Company: SONM
Filing Date: 2025-12-05
Form Type: DEFM14A
Source: 0001493152-25-026277
Chunk: 196

Company: SONIM TECHNOLOGIES INC
Filing Date: 2025-12-05
Form: DEFM14A
Chunk 196
---
 its Subsidiaries nor any Person acting on the Seller’s or the Subsidiary’s behalf or direction has: (i) paid any perpetrator of any data breach incident or cyber-attack or (ii) paid any third Person with actual or alleged information about a data breach incident or cyber-attack, pursuant to a request for payment from or on behalf of such perpetrator or other third Person. Seller has a policy of evaluating and determining whether to implement security patches or upgrades that are generally available for the Information Systems used in connection with or otherwise applicable to the Business. Seller and the Acquired Subsidiaries use commercially reasonable methods (including passwords) to ensure the correct identity of the users of their respective Information Systems.

| -41- |

(n) Personal Information Databases. Schedule 3.18(n)of the Seller Disclosure Schedule identifies each distinct electronic or other database containing Personal Information maintained by or on behalf of Seller at any time in connection with or otherwise applicable to the Business (each, a “ Personal Information Database”) and with respect to each Personal Information Database: (i) the type of Personal Information in each such Personal Information Database; (ii) the physical location of the server hosting such Personal Information Database; and (iii) the security policies that have been adopted and maintained with respect to each such Personal Information Database.

(o) Privacy & Security Compliance. Seller and each of its Subsidiaries has complied (currently and at any time during the past two years) with any applicable (or then-applicable) Privacy and Security Requirements, including as it relates to: (i) the privacy of users of the Business Products and all Internet websites owned, maintained or operated by Seller or any of its Subsidiaries in connection with or otherwise applicable to the Business; or (ii) the use, collection, storage, disclosure, transfer or other Processing of any Personal Information, including employee Personal Information, collected by or provided to Seller or any of its Subsidiaries or by third parties having authorized access to the records of or applicable to the Business. Seller and each Subsidiary’s practices used in connection with or otherwise applicable to the Business are (currently and at any time during the past two years) are in compliance with (i) Seller’s Privacy Policies, including the privacy policy posted on Seller’s website, and (ii) third party website terms, when required to do so by Contract (including any Privacy Contracts). Each website of the Business and all materials distributed or marketed by Seller in respect of or applicable to