What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2026-06-29 compared with 2025-06-26 · 42 added, 55 removed, 2 unchanged (98% of the section changed)

1 unchanged sentence

Cybersecurity.

Risk Management and Strategy

We have risk management processes in place for

identifying, assessing and mitigating cybersecurity and risks from potential unauthorized occurrences on or through our electronic information

systems that could adversely affect the confidentiality, integrity, or availability of our information systems or the information residing

on those systems.

These include a wide variety of mechanisms, controls, technologies, methods, systems and other processes that are designed

to detect, prevent or mitigate data loss, theft, misuse, unauthorized access, interference with operations, or other security incidents

or vulnerabilities affecting the data.

The data includes confidential, proprietary, and business and personal information that we collect,

process, store, and transmit as part of our business, including on behalf of third parties.

Cybersecurity concerns are an important consideration

in our application development and the design of our infrastructure and operations technology.

We also use systems and processes designed

to reduce the impact of a security incident to our clients or their customers.

Additionally, we use processes to oversee and identify

material risks from cybersecurity threats associated with our use of third-party technology and systems, including:

technology and systems

that we use for encryption and authentication, employee email, communication to clients and their customers, operational support, and

other functions.

Our executive leadership team is responsible for

our overall enterprise risk management system and processes and regularly consider cybersecurity risks in the context of other material

risks to the Company.

As part of our cybersecurity risk management system, our incident management teams are responsible to track and

log privacy and security incidents across Roadzen platforms and our vendors and other third-party service providers to remediate and

resolve any incidents, should they arise.

In case there are any incidents, it is promptly reviewed by a cross-functional working group

to determine whether further escalation is appropriate.

Any incident assessed as potentially being or potentially becoming material shall

be immediately escalated for further assessment, and shall be reported to designated members of our senior management.

We consult with

our counsels as appropriate, including on materiality analysis and disclosure matters, and our senior management makes the final materiality

determinations and disclosure and other compliance decisions.

Our corporate governance committee has oversight

responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure requirements, cooperation

with law enforcement, and related effects on financial and other risks, and the committee is responsible to report any findings and recommendations,

as appropriate, to the full board for consideration .

Senior management regularly discusses cyber risks and trends and, should any issues

arise, they review all material incidents with the corporate governance committee.

Our corporate governance and audit committees discuss

policies with respect to risk assessment and risk management, including risks associated with the reliability and security of the Company’s

information technology and security systems, and the steps management has undertaken to monitor and control such exposures .

receives updates on the Company’s cybersecurity risk management programs from management.

Our business strategy, results of operations and

financial condition have not been affected by risks from cybersecurity threats, however, we cannot provide assurance that they will not

be materially affected in the future by such risks or any future material incidents.

For more information on our cybersecurity related

risks, see Item 1A Risk Factors under “ Our solutions or products or our third-party cloud providers have experienced in the past,

and could experience in the future, data security breaches, which could adversely impact our reputation, business, and ongoing operations” .

Our principal executive offices in the U.S., which

we lease, are located at 111 Anza Blvd., Suite 109 Burlingame, CA 94010.

Additionally we lease office space in Coventry in the U.K.

well as in Ahmedabad, Chennai and New Delhi in India.

The Company does not own any real estate.

We believe that our existing office space

is sufficient for our current needs.

Management and Strategy

have risk management processes in place for identifying, assessing and mitigating cybersecurity and risks from potential unauthorized

occurrences on or through our electronic information systems that could adversely affect the confidentiality, integrity, or availability

of our information systems or the information residing on those systems.

These include a wide variety of mechanisms, controls, technologies,

methods, systems and other processes that are designed to detect, prevent or mitigate data loss, theft, misuse, unauthorized access,

interference with operations, or other security incidents or vulnerabilities affecting the data.

The data includes confidential, proprietary,

and business and personal information that we collect, process, store, and transmit as part of our business, including on behalf of third

Cybersecurity concerns are an important consideration in our application development and the design of our infrastructure and

operations technology.

We also use systems and processes designed to reduce the impact of a security incident to our clients or their

Additionally, we use processes to oversee and identify material risks from cybersecurity threats associated with our use of

third-party technology and systems, including:

technology and systems that we use for encryption and authentication, employee email,

communication to clients and their customers, operational support, and other functions.

executive leadership team is responsible for our overall enterprise risk management system and processes and regularly consider cybersecurity

risks in the context of other material risks to the Company.

As part of our cybersecurity risk management system, our incident management

teams are responsible to track and log privacy and security incidents across Roadzen platforms and our vendors and other third-party

service providers to remediate and resolve any incidents, should they arise.

In case there are any incidents, it is promptly reviewed

by a cross-functional working group to determine whether further escalation is appropriate.

Any incident assessed as potentially being

or potentially becoming material shall be immediately escalated for further assessment, and shall be reported to designated members of

our senior management.

We consult with our counsels as appropriate, including on materiality analysis and disclosure matters, and our

senior management makes the final materiality determinations and disclosure and other compliance decisions.

corporate governance committee has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance

with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and the committee is

responsible to report any findings and recommendations, as appropriate, to the full board for consideration .

Senior management regularly

discusses cyber risks and trends and, should any issues arise, they review all material incidents with the corporate governance committee.

Our corporate governance and audit committees discuss policies with respect to risk assessment and risk management, including risks associated

with the reliability and security of the Company’s information technology and security systems, and the steps management has undertaken

to monitor and control such exposures.

Our board receives updates on the Company’s cybersecurity risk management programs from

business strategy, results of operations and financial condition have not been affected by risks from cybersecurity threats, however,

we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents.

more information on our cybersecurity related risks, see Item 1A Risk Factors under “ Our solutions or products or our third-party

cloud providers have experienced in the past, and could experience in the future, data security breaches, which could adversely impact

our reputation, business, and ongoing operations” .

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments