Service Specific Requirements for dbt Labs Services

·Service Specific Requirements for dbt Labs Services

·Effective: August 10, 2026

·These Software and Service Specific Requirements for dbt Labs Services (these "Requirements") apply to customers that have purchased or have enabled access to dbt Labs Services (as defined below) ("Customer" or "Client"). These Requirements supplement the terms of (a) the Master Subscription Agreement or other agreement for Customer's use of the Fivetran Products and Professional Services (the "MSA") entered into between Fivetran Inc. ("Fivetran") and Customer; and (b) the Fivetran Data Processing Addendum or similar agreement for Fivetran's processing of Personal Data on behalf of Customer in connection with Customer's use of the Fivetran Products (the "DPA", and together with the MSA, the "Agreement") entered into between Fivetran and Customer. Capitalized terms used but not defined herein will have the meanings given to them in the Agreement (or if not defined in the Agreement, in the Master Subscription Agreement located at https://www.fivetran.com/legal or Data Protection Addendum located at https://www.fivetran.com/legal/data-processing-addendum, or such successor URLs as may be designated by Fivetran).

11. DEFINITIONS

·Notwithstanding anything to the contrary in the Agreement, for purposes of Customer's use of the dbt Labs Services, the following definitions apply:

• ·"Account" means an account that enables Customer to access and use certain dbt Labs Services and may include one or more usernames and passwords or other means of access designated by Fivetran from time to time.
• ·"Account Parameters" means the parameters within which Customer and its Users may access and use the dbt Labs Services as set forth in the dbt Labs Documentation or the applicable Order Form, including any quantities and limitations applicable to Customer usage and units.
• ·"dbt Labs Documentation" or "Documentation" means the specifications and documentation for the dbt Labs Services available at https://docs.getdbt.com/.
• ·"dbt Labs Platforms" means portals, software, and/or hosted services included in, or provided in connection with, the dbt Labs Services. dbt Labs Platforms provide the functionality of dbt Cloud for building models and developing data transformations.
• ·"dbt Labs Professional Services" or "Professional Services" means the consulting services provided to Customer in connection with the dbt Labs Services.
• ·"dbt Labs Services" means dbt Labs Subscriptions, dbt Labs Professional Services, dbt Labs Training Services, access to dbt Labs Platforms and other related offerings.
• ·"dbt Labs Subscriptions" means time-bound dbt Labs Services including access to dbt Labs Platforms and other related offerings (including access to any AI-Aided Tools), but excluding dbt Labs Training Services and dbt Labs Professional Services.
• ·"dbt Labs Training Services" means access to training courses, including online courses or in-person courses, for the dbt Labs Platforms as specified in the applicable Order Form.

22. PROVISION OF DBT LABS SERVICES

·Except as modified herein, the Agreement governs the use of the dbt Labs Services and every reference to the Fivetran Product therein will be deemed to also refer to the dbt Labs Services so that the rights and obligations therein continue to apply. dbt Labs, LLC, a Delaware limited liability company ("dbt Labs") and a wholly owned subsidiary of Fivetran, may provide the dbt Labs Services, or a portion thereof, to Customer in accordance with the Agreement, these Requirements and any applicable Order Form. Fivetran will (a) be responsible for the portions of the dbt Labs Services provided by dbt Labs; and (b) not be relieved of its obligations under the Agreement, these Requirements or the applicable Order Form if dbt Labs provides the dbt Labs Services or a portion thereof. Notwithstanding anything in the Agreement or these Requirements to the contrary, Customer may execute one or more Order Forms directly with dbt Labs for the dbt Labs Services and (a) each such Order Form shall be governed by the terms and conditions of the Agreement, as modified and supplemented by these Requirements; and (b) Fivetran shall be an express third party beneficiary of such Order Form, with the right to enforce the terms thereof as if Fivetran were a party thereto.

33. PRIVACY AND SECURITY TERMS

3.13.1 Security. Notwithstanding anything to the contrary in the Agreement, any security provisions (including as set forth in Sections 5.1 and 5.2 of the MSA) and any security exhibits in the Agreement related to the Fivetran Products will not apply to the dbt Labs Services. Instead, Fivetran will maintain administrative, physical, and technical safeguards for protection of the security, confidentiality and integrity of Customer Data for the dbt Labs Services in accordance with https://www.getdbt.com/security (the "dbt Labs Security Policy") posted as of the Effective Date (as the dbt Labs Security Policy may be updated by Fivetran in a manner that does not materially decrease the applicable protections for the dbt Labs Services during the term of the applicable Order Form).

