Company: APPF
Filing Date: 2025-04-28
Form Type: DEF 14A
Source: 0001433195-25-000061
Chunk: 25

Company: APPFOLIO INC
Filing Date: 2025-04-28
Form: DEF 14A
Chunk 25
---
 periodically conducting internal penetration tests; and providing our customers with multi-factor authentication options to help them effectively protect their information. We also maintain data and cybersecurity protection and control policies to facilitate a secure environment for sensitive information and to ensure the availability of critical data and systems. We have processes in place to assess, identify and manage vendor cybersecurity risks, which include initial and periodic security program reviews and, in cases where personal information is shared, ongoing cybersecurity and privacy obligations that are documented in data processing agreements. Our cybersecurity policies, standards and processes are informed by a variety of industry standards and best practices, including the NIST cybersecurity framework and ISO 27001. We engage independent third parties to audit our adherence to our cybersecurity policies and conduct infrastructure and application security assessments and penetration testing. These third parties help us assess our internal preparedness, adherence to best practices and industry standards, and compliance with applicable laws and regulations as well as help us to identify areas for continued focus and improvement. We conduct annual information security awareness training for employees involved in the systems or processes connected to confidential and sensitive information.  We also carry insurance that provides certain limited protection against potential losses arising from a cybersecurity incident. |

### Code of Business Conduct and Ethics
We have a Code of Business Conduct and Ethics which applies to our employees, officers and directors. A copy of our Code of Business Conduct and Ethics is posted on our website, ethics.appfolio.com. We intend to satisfy the requirements under Item 5.05 of Form 8-K regarding disclosure of amendments to, or waivers from, provisions of our Code of Business Conduct and Ethics by posting such information on our investor relations website, http://ir.appfolioinc.com.

#### Insider Trading Policy
We have adoptedan Insider Trading Policy governing the purchase, sale and/or other dispositions of our securities by directors, officers, employees and the Company. A copy of the Insider Trading Policy is filed as Exhibit 19 to the Annual Report.

Our Insider Trading Policy prohibits certain transactions which we believe create a heightened risk and/or the appearance of inappropriate conduct, including the purchase of financial instruments or other transactions that hedge or offset (or are designed to hedge or offset) a decrease in market value of our securities. Specifically, our Insider Trading Policy prohibits our officers, directors and employees from (i) engaging in short sales, (ii) buying or selling publicly traded-options, including put options, call options and any other derivative securities, (iii) engaging in hedging transactions, including buying or selling puts, calls or any derivative securities that provide the economic equivalent