Information for External Providers

The following requirements apply to all external providers and sub-tier suppliers to ZeCoat Corporation  providing materials and services with respect to ZeCoat’s AS9100 compliant production and design. By  accepting a purchase order from ZeCoat Corporation the supplier is bound to the requirements listed in this  document. External providers are not permitted to outsource any portion of the purchase order  requirements unless specifically authorized by ZeCoat Corporation and shall flow down these requirements  to any sub-tier suppliers. These requirements are derived from the requirements of ZeCoat’s customers and  the requirements of AS9100d 8.4.3. 

A. ZeCoat communicates our requirements for the processes, products, and services to be provided  including the identification of relevant technical data on the purchase order, statement of work or  accompanying attachments to either document. 

B. ZeCoat communicates our requirements for the approval of products and services, methods, processes,  and equipment and the release of products and services. These requirements will be stated on the  purchase order, statement of work or accompanying attachments to either document. 

C. ZeCoat requires vendors maintain competence, including any required qualification of persons. 

D. ZeCoat will communicate our requirements for the external providers’ interactions with the organization on the purchase order or SOW. 

E. ZeCoat monitors and measures all external providers performance to quality and on-time delivery.  Performance to contract will be monitored at each occurance. Unsatisfactory performance will be  communicated and may require formal corrective action. 

F. ZeCoat communicates our requirements for verification or validation activities that the organization, or  its customer, intends to perform at the external providers’ premises. 

G. ZeCoat maintains control of design and development according to specifications submitted with a  purchase order. Any changes must be approved by ZeCoat and / or an applicable change control board. 

H. ZeCoat communicates our requirements for special requirements, critical items or key characteristics.  These requirements will be stated on the purchase order, statement of work or accompanying  attachments to either document. 

I. ZeCoat communicates our requirements for test, inspection, and verification on the purchase order or  accompanying documents.  

J. ZeCoat communicates our requirements for the use of statistical techniques for product acceptance and  related instructions for acceptance. These requirements will be stated on the purchase order, statement  of work or accompanying attachments to either document. 

K. ZeCoat Requires that:

• external suppliers implement a quality management system similar to the requirements of ISO  9001.  

• external suppliers use ZeCoat-designated or approved sub-tier providers and / or process sources. 

• external suppliers notify ZeCoat of nonconforming processes, products, or services and obtain  approval for their disposition. 

• external providers prevent the use of counterfeited parts. 

• external providers notify ZeCoat of changes to processes, products, or services, including changes  of their external providers or location of manufacture and obtain ZeCoat's approval. 

• external providers shall flow down these requirements, including requirements as stated on the  PO or accompanying documents, to any sub-tier approved vendors. 

• External providers will provide test specimens for design approval, inspection / verification,  investigation, or auditing as stated on the PO or accompanying documents. 

• external providers shall retain documented information, including tests, inspections, relevant  calibration, disposition and purchase orders for a minimum of 10 years. 

L. When specified by a purchase agreement, ZeCoat maintains the right of access by ZeCoat, ZeCoat's  customer, and regulatory authorities to the applicable areas of facilities and to applicable documented  information, at any level of the supply chain. By accepting the purchase order, the external provider  accepts ZeCoat's right of access to the external providers premises to attend meetings, conduct  performance reviews, review work in progress, conduct investigations, resolve problems, conduct 2nd  party audits, support improvement activity, deliver training. 

M. ZeCoat Requires that supplier employees are aware of their contribution to product or service conformity  e.g., individual accountability, understanding requirements, compliance to process, the need to control  changes, reporting of nonconformance, their contribution to product safety e.g. individual accountability,  compliance to process, attention to detail, knowledge of product end usage, potential impact related to  product issues and the importance of ethical behavior e.g. code of conduct, management / employee  working relationships, fair treatment, employee work recognition, confidential reporting mechanisms,  protecting anonymity, no blame culture.

OVERNMENT CONTRACT CLAUSES The following clauses of the Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) are incorporated by reference with the same force and effect as though fully set forth herein.

FAR (The following FAR clauses apply to all orders)

52.204-23 Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities (Jul 2018)

52.204-25 Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment (AUG 2020) (excluding para (b)(2))

52.204-27 Prohibition on a ByteDance Covered Application (Jun 2023) 52.212-04 Contract Terms and Conditions-Commercial Items (JAN 2017) Paragraphs (a), (c), (e), (i),(l), (m), (n), (o), (q), (r), (s), (t), (u), and (v) apply

52.225-13 Restrictions on Certain Foreign Purchases (Jun 2008)

52.244-06 Subcontracts for Commercial Items (Jul 2014) (All clauses under Para (c)(1) apply)

In addition to the above, for orders in excess of $10,000, the following shall apply:

52.222-21 Prohibition of Segregated Facilities (Feb 1999)

In addition to the above, for orders $30,000 and above the following shall apply: 52.204-10 Reporting Executive Compensation and First-Tier Subcontract Awards (Oct 2015)

In addition to the above, for orders $35,000 and above the following shall apply: 52.209-06 Protecting the Governments Interest when Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment (Oct 2015) (Excluding Commercial Off The Shelf (COTS) Items)

In addition to the above, for orders in excess of $150,000 the following shall apply: 52.203-12 Limitation on Payments to Influence Certain Federal Transactions (Oct 2010)

In addition to the above, for orders in excess of $250,000 the following shall apply: 52.203-06 Restrictions on Subcontractor Sales to the Government (Sep 2006) Alt 1 (Oct 1995) 52.203-17 Contractor Employee Whistleblower Rights and Requirements to Inform Employees of Whistleblower Rights (Apr 2014)

In addition to the above, for orders in excess of $5.5M and >120 days POP the following shall apply: 52.203-13 Code of Business Conduct and Ethics (Oct 2015)

DFARS (The following DFARS Clauses apply to all orders)

252.203-7002 Requirement To Inform Employees of Whistleblower Rights (Sep 2013) 252.204-7000 Disclosure of Information (Aug 2013)

252.223-7006 Prohibition on Storage and Disposal of Toxic and Hazardous Materials (Apr 2012) ZC-A-R-631 A, Government Contract Clauses.docx

252.225-7048 Export Controlled Items (Jun 2013) 252.239-7018 Supply Chain Risk (Nov 2013)

252.247-7023 Transportation of Supplies By Sea - Basic (Apr 2014) (Except para (f) & (g) <SAT) In all FAR Clauses herein above listed, the term "Contractor" shall mean "Subcontractor," the term "this Contract" shall mean "this Order," and the terms "Government " and "Contracting Office" may also be interpreted to mean "ZeCoat Corporation."