Company: ZDAN
Filing Date: 2025-02-18
Form Type: DRS/A
Source: 0001683168-25-001085
Chunk: 23

Company: Zerolimit Technology Holding Co. Ltd.
Filing Date: 2025-02-18
Form: DRS/A
Chunk 23
---
, which holds personal information of over one million users, seeks to list abroad.

Given the aforementioned,
as well as the fact that (i) we are not in possession of more than one million users’ personal information, and (ii)we are not
a network platform operator that conducts data processing activities, we do not fall under the second and third scenarios described above.
Regarding the first scenario, according to the Regulation on the Protection of Critical Information Infrastructure Security, which became
effective on September 1, 2021, 'critical information infrastructure' refers to crucial networks, systems, and other facilities in vital
industries and sectors such as public communication and information services, energy, transportation, water conservancy, finance, public
services, e-government, defense technology industry, etc., where any disruption, loss of function, or data leak could severely endanger
national security, national economic lifelines, or public interests. According to the Cybersecurity Review Measures, 'network products
and services' mainly include core network equipment, key communication products, high-performance computers and servers, large-capacity
storage devices, major databases and application software, cybersecurity equipment, cloud computing services, and other products and
services that have a significant impact on the security of critical information infrastructure, cybersecurity, and data security. We
do not believe we are among the 'operator of critical information infrastructure', but in practice, the applicability of existing cybersecurity
review regulations is broad, and without explicit determination by relevant authorities, it is typically challenging for a company such
as ours to accurately self-assess whether it needs to undergo a cybersecurity review. As of the date of this prospectus, neither we nor
any of our PRC subsidiaries has been required by any PRC governmental authority to apply for cybersecurity review, nor have we or any
of our PRC subsidiaries received any inquiry, notice, warning, sanction in such respect or been denied permission from any PRC regulatory
authority to list on U.S. exchanges.

| 10 |

As advised by our PRC counsel,
(1) PRC governmental authorities have significant discretion in interpreting and implementing statutory provisions. If our or VIE’s
business is identified by the PRC government authorities as falling under the category of "critical information infrastructure operators
purchasing network products and services that may impact or potentially impact national security", then we need to comply with the
obligations regarding cybersecurity review. In that case, any failure or delay in the completion of the cybersecurity review procedures
or any other