This Confidentiality & Security Addendum supplements Section 7 (Confidentiality) of the Contractor Agreement and addresses specific operational security requirements for the Data Hands Project.

1.1. Recording Device Integrity Contractor shall ensure that all recording functions of the Data Hands device remain active and uninterrupted during service performance. Contractor shall not disable, pause, cover, obstruct, alter, or tamper with any recording component of the device and shall immediately report any technical malfunctions or defects to Instawork for replacement.

1.2. Data Ownership and Handling All recordings, video data, logs, and outputs generated by the Data Hands device belong exclusively to Instawork. Contractor shall not copy, extract, download, or retain any such data and shall not upload or transfer video data to personal devices, cloud services, or third-party platforms without express written authorization from Instawork.

2.1. Expanded Confidential Information Definition For purposes of this Project, "Confidential Information' includes all information relating to Instawork's data collection methodologies, device specifications, operational procedures, client locations, recording protocols, and any technical data or business intelligence derived from the Data Hands operations, in addition to the Video Data already covered in Section 7.1.

2.2. Communication Restrictions During Operations While performing Services, Contractor shall not communicate details about ongoing data collection activities, client locations, operational procedures, or any observations made during service performance through any medium including calls, messages, social media, or informal discussions with third parties.

3.1. Enhanced DPDP Compliance Building on Section 8's data protection requirements, Contractor shall:

• Immediate Breach Notification: Report any suspected data breach, unauthorized access, device malfunction, or potential compromise of video data to Instawork within 4 hours of discovery
• Secure Handling: Follow Instawork's specific data handling instructions and shall not process personal data beyond Instawork's written directions
• No Cross-Border Transfers: Ensure no video data is transmitted, stored, or accessed outside India without explicit Instawork authorization

4.1. Injunctive Relief Contractor acknowledges that violations of equipment security, data handling, or confidentiality obligations may cause irreparable harm to Instawork's business and data subjects' privacy rights. Instawork is entitled to seek immediate injunctive relief without posting bond for any breach of this Addendum.

4.2. Enhanced Liability Breaches of this Addendum may result in immediate termination of this agreement and Contractor's liability for:

• Investigation and remediation costs

• Regulatory fines or penalties
• Third-party claims related to data mishandling
• Replacement costs for compromised data collection activities

5.1. Extended Survival Obligations under this Addendum survive termination of the Agreement for three (3) years, except that data ownership and trade secret obligations survive perpetually.

5.2. Integration with Main Agreement This Addendum supplements but does not replace the existing confidentiality provisions in Section 7. In case of conflict, this Addendum controls for Data Hands Project activities.

IN WITNESS WHEREOF, the undersigned has caused this Agreement to be executed by themselves / their duly authorized officers or representatives.