Company: ZDAN
Filing Date: 2025-01-10
Form Type: DRS/A
Source: 0001683168-25-000168
Chunk: 22

Company: Zerolimit Technology Holding Co. Ltd.
Filing Date: 2025-01-10
Form: DRS/A
Chunk 22
---
security Review, or Cybersecurity Review Measures, which
took effect on February 15, 2022, replacing the old Measures for Cybersecurity Review which took effect on 1 June 2020. According to
the Cybersecurity Review Measures, there are three scenarios that require cybersecurity review : (1) where a critical information infrastructure
operator purchases network products and services that may impact or potentially impact national security; (2) where a network platform
operator conducts data processing activities that may affect or potentially affect national security; and (3) where a network platform
operator, which holds personal information of over one million users, seeks to list abroad.

Given the aforementioned,
as well as the fact that (i) we are not in possession of more than one million users’ personal information, and (ii)we are not
a network platform operator that conducts data processing activities, we do not fall under the second and third scenarios described above.
Regarding the first scenario, according to the Regulation on the Protection of Critical Information Infrastructure Security, which became
effective on September 1, 2021, 'critical information infrastructure' refers to crucial networks, systems, and other facilities in vital
industries and sectors such as public communication and information services, energy, transportation, water conservancy, finance, public
services, e-government, defense technology industry, etc., where any disruption, loss of function, or data leak could severely endanger
national security, national economic lifelines, or public interests. According to the Cybersecurity Review Measures, 'network products
and services' mainly include core network equipment, key communication products, high-performance computers and servers, large-capacity
storage devices, major databases and application software, cybersecurity equipment, cloud computing services, and other products and
services that have a significant impact on the security of critical information infrastructure, cybersecurity, and data security. We
do not believe we are among the 'operator of critical information infrastructure', but in practice, the applicability of existing cybersecurity
review regulations is broad, and without explicit determination by relevant authorities, it is typically challenging for a company such
as ours to accurately self-assess whether it needs to undergo a cybersecurity review. As of the date of this prospectus, neither we nor
any of our PRC subsidiaries has been required by any PRC governmental authority to apply for cybersecurity review, nor have we or any
of our PRC subsidiaries received any inquiry, notice, warning, sanction in such respect or been denied permission from any PRC regulatory
authority to