DEEVO SYSTEMS & CO. // GLOBAL PHYSICAL JURISDICTION & GOVERNING LAW SCHEDULE

This schedule establishes the designated physical jurisdictions, governing laws, dispute resolution forums, and regulatory authorities for all enterprise contracts, onboarding allocations, and legal interactions with Deevo Systems & Co. across worldwide territories.

1. Asia-Pacific (APAC)

India (Global Engineering Headquarters & Primary Asian Hub)

• Physical Jurisdiction & Legal Venue: Courts of competent jurisdiction in Mumbai, Maharashtra, India

  
  

• Governing Law: Laws of the Republic of India

  
  

• Primary Statutory Framework: Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 (as amended)

  
  

• Arbitration Seat: Mumbai Centre for International Arbitration (MCIA), Mumbai, India (conducted in English under MCIA Arbitration Rules)

  
  

• Regulatory Authority: Data Protection Board of India (DPBI) / CERT-In

  
  

Singapore (Southeast Asia Regional Node)

• Physical Jurisdiction & Legal Venue: Republic of Singapore

  
  

• Governing Law: Laws of Singapore

  
  

• Primary Statutory Framework: Personal Data Protection Act 2012 (PDPA)

  
  

• Arbitration Seat: Singapore International Arbitration Centre (SIAC), Singapore

  
  

• Regulatory Authority: Personal Data Protection Commission (PDPC)

  
  

Japan & East Asia

• Physical Jurisdiction & Legal Venue: Tokyo District Court, Tokyo, Japan

  
  

• Governing Law: Laws of Japan

  
  

• Primary Statutory Framework: Act on the Protection of Personal Information (APPI)

  
  

• Arbitration Seat: Japan Commercial Arbitration Association (JCAA), Tokyo, Japan

  
  

• Regulatory Authority: Personal Information Protection Commission (PPC Japan)

  
  

2. North America (NAM)

United States of America

• Physical Jurisdiction & Legal Venue:

  
  
  

  • Corporate & General Matters: State and Federal Courts situated in New Castle County, Delaware

    
    

  • Operational & Compute Allocation Disputes: State and Federal Courts located in the Northern District of California (San Francisco) or Travis County, Texas (Austin)

    
    

• Governing Law: Laws of the State of Delaware (procedural) and applicable federal laws of the United States

  
  

• Primary Statutory Framework: California Consumer Privacy Act / CPRA, Texas Data Privacy and Security Act (TDPSA), and applicable State Comprehensive Privacy Acts

  
  

• Arbitration Seat: American Arbitration Association (AAA) / International Centre for Dispute Resolution (ICDR), San Francisco, California

  
  

• Regulatory Authority: Federal Trade Commission (FTC) and respective State Attorneys General

  
  

Canada

• Physical Jurisdiction & Legal Venue: Superior Court of Justice, Toronto, Ontario, Canada

  
  

• Governing Law: Laws of the Province of Ontario and the federal laws of Canada

  
  

• Primary Statutory Framework: Personal Information Protection and Electronic Documents Act (PIPEDA)

  
  

• Arbitration Seat: ADR Chambers, Toronto, Ontario

  
  

• Regulatory Authority: Office of the Privacy Commissioner of Canada (OPC)

  
  

3. Europe, United Kingdom & Switzerland (EMEA)

European Union / European Economic Area (EEA)

• Physical Jurisdiction & Legal Venue: Courts of Dublin, Republic of Ireland (alternatively High Court of Frankfurt am Main for specialized German sovereign cloud enclaves)

  
  

• Governing Law: Laws of the Republic of Ireland

  
  

• Primary Statutory Framework: Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and the EU AI Act

  
  

• Arbitration Seat: International Chamber of Commerce (ICC), Paris, France / Dublin, Ireland

  
  

• Regulatory Authority: Data Protection Commission (DPC Ireland) / European Data Protection Board (EDPB)

  
  

United Kingdom (UK)

• Physical Jurisdiction & Legal Venue: High Court of Justice, London, England

  
  

