Common use of Permitted Sub-processors Clause in Contracts

Permitted Sub-processors. Processor may use the following sub-processors (based on the respective Services according to the relevant Order): AbsorbLMS Technology Ltd., Dublin, Republic of Ireland Hosting of Online Training Cloud HappyFox Inc., Frankfurt, Germany Operation of the Support Ticketing Tools Microsoft Corporation, Redmond (WA), United States • Hosting location for Customers in the United States and Canada: Washington, United States • Hosting location for Customers in Japan: Tokyo, Saitama, Japan • Hosting location for all other Customers: Frankfurt, Germany Hosting of Cloud Service and processing of data provided by the Controller Xxxxxxxxxx.xxx Germany GmbH, Munich, Germany Operation of the Support Ticketing Tools UserLane GmbH, Munich, Germany Operation of Guided Learning Tours within the Online Training Cloud Tool Our Affiliates (as applicable): Celonis SE, Germany Celonis, Inc., United States Celonis AB, Sweden Celonis ApS, Denmark Celonis B.V., The Netherlands Celonis Canada Ltd., Canada Celonis K.K., Japan Celonis L.L.C., Kosovo Celonis Ltd., United Kingdom Celonis SAS, France Celonis Schweiz GmbH, Switzerland Celonis S.L., Spain Celonis Srl, Italy Integromat s.r.o., Czech Republic Support of the Services through personnel of such Affiliate. Exhibit 2– STANDARD CONTRACTUAL CLAUSES (Controller to Processor) For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection Name of the data exporting organisation: Address: … Tel. …; fax …; e-mail: … Other information needed to identify the organisation: (the data exporter) And Name of the data importing organisation: Address: … Tel. …; fax …; e-mail: … Other information needed to identify the organization: (the data importer) each a ‘party’; together ‘the parties’, HAVE AGREED on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.

Permitted Sub-processors. Processor may use the following sub-processors (based on the respective Services according to the relevant Order): Sub-processor name and processing location (as applicable) Description of processing Amazon Web Services Inc., Hosting of Cloud Service Seattle, United States and processing of data • Hosting location for provided by the Controller Customers in the United States and Canada: North Virginia, United States • Hosting location for all other Customers: Frankfurt, Germany AbsorbLMS Technology Ltd., Dublin, Republic of Ireland Hosting of Online Training Cloud HappyFox Inc., Frankfurt, Germany Operation of the Support Ticketing Tools Microsoft Corporation, Redmond (WA), United States • Hosting location for Customers in the United States and Canada: Washington, United States • Hosting location for Customers in Japan: Tokyo, Saitama, Japan • Hosting location for all other Customers: Frankfurt, Germany Hosting of Cloud Service and processing of data provided by the Controller Xxxxxxxxxx.xxx Germany GmbH, Munich, Germany Operation of the Support Ticketing Tools UserLane GmbH, Munich, Germany Operation of Guided Learning Tours within the Online Training Cloud Tool Our Affiliates (as applicable): Celonis SE, Germany Celonis, Inc., United States Celonis AB, Sweden Celonis ApS, Denmark Celonis B.V., The Netherlands Celonis Canada Ltd., Canada Celonis K.K., Japan Celonis L.L.C., Kosovo Celonis Ltd., United Kingdom Celonis SAS, France Celonis Schweiz GmbH, Switzerland Celonis S.L., Spain Celonis Srl, Italy Integromat s.r.o., Czech Republic Support of the Services through personnel of such Affiliate. Exhibit 2– STANDARD CONTRACTUAL CLAUSES (Controller to Processor) For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection Name of the data exporting organisation: Address: … Tel. …; fax …; e-mail: … Other information needed to identify the organisation: (the data exporter) And Name of the data importing organisation: Address: … Tel. …; fax …; e-mail: … Other information needed to identify the organization: (the data importer) each a ‘party’; together ‘the parties’, HAVE AGREED on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.

Permitted Sub-processors. Processor may use the following sub-processors (based on the respective Services according to the relevant Order): Sub-processor name and processing location (as applicable) Description of processing Amazon Web Services Inc., Seattle, United States • Hosting location for Customers in the United States and Canada: North Virginia, United States • Hosting location for all other Customers: Frankfurt, Germany Hosting of Cloud Service and processing of data provided by the Controller AbsorbLMS Technology Ltd., Dublin, Republic of Ireland Hosting of Online Training Cloud HappyFox Inc., Frankfurt, Germany Operation of the Support Ticketing Tools Microsoft Corporation, Hosting of Cloud Service Redmond (WA), United States and processing of data • Hosting location for provided by the Controller Customers in the United States and Canada: Washington, United States • Hosting location for Customers in Japan: Tokyo, Saitama, Japan • Hosting location for all other Customers: Frankfurt, Germany Hosting of Cloud Service and processing of data provided by the Controller Xxxxxxxxxx.xxx Germany GmbH, Munich, Germany Operation of the Support Ticketing Tools UserLane GmbH, Munich, Germany Operation of Guided Learning Tours within the Online Training Cloud Tool Our Affiliates (as applicable): Celonis SE, Germany Celonis, Inc., United States Celonis AB, Sweden Celonis ApS, Denmark Celonis B.V., The Netherlands Celonis Canada Ltd., Canada Support of the Services through personnel of such Affiliate. Celonis K.K., Japan Celonis L.L.C., Kosovo Celonis Ltd., United Kingdom Celonis SAS, France Celonis Schweiz GmbH, Switzerland Celonis S.L., Spain Celonis Srl, Italy Integromat s.r.o., Czech Republic Support of the Services through personnel of such Affiliate. Exhibit 2– STANDARD CONTRACTUAL CLAUSES (Controller to Processor) For the purposes of Article 26(2) of Directive 95/46/EC for the transfer of personal data to processors established in third countries which do not ensure an adequate level of data protection Name of the data exporting organisation: Address: … Tel. …; fax …; e-mail: … Other information needed to identify the organisation: (the data exporter) And Name of the data importing organisation: Address: … Tel. …; fax …; e-mail: … Other information needed to identify the organization: (the data importer) each a ‘party’; together ‘the parties’, HAVE AGREED on the following Contractual Clauses (the Clauses) in order to adduce adequate safeguards with respect to the protection of privacy and fundamental rights and freedoms of individuals for the transfer by the data exporter to the data importer of the personal data specified in Appendix 1.