Document:

Exhibit
10.75

 

 

 

EXPLANATORY
NOTE: [***] INDICATES THE PORTION OF THIS EXHIBIT

THAT
HAS BEEN OMITTED BECAUSE IT IS BOTH (I) NOT MATERIAL AND

(II)
WOULD BE COMPETITIVELY HARMFUL IN PUBLICLY DISCLOSED. 

 

 

 

Victoria
Scott, Director of Quality & Regulatory Affairs

 

2117
SW Highway 484

Ocala,
FL 34473

Corporate
Phone: (352) 448-7797

Corporate
Fax: (352)480-4620

 

Email:
Victoria.Scott@AIMimmuno.com

 

Submitted
By:

Pharmaceutics
International, Inc. (Pii)

Kevin
Kelly, Head of Sales

 

10819
Gilroy Road

Hunt
Valley, MD 21031

Corporate
Phone: (410) 584-0001

Mobile:
(610) 349-3745

 

Corporate
Fax: (410) 527-0525

Email:
kkelly@pharm-int.com

 

Project
Number 27AIM01

 

 

    	 

    	 

    

 

 

 

EXPLANATORY
NOTE: [***] INDICATES THE PORTION OF THIS EXHIBIT

THAT
HAS BEEN OMITTED BECAUSE IT IS BOTH (I) NOT MATERIAL AND

(II)
WOULD BE COMPETITIVELY HARMFUL IN PUBLICLY DISCLOSED.

 

Executive
Summary 

 

 

Introduction:

 

Pharmaceutics
International, Inc. (Pii) is a solutions-oriented, science-driven Contract Development and Manufacturing Organization (CDMO),
with over 25 years of proven success in providing dosage form development and cGMP manufacturing services to the global biopharmaceutical
industry. Through continuous Investment and Innovation, Pii strives to be the preferred partner of choice for both injectable
and oral delivery drug products. Providing outstanding service and value, combined with our experience and relevant expertise,
makes Pii uniquely qualified to support product success for our partners.

 

Pii
Delivers Strong Value to its Partners:

 

A
Sustainable Business Partner:

 

	 	●	Over
    25 years of product development, regulatory approval and commercial production success
	 	●	Foundation
    in Pharmaceutics Know-How, applied to all programs and products 
	 	●	Broad
    partner base ranging from virtual and emerging Pharma to multi-national organizations
	 	●	Continued
    capital investments ($125M since 2016) with planned facility expansions

 

Compelling
Facilities:

 

	 	●	Over
    360,000 square feet of state-of-the-art product development and cGMP manufacturing space
	 	●	Containment
    suites for handling high potency compounds and hormones
	 	●	Formulation
    development center-of-excellence and fully-equipped analytical laboratories – all service offerings located in Hunt
    Valley, MD
	 	●	Registered
    with the DEA for Schedule I-V Controlled Substances

 

Compliant
Quality Systems & Processes:

 

	 	●	Ongoing
    investments & improvements toward the highest quality & compliance standards
	 	●	FDA,
    MHRA, EMA inspected facilities with 11 new product approvals since 2017
	 	●	Audit
    history with Regulatory Agencies and Partners 

 

Science
& Innovation Driven:

 

	 	●	Highly
    skilled team of seasoned industry leaders
	 	●	Unparalleled
    depth of scientific training, project management and enterprise-wide experience brought to every program and partner
	 	●	Solutions
    provider with an unwavering commitment to exceeding every partners’ expectations 

 

Flexible
& Reliable: 

 

	 	●	Product
    development tailored to the characteristics of the API and partners’ objectives
	 	●	Project
    timelines driven by agreed upon milestones and development strategies
	 	●	Demonstrated
    speed to Clinic as well as sustainable Commercial supply

 

    	27AIM01.01
	December 22, 2020	Page 2 of 27
	 	CONFIDENTIAL	 

    	 

    

 

Primary
Contacts 

 

 

	Name	 	Title	 	Phone
    Number	 	Email
    Address
	Kevin Kelly	 	Head of Sales	 	[***]	 	[***]
	 	 	 	 	 	 	 
	Devan Patel	 	Sr. Director,
    Project Management	 	[***]	 	[***]
	 	 	 	 	 	 	 
	Trish Petty	 	Accounts Receivable
    Billing/Collections Specialist	 	[***]	 	[***]

 

    	27AIM01.01
	December 22, 2020	Page 3 of 27
	 	CONFIDENTIAL	 

    	 

    

 

This
proposal is comprised of three sections, which together are this “Agreement”:

 

	I.	Project
    Definition and Scope
	II.	Timing
    and Project Initiation
	III.	Costs
	IV.	Legal
    and Signatures

 

Quotation
is valid for thirty (30) days

 

I.
Project Definition and Scope

 

AIM
ImmunoTech Inc., (“Client” or “Customer”) requests Pharmaceutics International, Inc., (“Pii”)
to perform technical transfer supporting cGMP manufacturing services of Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL for
AIM ImmunoTech, Inc.

 

Indication:
Severely debilitated patients with chronic fatigue syndrome (cfs)

 

Intended
Country of Distribution: United States

 

“Product”
in this Agreement refers to “Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL”

 

Active
Pharmaceutical Ingredient (“API”) refers to “Rintatolimod”

 

API
Handling: Store at “-20°C”

 

Finished
Product Handling: Store at “Store at 2-8°C”

 

	1.	Environmental
    Health and Safety (EH&S) Assessment

 

	 	1.1	Pii
    will conduct an environmental health and safety (EH&S) assessment. If a certifiable toxicologist report that includes
    both Occupational Exposure Limit (OEL) and Acceptable Daily Exposure (ADE) values cannot be provided by AIM ImmunoTech Inc.,
    then an outside toxicologist will assess the API and calculate both an OEL and ADE value. The OEL value will be used to assess
    the level of containment needed to safely manufacture the Product, per Pii’s SOP. The ADE value, will be used to calculate
    an acceptable residual limit per Pii’s SOP for cleaning and to evaluate potential for cross-contamination.

 

    	27AIM01.01
	December 22, 2020	Page 4 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	2.	Materials
                                         

         

        Intended
        Country of Distribution: United States

 

	 	2.1	AIM
    ImmunoTech Inc. will supply:

 

	 	●	Background
    Summary
	 	●	API
    with Certificate of Analysis (“C of A”), Safety Data Sheet (“SDS”), Bovine Spongiform Encephalopathy/Transmissible
    Spongiform Encephalopathy Statement (“BSE/TSE”), Melamine statement and all other supporting documentation available
	 	●	The
    cost of API
	 	 	Poly
    I is $[***] per gram
	 	 	Poly
    C12U is $[***] per gram
	 	●	Analytical
    Methods 
	 	●	Reference
    standard and impurities 
	 	●	Drug
    product technical data package if any 
	 	●	API
    DMF and/or technical data package from the manufacturer or the Client, if any 
	 	●	Safety
    Information: Investigator's Brochure or Summaries of Pre-clinical safety/activity data, where available, including: 

	 	○	Safety
    Pharmacology Studies
	 	○	Mutagenicity
    Studies (e.g. AMES test
	 	○	Non-GLP
    and/or GLP acute and sub-chronic/chronic toxicity trials in any
	 	○	Pharmacology
    Summary
	 	○	Teratogenicity
    Studies 

	 	● 	The
    above information will be used to determine allowable residual carryover limits used in cleaning validation and to determine
    the appropriate level of containment and personal protection equipment (PPE) required.

 

	 	2.2	Pii
    will order and invoice to AIM ImmunoTech Inc.: (Reference under Cost Sections)

 

		●	API
    (If requested by AIM ImmunoTech Inc.)
		●	Excipients
		●	Packaging
    Components
		●	Analytical
    Columns
		●	Tooling,
    Change Parts (if required)
		●	Capital
    Equipment (if needed with AIM ImmunoTech Inc.'s authorization)
		●	Personal
    Protective Equipment (if required)
		●	Disposables

 

    	27AIM01.01
	December 22, 2020	Page 5 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	 	2.3	API
    - Pii will receive with manufacturer’s Certificate of Analysis (C of A) and will release from vendor CoA for use
    in R&D Lab Batch(es). Pii will perform Full Release per approved specification for use in cGMP batch(es).
	 	2.4	Excipients
    - Pii will receive with manufacturer’s Certificate of Analysis (C of A) and will release from vendor CoA for use
    in R&D Lab Batch(es). Pii will perform Full Release per approved specification for use in cGMP batch(es).
	 	2.5	Packaging
                                         - Pii will receive with manufacturer’s Certificate of Analysis (C of A) and
                                         will release from vendor CoA for use in R&D Lab Batch(es). Pii will perform Full
                                         Release per approved specification for use in cGMP batch(es).

         

        Any
        item or service (e.g. API, excipient, analytical testing) specified by AIM ImmunoTech Inc. that differs from Pii's provider,
        requires a GMP evaluation by AIM ImmunoTech Inc., that the supplier of the item or service has been found to be in substantial
        compliance with the applicable national regulations (e.g. US, EU, JP). If applicable, the Pii Master Quality Agreement
        will elaborate further on this and other "Quality Agreement" requirements.

