Company: LDWY
Filing Date: 2025-08-28
Form Type: 10-KT
Source: 0001558370-25-011807
Chunk: 23

Company: LENDWAY, INC.
Filing Date: 2025-08-28
Form: 10-KT
Chunk 23
---
 following conditions are met:

| ● | The issuer of the securities that was formerly a shell company has ceased to be a shell company; |

| ● | The issuer of the securities has filed all reports and material required to be filed under Section 13 or 15(d) of the Exchange Act, as applicable, during the preceding twelve months (or shorter period that the issuer was required to file such reports and materials), other than Form 8-K reports; and |

| ● | At least one year has elapsed from the time the issuer filed the current Form 10 type information with the SEC reflecting its status as an entity that is not a shell company. |

We have never been classified as a “shell company” under rules promulgated under the Securities Act or the Exchange Act. However, in the event we were to be so designated, we may have to retroactively adjust our reporting or accounting for affected periods.

17

## Item 1B. Unresolved Staff Comments
Smaller reporting companies are not required to provide disclosure pursuant to this Item.

## Item 1C. Cybersecurity
We recognize the importance of safeguarding our business operations, sensitive data, and intellectual property from cyber threats and other technological risks. Our operations involve the use of various information technology systems, including those for production management, customer order management, and financial reporting. As such, we are exposed to a range of cyber risks, including but not limited to data breaches, ransomware attacks, unauthorized access to proprietary data, and disruptions to our operations due to system failures. We are committed to maintaining an appropriate level of cybersecurity to mitigate these risks. Lendway’s cyber environment at June 30, 2025 consisted primarily of outsourced information technology (“IT”) operations. The outsourced providers have a cybersecurity framework which includes multiple products implemented to ensure the security of Lendway’s and Bloomia’s environments. Our third-party service providers alert management, specifically the CFO and CEO of Bloomia, to incidents or other concerns. Management reports significantincidents or concerns to the Audit Committee. Annual internal and external vulnerability scans are completedto ensure we mitigate any risks proactively. The Company’s internal operations are PC based and the PCs have up to date security software. Regular phishing exercises are conducted, and employee awareness training is conducted annually by our outsourced provider. The Company relies on third-party service providers for services such as IT management and payroll. These third-parties are also vulnerable to cybersecurity threats. Management actively assesses its third-parties policies related to cyber risks