Company: OWLS
Filing Date: 2025-08-01
Form Type: DRS/A
Source: 0000950123-25-006894
Chunk: 183

Company: OBOOK HOLDINGS INC.
Filing Date: 2025-08-01
Form: DRS/A
Chunk 183
---
 to seek their opinion about
intellectual property portfolio strategy and to coordinate with their local representations to carry out the application filing and maintenance in multiple jurisdictions.

123

Since OwlPay Wallet Pro offers hosted wallet services, stringent customer asset
custody technology has been one of the key focuses in our product development. We emphasize on the integrity of the storage and custody of digital assets and have employed specific measures. Our databases are backed up across different regions using
AWS, which could reduce the risk of service interruptions in the case of a regional server or system compromise. All of our data in the database and files are encrypted and all data undergo integrity verification. For custody of digital assets, we
use a Multi-Party Computation (MPC) architecture for private keys management. The MPC architecture splits private keys into multiple shards distributed across different nodes, and these nodes are located in highly secure data centers, with each
private key shard protected through envelope encryption, which collectively reduces the likelihood of unauthorized access to a complete private key. During storage and transmission, the private key shards are encrypted and protected using AWS Key
Management Services, which provides FIPS-certified security via Hardware Security Modules (HSM). The encryption system provides an extra layer of protection even if one or more nodes are compromised. Under MPC, the complete private key is never
exposed or reconstructed at any time, not even temporarily.

For OwlPay, we adhere to industry-leading standards, including
ISO 27001, to safeguard of our customers’ assets in the process of transmission. We have implemented comprehensive internal control procedures that address both external and internal threats, including the risks of self-dealing and other
potential conflicts of interest. For instance, our risk management framework includes multi-factor authentication, regular security audits, and encryption of sensitive data. In addition to these preventative measures, we mitigate residual risks by
securing insurance coverage, which provides an extra layer of protection for our customers in the event of unforeseen incidents.

Furthermore, our infrastructure is designed for strict client asset separation. Each client is assigned a unique, dedicated wallet address to
isolate that client’s assets securely and prevent commingling of assets between clients, with our assets, and those of affiliates of ours. Each wallet address is tied exclusively to the client, promoting transparency and clear ownership of
digital assets. This address is never reused for other clients, allowing customers to independently verify their holdings at any time on public blockchain ledgers. This infrastructure design eliminates the possibility of commingling assets between
customers and/or us