SIGNATURE PAGES
Data Processing Agreement and Standard Contractual Clauses Package
Execution Version
February 15, 2026
These signature pages are delivered in connection with and form part of (i) the Data Processing Agreement dated as of February 15, 2026 (the "DPA"), and (ii) the Standard Contractual Clauses package appended thereto (the "SCC Package," and together with the DPA, the "Agreement"), by and among the parties identified below.
SIGNATURE PAGE TO THE DATA PROCESSING AGREEMENT
Reference is hereby made to that certain Data Processing Agreement dated as of February 15, 2026 (the "DPA"), by and between Meridian Federal Savings Bank, as Controller, and Skybridge Fintech Ltd., as Processor.
IN WITNESS WHEREOF, the parties hereto have caused this Data Processing Agreement to be executed by their respective duly authorized representatives as of the date first written above.
CONTROLLER:
MERIDIAN FEDERAL SAVINGS BANK a federally chartered savings bank (OCC Charter No. 14-2238)
900 Broad Street, Suite 1200 Newark, NJ 07102
By: ________
Name: Lawrence C. Driscoll
Title: Chief Executive Officer
Date: February _, 2026
PROCESSOR:
SKYBRIDGE FINTECH LTD. a Delaware corporation
4100 Silverside Road, Suite 310 Wilmington, DE 19810
By: ________
Name: Nadia Karimova
Title: Chief Executive Officer
Date: February _, 2026
SIGNATURE PAGE TO THE STANDARD CONTRACTUAL CLAUSES — MODULE 2 (CONTROLLER-TO-PROCESSOR)
Pursuant to EU Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
These Standard Contractual Clauses (Module 2: Transfer Controller to Processor) are entered into as part of the DPA dated as of February 15, 2026, and are governed by the law of the Netherlands pursuant to Clause 17 thereof.
DATA EXPORTER
MERIDIAN FEDERAL SAVINGS BANK Role: Controller a federally chartered savings bank (OCC Charter No. 14-2238)
900 Broad Street, Suite 1200 Newark, NJ 07102
Contact person for data protection inquiries: Andrea Sokolov, Chief Compliance Officer
By: ________
Name: Lawrence C. Driscoll
Title: Chief Executive Officer
Date: February _, 2026
DATA IMPORTER
SKYBRIDGE FINTECH LTD. Role: Processor a Delaware corporation
4100 Silverside Road, Suite 310 Wilmington, DE 19810
Contact person for data protection inquiries: Thomas Elridge, General Counsel / Chief Privacy Officer
By: ________
Name: Nadia Karimova
Title: Chief Executive Officer
Date: February _, 2026
SIGNATURE PAGE TO THE STANDARD CONTRACTUAL CLAUSES — MODULE 3 (PROCESSOR-TO-SUB-PROCESSOR)
Skybridge Fintech Ltd. to Osprey Cloud Infrastructure, Inc.
Pursuant to EU Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
These Standard Contractual Clauses (Module 3: Transfer Processor to Sub-processor) are entered into as part of the DPA dated as of February 15, 2026, and are governed by the law of the Netherlands pursuant to Clause 17 thereof.
DATA EXPORTER
SKYBRIDGE FINTECH LTD. Role: Processor a Delaware corporation
4100 Silverside Road, Suite 310 Wilmington, DE 19810
Contact person for data protection inquiries: Thomas Elridge, General Counsel / Chief Privacy Officer
By: ________
Name: Nadia Karimova
Title: Chief Executive Officer
Date: February _, 2026
DATA IMPORTER
OSPREY CLOUD INFRASTRUCTURE, INC. Role: Sub-processor a Delaware corporation
2200 Campus Drive San Jose, CA 95131
Contact person for data protection inquiries: To be designated by Osprey Cloud Infrastructure, Inc.
By: ________
Name: Martin Cho
Title: Chief Executive Officer
Date: February _, 2026
SIGNATURE PAGE TO THE STANDARD CONTRACTUAL CLAUSES — MODULE 3 (PROCESSOR-TO-SUB-PROCESSOR)
Skybridge Fintech Ltd. to Skybridge Fintech Europe B.V.
Pursuant to EU Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
These Standard Contractual Clauses (Module 3: Transfer Processor to Sub-processor) are entered into as part of the DPA dated as of February 15, 2026, and are governed by the law of the Netherlands pursuant to Clause 17 thereof.
DATA EXPORTER
SKYBRIDGE FINTECH LTD. Role: Processor a Delaware corporation
4100 Silverside Road, Suite 310 Wilmington, DE 19810
Contact person for data protection inquiries: Thomas Elridge, General Counsel / Chief Privacy Officer
By: ________
Name: Nadia Karimova
Title: Chief Executive Officer
Date: February _, 2026
DATA IMPORTER
SKYBRIDGE FINTECH EUROPE B.V. Role: Sub-processor a Dutch besloten vennootschap (B.V.) KvK No. 82104593
Keizersgracht 482 1017 EG Amsterdam, Netherlands
Contact person for data protection inquiries: Lena Vogt, Managing Director
By: ________
Name: Lena Vogt
Title: Managing Director
Date: February _, 2026
CLOSING NOTATIONS.
Each signature page herein is an integral part of the Agreement and is not effective independently of the Agreement to which it relates. No signature page shall be construed as creating any rights or obligations separate from the DPA or the applicable Standard Contractual Clauses to which such signature page is attached.
Schedules A through D of the DPA and SCC Annexes I, II, and III, each as set forth in the Agreement, are incorporated herein by reference and shall be deemed duly executed and delivered by the parties upon execution and delivery of these signature pages, without the need for separate execution of such Schedules or Annexes.
The Agreement, including these signature pages, may be executed in one or more counterparts, each of which shall be deemed an original and all of which together shall constitute one and the same instrument. Delivery of an executed counterpart of a signature page to the Agreement by electronic transmission (including portable document format (PDF) or any electronic signature complying with the U.S. federal ESIGN Act of 2000 or the Uniform Electronic Transactions Act, as applicable) shall be effective as delivery of a manually executed counterpart of the Agreement.
[Remainder of page intentionally left blank.]