2 unchanged sentences
We are committed to our privacy and security programs, and our security team strives to protect our customer and employee data from cybersecurity risks.
+Added: We have procedures in place to address suspected security breaches and notify users determined to be affected and applicable regulators of a breach where we are legally required to do so.
+Added: Because our business involves the collection, use, storage, and transmission of personal information, we are subject to numerous federal, state, local, and foreign laws, regulations, and other obligations relating to privacy and data security.
+Added: Countries around the world have adopted or are proposing similar laws and regulations relating to privacy and data security, and we may become subject to them as we expand our operations into new geographic markets.
From time to time, and at least annually, we review and update if necessary our privacy standards and policies in response to evolving regulatory requirements and internal Unity requirements.
Unity personnel are provided annual privacy training, with additional targeted training for key participants in our privacy program.
−Removed: We have procedures in place to address suspected security breaches and notify users determined to be affected and applicable regulators of a breach where we are legally required to do so.
We have a security policy which outlines mandatory security requirements for all of our employees, contractors or other agents.
−Removed: This policy is supported by internal standards, directives and procedures.
−Removed: The security program includes implementation of software security throughout the development life cycle, vulnerability and configuration management software across certain data infrastructure, products and services.
−Removed: Our risk management process includes employee education and annual analysis of risks from across the company, which are then prioritized for remediation.
−Removed: Our approach to cybersecurity is integrated into our overall company-wide approach to risk management.
−Removed: Our management team, including our Deputy Chief Security Officer and our Data Privacy Officer, evaluates risks from cybersecurity threats against our overall business objectives and regularly reports to both the Audit Committee of our board of directors and to our internal audit function which evaluates our overall enterprise risk.
−Removed: We engage third party services in connection with our processes for vendor security reviews and incidents.
+Added: This policy is supported by internal standards, directives and procedures and our security infrastructure and tools.
+Added: The security program includes implementation of software security throughout the development life cycle, vulnerability and configuration management software across certain of our data infrastructure, and our products and services offerings.
+Added: Our risk management process includes annual employee education and annual analysis of security-related risks from across the company, which are then prioritized for mitigation or remediation.
+Added: Our approach to cybersecurity is integrated into our overall company-wide approach to risk management, including regular consultations between our Data Privacy Officer and Interim Chief Information Security Officer and our internal audit team.
+Added: Our management team, including our Interim Chief Information Security Officer and our Data Privacy Officer, also regularly reports to the Audit Committee of our board of directors regarding their evaluation of risks from cybersecurity threats against our overall business objectives and other relevant cybersecurity matters.
+Added: We engage third party services in connection with our processes for vendor security reviews and security incidents.
+Added: Assessments of our program are performed by our internal audit team or through independent third-party engagements.
We are continuing to refine our processes to oversee and identify the risks from cybersecurity threats associated with our use of any third-party service provider.
−Removed: Because our business involves the collection, use, storage, and transmission of personal information, we are subject to numerous federal, state, local, and foreign laws, regulations, and other obligations relating to privacy and data security.
−Removed: Countries around the world have adopted or are proposing similar laws and regulations relating to privacy and data security, and we may become subject to them as we expand our operations into new geographic markets.
−Removed: Unity Software Inc.
−Removed: Our Deputy Chief Security Officer and Data Privacy Officer oversee our assessment, prevention, detection and management of cybersecurity risks, and report to our executive team, including our Chief Information Officer, Chief Financial Officer and Chief Legal Officer.
+Added: Our Interim Chief Information Security Officer and Data Privacy Officer oversee our assessment, prevention, detection and management of cybersecurity risks, and report to our executive team, including our Chief Financial Officer and Chief Legal Officer.
Collectively, they have expertise in cybersecurity, privacy law and regulation, and governance, and their teams comprise personnel with a broad range of experience across the private and public sectors, the technology industry, and in different geographic regions.
−Removed: Our Deputy Chief Security Officer Security has over 25 years of experience in multiple business verticals and has led security organizations and managed global practices for Fortune 500 technology companies.
−Removed: He became our Deputy Chief Security Officer after previously serving in that role at ironSource, prior to its merger with us.
−Removed: Our security team follows an incident response process which we are continuing to evaluate and enhance.
−Removed: Pursuant to this process, incidents which may result in economic loss to the company, reputational harm or require notifications to individuals and government authorities are reported to our executive team.
−Removed: Our Chief Security Officer also provides a quarterly summary of investigations given to an executive data council, and our Data Privacy Officer reports on our compliance posture with respect to new and pending laws and regulations.
+Added: Our Interim Chief Information Security Officer has over 30 years of experience in multiple business verticals and has led security organizations and managed global practices for Fortune 500 technology companies.
+Added: Our security team follows a documented incident response process, which we are continuing to evaluate and enhance.
+Added: Pursuant to this process, incidents which may result in economic loss to the company, reputational harm or require notifications to individuals or government authorities are reported
+Added: Unity Software Inc.
+Added: to relevant members of our executive team.
+Added: Our Interim Chief Information Security Officer also provides a regular summary of significant investigations to our Chief Financial Officer and Chief Legal Officer, as well as our Audit Committee, and our Data Privacy Officer reports on our compliance posture with respect to new and pending laws and regulations periodically as well.
The Audit Committee of our board of directors is responsible for overseeing our cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.
−Removed: Additionally, the Audit Committee of our board of directors meets on a quarterly basis with our Chief Security Officer about our cybersecurity risk management and strategy, including any significant investigations, and biannually with our Data Privacy Officer about our privacy program.
+Added: The Audit Committee of our board of directors meets on a quarterly basis with our Interim Chief Information Security Officer about our cybersecurity risk management and strategy, including any significant investigations, and periodically with our Data Privacy Officer about our privacy program.
In 2025, we did not identify any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.