Company: DLO
Filing Date: 2025-04-24
Form Type: 20-F
Source: 0000950170-25-058197
Chunk: 113

Company: dLocal Ltd
Filing Date: 2025-04-24
Form: 20-F
Item: Item 16J
Chunk 113
---
Item 16J. Insider Trading Policies

We haveadopted a Trading Policy that applies to the Company, all directors, executive officers, employees, and certain designated consultants of the Company and its subsidiaries. This policy is designed to ensure compliance with applicable securities laws and regulations regarding the trading of our securities and the handling of material non-public information (MNPI).

Under this policy, covered individuals are prohibited from:

• Trading in the Company’s securities while in possession of MNPI;

• Engaging in short sales of the Company’s stock, which refers to sales of shares not owned by the covered person at the time of the sale;

• Engaging in any derivative transactions that are designed to hedge or speculate on any change in the market value of the Company’s equity securities;

• Disclosing MNPI to unauthorized persons (tipping); and

• Engaging in transactions during specified blackout periods applicable to directors, executive officers, and certain designated employees.

The policy includes provisions for pre-clearance of trades by designated individuals, which must be obtained from the Company’s General Counsel, and periodic training on insider trading compliance. The Company actively monitors compliance with this policy and takes appropriate measures to enforce it.

A copy of the Insider Trading Policy is filed as an exhibit to this Annual Report.

Item 16K. Cybersecurity
We have security measures in place to mitigate the risk of cybersecurity threats affecting our technology platforms and our business. We have taken into consideration relevant aspects of different frameworks and standards such as National Institute of Standards and Technology (“ NIST”) and Payments Card Industry Data Security Standard (“ PCI-DSS”) to assist us in formulating such security measures. Our security measures include, but are not limited to access and privilege management, segregation of test and production environments, vulnerability management, network security analysis, cyber incident management, baseline configuration of hardware and software, activity log correlation, malware prevention and remediation, and others. We employ a range of security processes, solutions and dissemination of these measures, including regular compliance checks and security observability. We also perform periodic reviews of cybersecurity threats and related controls, including periodic penetration tests performed by independent third parties.
Our board of directors has overall oversight responsibility for our risk management and is charged with oversight of our cybersecurity risk management program. The Audit Committee is responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which we are exposed and implement processes and programs to manage cybersecurity risks and mitigate cybersecurity incidents. The Audit Committee also reports material cybersecurity risks to our full board of directors. Management is responsiblefor