EX-10.16





 Exhibit 10.16 

AMENDED AND RESTATED TRANSUNION MASTER AGREEMENT 

FOR CONSUMER REPORTING AND ANCILLARY SERVICES 

This Amended and Restated TransUnion Master Agreement for Consumer Reporting and Ancillary Services (“Agreement”) is made and entered as of this
______ date of _11/25/2020_, 2020 (the “Effective Date”), by and between Trans Union LLC, with its principal place of business at 555 West Adams, Chicago, Illinois 60661 (“TransUnion”), and Upstart Network, Inc., with its
principal place of business at 2950 South Delaware Avenue, #300, San Mateo, CA 94403 (“Subscriber”). 
 RECITALS 

WHEREAS, TransUnion and Subscriber previously entered into that certain TransUnion Master Agreement for Consumer Reporting and
Ancillary Services dated March 20, 2015, including all addenda and amendments entered into from time to time by the parties (the “Existing MSA”); and 

WHEREAS, TransUnion and Subscriber wish to amend and restate the Existing MSA in its entirety. 

NOW, THEREFORE, in consideration of the promises and mutual covenants hereinafter set forth, and other good and valuable consideration,
the receipt and sufficiency of which is hereby acknowledged, TransUnion and Subscriber hereby agree as follows: 
  

	1.	 Scope of Agreement. This Agreement applies to any of those information services
which Subscriber may desire to receive from TransUnion and which TransUnion offers to Subscriber. Such information services shall herein be collectively referred to as “Services” and all information derived therefrom shall be collectively
referred to as “Services Information”. 


 Subscriber enters into this Agreement on behalf of itself and its
affiliates under common ownership and control, as identified on the attached Exhibit A (“Affiliates”), which may be amended by Subscriber from time to time to add and/or delete Affiliates upon written notice to TransUnion. Subscriber and
all said Affiliates shall hereinafter be referred to collectively as “Subscriber”. 
 This Agreement consists of the general terms
and conditions set forth in the body of this Agreement (“General Terms”), Exhibit A (“Affiliates”) and Exhibit B (“Fair Isaac Scores”). If there is a conflict between the General Terms and the terms of Exhibit A, the
General Terms shall prevail; if there is a conflict between the General Terms and the terms of Exhibit B, Exhibit B shall prevail solely with respect to the FICO Scores as defined in Exhibit B. 

 

	2.	 Subscriber’s Business. Subscriber certifies that the nature of
Subscriber’s business is as described by Subscriber in Subscriber’s customer membership materials. Subscriber certifies that Subscriber is not a telephone solicitor doing business in Massachusetts or Connecticut and using the
data provided by TransUnion for the initiation of a telephone call or message to encourage the purchase or rental of, or investment in, property, goods or services, that is transmitted to a consumer. 



 

	3.	 Consumer Reporting Services. 



 

	3.1	 Consumer Report Information. TransUnion makes certain consumer report information services from its
consumer reporting database (“Consumer Report Information”) available to its customers who have a permissible purpose for receiving such information in accordance with the Fair Credit Reporting Act (15 U.S.C. §1681 et seq.) including,
without limitation, all amendments thereto (“FCRA”). 


  

	3.2	 FCRA Penalties. THE FCRA PROVIDES THAT ANY PERSON WHO KNOWINGLY AND WILLFULLY OBTAINS INFORMATION ON A
CONSUMER FROM A CONSUMER REPORTING AGENCY UNDER FALSE PRETENSES SHALL BE FINED UNDER TITLE 18, OR IMPRISONED NOT MORE THAN TWO YEARS, OR BOTH. 


  

	3.3	 Subscriber Certifications. Subscriber certifies that it shall request Consumer Report Information solely
for Subscriber’s exclusive one-time use and use such information solely for the permissible purpose(s) set forth below in Sections 3.4 – 3.7, and for no other purpose, subject however, to the
additional restrictions set forth herein. If requested by TransUnion, and in addition to the general certification set forth herein, Subscriber agrees to, and shall, individually certify the permissible purpose for each Consumer Report Information
it requests. Such individual certification shall be made by Subscriber pursuant to instructions provided from time to time by TransUnion. For purposes of this Agreement, the term “adverse action” shall have the same meaning as that term is
defined in the FCRA. 


  

			
	TransUnion Confidential Information (March 2015)	  	Page 1 of 15

  

	***	 Certain information has been excluded from this agreement because it is both (i) not material and (ii) would be
competitively harmful if publicly disclosed. 















	3.4	 Consumer Report Information—Permissible Purpose(s): 



 

	 	•	 	 In connection with a credit transaction involving the consumer on whom the information is to be furnished and
involving the extension of credit to, or review or collection of an account of the consumer. 


  

	 	•	 	 In connection with the underwriting of insurance involving the consumer. 



 

	 	•	 	 Pursuant to the written authorization of the consumer who is the subject of the Consumer Report Information.
Subscriber certifies that each such written authorization will expressly authorize Subscriber to obtain the Consumer Report Information, and will contain at a minimum the subject’s name, address, social security number (where available) and
signature. Subscriber further agrees to retain copies of all such written authorizations for a minimum of five (5) years from the date of inquiry, and make such written authorizations available to TransUnion upon request. Nothing in this
certification, or elsewhere in this Agreement, is intended to allow Subscriber to purchase Consumer Report Information for the purpose of selling or giving the report, or information contained in or derived from it, to the subject of the report, or
to any other third party, and Subscriber expressly agrees to refrain from such conduct. 


  

	 	•	 	 For employment purposes, in which case Subscriber shall request only a TransUnion service expressly designed for
employment purposes (“Employment Report”). Subscriber further certifies that it shall not request an Employment Report unless and subject to the following conditions: 



 

	 	A.	 A clear and conspicuous disclosure is first made in writing to the consumer before the Consumer Report
Information is obtained, in a document that consists solely of the disclosure, that a consumer report may be obtained for employment purposes; 


  

	 	B.	 The consumer has authorized in writing the procurement of the Employment Report; 



 

	 	C.	 Information from the Employment Report will not be used in violation of any applicable federal or state equal
employment opportunity law or regulation; 


  

	 	D.	 The Employment Report will only be used once; and, 



 

	 	E.	 Before taking adverse action in whole or in part based on the Employment Report, Subscriber shall provide the
consumer with a copy of the Employment Report and shall provide the consumer with a copy of the consumer’s rights, in the format approved by the Consumer Financial Protection Bureau (“CFPB”), which form notice shall be supplied to
Subscriber by TransUnion either with each report, or one time in print format, in which case Subscriber agrees to duplicate and provide said form notice to the consumer as required hereunder. 



 

	 	•	 	 To use the Consumer Report Information as a potential investor or servicer, or current insurer, in connection
with a valuation of, or an assessment of, the credit or prepayment risks associated with an existing credit obligation. 


  

	 	•	 	 To use the Consumer Report Information in connection with Subscriber’s legitimate business need for the
information in connection with a business transaction that is initiated by a consumer. 


  

	 	•	 	 To use the Consumer Report Information in connection with Subscriber’s legitimate business need for the
information to review an account to determine whether the consumer continues to meet the terms of the account. 


 **
The following certifications are available for use by Government Agencies only ** 
  

	 	•	 	 To use the Consumer Report Information in connection with a determination of the consumer’s eligibility for
a license or other benefit granted by a governmental instrumentality required by law to consider an applicant’s financial responsibility or status. 


  

	 	•	 	 Subscriber is the head of a state or local child support enforcement agency (or state or local government
official authorized by the head of such an agency), and on each request the Subscriber certifies that: 


  

	 	A.	 The Consumer Report Information is needed for the purpose of establishing an individual’s capacity to make
child support payments or determining the appropriate level of such payments; 


  

	 	B.	 The paternity of the consumer for the child to which the obligation relates has been established or
acknowledged by the consumer in accordance with state laws under which the obligation arises (if required by those laws); 


  

	 	C.	 The Subscriber has provided at least 10 days’ prior notice to the consumer whose report is requested, by
certified or registered mail to the last known address of the consumer, that the report will be requested; and, 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 2 of 15















	 	D.	 The Consumer Report Information will be kept confidential, will be used solely for a purpose described in
subparagraph (A) above, and will not be used in connection with any other civil, administrative, or criminal proceeding, or for any other purpose; 


  

	 	•	 	 Subscriber is an agency administering a state plan under Section 454 of the Social Security Act (42 U.S.C.
654) and will use the information to set an initial or modified child support award. 


