Data processing, AI, and market data addendum

FILTER TECHNOLOGY, INC.

EXHIBIT B

DATA PROCESSING, AI, AND MARKET DATA ADDENDUM

This Data Processing, AI, and Market Data Addendum (the "Addendum") is incorporated into and forms part of the Customer Master Services Agreement between Filter Technology, Inc. and Customer (the "Agreement"). Capitalized terms not defined here have the meanings given in the Agreement. This Addendum takes effect on the Effective Date of the Agreement and is executed in the same act; a signature on the Agreement is a signature on this Addendum. In the event of a conflict between this Addendum and the Agreement with respect to the processing of Customer Data, this Addendum controls.

This Data Processing, AI, and Market Data Addendum (the "Addendum") is incorporated into and forms part of the Filter Customer Master Services Agreement (the "Agreement") between Filter Technology, Inc. ("Filter") and the customer identified in the applicable Order Form ("Customer"). Capitalized terms not defined in this Addendum have the meanings given in the Agreement. Filter and Customer may be referred to individually as a "Party" and collectively as the "Parties".

1. Purpose and Scope

1.1 This Addendum governs Filter's processing of Customer Data for the Services, including use of subprocessors, security obligations, AI Features, deletion and return obligations, privacy-request assistance, and Filter's creation and use of Aggregated Data, Deidentified Data, and Market Data Products.

1.2 For core platform services, Filter processes Customer Data on behalf of Customer and in accordance with Customer's documented instructions, including the Agreement, this Addendum, and applicable Order Forms. For Aggregated Data, Deidentified Data, Usage Data, and Market Data Products, Filter may determine the purposes and means of processing as permitted by the Agreement and this Addendum.

2. Processing Details

| Subject Matter | Provision of the Filter platform, document ingestion, parsing, structuring, analysis, reporting, AI-assisted functionality, support, security, and authorized Market Data Products. |

| --- | --- |

| Duration | The term of the Agreement and any additional period required for return, deletion, legal compliance, backups, dispute resolution, or permitted retention. |

| Categories of Data | Business contact information, account information, emails, prompts, queries, contracts, invoices, inventory reports, spreadsheets, PDFs, attachments, parsed data, operational records, and related commercial transaction data. |

| Categories of Individuals | Customer personnel, Authorized Users, report recipients, supplier/importer contacts, brokers, contract signatories, and incidental individuals included in Customer Materials. |

| Processing Activities | Hosting, storage, transmission, parsing, extraction, classification, structuring, analysis, reporting, support, troubleshooting, security, AI-assisted processing, deletion, export, aggregation, and deidentification. |

| Sensitive Data | Customer will not submit sensitive personal information, protected health information, payment card data, government identification numbers, or other regulated data unless expressly agreed by Filter in writing. |

3. Subprocessors

3.1 Customer authorizes Filter to use subprocessors to provide the Services. Filter will remain responsible for the performance of its subprocessors to the extent required by the Agreement.

3.2 Filter's subprocessors may include AWS for hosting and infrastructure, Clerk for identity and authentication, OpenAI for document parsing and extraction, Anthropic for AI assistant functionality, and other vendors identified by Filter from time to time.

3.3 Filter will use commercially reasonable efforts to impose written obligations on subprocessors that are appropriate to the nature of the services they provide and the Customer Data they process.

4. AI Features

4.1 Filter may use AI Features to parse, extract, classify, summarize, query, analyze, or report on Customer Data and Customer Materials. Customer is responsible for reviewing AI outputs before relying on them.

4.2 Filter will not knowingly permit third-party AI vendors to train general-purpose foundation models on Customer Data unless Customer expressly authorizes that use in writing.

4.3 AI outputs may be incomplete, inaccurate, or unsuitable for Customer's intended use. Customer will not rely on AI outputs as legal, financial, trading, tax, or professional advice without independent review.

5. Security

5.1 Filter will maintain commercially reasonable administrative, technical, and organizational safeguards designed to protect Customer Data from unauthorized access, disclosure, alteration, or destruction, taking into account the nature of the Services and the information processed.

