Inscendo: Data Location Statement

Effective Date: This Version 1.0 is effective on the date it is posted at https://inscendoiq.com/legal/data-location. Version: 1.0 (October 19, 2026 — first published as its own document. § 1 and § 2 restate Data Processing Addendum § 11.1 and § 11.2 as they stood in DPA version 1.10, unchanged in substance; § 2 adds the date from which the typed-decision features have been in use, October 14, 2026. From DPA version 1.11, DPA § 11 incorporates this Statement by reference and says how it changes.) Provider: Inscendo Automation Inc., a Texas corporation ("Inscendo")

This Statement says where Customer Personal Information is processed and stored when Inscendo provides the Inscendo Service. It is incorporated by reference into the Data Processing Addendum ("DPA") § 11 and is a Referenced Document under the Master Subscription Agreement ("MSA") § 15.7. Capitalized terms not defined here have the meanings given in the DPA and the MSA. The region of each Sub-Processor is stated in the Sub-Processor List at https://inscendoiq.com/legal/subprocessors.

---

1. United States

Except as § 2 states, Customer Personal Information is processed and stored in the United States. Inscendo does not commit to processing in any other geography. Customer acknowledges that AI prompts and outputs are transmitted to and processed by Inscendo's AI model provider in the United States.

2. Typed-decision features

Some features of the Service send text to the AI decision model named in the Sub-Processor List (TypeSafe AI, Inc.) to classify, rank, score, or screen it: for example, to rank search results, to check content brought in from outside sources for instructions planted in it, to decide whether an automated diagnostic task needs to run, or to answer a typed question an automation asks. Each request travels through the AI gateway named in the Sub-Processor List (Vercel Inc.), and only to that decision model; Inscendo's agreement for these features is with Vercel Inc., which engages TypeSafe AI, Inc. TypeSafe AI states that it hosts its service in the United States, but neither provider commits to processing these requests only in the United States: the gateway may receive and process a request in data centers outside the United States, it does not pin the region in which the decision model runs, and a request a provider flags for abuse or safety review may be handled outside the United States. Inscendo cannot restrict either step to the United States. Inscendo requests zero data retention on every such request: under the providers' published terms, the gateway deletes the request and the answer once the request completes, the decision model keeps them no longer than needed to produce the answer except where its legal obligations require, and neither uses them to train models. A provider may handle and retain a request it flags for abuse or safety review under its own policies. Inscendo does not send text from a workspace whose AI Security setting is Sealed, or whose setting cannot be determined, to either provider; Customer can keep a workspace out of these features by setting it to Sealed. Where Customer has executed a data-protection-specific addendum (§ 5.2, § 14), these features are not used for Customer's workspaces unless that addendum expressly permits them. These features have been in use since October 14, 2026.

3. How this Statement changes

3.1 A new location outside the United States. A change that adds a location outside the United States where Customer Personal Information is processed or stored is posted here at least thirty (30) days before it takes effect, and is notified, and may be objected to, as a new Sub-Processor is under DPA § 6.3 and § 6.4.

3.2 Other changes. Any other change, including one that removes a location or narrows where information may be processed, takes effect when posted, and is recorded in this Statement's version history and in the change log described in MSA § 15.

[End of Data Location Statement]