3.23.2 Data Deletion. Any provisions related to the deletion or return of data in the Agreement will not apply to the dbt Labs Services. Instead, Personal Data received from Customer will be retained by Fivetran only for so long as may be reasonably required to provide the dbt Labs Services, comply with Customer's instructions, and comply with obligations under the Agreement. Upon expiration, termination or at any time pursuant to a written request by Customer, Fivetran will cease processing Personal Data and/or delete data. Notwithstanding the foregoing, Fivetran and its subprocessors may retain Personal Data to the extent required for legal, compliance, fiduciary, or tax purposes or for review by Fivetran's consultants, advisors, auditors, attorneys, regulatory bodies, tax authorities, when compelled by court order, or as otherwise needed to fulfill Fivetran's duties under the Agreement and only to the extent and for such period as required; provided that, Fivetran shall ensure the confidentiality of all such Personal Data and shall ensure that such Personal Data is only processed as necessary for such purpose(s) requiring its storage and for no other purpose.

3.33.3 Privacy. For purposes of these Requirements, the DPA is modified as follows:

·(a) Annex I of the DPA (or its equivalent in the Agreement) will apply to the dbt Labs Services as modified in Attachment 1 to these Requirements.

·(b) Annex II of the DPA (or its equivalent in the Agreement) will apply to the dbt Labs Services as modified in Attachment 2 to these Requirements.

44. SUPPORT POLICY

·Notwithstanding anything to the contrary in the Agreement, technical support for the dbt Labs Services will not be subject to Fivetran's Support Policy. In addition, use of the dbt Labs Services is not subject to any Service Level Agreement or SLA in the Agreement. Instead, use of the dbt Labs Services is subject to the Service Level Agreement and Technical Support terms attached hereto as Attachment 3.

55. AI-POWERED FEATURES

·With regard to Customer's use of the dbt Labs Services, and for the avoidance of doubt, any use of artificial intelligence ("AI")-powered features will be in accordance with https://www.fivetran.com/legal/ai-features-requirements.

66. SERVICE CONSUMPTION TABLE

·Notwithstanding anything to the contrary in the Agreement or an Order Form, any consumption based pricing provisions related to the Fivetran Products will not apply to the dbt Labs Services. Instead, Customer agrees to pay the Fees set forth in the Order Form. Any use exceeding Account Parameters will result in additional Fees billed to Customer. In the event Customer activates additional Units beyond the quantities granted in the active Order Form(s), Fivetran will issue an invoice only if the applicable Order Form authorizes invoicing for additional Units; otherwise, Fivetran shall present a supplemental Order Form to Customer for the purchase of such additional Units, and if Customer does not enter into the supplemental Order Form within thirty (30) days of issuance, Fivetran may immediately deactivate such additional Units.

77. CUSTOMER ACCOUNT AND ONBOARDING

·Customer and its Users may be required to create an Account to access the dbt Labs Services. During registration, each User will create a sign-in name, password, and any additional authentication information (collectively, "Log-in Credentials"), and provision of Log-in Credentials constitutes the User's consent to Fivetran processing them to verify identity and access permissions. Customer will provide, and ensure each User provides, true, accurate, complete, and current Account information that is unique to an individual and not generic, misleading, or shared across multiple individuals, teams, or groups. Customer may not (a) permit multiple individuals to share Log-in Credentials, (b) create or access multiple Accounts in a manner that reduces or avoids Fees or circumvents Account Parameters, or (c) rotate dbt Labs Subscription access between individuals with any regularity, unless expressly permitted in the Order Form. Customer is solely responsible for User compliance with the Agreement, these Requirements, the confidentiality of Log-in Credentials, any consents required for provision of Log-In Credentials, and for all activity under its Account. Customer will promptly notify Fivetran of any unauthorized use. Fivetran may verify a User's relationship to Customer and may suspend the Account or disable Log-in Credentials if, in its reasonable discretion, the User or their Log-in Credentials (i) pose a security risk or are no longer authorized by Customer, (ii) may adversely impact Fivetran, the Fivetran Products, or any other Fivetran client, partner, or service provider, or (iii) do not comply with applicable law, these Requirements, or the Agreement; a violation of this subsection may also result in termination for material breach. Fivetran will endeavor to notify Customer and reinstate access as soon as reasonably practicable following resolution. Fivetran is not liable for loss or damage from unauthorized use of an Account except to the extent caused by Fivetran's act or omission.

