Risk Factors Dashboard

We use a variety of cloud-based third-party service providers in our operations. These systems support our email, document storage, office applications, internal communications, payroll administration, bill payment processing, website hosting, stock transfer and capitalization table management, and online payment processing.

We do not directly collect, process, or store our customers’ personally identifiable information in the ordinary course of our business. To the extent online payment transactions are processed, they are handled by a third-party payment processor, and personal information is not provided to us.

Our cybersecurity practices are designed to protect our systems, accounts, and business information through administrative and technical safeguards for our operations. These measures include:

Because we rely significantly on third-party hosted platforms, we also depend in part on the cybersecurity controls and incident response capabilities of those providers. If a vendor notifies us of a data breach or other cybersecurity event affecting one of our accounts or services, our officers would take responsive measures as appropriate, including restricting or locking down access and following the vendor’s remediation guidance. If any personnel suspect a data breach or other cybersecurity incident, they are required to report the matter to our Chief Operating Officer, who is responsible for coordinating an immediate response intended to contain the issue and engage the relevant service provider and appropriate authorities, as needed.

As of the date of this report, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition.

Cybersecurity risk oversight is managed by our executive officers, who are responsible for administering user-access controls, monitoring vendor communications relevant to cybersecurity, and coordinating response actions in the event of a suspected or confirmed incident. Given the nature and scale of our operations, we believe this approach is appropriate, although cybersecurity threats continue to evolve and there can be no assurance that our safeguards or those of our third-party providers will be sufficient to prevent all incidents.