Company: CWAN
Filing Date: 2025-03-20
Form Type: 424B3
Source: 0001193125-25-058975
Chunk: 338

Company: Clearwater Analytics Holdings, Inc.
Filing Date: 2025-03-20
Form: 424B3
Chunk 338
---
including any escrow agent) other than
employees, consultants or independent contractors of the Company or a Subsidiary of the Company who have a written confidentiality obligation to the Company or the applicable Subsidiary with respect to such source code or related materials and the
Company does not have the obligation to provide the source code to any such person.

(j) Except as would not reasonably be expected to
have, individually or in the aggregate, a Company Material Adverse Effect, (i) the information technology, computer and communication systems, servers, network equipment, hardware, Software, databases and other equipment owned, operated, leased
or licensed or otherwise relied upon by the Company or any of its Subsidiaries used in connection with the business (“IT Systems”) are in good working order, and are adequate and sufficient for the operation of the business of the
Company and its Subsidiaries as currently conducted, and (ii) since January 1, 2022, there has been no security breach or unauthorized access or use of any IT Systems, Security Incident or Malicious Code in, or failure or outage of any of
any IT Systems, including any such failure or outage affecting any Personal Information. The Company and each of its Subsidiaries have implemented and maintain commercially reasonable (x) industry standard information security program to
maintain and protect the integrity and security of the IT Systems and to mitigate against the likelihood that the Proprietary Software Product contains any Malicious Code or other Software or hardware designed or able to cause harmful effect or
unauthorized access to Software, hardware or data, and which includes policies and procedures designed to detect, prevent, correct, and/or remove any malware, viruses, or other similar corruptants or effects, and any third party software routines
designed to permit unauthorized access, disable or erase software, hardware or data, or perform any other similar actions (“Malicious Code”) and (y) back-up and disaster recovery
arrangements.

(k) To the Knowledge of the Company, none of the Proprietary Software Product that is distributed, conveyed or made
available by the Company or any of its Subsidiaries contains any “back door”, “drop dead device”, “time bomb” (as such terms are commonly understood in the software industry) or any other Malicious Code or other code
designed or able to cause harmful effect or unauthorized access to any device storing or using Proprietary Software Product, data or files. No Proprietary Software Product constitutes