Master Software-as-a-Service Agreement Amplify Health Asia Pte. Limited [Insert Customer Name] [Insert Date] Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 Amplify Health confidential and proprietary information. Not for Distribution. 1 Amplify Health confidential and proprietary information. Not for Distribution. 2 Sep 2025 Contents Parties .......................................................................................................................................................................................... 3 Agreed terms .............................................................................................................................................................................. 3 1. Definitions and interpretation ...................................................................................................................................... 3 2. Commencement and duration ..................................................................................................................................... 6 3. Ordering Services ........................................................................................................................................................... 7 4. Amplify Health's responsibilities .................................................................................................................................. 8 5. Subscription Services ..................................................................................................................................................... 8 6. Customer's responsibilities ........................................................................................................................................... 8 7. Acceptance Testing ...................................................................................................................................................... 11 8. Warranties .................................................................................................................................................................... 11 9. Charges and payment ................................................................................................................................................. 11 10. Intellectual Property .................................................................................................................................................... 13 11. Confidentiality and data ............................................................................................................................................. 15 12. Limitation of liability .................................................................................................................................................... 15 13. Termination .................................................................................................................................................................. 16 14. Audit .............................................................................................................................................................................. 17 15. Force Majeure .............................................................................................................................................................. 17 16. Notices .......................................................................................................................................................................... 18 17. Dispute Resolution ...................................................................................................................................................... 18 18. Miscellaneous .............................................................................................................................................................. 19 Schedule 1 Template Order Form ......................................................................................................................................... 21 Schedule 2 Template Statement of Work ............................................................................................................................. 22 Schedule 3 Security and Privacy Exhibit ............................................................................................................................... 24 Schedule 4 Support and Maintenance Service Level Agreement ...................................................................................... 28 Schedule 5 Change Order Template ……………………………………………………………………………………………………………………… 31 Parties Amplify Health Company Name Company Number Address Customer Company Name Company Number Address Agreed Terms 1 Amplify Health Asia Pte. Limited UEN: 202207084R Singapore Branch office 21 Collyer Quay, #08-00 21 Collyer Quay, Singapore 049320 [Insert Customer Company Name] [Insert Customer Address] Definitions and interpretation 1.1 Definitions In this Agreement the following definitions apply: Acceptance Criteria means in respect of a Deliverable or group of Deliverables that the parties agree in the applicable Statement of Work is to be subject to Acceptance Testing, the technical, functional and performance criteria that the Deliverable or group of Deliverables must meet in order to pass the Acceptance Tests, as set out in, or prepared in the manner and at the time required under, the applicable Statement of Work. Acceptance Tests means, in respect of any Deliverable that the parties agree in the applicable Statement of Work is to be subject to acceptance testing, the tests and verification processes to be performed in respect of the Deliverable which is in accordance with the applicable Statement of Work and otherwise in accordance with clause 7 (Acceptance Testing) and "Acceptance Testing" has a corresponding meaning. Acceptance Test Certificate means in respect of a Deliverable or group of Deliverables, a written certificate to be issued by Customer to Amplify Health which states that the relevant Deliverable or group of Deliverables has passed the Acceptance Tests. Authorised Users means those employees of the Customer who are authorised by the Customer to use the Services and the Documentation. Business Day means a day other than a Saturday, Sunday or public holiday in Singapore. Charges means: the charges for the Subscription Services, as set out in each Order Form; the charges for Implementation Services, as set out in the relevant Order Form; any other amounts payable by the Customer under this Agreement, such as charges for preparing Statements of Work. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 3 Confidential Information means any information, know-how or material in any form, whether provided before or after the Commencement Date of this Agreement, obtained by a party pursuant to this Agreement, and which is by its nature confidential, is designated by the disclosing party as confidential or which the receiving party ought reasonably know is confidential, but does not include any information to the extent the receiving party can show the relevant information: (a) (b) (c) (d) (e) is part of or legitimately enters the public domain; is already or becomes in the unrestricted possession of the receiving party without there having been a breach of a third party's obligations of confidentiality; has been independently developed by the receiving party (as evidenced by records in its possession); is not intended to be confidential as evidenced by the written agreement of the disclosing party; or legally must be disclosed, or is required to be disclosed pursuant to the listing rules of any applicable stock exchange, any applicable laws and regulations or at the request of any regulators having jurisdiction over the receiving party (provided that the receiving party shall provide prior notification to the disclosing party to the extent allowed by such laws or regulations). Customer Datasets means the data inputted by the Customer, Authorised Users, or Amplify Health on the Customer's behalf, for the purposes of using the Services or facilitating the Customer's use of the Services Customer Dependencies means the Customer's obligations set out in clause 5 and any other tasks and provision of any equipment or material specified as "Customer Dependencies" in any Order Form or a Statement of Work. Customer Materials means documents, information, items and materials (including Customer Data, software or hardware) in any form, whether owned by the Customer or a third party, which are provided by or on behalf of the Customer to Amplify Health in connection with the Services. Deliverables means any deliverables to be provided by Amplify Health to the Customer (if any), as may be more particularly described in a Statement of Work. Derivative Materials means materials, data and insights derived or created by or on behalf of Amplify Health or its personnel which are based on, or created or derived from, or co-mingled with, any Customer Data. Documentation means, in respect of the Subscription Services, any documents made available to the Customer by Amplify Health from time to time which set out a description of the Subscription Services and/or the user instructions for the Subscription Services (including technical restrictions and acceptable use policies). Force Majeure Event has the meaning given in clause 15.1. Industry Best Practice means that degree of skill, diligence, prudence and foresight which would reasonably and ordinarily be expected from a skilled, reasonable and experienced Amplify Health of services and/or deliverables equivalent to the Services and/or Deliverables in the same or similar circumstances (including the information technology industry), with reference to reasonable standards and practices. Implementation Services means the implementation services to be provided to the Customer and specified in a Statement of Work. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 4 Intellectual Property Rights means all intellectual property rights including current and future, registered and unregistered rights in respect of copyright, designs, circuit layouts, trade marks, trade secrets, know how, Confidential Information, patents, inventions and discoveries and all other intellectual property as defined in article 2 of the convention establishing the World Intellectual Property Organisation 1967. Normal Business Hours means 9.00 am to 5.00 pm Singapore time, each Business Day. Order Form means a document agreed in accordance with clause 3.1, describing the Subscription Services to be provided by Amplify Health, the Support Services, Charges for those services and related matters. Order Forms will be in substantially the same form as the template order form in Exhibit1. Personal Information or PI means any information: that is used, alone or in combination, that identifies or relates to an individual who can be identified, including but not limited to name, postal address, email address, telephone number, age or date of birth, gender, demographic information, marketing preferences, medical information, financial information, consumer report information; and any other information that is defined as personal information, personal data or analogous term in the applicable Privacy Laws. Privacy Law means any applicable law, statute, regulation, ordinance, code, standard or requirements of any government, governmental or semi-governmental body which relates to data privacy, personal data or health information. Security Incident means an unauthorised access to or disclosure of Customer Data from the Subscription Services. Service Levels means any service levels in respect of the Subscription Services as set out in the Support Services Policy. Services means the: (a) Subscription Services; (b) Support Services; and (c) Implementation Services; specified in an Order Form or Statement of Work. Solution means the solution(s) and any modules listed in an Order Form. The features and functionality of the Solutions are more fully described in the Documentation. Statement of Work (or “SOW”) means a document substantially in the form attached as Schedule 2, agreed between the parties in accordance with clause 3.3, describing the Implementation Services and any other services to be supplied by Amplify Health, the Charges for those services and other commercial details. Subscription Renewal Period means the period for which the Order Form will renew under clause 2.2. Subscription Services means making available of the Solution in accordance with the terms of this Agreement. Subscription Term means the initial term of Subscription Services as specified in the Order Form together with all Subscription Renewal Periods. Support and Maintenance SLA means Amplify Health's service level agreement for providing support and maintenance in relation to the Services as updated by Amplify Health from time to time. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 5 Support Request means any request or trouble ticket raised by an Authorised User in respect of a defect in a Solution. Support Services means the support services specified in an Order. An Order may specify support services by reference to the Support and Maintenance SLA (for example, by referencing a 'tier' of support services the Customer has chosen to purchase). Tax or Taxes means all taxes, levies, duties, imposts, charges and withholdings of any nature, including taxes on gross or net income, profit or gains and taxes on receipts, sales, use and/or occupation and includes value added tax, goods and services tax and other supply taxes. T&M Rates means Amplify Health's standard time and materials charges (such as hourly rates) for Implementation Services and other services offered by Amplify Health, set out in the relevant Order Form or Statement of Work, as updated by Amplify Health from time to time in accordance with this Agreement. Term has the meaning given in clause 2.1. Vulnerability is any weakness arising from a design flaw, security defect, the presence of disabling code, or other vulnerability that could enable, permit or assist in the storage and/or execution of any disabling code, or which could be exploited to gain unauthorised access to any software or system. 1.2 1.3 1.4 Interpretation In the interpretation of this Agreement, the following provisions apply unless the context otherwise requires: (a) (b) (c) (d) (e) (f) (g) (h) (i) (j) Headings are inserted for convenience only and do not affect the interpretation of this Agreement. If the day on which any act, matter or thing is to be done under this Agreement is not a Business Day, the act, matter or thing must be done on the next Business Day. All dollar amounts referred to this Agreement are in Singapore Dollars unless specified otherwise. A reference in this Agreement to any law, legislation or legislative provision includes any statutory modification, amendment or re-enactment, and any subordinate legislation or regulations issued under that legislation or legislative provision. A reference in this Agreement to any document or agreement is to that document or agreement as amended, novated, supplemented or replaced. A reference to a clause, Schedule or attachment is a reference to a clause, Schedule or attachment of or to this Agreement. An expression importing a natural person includes any company, trust, partnership, joint venture, association, body corporate or governmental agency. Where a word or phrase is given a defined meaning, another part of speech or other grammatical form in respect of that word or phrase has a corresponding meaning. A word which indicates the singular also indicates the plural, a word which indicates the plural also indicates the singular, and a reference to any gender also indicates the other genders. A reference to the word "include" or "including" is to be interpreted without limitation. This Agreement is comprised of these general terms and conditions and any Order Forms Statements of Work, the Documentation and the Schedules. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 6 1.5 2 2.1 2.2 2.3 3 3.1 3.2 3.3 3.4 3.5 In the event of any conflict between the parts of this Agreement, the following order of precedence will apply (in descending order): (a) (b) (c) (d) (e) (f) this Agreement; a Change Order an Order Form; a Statement of Work; the Support and Maintenance SLA; and the Documentation. Commencement and duration This Agreement shall commence on the _____________ (“Commencement Date”) and shall continue until terminated earlier in accordance with the terms of this Agreement (Term). The Subscription Services shall commence on the Commencement Date specified in the Order Form until the end of the term specified in the Order Form (or if no term is specified, 24 months from the Commencement Date of the Order Form). The Subscription Term will be automatically extended by consecutive periods specified in the Order Form (or if no period is specified, consecutive periods of 24 months) (Subscription Renewal Term) at the end of the initial term or then current Subscription Renewal Period, unless either party gives the other a notice of non-renewal at least 60 days before the expiry of the then-current term. Each Statement of Work shall commence on the Commencement Date specified in the relevant document and continue for the term specified in that Statement of Work. Ordering Services Order Forms From time to time during the Term, the Customer and Amplify Health may agree an Order Form, which will include details of the Solution(s) supplied to the Customer under that Order Form, the Support Services to be provided (if any) as well as the Charges for those Services. An Order Form will be deemed to be incorporated into this Agreement and binding on the parties upon that Order Form being executed by the parties. An Order Form may specify additional conditions that the parties must comply with. Statements of Work From time to time during the Term, the Customer and Amplify Health may agree a Statement of Work for Implementation Services. Statements of Work will set out the details of the particular Implementation Services and/or other services to be supplied under that Statement of Work, such as a description of the services and the Charges for them. A Statement of Work will be deemed to be incorporated into this Agreement and binding on the parties upon that Statement of Work being executed by the parties. A Statement of Work may specify additional conditions that the parties must comply with. Amplify Health may charge for the preparation of Statements of Work on a time and materials basis in accordance with Amplify Health's then current T&M Rates. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 7 3.6 3.7 4 4.1 4.2 5 5.1 5.2 5.3 5.4 5.5 6 6.1 Amplify Health shall use reasonable endeavours to meet any timeframes specified in a Statement of Work but any such dates shall be estimates only and time for performance by Amplify Health shall not be of the essence of this Agreement. Changes in Scope Customer may, upon written notice to Amplify Health, request additions, reductions, or other changes to the scope of any Services to be provided pursuant under a particular SOW or Order Form (such request, a “Change Request”). Within three (3) business days of Amplify Health’s receipt of a Change Request from Customer, Amplify Health shall provide Customer with a written response (a “Change Order”) detailing the tasks necessary to accomplish the proposed changes in scope and/or services set forth in such Change Request, as well as any changes in the Charges that may arise therefrom and any impact on the project timeline or milestones. Each Change Order shall be in a format substantially similar to that of the Sample Change Order attached hereto as Schedule 5. Amplify Health shall use reasonable, good faith efforts to accommodate each Change Request, at rates no greater than the applicable rates, if any, set forth in the SOW or Change Order to which such Change Request applies. Both parties shall bear their own expenses in reviewing and preparing Change Requests and Change Orders. Customer reserves the right to accept or reject any or all Change Orders received from Amplify Health. No Change Order shall bind either Party unless and until Customer has accepted the terms and conditions of such Change Order in writing, in which event the terms and conditions proposed by Amplify Health in such Change Order shall be deemed an amendment to the applicable SOW or Change Order. Amplify Health's Responsibilities Amplify Health shall perform the Services and provide the Deliverables in accordance with the terms of this Agreement. Amplify Health will comply with all laws and regulations applicable to it in respect of the supply of the Services. Subscription Services Amplify Health grants to the Customer a non-exclusive, non-transferable non-sublicensable right to access and use, and to permit the Authorised Users to access and use, the Subscription Services during the Term solely for the Customer's internal business operations. Amplify Health may provide the Customer with one set of administrator login credentials, which will enable the Customer's administrator to create accounts and permissions for Authorised Users. The administrator is an Authorised User. Amplify Health grants to the Customer a non-exclusive, non-transferable non-sublicensable right to prepare, reproduce, print, download, and use a reasonable number of copies of the Documentation as may be necessary for the Customer's and its Authorised Users' use of the Subscription Services. Amplify Health shall use reasonable endeavours to make the Subscription Services available in accordance with the Service Levels