Company: WHWK
Filing Date: 2025-01-31
Form Type: DEFM14A
Source: 0001193125-25-018470
Chunk: 727

Company: Whitehawk Therapeutics, Inc.
Filing Date: 2025-01-31
Form: DEFM14A
Chunk 727
---
 Officials in International Business Transactions,
signed December 17, 1997, including the U.S. Foreign Corrupt Practices Act of 1977, as amended, the U.K. Bribery Act 2010, or any other law, rule or regulation of similar purposes and

D-13

scope or (B) anti-money laundering laws, including, but not limited to, applicable federal, state, international, foreign or other laws, regulations or government guidance regarding
anti-money laundering, including, without limitation, Title 18 US. Code sections 1956 and 1957, the Patriot Act, the Bank Secrecy Act, and international anti-money laundering principles or procedures by an intergovernmental group or organization,
such as the Financial Action Task Force on Money Laundering, of which the United States is a member and with which designation the United States representative to the group or organization continues to concur, all as amended, and any executive
order, directive, or regulation pursuant to the authority of any of the foregoing, or any orders or licenses issued thereunder.

3.30 . The Company and its subsidiary own or have a valid right to access and use all computer systems, networks, hardware, software, databases, websites, and equipment used to process, store, maintain and
operate data, information, and functions used in connection with the business of the Company and its subsidiary (the “Company IT Systems”), except as would not, individually or in the aggregate, have a Material Adverse Effect. The
Company IT Systems are adequate for, and operate and perform in all material respects as required in connection with, the operation of the business of the Company and its subsidiary as currently conducted, except as would not, individually or in the
aggregate, have a Material Adverse Effect. The Company and its subsidiary have implemented commercially reasonable backup, security and disaster recovery technology consistent in all material respects with applicable regulatory standards and
customary industry practices. Except as would not reasonably be expected to have a Material Adverse Effect, (a) there has been no security breach or other compromise of or relating to the Company IT Systems; (b) the Company has not been
notified of, and has no knowledge of any event or condition that would reasonably be expected to result in, any such security breach or other compromise of the Company IT Systems; (c) the Company and its subsidiary have implemented policies and
procedures with respect to the Company IT Systems that are reasonably consistent with industry standards and practices, or as required