personally identifiable data and that a program is in place to notify the company in the event of any variance from these measures. Yes, we have comprehensive provisions in place to ensure compliance with various data privacy laws and regulations, including the GDPR in Europe, data privacy provisions in other countries or regions, and United States data breach laws. Additionally, we maintain ongoing protection of personally identifiable data and have a robust notification program for any variances from our security measures. We have DPAs in place with all our data processors, ensuring GDPR compliance. We collect only the data necessary for the intended purpose and ensure it's processed in alignment with GDPR principles. We have procedures to promptly respond to data subject requests, such as access, rectification, and erasure requests. Conducted for high-risk data processing activities to identify and mitigate risks. We adhere to the data protection laws of each country or region where we operate or process data, including the Colorado Privacy Act (CPA), the California Consumer Privacy Act as amended by the CPRA (CCPA), PIPEDA in Canada, and other applicable US state and national laws. Do not treat Trust Center badges as certifications. Consumer rights requests go to support@relayto.com as described in the US State Privacy Addendum. We comply with data breach laws of all U.S. states where our customers are located, including breach notification requirements. We have a well-defined incident response plan for timely notification and remediation in case of data breaches. See our Data Processing Agreement, above . Does RELAYTO utilize any Artificial Intelligence utilities such as ChatGPT or any similar utility? Which AI features use external models? AI Content Chat and the AI Agent use listed third-party LLMs. AI-assisted microsite builder and content apps also use listed third-party LLMs (OpenAI and/or Anthropic Claude). Customer content is not used to train foundation models. Customer can disable these features at workspace or asset level. A written disable request for a named Customer workspace stays off until that Customer asks to restore it. Cookie Policy RELAYTO/ Cookie Policy Cookies Policy (see more on Cookies in our Privacy Policy) RELAYTO uses cookies on its website (relayto.com) and applications (collectively, the "RELAYTO Services"). You can find out more about cookies and how to control them in the information below. By using the RELAYTO Services, you accept the use of cookies in accordance with this Cookie Notice. In particular, the web application does not use targeting or advertising cookies. Functional and analytics cookies are described in the table below. 47 of 53