 

	3.	Analytical
    Support

 

	 	3.1	Evaluation
    of each test in regards to validation requirements: Pii will review analytical methods proposed and conduct an evaluation
    to assess the levels and types of validation that are phase appropriate for the new drug product for each test required. This
    assures compliance with regulatory guidance depending on the phase of research. AIM ImmunoTech Inc. needs to allow for four
    to five weeks at the initiation of the project for analytical methods evaluation.
	 	3.2	Cleaning
    Method: Pii will develop an analytical method to evaluate the effectiveness of the cleaning procedure and perform validation
    of the analytical method. This includes recovery studies from materials similar to the surfaces of cGMP equipment that is
    to be used for this program.
	 	3.3	API
    Methods: Pii will review the manufacturer’s C of A and methods. Pii will perform ID and Micro only on the incoming
    Drug substance/Polymers based on package received from AIM ImmunoTech Inc.: 

 

		●	Microbial
    enumeration (USP 61)
		●	Bacterial
    Endotoxin
		●	ID
    by UV

 

    	27AIM01.01
	December 22, 2020	Page 6 of 27
	 	CONFIDENTIAL	 

    	 

    

  

	 	3.4	Drug
    Product Methods: Pii will perform Method Transfer (where applicable), and will perform USP Method Verification(where applicable)
    of the following methods: 

 

	 	●	Bacterial
    Endotoxin
	 	●	Sterility

 

	 	 	USP
    testing is expected to be conducted for these tests. Any product specific testing or compendial testing outside of USP will
    require additional development and testing procedures. 

	 	3.5	Analytical
    Method: perform ID and Micro Only Protocols for the drug product will be prepared by Pii and approved by AIM ImmunoTech
    Inc. if required.
	 	3.6	Method
    Transfer

	 	●	Method
    Transfer Pre-requisite:

	 	○	Method
    has been established
	 	○	Method
    has been validated
	 	○	Validation
    report/package is available for review
	 	○	Method
    transfer process will be supported by the laboratory where the method had been established. Method precision samples will
    be tested concurrently by Pii and this laboratory.

 

	4.	Technical
                                         Transfer/Process Development

        Number
        of Primary Prototype(s): 1 experiment

 

	 	4.1	Pii
    will review the technical data package supplied by AIM ImmunoTech Inc. and will develop a plan outlining the process development
	 	4.2	Pii
    will develop formulation(s) based on the agreed-to Formulation Development Plan.
	 	4.3	Pii
    will perform: 

	 	●	Cleaning
    activities/requirements to support a Quality Risk Management Plan (QRMP) to ensure cross contamination controls are in place
    for cGMP production.

 

	 	4.4	Based
    upon the data generated, Pii and AIM ImmunoTech Inc. will make a decision on how to proceed on the formulation and process.

 

    	27AIM01.01
	December 22, 2020	Page 7 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	5.	(OPTIONAL)
                                         Manufacture of Technical Transfer Batch

        Strengths:
        2.5mg/mL

        Theoretical
        Batch Size: up to 750L

        No.
        Batches: 1

 

	 	5.1	Pii
    will manufacture 1 technical transfer batch.
	 	5.2	Material
    Testing Requirements: See Section 2.
	 	5.3	All
    manufacturing activities will be recorded in a batch record.
	 	5.4	Pii
    will use equipment train based on the proposed process from Section 6.
	 	5.5	Pii
    will perform the following in-process tests:

 

	 	●	Density
	 	●	Bioburden
	 	●	Osmolality
	 	●	UV

 

	 	5.6	Pii
    will perform the following finished product tests:

 

	 	●	Bacterial
    Endotoxin
	 	●	Sterility

 

	 	5.7	Based
    upon the data generated, Pii and AIM ImmunoTech Inc. will mutually agree on how to proceed.

 

	6.	Manufacture
                                         of Submission Batches

        Strength:
        2.5mg/mL

        Theoretical
        Batch Size: up to 750L

        No.
        Batches: 3

 

	 	6.1	All
    materials used for the manufacture of the batches will be fully released by Pii unless otherwise specified by AIM ImmunoTech
    Inc.. See Materials: Section 2.
	 	6.2	Pii
    will prepare master production records (MPR) based on the experience of manufacturing the batch(es). The batch records will
    be approved by AIM ImmunoTech Inc. at least one (1) week prior to the manufacture.
	 	6.3	The
    batches will be manufactured under cGMP conditions as directed in the production records.
	 	6.4	Pii
    will perform the following in-process tests on the active batches: 

	 	●	Density
	 	●	Bioburden

 

	 	6.5	Pii
    will perform the following finished product tests or as per the specifications: 

 

	 	●	Bacterial
    Endotoxin
	 	●	Sterility

 

    	27AIM01.01
	December 22, 2020	Page 8 of 27
	 	CONFIDENTIAL	 

    	 

    

 

EXPLANATORY
NOTE: [***] INDICATES THE PORTION OF THIS EXHIBIT

THAT
HAS BEEN OMITTED BECAUSE IT IS BOTH (I) NOT MATERIAL AND

(II)
WOULD BE COMPETITIVELY HARMFUL IN PUBLICLY DISCLOSED.

 

	7.	Stability
                                         Program for Submission Batches

        No.
        Stability Protocols: 6 protocols [3 batches x 2 configurations] 

        [Upright
        and Inverted]

 

	 	7.1	Stability
    of the Active Packaged Product:

 

	 	●	Pii
    will prepare a protocol for each batch & configuration, which will be approved by the Client. The stability program is
    to be initiated as soon as the batch(es) are manufactured, primary/secondary packaged and each protocol is signed. If additional
    points are needed, they will be billed at the point charge rate.
	 	 	 
	 	●	Sufficient
    samples will be placed on stability to meet the stability protocol requirements. The stability protocols will include the
    following conditions and time point(s):

 

	Conditions	Initial
    *	6
    month	12
    month	18
    month	24
    month	30
    month	36
    month	42
    month	48
    month	54
    month	60
    month
	[***]	 

        m
	 m	 m	m	 m	m	 m	m	m	m	m
	[***]	 	 m	 m	 	 	 	 	 	 	 	 

  

	 	 	x
    – Test (Inverted/Upright) m – Microbial

	 	 	*
    Release data will be used at initial time if stability is initiated within one (1) month from manufacture

 

	 	 	The
    following tests will be performed on the batch(es), if not specified in the approved protocol otherwise:

 

	 	●	Bacterial
    Endotoxin
	 	●	Sterility

 

    	27AIM01.01
	December 22, 2020	Page 9 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	8.	(OPTIONAL)
    Process Validation Studies

 

	 	8.1	Pii
    will prepare validation protocols, based on the engineering batch, which will be reviewed and approved by Eagle Pharmaceuticals,
    Inc. prior to beginning the validation batches.

	 	■	Process
    Validation Protocol will be generated to assess the following:

	 	○	Manufacturing
    process validation
	 	○	Mixing
    Study

	 	■	Evaluating
    the in-process tests/CQA’s

	 	○	In-Process
    testing as per the Batch Record
	 	○	In-Process
    checks for sterility, assay, and impurities for beginning, middle, and end samples for a total of 3 samples.
	 	○	Filtration

	 	■	Filter
    Flush Studies (if not previously performed)

	 	●	Evaluate
    particulate matter, moisture content, assay, impurities for up to 3 samples of appropriate flush volume

	 	○	Sample
    evaluation for filtration step (assumes filter assembly change out) for beginning, middle, and end samples for a total of
    3 samples.
	 	○	Finished
    Product Testing

 

	9.	Project
    Management

 

	 	9.1	The
    project kickoff meeting is the first opportunity for AIM ImmunoTech Inc. and Pii to perform a detailed review of all of the
    items required in making the project successful. In our experience, many clients make scope adjustments at this point of the
    project. It is for this reason that all quotations and project timelines communicated by Pii to AIM ImmunoTech Inc. are subject
    to revision until the project scope is finalized during the project kickoff meeting.
	 	9.2	Pii
    runs each project through project teams. This method has a proven record of success. The personnel selected as team representatives
    will have a direct impact on the level of success of the project. AIM ImmunoTech Inc. and Pii are responsible for selecting
    the appropriate personnel to represent each company. Expectations of members will include team and meeting participation,
    knowledge of the project and plan, maintaining open communication with other team members, following up on requests of the
    team, and building a positive working relationship between companies. Additionally, in order to maintain effective communication
    once a project has been initiated, Pii requests that all AIM ImmunoTech Inc. project inquiries be communicated through the
    Pii project leader. 

 

    	27AIM01.01
	December 22, 2020	Page 10 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	 	●	Initiation
    of signed Agreement

	 	○	Business
    Development Kick-Off
	 	○	Review
    Agreement
	 	○	Background
    information from Business Manager
	 	○	Additional
    requirements

	 	●	Internal
    Pii Kick-Off meeting

	 	○	Functional
    Team Members identified
	 	○	Review
    Agreement
	 	○	Assemble
    needs/concerns

	 	●	Kick-Off
    Meeting with AIM ImmunoTech Inc.

	 	○	Review
    Agreement
	 	○	Agenda
    driven
	 	○	High-level
    timeline presented
	 	○	Agree
    to communication strategy
	 	○	Agree
    to timeline/schedule

	 	●	Ongoing
    Project Management

	 	○	Agree
    to regular project meetings

	 	■	Agendas
	 	■	Timelines
	 	■	Meeting
    notes

	 	○	On-going
    monitoring/reporting
	 	○	Billing/review
    & sign off on invoices
	 	○	Initiate
    stability protocols

 

	 	9.3	Provided
    that there are ongoing billable activities taking place (excluding stability), Pii will provide Project Management support
    to monitor the progress of the project against established timelines and will provide AIM ImmunoTech Inc. with updates. The
    Project Manager will coordinate with Pii’s project team and AIM ImmunoTech Inc. and commit up to two 45 minute teleconference
    meetings per month. The fee for Project Management is included in Section II: Cost. 

 

    	27AIM01.01
	December 22, 2020	Page 11 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	10.	General
    Support

 

	 	10.1	cGMP
    batch records will be prepared by Pii and approved by AIM ImmunoTech Inc. QA. Changes to the batch record(s) one (1) week
    prior to manufacturing could lead to additional charges.
	 	10.2	Pii
    Quality Assurance department will audit and ensure cGMP compliance for the manufacturing of the batches.
	 	10.3	Waste
    from the manufacturing process will be incinerated. Any unused excipients will be destroyed after expiry date, as it arises.
	 	10.4	Pii
    will prepare necessary supporting CMC documentation for NDA submission using standard Pii report protocols. 
	 	10.5	Support
    for FDA deficiency letter responses and/or information requests will be charged at $[***]/hour. This may involve personnel
    from QA, technical operations, project management and/or executive oversight for these functions. Deficiency letter items
    may include revisions of test methods, drug substance specifications and drug product specifications, batch records, and technical
    writing support.
	 	10.6	Dedicated
    excipients and packaging components will be destroyed or shipped back to AIM ImmunoTech with prior authorization, three (3)
    months after completion of the manufacturing campaign(i.e., after completion of all 3 registration batches) . AIM ImmunoTech
    Inc. will be charged an incineration fee of $[***] per pallet for the destruction of materials. If however, AIM ImmunoTech
    Inc. elects to collect materials from Pii a $500 charge will apply.
	 	10.7	If
    AIM ImmunoTech Inc. elects for Pii to store finished product longer than three (3) months then there will be a storage charge
    of $[***]per month per pallet.

 

	II.	Timing
    and Project Initiation:

 

The
project will commence upon receipt of the signed Agreement, the drug substance, and the initiation payment, thereafter payments
are due thirty (30) days from the date of invoice. Unpaid balances shall bear interest at a rate of 18% per annum unless determined
not to be properly payable.

 

A
timeline will be provided once the Agreement is signed and the project kick-off meeting has been completed between Pii and the
AIM ImmunoTech Inc..

 

    	27AIM01.01
	December 22, 2020	Page 12 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	III.	Cost:

 

The
cost table below lists the cost of each step of the program. If Pii and the AIM ImmunoTech Inc. mutually agree that any scope
changes or additional work is required, these additional activities will be covered under separate change order.

 

	Cost
    Table Estimates
	Pii
    Activity	Estimates	Subtotal
	1.	EH&S
    Assessment	 	 
	●   Environmental
    Health and Safety (EH&S) Assessment and QRMP	$[***]	$[***]
	2.	Analytical
    Support	 	 
	●   Cleaning
    – Develop and Validate	$[***]	$[***]
	●   Risk
                                         Assessment of Analytical Methods

        i)
        Review Validation Report 

        ●   API
        Methods – Perform ID and Micro Testing only on the API’s per section 3.3

        ●   Drug
        Product Methods – Method Transfer and USP qualification per section 3.4
	$[***]
	●   Documentation

        -
        Prepare Analytical Method Protocols

        -
        Reports (as required)

        -
        Methods/Specifications/SOP

	3.	Materials
    (Estimate – Actuals will be billed)	 	 
	API:

        ●   Full
        release testing will be charged at $12,000 / lot 

        ●   ID
        release at $3,500 / lot

        ●   Assumes
        the two polymers (APIs) will require ID and Micro only. Assumes only 3 lot of each drug substance. Assuming 3 lots of
        each drug substance x 2 APIs(polymers) x $3,500/lot =$21,000
	$[***]

         
	*Section
    3 is an estimate of material testing costs only. Actuals will be invoiced based upon usage or program specific materials being
    tested.
	Excipients:

        ●   USP/NF
        and EP/JP full release testing will be charged at $8,500 / lot 

        ●   PII
        will use stock excipients where applicable and may opt to charge on a per kg basis

        ●   Assumes
        use of 4 excipients with 1 lot only being full tested: Sodium Phosphate Dibasic-7-Hydrate, Sodium Phosphate Monobasic,
        Sodium Chloride, Magnesium Chloride Hexahydrate 

        ●   ID
        release at $1,500 / lot

         

         
	$[***]

 

    	27AIM01.01
	December 22, 2020	Page 13 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	Cost
    Table Estimates
	Pii
    Activity	Estimates	Subtotal
	Packaging
                                         Components: 

        ●   USP/NF
        full release testing will be charged at $[***]/ lot 

        ●   PII
        will use stock components where applicable and may opt to charge on a per unit basis

        ●   Assumes
        one lot of vials, stoppers, and flip-off seals being fully released

        ●   ID
        release at $[***]/ lot
	$[***]	 
	Note:

        ●   Any
        outsourced testing not conducted at Pii for API, Excipients, or Packaging Components will be invoiced as a pass through
        + handling costs as per the terms of the agreement. 
	 
	4.	Tech
    Transfer/Process Development	 	 
	●   R/D
                                         Laboratory Manufacturing up to 5 L (1 experiment, notebook documentation)

        ●   Studies
        may include: 

        ○   Cleanability
        Assessment (support QRMP)

        ●   Analytical
        Support (testing as per section 4.4, if required)
	$[***]	$[***]
	5.	OPTIONAL:
    Manufacture of Feasibility Batch	 	 
	●   Manufacturing
                                         of 1 batch ($[***]per batch)

        ●   In-process
        testing

        ●   Finished
        Product Testing
	$[***]	 
	●   Documentation

        ●   Manufacturing
        Protocol 

        ●   Draft
        Batch Records)

	6.	Manufacture
    of Registration Batches	 	 
	●   Manufacturing
                                         of 3 cGMP Registration batches ($183,750 per batch)

        ●   In-process
        testing

        ●   Finished
        Product Testing
	$[***]	$[***]
	●   Documentation
                                         (#1)

        ●   Master
        Batch Records (MBR)

        ●   Certificate
        of Analysis and Certificate of Compliance

	●   (OPTIONAL)
                                         Process Validation Studies ($30,000 for PV studies)

        ●   Perform
        Process Validation Studies as outlined in section 8

        ●   Includes
        Process Validation Master Plan

        ●   Includes
        Process Validation Protocol and Report
	$[***]

 

    	27AIM01.01
	December 22, 2020	Page 14 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	7.	Stability
    Program for Registration Batches	 	 
	Stability
    Programs (3 batches placed on stability at same time) 	 	 
	●   Stability
                                         60M Program 2-8C

        ●   Upright

        ○   Microbial
        Testing (10 pull points for upright x 3 batches x $[***])

        ●   Inverted:
        

        ○   Microbial
        Testing (10 pull points for inverted x 3 batches x $[***])

        ●   Stability
        12M Program 25C

        ●   Inverted:
        

        ○   Microbial
        Testing ( 2 pull points for inverted x 3 batches x $[***]))
	$[***]	$[***]
	8.	Project
    Management	 	 
	●   Project
                                         Timelines

        ●   The
        Project Manager will coordinate with Pii’s project team and the Client and commit up to two 45-minute teleconference
        meetings per month, and up to one quarterly face-to-face meeting.
	$[***]	$[***]
	9.	General
    Support 	 	 
	●   Administrative
                                         support (i.e., Change Controls)

        ●   Supply
        Chain Management (i.e., phase appropriate vendor qualification, procurement, sample handling)
	$[***]	$[***]
	 	 	 
	Sub-Total:	$[***]
	Estimated
                                         Costs for Pass Through:

        (for
        budgeting purposes only; Estimated at 15% of sub-total. Actuals will be billed as noted herein and excludes CAPEX that
        may be required)
	$[***]
	Materials
    Estimate (section 3):	$[***]
	 	 	 
	Estimated
    Project Total:	$[***]

 

In
addition to the above costs:

 

	 	●	AIM
    ImmunoTech Inc. shall pay to Pii upon receipt of Pii’s invoice by AIM ImmunoTech Inc. for all non-capital materials
    (excipients, packaging components, HPLC columns, analytical standards, microbial testing and tooling) used in the study at
    cost plus 10%. Pii shall obtain AIM ImmunoTech Inc.’s prior written approval for any expenditure greater than $[***].
    For high priced items more than $5,000, Pii will charge cost plus 5% to AIM ImmunoTech Inc.. Pii shall invoice AIM ImmunoTech
    Inc. for all reasonable and normal out-of-pocket travel-related expenses, including airfare, room & board, car rental
    and the like, of Pii during any technology transfer phase or project update meetings requested in advance by AIM ImmunoTech
    Inc.. 
	 	 	 
	 	●	Any
    OOS investigation and testing that is not considered to be Pii laboratory error after mutual review by both parties will be
    billed at a rate of $[***]/hour. Anything over 40 hours must be pre-approved by AIM.

 

    	27AIM01.01
	December 22, 2020	Page 15 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	 	●	Any
    excipients, materials or components ordered as specialized items (not standard stock items) for use in the project will be
    invoiced in full to AIM ImmunoTech Inc.. A handling fee will apply as noted above. Payment is due within 30 days of receipt
    of invoice by AIM ImmunoTech Inc.. 
	 	 	 
	 	●	Any
    remaining stock of specialized items ordered on behalf of AIM ImmunoTech Inc. or shipped to Pii by AIM ImmunoTech Inc. will
    be shipped to AIM ImmunoTech Inc. upon notification by Pii. AIM ImmunoTech Inc. will be solely responsible for cost of shipment
    and a shipment preparation fee of $[***] will be applied.
	 	 	 
	 	●	Shipments
    outside of Agreement work scope will be invoiced as per the following:
	 	 	 
	 	a)	Shipment
    requests with three (3) day notice or more will be charged at $[***] plus shipping costs and a 10% service charge on shipping.
	 	 	 
	 	b)	Shipment
    requests with two (2) day notice will be charged at $[***] plus shipping costs and a 10% service charge on shipping.
	 	 	 
	 	c)	Shipment
    requests with twenty-four (24) hour notice will be charged at $[***] plus shipping costs and a 10% service charge on shipping.

 

Non-Stability
Payment Schedule

 

	Milestones	Activity	Amount
    Due
	 	Contract
                                         Initiation (non-refundable) for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

        ●   Section
        1 @ $[***]

        ●   Section
        2 @ $[***]

        ●   Section
        4 @ $[***]

        ●   Section
        6 @ $[***]

        ●   Section
        8 @ $[***]

        ●   Section
        9 @ $[***]

         

        Please
        remit Contract Initiation payment along with signed Agreement to Pii.

