### Knit Subprocessors

To support Knit in delivering its services, we may use third-party service providers to assist us with data processing activities. Where we act as a data processor, these third parties are known as subprocessors. A Knit subprocessor is a third-party service provider that assists Knit with processing activities on personal data of data subjects in the EU. In the table below we identify our subprocessors.

From time to time, we may need to add or remove a subprocessor if we feel it is necessary, but any subprocessor we engage with will need to comply with the same data protection obligations as we set out in our Terms of Use. Account Holders can object, in writing, to the processing of their personal data by a new subprocessor within 30 days of them appearing on this list and shall provide a legitimate reason to object. If no such objection is received within the 30-day period, the new subprocessor(s) shall be deemed accepted.

| **Name of subprocessor**   | **Service provided**            | **Location**       | **Date due to be added** | **Cybersecurity Compliances**                       |
|--------------------------|---------------------------------|-------------------|------------------------|--------------------------------------------------|
| AWS Cloud                | Cloud hosting                   | USA               | Existing               | ISO 27001, SOC 2, GDPR, HIPAA                    |
| Github                   | Version control                 | USA               | Existing               | SOC 2, ISO 27001, GDPR                            |
| MongoDB Atlas            | Database as a service          | USA               | Existing               | ISO 27001, SOC 2, GDPR, HIPAA                    |
| Lucid/Cint               | Survey panel providers          | USA/Global        | Existing               | GDPR, ISO 27001                                   |
| Qualtrics                | Survey Tool                    | USA               | Existing               | ISO 27001, SOC 2, GDPR, HIPAA                    |
| Rev.ai                   | Speech-to-text services         | USA               | Existing               | ISO 27001, SOC 2, GDPR                            |
| Highcharts               | Data visualization              | Global            | Existing               | SOC 2                                            |
| Highcharts               | Presentation API                | USA               | Existing               | ISO 27001, SOC 2, GDPR, HIPAA                    |
| Highcharts               | Spreadsheet API                | USA               | Existing               | ISO 27001, SOC 2, GDPR, HIPAA                    |
| Google Drive API         | Cloud storage API              | USA               | Existing               | ISO 27001, SOC 2, GDPR, HIPAA                    |
| OpenAI                   | AI and machine learning        | USA               | Existing               | SOC 2                                            |
| Pipe Video Recorder      | Video processing                | USA               | Existing               | GDPR                                             |
| Mixpanel                 | Product analytics              | USA               | Existing               | ISO 27001, SOC 2, GDPR                            |
| Sonarcloud               | Code quality                   | Global            | Existing               | ISO 27001                                       |
| Remotion                 | Video collaboration             | USA               | Existing               | Not publicly available                             |
| Sentry                   | Error tracking                 | USA               | Existing               | SOC 2, GDPR                                      |
| Coreweave               | GPU cloud                      | USA               | Existing               | SOC 2, ISO 27001                                  |
| Browserstack             | Web testing platform            | Global            | Existing               | ISO 27001, SOC 2, GDPR                            |
| Portkey                 | Identity management             | USA               | Existing               | Not publicly available                             |
| Respondent               | Survey panel providers          | Global            | Existing               | SOC 2, GDPR                                      |
| Paradigm                 | Survey panel providers          | Global            | Existing               | Not publicly available (likely HIPAA)              |
| Logit                    | Survey panel providers          | Global            | Existing               | ISO 27001, SOC 2, GDPR, HIPAA, PCI DDS           |
| Sago                     | Survey panel providers          | Global            | Existing               | Not publicly available                             |
| Emporia                  | Survey panel providers          | Not publicly available | Existing           | Not publicly available                             |
| ROI Rocket               | Survey panel providers          | Not publicly available | Existing           | Not publicly available                             |
| Audience Align           | Survey panel providers          | Global            | Existing               | Not publicly available                             |
| Quest Mindshare          | Survey panel providers          | Global            | Existing               | Not publicly available                             |
| Insights Opinion         | Survey panel providers          | Global            | Existing               | GDPR                                             |
| Prodege                  | Survey panel providers          | Global            | Existing               | Not publicly available                             |
| PureSpectrum             | Survey panel providers          | Global            | Existing               | Not publicly available                             |
| Zamplia                  | Survey panel providers          | Global            | Existing               | Not publicly available                             |