5.2 Customer is responsible for managing Authorized Users, credentials, account permissions, and the accuracy and legality of Customer Data submitted to the Services.

6. Security Incidents

6.1 Filter will notify Customer without undue delay after confirming a Security Incident involving Customer Data. Notice will include information reasonably available to Filter, taking into account the nature of the incident, applicable law, and Filter's investigation.

6.2 "Security Incident" means a confirmed unauthorized access to, acquisition of, disclosure of, or loss of Customer Data in Filter's possession or control. Failed login attempts, unsuccessful attacks, scans, pings, denial-of-service attempts, or other unsuccessful security events are not Security Incidents unless they result in unauthorized access to Customer Data.

7. Return, Deletion, and Retention

7.1 Upon termination or expiration of the applicable Services, Filter will return or delete Customer Data in accordance with the Agreement, applicable Order Forms, and Filter's standard retention procedures, subject to legal holds, backup retention, dispute resolution, security, compliance, and technical limitations.

7.2 Filter may retain Aggregated Data, Deidentified Data, Usage Data, and Market Data Products, provided such data is not retained or disclosed in a form that identifies Customer, any Authorized User, any individual, any specific counterparty, any contract, any invoice, any shipment, or any individual transaction.

8. Privacy Requests and Assistance

8.1 To the extent Customer receives a privacy request relating to Customer Data processed by Filter, Filter will provide reasonable assistance, taking into account the nature of the Services and information available to Filter. Customer is responsible for determining whether and how to respond to such requests.

8.2 If Filter receives a privacy request directly from an individual concerning Customer Data, Filter may direct the individual to Customer unless applicable law requires otherwise.

9. Aggregated Data, Deidentified Data, and Market Data Products

9.1 Customer authorizes Filter to create Aggregated Data and Deidentified Data from Customer Data and use such data to operate, improve, analyze, benchmark, and commercialize Filter's products and services, including Market Data Products, subject to this Addendum.

9.2 Filter will not disclose raw Customer Data, raw Customer Materials, customer-specific transaction records, contract-specific data, invoice-specific data, or identifiable counterparty data to another customer or third party except as necessary to provide the Services, as required by law, or as expressly authorized by Customer.

9.3 Market Data Products must not identify Customer, any Authorized User, any individual, any specific counterparty, any contract, any invoice, any shipment, or any individual transaction. Filter will apply commercially reasonable safeguards designed to reduce reidentification risk, including aggregation, deidentification, suppression of small cells where appropriate, and restrictions on disclosure of raw or customer-specific data.

9.4 Unless otherwise stated in an Order Form, Customer may use Market Data Products only for Customer's internal business purposes and may not resell, publish, sublicense, reverse engineer, reidentify, attempt to reidentify, or use Market Data Products for unlawful or anticompetitive purposes.

9.5 Filter may establish additional product-specific rules, cohort thresholds, time delays, suppression rules, or access restrictions for Market Data Products. Those rules may be included in an Order Form, product documentation, or a separate written addendum.

10. International Transfers

10.1 The Services are intended for U.S.-based processing unless otherwise agreed in writing. If applicable data protection law requires additional transfer mechanisms, the parties will cooperate in good faith to implement appropriate mechanisms.

11. Survival

11.1 Sections concerning Aggregated Data, Deidentified Data, Market Data Products, confidentiality, limitations on use, return/deletion, and any provisions that by their nature should survive will survive termination or expiration of the Agreement.

12. Electronic Execution

12.1 This Addendum is executed together with the Agreement and requires no separate signature. Customer's electronic signature on the Agreement under Section 19 of the Agreement executes this Addendum at the same moment and on the same terms, and Filter records this Addendum's version and cryptographic hash alongside the Agreement's in the same signature record.

12.2 No countersignature by Filter is required for this Addendum to be effective.

12.3 Where Customer and Filter have entered into a separately negotiated and executed data processing agreement or equivalent covering the same subject matter, Section 18.6 of the Agreement governs and that executed agreement controls to the extent of any conflict.