Company: OPGN
Filing Date: 2025-08-21
Form Type: 10-K
Source: 0001829126-25-006628
Chunk: 12

Company: OPGEN INC
Filing Date: 2025-08-21
Form: 10-K
Item: Item 1
Chunk 12
---
 define advisory services broadly, particularly when personalized or automated investment recommendations are involved. To remain compliant, CapForce evaluates the legal treatment of its model-enabled advisory features within each jurisdiction. Where licensing is required, it will collaborate with licensed partners or restrict its services to educational or general guidance functions that fall outside regulated advice. CapForce’s model-enabled advisory modules are designed with transparency and explainability to support investor education, and appropriate disclosures are provided to users to clarify the scope of any non-licensed activities.

8

Data Privacy and Cross-Border Data Transfers

CapForce processes user, investor, and issuer data across multiple jurisdictions and is therefore subject to data privacy laws such as the EU’s General Data Protection Regulation (GDPR), Malaysia’s Personal Data Protection Act (PDPA), Singapore’s PDPA, India’s Digital Personal Data Protection Act, and China’s Personal Information Protection Law (PIPL). To comply with these requirements, CapForce implements data protection measures including data encryption, role-based access controls, user consent protocols, and secure storage. Where data transfers cross jurisdictional borders, CapForce relies on legal mechanisms such as Standard Contractual Clauses (SCCs) or ASEAN Model Contractual Clauses (MCCs) to ensure compliance with local data residency requirements, where applicable. CapForce’s data handling and governance policies are continuously reviewed and updated to remain compliant with evolving regional requirements.

Anti-Money Laundering (AML) and Know Your Customer (KYC)

AML and KYC obligations are central to CapForce’s trading platform and client onboarding processes, especially given its cross-border focus. CapForce adheres to standards outlined by the Financial Action Task Force (FATF), and where applicable, the jurisdiction-specific AML/KYC requirements enforced in Malaysia by Bank Negara Malaysia, FinCEN in the U.S., MAS in Singapore, and HKMA in Hong Kong. To meet these obligations, CapForce has implemented a combination of automated and manual due diligence procedures. These include identity verification through KYC systems, ongoing monitoring of transactional behavior, sanctions screening, and risk profiling. CapForce’s compliance program is designed to detect and report suspicious activities and to support safe and transparent financial operations across jurisdictions.

Cybersecurity and Operational Resilience

CapForce’s platforms are subject to regulatory expectations for cybersecurity and operational risk management, including guidelines from MAS (Technology Risk Management Guidelines), HKMA (Cybersecurity Fortification Initiative), and comparable frameworks in the U.S. and other Asian markets. In response, CapForce outsourced the