Company: AFRM
Filing Date: 2025-08-28
Form Type: 10-K
Source: 0001820953-25-000080
Chunk: 33

Company: Affirm Holdings, Inc.
Filing Date: 2025-08-28
Form: 10-K
Item: Item 1
Chunk 33
---
 us to comply with all applicable anti-money laundering and anti-terrorism financing laws and regulations, including the Bank Secrecy Act and the Patriot Act. Our AML program is also designed to prevent our products from being used to facilitate business in certain countries or territories, or with certain individuals or entities, including those on designated lists promulgated by the U.S. Department of the Treasury’s Office of Foreign Assets Controls and other U.S. and non-U.S. sanctions authorities. Our AML and sanctions compliance programs include policies, procedures, reporting protocols, and internal controls designed to identify, monitor, manage, and mitigate the risk of money laundering and terrorist financing, including the designation of an AML compliance officer to oversee the programs. We are also required to maintain this program under our agreements with our originating bank partners, and certain state regulatory agencies have intimated they expect the program to be in place and followed.

The U.S. Foreign Corrupt Practices Act (“FCPA”) prohibits offering, promising, authorizing or making payments to any foreign government official, government staff member, political party or political candidate to obtain or retain business abroad. Affirm is subject to the FCPA as well as similar laws in other jurisdictions in which we operate. We maintain anti-corruption policies and procedures and have a compliance program in place to ensure compliance with these laws and regulations. 

We collect, store, use, disclose, transfer, and otherwise process a wide variety of information, including personal information, for various purposes in our business, including to help provide for the integrity of our services and to provide features and functionality to our consumers and merchants. This aspect of our business, including the collection, storage, use, disclosure, transfer, processing, and protection of the information, including personal information, we acquire in connection with our consumers’ and merchants’ use of our services, is subject to 

19

Table of Contents

numerous privacy, cybersecurity, and other laws and regulations in the U.S. and foreign jurisdictions, including the GLBA and its implementing regulations. We are subject to a variety of such laws, rules, directives, and regulations, as well as contractual obligations, both at the state and federal level, relating to the processing of personal information. Accordingly, we publish our privacy policies and terms of service, which describe our practices concerning the collection, storage, use, disclosure, transmission, processing, and protection of information. The regulatory framework for privacy and data protection worldwide is rapidly evolving and, as a result, implementation standards and enforcement practices are likely to