2 unchanged sentences
Our information security program is designed to meet the needs of our clients who entrust us with their sensitive information.
−Removed: We maintain International Organization for Standardization 27001 certification for our enterprise-wide information security management system and program.
−Removed: Where applicable, we align to other industry standards or frameworks, including the Cloud Security Alliance’s Cloud Controls Matrix, the Payment Card Industry Data Security Standard, the Health Insurance Portability and Accountability Act, and the CSF HiTRUST Common Security Framework.
+Added: We maintain International Organization for Standardization (“ISO”) 27001 certification for our enterprise-wide information security management system and program.
+Added: Where applicable, we align to, and our program is assessed to meet, other industry standards or frameworks, including the Cloud Security Alliance’s Cloud Controls Matrix (“CSA”), the Payment Card Industry Data Security Standard (“PCI”), HIPAA, and the CSF HiTRUST Common Security Framework.
Cybersecurity Risk Management and Strategy
11 unchanged sentences
identify, protect, detect, respond, and recover.
+Added: In 2026, we engaged an independent third-party to assess our program against the new NIST 2.0 Cybersecurity Framework;
+Added: • undergo periodic third-party assessments of our program, policies or applications, including annual reviews in connection with System and Organization Controls (“SOC”) 1 and 2 examinations, as well as annual independent assessments relating to HIPAA, CSA, ISO 27001 and PCI standards;
+Added: • participate in industry-led cybersecurity initiatives designed to strengthen cyber defense and help secure critical software and infrastructure.
+Added: In 2026, we joined Anthropic’s Project Glasswing, an industry initiative focused on using frontier AI models to enhance cybersecurity capabilities, improving our ability to identify and remediate security vulnerabilities;
• conduct network and endpoint monitoring, vulnerability assessments, and network penetration testing;
18 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.