  

	3.5	 Account Review/Account Monitoring Certification. In the event that Subscriber requests Consumer Report
Information for account review or monitoring purposes, whether batch or on-line, Subscriber shall make such requests solely for review or monitoring of Subscriber’s own open accounts and/or closed
accounts with balances owing, and for no other purpose. Subscriber shall notify TransUnion in a mutually acceptable format of the review or monitoring methods and criteria desired, and of any desired changes to or deletion of any individual
monitoring set, and shall delete individual monitoring sets on any consumers if Subscriber ceases to have a permissible purpose to receive Consumer Report Information on such consumers. When Subscriber requests information as a potential investor or
servicer, or current insurer, in connection with a valuation of or an assessment of the credit or prepayment risks associated with an existing credit obligation (“Valuation Account Reviews”), Subscriber shall first obtain the prior written
consent of the current account owner or servicer of such accounts and make a copy of such consent available to TransUnion. 


  

	3.6	 Prescreening Certifications. Provided that Subscriber meets all TransUnion reporting requirements for
prescreening customers as may be established by TransUnion from time to time, TransUnion, upon request by Subscriber, agrees to extract names from TransUnion’s central computer file of credit information, or to screen names of individuals
contained on a base list mutually acceptable to TransUnion and Subscriber, in accordance with selection criteria as specified by Subscriber and acceptable to TransUnion (“Prescreen Services”). Prescreen Services may include scores,
attributes and/or other appends as mutually agreed. Each such request for prescreened names, including, but not limited to, such criteria associated with each such request, is hereby incorporated into this Agreement by reference.



  

	3.6.1	 Format and Delivery. TransUnion shall supply, and deliver to Subscriber, such Prescreen Services in the
form of prescreened lists (“Prescreened Lists”), in a mutually agreed upon format. TransUnion will be responsible for the computer programming of the selection criteria specified by Subscriber. 



 

	3.6.2	 Third Party Processors. Subscriber shall notify TransUnion, in writing, whether it intends to have a
designated third party processor (“Processor”) perform further processing of Prescreened Lists to further refine the selection. Upon such notification, TransUnion shall deliver such Prescreened Lists to Subscriber’s designated
Processor provided said Processor has been approved by TransUnion and has executed an agreement for processing with TransUnion. Subscriber shall so notify TransUnion in writing in conjunction with each prescreen request as to whether Subscriber
intends to so utilize Processor. Subscriber certifies that neither the criteria used to select the names nor the tape nor media layout description of the attributes will be disclosed by Subscriber to Processor. Subscriber certifies that it will not
request or receive from Processor any names of consumers other than those to which it will make a firm offer of credit or insurance, as defined by the FCRA (“Firm Offer”). Moreover, Subscriber shall require that Processor provide to
TransUnion, in a mutually agreed upon format, clearly labeled media identifying all consumers on such refined Prescreened List so that TransUnion can post inquiries to its files on such consumers as required by law. Subscriber shall require that
Processor provide such media to TransUnion upon completion of such further processing but in no event later than seventy-five (75) days after Processor’s receipt of the media from TransUnion. 



 

	3.6.3	 Subscriber Solicitation and Use of the Prescreened Lists. Except as otherwise mutually agreed,
Subscriber will be responsible for preparation of solicitation materials and all other communications to be made with prescreened individuals. Subscriber hereby certifies that it will extend a Firm Offer of credit or insurance to each and every
individual named on the Prescreened List, or Processor-refined Prescreened List, and that such offer will not be withdrawn or withheld after the offer is made, except as permitted by the FCRA. Subscriber further agrees to make available to
TransUnion upon request a sample or draft of the mail piece or telemarketing script in which the Firm Offer will be made, and TransUnion may refuse to provide Prescreened Lists if TransUnion has a good faith belief that the proposed offer is not a
Firm Offer of credit or insurance. However, notwithstanding this right to review the mail piece or script, TransUnion shall have no liability for failure of such mail piece or script to comply with applicable law, including, but not limited to, the
FCRA. 


  

	3.6.4	 One Time Use. All information received from Prescreened Services is for Subscriber’s exclusive one-time use. Such information shall not be revealed or made available, in whole or in part, to any person except employees of Subscriber or Processor who have a need to know as expressly authorized under this
Agreement. In no event shall the Prescreened Services be used for the processing of credit applications or underwriting insurance in the normal course of business. Except solely to the extent necessary to utilize such Prescreened Lists pursuant to
the terms and conditions of this Agreement, Subscriber shall not copy the Prescreened Lists, or any portion thereof, without TransUnion’s prior written consent, nor grant any other person or entity the right to do so. Moreover, Subscriber is
not granted any ownership rights or title to the Prescreened Lists nor to any information contained in any and all such Prescreened Lists. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 3 of 15















	3.7	 Instant Decision Processing. TransUnion offers a suite of automated instant decision processing tools
that: (i) determine whether a consumer qualifies for requested products or service, made available subject to the permissible certifications in Section 3.4, above; (ii) reviews existing customers for possible action on an account,
made available subject to Section 3.5, above; or, (iii) performs a prescreen of an individual’s consumer credit file against pre-determined credit criteria, made available subject to
Section 3.6, above (collectively, “Instant Decision Processing”). When a Subscriber desires to receive any Instant Decision Processing services, the delivery specifications and decision criteria shall be set forth in a separate
written Schedule to be attached thereto. 


  

	3.7.1	 TransUnion has developed a service that allows its customers electing Instant Decision Processing services to
retrieve, through the Internet, the instant decision screen and Consumer Report Information, if applicable, generated as a result of a previously processed instant credit decision transaction (“Previous Instant Credit Decision”). Consumer
Report Information will be limited for decisions relating to prescreening. 


 TransUnion may make the Previous Instant
Credit Decision available to subscribers electing Instant Decision Processing services. TransUnion, for each individual instant credit decision transaction requested by Subscriber, shall exercise reasonable efforts to retain, on behalf of
Subscriber, the Previous Instant Credit Decision which was originally delivered to Subscriber for a period of thirty-five (35) days from such instant credit decision transaction. 

Subscriber hereby represents and warrants that, for each individual instant credit decision transaction for which Subscriber utilized Previous
Instant Credit Decision, Subscriber shall use the Previous Instant Credit Decision solely: (i) one time for the specific permissible purpose, pursuant to the FCRA, for which Subscriber requested such individual instant credit decision
transaction; and, (ii) solely in conjunction with such particular individual instant credit decision transaction. Subscriber shall not use Previous Instant Credit Decision for any other purpose whatsoever. 

 

	3.8	 California Certification. If Subscriber is a retailer who uses Consumer Report Information in connection
with in-person credit applications, subject to the California Consumer Credit Reporting Agencies Act and all amendments thereto, then Subscriber shall instruct its employees responsible for receiving in-person credit applications from California consumers, including point of sale applications, to inspect the applicant’s photo identification prior to requesting Consumer Report Information. Subscriber shall
identify to TransUnion, either by subscriber code or by flag on the affected inquiry when it requests Consumer Report Information for an in-person credit application. 



 

	3.9	 Vermont Certification. Subscriber agrees to comply with Vermont law when requesting a consumer report on
a Vermont resident. Subscriber expressly agrees to obtain the consumer’s consent before requesting a consumer report to the extent and in the manner required by Vermont law. 



 

	4.	 Ancillary Services. 



 

	4.1	 Fraud Prevention Services. TransUnion offers several fraud prevention services that evaluate inquiry
input elements against other input elements and/or against proprietary databases to identify potential discrepancies and/or inaccuracies. Fraud prevention service messages may be delivered with Consumer Report Information as a convenience, but are
not part of a consumer’s file nor are they intended to be consumer reports. In the event Subscriber obtains any fraud prevention services from TransUnion in conjunction with Consumer Report Information or as a stand-alone service, Subscriber
shall not use the fraud prevention services, in whole or in part, as a factor in establishing an individual’s creditworthiness or eligibility for credit, insurance, employment, or for any other purposes under the FCRA. Moreover, Subscriber
shall not take any adverse action against any consumer that is based in whole or in part on the fraud prevention services. As a result of information obtained from the fraud prevention services, it is understood that Subscriber may choose to obtain
additional information from one or more additional independent sources. Any action or decision as to any individual, which is taken or made by Subscriber based solely on such additional information obtained from such additional independent source(s)
shall not be deemed prohibited by this paragraph. 


  

	4.2	 Reference Services. 



 

	4.2.1	 TransUnion offers a suite of reference services from sources other than its Consumer Reporting Database (“Non-CRD Reference Services”), which it may make available to Subscriber under the terms of this Agreement. Subscriber shall not use Non-CRD Reference Services for
marketing purposes without the prior written consent of TransUnion. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 4 of 15















	4.2.2	 TransUnion also offers the suite of reference services from its Consumer Reporting Database (“CRD
Reference Services”). If Subscriber desires to receive CRD Reference Services, Subscriber hereby certifies that the specific purpose(s) for which the CRD Reference Services will be requested, obtained and used by Subscriber is one or more of
the following uses as described in, and as may be interpreted from time to time, by competent legislative, regulatory or judicial authority, and as being encompassed by Section (6802)(e) of the Gramm-Leach-Bliley Act, Title V, Subtitle A, Financial
Privacy (15 U.S.C. § 6801-6809) (“GLB”) and the United States Federal Trade Commission rules promulgated thereunder. Subscriber shall not request, obtain or use such CRD Reference Services for any other purpose. 



