Statement: 'We have prepared a GDPR compliance package /audit package for our customers which contains all relevant GDPR information to aid customers with fulfilling their audit obligations pursuant to article 28 of the GDPR. Customers may request this audit package free of charge on [email protected]. This package is our full audit documentation and consists of relevant GDPR and IT security documents, such as Hogan detailed audit questionnaires – ISAE3000 and ISO27001. If customers request answers to separate or specific questionnaires or questions, such answers will be subject to a fee per hour.'

GDPR, IT security, other information related to Hogan’s online platform, HALO, attached.

Version June 2023.

• Hogan has deployed industry standard, non-proprietary, encryption techniques for data at rest.

• Data in storage on servers (database servers, fileservers, application servers) is encrypted (cipher: AES-256-XTS).

• Data backups in storage on data backup systems are encrypted (cipher: AES-256 with a 256-bit key length in the CBC-mode).

• Hogan has deployed industry-standard encryption protocols for data in transit. All user sessions are encrypted via SSL/TLS 1.2

For further details, please refer to the detailed questionnaire based on ISAE3000 and ISO27001 from Hogan as well as Hogan’s System Security Overview (SSO).

More information on the FAQ, attached.