"State Street’s supply chains also include a combination of global and regional suppliers to support business needs related to information technology services (including hardware/software, Telecommunications and Audio Visual), goods and services (including office supplies, print services, food services/catering and subscription services), and professional consulting services (including legal, financial, audit and IT consulting). "

pg. 3

"Additionally, prior to any supplier being engaged, we complete an Inherent Risk Questionnaire (“IRQ”). Since 2016, within the IRQ we have asked which countries the supplier will provide their product or service from, and the countries selected are risk rated based on scores provided by the Enterprise Risk Management (ERM) Sovereign Risk team. These risk ratings include ESG risk, which considers civil liberties, including vulnerability to human trafficking risk and government mitigation measures, as a factor. Engagements in high risk countries must be reviewed and approved by the Sovereign Risk team as part of the due diligence process. "