         
	$[***]
	 	Initiation
                                         of Manufacture of Registration Batch #1 for Ampligen (Rintatolimod) Sterile Solution
                                         2.5mg/mL

         

        ●   Batch
        Record Issued to Manufacturing/Production at Pii

         
	 

        $[***]

	 	Completion
                                         of Manufacturing of Registration Batch #1 for Ampligen (Rintatolimod) Sterile Solution
                                         2.5mg/mL

         

        ●   Provision
        of Pii QA Reviewed Batch Record

         
	$[***]

 

    	27AIM01.01
	December 22, 2020	Page 16 of 27
	 	CONFIDENTIAL	 

    	 

    

 

 

	 	Disposition
                                         of Registration Batch #1 for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        ●   Pii
        QA Disposition Document for Batch

         

         
	$[***]
	 	Initiation
                                         of Manufacture of Registration Batch #2 for Ampligen (Rintatolimod) Sterile Solution
                                         2.5mg/mL

         

        ●   Batch
        Record Issued to Manufacturing/Production at Pii

         
	 

        $[***]

	 	Completion
                                         of Manufacturing of Registration Batch #2 for Ampligen (Rintatolimod) Sterile Solution
                                         2.5mg/mL

         

        ●   Provision
        of Pii QA Reviewed Batch Record

         
	 

        $[***]

	 	Disposition
                                         of Registration Batch #2 for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        ●   Pii
        QA Disposition Document for Batch

         
	 

        $[***]

	 	Initiation
                                         of Manufacture of Registration Batch #3 for Ampligen (Rintatolimod) Sterile Solution
                                         2.5mg/mL

         

        ●   Batch
        Record Issued to Manufacturing/Production at Pii

         
	 

        $[***]

	 	Completion
                                         of Manufacturing of Registration Batch #3 for Ampligen (Rintatolimod) Sterile Solution
                                         2.5mg/mL

         

        ●   Provision
        of Pii QA Reviewed Batch Record

         
	 

        $[***]

	 	Disposition
                                         of Registration Batch #3 for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        ●   Pii
        QA Disposition Document for Batch

         
	 

        $[***]

	OPTIONAL	Initiation
                                         of Manufacturing of Feasibility Batch of Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL
                                         ($[***])

         

        ●   Draft
        Batch Record Sent to AIM ImmunoTech for Review

         
	 
	OPTIONAL	Completion
                                         of Manufacturing of Feasibility Batch of Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL
                                         ($[***])

         

        ●   Draft
        of the Executed Batch Record Sent to AIM ImmunoTech for Review

         
	 
	OPTIONAL	Initiation
                                         of Process Validation Protocol for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL
                                         ($[***])

         

        ●   Draft
        of Process Validation Protocol sent to AIM ImmunoTech
	 
	OPTIONAL	Completion
                                         of Process Validation Protocol for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL
                                         ($[***])

         

        ●   Draft
        of the Executed Process Validation Protocol sent to AIM ImmunoTech
	 
	TOTAL	 	$[***]

 

    	27AIM01.01
	December 22, 2020	Page 17 of 27
	 	CONFIDENTIAL	 

    	 

    

 

Stability
Pull Point Cost and Tables:

 

Stability
for the active Registration Batches will be charged per pull point including testing and storage. If samples stored at 30°C/65%RH
are tested, they will be charged per pull point.

 

Stability
Study Payment Schedule for Registration Batches

 

	Invoice
    Issue Date	Description	Amount
    Due
	Stability

        Initiation
	Stability
                                         Initiation Fee for the Active Registration Batches for Ampligen (Rintatolimod) Sterile
                                         Solution 2.5mg/mL- (non-refundable up to six months)

         

        Microbial:
        2-8°C (1 pull points x 2 pkg. config. x $[***])

        Microbial:
        25°C (1 pull point x 1 pkg. config x $[***])

         
	$[***]
	 

        Month
        14
	12th
                                         month stability pull points for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        2-8°C (1 pull points x 2 pkg. config. x $[***])

        Microbial:
        25°C (1 pull point x 1 pkg. config x $[***])

         
	$[***]
	Month
    20	18th
                                         month stability pull point for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        (1 pull points x 2 pkg. config. x $[***])

         
	$[***]
	Month
    26	24th
                                         month stability pull point for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        (1 pull points x 2 pkg. config. x $[***])

         
	$[***]
	Month
    32	30th
                                         month stability pull point for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        (1 pull points x 2 pkg. config. x $[***])

         
	$[***]
	Month
    38	36th
                                         month stability pull point for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        (1 pull points x 2 pkg. config. x $1,100)

         
	$[***]

 

    	27AIM01.01
	December 22, 2020	Page 18 of 27
	 	CONFIDENTIAL	 

    	 

    

 

	Month
    44	42nd
                                         month stability pull point for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        (1 pull points x 2 pkg. config. x $[***])

         
	$[***]
	Month
    50	48th
                                         month stability pull point for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        (1 pull points x 2 pkg. config. x $[***])

         
	$[***]
	Month
    56	54th
                                         month stability pull point for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        (1 pull points x 2 pkg. config. x $[***])

         
	$[***]
	Month
    62	60th
                                         month stability pull point for Ampligen (Rintatolimod) Sterile Solution 2.5mg/mL

         

        Microbial:
        (1 pull points x 2 pkg. config. x $[***])

         
	$[***]
	 	Total
    for each batch	$[***]
	 	Total
    for 3 Registration batches	$[***]

 

	NOTE:	Release
    testing will be considered time 0; however, if the product is not set within thirty (30) days of manufacturing then the initial
    time point will be required. This cost is not included in this table; therefore, Pii will invoice the AIM ImmunoTech Inc.
    separately for the initial time point.

 

    	27AIM01.01
	December 22, 2020	Page 19 of 27
	 	CONFIDENTIAL	 

    	 

    

 

IV.
Legal and Signatures

 

1.
CONFIDENTIALITY

 

The
parties acknowledge that the Confidentiality Agreement between the parties dated August 13th, 2020 (the "Confidentiality
Agreement") shall continue to govern the parties' respective obligations to one another with regard to the confidential information
each has disclosed to the other and shall continue to disclose to the other in connection with this Agreement. The parties' respective
obligations with regard to any such confidential information shall survive the termination of this Agreement in accordance with
the terms of the Confidentiality Agreement.

 

2.
OWNERSHIP OF MATERIALS AND INFORMATION

 

All
data, information, reports and any and all related documentation, which are developed, generated or derived, directly or indirectly,
by Pii (or by any subcontractor or agent of Pii) for Customer during the course of this Agreement (the "Data"), and
all inventions, discoveries, formulae, procedures, any other intellectual property, and any improvements thereto, whether patentable
or not, which result or evolve directly, during the course of this Agreement or as a result of the services performed hereunder
by Pii (or by any subcontractor or agent of Pii) (together with any Data relating thereto, the "Inventions"), shall
be and remain the sole and exclusive property of Customer if related to the Product; provided, however, any Inventions made, developed
or discovered solely by Pii (or by any subcontractor or agent of Pii) that constitute an invention, improvement or other intellectual
property relating generally (i.e., not solely to the Product) to drug delivery technology, formulation, analysis or manufacturing
process of pharmaceutical products (together with any Data relating thereto, "Pii Inventions"), shall be and remain
the property of Pii, and Pii hereby grants to Customer a perpetual, irrevocable, worldwide, royalty-free, exclusive license (with
the right to sublicense) to develop, use, manufacture and sell such Pii Inventions in connection with the development, use, manufacture
and sale of the Product, provided, further that the foregoing license shall not be exclusive with respect to a Product that is
a non-patented (or non-patent pending) compound. Except as specifically set forth herein, neither Pii nor its employees or agents
shall have or acquire any right, title or interest in Inventions. If related to the Product, Pii shall promptly disclose in writing
to Customer any Inventions. If related to the Product and to the extent not Pii Inventions, Pii shall assign any and all rights
in any Inventions to Customer and shall assist Customer, at no cost to Pii, in perfecting its rights in such Inventions.

 

3.
TERMINATION

 

Customer,
but not Pii, may terminate this Agreement at any time and for any reason at the sole discretion of Customer upon thirty (30) days
advance written notice to Pii. Upon such termination, Customer shall pay all costs incurred by Pii for work performed prior to
the effective date of termination, provided Pii provides written evidence that such costs have been incurred and such work performed.
Either party may terminate this Agreement if the other party is in default of any of its material obligations set forth herein,
and such breach is not cured within sixty (60) days, which time period shall be reduced to ten (10) days for any default of any
monetary obligation, after the breaching party's receipt of a written notice from the non-breaching party that describes such
breach in reasonable detail.

 

    	27AIM01.01
	December 22, 2020	Page 20 of 27
	 	CONFIDENTIAL	 

    	 

    

 

4.
NOTIFICATION OF SUB-CONTRACT LABS

 

Insofar
as Pii anticipates using contract laboratories for some of the activities described in this Agreement, Pii shall notify Customer
when use of such contract laboratories becomes necessary. Pii shall be responsible for assuring that any contract lab used complies
with Pii's obligations hereunder.

 

5.
WARRANTIES

 

Pii
warrants and covenants that it will perform all of its obligations under this Agreement in accordance with all applicable United
States laws and regulations. Without limiting the generality of the foregoing, Pii warrants and covenants that its services hereunder
shall be performed in conformity with the requirements for its services set forth in Section A, Project Definition and Scope above
(the "Requirements") and all Product will be manufactured in compliance with current good manufacturing practices set
forth by the United States Food and Drug Administration ("cGMP"). Pii also warrants and covenants that, to Pii's actual
knowledge, the performance of Pii’s services hereunder (including manufacture of Product) will not infringe or misappropriate
any intellectual property right of any third party, except to the extent such services are provided in accordance with any the
Requirements or other written instructions given by Customer. Except as specifically set forth in this Agreement, Pii MAKES
NO EXPRESS OR IMPLIED WARRANTIES OR COVENANTS, STATUTORY OR OTHERWISE, CONCERNING THE DELIVERABLES. WITHOUT LIMITING THE FOREGOING,
Pii MAKES NO IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE REGARDING THE DELIVERABLES. 

