ALPHA STUDIO CO., LTD. CONTRACT PLAYBOOK — INTERNAL STANDARD Version 4.2 | Owner: Legal & Commercial | Effective 1 August 2026 | Review: annually PURPOSE This playbook sets the minimum position that Alpha Studio accepts when reviewing client contracts, statements of work and data processing terms. It is an internal management standard. It does not create rights for any client, does not vary any signed agreement, and is not enforceable by a client against Alpha Studio. HOW TO USE For every inbound contract, SOW, change order or client markup, compare each clause to the rules below and record the result as GREEN (acceptable), AMBER (negotiate) or RED (do not sign without Managing Director approval). A single RED item blocks signature. RULE 1 — INTELLECTUAL PROPERTY AND PAYMENT Red line: Alpha Studio never assigns or transfers ownership of foreground IP before all fees for the relevant SOW have been received in cleared funds. Before final payment the client receives a limited evaluation licence only. Never accept: "IP vests on creation", "work made for hire", "all rights transfer on delivery", or any wording that separates ownership from payment. Escalate to: Managing Director. No exceptions. RULE 2 — LIMITATION OF LIABILITY Red line: aggregate liability is capped at 100% of the fees paid under the relevant SOW in the twelve months before the claim. Indirect and consequential loss, loss of profit and loss of revenue are excluded in both directions. Never accept: a cap above 100%, an uncapped indemnity, or a clause that disapplies the exclusion of indirect loss. Escalate to: Managing Director for any cap above 100%; Finance Director for any cap below 50%. RULE 3 — CHANGE CONTROL Red line: no work outside an executed SOW is performed before a change order is signed by both parties. Verbal instructions, "proceed" emails, WhatsApp messages and assurances given on calls are not authority to start work. Action: respond in writing within two business days, restate the scope boundary, and issue a draft change order with price and timeline impact. RULE 4 — CLIENT PAPER Red line: Alpha Studio does not sign a client-drafted SOW, MSA or DPA without legal review, and does not sign any document that departs from Rules 1, 2, 3 or 7 without Managing Director approval. Client markups are treated as proposals, not as agreed terms, until a full clause-by-clause comparison against our template has been completed. RULE 5 — DATA PROTECTION AND BREACH NOTIFICATION Red line: any suspected personal data breach is escalated internally to the Managing Director and the DPO within four (4) hours of discovery. The client is notified within twenty-four (24) hours of discovery, using the breach notification template, and in any event within any shorter period required by the applicable contract. Note: our internal 24-hour standard is deliberately shorter than the 72-hour period that appears in most client DPAs. The shorter period is a management standard and is not a contractual commitment unless the contract says so. RULE 6 — MISSING OR UNATTACHED DOCUMENTS Red line: Alpha Studio never signs a document that refers to an appendix, annex, schedule, exhibit or policy that is not attached to the signature copy. Every referenced document must be identified by title, version and date, and must be physically attached. Action: request the missing document in writing and suspend signature until it is provided and reviewed. RULE 7 — TERM, TERMINATION AND EXIT Red line: termination for convenience requires at least sixty (60) days' written notice by either party. On termination the client pays for work performed, costs irrevocably committed and a demobilisation fee of 5% of the remaining contract value. Never accept: termination for convenience on less than 60 days, termination without a demobilisation payment, or a refund of fees for accepted milestones. RULE 8 — GOVERNING LAW AND DISPUTES Red line: Thai law governs, and disputes are heard in the courts of Bangkok or by arbitration seated in Bangkok under THAC rules. Foreign exclusive jurisdiction is not accepted. Escalate to: Managing Director. RECORD KEEPING Every inbound document review produces a completed risk table with clause references and verbatim quotations. Reviews are retained for seven years. A review without clause-level quotations is not a valid review.