Company: CDLX
Filing Date: 2025-04-03
Form Type: DEF 14A
Source: 0001666071-25-000046
Chunk: 44

Company: Cardlytics, Inc.
Filing Date: 2025-04-03
Form: DEF 14A
Chunk 44
---
10-K for the fiscal year ended December 31, 2024, including "An actual or perceived breach of the security of our systems, or those of third parties with whom we work, could result in adverse consequences resulting from such breach, including but not limited to a disruption of our operations, reputational harm, loss of revenue or profits, loss of customers, regulatory investigations or actions, litigation, fines and penalties and other adverse consequences."

Governance

Every six months, management discusses cybersecurity risk and reviews our cybersecurity program. Management is also responsible for approving budgets, helping prepare for cybersecurity incidents, responding to cybersecurity incidents, approving cybersecurity policies and procedures, reviewing audit reports, and reporting to the board of directors regarding cybersecurity matters.

Management is involved with our efforts to prevent, detect, and mitigate cybersecurity incidents by overseeing and testing of incident response plans. Management participates in cybersecurity incident response efforts by being a member of the incident response team and helping direct our response to cybersecurity incidents.

Our Board of Directors oversees our risk management strategy with respect to cybersecurity risks and threats. The Board of Directors, through its Audit Committee, holds regular meetings quarterly to discuss issues including our cybersecurity threats, and has a dedicated agenda during such meetings that are designed to assist the audit committee to exercise its oversight function. The meetings involve presentations and reports from the Chief Information Security Officer and management, including updates on contemporary cybersecurity threats faced by us and steps we are taking to address them.

#### Environmental Approach

#### Carbon and Climate
Climate change is one of the world's greatest crises, and to address it, the public and private sectors need to act together. We recognize the risks that climate change poses to the broader economy, so we strive to minimize the impact of our operations on the environment. Our headquarters in Atlanta, GA is located in a LEED certified building.

#### Social Approach

#### Compensation
Our use of equity compensation ensures employees who receive equity operate as owners and is a strategic component of our total rewards strategy to retain, motivate and attract the best talent. Other important components of our compensation philosophy include competitive base salaries and bonus opportunities, comprehensive medical benefits, a positive work/life balance, flexible paid time off, health and wellness programs and learning and development opportunities. Each year, with the help of outside experts, we evaluate each aspect of our compensation and benefits to ensure they align with those of our peer group in the market.

#### Human Rights
Cardlytics is dedicated to protecting human rights, both in our own workforce and in our supply chain. We are a committed equal opportunity employer