 

	 	•	 	 As necessary to effect, administer, or enforce a transaction requested or authorized by the consumer, or in
connection with servicing or processing a financial product or service requested or authorized by the consumer; 


  

	 	•	 	 As necessary to effect, administer, or enforce a transaction requested or authorized by the consumer, or in
connection with maintaining or servicing the consumer’s account with Subscriber and Subscriber is a financial institution; 


  

	 	•	 	 With the consent or at the direction of the consumer; 



 

	 	•	 	 To protect against or prevent actual or potential fraud, unauthorized transactions, claims, or other liability;



  

	 	•	 	 For use solely in conjunction with a legal or beneficial interest held by Subscriber and relating to the
consumer; or, 


  

	 	•	 	 For use solely in Subscriber’s fiduciary or representative capacity on behalf of the consumer.



  

	4.2.3	 For purposes of this Agreement, the term “Reference Services” shall be deemed to include both Non-CRD Reference Services and CRD Reference Services. Subscriber shall not take any adverse action against any consumer that is based in whole or in part on the Reference Services. 



 

	4.3	 Depersonalized Data Services. From time to time, Subscriber may desire to obtain depersonalized data
(“Data Services”) identified in a Data Services request form or other mutually agreed upon document signed by an authorized representative of Subscriber (“Data Services Request” or “DSR”).Subscriber represents and
warrants that Subscriber shall use any and all Data Services received pursuant to this Agreement solely for one or more of the following purposes: 


  

	 	A.	 Determination of the validity of an existing risk score model or of certain data attributes, when such model or
attributes will be used in conjunction with the evaluation of consumer credit information received and used under this Agreement; 


  

	 	B.	 Building Subscriber’s own consumer credit information-based model which model shall be used solely in
conjunction with the evaluation of consumer credit information received and used under this Agreement; 


  

	 	C.	 Review and validation of Subscriber’s policies relating to credit eligibility or any other permissible
purpose under the FCRA, which policies Subscriber shall use in conjunction with evaluating consumer credit information received and used under this Agreement; 



 

	 	D.	 Determination of the qualitative value of consumer credit information TransUnion provides under this Agreement;
or, 


  

	 	E.	 Other appropriate purpose as agreed to by TransUnion and Subscriber in an applicable DSR.



  

	4.3.1	 Subscriber shall not use Data Services for any other purpose and shall take no action as to any individual
consumer as the result of the Data Services received under this Agreement. With respect to each request for Data Services, Subscriber represents and warrants that: (i) it does not have the ability to match the Data Services to the identity of
any consumer; (ii) it shall make no attempt to obtain data permitting it to match the Data Services to the identity of any consumer; (iii) it will not accept any information from any third party that permits such a match; and, (iv) it
will make no such match. 


  

	4.4	 TransUnion Scores. Subscriber may request, in writing, that TransUnion provide TransUnion Scores to
Subscriber, which shall include the Vantage Score, in connection with the delivery of a consumer report obtained hereunder or in connection with the delivery of Data Services under Section 4.3. TransUnion agrees to perform such processing as
reasonably practicable. Subscriber shall use TransUnion Scores provided in connection with the delivery of a consumer report only in accordance with its permissible purpose under the FCRA certified at the time of its request for such TransUnion
Scores. Subscriber will request Scores only for Subscriber’s exclusive use. Subscriber may store Scores solely for Subscriber’s own use in furtherance of Subscriber’s original purpose for obtaining the Scores 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 5 of 15















	4.4.1	 Adverse Action Factors. Subscriber recognizes that factors other than the TransUnion Score may be
considered in making a decision as to a consumer. Such other factors include, but are not limited to, the credit report, the individual account history, application information, and economic factors. TransUnion may provide score reason codes to
Subscriber, which are designed to indicate the principal factors that contributed to the TransUnion Score, and may be disclosed to consumers as the reasons for taking adverse action, as required by the Equal Credit Opportunity Act (“ECOA”)
and its implementing Regulation (“Reg. B”). The TransUnion Score itself, when accompanied by the corresponding reason codes, may also be disclosed to the consumer who is the subject of the TransUnion Score. However, the TransUnion Score
itself may not be used as the reason for adverse action under Reg. B. 


  

	4.4.2	 Use of TransUnion Scores for Model Development or Model Calibration. TransUnion Scores, including the
Vantage Score, obtained in conjunction with Data Services under Section 4.3 for the purpose of model development or model calibration, may be used for model development or model calibration in compliance with the following conditions:
(i) the Scores may only be used as an independent variable in custom models; (ii) only the raw depersonalized Score and Score segment identifier may be used in modeling (i.e. no other Score information may be used, including, but not
limited to, adverse action reasons, documentation, or scorecards may be used); and, (iii) Subscriber’s depersonalized analytics and/or depersonalized third party modeling analytics performed on behalf of Subscriber, using Scores, will be
kept confidential and not disclosed to any third party except to: (a) Subscriber’s third party processing agents and other contractors of Subscriber who have executed an agreement that limits the use of the Scores by the third party only
to the use permitted to Subscriber and contains the prohibitions set forth herein regarding model development, model calibration, reverse engineering and confidentiality; (b) to governmental regulatory agencies; and/or, (c) as required by
law. In no event may Subscriber reverse engineer the TransUnion Scores. 


  

	4.4.3	 Confidentiality of TransUnion Scores. The TransUnion Score is proprietary to TransUnion and shall not be
disclosed to any other third party without TransUnion’s prior written consent, except as expressly permitted herein or where clearly required by law. All TransUnion Scores provided hereunder will be held in strict confidence and may never be
sold, licensed, copied, reused, or reproduced, and may never be disclosed, revealed or made accessible, in whole or in part, to any Person, except: (i) to those employees of Subscriber with a need to know and in the course of their employment;
(ii) to those third party processing agents and other contractors of Subscriber who have a need to know in connection with Subscriber’s use of the TransUnion Scores as permitted hereunder and who have executed a written agreement that
limits the use of the TransUnion Scores by the third party only to the use permitted to Subscriber and contains the prohibitions set forth herein regarding model development, model calibration, reverse engineering and confidentiality;
(iii) when accompanied by the corresponding reason codes, to the consumer who is the subject of the score, when in connection with an adverse action notice; (iv) to governmental regulatory agencies; (v) to ratings agencies, dealers,
investors and other third parties for the purpose of evaluating assets or investments (e.g., securities) containing or based on obligations of the consumers to which the Scores apply (e.g., mortgages, student loans, auto loans, credit cards),
provided that (a) Subscriber may disclose Scores only in aggregated formats (e.g., averages and comparative groupings) that do not reveal individual Scores, (b) Subscriber shall not provide any information that would enable a recipient to
identify the individuals to whom the Scores apply, and (c) Subscriber shall enter into an agreement with each recipient that limits the use of the Scores to evaluation of such assets or investments; or, (vi) as required by law. Subscriber
shall not, nor permit any third party to, publicly disseminate any results of the validations and/or other reports derived from the TransUnion Scores without TransUnion’s prior written consent. For the purpose of this Section 4.4.3,
“Person” shall mean an individual, a partnership, a corporation, a limited liability company, a trust, a joint venture, an unincorporated organization and any Government Authority. For the purpose of this Section 4.4.3,
“Government Authority” means any national, provincial, state, municipal, local or foreign government, ministry, department, commission, board, bureau, agency, authority, instrumentality, unit, or taxing authority thereof.



  

	4.4.4	 Predictive Triggers Models. TransUnion’s Predictive Triggers Models may be made available to
Subscriber in conjunction with Subscriber’s Prescreen and Account Review requests. Subscriber hereby represents and warrants that when Subscriber requests Predictive Triggers Models in conjunction with its Account Review requests, Subscriber
shall not use Predictive Triggers Models, nor any information derived therefrom: (i) to take any adverse action as to any individual consumer; or, (ii) for any other reason including, but not limited to, in connection with the collection
of an account. 