set out in the Support and Maintenance SLA. Amplify Health will, as part of the Subscription Services and unless specified otherwise in the Order Form, at no additional cost to the Customer, provide the Customer with the Support Services during Normal Business Hours in accordance with the Support and Maintenance SLA. Amplify Health may amend the Support and Maintenance SLA from time to time, provided that such amendments do not materially adversely affect the standard of Support Services provided in respect of the relevant Solution(s). Customer's responsibilities The Customer shall: Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 8 (a) co-operate with Amplify Health in all matters relating to the Services; (b) (c) (d) (e) (f) 6.2 provide, for Amplify Health, its agents, subcontractors, consultants and employees, in a timely manner and at no charge, all documents, information, items and materials, and access to the Customer's systems and data, as reasonably required for the performance of the Services; comply with all applicable laws and regulations in respect of its receipt and use of the Services; where Amplify Health is to perform any services at the Customer's premises, inform Amplify Health of all health and safety and security requirements that apply at the Customer's premises; obtain and maintain all necessary licences and consents and comply with all relevant legislation (if any) as required to enable Amplify Health to provide the Services to the Customer before the date on which the Services are to start; and comply with any additional responsibilities of the Customer as set out in the Schedules, any Order Forms and any Statements of Work. The Customer may (via its administrator account) issue access credentials to Authorised Users. 6.3 6.4 6.5 6.6 6.7 6.8 The Customer shall, and must ensure that each Authorised User shall, keep the access credentials confidential, and must ensure that access credentials are only used by the individual to whom they are assigned, and not shared by multiple individuals. Where applicable, the Customer is responsible for setting the level of access and permissions for each Authorised User (by using the administrator account). The Customer acknowledges the Subscription Services are provided on an "as a service" basis and may be provided on a shared service basis to other clients of Amplify Health from a common code base and/or common environment. Amplify Health may from time to time: (a) (b) (c) change add or delete the functions, features, performance, or other characteristics of the Subscription Services; correct errors or upgrade the Subscription Services; and update the Documentation from time to time, including to reflect any changes to the Subscription Services. If Amplify Health advises the Customer (such as via a notification in the Solution or via email) that the Customer must upgrade to a new version of a Solution or download and install new components for a Solution, the Customer must do so in such timeframe as specified in the Documentation. If the Customer does not do so: (a) (b) (c) the Customer acknowledges that the version of the Solution it is using will become unsupported, and Amplify Health will not be required to provide any Support Services in respect of the Solution; Amplify Health will not be liable for any breach of warranty, defect or failure to meet the Service Levels in respect of the Solution; and Amplify Health may suspend the Customer's and its Authorised Users' access to the Solution. Changes to the Subscription Services may also be made in accordance with an Order Form or Statement of Work. The Customer shall not, and shall procure that the Authorised Users do not, access, store, distribute or transmit any material during the course of their use of the Subscription Services that is: Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 9 (a) unlawful, harmful, threatening, defamatory, obscene, infringing, harassing or racially or ethnically offensive; (b) (c) 6.9 otherwise illegal or causes damage or injury to any person or property; or a Virus. The Customer shall not and shall procure that its Authorised Users shall not: (a) 6.10 except as may be allowed by any applicable law which is incapable of exclusion by agreement between the parties and except to the extent expressly permitted under this Agreement: (i) (ii) (iii) (iv) (v) (vi) attempt to copy, modify, duplicate, create derivative works from, frame, mirror, republish, download, display, transmit, or distribute all or any portion of the Subscription Services and/or Documentation in any form or media or by any means; attempt to de-compile, reverse compile, disassemble, reverse engineer or otherwise reduce to human-perceivable form all or any part of the Subscription Services; license, sell, rent, lease, transfer, assign, distribute, display, disclose, or otherwise commercially exploit, or otherwise make the Subscription Services and/or Documentation available to any third party except the Authorised Users; attempt to obtain, or assist third parties in obtaining, access to the Subscription Services and/or Documentation, other than as provided under this Agreement; or attempt to obtain, or assist third parties in obtaining, access to information or data it is not entitled to receive under this Agreement; or access or use all or any part of the Subscription Services and Documentation in order to build a product or service which competes with the Subscription Services. The Customer shall use best endeavours to prevent any unauthorised access to, or use of, the Subscription Services and/or the Documentation and, in the event of any such unauthorised access or use, the Customer must promptly notify Amplify Health. 6.11 6.12 The Customer must ensure that: (a) (b) the Authorised Users use the Subscription Services and the Documentation in accordance with the terms and conditions of this Agreement and shall be responsible for its Authorised Users' acts and omissions as if they were those of the Customer; and its network and systems comply with the relevant specifications provided by Amplify Health from time to time (including any specifications or minimum requirements specified in the Documentation). If Amplify Health's performance of its obligations under this Agreement is prevented or delayed by: (a) (b) (c) any Customer Dependency not being performed or provided; or any act or omission of the Customer, its agents, subcontractors, consultants or employees, then, without prejudice to any other right or remedy it may have, Amplify Health shall be allowed an extension of time to perform its obligations equal to the delay caused by the Customer and the Customer must reimburse Amplify Health for any costs incurred in connection with that delay. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 10 6.13 7 7.1 7.2 7.3 8 8.1 8.2 8.3 8.4 8.5 9 9.1 9.2 The Customer must, and must ensure its Authorised Users, comply with any instructions, technical requirements and acceptable use policies set out in the Documentation. Acceptance Testing This clause 7 applies to Deliverables if the Statement of Work under which those Deliverables are to be supplied specifies that Acceptance Testing is required. Amplify Health will notify Customer when the Deliverable is ready for Acceptance Testing. Customer will run the Acceptance Tests on the Deliverable in accordance with the Acceptance Test timeframe specified in the Statement of Work (or if no timeframe is specified, within five Business Days of Amplify Health's notice) to ensure the Deliverable meets the relevant Acceptance Criteria. Warranties Each party warrants to the other party that it has full power and capacity to execute, deliver, and perform its obligations under, this Agreement. Amplify Health warrants that: (a) (b) it has and will maintain all necessary licences, consents and permissions necessary for the performance of its obligations under this Agreement; and the Solutions will perform substantially in accordance with the Documentation. This warranty shall not apply if the Solutions are not used in accordance with this Agreement, or the non-conformity is caused by third party services, content or products or any modifications, configurations or customisations to the Solutions by anyone other than Amplify Health. The Customer shall promptly report to Amplify Health any non-conformities and Amplify Health will use reasonable endeavours to correct the non-conformity. This is Customer's exclusive remedy and Amplify Health's sole liability for any failure of the Modules to conform with the Documentation. Amplify Health does not warrant that: (a) (b) (c) (d) the Customer's use of the Subscription Services will be uninterrupted or error free; the Services, Documentation and/or the information and/or the information obtained by the Customer through the Services will meet the Customer's requirements; the use of any Solution will result in cost savings, profit improvement or any other specific outcome for the Customer. The Customer is solely responsible for the results obtained from the use of the Solutions and for conclusions drawn from them; or the Subscription Services will be free from Viruses. Amplify Health is not responsible for any delays, delivery failures, or any other loss or damage resulting from the transfer of data over communications networks and facilities, including the internet, and the Customer acknowledges that the Services may be subject to limitations, delays and other problems inherent in the use of such communications facilities. Charges and payment In consideration of the provision of the Services by Amplify Health, the Customer shall pay the Charges. Charges for Subscription Services will be the subscription fees specified in the Order Form, which will be payable in accordance with the Order Form. Charges for other Services will be calculated using the T&M Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 11 Rates applicable at the time the work is performed, unless the Statement of Work specifies an alternative charging structure. 