88. EFFECTIVE DATE AND UPDATES TO THESE REQUIREMENTS

·These Requirements take effect immediately upon Customer's use of dbt Labs Services. Fivetran may update these Requirements from time to time. Any updates will become effective for Customer upon renewal or entry into a new Order Form enabling dbt Labs Services after any updates go into effect.

99. MISCELLANEOUS

·With respect to the dbt Labs Services only, these Requirements shall supersede and control over any inconsistent or conflicting terms contained in the Agreement or any other service-specific requirements, addenda, exhibits, policies, or incorporated terms. Except as expressly modified herein, the terms of the Agreement including, without limitation, any disclaimers, limitations of liability and governing law provisions set forth therein, will apply to Customer's use of the dbt Labs Services.

Attachment 1Attachment 1

·Modifications to Annex I of the DPA

·DETAILS OF THE PROCESSING AND TRANSFER OF PERSONAL DATA

·Categories of Data Subjects whose personal data is transferred

• ·Users and, at the discretion of Customer, any other Data Subjects whose data Customer or its Users transforms or queries via the dbt Labs Services. Categories of Personal Data transferred
• ·Contact information, usage information, nontraditional identifiers (e.g., IP Address) of Customer's Users, and any other Personal Data Customer or its Users submit to the dbt Labs Services.
• ·Any other Personal Data contained in any data Customer or its Users transforms or queries via the dbt Labs Services.

·Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialised training), keeping a record of access to the data, restrictions for onward transfers or additional security measures.

• ·None.

·The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous

·basis).

• ·Continuous. Nature of the processing
• ·The Processing of Personal Data provided by Customer to Fivetran through the dbt Labs Services or otherwise in connection with the provision of the dbt Labs Service.

·Purpose(s) of the data transfer and further processing

• ·To provide the services set out in the Agreement.

·The period for which the Personal Data will be retained, or, if that is not possible, the criteria used to determine that period

• ·Until termination, as set out in the Agreement.

·For transfers to Subprocessors, also specify subject matter, nature and duration of the processing

• ·As above.

Attachment 2Attachment 2

·Modifications to Annex 2 of the DPA

·TECHNICAL AND ORGANISATIONAL SECURITY MEASURES

11. Fivetran implements, maintains and enforces appropriate internal security policies and procedures, and procures that its Subprocessors do likewise, which are designed to:

·a. secure any Personal Data processed by Fivetran against accidental or unlawful loss, access or disclosure;

·b. identify reasonably foreseeable and internal risks to security and unauthorised access to the Personal Data processed by Fivetran;

·c. minimise security risks, including through risk assessment and regular testing;

·d. designate one or more employees to coordinate and be accountable for the internal security policies and procedures, and, taking into account the global distribution of Fivetran staff, such internal security policies and procedures will manage the access allowed to the Fivetran's network from each network connection and user, including the use of firewalls or functionally equivalent technology and authentication controls; and

·e. meet or exceed the following additional measures:

• ·A SOC2 Type II annually;
• ·Encryption At-Rest;
• ·Encryption In-Transit;
• ·Password Requirements;
• ·Key Management;
• ·Risk Assessment;
• ·Vendor Risk Management;
• ·User Provisioning/Deprovisioning;
• ·Network Security;
• ·Vulnerability Management;
• ·Incident Management;
• ·Change Management;
• ·System Logging/Monitoring;
• ·Data Management;
• ·Communication; Business Continuity; and
• ·Disaster Recovery.

22. Fivetran will, and will use reasonable efforts to procure that its subprocessors, conduct periodic reviews of the security of their network and the adequacy of their information security program as measured against industry security standards and its policies and procedures.

33. Fivetran will, and will use reasonable efforts to procure that its subprocessors, periodically evaluate the security of their network and associated services to determine whether additional or different security measures are required to respond to new security risks or findings generated by the periodic reviews.

Attachment 3Attachment 3

·Service Level Agreement (SLA)

·Capitalized terms used in this SLA without definition have the meanings assigned to them in the Agreement. All references to months are calendar months, and all references to days are calendar days.