  

	4.4.5	 TransUnion Score Performance. Certain TransUnion Scores are implemented with standard minimum exclusion
criteria. TransUnion shall not be liable to Subscriber for any claim, injury, or damage suffered directly or indirectly by Subscriber as a result of any Subscriber requested changes to the exclusion criteria which result in normally excluded records
being scored by such TransUnion Scores. TransUnion warrants that the scoring algorithms used in the computation of the scoring services provided under this Agreement (“Models”), are empirically derived from credit data and are a
demonstrably and statistically sound method of rank-ordering candidate records with respect to the purpose of the TransUnion Scores when applied to the population for which they were developed, and that no scoring algorithm used by a TransUnion
Score uses a “prohibited basis” as defined in ECOA and Reg. B promulgated thereunder. The TransUnion Score may appear on a credit report for convenience only, but is not a part of the credit report nor does it add to the information in the
report on which it is based. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 6 of 15















	4.5	 Third Party Scores and Other Third Party Services. TransUnion has the capability to offer certain non-TransUnion owned scores derived from models built jointly with third parties, and other services provided by third parties, which are subject to separate warranties offered or terms imposed by such third
parties. If desired by Subscriber, such third party scores and services shall be made available pursuant to a separate agreement or pursuant to an addendum or Exhibit to this Agreement. For the avoidance of doubt, those Fair Isaac Scores provided by
TransUnion to Subscriber pursuant to Exhibit B are third party scores and do not constitute TransUnion-owned Services. 


  

	4.6	 OFAC Name Screen. TransUnion, as a stand-alone service, in conjunction with Consumer Report Information
or as an append to an ancillary service, has the capability to offer an indicator in the event a consumer’s name, as supplied by Subscriber to TransUnion on input and not as may be found on TransUnion’s database(s), appears on the United
States Department of Treasury Office of Foreign Asset Control File (“OFAC File”). In the event Subscriber obtains OFAC Name Screen services from TransUnion in conjunction with Consumer Report Information or as an append to an ancillary
service, Subscriber shall be solely responsible for taking any action that may be required by federal law as a result of a potential match to the OFAC File, and shall not deny or otherwise take any adverse action against any consumer which is based,
in whole or in part, on TransUnion’s OFAC Name Screen services. 


  

	5.	 Additional Terms and Conditions. 



 

	5.1	 Confidentiality. Subscriber shall hold all Services Information in confidence and shall not disclose
such information, in whole or in part, to any person except: (i) as required by law (e.g., an order of a court or data request from an administrative or governmental agency with competent jurisdiction) to be disclosed; provided however, that
Subscriber shall provide TransUnion with ten (10) days prior written notice before the disclosure of such information pursuant to this Paragraph 5.1; (ii) its employees that have a need to know in connection with its use of the Services
Information as permitted under this Agreement; or, (iii) its authorized agents who have a need to know in connection with its use of the Services Information as permitted under this Agreement and who are bound by written obligations sufficient
to limit use of such Services Information strictly for Subscriber’s benefit in accordance with the use and other restrictions contained in this Agreement. However, none of the foregoing restrictions shall prohibit Subscriber from disclosing to
the subject of the Consumer Report Information, who is the subject of an adverse action, the content of the Consumer Report Information as it relates to any such adverse action. The forgoing obligations of confidentiality with respect to Services
Information shall in all instances prevail over contrary or less stringent obligations of confidentiality entered between the parties. 


  

	5.2	 Safeguards. Each party shall implement, and shall take measures to maintain, reasonable and appropriate
administrative, technical, and physical security safeguards (“Safeguards”) designed to: (i) insure the security and confidentiality of non-public personal information; (ii) protect against
anticipated threats or hazards to the security or integrity of non-public personal information; and, (iii) protect against unauthorized access or use of non-public
personal information that could result in substantial harm or inconvenience to any consumer. When a consumer’s first name or first initial and last name is used in combination with both: (i) a social security number, driver’s license
or identification card number, or account number, credit or debit card number, and, (ii) any required security code, access code, or password that would permit access to an individual’s financial account (“Personal Information”),
and such combined information is delivered to Subscriber unencrypted, Subscriber shall implement and maintain reasonable security procedures and practices appropriate to the nature of the information and to protect the Personal Information from
unauthorized access, destruction, use, modification, or disclosure including without limitation, ensuring any Subscriber intentional deletion, destruction and/or disposal of Personal Information (whether in paper, electronic, or any other form, and
regardless of medium on which such Personal Information is stored) is performed in a manner so as to reasonably prevent its misappropriation or other unauthorized use including, but not limited to, cross-shredding printed information and pulverizing
or incinerating tapes, disks and other such non-paper media. 


  

	5.3	 Authorized Requests. Subscriber shall use the Services and Services Information: (i) solely for the
Subscriber’s certified use(s); (ii) solely for Subscriber’s exclusive one-time use; and, (iii) subject to the terms and conditions of this Agreement. Subscriber shall not request, obtain or use
Services for any other purpose including, but not limited to, for the purpose of selling, leasing, renting or otherwise providing information obtained under this Agreement to any other party, whether alone, in conjunction with Subscriber’s own
data, or otherwise in any service which is derived from the Services. Services shall be requested by, and Services Information shall only disclosed by Subscriber to, Subscriber’s designated and authorized employees and agents having a need to
know and only to the extent necessary to enable Subscriber to use the Services and Services Information in accordance with this Agreement, and, with respect to agents, only those who are bound by written obligations sufficient to limit use of such
Services and Services Information strictly for Subscriber’s benefit in accordance with the use and other restrictions contained in this Agreement. Subscriber shall ensure that such Subscriber designated and authorized employees and agents shall
not attempt to obtain any Services on themselves, associates, or any other person except in the exercise of their official duties. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 7 of 15















	5.4	 Rights to Services. Subscriber shall not attempt, directly or indirectly, to reverse engineer,
decompile, or disassemble Services and Services Information, or any confidential or proprietary criteria developed or used by TransUnion relating to the Services provided under this Agreement. Except as explicitly set forth in this Agreement the
entire right, title and interest in and to the Services and all copyrights, patents, trade secrets, trademarks, trade names, and all other intellectual property rights associated with any and all ideas, concepts, techniques, inventions, processes,
or works of authorship including, but not limited to, all materials in written or other tangible form developed or created by TransUnion in its performance of the Services, shall at all times vest exclusively in TransUnion. TransUnion reserves all
rights not explicitly granted to Subscriber under this Agreement. Subscriber acknowledges that any misappropriation or threatened misappropriation of TransUnion’s rights in and to the Services and other TransUnion intellectual property, or any
breach or threatened breach of the foregoing restrictions, may cause immediate and irreparable injury to TransUnion, and in such event, TransUnion shall be entitled to seek injunctive relief, without the necessity to post bond, in addition to any
and all other remedies available at law or in equity. Nothing stated herein will be construed to limit any other remedies available to TransUnion under this Agreement including, but not limited to suspension and/or termination.



  

	5.5	 Compliance with Laws. Each party hereto shall be responsible for its own compliance with all applicable
federal and state legislation, regulations and judicial actions, including, but not limited to, FCRA, GLBA and all other applicable privacy laws, “do not call” laws, the Drivers Privacy Protection Act (18 U.S.C. Section 2721 et seq.)
and similar and/or associated state laws and regulations governing the use and disclosure of drivers’ license information, as now or as may become effective, to which it is subject. Changes in the performance of TransUnion’s obligations
under this Agreement necessitated by TransUnion’s good faith interpretations of any applicable law, regulation, judicial or regulatory action or license rights, shall not constitute a breach of this Agreement. 



Data provided by TransUnion as part of Services may include information obtained from the Death Master File (“DMF”) made available by
the US Department of Commerce National Technical Information Service and subject to regulations found at 15 CFR Part 1110. Subscriber shall comply with all applicable laws including, with respect to DMF data, 15 CFR Part 1110. Recipients of DMF data
that fail to comply with 15 CFR Part 1110 may be subject to, among other things, penalties under 15 CFR 1110.200 of $1,000 for each disclosure or use, up to a maximum of $250,000 in penalties per calendar year. 

 

	5.6	 Fees and Payments. Subscriber agrees to pay the fees and charges for Services provided to Subscriber
under this Agreement. Such pricing is hereby incorporated into this Agreement by reference. Any periodic and/or minimum Subscriber fees under this Agreement are non-refundable, in whole or in part, in the
event of a termination of this Agreement. TransUnion reserves the right to change the fees and charges from time to time, but no change in such charges shall become effective as to the Subscriber earlier than thirty (30) days after written
notice thereof shall have been given by TransUnion to Subscriber. Subscriber shall also pay all the cost of all media, media shipping, and insurance costs, taxes, duties and/or other charges of any kind imposed by any federal, state, or local
governmental entity for the Services, Services Information, or both, provided under this Agreement. However, Subscriber shall not be responsible for taxes imposed upon TransUnion by any federal, state or local authority against the gross income of
TransUnion. 


  

	5.6.1	 In addition, in the event that TransUnion’s cost of rendering Services increases as a result of federal,
state or local laws, ordinances or other regulatory, administrative or governmental acts, then TransUnion may implement a surcharge subject to the following: (i) any surcharge will be applicable generally to TransUnion’s customers;
(ii) TransUnion will provide sixty (60) days prior written notice to Subscriber prior to implementing any new surcharge; and, (iii) any surcharge will be applied only to products and services pertaining to consumers in the geographic
area affected by the law, ordinance or other regulatory, administrative or governmental ordinance or other regulatory, administrative or governmental act. A legislative surcharge is imposed on certain types of reports pertaining to consumers
residing in the United States, and an additional surcharge is imposed on certain reports pertaining to only Colorado residents. 