9.3 9.4 9.5 9.6 9.7 9.8 9.9 Amplify Health shall invoice the Customer for the Charges payable under a Statement of Work at the intervals specified in the Statement of Work. If no intervals are so specified, Amplify Health shall invoice the Customer: (a) (b) annually in advance for Charges for Subscription Services and Support Services; and monthly in arrears for all other Services and Charges (including any consumption-related Charges) due under this Agreement. The Customer shall pay each invoice submitted to it by Amplify Health within 30 days of receipt to a bank account nominated by Amplify Health from time to time. Without prejudice to any other right or remedy that it may have, if the Customer fails to pay Amplify Health any sum due under this Agreement on the due date: (a) the Customer shall pay interest on the overdue sum from the due date until the payment of the overdue sum, whether before or after judgment. Interest under this clause will accrue at the lower of: (i) (ii) (iii) 5% per annum; or the maximum amount permitted under applicable law; and Amplify Health may suspend part or all of the Services until payment has been made in full. Amplify Health shall be entitled to increase the Charges and the T&M Rates in respect of all or any of the Services by giving notice at least 60 days prior to the increase taking effect, provided that Amplify Health shall not be entitled to increase the Charges or T&M Rates more than once in any 12 month period. Unless otherwise expressly specified in this Agreement, all amounts due and payable by Customer to Amplify Health under this Agreement or the applicable Order Form or Statement of Work are exclusive of any Tax. Customer shall be responsible for the payment of all such Taxes, levies and assessments imposed upon Customer or Amplify Health arising from or in connection with this Agreement. Customer shall make all payments to Amplify Health free and clear of, and without reduction for, any Taxes. Any such Taxes imposed on payments to Amplify Health shall be Customer’s sole obligation and responsibility, and Customer shall gross up the Tax to the relevant payment, ensuring that the net amount actually received by Amplify Health (free and clear of withholding Tax, whether assessed against Customer or Amplify Health) shall be equal to the full amount Amplify Health would have received as if no such deduction were required. The parties will take reasonable steps to minimise the amount of Taxes to be paid or withheld in connection with this Agreement, including by providing each other with any certificates or official receipts or other documentation necessary to obtain a reduction in any Tax which would otherwise be payable or subject to a withholding. The Customer agrees: (a) (b) the Customer will promptly notify Amplify Health in writing of any dispute it may have with any invoice; any dispute in relation to Charges which is not resolved by the parties’ service managers within 10 Business Days of the notification of the dispute will be a Matter in Dispute addressed in accordance with the Escalation Procedure; and Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 12 (c) except as agreed otherwise by each party’s authorised representative, any undisputed amount or incorrectly disputed amount not paid when due will bear interest from the due date for payment until the date of payment at an annual rate of interest equal to five (5) per cent. 10 10.1 10.2 10.3 10.4 10.5 10.6 10.7 10.8 Intellectual Property Subscription Services The Customer acknowledges and agrees that Amplify Health and/or its licensors own all Intellectual Property Rights in the Subscription Services, Products, Product Modules, and Documentation. Except as expressly stated herein, this Agreement does not grant the Customer any rights to, under or in, any Intellectual Property Rights, or any other rights or licences, in respect of the Subscription Services and Documentation. Amplify Health grants to the Customer a non-exclusive, non-transferable non-sublicensable right to access and use, and to permit the Authorised Users to access and use, the Subscription Services during the Term solely for the Customer's internal business operations. Customer Data The Customer will provide Amplify Health such access to the Customer Data Amplify Health requires to perform the Services. The Customer grants to Amplify Health, and Amplify Health accepts from the Customer, a non-exclusive, royalty-free, worldwide licence during the Term of this Agreement to use, store, copy and modify the Customer Data for the purpose of providing the Services and otherwise in accordance with this Agreement. The Customer shall own all right, title and interest in and to all of the Customer Data and shall have sole responsibility for the legality, reliability, integrity, accuracy and quality of all Customer Data. Customer Data is the Customer's Confidential Information. The Customer is responsible for maintaining its own backup of Customer Data. The Customer acknowledges and agrees that: (a) (b) (c) Amplify Health may: (i) (ii) (iii) use anonymized Customer Datasets and information about its use of the Services (including without limitation, information required for solution performance monitoring) for research and development, to improve its products and services, and to generate anonymised and aggregated statistical and analytical data (Analytical Data); use Analytical Data for Amplify Health's internal research and product development purposes and to conduct statistical analysis and identify trends and insights; create Derivative Materials from the anonymized Customer Datasets; Amplify Health's rights under clause 10.7(a) will survive termination of expiry of this Agreement; and title to, and all Intellectual Property Rights in, Analytical Data and Derivative Materials is and remains Amplify Health's property and constitute Amplify Health's Confidential Information. Customer represents and warrants that the Customer Datasets have been legally obtained and that the provision of Customer Datasets to Amplify Health in accordance with this Agreement, and Amplify Health's Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 13 processing of Customer Datasets in accordance with this Agreement, will not violate any applicable laws or third party's rights. 10.9 If the Customer provides Amplify Health with ideas, comments or suggestions relating to the Services anything created as a result of that feedback (including new material, enhancements, modifications or Derivative Materials), is owned solely by Amplify Health, and Amplify Health may use or disclose the feedback for any purpose. Deliverables 10.10 In relation to Deliverables: (a) Amplify Health and its licensors shall retain ownership of all Intellectual Property Rights in the Deliverables, excluding Customer Materials; and (b) Amplify Health grants the Customer a worldwide, non-exclusive, non-transferable, non sublicensable licence to use all Deliverables for the purposes of receiving and using the Services and Deliverables in its business. The licence under this clause 10.10(b) is for the term of the Order Form under which the relevant Deliverable is provided. Third party terms 10.11 The Customer must comply with any third party terms applicable to software or other material incorporated into the Services or Deliverables which are: (a) (b) specified in an Order Form or Statement of Work; or otherwise notified to the Customer in writing. Customer Materials 10.12 In relation to Customer Materials: (a) the Customer and its licensors shall retain ownership of all Intellectual Property Rights in the Customer Materials; and (b) the Customer grants to Amplify Health a non-exclusive, royalty-free, licence to use, reproduce, copy and modify the Customer Materials for the Term for the purpose of providing the Services to the Customer and exercising Amplify Health's rights under this Agreement. IP warranties and indemnities 10.13 Amplify Health: (a) warrants that the receipt and use of the Subscription Services by the Customer in accordance with this Agreement shall not infringe the Intellectual Property Rights of any third party; (b) (c) (d) shall, subject to clause 12, indemnify the Customer against all damages awarded against the Customer in a final judgment for any claim brought against the Customer for infringement of a third party's Intellectual Property Rights arising out of, or in connection with, the Customer's receipt or use of the Subscription Services in accordance with this Agreement (IPR Claim); and in the event of an IPR Claim or if Customer's use of the Subscription Services is otherwise enjoined, Amplify Health shall have the right to, at its sole discretion: (i) offer a replacement Subscription Services at no cost to Customer, which replacement shall be substantially equivalent to the Subscription Services; (ii) (iii) procure, at no cost to Customer, the right to continue to use the Subscription Services; or if Amplify Health determines that neither (i) nor (ii) above is commercially practicable, terminate Customer's use of the Subscription Services and refund any Charges prepaid by the Customer covering the remainder of the terminated Order term; shall not be in breach of the warranty at clause 10.13(a) and the Customer shall have no claim under the indemnity in Clause 10.13(b) to the extent the infringement arises from: (i) (ii) the use of Customer Materials in the development of, or the inclusion of the Customer Materials in, the Services or any Deliverable; any modification of the Services or any Deliverable, other than by Amplify Health; or Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 14 (iii) compliance with the Customer's specifications or instructions, provided that Amplify Health shall notify the Customer if it becomes aware that compliance with such specification or instruction would result in infringement of a third party's Intellectual Property Rights. 10.14 Clause 10 sets out Amplify Health's sole liability to Customer and Customer's sole remedy for any IPR Claim. 10.15 The Customer: (a) (b) warrants that the receipt and use of the Customer Materials by Amplify Health, its agents, subcontractors or consultants in accordance with this Agreement, shall not infringe any third party's rights, including any Intellectual Property Rights; and shall, subject to clause 12, indemnify Amplify Health against all costs, damages, fines, and other losses arising out of or in connection with any claim brought against Amplify Health for infringement of a third party's Intellectual Property Rights arising out of, or in connection with, Amplify Health's receipt or use of the Customer Materials, Customer Datasets or other Customer Intellectual Property Rights in accordance with this Agreement. 