·Technical Support

·Technical Support. Fivetrans monitors the dbt Labs Platforms on a 24x7x365 basis. Subject to the terms and conditions of the Agreement, including this SLA, Fivetran shall provide English-speaking remote assistance to Customer, during in-region support hours as described at the links below, and as further described in the SLA. Except for Severity Level 1, the Support SLA does not apply during in-region recognized bank holidays (U.S. holidays for North America region, U.K. holidays for EMEA region, Australia holidays for Asia Pacific region). Depending on the level of support indicated on the Order Form, the applicable hours, feature descriptions, severity levels, and target response times ("Support Levels") are available at (in each case as such Support Levels exist as of the date of Customer's execution of the Agreement):

• ·Basic Support: www.getdbt.com/cloud/basic-support.pdf
• ·Advanced Support: www.getdbt.com/cloud/advanced-support.pdf
• ·Premier Support: www.getdbt.com/cloud/premier-support.pdf
• ·Premier Regional Support: www.getdbt.com/cloud/premier-regional-support.pdf

·If no Technical Support is specified on the Order Form, Basic Support applies. Customer understands and agrees that the support personnel and/or deployment engineers are globally located, including but not limited to locations in the USA, Ireland, the United Kingdom, Germany, the Philippines, Australia, or New Zealand and may provide technical support or disaster recovery functions only via a secure connection. Customer acknowledges and agrees to Fivetran processing Personal Data in such locations for the limited purposes of (a) maintaining business records for financial, audit, sales, training, or regulatory purposes, and (b) when EEA support is unavailable and Customer either requests such processing, or has a substantial need requiring immediate assistance, Fivetran may assist with troubleshooting or provide support to Customer.

·Notice. Customer may notify Fivetran of a bug, defect or error in the Subscription (each, an "Error"). Each notice must include the following information: (a) Customer Account name, (b) Customer representative name and contact information, (c) the date and beginning/end time of the Error (if available), and (d) a description of the Error, including what was or is being impacted by the Error (e.g. the project or job name) and where the Error occurred or is occurring (e.g., IDE or job). Current and historical availability may be found at status.getdbt.com or at the link provided to Customer by Fivetran. After Fivetran is notified by Customer, Customer shall provide any other information reasonably requested by Fivetran and cooperate with Fivetran's efforts to determine whether an Error has occurred. As may be updated by Fivetran from time to time (including by email), Customer shall provide notice to Customer regarding an Error through the dbt support ticket submission portal.

·Response. "Response Time" means the time from Fivetran's receipt of Notice to Fivetran's first response to Customer. Upon Fivetran's receipt of written notice from Customer as described above ("Notice"), and subject to Fivetran's ability to verify such Error, Fivetran will respond to such Error as described in the Support Levels. The time needed to achieve Error resolution may vary depending on the specific nature of the Error. Customer shall assign a Customer resource to respond to Fivetran's requests for information or verification.

·Availability

·Generally. Subject to the terms and conditions of the Agreement and applicable Requirements, including, the terms of this SLA, Fivetran shall make the dbt Labs Platforms available to Customer as specified in the Agreement, no less than 99.9% of the total number of minutes that make up a given month during the Term ("Available" or "Availability SLA"). Available means Customer's Users are able to access the dbt Labs Platforms, not including unavailability or discontinuation of non-material features or functionality.

·Exceptions to Availability Service Level Coverage. The Availability SLA does not apply to each of the following events: (i) scheduled announced maintenance or emergency maintenance; (ii) an act, omission of Customer or its vendors and agents, interruptions or failures attributable to maintenance at Customer's premises, Customer's own computer equipment, network, or devices, or defect in or failure of any software, applications, hardware, security, or service not supplied by Fivetran pursuant to the Agreement; (iii) suspension of the dbt Labs Services due to non-payment in accordance with the Agreement or other breach of the Agreement, including the Requirements by Customer; or (iv) Customer's failure to use the dbt Labs Services in accordance with the Requirements, the Agreement and/or dbt Labs Documentation (however, upon being notified, Fivetran will use commercially reasonable efforts to help Customer address the failure).

·Credits. If the dbt Labs Platforms fails to meet the Availability SLA in a given month, then Fivetran shall, upon Customer's written request within thirty days of the unavailability and in accordance with the procedures set forth herein, apply a credit to the Customer account as set forth below, in addition to any other remedies specified in this SLA:

·Subject to confirming the validity of Customer's request, Fivetran shall issue credits the month after the applicable failure to meet the Availability SLA. If a failure occurs in the last month of the Term of the applicable Order Form or otherwise when Customer does not owe an outstanding balance and the Order Form does not renew, then Fivetran shall issue a refund in the amount of the appropriate credit. A maximum of 5% of the total monthly recurring dbt Labs Platform Fees specified in the applicable Order Form will be credited in any single month. Total Monthly Fees are calculated by dividing by twelve (12) the Total Annual dbt Labs Platform Fees applicable to the month in which the availability failure occurred (not including any professional services or non-recurring fees).

·History Archived Version

·Software and Service Specific Requirements for dbt Labs Services June 1, 2026 Need help? legal@fivetran.com

·(c) 2026 Fivetran Inc. Website terms of usePrivacy policy