  

	5.6.2	 TransUnion shall provide invoices to Subscriber and Subscriber shall pay such invoices within thirty
(30) days of the invoice date. Without limiting any of TransUnion’s remedies for non-payment or late payment of invoices, invoices which are not paid within sixty (60) days of the invoice date
shall be subject to a late charge of one and one-half percent (1.5%) per month (18% per year) or the maximum allowed by law, whichever is less. If collection efforts are required, Subscriber shall pay all
costs of collection, including reasonable attorneys’ fees. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 8 of 15















	5.7	 Term, Termination and Survival. The term of this Agreement shall commence upon the Effective Date and
shall remain in effect until terminated by any party hereto for any reason whatsoever by providing thirty (30) days prior written notification to the other party. Moreover, without limiting any other remedies to which either party may be
entitled, if a party, in good faith, determines that the other party has materially breached any of its obligations under this Agreement, such party shall provide written notice to the other party of such determination. The breaching party shall
have thirty (30) days to cure any alleged breach, provided that such breach is curable. If the breaching party fails to cure within thirty (30) days of receiving such written notice or if such breach is not curable, the non-breaching party shall have the right to immediately suspend its performance, in whole or in part, under this Agreement, immediately terminate this Agreement, or both. 



 

	5.7.1	 The foregoing notwithstanding, TransUnion reserves the right, at TransUnion’s sole option, to immediately
suspend its performance, in whole or in part, under this Agreement, or immediately terminate this Agreement, if TransUnion, in good faith and in its sole discretion, determines that: (i) the requirements of any law, regulations and/or judicial
action have not been met; (ii) as a result of any new, or changes in existing, laws, regulations, and/or judicial actions, that the requirements of any law, regulation and/or judicial action will not be met; (iii) the use of the Services
is the subject of litigation or threatened litigation by any governmental agency; (iv) any product, process, or both, including, without limitation, any software, information, data, or other material, as well as any intellectual property rights
embodied by any or all of the foregoing (whether licensed to, owned by, or otherwise controlled by, TransUnion), and necessary (as reasonably demonstrated by TransUnion) for the provision of the Services to Subscriber is/are enjoined, likely to be
enjoined (in TransUnion’s counsel’s written opinion), or the licenses thereto is/are otherwise terminated by the licensing entity; and/or, (v) any combination of the foregoing. 



 

	5.7.2	 With the exception of TransUnion’s obligation, if any, to provide Services under this Agreement, all
provisions of this Agreement shall survive any such termination of this Agreement including, but not limited to, all restrictions on Subscriber’s use of Services Information. Moreover, any such termination shall not relieve Subscriber of any
fees or other payments due to TransUnion through the date of any such termination nor affect any rights, duties or obligations of either party that accrue prior to the effective date of any such termination. 



 

	5.8	 Warranty. 


  

	5.8.1	 TransUnion Limited Warranty. TransUnion represents and warrants that the Services will be provided in a
professional and workmanlike manner consistent with industry standards. In the event of any breach of this warranty, TransUnion shall exercise commercially reasonable efforts to re-perform the applicable
Services which are not in compliance with the above warranty, provided that: (i) TransUnion receives written notice of such breach within ten (10) days after performance of the applicable Services; and (ii) the Services are able to be
re-performed. TransUnion, in the event it cannot re-perform such Services, shall refund the fees paid by Subscriber for the applicable Services which are not in
compliance with the above warranty. SUBSCRIBER ACKNOWLEDGES AND AGREES THAT TRANSUNION’S SOLE AND EXCLUSIVE OBLIGATION, AND SUBSCRIBER’S SOLE AND EXCLUSIVE REMEDY, IN THE EVENT OF ANY BREACH OF THE FOREGOING
WARRANTY IS AS SET FORTH IN THIS PARAGRAPH. TRANSUNION DOES NOT WARRANT THE SERVICES TO BE UNINTERRUPTED OR ERROR-FREE OR THAT THE SERVICES WILL MEET SUBSCRIBER’S REQUIREMENTS. THE WARRANTY SET FORTH IN THIS SECTION 5.8.1 IS IN
LIEU OF ALL OTHER WARRANTIES, WHETHER STATUTORY, EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, WARRANTIES THAT MIGHT BE IMPLIED FROM A COURSE OF PERFORMANCE OR DEALING OR TRADE USAGE OR WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE. NO REPRESENTATIVE OF TRANSUNION IS AUTHORIZED TO GIVE ANY ADDITIONAL WARRANTY. 


  

	5.8.2	 Subscriber represents and warrants that: (i) it has the authority to enter into and perform under this
Agreement; (ii) it has the right to give to TransUnion the rights set forth in this Agreement; and, (iii) it has the right to provide any and all information including, but not limited to, data obtained from third parties, to TransUnion,
and to allow TransUnion to provide the same to TransUnion’s subcontractors, for use in performance of the Services. 


  

	5.9	 Indemnification for Intellectual Property Infringement. TransUnion, subject to the limitations of
liability contained herein, will defend and indemnify Subscriber against a third party claim that any TransUnion-owned Services infringe a United States patent, copyright, trademark, trade secret or other United States intellectual property rights
of a third party, provided that: (i) Subscriber gives TransUnion prompt written notice of any such claim of which it has knowledge; (ii) TransUnion is given full control over the defense of such claim and all related settlement
negotiations; and, (iii) Subscriber provides TransUnion with the assistance, information and authority necessary to perform TransUnion’s obligations under this paragraph. Reasonable out-of-pocket expenses incurred by Subscriber in providing such assistance will be reimbursed by TransUnion. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 9 of 15














 If any such claim of infringement has occurred or in TransUnion’s opinion is likely to
occur, then TransUnion may, at its option and expense: (i) use commercially reasonable efforts to procure for Subscriber the right to use the infringing Services; (ii) replace or modify the infringing portion of the Services so that it is
no longer subject to any infringement claim, or, (iii) if the foregoing, in TransUnion’s reasonable determination, is not practicable, TransUnion shall so notify Subscriber of such determination and Subscriber shall have the right to
immediately terminate this Agreement. TransUnion shall have no obligation under this Section to indemnify or defend Subscriber against a lawsuit or claim of infringement to the extent any such claim or lawsuit results from: (i) other material
which is combined with or incorporated into the Services; (ii) any substantial changes or alterations to the information provided as part of the Services by Subscriber; (iii) any misuse or unauthorized use of the Services which, but for
Subscriber’s misuse or unauthorized use of the Services, such claim would not have occurred; or, (iv) required compliance by TransUnion with design documentation or specifications originating with, specified by or furnished by or on behalf
of Subscriber. THE FOREGOING PROVISIONS STATE THE ENTIRE LIABILITY OF TRANSUNION AND THE SOLE AND EXCLUSIVE REMEDY OF SUBSCRIBER WITH RESPECT TO ANY PROCEEDINGS, CLAIMS, DEMANDS, LOSS, DAMAGE OR EXPENSES INCURRED BY SUBSCRIBER RELATING TO THE
INFRINGEMENT OF THIRD PARTY INTELLECTUAL PROPERTY RIGHTS RESULTING FROM THE SERVICES AND THIS AGREEMENT. 
  

	5.10	 Limitation of Liability. TRANSUNION’S SOLE LIABILITY, AND SUBSCRIBER’S SOLE REMEDY,
FOR BREACHES OF THIS AGREEMENT BY TRANSUNION ARISING FROM TRANSUNION’S NEGLIGENCE SHALL BE THE CORRECTION OF ANY DEFECTIVE SERVICE OR THE REFUND OF FEES PAID FOR SAME. SUBSCRIBER’S SOLE LIABILITY, AND TRANSUNION’S SOLE REMEDY, FOR
BREACHES OF THIS AGREEMENT BY SUBSCRIBER ARISING FROM SUBSCRIBER’S NEGLIGENCE SHALL BE CAPPED AT THE FEES BILLED UNDER THIS AGREEMENT FOR THE SERVICES GIVING RISE TO THE CLAIM. FOR ALL OTHER CLAIMS BY EITHER PARTY AGAINST THE OTHER ARISING OUT
OF SUCH OTHER PARTY’S BREACH OF THIS AGREEMENT, THE CULPABLE PARTY’S AGGREGATE TOTAL LIABILITY SHALL BE CAPPED AT SIX (6) TIMES THE AVERAGE MONTHLY REVENUE BILLED UNDER THIS AGREEMENT PRIOR TO THE CLAIM(S)
ARISING.  