10.16 If either party (Indemnifying Party) is required to indemnify the other party (Indemnified Party) under this clause 10, the Indemnified Party shall: (a) (b) (c) (d) 11 notify the Indemnifying Party in writing of any claim against it in respect of which it wishes to rely on the indemnity under this clause 10 (as applicable); if requested by the Indemnifying Party, allow the Indemnifying Party, at its own cost, to conduct all negotiations and proceedings and to settle the claim, provided that the Indemnifying Party shall obtain the Indemnified Party's prior approval of any settlement terms, such approval not to be unreasonably withheld or delayed; provide the Indemnifying Party with reasonable assistance regarding the claim as is required by the Indemnifying Party, subject to reimbursement by the Indemnifying Party of the Indemnified Party's reasonable costs so incurred; and not, without prior consultation with the Indemnifying Party, make any admission relating to the claim or attempt to settle it, provided that the Indemnifying Party considers and defends any indemnified claim diligently, using competent counsel and in such a way as not to bring the reputation of the Indemnified Party into disrepute. Confidentiality and data Confidentiality 11.1 11.2 11.3 11.4 Each party undertakes that it shall keep the other party's Confidential Information confidential and shall not at any time during or after the Term of this Agreement, disclose to any person any Confidential Information of the other party, except as permitted by clause 11.2. Each party may disclose the other party's Confidential Information to its employees, officers, representatives, contractors, subcontractors or advisers who need to know such information for the purposes of exercising the party's rights or carrying out its obligations under or in connection with this Agreement. Each party shall ensure that its employees, officers, representatives, contractors, subcontractors or advisers to whom it discloses the other party's Confidential Information comply with this clause 11. No party shall use the other party's Confidential Information for any purpose other than to exercise its rights and perform its obligations under or in connection with this Agreement. Data The parties agree to comply with the Security and Privacy Exhibit in Schedule 3. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 15 12 12.1 12.2 12.3 12.4 12.5 12.6 12.7 12.8 13 Limitation of liability References to liability in this clause 12 include every kind of liability arising under or in connection with this Agreement including liability in contract, tort (including negligence), misrepresentation, restitution, under an indemnity or otherwise. Nothing in this Agreement shall limit: (a) (b) the Customer's payment obligations under this Agreement; or any liability which cannot legally be limited. If there are any defects or non-conformities in the Services or Deliverables or the Services or Deliverables do not comply with this Agreement, Amplify Health's liability is limited, at its option, to the resupply or replacement of the defective Services or Deliverables. The foregoing does not apply to defects or non conformities in the Subscription Services, to which clause 8.2 applies. Subject to Clauses 8.2, 12.2, 12.3 and 12.5, each party's total liability to the other party under or in connection with this Agreement will be limited in the aggregate to the Charges paid by the Customer for the particular Services to which the cause of action relates in the 12 months preceding the date on which the cause of action first arose (or if the claim does not relate to a particular service, the total Charges paid by the Customer under this Agreement in the 12 months preceding the date on which the cause of action first arose). Neither party will be liable under or in connection with this Agreement for any loss of profits, loss of sales or business, loss of agreements or contracts, loss of anticipated savings, loss of or damage to goodwill, loss of use or corruption of data, information or software, business interruption or indirect or consequential loss. Amplify Health does not make any warranty or representation about any third party services or features, including in relation to their availability, functionality or fitness for purpose. Without limiting the foregoing, if a third party feature provider ceases to provide that feature or ceases to make that feature available on reasonable commercial terms, Amplify Health may cease to make available that feature to the Customer. To avoid doubt, if Amplify Health exercises its right to cease the availability of a third party feature, the Customer is not entitled to any refund, discount or other compensation. The only warranties given by Amplify Health in respect of the Services and Deliverables are those expressly set out in this Agreement, and all other conditions, warranties or other terms which might have effect between the parties or be implied or incorporated into this Agreement, whether by statute, common law or otherwise, are hereby excluded to the extent permitted by law, including any conditions, warranties or other terms as to satisfactory quality, fitness for purpose or the use of reasonable skill and care. Amplify Health does not warrant that the use of any Services or Deliverables will be uninterrupted, error free, timely or secure. The Customer accepts responsibility for the selection of any Services or Deliverables to achieve its intended results. Amplify Health makes no representation or warranty with respect to any third party software, data or any third party equipment. Without limiting the foregoing, the Customer acknowledges that the output of the Services depends on inputs provided by the Customer and third parties (such as data sourced from publicly available databases) and that inaccurate inputs may affect the accuracy and reliability of outputs. The Customer must use its own skill and judgement in assessing the outputs of the Services and Amplify Health is not liable for any reliance placed by the Customer or any of its agents, contractors or customers, or any other person, on the outputs of the Services. Termination Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 16 Termination rights 13.1 13.2 13.3 13.4 13.5 13.6 13.7 14 Without affecting any other right or remedy available to it, either party may terminate this Agreement with immediate effect by giving written notice to the other party if: (a) the other party commits a material breach of this Agreement which either cannot be remedied or (if remediable) is not remedied within 30 days after being notified in writing to do so; or (b) the other party is unable to pay its debts or becomes insolvent, or is subject to an order or a resolution for its liquidation, administration, winding-up or dissolution (otherwise than for the purposes of a solvent amalgamation or reconstruction), or has an administrative or other receiver, manager, trustee, liquidator, administrator or similar officer appointed over all or any substantial part of its assets, or enters into or proposes any composition or arrangement with its creditors generally, or is subject to any analogous event or proceeding in any applicable jurisdiction. Without limiting any of Amplify Health's other rights or remedies, Amplify Health may terminate any or all Orders or Subscription Services, or restrict or suspend the Customer's access to and use of the Subscription Services if the consumption of the Subscription Services exceeds any agreed usage limits (as set out in an Order Form), or the Customer or any Authorised Users have: (a) (b) (c) undermined, or attempted to undermine, the security or integrity of the Subscription Services or Documentation; used, or attempted to use, the Subscription Services or Documentation: (i) for improper purposes; or (ii) (iii) in a manner that reduces the operational performance of the Subscription Services; transmitted, inputted or stored any Customer Dataset that breaches or may breach the Agreement or any third party right (including Intellectual Property Rights and privacy rights), or that is or may be objectionable, incorrect or misleading; or otherwise breached this Agreement or any requirements in any Documentation. Either party may terminate an Order Form and/or Statement of Work in accordance with any special terms agreed in that Order Form or Statement of Work. Obligations on termination or expiry On termination or expiry of this Agreement: (a) the Customer shall immediately pay to Amplify Health all of Amplify Health's outstanding unpaid invoices; (b) (c) (d) (e) in respect of the Services supplied but for which no invoice has been submitted, Amplify Health may submit an invoice, which shall be payable by the Customer immediately on receipt; all existing Order Forms and Statements of Work shall terminate automatically; all rights granted under this Agreement shall immediately terminate and the Customer shall immediately cease all use of the Services and the Documentation; and Amplify Health may, if requested by the Customer prior to the termination of this Agreement, agree to make available to the Customer for download the Customer Datasets in Amplify Health's possession, for a period specified by Amplify Health, subject to the Customer paying the applicable Charges specified by Amplify Health. If one or more, but not all, Order Forms and/or Statements of Work is terminated or not renewed in accordance with this Agreement, clause 13.4 applies in respect of the terminated/expired Order Form(s) / Statement(s) of Work (and Services provided and Customer Datasets processed under those them) only, and the remainder of this Agreement and other Order Forms and Statements of Work continue in full force and effect. Any provision of this Agreement that expressly or by implication is intended to come into or continue in force on or after termination or expiry of this Agreement shall remain in full force and effect. Termination or expiry of this Agreement shall not affect any rights, remedies, obligations or liabilities of the parties that have accrued up to the date of termination or expiry, including the right to claim damages in respect of any breach of the Agreement which existed at or before the date of termination or expiry. Audit Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 17 14.1 14.2 15 15.1 15.2 16 16.1 16.2 16.3 17 17.1 The Customer shall permit Amplify Health or Amplify Health's designated auditor to audit the Customer's use of the Services to ensure compliance with this Agreement. Each such audit may be conducted no more than once per quarter, at Amplify Health's expense, and this right shall be exercised with reasonable prior notice, in such a manner as not minimise interference with the Customer's normal conduct of business. If any of the audits referred to in clause 14.1 reveal that the Customer is not using the Services in accordance with this Agreement, Amplify Health may suspend the Services and/or any user account(s), and/or restrict the Customer's ability to issue new access credentials to Authorised Users and, if the audit reveals excess usage of the Services, invoice the Customer for the Charges for the excess usage. Force Majeure A party shall not be liable for any delay in performing, or failure to perform, any of its obligations under this Agreement (except a failure to pay any Charges) if that delay or failure arises directly from circumstances beyond the reasonable control of that party, including acts of God, weather emergencies, natural disasters, epidemic or pandemic, war or riots, labour or trade disputes, non-performance by suppliers or subcontractors, and interruption or failure of a utility service or computing infrastructure not owned by the party seeking to rely on this clause (Force Majeure Event). The Party seeking to rely on this clause must notify the other party as soon as it becomes aware of the Force Majeure Event. If an event or multiple events of Force Majeure affect a party's ability to perform its obligations under this Agreement for more than 30 days in any rolling 60 day period, the other party may terminate this Agreement on written notice to the affected party. Notices Giving notices Any notice or other communication given to a party under this Agreement is only given if it is in writing and delivered by hand with signature obtained on delivery, by first class mail (or equivalent), or by email to the following addresses: For Amplify Health: Attention: [_____] Email: [_____] Amplify Health Asia Pte. Limited 21 Collyer Quay, #08-00 21 Collyer Quay, Singapore 049320 For the Customer: Attention: [_____] Email: [_____] Address: [_____] Notices sent by hand are served when delivered; by first class mail (or equivalent) are served five Business Days after posting; and by email are served when transmitted (without "bounce-back" or other error message). However, if any notice is given on a day that is not a Business Day, or after 5.00pm on a Business Day, in the place of the party to whom it is sent it is to be treated as having been given at the beginning of the next Business Day. Each party may change its address by giving the other party notice of the change in any manner permitted by this Agreement. Dispute Resolution Except where a party seeks urgent interlocutory relief, unless a party has first complied with this clause 17, it may not commence court proceedings. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 18 17.2 17.3 17.4 18 18.1 18.2 18.3 18.4 18.5 18.6 18.7 If a dispute, disagreement or difference arises between the parties in relation to this Agreement (Dispute), either party may give the other written notice (Dispute Notice) requiring that the Dispute be determined in accordance with this clause 17. A party's Dispute Notice must specify the nature of the Dispute and its suggestion for settling the Dispute. The parties will enter into negotiations to resolve the Dispute within 10 Business Days of the giving of the Dispute Notice. Negotiations will be held between the following representatives of the parties (who have authority to settle the Dispute): (a) (b) initially between personnel nominated by each party (and in nominating those personnel, the nominating party must have regard to the nature of the Dispute and the personnel's familiarity with this Agreement, and the personnel must have authority to resolve the Dispute); and if those nominated personnel do not resolve the Dispute within 10 Business Days of the giving of the Dispute Notice, then between the senior executives nominated by each party, who will endeavour to resolve the Dispute within five Business Days of the Dispute being referred to them. If the senior executives do not resolve the Dispute within 20 Business Days of the giving of the Dispute Notice, either party may refer the Dispute to for final settlement by binding arbitration in Singapore under the rules of arbitration of the Singapore International Arbitration Centre by one or more arbitrators appointed in accordance with said rules. The designated venue for dispute resolution shall not affect or impair the right of a party to enforce any award of the above-mentioned arbitrators in the courts of any jurisdiction. The official language of arbitration shall be English. Notwithstanding the foregoing, a party may immediately institute formal proceedings in a court of competent jurisdiction in order to pursue specific performance, an injunction, or other equitable relief. Miscellaneous Non-solicitation The Customer shall not, without the prior written consent of Amplify Health, at any time from the date on which any Services commence to the expiry of 12 months after the termination of this Agreement, solicit or entice away from Amplify Health or employ or attempt to employ any person who is, or has been, engaged as an employee, consultant or subcontractor of Amplify Health. Assignments, transfers and subcontracting The Customer must not assign, subcontract, delegate or transfer any of its rights or obligations under this Agreement. Amplify Health may subcontract the performance of any of its obligations under this Agreement. Publicity A Party shall not use the name, logos or trademarks of the other Party in promotional and marketing material or publicity releases (“Marketing Materials”), without the prior written consent of the other Party. All Marketing Materials shall be coordinated with and approved by the respective Parties prior to the release thereof. Entire agreement This Agreement contains everything the parties have agreed in relation to the subject matter it deals with. No party can rely on an earlier written document or anything said or done by or on behalf of another party before this Agreement was executed. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 19 Execution of separate documents 18.8 18.9 This Agreement is properly executed if each party executes either this document or an identical document. In the latter case, this Agreement take effect when the separately executed documents are exchanged between the parties. Further acts Each party must at its own expense promptly execute all documents and do or use reasonable endeavours to cause a third party to do all things that another party from time to time may reasonably request in order to give effect to, perfect or complete this Agreement and all transactions incidental to it. No partnership or agency 18.10 Nothing in this Agreement is intended to, or shall be deemed to, establish any partnership or joint venture between any of the parties, constitute any party the agent of another party, or authorise any party to make or enter into any commitments for or on behalf of any other party. Costs 18.11 Each party must bear its own costs arising out of the negotiation, preparation and execution of this Agreement. Governing law and jurisdiction 18.12 This Agreement is governed by the laws of Singapore. The parties submit to the non-exclusive jurisdiction of its courts and courts of appeal from them. The parties will not object to the exercise of jurisdiction by those courts on any basis. Severability 18.13 Each provision of this Agreement is individually severable. If any provision is or becomes illegal, unenforceable or invalid in any jurisdiction it is to be treated as being severed from this Agreement in the relevant jurisdiction, but the rest of this Agreement will not be affected. The legality, validity and enforceability of the provision in any other jurisdiction will not be affected. Variation 18.14 No variation of this Agreement will be of any force or effect unless it is in writing and signed by each party to this Agreement. Waivers 18.15 A waiver of any right, power or remedy under this Agreement must be in writing and signed by the party granting it. A waiver only affects the particular obligation or breach for which it is given. It is not an implied waiver of any other obligation or breach or an implied waiver of that obligation or breach on any other occasion. 18.16 The fact that a party fails to do, or delays in doing, something the party is entitled to do under this Agreement does not amount to a waiver. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 20 Amplify Health confidential and proprietary information. Not for Distribution. 21 Sep 2025 Schedule 1 Template Order Form Order Form AMPLIFY HEALTH ASIA PTE. LIMITED (UEN: 202207084R), having its Singapore office at 21 Collyer Quay, #08-00 21 Collyer Quay, Singapore 049320 (Amplify Health) and [INSERT CUSTOMER NAME], having an office at [INSERT CUSTOMER ADDRESS] (Customer) have entered into a Master Software-as-a-Service Agreement for Amplify Health's 'Software as a Service' offerings and Implementation Services (MSSA). The MSSA contemplates the parties agreeing Order Forms from time to time, setting out the commercial details of Subscription Services to be provided. This document is an Order Form made under and incorporated into the MSSA. Order Form commencement date [Insert date the Order Form commences. This may be a set date, or could be a date on which development/Implementation Services under a related Statement of Work are completed] Initial Subscription term (from Order Form commencement date) [Insert initial Subscription term (eg "12 months")] Subscription Renewal Term [Insert Subscription Renewal Term (eg "12 months")] Solution [Insert name of Solution(s)/solution(s) and any module(s) licensed] Documentation [Insert Documentation/FSDs or where it can be located] Customer Dependencies In order for Amplify Health to provide the Subscription Services under this Order Form, the Customer must perform or provide, or procure the performance or provision of the following Customer Dependencies: [Insert any dependencies in addition to those in clause 6.1 of the General Terms. For example, this may include confirmation of acceptance of Deliverables under a related SOW] Charges [Insert Charges or fee schedule for relevant Subscription Services] Third party terms [Identify any third party terms that the Customer must comply with (eg by including a URL to the vendor's online terms). If there are none, state "N/A"] T&M Rates [Insert any relevant T&M Rates.] Support Services [Insert support services. This could be a reference to the Support and Maintenance SLA, for example: "Basic" support services as set out in the Support and Maintenance SLA available at [URL]] Additions/Changes to schedule 4 to be detailed here: XX Others [For misc items eg usage limits] Amplify Health: Customer: By: By: Name: Name: Title: Title: Amplify Health confidential and proprietary information. Not for Distribution. 