 

6.
ACCEPTANCE OF SHIPMENTS; NON-CONFORMANCE

 

(a)
Pii shall have the right not to deliver Product to Customer if Pii determines that such Product is non-conforming or is otherwise
defective ("Non-Deliverable Product"). As long as, with respect to any batch of Non-Deliverable Product, Pii has performed
its Services in accordance with the terms and conditions of this Agreement: (i) Pii shall be entitled to payment for its Services
actually performed hereunder, and (ii) Pii shall not be responsible for the cost of replacement API required for Pii's replacement
of Non-Deliverable Product.

 

    	27AIM01.01
	December 22, 2020	Page 21 of 27
	 	CONFIDENTIAL	 

    	 

    

 

(b)
Unless otherwise instructed by Customer in writing, Pii will not deliver any batch to Customer unless Pii provides to Customer
a Certificate of Analysis on or before the date of delivery that certifies that the Product meets the product specifications for
the Product set forth in this Agreement (a "COA"). Within thirty (30) days following delivery to Customer, Customer
shall have the right to give Pii notice of rejection of any Product that, in whole or part, fails to conform to the COA. Upon
receipt of a notice of rejection from Customer, Pii shall conduct an internal investigation. Customer shall at all times supply
Pii with any evidence it has that relates to whether any Product delivered to Customer by Pii is non-conforming with the COA.
Failure by Customer to give timely notice of rejection shall constitute acceptance by it of the shipment to which the notice of
rejection would have otherwise applied. In the event of any disagreement between Pii and Customer relating to Product non-conformance
with the COA, the parties will use good faith efforts to reach an amicable resolution of such disagreement. In the event that
resolution cannot be reached, a mutually agreed upon, neutral, independent third party laboratory shall be brought in to resolve
the disagreement upon the request of either party. The results of the independent laboratory shall be binding on the parties and
non-appealable, and the cost of such independent laboratory shall be borne by the party hereunder determined by the independent
laboratory to be the non-prevailing party in such disagreement. Subject to the provisions of Section 7(d) below, for any Product
properly rejected pursuant to this Section 6(b), such Product shall be returned by Customer to Pii at Pii's expense and shall
be replaced by Pii at no extra charge to Customer, subject to the Customer's provision to Pii of materials required pursuant to
the terms of this Agreement for Pii's services, including any active pharmaceutical ingredient ("API"); and in the event
Pii cannot replace such returned Product, it shall refund to Customer the amount paid therefor.

 

(c)
Notwithstanding anything to the contrary contained herein, as long as Pii has performed its Services in accordance with the terms
and conditions of this Agreement, Pii shall not be responsible for the stability of any Product.

 

7.
INDEMNIFICATION

 

(a)
Customer shall indemnify, defend and hold harmless Pii, and Pii’s affiliates, and its and their stockholders, directors,
officers, employees and agents from and against any and all claims, losses, liabilities, lawsuits, proceedings, costs and expenses,
including without limitation, reasonable attorney’s fees and the cost of recalls arising out of or in connection with: (i)
injuries and/or death to humans resulting from the use of any materials provided to Pii by or on behalf of Customer (including
all manufactured products or materials resulting from the provision of Pii's services hereunder), including, without limitation,
claims based on negligence, warranty, strict liability or any other theory of product liability or a violation of applicable laws
or regulations, except to the extent that such injuries or violations are the result of Pii’s negligence or willful misconduct
in performing the services hereunder or breach of any covenant or agreement hereunder, (ii) negligence or willful misconduct in
advertising, labeling, or improper handling and storage of Customer-provided materials or Product by any person other than Pii,
(iii) any instructions given by Customer in connection with any materials provided to Pii by or on behalf of Customer or Pii's
services provided hereunder, (iv) any misrepresentation by Customer or breach by Customer of any covenant, representation, warranty
or agreement hereunder or (v) patent infringement relating to any materials provided to Pii by Customer or Pii's services provided
hereunder to the extent that such infringement does not arise as a result of a breach of any representation or warranty of Pii
hereunder.

 

    	27AIM01.01
	December 22, 2020	Page 22 of 27
	 	CONFIDENTIAL	 

    	 

    

 

(b)
Pii shall indemnify and hold harmless Customer and Customer's affiliates, and its and their stockholders, directors, officers,
employees and agents from and against any and all claims, losses, liabilities, lawsuits, proceedings, costs and expenses, including
without limitation, reasonable attorney’s fees and the cost of recalls arising out of or in connection with: (i) any negligence
or willful misconduct of Pii in performing the services hereunder, or (ii) any misrepresentation by Pii or breach by Pii of any
covenant, representation, warranty or agreement hereunder.

 

(c)
In no event shall either party be liable to the other for indirect damages or consequential damages, including without limitation,
lost profits or revenues.

 

(d)
NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, Pii’S TOTAL LIABILITY TO CUSTOMER FOR COSTS OF REPLACEMENT CUSTOMER
MATERIALS INCLUDING API WITH RESPECT TO ANY BATCH OF PRODUCT, FROM ALL CAUSES OF ACTION OF ANY KIND, SHALL BE LIMITED TO AN AMOUNT
EQUAL TO the LESSER OF (i) THE cost of such CUSTOMER MaterialS INCLUDING API for such
batch OR (ii) TEN PERCENT (10%) OF THE AMOUNT PAID OR PAYABLE TO Pii BY CUSTOMER HEREUNDER FOR THE MANUFACTURE OF SUCH BATCH.

 

EACH
PARTY ACKNOWLEDGES THAT THE FOREGOING LIMITATIONS OF LIABILITY REFLECTS THE ALLOCATION OF RISK SET FORTH IN THIS AGREEMENT AND
CUSTOMER ACKNOWLEDGES THAT Pii ADVISED CUSTOMER THAT Pii WOULD NOT HAVE ENTERED INTO THIS AGREEMENT ABSENT SUCH LIMITATIONS OF
LIABILITY.

 

8.
FORCE MAJEURE 

 

Failure
of any party to perform its obligations under this Agreement (except the obligation to make payments) shall not subject such party
to any liability or place it in breach of any term or condition of this Agreement to the other party if such failure is caused
by any cause beyond the reasonable control of such non-performing party, including, without limitation, acts of God, fire, explosion,
flood, drought, war, riot, sabotage, embargo, interruption of or delay in transportation, a national health emergency or compliance
with any order or regulation of any government entity acting with color of right.

 

9.
GOVERNING LAW

 

This
Agreement shall be governed by and construed in accordance with the laws of the State of Delaware (exclusive of its conflicts
of laws provisions).

 

10.
DISPUTES; ARBITRATION

 

(a)
Except as provided in clause (c) below or in Section 6 with respect to disputes regarding non-conforming shipments, all disputes,
controversies or claims arising out of or relating to the operation or interpretation of this Agreement shall be resolved by arbitration
before one arbitrator in accordance with the Commercial Rules of the American Arbitration Association. The arbitrator shall be
jointly selected by the parties. Any award rendered by the arbitrator shall be final and binding upon the parties and judgment
upon any such award may be entered in any court having jurisdiction thereof. Arbitration shall be conducted in Delaware.

 

    	27AIM01.01
	December 22, 2020	Page 23 of 27
	 	CONFIDENTIAL	 

    	 

    

 

(b)
The arbitrator shall award attorneys' fees and other costs of the arbitration, including the fees and expenses of the arbitrator,
to the prevailing party, as determined by the arbitrator.

 

(c)
Notwithstanding anything to the contrary contained in this Section, in the event of any breach or threatened breach of this Agreement
by either party that the other party believes will cause irreparable harm and damage to it, such party shall be entitled to an
injunction, restraining order restraining such breach or threatened breach by the other party and all other remedies which shall
be available to it at law or in equity and the parties irrevocably submit to the jurisdiction of any state or federal court sitting
in the State of Delaware over any such suit, action or proceeding. Customer irrevocably waives, to the fullest extent permitted
by law, any objection that it may now or hereafter have to the laying of the venue of any such suit, action or proceeding brought
in any such court and any claim that any such suit, action or proceeding brought in any such court has been brought in an inconvenient
forum.

 

11.
NON-SOLICITATION AND HIRING

 

During
the term of this Agreement and for a period of two (2) years thereafter, regardless of the reason for such termination, neither
party will, directly or indirectly, without the prior written consent of the other party, solicit or hire, as an employee or independent
contractor, any person who is, or was at any time, employed by or under contract with the other party, unless at the time of the
solicitation or hiring, at least one (1) year shall have elapsed since the person was last employed by or under contract with
the other party.

 

12.
MISCELLANEOUS

 

(a)
Waiver; Integration; Modification. The waiver of the breach of any term or provision of this Agreement shall not operate
as or be construed to be a waiver of any other or subsequent breach of this Agreement. This Agreement sets forth the entire agreement
between the parties with respect to the subject matter of this Agreement and merges and supersedes all prior discussions, agreements
and understandings of every nature between them. No modification or amendment to this Agreement or any other agreement with respect
to the subject matter of this Agreement shall be effective unless stated in writing and signed by the parties.

 

(b)
Construction. Whenever the context may require, the singular form of names and pronouns shall include the plural and vice-versa.
The section and subsection headings are included solely for the convenience of the parties and shall not be used in the interpretation
of this Agreement. No rule of construction shall apply to this Agreement that construes any language, whether ambiguous, unclear
or otherwise, in favor of or against any party based on the party that drafted such language.

