Cybersecurity Risk Management

Cybersecurity risk management is an integral part of our overall risk management program. Our cybersecurity risk management program is designed to align with industry best practices and provide a framework for handling cybersecurity threats and incidents, including threats and incidents associated with the use of applications developed and services provided by third-party service providers, and facilitate coordination across different departments of the company. This framework includes steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat including whether the cybersecurity threat is associated with a third-party service provider, implementing cybersecurity countermeasures and mitigation strategies and informing management and our board of directors of material cybersecurity threats and incidents. Our cybersecurity team is responsible for assessing our cybersecurity risk management program and we currently do not engage third parties for such assessment.

Our board of directors has overall oversight responsibility for our risk management and is charged with oversight of our cybersecurity risk management program. Our board is responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which the company is exposed and implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents. Our vice president in charge of operations reports material cybersecurity risks to our full board of directors. Management is responsible for identifying, considering and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our vice president in charge of operations who receives reports from our cybersecurity team and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents. Our vice president who directs our cybersecurity programs and dedicated personnel are experienced information systems security professionals and information security managers with years of experience. Management, including our cybersecurity team, regularly update the board of directors on the company’s cybersecurity programs, material cybersecurity risks and mitigation strategies and provide cybersecurity reports upon requirements of the board that cover, among other topics, developments in cybersecurity and updates to the company’s cybersecurity programs and mitigation strategies.

In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident.

In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident.