Digital Operational Resilience Addendum (DORA) — Available on Request

Note: This Addendum is NOT a standard customer-facing document. It is available on request only for enterprise customers who are financial-sector entities subject to Regulation (EU) 2022/2554 (DORA). Standard Australian trade, construction and service-business customers are not subject to DORA.

1. Application

1.1 This Addendum is available only where a Customer is a financial-sector entity or otherwise requires contractual terms relating to Regulation (EU) 2022/2554 on digital operational resilience for the financial sector.

1.2 This Addendum does not apply to standard Australian trade, construction or service business customers unless expressly incorporated into an SOW.

1.3 The Customer must notify Tradie View Pty Ltd if it considers itself subject to DORA or similar operational resilience obligations.

2. Relationship with the Agreement

2.1 This Addendum supplements the Terms & Conditions, Data Processing Addendum, Product Terms and applicable SOW.

2.2 If there is a conflict, this Addendum prevails only to the extent necessary for the applicable DORA-related obligation and only for the relevant ICT services stated in the SOW.

3. ICT services and location

3.1 The SOW must identify the relevant ICT services, service locations, data processing locations, subcontractors and any criticality assessment required by the Customer.

3.2 Tradie View Pty Ltd will notify the Customer of material changes to processing locations or relevant providers where required by the SOW or applicable law.

4. Security and resilience

4.1 Tradie View Pty Ltd will maintain reasonable technical and organisational measures designed to support the availability, authenticity, integrity and confidentiality of Customer Data.

4.2 Measures include access controls, encryption (TLS/HTTPS and at-rest), monitoring, backups, logging, incident response, provider controls and recovery processes as described in the Security Statement and Data Processing Addendum.

5. ICT incident assistance

5.1 Tradie View Pty Ltd will provide reasonable assistance for ICT-related incidents affecting the relevant ICT services supplied to the Customer.

5.2 Assistance beyond the included support plan may be charged at then-current hourly rates unless the SOW states otherwise.

6. Data recovery and return

6.1 On termination, insolvency, discontinuation of relevant ICT services or other exit event, Tradie View Pty Ltd will use reasonable efforts to make available Customer Data in an accessible export format for 30 days, subject to technical limitations and outstanding Fees unless prohibited by law.

6.2 On request, Tradie View Pty Ltd will use reasonable efforts to delete Customer Data in its possession or control, subject to legal retention, backups and technical limitations.

7. Cooperation with competent authorities

7.1 Where legally required and within reasonable scope, Tradie View Pty Ltd will cooperate with competent regulators or resolution authorities in relation to the relevant ICT services supplied to the Customer.

7.2 Cooperation may be subject to confidentiality, security, legal privilege, third-party provider restrictions and reasonable cost recovery.

8. Training and information assistance

8.1 Where reasonably required by the Customer's resilience training program, Tradie View Pty Ltd may provide subject matter expertise about the relevant ICT services.

8.2 Unless the SOW states otherwise, such sessions are virtual, available no more than once every two years, limited to three hours and charged at then-current rates.

9. Termination rights

9.1 The Customer may terminate relevant ICT services if Tradie View Pty Ltd is in significant breach of applicable law or the Agreement, material impediments arise that affect performance, evidenced weaknesses materially affect Customer Data protection, or a competent authority requires termination.

9.2 Except where immediate termination is legally required, the Customer must provide a 30-day remediation period before termination.

9.3 Termination does not release the Customer from Fees already accrued or Fees payable for the committed term unless required by law or agreed in writing.

10. Request process

10.1 To request the full DORA Addendum for your enterprise engagement, contact support@tradieview.com.