifications for Inventory and Packages located at
www.outfrontmedia.com/resources/posting-standards (the "Inventory Specifications"). Advertiser shall provide the Copy in the form and type and within the
timeframe specified by Company, including sufficient overage Copy and posting instructions.
See Production Information Addendum page for shipping quantities and addresses for static copy. For further specifications regarding the inventory and
packages purchased under this Contract, see the asset descriptions at www.outfrontmedia.com/resources/posting-standards.

GRP/ Advertising No. of
Market Media/Location(s) Size IMP 18+ Units Period Periods | * Period Cost

INew Hampshire Bulletins/Unit# 53620A-O 10'x22' 1 07/04/22-06/25/23 12.75 |4W $1,260.00
E/S 3 (D.W. Hwy) 500.00 ft N/O Mcgraw Br. F/S

INew Hampshire Bulletins/Unit# 53283A-O 10'x40' 1 07/04/22-06/25/23 12.75 |4W $1,470.00
IN/S of Bridge Street and East Hollis Street F/E

INew Hampshire Bulletins/Unit# 8692AJ-O 6'x12' 1 07/04/22-06/25/23 12.75 |4W $420.00
IN/S 101A 2.00 mi W/O Jct 101 F/W

INew Hampshire Bulletins/Unit# OON21D-O 10'x24' 1 07/04/22-06/25/23 12.75 |4W $950.00
IN/S 111 & E Hollis & Hudson F/E

Special Instructions: Net Space Total: $52,275.00

Client has first right of refusal 90 days prior to the expiration date. Net Non-Space Total: $2,735.00

2 vinyls & 2 installs included with the annual contract. Net Agreement Total: $55,010.00

3rd vinyl change out will cost $950 and install $1,820.

THIS AGREEMENT IS NON-CANCELABLE BY ADVERTISER EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS ATTACHED HERETO. THIS CONTRACT CONSISTS OF THIS PAGE, THE INVENTORY SPECIFICATIONS
LOCATED AT WWW.OUTFRONTMEDIA.COM/RESOURCES/POSTING-STANDARDS, THE PRODUCTION INFORMATION ADDENDUM PAGE, ANY ADDENDA APPLICABLE TO OTHER PRODUCTS AND SERVICES

(SUCH AS MOBILE ADVERTISING OR ATTRIBUTION SERVICES), AND THE OUTFRONT MEDIA TERMS AND CONDITIONS OF ADVERTISING SERVICE INCORPORATED HEREIN, ALL OF WHICH ADVERTISER HEREBY
ACKNOWLEDGES RECEIVING AND APPROVING. ANY MISSING PAGES OF THIS CONTRACT MAY BE OBTAINED OR REQUESTED THROUGH ANY OUTFRONT MEDIA OFFICE OR REPRESENTATIVE IF LOST OR

NOT RECEIVED BY ADVERTISER. FACSIMILE OR ELECTRONIC SIGNATURES SHALL HAVE THE SAME FORCE AND EFFECT AS ORIGINAL SIGNATURES. THIS CONTRACT MAY BE EXECUTED IN SEVERAL
COUNTERPARTS, EACH OF WHICH SHALL CONSTITUTE ONE AND THE SAME INSTRUMENT. THE AGENCY AND/OR THE SIGNATORY HERETO REPRESENTS AND WARRANTS THAT THEY ARE AUTHORIZED TO
EXECUTE THIS CONTRACT ON BEHALF OF AND BIND THE ADVERTISER AND THAT THE ADVERTISER APPROVES SAME.

ACCEPTED AND AGREED TO BY - OUTFRONT MEDIA ADVERTISER/AGENCY

AUTHORIZED SIGNATURE - TITLE

BY DATE PLEASE PRINT DATE

NAME - TITLE

* Period Codes: M=Monthly,; W=Weekly; 4W=4 Weeks; D=Daily; OT=One Time TF=Till Forbid

DocuSign Envelope ID: 66E73965-BAEF-4791-B930-DABA97 140055

a

TERRITORIAL LIMITS

PUBLIC & PRODUCTS LIABILITY
INSURER:

POLICY NUMBER:

PERIOD OF INSURANCE:

LOSS LIMIT:

DEDUCTIBLES:

TERRITORIAL LIMITS

Great Britain, Northern Ireland, ihe Isle of Man, the Channel Islands, Republic of
Ireland and elsewhere in the world in respect of any employee whilst temporarily
outside of these territories provided that such employee normally resides within
the territorial limits stated above

CHUBB European Group SE

UKINTC92535

1 December 2021 to 30 November 2022, both dates inclusive

Public Liability - GBP 15,000,000 per occurrence

Products Liability - GBP 15,000,000 per occurrence and in the aggregate
Pollution & Contamination - GBP 15,000,000 in the aggregate

GBP $00 Third Party Property Damage

Worldwide excluding Cuba and sanctioned territories

This letter is issued as a matter of information only and confers no right upon you other than those provided by the
policy. This letter does not amend, extend or alter the coverage afforded by the policies described herein.
Notwithstanding any requirement, term or condition of any contract or other document with respect to which this letter
may be issued or pertain, the insurance afforded by the policy (policies) described herein is subject to all terms,
conditions, limitations, exclusions and cancellation provisions and may also be subject to warranties. Limits shown may

have been reduced by paid claims.

We express no view and assume ne liability with respect to the solvency or future ability to pay of any of the insurance
companies which have issued the insurance(s).

We assume no obligation to advise yourselves of any developments regarding the insurance(s} subsequent to the date
hereof. This letter is given on the condition that you forever waive any fiability against us based upon the placement of
the insurance(s) and/or the statements made herein with the exception only of wilful default, recklessness or fraud.

This letter may not be reproduced by you or used for any other purpose without our prior written consent.

Financial Conduct Authority.

Registered in England and Wales Number: 1507274, Registered Office: 1 Tower Place r y MARSH & MCLENNAN
West, Tower Place, London EC3R 5B). Marsh Lid is authorised and regulated by the Be

© Copyright 2020 Marsh Ltd. All rights reserved.

DocuSign Envelope ID: 6BE73965-BAEF-4791-8930-DABA97 14DC55

@8 MARSH

This letter shall be governed by and shall be construed in accordance with English law.
Yours faithfully,
she Muciwira

Ishe Mugwira
Client Adviser

Registered in England and Wales Number, 1507274, Registered Cffice; 1 Tower Place MARSH & MCLENNAN
West, Tower Place. London EC3R SEU Marsh Lidis authorised and regulated by the COMPANIES
Financial Conduct Authority.

© Copyright 2020 Marsh Lid. All rights reserved.