• Governing Law: Laws of England and Wales

  
  

• Primary Statutory Framework: UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018

  
  

• Arbitration Seat: London Court of International Arbitration (LCIA), London, UK

  
  

• Regulatory Authority: Information Commissioner's Office (ICO)

  
  

Switzerland

• Physical Jurisdiction & Legal Venue: Commercial Court of the Canton of Zurich, Switzerland

  
  

• Governing Law: Swiss Substantive Law

  
  

• Primary Statutory Framework: Swiss Federal Act on Data Protection (FADP)

  
  

• Arbitration Seat: Swiss Arbitration Centre (Swiss Rules of International Arbitration), Zurich, Switzerland

  
  

• Regulatory Authority: Federal Data Protection and Information Commissioner (FDPIC)

  
  

4. Middle East & North Africa (MENA)

United Arab Emirates (UAE)

• Physical Jurisdiction & Legal Venue: Courts of the Dubai International Financial Centre (DIFC) or Abu Dhabi Global Market (ADGM)

  
  

• Governing Law: DIFC Common Law or ADGM Enactments (as specified in Master Service Agreement)

  
  

• Primary Statutory Framework: Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and DIFC Data Protection Law No. 5 of 2020

  
  

• Arbitration Seat: Dubai International Arbitration Centre (DIAC), Dubai, UAE

  
  

• Regulatory Authority: UAE Data Office / DIFC Commissioner of Data Protection

  
  

Kingdom of Saudi Arabia (KSA)

• Physical Jurisdiction & Legal Venue: Commercial Courts of Riyadh, Kingdom of Saudi Arabia

  
  

• Governing Law: Laws and Royal Decrees of the Kingdom of Saudi Arabia

  
  

• Primary Statutory Framework: Personal Data Protection Law (PDPL - Royal Decree No. M/19)

  
  

• Arbitration Seat: Saudi Center for Commercial Arbitration (SCCA), Riyadh, KSA

  
  

• Regulatory Authority: Saudi Data and Artificial Intelligence Authority (SDAIA)

  
  

5. Oceania

Australia

• Physical Jurisdiction & Legal Venue: Supreme Court of New South Wales, Sydney, Australia

  
  

• Governing Law: Laws of the State of New South Wales and the Commonwealth of Australia

  
  

• Primary Statutory Framework: Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs)

  
  

• Arbitration Seat: Australian Centre for International Commercial Arbitration (ACICA), Sydney, Australia

  
  

• Regulatory Authority: Office of the Australian Information Commissioner (OAIC)

  
  

New Zealand

• Physical Jurisdiction & Legal Venue: High Court of New Zealand, Auckland Registry

  
  

• Governing Law: Laws of New Zealand

  
  

• Primary Statutory Framework: Privacy Act 2020

  
  

• Arbitration Seat: Arbitrators’ and Mediators’ Institute of New Zealand (AMINZ), Auckland, New Zealand

  
  

• Regulatory Authority: Office of the Privacy Commissioner (OPC NZ)

  
  

6. Latin America (LATAM)

Brazil

• Physical Jurisdiction & Legal Venue: Judicial District of São Paulo, State of São Paulo, Brazil

  
  

• Governing Law: Laws of the Federative Republic of Brazil

  
  

• Primary Statutory Framework: Lei Geral de Proteção de Dados (LGPD - Law No. 13.709/2018)

  
  

• Arbitration Seat: Center for Arbitration and Mediation of the Chamber of Commerce Brazil-Canada (CAM-CCBC), São Paulo, Brazil

  
  

• Regulatory Authority: Autoridade Nacional de Proteção de Dados (ANPD)

  
  

Mexico

• Physical Jurisdiction & Legal Venue: Competent Federal Courts sitting in Mexico City, Mexico

  
  

• Governing Law: Federal Laws of the United Mexican States

  
  

• Primary Statutory Framework: Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)

  
  

• Arbitration Seat: Mexico Arbitration Center (CAM), Mexico City, Mexico

  
  

• Regulatory Authority: Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)

Global Regional Jurisdiction Matrix