 

(c)
Counterparts; Electronic Delivery and Signature. This Agreement may be executed in two or more counterparts, each of which
shall be deemed an original and all of which together shall constitute one and the same instrument, and by electronic (PDF) or
facsimile delivery thereof. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, THE PARTIES EXPRESSLY ACKNOWLEDGE AND AGREE THAT
THIS AGREEMENT MAY BE EXECUTED BY ANY PARTY HERETO VIA ELECTRONIC SIGNATURE, AS DEFINED IN THE MARYLAND UNIFORM ELECTRONIC TRANSACTIONS
ACT, MARYLAND CODE, COMMERCIAL LAW ARTICLE, TITLE 21 (THE “ELECTRONIC TRANSACTIONS ACT”), AND THAT ANY SUCH ELECTRONIC
SIGNATURE SHALL HAVE THE SAME FORCE AND EFFECT AS IF IT WAS AN ORIGINAL SIGNATURE AND SHALL BE BINDING TO THE FULLEST EXTENT PERMITTED
UNDER THE ELECTRONIC TRANSACTIONS ACT.

 

    	27AIM01.01
	December 22, 2020	Page 24 of 27
	 	CONFIDENTIAL	 

    	 

    

 

(d)
Survival. No termination or expiration of this Agreement shall relieve the parties hereto of any obligation hereunder which
by their terms are intended to or may survive the termination or expiration of this Agreement.

 

(e)
Relationship Between Parties. Pii's relationship to Customer shall be that of an independent contractor. No persons engaged
by Pii shall be considered under the provisions of this Agreement or otherwise as an employee of Customer. Nothing contained in
this Agreement shall create or imply the creation of a partnership between Customer and Pii and neither party shall have any authority
(actual or apparent) to bind the other.

 

(f)
Delivery. Pii shall choose a commercially reasonable method of freight shipment and carrier for the deliverables hereunder,
unless Customer has specified a particular method of shipment and carrier to Pii. All costs associated with freight, insurance,
packaging and custom duties shall be paid by Customer. Risk of loss, damage and delay shall pass to Customer Ex Works (Incoterms
2010) Pii's shipping dock.

 

    	27AIM01.01
	December 22, 2020	Page 25 of 27
	 	CONFIDENTIAL	 

    	 

    

 

In
order to process this contract, please provide the following information:

 

 

AIM
ImmunoTech Inc. Financial Set Up Form

 

 

Is
a PO required on invoices? _____________Yes_________________________

If
yes, please provide PO along with signed contract

 

Billing
Contact: _Dean Maude________________________________________________

 

Email
Address: _dean.maude@aimimmuno.com______________________________________________

 

Phone
Number: 352-448-7797, ext 105_______________________________________________

 

Billing
Address:

 

Street:
__2117 SW Highway 484

Corporate
Phone: (352) 448-7797

Corporate
Fax: (352)480-4620

____________________________________________________

 

City
and State: __ Ocala, FL 

______________________________________________

 

Zip
Code: __34473

__________________________________________________

 

Country:
__USA___________________________________________________

 

Email
Address to send invoices: ___ dean.maude@aimimmuno.com _______________________________

 

Any
additional email addresses for invoices (if applicable):

 

_vishwajeet.atodaria@aimimmuno.com___________________________________________________________

 

**Please
provide a completed W-9 to accountsreceivable@pharm-int.com

 

    	27AIM01.01
	December 22, 2020	Page 26 of 27
	 	CONFIDENTIAL	 

    	 

    

 

AGREED
AND ACCEPTED

 

	Pharmaceutics
    International, Inc.	 	AIM
    ImmunoTech Inc.
	 	 	 
	/s/John
    Guthrie	 	/s/
    Peter W. Rodino, III, JD
	John
    Guthrie	 	Authorized
    Agent or Representative
	Chief
    Financial Officer	 	Title:
    Chief Operating Officer
	 	 	 
	12/22/2020
    / 1:09 PM EST	 	12/22/2020/
    3:18 PM EST
	Date	 	Date

 

Please
send the fully executed Agreement as a PDF via email to:

 

Michelle
Ava: [***]

Kevin:
[***]

 

Please
email a copy of the Purchase Order (PO) to: accountsreceivable@pharm-int.com

 

Please
remit Project Initiation payment along with signed Agreement to Pii:

 

Pharmaceutics
International, Inc.

P.O.
Box 6259

Hermitage
PA 16148-0923

 

or
transfer funds to:

[***]

 

    	27AIM01.01
	December 22, 2020	Page 27 of 27
	 	CONFIDENTIALExhibit
10.76

 

EXPLANATORY NOTE: [***] INDICATES
THE PORTION OF THIS EXHIBIT

THAT HAS BEEN OMITTED BECAUSE
IT IS BOTH (I) NOT MATERIAL AND

(II)
WOULD BE COMPETITIVELY HARMFUL IN PUBLICLY DISCLOSED.

 

AGREEMENT

 

The
undersigned:

 

	1.	The
    CENTRE FOR HUMAN DRUG RESEARCH (CHDR), a foundation located in Leiden in the Netherlands having its registered office at Zernikedreef
    8, 2333CL LEIDEN, The Netherlands, and in the present matter lawfully represented by its Chief Executive Officer Prof Dr J. Burggraaf
    and its Chief Scientific Officer Dr Geert Jan Groeneveld (hereinafter referred to as “CHDR”); and
	 	 
	2.
    	AIM
    ImmunoTech Inc. having its registered office at 2117 SW Highway 484, Ocala, Florida 34473, United States, hereby lawfully represented
    by its President and Chief Executive Officer Thomas K. Equels (hereinafter referred to as “Client”), together
    referred to as “Parties” and individually as a “Party”, hereby make this Agreement (“Agreement”)
    dated as of January 8, 2021(the “Effective Date”).

 

Whereas:

 

	 	A.	The
    Client is interested in a Phase I randomized, double-blind study to evaluate the safety and activity of repeated intranasal administration
    of Ampligen® (Poly I:Poly C12U) in healthy subjects;
	 	B.	CHDR
    has the facilities and know-how to carry out such a clinical study;
	 	C.	Client
    and CHDR are, in the performance of this Agreement, in compliance with the obligations arising out of the Good Clinical Practice
    Guidelines and the Dutch Act on Medical-scientific Research Involving Human Subjects.

 

Agree
as follows:

 

Article
1: Definitions and interpretation

 

The
following terms shall have the meaning ascribed to them below:

 

“Agreement”:
means the terms and conditions of this main document, together with all Annexes referred herein.

 

“Effective
Date”: shall mean the date this Agreement takes effect.

 

“Clinical
Trial”: Any investigation in human subjects intended to discover or verify the clinical, pharmacological and/or other pharmacodynamic
effects of an investigational product(s) (the “Product”), and/or to identify any adverse reactions to an investigational
product(s), and/or to study absorption, distribution, metabolism, and excretion of an investigational product(s) with the object of ascertaining
its safety and/or efficacy. The terms clinical trial and clinical study are synonymous. This definition is in line with article 1.12
of the Good Clinical Practice Guideline.

 

“Confidential
Information”: shall mean any information belonging to either Party that is not in the public domain and was disclosed to the other
Party for the purposes described in this Agreement, among which but not exclusively, any Intellectual Property of either Party.

 

“Intellectual
Property (IP)”: any patents, supplementary protection certificates, rights to inventions, registered designs, copyright and related
rights, database rights, design rights, topography rights, trademarks, service marks, trade names and domain names, trade secrets, rights
in unpatented know-how, rights of confidence and any other intellectual or industrial property rights of any nature including all applications
(or rights to apply) for, and renewals or extensions of such rights and all similar or equivalent rights or forms of protection which
subsist or will subsist now or in the future in any part of the world.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 1  of 32

    

 

“Background
IP”: shall mean any Intellectual Property, other than Foreground IP, already owned by Parties on the Effective Date.

 

“Foreground
IP”: shall mean any Intellectual Property is conceived, created or developed by, or by a contractor, either Party in the course
of the work conducted in the course of this Project.

 

Article
2: Scope of the Agreement

 

Client
instructs CHDR, and CHDR accepts this instruction, to conduct research (hereinafter the “Project”) as described in more detail
in the proposal/ protocol entitled: “A Phase I, Randomized, Double-Blind Study to Evaluate the Safety and Activity of Ampligen®
(Poly I:Poly C12U) in Healthy Subjects at Low Risk for Coronavirus Disease-2019 (COVID-19)”, (“the “Protocol”),
which is annexed to this Agreement as Annex 1. The Protocol shall be considered to constitute an integral part of this Agreement. The
Protocol shall establish the means for obtaining insurance coverage for the Project. All of the above shall be only applicable on the
condition precedent that the Protocol is approved by the Medical Ethics Review Committee.

 

CHDR
shall perform the Project in accordance with industry best practices, reasonable care and skill and
in compliance with all laws, rules and regulations applicable to the Project (“Applicable Laws”).

 

If
necessary, CHDR will be allowed, after consultation with and the express written approval of Client, to involve the services of third
persons or organisations for specific matters, provided that CHDR shall procure that such third persons and organisations are subject
to obligations of confidentiality which are no less strict than the obligations in force for personnel of CHDR. In as far as these third
persons or organisations have access to personal data, CHDR will enter into a data processing agreement with these third persons or organisations
as detailed in the processing agreement between CHDR and the Client.

 

Article
3: Prices and payment

 

The Parties have agreed on a Quotation
for this Project as shown in Annex 2. Client shall be invoiced by CHDR according to the Payment schedule in Annex 3. Payment terms are
thirty (30) days after date of invoice. These amounts do not include applicable Dutch value added tax (which is not applicable to US
companies who provide a W-8BEN-E form). After being invoiced by CHDR, Client shall transfer the amount by the indicated payment date
to the bank account indicated on the invoice. These fees were agreed upon by the Parties on the basis that Client and CHDR carry out
the tasks and activities described in Annex I.

