Company: CWAN
Filing Date: 2025-03-20
Form Type: 424B3
Source: 0001193125-25-058975
Chunk: 341

Company: Clearwater Analytics Holdings, Inc.
Filing Date: 2025-03-20
Form: 424B3
Chunk 341
---

its Subsidiaries have title to, or a valid leasehold interest in, all material tangible personal property free and clear of all Liens, other than Permitted Liens, and as may be necessary to permit the Company and its Subsidiaries to conduct their
business in the ordinary course as currently conducted, including all such assets reflected on the Company Balance Sheet (except for assets sold or otherwise disposed of since the Company Balance Sheet Date).

Section 4.23 Data Privacy.

(a) Except as would not reasonably be expected to have, individually or in the aggregate, a Company Material Adverse Effect, the Company and
each of its Subsidiaries, and, to the Knowledge of the Company, any Person acting for or on behalf of the Company or any of its Subsidiaries, is, and, since January 1, 2022, has been, in compliance with all Applicable Laws and Privacy
Obligations, including in each case in connection with the Company’s and its Subsidiaries’ Processing of any personal data, personal information, personally identifiable information, protected health information, personal health records,
consumer health data (as each term is defined under Applicable Law and similar terms or definitions under any Applicable Law) (collectively “Personal Information”). The Company and its Subsidiaries have implemented and maintained
reasonable physical, technical, organizational and administrative security measures and policies designed to protect all Personal Information collected by or on behalf of them from and against breaches and any unauthorized access, acquisition,
destruction, use and/or disclosure (“Security Incident”), and since January 1, 2022, there has been no such breach or Security Incident, and none of the Company or any of its Subsidiaries have provided or been legally required
to provide any notice to any Person in connection with a Security Incident. The Company and its Subsidiaries have all rights, authority, consents and authorizations required under applicable Privacy Obligations and have provided all notices required
under applicable Privacy Obligations to Process all Personal Information

A-47

that the Company and its Subsidiaries have Processed in connection with the operation of their business as presently conducted.

(b) Since January 1, 2022, no Governmental Authority or Person has (i) made any written claim (including any notice, enforcement
notice, letter, or complaint) against the Company or any of its Subsidiaries or (ii) commenced or, to the Knowledge