Company: RMIX
Filing Date: 2025-11-12
Form Type: S-4
Source: 0001104659-25-110488
Chunk: 727

Company: Suncrete, Inc.
Filing Date: 2025-11-12
Form: S-4
Chunk 727
---
 and create derivative works of such Business Data, in whole or in part, in the manner in which the Company and the Company Subsidiaries receive and use such Business Data prior to the Closing Date.

(m) The Company and the Company Subsidiaries are not subject to any contractual requirements, privacy policies, or other legal obligations, including based on the Transactions, that would prohibit the Surviving Subsidiary Company or such Company Subsidiaries, as applicable, from receiving, using, or otherwise Processing Company IP, Personal Information or other Business Data after the Closing Date,

<div align='center'>A-35</div>

TABLE OF CONTENTS

in substantially the same manner in which the Company or such Company Subsidiaries receive and use such Company IP, Personal Information and other Business Data prior to the Closing Date.

(n) All Personal Information Processed by the Company and any Company Subsidiary has been collected by the Company or the applicable Company Subsidiary directly from the data subjects.

(o) The Company has: (i) regularly conducted and regularly conducts vulnerability testing, risk assessments, and external audits of, and tracks security incidents related to, the Company’s systems and products (collectively, “

#### Information Security Reviews
”); (ii) timely corrected any material exceptions or vulnerabilities identified in such Information Security Reviews; (iii) made available true and accurate copies of all Information Security Reviews; and (iv) timely installed software security patches and other fixes to identified technical information security vulnerabilities.

(p) Neither the Company nor any Company Subsidiary is, nor has it ever been, a member or promoter of, or a contributor to, any industry standards body or similar standard setting organization that could require or obligate the Company or any Company Subsidiary to grant or offer to any other person any license or right to any Company-Owned IP.

(q) In connection with each third-party servicing, outsourcing, processing, or otherwise using Personal Information collected, held, or processed by or on behalf of the Company or any Company Subsidiary, the Company, or the applicable Company Subsidiary, has in accordance with Privacy Laws entered into valid, binding and enforceable written data processing agreements with any such third party to: (i) comply with applicable Privacy/Data Security Laws with respect to Personal Information; (ii) act only in accordance with the instructions of the Company or applicable Company Subsidiary; (iii) take appropriate steps to protect and secure Personal Information from data security incidents;