 

Article
4: Coordination

 

Each
of the contracting Parties will name a person within its organisation who is responsible for maintaining contacts on the executive level.
For CHDR this person will be Dr Geert Jan Groeneveld, MD, for scientific and medical items, and Prof Dr J. Burggraaf for financial and
contractual items. For the Client this person will be Dr David R. Strayer for scientific and medical items and Peter W. Rodino, III,
for financial and contractual items.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 2  of 32

    

 

Article
5: Intellectual Property

 

	5.1	It
    is recognised and understood that the ownership of any Background IP of Client and CHDR pre-existing as of the Effective Date and
    used in the course of this Project, is not affected by this Agreement.
	5.2	Any
    IP to any know-how, material, discovery or invention, whether patentable or not, conceived or conceived and reduced to practice as
    a result of the work conducted in the course of this Project (an “Invention”) shall be owned or co-owned by the Party
    or Parties that developed it, unless the Invention is either “Product Foreground IP” or “Clinical Trial Foreground
    IP”. An Invention shall be considered “Product Foreground IP” if it relates to the Product of the Company in the
    Clinical Trial. An Invention shall be considered “Clinical Trial Foreground IP” if it relates to clinical trial methodology,
    the techniques and technology that may be used by CHDR. Product Foreground IP shall belong to the Client and Clinical Trial Foreground
    IP shall belong to CHDR.

 

Article
6: Obligations of Client

 

Client
undertakes to use reasonable efforts to enable CHDR to carry out the Project. This obligation includes, among other things: (a) providing
CHDR with all available and relevant information concerning the drug or drugs with which the Project is concerned, including in particular
any information which may be relevant to the safe implementation of the Project; and (b) supplying CHDR with the above-mentioned drug
or drugs free of charge, in good time and in sufficient quantities as set forth in the Protocol.

 

Article
7: Obligations of CHDR

 

	7.1
    	CHDR
    shall use its best efforts to complete the Project according to the estimated timelines, as shown in Annex 4.
	7.2	CHDR
    shall immediately inform Client in writing if CHDR becomes aware that circumstances are such that there will be a substantial delay
    in the progress of the Project. In such an event the Parties shall, by mutual consent, make an arrangement concerning the consequences
    of the delay on the subsequent implementation of the Project and/or this Agreement.
	7.3	CHDR
    shall give Client’s monitoring personnel access to all files which have been collated on the individual volunteers and shall
    allow these personnel to make copies of such files, either in whole or in part, but only in as far as the personal data in the files
    concerned has been made anonymous.

 

Article
8: Data analyses and publication

 

	8.1	CHDR
    shall be entitled to use the data and analysis, which have been received under the terms of the Project (hereinafter the “Data”),
    for publications in and/or oral presentations to the scientific media and/or forums, with the understanding that CHDR shall not do
    so unless it has previously informed Client of the proposed publications or presentations and provided such publications and/or presentations
    to Client for review and comment not less than thirty (30) days before such proposed use.
	 	The
    authorship of such a publication shall reflect the contribution of individual employees of the Client and CHDR. A joint publication
    is the preferred form.
	8.2	If
    Client can demonstrate that the postponement of a publication or presentation intended CHDR is necessary to protect its intellectual
    property rights, CHDR shall postpone such publication or presentation, but CHDR shall not be required to do so for a period of longer
    than three months after the study’s completion unless Client requires more than three months in order to safeguard its rights
    and the interests connected with its rights outweigh the interests CHDR may have in the proposed publication or presentation, with
    a maximum of 12 months after the study’s completion. A postponement request shall, in no circumstances, result in the cancellation
    of any publication or presentation by CHDR. In all cases, agreements on publication needs to be in accordance with the “Revised
    CCMO Directive on the Assessment of Clinical Trial Agreements” dated 30 August 2011”.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 3  of 32

    

 

Article
9: Reporting

 

	9.1	The
    Data pertaining to the Product generated in the course of this Project shall be the sole property of Client, subject to the provisions
    of article 8 related to CHDR’s right to publish and/or present. Client’s entitlement to the study report (‘Report’)
    shall not affect CHDR’s copyright or reproduction rights with regard to the publications or presentations described in article
    8 above.
	9.2	Client
    shall have the rights to submit the Report and the Data to any drug regulatory authority in any country whatsoever and to use the
    Report and the Data in order to obtain patents or other similar rights with respect to the Product investigated in the course of
    this Project.
	9.3	Client
    may refer to the Report and the Data in any publication, with the understanding that the interpretations and/or conclusions set out
    in such publications shall be purely Client’s responsibility and cannot be attributed to CHDR, unless CHDR has given its prior
    written consent to the interpretation(s) or conclusion(s) concerned.

 

Article
10: Insurance

 

In
accordance with the Dutch “Medical Research involving Human Subjects Act” and the “Decree containing rules for Compulsory
Insurance in Medical-scientific Research involving Human Subjects 2015”, CHDR shall insure the subjects who participate in the
Project for the following maximum amounts:

 

(1)
€ 650.000,— (i.e. six hundred and fifty thousand Euro) per claim per subject;

(2) 
€ 5.000.000,— (i.e. five million Euro) per medical research project;

(3) 
€ 7.500.000,— (i.e. seven million and five hundred thousand Euro) for the total sum for injuries arising out of medical research
projects per insurance year.

 

Article
11: Liability

 

	11.1
    	Client
    is not liable towards CHDR for any damage to the health of a volunteer that may directly result from his or her participation in
    the Project. This exclusion shall not apply if and to the extent that the damage to the health of the volunteer exceeds the insurance
    coverage which CHDR has taken out.
	11.2
    	The
    exclusion of article 11.1 shall also not apply if the damage to the health of the volunteer was caused by any defect, as defined
    in article 6:186 of the Dutch Civil Code, in the drug or drugs which Client provided to CHDR. Next to the definition in the above
    mentioned article, the term “defect” also entails constituting any instance in which Client has, pursuant to its obligation
    to provide information as described in article 6 above, provided CHDR with incomplete or inaccurate information on the Product or
    drug(s).
	11.3
    	Except
    in situations of intentional damage or gross negligence, CHDR is not liable to Client for any damage, including, but not limited
    to, any damage resulting from Client’s use of the Data, delays in the implementation of the Project or the non-completion of
    the Project.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 4  of 32

    

 

Article
12: Indemnity

 

Client
agrees to indemnify and hold CHDR, their officers and employees harmless from any liability, loss or damage they may suffer as a result
of claims, demands, costs or judgments against them arising out of the activities to be carried out pursuant to the obligations of this
Agreement, including, but not limited to, the use by Client of the results obtained from the activities performed by CHDR under this
Agreement; provided, however, that any such liability, loss or damage resulting from the following Subsections “a” or “b”
is excluded from this Agreement to indemnify and hold harmless:

 

a.
the negligent failure of CHDR to substantially comply with applicable governmental requirements; or

b.
the negligence or willful wrongdoing of any officer or employee of CHDR

 

Article
13: Force Majeure; Continuity

 

Neither
Party shall be considered in default of the performance of its obligations under this Agreement to the extent that the performance of
such obligations is prevented by war, civil disturbance, fire, water damage, floods, sit-ins, lock-outs, government measures or any other
event, occurrence or condition which is not caused, in whole or in part, by such Party and which is beyond the reasonable control of
such Party.

 

If,
as a result of illness on the part of (an) employee(s) of CHDR, CHDR employee(s) advising Client is (are) not able to continue rendering
(their) his services to Client, CHDR shall undertake to find (a) replacement(s) within thirty (30) days.

 

Article
14: Duration

 

This
Agreement comes into force as from the Effective Date mentioned above and has been concluded for the duration of the Project. The Project
shall end in accordance with the agreed timelines, unless sooner terminated in accordance with the terms hereof. The parties agree that
the term may be extended by mutual written agreement if events beyond control delay completion of the Services beyond the expiration
date. The Parties explicitly agree that as they have included a retention period for any personal data collected during the Project,
the data will be retained by CHDR under the processing agreement as detailed in article 16.1 and 16.2 of this Agreement.

 

Article
15: Termination

 

	15.1	This
                                            Agreement may be terminated earlier by Both Parties, but needs to be in accordance with the
                                            “Revised CCMO Directive on the Assessment of Clinical Trial Agreements” dated
                                            30 August 2011, in the event:

 

	 	●	if
    the judgement of the competent medical research ethics committee that has assessed the study is irrevocably revoked;
	 	●	 if
    a reasonable case can be made for terminating the study in the interests of the health of the research subjects;
	 	●	if
    it transpires that continuation of the study cannot serve any scientific purpose, and this is confirmed by the medical research ethics
    committee that has issued a positive decision on the study;
	 	●	if
    one of the parties has been declared insolvent or a bankruptcy/winding-up petition has been filed in respect of one of the parties
    or the financier, or one of the parties or the is dissolved as a legal entity;
	 	●
	if
    the principal investigator is no longer capable of performing the tasks of the principal investigator, and no replacement agreeable
    to both parties can be found;
	 	●	 if
    one of the two parties fails to comply with the obligations arising from the agreement and, provided compliance is not permanently
    impossible, this compliance has not taken place within thirty days of the defaulting party receiving a written request to comply,
    unless failure to comply is not in reasonable proportion to the premature termination of the study;
	 	●	if
    circumstances beyond the control of both parties make it unreasonable to require the study’s continuation.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 5  of 32

    

 

	15.2	In
    all cases of termination of this Agreement the Parties shall cooperate in order to ensure volunteers’/ patients’ safety,
    continue appropriate treatment, deliver the work results and comply with all applicable regulations.
	15.3	In
    the event of preliminary termination of the Clinical Trial, not being the result of a material breach of the obligations by CHDR
    as laid down in this Agreement, the total sums payable by Client pursuant to this Agreement shall be equitably prorated for actual
    work performed up to and including the date of termination, including non-cancellable services with sub-contractors or reserved beds
    for 6 weeks after date of termination.