  

	5.10.1	 IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY CONSEQUENTIAL, INCIDENTAL, INDIRECT, SPECIAL, OR PUNITIVE
DAMAGES INCURRED BY THE OTHER PARTY AND ARISING OUT OF THE PERFORMANCE OF THIS AGREEMENT, INCLUDING BUT NOT LIMITED TO LOSS OF GOOD WILL AND LOST PROFITS OR REVENUE, WHETHER OR NOT SUCH LOSS OR DAMAGE IS BASED IN CONTRACT, WARRANTY, TORT,
NEGLIGENCE, STRICT LIABILITY, INDEMNITY, OR OTHERWISE, EVEN IF A PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THESE LIMITATIONS SHALL APPLY NOTWITHSTANDING ANY FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY.



  

	5.10.2	 ADDITIONALLY, NEITHER PARTY SHALL BE LIABLE TO THE OTHER FOR ANY AND ALL CLAIMS ARISING OUT OF OR IN
CONNECTION WITH THIS AGREEMENT BROUGHT MORE THAN TWO (2) YEARS AFTER THE CAUSE OF ACTION HAS ACCRUED.  


  

	5.11	 Assignment and Subcontracting. Neither party may assign or otherwise transfer this Agreement, in whole
or in part, without the prior written consent of the other, and such consent shall not be unreasonably withheld. Notwithstanding the foregoing, TransUnion may assign or transfer this Agreement to a wholly-owned subsidiary, in the event of a purchase
of substantially all of TransUnion’s assets, or in the event of a corporate form reorganization (e.g., LLC to C-Corporation), and Subscriber may assign or transfer its rights and/or obligations under this
Agreement to any Affiliate of Subscriber identified on Exhibit A attached hereto. Moreover, TransUnion shall have the unrestricted right to subcontract the Services to be provided to Subscriber by TransUnion under this Agreement; provided however,
that such subcontracting shall not relieve TransUnion of its obligations under this Agreement. The limited warranty and limitation of liability provisions set forth in this Agreement shall also apply for the benefit of TransUnion’s licensors,
subcontractors and agents. 


  

	5.12	 Security. Subscriber represents and warrants that: (i) all TransUnion-supplied identification codes
(each a “User ID”) and associated passwords (each a “Password”) shall be kept confidential and secure (e.g., Subscriber shall ensure that Passwords are not stored on any desktop and/or portable workstation/terminal nor other
storage and retrieval system and/or media, that Internet browser caching functionality is not used to store Passwords and that appropriate firewalls or other electronic barriers are in place); and, (ii) each User ID and Password shall be used
solely by individuals Subscriber has authorized to use such User IDs and Passwords. In the event of any unauthorized use, misappropriation or other compromise of User IDs and/or Passwords, Subscriber shall promptly (but in no event later than
forty-eight (48) hours after the occurrence of any of the foregoing) notify TransUnion by phone and in writing. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 10 of 15














 Subscriber shall fully cooperate with TransUnion in mitigating any damages due to any
misappropriation or unauthorized use or disclosure of any non-public personal information (including, but not limited to, Personal Information and other consumer credit information). Such cooperation shall
include, but not necessarily be limited to, allowing TransUnion to participate in the investigation of the cause and extent of such misappropriation and/or unauthorized use or disclosure. Such cooperation shall not relieve Subscriber of any
liability it may have as a result of such a misappropriation and/or unauthorized use or disclosure. Subscriber agrees, that to the extent any such unauthorized use, unauthorized disclosure, misappropriation, or other event is due to
Subscriber’s (including, without limitation, its employee’s, agent’s or contractor’s) negligence, intentional wrongful conduct, or breach of this Agreement, Subscriber shall be responsible for any required consumer, public and/or
other notifications, and all costs associated therewith; provided however, that other than except to the extent required to comply with applicable law, Subscriber shall make no public notification, including but not limited to press releases or
consumer notifications, of the potential or actual occurrence of such misappropriation and/or unauthorized disclosure without TransUnion’s prior written consent, and, with respect to any such notifications required by law, Subscriber shall not
use any TransUnion trade name, trademark, service mark, logo, in any such notifications without the prior written approval of TransUnion. 
  

	5.13	 In the event Subscriber will utilize a third party intermediary (e.g., application service provider, Internet
service provider or other network provider) for the purpose of transmitting requests for, receiving, archiving, storing, hosting, or otherwise performing processing of any kind related to, Services and/or Services Information, Subscriber shall
ensure it has first entered into an agreement with such third party prohibiting such third party’s use of, and access to, the Services and Services Information for any purpose other than to the extent necessary to provide such application or
network services to Subscriber. Subscriber shall be solely liable for any of its, such third parties, or other Subscriber agent’s or contractor’s, actions or omissions, including, but not limited to, any misappropriation or other
compromise of User ID’s and/or Passwords, any misappropriation and/or unauthorized disclosure of Services Information (including, but not limited to, consumer credit information), any security breaches, or any misuse of the Services Information
in violation of this Agreement or applicable law. Furthermore, Subscriber understands and agrees that its third party intermediaries, agents and/or contractors shall not be entitled as a third party beneficiary or otherwise, to take any action or
have any recourse against TransUnion in respect of any claim based upon any actual or alleged failure to perform under this Agreement. 


  

	5.14	 No Waiver. No failure or successive failures on the part of either party, or its respective successors
or permitted assigns, to enforce any covenant or agreement, and no waiver or successive waivers on the part of either party, or its respective successors or permitted assigns, of any condition of this Agreement, shall operate as a discharge of such
covenant, agreement, or condition, or render the same invalid, or impair the right of either party, its respective successors or permitted assigns, to enforce the same in the event of any subsequent breach or breaches by the other party, its
successors or permitted assigns. 


  

	5.15	 Independent Contractors. This Agreement is not intended to create or evidence any employer-employee
arrangement, agency, partnership, joint venture, or similar relationship of any kind whatsoever between TransUnion and Subscriber. Moreover, no party shall, by virtue of this Agreement, have any right or power to create any obligation, express or
implied, on behalf of any other party. 


  

	5.16	 Construction and Severability. All references in this Agreement to the singular shall include the plural
where applicable. Titles and headings to sections or paragraphs in this Agreement are inserted for convenience of reference only and are not intended to affect the interpretation or construction of this Agreement. If any term or provision of this
Agreement is held by a court of competent jurisdiction be invalid, void, or unenforceable, the remainder of the provisions shall remain in full force and effect and shall in no way be affected, impaired or invalidated. 



 

	5.17	 Force Majeure. Neither party shall be liable to the other for failure to perform or delay in performance
under this Agreement if, and to the extent, such failure or delay is caused by conditions beyond its reasonable control and which, by the exercise of reasonable diligence, the delayed party is unable to prevent or provide against. Such conditions
include, but are not limited to, acts of God; strikes, boycotts or other concerted acts of workers; failure of utilities; laws, regulations or other orders of public authorities; military action, state of war, acts of terrorism, or other national
emergency; fire or flood. The party affected by any such force majeure event or occurrence shall give the other party written notice of said event or occurrence within five (5) business days of such event or occurrence. 



 

	5.18	 Audit Rights. During the term of this Agreement and for a period of three (3) years thereafter,
TransUnion may, upon reasonable notice and during normal business hours, audit Subscriber’s policies, procedures and records which pertain to this Agreement to ensure compliance with this Agreement. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 11 of 15















	5.19	 No Presumption against Drafter. Each of the parties has jointly participated in the negotiation and
drafting of this Agreement. In the event of any ambiguity or a question of intent or interpretation arises, this Agreement shall be construed as if drafted jointly by each of the parties and no presumptions or burdens of proof shall arise favoring
any party by virtue of the authorship of any of the provisions of this Agreement. 


  

	5.20	 Governing Law. This Agreement shall be governed by and construed in accordance with the laws of the
State of Illinois regardless of the laws that might otherwise govern under applicable Illinois principles of conflicts of law. 


  

	5.21	 Trademarks. Both Subscriber and TransUnion shall submit to the other party for written approval, prior
to use, distribution, or disclosure, any material including, but not limited to, all advertising, promotion, or publicity in which any trade name, trademark, service mark, and/or logo (hereinafter collectively referred to as the “Marks”)
of the other party are used (the “Materials”). Such party, from whom approval is being requested, shall not unreasonably withhold its approval. Both parties shall have the right to require, at each party’s respective discretion and as
communicated in writing, the correction or deletion of any misleading, false, or objectionable material from any Materials. Moreover, when using the other party’s Marks pursuant to this Agreement, a party shall take all reasonable measures
required to protect the other party’s rights in such Marks, including, but not limited to, the inclusion of a prominent legend identifying such Marks as the property of the other party. In using each other’s Marks pursuant to this
Agreement, each party acknowledges and agrees that: (i) the other party’s Marks are and shall remain the sole properties of the other party; (ii) nothing in this Agreement shall confer in a party any right of ownership in the other
party’s Marks; and, (iii) neither party shall contest the validity of the other party’s Marks. Notwithstanding anything in this Agreement to the contrary, TransUnion shall have the right to disclose to third parties Subscriber’s
marks to the extent they appear in consumer credit reports containing Subscriber’s account information and/or inquiries without the prior written approval of Subscriber. 



