Company: GSUI
Filing Date: 2025-12-05
Form Type: S-1
Source: 0001193125-25-309828
Chunk: 200

Company: Grayscale Sui Trust (SUI)
Filing Date: 2025-12-05
Form: S-1
Chunk 200
---
 Broker Agreement, the Custodian must use commercially reasonable efforts to keep the private key or keys to the Vault Balance secure, and may not disclose such private keys to the Sponsor, Trust or any other individual or entity.

The Custodial Entities have implemented and will maintain reasonable information security programs that include policies and procedures that are reasonably designed to safeguard the Custodial Entities’ electronic systems and the Trust’s and the Sponsor’s confidential information from, among other things, unauthorized access or misuse. In the event of a Data Security Event (as defined in the Prime Broker Agreement), the Custodial Entities will promptly (subject to any legal or regulatory requirements) notify the Trust and the Sponsor.

Record Keeping; Inspection and Auditing

The Custodian will keep timely and accurate records as to the deposit, disbursement, investment and reinvestment of the SUI in the Vault Balance, and such records must be retained by the Custodian for no less than seven years. The Prime Broker Agreement also provides that each Custodial Entity will permit, to the extent it may legally do so, the Trust’s third-party representatives, upon thirty days’ notice, to inspect, take extracts from and audit the records that it maintains, take such steps as necessary to verify that satisfactory internal control systems and procedures are in place, as the Trust may reasonably request. The Prime Broker is obligated to notify the Trust of any audit report prepared by its internal or independent auditors if such report reveals any material deficiencies or makes any material objections.

The Trust and the Sponsor obtain and perform a comprehensive review of the Services Organization Controls (“SOC”) 1 report and SOC 2 each year. For additional information, see “—Description of Trust Documents—Description of the Prime Broker Agreement.” In addition to the review of SOC 1 and SOC 2 reports, the Trust, the Sponsor and/or their respective auditors may inspect or audit the Custodian’s records in a variety of manners if considered necessary. Such processes may include validating the existing balances as reflected on the Custodian’s user interface to nodes of the underlying blockchain and confirming that such digital assets are associated with its public keys to validate the existence and exclusive ownership of the digital assets. To validate software functionality of the private keys, the Trust may transfer a portion of its digital assets from one public key to another public key of the Trust.

The Trust, the Sponsor and their independent auditors may evaluate the Custodian’s protection of private keys and other customer information, including review of supporting documentation related to the processes surrounding key lifecycle management, the key generation process (