Contents

Purpose

CloudCard’s Whistleblower Policy is intended to encourage and enable employees and others to raise serious internal concerns so that we can address and correct inappropriate conduct and actions. All employees are responsible for reporting concerns about our Code of Ethics violations or suspected violations of laws, regulations, or policies that govern our operations.

Reporting Channels

Concerns may be submitted anonymously and will be treated confidentially. The following channels are available for submitting reports:

• Emailing reports to security@cloudcard.us

• Submitting reports via a Google form: https://docs.google.com/forms/d/1X0TGsI0ZLdFYz6wEaHNeaytdgScpN3hDolp7V0IZj1A/edit

Confidentiality & Non-Retaliation

We strictly prohibit retaliation against anyone who reports a concern in good faith. Any employee retaliating against a whistleblower may face disciplinary action, including termination. All reports are handled discreetly to the extent possible, and whistleblowers are not required to reveal their identity.

Scope of Reportable Concerns

You are encouraged to report concerns related to:

• Violations of the Code of Ethics

• Fraud, theft, or financial misconduct

• Discrimination, harassment, or workplace abuse

• Data privacy or security breaches

• Violations of internal policies, laws, or regulations

Knowingly submitting false or malicious claims violates this policy and may result in disciplinary action.

Revision History