 

	5.22	 CFPB Notices. By signing this Agreement, Subscriber acknowledges receipt of a copy of the Consumer
Financial Protection Bureau’s “Notice to Users of Consumer Reports: Obligations of Users Under the FCRA” and a copy of the Consumer Financial Protection Bureau’s “Notices to Furnishers of Information: Obligations of
Furnishers Under the FCRA”. Any future updates to the forgoing notices will be accessible by Subscriber on TransUnion’s website. 


  

	5.23	 Entire Agreement. THIS AGREEMENT INCLUDING, WITHOUT LIMITATION, ALL EXHIBITS AND
ATTACHMENTS HERETO, CONSTITUTES THE ENTIRE AGREEMENT BETWEEN TRANSUNION AND SUBSCRIBER AND SUPERSEDES ALL PREVIOUS AGREEMENTS AND UNDERSTANDINGS, WHETHER ORAL OR WRITTEN, EXPRESS OR IMPLIED, SOLELY WITH RESPECT TO THE SUBJECT MATTER OF THIS
AGREEMENT. THIS AGREEMENT MAY NOT BE ALTERED, AMENDED, OR MODIFIED EXCEPT BY WRITTEN INSTRUMENT SIGNED BY THE DULY AUTHORIZED REPRESENTATIVES OF BOTH PARTIES. THIS AGREEMENT SHALL NOT BE BINDING ON EITHER PARTY UNTIL SIGNED BY TRANSUNION. THE
INDIVIDUAL EXECUTING THIS AGREEMENT ON BEHALF OF SUBSCRIBER HAS DIRECT KNOWLEDGE OF ALL FACTS CERTIFIED AND THE AUTHORITY TO BIND SUBSCRIBER TO THE TERMS OF THIS AGREEMENT.  



IN WITNESS WHEREOF, the parties, intending to be legally bound, have caused this Agreement to be executed by their duly authorized representatives as
of the Effective Date. The parties hereto agree that a facsimile or other electronic transmission of an unmodified image (e.g., transmission in a portable document format “pdf”) of this fully executed Agreement shall constitute an original
and legally binding document. 
  

									
	TRANS UNION LLC	  	                                    	  		  	 Upstart Network, Inc.

		  		  		  		  	Subscriber Name
					
	By:	  	 /s/ Peter Turek
	  		  	By:	  	 /s/ Dave Girouard

		  	TransUnion Representative	  		  		  	Subscriber Representative
					
		  	 Peter
Turek                     SVP
	  		  		  	 Dave Girouard
                        CEO

		  	Name and Title of Signer (please print)	  		  		  	Name and Title of Signer (please print)
					
		  	 11/25/2020
	  		  		  	 11/25/2020

		  	Date Signed	  		  		  	Date Signed
		  		  		  		  	  

		  		  		  		  	Subscriber Code Number Assigned


  

			
	TransUnion Confidential Information (March 2015)	  	Page 12 of 15














 EXHIBIT A 

AFFILIATES 
 Affiliates means, with
respect to Subscriber, any entity at any time controlling, controlled by or under common control with such Subscriber, where such control means: (i) for corporate entities, direct ownership of 51% or more of the stock or shares entitled to vote
for the election of the board of directors or other governing body of the entity; and, (ii) for non-corporate entities, direct ownership of 51% or more of the equity interest. Subscriber has such
Affiliates, as listed on this Exhibit A, which Affiliates are authorized by Subscriber to access TransUnion consumer credit reports and/or ancillary services under Subscriber’s code(s), pursuant to the terms and conditions of the Master
Agreement. Subscriber shall notify TransUnion in writing of any additions to or deletions from this Exhibit A. Subscriber represents and warrants that it has the authority to enter into this Agreement on behalf of its Affiliates. Moreover,
Subscriber represents and warrants that it shall insure that it has appropriate legal authority from each such Affiliate that binds each such Affiliate to the provisions of this Agreement, including, without limitation, all attachments hereto, as if
each such Affiliate were a signatory to this Agreement. Subscriber certifies that all Affiliates participating under the Master Agreement shall be instructed as to their obligations under the Master Agreement, including but not limited to the
certification of permissible purpose contained therein, if applicable. Therefore, Subscriber and each Affiliate shall be jointly and severally liable under the terms of this Agreement. 

In the event Subscriber, or subsequently any Affiliate, assigns this Agreement to an Affiliate, then upon any and each such assignment, such assignee
Affiliate hereby represents and warrants that it has the authority to assume all rights and obligations under this Agreement on behalf of itself and all other Affiliates listed below and that such assignee Affiliate further represents and warrants
that it shall insure that it has appropriate legal authority from each of its Affiliates listed below that binds each such Affiliate to the provisions of this Agreement, including, without limitation, all attachments hereto, as if each such
Affiliate were a signatory to this Agreement. Subscriber (or any such Affiliate, as applicable) shall promptly notify TransUnion in writing of any and each such assignment. 
  

					
	Date:
                                         
                                   	  	                            	  	
	Subscriber
Name:                                        
                	  		  	
	Subscriber
Code:                                        
                 	  		  	

  

			
	 Affiliate Name
	  	 Physical Address, City, State and Zip
Code



  

			
	TransUnion Confidential Information (March 2015)	  	Page 13 of 15














 EXHIBIT B 

FAIR ISAAC SCORES 
 This Exhibit for
Fair Isaac Scores is entered into pursuant to the terms of that certain TransUnion Master Agreement for Consumer Reporting and Ancillary Services entered between TransUnion and Subscriber. In the event of a conflict between this Exhibit and the
Agreement, the terms of this Exhibit shall govern solely with respect to FICO Scores. 
 1. This Exhibit governs the use by Subscriber of credit risk scores
or insurance risk scores of Fair Isaac Corporation (“Fair Isaac”) (“FICO Scores”) Subscriber receives from TransUnion. From time to time, Subscriber may request that TransUnion provide FICO Scores (other than
Archive Scores, as defined below), and TransUnion agrees to perform such processing as reasonably practicable, for each one of the following purposes requested: (a) in connection with the review of an
on-line consumer report it is obtaining from TransUnion; (b) for the review of the portion of its own open accounts and/or closed accounts with balances owing that it designates; (c) as a potential
investor or servicer, or current insurer, in connection with a valuation of, or an assessment of the credit or prepayment risks associated with, an existing credit obligation; (d) for use as a selection criteria to deliver a list of names to
Subscriber, or Subscriber’s designated third party processor agent, for transactions not initiated by the consumer for the extension of a firm offer of credit or insurance; or (e) [with respect to the insurance risk scores only], for use in
connection with the underwriting of insurance involving the consumer. Subscriber shall use each such FICO Score only once and, with respect to FICO Scores other than Archive Scores, only in accordance with the permissible purpose under the FCRA for
which Subscriber obtained the FICO Scores. 
 2. Subscriber may also request that TransUnion provide FICO Scores that utilize archived, depersonalized,
consumer report information (“Archive Scores”) and TransUnion agrees to perform such processing as reasonably practicable. Subscriber shall use the Archive Scores solely to determine the validity of the FICO Scores for the benefit
of Subscriber for the single project for which the Archive Scores were acquired, but for no other purpose and for no other entity. Determining validity of the FICO Scores consists solely of: (a) internal validation on Subscriber’s own
account performance data; (b) internal evaluation of the predictive strength of the FICO Scores as compared to other scores, (c) internal evaluation of the value of the FICO Scores as an internal component of custom models; and/or
(d) establishing score cut-offs and strategies, as they relate to Subscriber’s portfolios. Subscriber shall not make any attempt to link the Archive Scores to any information which identifies the
individual consumers. 
 3. Subscriber acknowledges that the FICO Scores are proprietary to Fair Isaac and that Fair Isaac retains all intellectual property
rights in the FICO Scores and the Model(s) (defined below) used by TransUnion to generate the FICO Scores. Fair Isaac grants to Subscriber, effective during the term of this Exhibit, a personal, non-exclusive,
non-transferable, limited license to use, internally, the FICO Scores solely for the particular purpose set forth in Section 1 or 2 above for which the FICO Scores were obtained, subject to the
limitations set forth in this Exhibit, including, but not limited to the single use restrictions set forth above. Subscriber’s use of the FICO Scores must comply at all times with applicable federal, state and local law and regulations, and
Subscriber hereby certifies that it will use each FICO Score (other than Archive Scores) only for a permissible purpose under the FCRA. Subscriber shall not attempt to discover, reverse engineer, or similar or emulate the functionality of the FICO
Scores, Models or other proprietary information of Fair Isaac, or use the FICO Scores in any manner not permitted under this Exhibit, including, without limitation, for resale to third parties, model development, model validation (except as
expressly set forth above in Paragraph 2 of this Exhibit), model benchmarking, model calibration or any other purpose that may result in the replacement of or discontinued use of the FICO Scores. “Model” means Fair Isaac’s
proprietary scoring algorithm(s) embodied in its proprietary scoring software delivered to and operated by TransUnion. 
 4. Subscriber shall not disclose
the FICO Scores nor the results of any validations or other reports derived from the FICO Scores to any third party (other than a consumer as expressly provided for below in this Section 4) unless: (a) such disclosure is clearly required
by law; (b) Fair Isaac provides written consent in advance of such disclosure; and/or (c) such third party Subscriber’s designated third party processor agent aforementioned above in Section 1; provided however that in either
(i.e., (b) or (c) above) event, Subscriber may make such disclosure (or in the event of (c), direct TransUnion to deliver such lists) only after Subscriber has entered into an agreement with the third party that (i) limits use of the FICO
Scores to only the use permitted to Subscriber hereunder; (ii) obligates the third party provider to otherwise comply with the terms of this Exhibit; and (iii) names Fair Isaac as an intended third party beneficiary of such agreement.
Subscriber shall not disclose a FICO Score to the consumer to which it pertains unless such disclosure is required by law or is in connection with an adverse action (as defined by the FCRA) and then only when accompanied by the corresponding reason
codes. For the avoidance of doubt, Subscriber is expressly prohibited from disclosing FICO Scores to consumers for any other purpose whatsoever, including, without limitation, in conjunction with any FICO Open Access program or any “scores on
statements” type program. 

