Company: EVCM
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001853145-25-000009
Chunk: 21

Company: EverCommerce Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1
Chunk 21
---
 IT shared services: Our technology platforms provides a consistent approach to software development, as well as cloud engineering and data center migration. Our IT administration allows for 24-hour support for all our people and platforms worldwide.

•Shared infrastructure: We systematically upgrade our data centers, centralize our collaboration platforms onto Office 365 and deploy a variety of standardized third-party software products sourced through EverCommerce. Migration of more than half of our technology solutions to AWS has allowed for gains in productivity, cost efficiency, expanded capacity and faster innovation.

•Cybersecurity: Our Security Operations team uses industry best practices and functional expertise to perform regular risk assessments, audits and remediation across our IT infrastructure and the data we maintain therein. Our security efforts also include incident prevention, incident response, monitoring, scanning and alerting.

•Offshore development team: Our software is primarily developed internally; however, we also use independent firms and contractors in the United States and internationally to perform some of our product development activities.

I-10

Data privacy and security

Regulators around the world have adopted or proposed laws, regulations, standards and requirements regarding the collection, use, transfer, security, storage, destruction and other processing of personal data. These laws are increasing in number and complexity, resulting in higher risk of enforcement, fines and other penalties. Our privacy and legal teams are committed to processing and fulfilling any requests regarding the exercise of an individual’s privacy rights with respect to personal information.

In the United States, numerous federal and state laws and regulations, including data breach notification laws and consumer protection laws govern the collection, use, disclosure, and protection of personal information. Our consumer transactions business is now, or may in the future be, subject to certain financial services laws, regulations and rules, such as the Payment Card Industry Data Security Standards, the Gramm-Leach-Bliley Act and the National Automated Clearing House Association ACH Rules, and our healthcare services businesses are subject to certain healthcare security and privacy laws, such as the Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, and regulations promulgated thereunder (collectively, “HIPAA”) in the United States. Certain foreign laws also govern the privacy and security of personal data. For example, we may be subject to the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and Personal Health Information Protection Act (“PHIPA”) in Canada. Privacy and security laws, regulations, and other obligations are constantly evolving, may