DocuSign Envelope ID: 44CEE13A-EF5C-435B-9B36-68221F1BDEBS5 NI MGMI. N Certificate dere LoRes00e rese 0so 0000000000 000000000 00000000 0000000 HVA (40 Certificate number: 2012-001a Certified by EY CertifyPoint since: May 11, 2012 Management System as defined and implemented by Google LLC" located in Mountain View, California, United States of America is compliant with the requirements as stated in the standard: Issue date of certificate: May 3, 2021 Re-issue date of certificate: June 7, 2022 Expiration date of certificate: May 14, 2024 Last certification cycle expiration date: May 15, 2021 EY CertifyPoint will, according to the certification agreement dated May 23, 2022, perform surveillance audits and acknowledge the certificate until the expiration date noted above. *The certification is applicable for the assets, services and locations as described in the scoping section at the back of this certificate, with regard to the specific requirements for information security as stated in the Statement of Applicability dated December 20, 2021. DocuSigned by: Jatin Selugal 07 June 2022 | 8:36:36 PM CEST 6E3A0F2ASEBF4C7... J. Sehgal | Director, EY CertifyPoint certificate shallbe subject to Dutch law in the exclusive jurisdiction of the court in Rotterdam. The content must not be altered and any promotion by employing this certificate or certification body quality mark must adhere to the scope and nature of certification and to the conditions of contract. Given the nature and inherent limitations of sample-based certification assessments, this certificate is not meant to express any form Page 1 of 6 Digital version DocuSign Envelope ID: 44CEE13A-EF5C-435B-9B36-68221F1BDEB5 Google LLC Scope for certificate 2012-001a bounded by the following product area and its offering(s) as listed below, along with the data contained or collected by those offering(s). Google Workspace: Admin Console > Segno Workspace Admin SDK VVWVWV Apps Script Alert Center API Assignments — AppsEmail Audit API Calendar - Data Transfer API - Calendar API - Directory API Classroom -— Domain Shared Contacts API VVVWV Cloud Identity — Enterprise License Manager API Cloud Search — Groups Settings API Contacts - Groups Migration API - Contacts API — People API Currents — Reports API VVIWV Docs — Reseller API Drive -— SAML-based SSO API — Drive Activity API — Drive Rest API Forms Vw Gmail -— Gmail Rest API Google Chat VWVWVvV Google Meet Google Workspace Migrate Groups VVVVNWV Hangouts Jamboard Keep Mobile Device Management Sheets VO - Sheets API Sites V - Sites API Slides VV Tasks — Tasks API Vault VV Voice This scope is only valid in connection with certificate 2012-0014. Page 2 of 6 Digital version DocuSign Envelope ID: 44CEE13A-EF5C-435B-9B36-68221F1BDEB5 Google LLC Scope for certificate 2012-001a The following locations are in scope: Data Centers: > Arcola (VA), United States of Koto-ku (3), Tokyo, Japan VV America Las Vegas (NV), United States of Ashburn (1) (VA), United States America Vv of America Leesburg (VA), United States of V Ashburn (2) (VA), United States America VV of America Lenoir (NC), United States of V Ashburn (3) (VA), United States America of America Lok Yang Way, Singapore VV VVVWVWVWVWVWV Atlanta (1) (GA), United States London (1), United Kingdom of America London (2), United Kingdom Changhua, Taiwan London (3), United Kingdom VV Clarksville (TN), United States of London (4), United Kingdom America London (5), United Kingdom Columbus (OH), United States of London (6), United Kingdom V America Los Angeles (1) (CA), United _ Council Bluffs (1) (IA), United States of America VV States of America Los Angeles (2) (CA), United V_ Council Bluffs (2) (IA), United States of America V States of America Madrid (1), Spain VVVV Delhi, India Madrid (2), Spain VVWV Dublin, Ireland Melbourne, Victoria, Australia Eemshaven, Groningen, The Middenmeer, Noord-Holland, The Netherlands Netherlands Frankfurt (1), Hesse, Germany Midlothian (TX), United States of VO VVVWVWVWVWVWVWVW Frankfurt (2), Hesse, Germany America Frankfurt (4), Hesse, Germany Milan (1), Italy VWVV Frankfurt (5), Hesse, Germany Milan (2), Italy Frankfurt (6), Hesse, Germany Moncks Corner (SC), United Frankfurt (7), Hesse, Germany States of America Fredericia, Denmark Montreal, Quebec, Canada VVV Ghlin, Hainaut, Belgium Mumbai, India Hamina, Finland New Albany (OH), United States Henderson (NV), United States of America of America Osaka, Japan VWVV Hong Kong (1), Hong Kong Osasco, Brazil VVIWVVVV Hong Kong (2), Hong Kong Papillion (NE), United States of Hong Kong (3), Hong Kong America Jakarta, Indonesia Paris (1), France VWVIWV Koto-ku (1), Tokyo, Japan Paris (2), France Koto-ku (2), Tokyo, Japan Paris (3), France This scope is only valid in connection with certificate 2012-0014. Page 3 of 6 Digital version DocuSign Envelope ID: 44CEE13A-EF5C-435B-9B36-68221F1BDEB5 Google LLC Scope for certificate 2012-001a Data Centers (continued): > Pryor Creek (OK), United States Sydney (3), NSW, Australia VV of America The Dalles (1) (OR), United Quilicura, Santiago, Chile States of America VV Vv America States of America Salt Lake City (1) (UT), United Toronto, Ontario, Canada _ V_ VVVWVWVWV States of America Vinhedo, Brazil Salt Lake City (2) (UT), United Warsaw (1), Poland VV States of America Warsaw (2), Poland Seoul (1), South Korea Wenya, Singapore VVVYV Seoul (2), South Korea Widows Creek (AL), United Sydney (1), NSW, Australia States of America Sydney (2), NSW, Australia Zurich, Switzerland Vv Offices: Aarhus, Denmark Bothell (WA), United States of V VVWv Accra, Ghana America Addison (TX), United States of Boulder (CO), United States of Vv America America Amsterdam, The Netherlands Brisbane, Australia VV VVVVVVWVWVv Ann Arbor (MI), United States of Brussels, Belgium America Bucharest, Romania Athens, Greece Budapest, Hungary VV Atlanta (GA), United States of Buenos Aires, Argentina America Cairo, Egypt VV Austin (TX), United States of Cambridge (MA), United States of America America Bangalore, India Cebu City, Philippines VV VVVV Bangkok, Thailand Chapel Hill (NC), United States of Beijing, China America Bellevue (WA), United States of Charlotte (NC), United States of America America VV Belo Horizonte, Brazil Chicago (IL), United States of VWVV Berlin, Germany America Beverly Hills (CA), United States Copenhagen, Denmark VV of America Detroit (MI), United States of Bogota, Colombia America VV Boston (MA), United States of Dubai, UAE VV America Dublin, Ireland This scope is only valid in connection with certificate 2012-0014. Page 4 of 6 Digital version DocuSign Envelope ID: 44CEE13A-EF5C-435B-9B36-68221F1BDEB5 Google LLC Scope for certificate 2012-001a Offices (continued): > Durham (NC), United States of Miami (FL), United States of V America America Edmonton, Canada Milan, Italy VWVWVWvWv VV Frankfurt, Germany Moffett Field (CA), United States Fukuoka, Japan of America Gdansk, Poland Montreal, Québec, Canada VVWV Goleta (CA), United States of Moscow, Russia America Mountain View (CA), United Grenoble, France States of America VVVWVWVWVWV Gurgaon, India Mumbai, India VVVWV Haifa, Israel Munich, Germany Hamburg, Germany Nairobi, Kenya Purshottam Place Helsinki, Finland Nashville (TN), United States of Hong Kong, Hong Kong America Houston (TX), United States of New Delhi, India VVWV America New Taipei City, Taiwan Hyderabad, India New York (NY), United States of VV Irvine (CA), United States of America America Osaka, Japan VVVV Istanbul, Turkey Oslo, Norway VVVWV Johannesburg, South Africa Ottawa, Ontario, Canada Kiev, Ukraine Palo Alto (CA), United States of Kirkland (WA), United States of America America Paris, France VVV_ Kitchener, Canada Perth, Australia VVWVVWVWVWV Krakow, Poland Pittsburgh (PA), United States of Kuala Lumpur, Malaysia America Lagos, Nigeria Mulliners Towers Playa Vista (CA), United States of VO Lima, Peru America Lisbon, Portugal Portland (OR), United States of VO Livermore (CA), United States of America America Prague, Czech Republic VUOMNUOMV London, United Kingdom Princeton (NJ), United States of VV Los Angeles (CA), United States of America America Redmond (WA), United States of Madison (WI), United States of America VO America Redwood City (CA), United States Madrid, Spain of America VVWVWVV Manchester, United Kingdom Reston (VA), United States of Manila, Philippines America VV Melbourne, Australia Rome, Italy Mexico City, Mexico This scope is only valid in connection with certificate 2012-0014. Page 5 of 6 Digital version DocuSign Envelope ID: 44CEE13A-EF5C-435B-9B36-68221F1BDEB5 Google LLC Scope for certificate 2012-001a Offices (continued): > Salt Lake City (UT), United States Stockholm, Sweden VV of America Sunnyvale (CA), United States of San Bruno (CA), United States of America Vv America Sydney, Australia VVWVWVWVWV San Diego (CA), United States of Tainan City, Taiwan America Taipei, Taiwan VV San Francisco (CA), United States Taoyuan, Taiwan of America Tel Aviv, Israel San Jose (CA), United States of Thornton (CO), United States of America America VV VVVWVVWVWV America Toronto, Canada Santiago, Chile Vancouver, Canada VWVWv Sao Paulo, Brazil Vienna, Austria Seattle (WA), United States of Vilnius, Lithuania America Warsaw, Poland Seoul, South Korea Washington, D.C. United States of VVVWVWVWV Shanghai, China America Shenzhen, China Wroclaw, Poland VVWVWV Singapore, Singapore Zagreb, Croatia South Jakarta, Indonesia Zhubei City, Taiwan South San Francisco (CA), United Zurich, Switzerland States of America The ISMS is centrally managed out of the Google LLC headquarters in Mountain View, California, United States of America. The ISMS mentioned in the above scope is restricted as defined in the ‘Google Cloud Services Information Security Management System (ISMS) Implementation Manual’, reviewed on December 20, 2021, by the Director, Engineering Compliance. This scope is only valid in connection with certificate 2012-0014. Page 6 of 6 Digital version