  

			
	TransUnion Confidential Information (March 2015)	  	Page 14 of 15














 5. Subject to conditions which follow, Fair Isaac warrants that, as delivered to TransUnion, the Models used
to produce the FICO Scores delivered hereunder are empirically derived and demonstrably and statistically sound. These warranties are conditioned on: (a) Subscriber’s use of each FICO Score for the purposes for which the respective Model
was designed, as applied to the United States population used to develop the scoring algorithm, (b) Subscriber’s compliance with all applicable federal, state and local laws pertaining to use of the FICO Scores, including Subscriber’s duty
(if any) to validate or revalidate the use of credit scoring systems under the Equal Credit Opportunity Act and its implementing Regulation B (“Reg. B”) and (c) Subscriber’s use of the FICO Scores otherwise remaining in
compliance with the terms of this Exhibit. Fair Isaac also warrants that the credit scoring algorithm does not consider any “prohibited basis” as defined or restricted by Reg. B. FOR ANY BREACH OF THIS WARRANTY, SUBSCRIBER’S SOLE AND
EXCLUSIVE REMEDY, AND FAIR ISAAC’S AND TRANSUNION’S ENTIRE LIABILITY, SHALL BE RECALCULATION OF THE FICO SCORES THAT FORMED THE BASIS OF SUCH BREACH. FAIR ISAAC AND TRANSUNION HEREBY DISCLAIM ALL OTHER WARRANTIES, WHETHER STATUTORY,
EXPRESS OR IMPLIED INCLUDING, WITHOUT LIMITATION, IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND OTHER WARRANTIES THAT MIGHT BE IMPLIED FROM A COURSE OF PERFORMANCE OR DEALING OR TRADE USAGE. 

6. IN NO EVENT SHALL SUBSCRIBER, TRANSUNION OR FAIR ISAAC BE LIABLE FOR ANY CONSEQUENTIAL, INCIDENTAL, INDIRECT, SPECIAL, OR PUNITIVE DAMAGES INCURRED BY ANY
PARTY AND ARISING OUT OF THE PERFORMANCE OF THIS EXHIBIT, INCLUDING BUT NOT LIMITED TO LOSS OF GOOD WILL AND LOST PROFITS OR REVENUE, WHETHER OR NOT SUCH LOSS OR DAMAGE IS BASED IN CONTRACT, WARRANTY, TORT, NEGLIGENCE, STRICT LIABILITY, INDEMNITY,
OR OTHERWISE, EVEN IF A PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND EVEN IF SUCH DAMAGES WERE REASONABLY FORESEEABLE. THESE LIMITATIONS SHALL APPLY NOTWITHSTANDING ANY FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY. THE
FOREGOING LIMITATIONS SHALL NOT APPLY TO FAIR ISAAC’S OR TRANSUNION’S VIOLATION OF SUBSCRIBER’S INTELLECTUAL PROPERTY RIGHTS NOR SUBSCRIBER’S VIOLATION OF TRANSUNION’S OR FAIR ISAAC’S INTELLECTUAL PROPERTY RIGHTS
(INCLUDING THE USE OR DISCLOSURE OF FICO SCORES IN VIOLATION OF THE TERMS OF THIS EXHIBIT). ADDITIONALLY, NEITHER TRANSUNION NOR FAIR ISAAC SHALL BE LIABLE FOR ANY CLAIM ARISING OUT OF OR IN CONNECTION WITH THIS EXHIBIT BROUGHT MORE THAN ONE
(1) YEAR AFTER THE CAUSE OF ACTION HAS ACCRUED. IN NO EVENT SHALL TRANSUNION’S AND FAIR ISAAC’S COMBINED AGGREGATE TOTAL LIABILITY UNDER THIS EXHIBIT EXCEED THE AMOUNTS PAID UNDER THIS EXHIBIT DURING THE PRECEDING TWELVE
(12) MONTHS FOR THE FICO SCORES THAT ARE THE SUBJECT OF THE CLAIM(S) OR [***] DOLLARS ($[***]), WHICHEVER AMOUNT IS LESS. 
 7. Upon prior written
notice, Fair Isaac shall have the right to audit Subscriber to verify Subscriber’s compliance with this Exhibit. Subscriber shall accommodate Fair Isaac in connection with such audit. Such accommodation shall include, but not be limited to on-site inspect of Subscriber’s records, systems and such documentation as deemed reasonably necessary to demonstrate compliance with this Exhibit. TransUnion and Subscriber acknowledge and agree that Fair
Isaac is a third party beneficiary hereunder with respect to the Models, FICO Scores, and other Fair Isaac intellectual property and with fully enforceable rights. Subscriber further acknowledges and agrees that Fair Isaac’s rights with respect
to the Models, FICO Scores, other Fair Isaac intellectual property, and all works derived therefrom are unconditional rights that shall survive the termination for any reason. 

8. This Exhibit constitutes the entire agreement among the parties hereto and supersedes all prior agreements, whether oral or written, express or implied,
with respect to the FICO Scores. This Exhibit may not be amended except by written instrument signed by the duly authorized representatives of all parties. 
  

			
		 	Acknowledged:
		
		 	 Upstart Network, Inc.

		 	Subscriber Name
		
	By:	 	 /s/ Dave Girouard

		 	Subscriber Representative
		
		 	 Dave Girouard
                    CEO

		 	Name and Title of Signer (please print)
		
		 	 11/25/2020

		 	Date Signed

  

	***	 Certain information, as identified by [***], has been excluded from this agreement because it is both
(i) not material and (ii) would be competitively harmful if publicly disclosed. 



  

			
	TransUnion Confidential Information (March 2015)	  	Page 15 of 15














 PRICING ADDENDUM 

This Pricing Addendum (the “Pricing Addendum”), is entered into on _11/25/2020_ and is effective January 1, 2021 (the “Effective
Date”), by and between Trans Union LLC (“TransUnion”) and Upstart Network Inc. (“Subscriber”), and is intended to establish the pricing for Services provided to Subscriber by TransUnion pursuant to the Master Agreement for
Consumer Reporting and Ancillary Services entered between the parties and effective March 20, 2015 (the “Agreement”). 
  

	1.	 Subject to the terms and conditions of the Agreement, the following is the current pricing*:



 A. Batch Prescreen Services Pricing 

[***] 

  
 Trans Union Confidential Information

  

	***	 Certain information, as identified by [***], has been excluded from this agreement because it is both (i) not
material and (ii) would be competitively harmful if publicly disclosed. 















 B. Online Credit Report Services 

[***] 
  

					
	Trans Union LLC	 		  	Upstart Network Inc.
			
	By: /s/ Peter Turek                                	 		  	By: /s/ Dave Girouard                            
	Print Name: Peter L. Turek	 		  	Print Name: Dave Girouard
			
	Title:
SVP                                        
     	 		  	Title: CEO
                                         
     
	          11/25/2020	 		  	          11/25/2020


  
 Trans Union Confidential Information

 *** Certain information, as identified by [***], has been excluded from this agreement because it is both (i) not material and (ii) would be
competitively harmful if publicly disclosed.