Company: WLTH
Filing Date: 2025-06-18
Form Type: DRS
Source: 0001628279-25-000372
Chunk: 95

Company: WEALTHFRONT CORP
Filing Date: 2025-06-18
Form: DRS
Chunk 95
---
 security measures might be inadequate. Our ability to monitor, and our resources to optimize integration with, third-party service providers’ data security practices may not be adequate. These third-party risks might be exacerbated as our resources are spread across

<div align='center'>68</div>

multiple public cloud service providers. Although we generally have agreements relating to cybersecurity and data privacy in place with our third-party service providers, such agreements might not prevent the accidental or unauthorized access to or disclosure, loss, destruction, disablement or encryption of, use or misuse of, or modification of data (including personal data) and/or might not enable us to obtain adequate (or any) reimbursement from our third-party service providers in the event we should suffer any such incidents. Due to applicable laws and regulations or contractual obligations, we could be held responsible for any information security failure or cybersecurity attack attributed to our vendors as they relate to the information we share with them. A vulnerability in a third-party service provider’s software or systems, a failure of our third-party service providers’ safeguards, policies or procedures, or a breach of a third-party service provider’s software or systems could result in the compromise of the confidentiality, integrity, or availability of our systems or the data housed in our third-party solutions. Additionally, we could also be exposed to information security vulnerabilities or failures at third parties’ vendors that could also impact the security of our data, and we may not be able to effectively directly monitor or mitigate such risks, in particular as such risks relate to the use of vendors by the third parties that perform functions and services for us and our limited ability to assess such vendors’ operational controls.

A core aspect of our business is the reliability and security of our platform. Any unauthorized access to or disclosure, loss, destruction, disablement or encryption of, use or misuse of, or modification of data, including personal data, cybersecurity breach or other security incident that we, our clients or our third-party or their service providers experience or the perception that one has occurred or might occur, could harm our reputation, reduce the demand for our products and services and disrupt normal business operations. In addition, it might require us to expend significant financial and operational resources in response to a security breach, including repairing system damage, increasing security protection costs by deploying additional personnel and modifying or enhancing our protection technologies, investigating, remediating, or correcting the breach and any security vulnerabilities, defending against and resolving legal and regulatory claims, and preventing future security breaches and incidents, all of which could expose us to uninsured liability, increase