22 Sep 2025 Schedule 2 Template Statement of Work Statement of Work AMPLIFY HEALTH ASIA PTE. LIMITED (UEN: 202207084R), having its Singapore office at 21 Collyer Quay, #08-00 21 Collyer Quay, Singapore 049320 (Amplify Health) and [INSERT CUSTOMER NAME], having an office at [INSERT CUSTOMER ADDRESS] (Customer) have entered into a Master Software-as-a-Service Agreement for Amplify Health's 'Software as a Service' offerings and Implementation Services (MSSA). The MSSA contemplates the parties agreeing Statements of Work from time to time, setting out the commercial details of Subscription Services to be provided. This document is a Statements of Work made under and incorporated into the MSSA. SOW commencement date [insert date or "the date this Statement of Work is signed by the last of the parties to sign"] Term [Insert – eg This Statement of Work will continue for an initial term of 12 months, unless terminated earlier in accordance with the terms of the MSSA. On the expiry of the initial term, the Statement of Work will automatically renew for successive terms of 3 months until either party gives the other party 14 days' written notice of its intention for this Statement of Work not to renew.] Services to be provided [Insert, e.g. Implementation Services Customer Dependencies [Insert] Acceptance Testing The following Acceptance Tests will be carried out under this Statement of Work in accordance with clause 7 of the General Terms: If any Deliverable fails an Acceptance Test: (a) Customer will promptly notify Amplify Health of the failure and provide details of the failure, including details of the Acceptance Tests that were run and any reports or performance metrics that led to the Customer's conclusion that the Deliverable failed those Acceptance Tests; and (b) if Amplify Health agrees that the Acceptance Tests were properly conducted and the Deliverable failed to pass those Acceptance Tests, Amplify Health will rectify the defects as soon as reasonably practicable, following which the Customer must promptly reperform the Acceptance Tests. If Amplify Health considers that a Deliverable in respect of which Customer has given notice under and that it complies with the requirements of this Agreement and should not have failed Acceptance Tests, Amplify Health may request that Customer re-run the Acceptance Tests and allow Amplify Health to observe those Acceptance Tests (Observed Acceptance Tests). Customer will act reasonably in considering any feedback from Amplify Health in respect of the Acceptance Test process that are causing or contributing to the Acceptance Test failures. If a Deliverable fails Observed Acceptance Tests, Amplify Deliverable Acceptance Tests Acceptance Criteria [insert Deliverable] [insert details of Acceptance Tests, including timeframe for completion] [insert details of Acceptance Test Criteria.] Health will rectify the defects as soon as reasonably practicable, following which the parties must promptly reperform the Observed Acceptance Tests. If a Deliverable passes Acceptance Tests or Observed Acceptance Tests, Customer must promptly issue an Acceptance Test Certificate in relation to that Deliverable. The Deliverables will be deemed accepted if notice is not received within three Business Days of the expiry of the Acceptance Test period referred to the table above, or if Customer uses the relevant Deliverable(s) in a production environment. Customer acknowledges and agrees that only Deliverables that are ready for use in a production environment will undergo Acceptance Testing. Any preview, pre-release, beta or trial versions of a Deliverable will not undergo Acceptance Testing in accordance with this clause, even if they are provided for informal user testing or the purpose of obtaining feedback. Assumptions [Insert] Charges [Insert] Special conditions [Insert] T&M Rates [Insert] Amplify Health: By: Name: Title: Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 Customer: By: Name: Title: 23 Schedule 3 Security and Privacy Exhibit 1 1.1 1.2 1.3 2 2.1 3 3.1 Information Security Policy Amplify Health will have an information security measurement system in place to protect against: (a) (b) unauthorised or unlawful access or use of, or accidental loss (or temporary or permanent loss of access to) or destruction or alteration or misuse or other unintended damage to Customer Data and other Confidential Information; and any anticipated threats or hazards to the confidentiality, integrity and availability of the Subscription Services. Amplify Health will have documented an Information Security Policy, which is reviewed and updated regularly to ensure that Customer Data is protected in accordance with Industry practice standards and commensurate with risk appetite. Amplify Health will secure and encrypt all Customer Data where applicable in accordance with Industry Best Practice. Access and Identity Management Amplify Health will ensure proper management of access to in-scope data and systems. The support shall maintain a set of access controls including: (a) (b) (c) (d) (e) (f) (g) (h) Appropriately restricting access (consistent with the principles of least privilege, need-to-know and separation of duties) to only those Amplify Health personnel that require such access to in-scope data and systems to perform the services described in the Agreement. Prohibit sharing of assigned access/authentication credentials. Protect all access/authentication credentials in accordance with security best practices when stored for Amplify Health systems and/or when stored for applications developed. Implement password security best practices, including but not limited to complex password requirements, account lockout controls, enforcing periodic password reset, and changing all default passwords on Amplify Health systems before deploying any new hardware or software asset. Where remote access is authorized, ensure access to in-scope data and systems requires multi factor authentication (at least 2 factor) and session encryption. Promptly disable access privileges to in-scope data and systems for any Amplify Health personnel who no longer need such access. Conduct periodic reviews of access lists to in-scope data and systems to ensure that access privileges have been appropriately provisioned and disabled. Prohibit access to Amplify Health managed systems from unauthorized devices. Information Protection Amplify Health shall encrypt all Customer Data in transit or at rest using industry-standard encryption algorithms and secure key management protocols. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 24 3.2 3.3 3.4 4 4.1 5 5.1 5.2 6 6.1 7 7.1 8 8.1 8.2 9 9.1 Amplify Health shall prohibit the use of external removable media to view, store or transfer Customer Data, unless there is a legitimate business need to support and approve the use of such devices. Where Amplify Health services involve accessing, storing and/or processing Customer Data, Amplify Health shall implement secure data handling best practices, including but not limited to need-to-know and limited privilege access restrictions, technical safeguards such as encryption, locked files, and other electronic security controls designed to prevent unauthorized access, misuse, loss or theft of Customer Data. Amplify Health shall install anti-virus and malware protection software with up-to-date definitions and signatures on all Amplify Health systems. Such software must be properly configured to protect against all known endpoint-related threats. Network Security Amplify Health shall maintain appropriate network security measures, including but not limited to firewalls to segregate Amplify Health’s internal networks from the internet, risk-based network segmentation, and intrusion prevention or detection systems to alert Amplify Health to suspicious network activity. Vulnerability Management Amplify Health will perform periodic infrastructure and Vulnerability scans and assessments on all Amplify Health systems used to conduct business and/or for communication. Amplify Health will establish and maintain a Vulnerability lifecycle management processes to identify, triage and evaluate the impact assessment of any Vulnerability in a timely manner including the remediation of manufacturer and developer-recommended security updates, maintenance of operating systems (OS), application software versions and patches to current OS and third-party software. Secure Logging and Monitoring Amplify Health shall ensure that local logging has been enabled on all applicable systems and networking devices to capture detailed information necessary for security investigations. Amplify Health shall ensure that logs are analysed for anomalous and suspicious activity to assist in the identification of potential security breaches. Secure Configuration Management Amplify Health shall maintain documented, secure baseline security configuration standards for Amplify Health Systems consistent with the concept of least functionality and monitoring for unauthorized changes or deviations from these baselines in deployed devices. Business continuity Amplify Health will have in place and maintain business continuity and disaster recovery plans covering the Subscription Services in accordance with Industry Best Practice. A schedule of regular data back-ups will be performed by Amplify Health. Regular testing of the back-up restore procedures will be conducted. Business continuity planning and IT disaster recovery plan will be tested periodically as appropriate to ascertain the effectiveness of the plans in the event of an incident or crisis. Amplify Health Personnel Amplify Health will perform commercially reasonable background checks in compliance with applicable law on Amplify Health Personnel who will have access to in-scope data and systems, ensuring that any such Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 25 Amplify Health personnel do not possess a criminal history that should reasonably disqualify them from having such access. 9.2 9.3 10 10.1 10.2 10.3 10.4 10.5 11 11.1 11.2 Amplify Health will regularly educate its personnel who have access rights and privileges to the Customer Data needed to perform a particular function or transaction in respect of the Subscription Services. Amplify Health maintains a security and compliance training program for all employees accessing Customer Data. Employee re-certification assessments are performed on a regular periodic basis. Data Privacy Each party shall, in respect of any Personal Information it processes in accordance with this Agreement, comply with applicable Privacy Laws. Amplify Health shall not use any Personal Information except to the extent required to perform its obligations or exercise its rights under this Agreement and in accordance with Privacy Laws applicable to Amplify Health. Amplify Health shall take all reasonable steps to protect the Personal Information from unauthorised access, use, copying, theft, loss of, or use or disclosure in violation of this Agreement. Amplify Health shall restrict access to Personal Information to those employees or subcontractors who have a legitimate business need for that Personal Information for the purpose of carrying out the Services. In the case of disclosure of Personal Information by Amplify Health to a third party, such disclosures shall not be permitted unless: (a) (b) authorized or required by applicable law; or the third party enters into a binding and enforceable agreement with Amplify Health, imposing on the third party substantially the same obligations in respect of that transferred information as are imposed on Amplify Health under this Agreement. If Amplify Health fails to ensure that the third party enters into such an agreement, then under this Agreement the disclosed Personal Information held by the third party will be treated as being in the control of Amplify Health and Amplify Health will be responsible for the third party's acts and omissions in relation to the disclosed Personal Information as if they were its own acts and omissions. Amplify Health shall, in providing the Services, comply with its Privacy Statement relating to the privacy of the Customer Data available at Privacy statement | Amplify Health or such other website address as may be notified to the Customer from time to time, as such document may be amended from time to time by Amplify Health in its sole discretion. (a) Unless prohibited from doing so by applicable law, Amplify Health will notify the Customer of any exercise by a data subject of their rights under Privacy Law, or any direction or request from a supervisory authority in respect of the processing of Personal Information under this Agreement. Where permitted by applicable law, Amplify Health shall transfer any such request to the Customer, and will cooperate with the Customer and provide reasonable assistance in responding to the request or direction. Security Incidents Amplify Health shall have in place a security incident response plan for identifying, reporting and appropriately responding to known or suspected security incidents impacting In-Scope Data and Systems. Amplify Health shall maintain and periodically test its incident response plan outlining the steps to be taken in the event of a Security Breach, including notification to Customers and coordination of investigation and remediation activities with Amplify Health shall cooperate with customers in investigating the occurrence. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 26 11.3 If Amplify Health becomes aware of any Security Incident, Amplify Health will: (a) (b) (c) (d) investigate the Security Incident; promptly and as soon as is reasonably practicable notify Customer of the Security Incident, and provide Customer with detailed information about the Security Incident, including: (i) (ii) (iii) (iv) (v) a description of the circumstances of the Security Incident and, if known, the cause; an approximate period of when the Security Incident occurred; description of the Customer Data that is the subject of the Security Incident to the extent that the information is known; the number of individuals about whom Customer Data was implicated are affected by the Security Incident or, if unknown, the approximate number; and a description of the steps that Amplify Health has taken to reduce the risk of harm to affected individuals that could result from the Security Incident or to mitigate that harm; take reasonable steps to mitigate the effects and to minimise any damage resulting from the Security Incident; and continue to investigate the Security Incident for a reasonable period of time thereafter and shall provide to Customer all information related thereto reasonably requested by Customer. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 27 Schedule 4 Support and Maintenance Service Level Agreement General Support and Maintenance Defect correction Amplify Health shall use reasonable endeavours to correct or provide a workaround for all material defects notified to it by the Customer administrator Authorised User submitting a Support Request, within a reasonable timeframe having regard to the nature of the defect and the materiality of the business impact it is having on the Customer. Software maintenance Amplify Health shall use reasonable endeavours to maintain the Subscription Services to optimise Availability to meet the Availability Target (as defined below). Service Levels Availability Amplify Health will provide an Availability rate of at least 99.7% in respect of the Subscription Services (Availability Target), which is calculated in accordance with the following formula: Availability = (M – U) / M x 100, where: M = the total accumulated minutes during the relevant month in which the Customer subscribed for the Services. U = the total accumulated minutes during the relevant month in which the Subscription Services cannot be accessed by any Authorised User, excluding unavailability caused by an Exception. No period of Subscription Service unavailability will be included in calculating Availability if the downtime is due to any of the following: (a) (b) (c) (d) (e) (f) planned maintenance carried out during the maintenance window of 7.00 pm to 6.00am Singapore time (Amplify Health will use commercially reasonable efforts to give 48 hours' notice to the Customer in the event of a planned maintenance operation outside this time slot, except in the event of an emergency); emergency maintenance; downtime caused by outages, service degradation or maintenance of the services or infrastructure used to supply the Subscription Services; downtime caused by the Customer's or any Authorised Users' misuse of the Subscription Services; failures of the Customer's or any Authorised User's internet connectivity; or any Force Majeure Event, The Availability Support and Maintenance SLA is calculated at the end of each month during the relevant Subscription Term. Support Requests Support Team Support Services encompass any Solution usage enquiries, requests for assistance and reported problems with the Solutions, and technical enquiries. Support Hours Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 28 The standard Support Service hours will be: Monday to Friday 9am to 5pm Singapore Standard Time. If extended service hours are required, Amplify Health offers a premium package for an additional cost. Contacting the Support Team and Lodging a Support Request Only a Customer authorised key contact can lodge a Support Request. To lodge a Support Request, the Customer administrator must contact Amplify Health's Support Team on the email or phone number provided by the Customer’s Account Manager. Support Case Priority and Response Amplify Health will classify Support Requests in accordance with the criteria in the table below. Response times will be measured from the time Amplify Health receives a Support Request from a Customer administrator’s Authorised User in accordance with the process below, until the time Amplify Health has responded to that Support Request. Response and Resolve timeframes for Severity 1 Support Requests apply on a 24/7 basis. For Severity 2, Severity 3 and Severity 4 Support Requests: 1. 2. if the Support Request is received outside Normal Business Hours the Support Request will be deemed to have been received at 9:00am on the next Business Day; And any period outside Normal Business Hours will not be counted for the purposes of calculating Amplify Health Response Time or Resolution Time. For Severity 1 issues, the Customer can request a root cause analysis report from Amplify Health. Amplify Health will endeavour to provide the report within seven (7) Business Days. Support Request Classification Description: Any defect comprising or causing any of the following events or effects: Response Time Resolution Time Severity 1 Subscription Service is completely down, and all users are impacted. No workaround is available. < 2 hours <8 hours to provide a resolution; or workaround; or action plan. Severity 2 Customer can use the Subscription Service, but major functionalities are impacted. Customer operations are heavily impacted. < 4 hours Severity 3 Subscription Service is operating with some functional restrictions, however, the impact to the operations is very minimum. < 12 hours < 2 Business Days to provide a resolution; or workaround; or action plan. < 10 Business Days to provide a resolution; or workaround; or action plan. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 29 Severity 4 A minor or non-production issue that has no impact to the Customer’s operations. Within 3 Business Days Customer Responsibility < 20 Business Days to provide a resolution; or workaround; or action plan. The Customer shall ensure that there is a customer support team available to work on the fix alongside Amplify Health support team. The Customer acknowledges that Amplify Health's ability to meet the target resolution time will depend on the Customer giving Amplify Health reasonable information for troubleshooting and engaging with Amplify Health on the required investigations. Where the Customer does not provide Amplify Health with sufficient information for troubleshooting and/or adequately engage with Amplify Health on the required investigations, Amplify Health may at its discretion decrease the severity of the Support Request. Escalation Support Requests, problems, or disputes that remain unresolved should be escalated to the Account Manager, who will coordinate and negotiate with Customer. On escalation, the Support Request in question will undergo another round of investigations until a resolution is found. For support Requests that continue to remain unresolved, the Customer may as for their Account Manager to escalate their complaint to an Amplify Health executive. Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 30 Schedule 5 Change Order Template Change Order This Change Order No. __ (“Change Order”), effective as of ________, 20__, is made pursuant to and a part of that certain Master Services Agreement, dated as of _______________, 20__, by and between Amplify Health and _____________________ (the “Customer”) (the “Agreement”), and the SOW and/or Order Form thereto, dated as of _______________________ between Amplify Health and Customer (the “SOW” and/or “Order Form”). 1. Change Request Details Change Request Number Requested by Project Name Requested On Change Request Description Impacted Modules/ Applications 2. Change Request Description 3. Deliverables S/No Deliverable 1 Deliverable Type (Document/Binaries) 4. Document References Document Description Version 5. Timeline 6. Change Request Cost The price indicated above does not include GST/withholding Tax and is Net to Amplify Health. Invoice will be submitted upon completion of the services under this change request. 7. Payment Milestones The Change Request will be invoiced after the completion of the Activities. 8. Assumptions S/No Assumptions 1. 9. Risks S/No Description Probability Impact Mitigation Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 31 10. Dependencies S/No Dependencies This Change Order is governed by the terms and conditions of the Agreement. Any defined terms not otherwise defined herein shall have the meanings set forth in the Agreement. Except to the extent otherwise expressly set forth in this Change Order, the terms of the SOW and or Order Form shall remain in full force and effect. The Parties hereto acknowledge having read this Change Order and agree to be bound by its terms. IN WITNESS WHEREOF, the Parties hereto have each caused this Change Order to be signed and delivered by their duly authorised officers, all as of the date first set forth above. Amplify Health: By: Name: Title: Amplify Health confidential and proprietary information. Not for Distribution. Sep 2025 Customer: By: Name: Title: 32