Yes. Web analytics for the customer’s content is stored, including IP addresses with device information. This is stored for the duration of the agreement. Will copies of audit logs be made available to Customer on request? Yes Are Intrusion Detection or Prevention tools used at your network, on servers, and/or workstations? Yes, our company utilizes Cloudflare's suite of products which includes advanced Intrusion Detection and Prevention tools. These tools are integrated across our network, servers, and workstations to ensure robust security against unauthorized access and potential cyber threats. Does your company have a computer incident or emergency response team with a formal process to respond to cyberattacks? Yes, our company has a dedicated Computer Incident or Emergency Response process in place to respond to cyberattacks. In the event of a cyber incident, the RELAYTO Infrastructure/Security Team is responsible for implementing our response plan, which includes the following key components: Immediate Identification and Assessment, Containment and Mitigation, Notification Protocol, Investigation and Analysis, Recovery and Restoration, Post-Incident Review and Improvement How many of your personnel have either onsite or remote access to Customer data? Only named, authorized RELAYTO Limited personnel whose job requires it. The number is the smallest set needed for the Customer's support package. Access is reviewed on hire, role change, and termination. All access is logged. Are background checks performed on all of your personnel who have access to Customer data? Yes Are all such personnel required to sign written confidentiality agreements that prohibit disclosure and use of Customers’ data and other confidential information? Yes Does RELAYTO utilize Open Source software in its operation? Yes. The RELAYTO platform utilizes some of the open-source frameworks and libraries, e.g. Angular, Symfony. File the request for the full list separately over email. What is RELAYTO AI’s architecture? RELAYTO AI architecture (text description, 20 September 2026) Edge and delivery. Customer and reader traffic reaches relayto.com, a customer custom domain (CNAME to dns.relayto.com), or an embed on the customer CMS or intranet. Traffic is terminated over SSL/TLS at a global CDN and web application firewall operated with Amazon CloudFront and Cloudflare. Application. The RELAYTO AI client application provides the document editor, interactivity editor, branding controls, and modular extensions. Requests pass an API load balancer, then application firewall and access control, then service instances: static asset storage, data-processing instances, analytics instances, and 40 of 53