Company: IMXI
Filing Date: 2025-10-21
Form Type: PREM14A
Source: 0001140361-25-038818
Chunk: 231

Company: International Money Express, Inc.
Filing Date: 2025-10-21
Form: PREM14A
Chunk 231
---
 Program and the Privacy and Data Security Requirements.

(g) Since January 1, 2022, neither the Company nor any of its Subsidiaries has experienced any breaches, outages or unauthorized use of or access to the Company IT Assets or any breaches or unauthorized use of or access to Personal Information within the possession or control of the Company or any of its Subsidiaries, nor any other security incident that would require notice under applicable Privacy and Data Security Requirements.

(h) The Company IT Assets operate and perform as required to permit the Company and its Subsidiaries to conduct the business of the Company and its Subsidiaries (taken as a whole) as conducted as of the date hereof in all material respects. Without limiting the foregoing, the IT Assets are in all material respects adequate and sufficient (including with respect to capacity, scalability and ability to process current and anticipated peak volumes in a timely manner) for the conduct and operation of the business of the Company as currently conducted and as will be conducted immediately following the Closing. The Company and its Subsidiaries have taken commercially reasonable steps and implemented commercially reasonable safeguards, consistent with applicable Industry Security Standards, designed to protect the Company IT Assets from unauthorized access

<div align='center'>A-20</div>

#### TABLE OF CONTENTS
and from any disabling codes or instructions, spyware, Trojan horses, worms, viruses or other Software routines that permit or cause material unauthorized access to, or material unauthorized disruption, impairment, disablement or destruction of, IT Assets. The Company has maintained and complied with a written information security program (“ Information Security Program”) that (i) complies with the Privacy and Data Security Requirements and all other applicable Laws (including with respect to public disclosure requirements regarding its cybersecurity program, which have been true and accurate), and (ii) that is designed and implemented in accordance with applicable Industry Security Standards.

The Company has assessed and tested its Information Security Program on a no less than annual basis, and remediated all critical, and high risks and vulnerabilities identified. The Information Security Program includes administrative, technical, and physical safeguards appropriate to the Company’s size and complexity and the nature and scope of its activities. The Information Security Program is, at a minimum, designed to reasonably:

(i) protect against any reasonably anticipated threats or hazards to the security of the IT Assets;

(ii) ensure the security, integrity and confidentiality of all information and data that the Company Processes, including all Personal Information and Trade Secrets;

(iii)