 

Article
16: Confidentiality and Data Privacy

 

	16.1.	All
    processing of personal data will be in accordance with the General Data Protection Regulation (“GDPR”).
    Client shall act as Controller under the GDPR. CHDR shall act as the Processor (as defined in the GDPR) on behalf of the Client.
    For this reason, Client and CHDR shall enter into a data processing agreement (Annex 6) outlining their respective responsibilities.
	16.2.	Termination
    of the Agreement on any ground whatsoever shall have as its effect that the Processor Agreement shall survive, unless the Parties
    agree otherwise in writing.
	16.3.	In
    case Client is established outside the European Union (“EU”), Client will appoint a representative in the
    EU, in writing.
	16.4.	CHDR
    shall obtain informed consent from the Clinical Trial subjects in order to allow for processing of the personal data from the Clinical
    Trial subjects.
	16.5.	The
    Parties agree to adhere to the principles of medical confidentiality in relation to Clinical Trial Subjects involved in the Clinical
    Trial.
	16.6.	Personal
    data (as defined in the GDPR) shall not be disclosed to the Client by CHDR or its Principal Investigator unless this is required
    to satisfy the requirements of the Protocol or for the purpose of adverse event monitoring or adverse event reporting, or in relation
    to a claim or proceeding brought by the Clinical Trial subject in connection with the Clinical Trial. The Parties shall not disclose
    the identity of Clinical Trial subjects to third Parties without prior written consent of the Clinical Trial subject, except in accordance
    with the provisions of the GDPR, or in relation to a claim or proceedings brought by the Clinical Trial subject in connection with
    the Clinical Trial.
	16.7.	Hereby,
    the Client requests CHDR to retain the personal data collected under the Protocol for the Client for 25 years after database lock.
    After the lapse of the retention period, the Client requests CHDR to anonymize the personal data, after which identification of the
    data subject will no longer be possible.
	16.8.	The
    Client hereby instructs CHDR to process the personal data under this Agreement not solely based on informed consent of the data subject,
    but also based on article 6(1)(a) and (f) and 9(2)(j) of the GDPR.
	16.9.	As
    CHDR is the Processor, the Client instructs CHDR to handle study subject requests’ pertaining to article 15 until 18 and 20
    until 22 of the GDPR. As it is of the utmost importance to retain the study data as a complete dataset for the purpose of pharmacovigilance
    obligations of the Client as well as to preserve the integrity of the study data for scientific purposes, the Client therefore instructs
    CHDR to limit the exercise of:

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 6  of 32

    

 

	 	a.	article
    16 GDPR (right to rectification), to the extent that factual errors concerning name and address may be corrected;
	 	b.	article
    17 GDPR (right to erasure);
	 	c.	article
    18 GDPR (right to restriction of processing);
	 	d.	article
    20 GDPR (right to data portability);
	 	e.	article
    21 GDPR (right to object), and;
	 	f.	article
    22 GDPR (the right to not to be subject to automated individual decision-making, including profiling).

 

	16.10.	CHDR
    and Client shall ensure that only those of their officers and employees (and in the case of Client those of its Affiliates) directly
    concerned with the carrying out of this Agreement have access to the Confidential Information of the other Party. Each Party undertakes
    to treat as strictly confidential and not to disclose to any third party any Confidential Information of the other Party, except
    where disclosure is required by a Regulatory Authority or by law. The Party required to make the disclosure shall inform the other
    within a reasonable time prior to being required to make the disclosure, of the requirement to disclose and the information required
    to be disclosed. Each Party undertakes not to make use of any Confidential Information of the other Party, other than in accordance
    with this Agreement, without the prior written consent of the other Party.
	16.11.	The
    obligations of confidentiality set out in article 15.2 shall not apply to information which:

 

	 	(1)	is
    or becomes part of the public domain by any other means than a wrongful act or breach of this Agreement by the Parties;
	 	(2)
    	was
    or becomes in the Parties’ lawful possession prior to the disclosure without restriction on disclosure;
	 	(3)	has
    been independently developed by the receiving Party and is not subject to a duty of confidentiality.

 

Article
17: Assignment

 

Without
the other Party’s written consent, neither Party shall assign the whole or any part of this Agreement or any claim arising from
it to any third party; provided, however, that notwithstanding the foregoing, Client may assign all of its rights and obligations hereunder
without such consent to an affiliate of Client or to a successor in interest by reason of merger, consolidation or sale of all or substantially
all the assets of Client. Subject to the foregoing, this Agreement shall inure to the benefit of and be binding on the Parties’
successors and assigns. Any assignment in violation of the foregoing shall be null and void and wholly invalid, the assignee in any such
assignment shall acquire no rights whatsoever, and the non-assigning Party shall not recognize, nor shall it be required to recognize,
such assignment.

 

Article
18: Changes / Waiver

 

This
Agreement or parts of this Agreement can only be changed with the written consent of both Parties. Similarly, no waiver of the provisions
of this Agreement shall be valid or binding on either Party unless in writing and signed by both Parties.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 7  of 32

    

 

Article
19: Applicable law and competent court

 

	19.1	The
    entire relationship between the Parties and any and all claims and disputes arising out of or in connection with this Agreement (including
    the Annexes) and all other agreements relating thereto (including any non-contractual claims and disputes) shall be exclusively governed
    by and construed in accordance with the laws of the Delaware in the United States.
	19.2	 Any
    disputes regarding or in connection with the Processing Agreement shall be exclusively decided by arbitration. The number of arbitrators
    shall be three. Each party shall choose one arbiter, whom together shall appoint the third arbitrators. The seat of arbitration shall
    be the Netherlands. The governing laws shall be the laws of the Netherlands.

 

Article
20: Miscellaneous

 

	20.1	Notices.
    All notices from one Party to the other will be in writing to the addresses set forth above. Notices shall be sent by overnight courier,
    certified mail, return receipt requested, or by other means of delivery requiring a written acknowledged receipt. All notices shall
    be effective upon receipt.
	20.2
    	Independent
    Contractor. The business relationship of CHDR to Client is that of an independent contractor and not of a partner, joint venture,
    employer, employee or any other kind of relationship.
	20.3	Severability.
    In the event that any one or more of the provisions contained in this Agreement will, for any reason, be held to be invalid, illegal
    or unenforceable in any respect, that invalidity, illegality or unenforceability will not affect any other provisions of this Agreement,
    and all other provisions will remain in full force and effect.

 

This
Agreement is drawn up in duplicate and signed in:

 

	Leiden
    on ...11.../...01.../...2021.......	Ocala
, Florida USA on 01/082021

 

	/s/
    Prof Dr. Jacobus Burggraaf	 	/s/
    Peter W. Rodino
	Centre
    for Human Drug Research	 	AIM
    ImmunoTech Inc.
	Prof
                                            Dr Jacobus Burggraaf

    Chief
    Executive Officer
	 	Peter
                                            W. Rodino, III

    General
    Counsel & Chief Operating Officer

	 	 	 
	/s/
Dr Geert Jan Groeneveld	 	 
	Centre
for Human Drug Research

Dr
Geert Jan Groeneveld

Chief
Scientific Officer

	 	 

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 8  of 32

    

 

Annexes:

 

Annex
1. Protocol / Synopsis

 

Annex
2. Quotation

 

Annex
3. Payment Schedule

 

Annex
4. Timelines

 

Annex
5. List of responsibilities

 

Annex
6. Processor Agreement

 

[Remainder
of Page Intentionally Left Blank]

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 9  of 32

    

 

Annex
1.

 

Project
Description

 

Hereby
incorporated by reference, Protocol AMP-COV-100 (CHDR2049) , dated 08 January 2021 and entitled A Phase I, Randomized, Double-Blind,
Placebo-Controlled Study to Evaluate the Safety and Activity of Repeated Intranasal Administration of Ampligen® (Poly I:Poly C12U)
in Healthy Subjects.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 10  of 32

    

 

Annex
2. Quotation

 

		[***]	

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 11  of 32

    

 

Annex
3. Payment Schedule

 

[***]

 

Payments
to be made to

 

[***]

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 12  of 32

    

 

Annex
4. Estimated Timelines

 

	Signed
    Protocol, signed contract, IMPD, IB, Insurance certificate	05
    January 2021
	Submission
    to Ethics Committee/Competent Authority (EC/CA)	11
    January 2021
	Expected
    Approval EC/CA	End
    of January 2021
	Delivery
    drug supplies by Client	End
    of January 2021
	Start
    Recruitment	01
    February 2021
	First
    Subject First Dose (FSFD)	05
    March 2021
	Last
    Subject Last Dose (LSLD)	21
    June 2021
	Database
    Lock (DBL)	6
    weeks after LSLV
	Headline
    results	3
    weeks after DBL
	First
    draft Clinical Study Report (CSR)	9
    weeks after DBL
	Final
    draft CSR	2
    weeks after receipt of comments on the draft version of CSR
	Final
    data transfer	TBD

 

NB
– all above timelines are subject to any EC/CA approval and Protocol amendments. Furthermore, at the time of signing this Agreement,
a global pandemic is in progress involving COVID-19 and therefore the timelines are subject to change according to the measures requested
by the Dutch authorities (government, RIVM, IGJ, CCMO) to address the situation at the time of the Project execution.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 13  of 32

    

 

Annex
5. List of responsibilities

 

	ACTIVITY	Client	CHDR	Third
    Party
	STUDY
    START UP	 	 	 
	1.
    Design the study	X	X	 
	2.
    Write the protocol	 	X	 
	3.
    Review the protocol	X	X	 
	4.
    Prepare CHDR site-specific subject information sheet and informed consent	 	X	 
	5.
    Prepare IB and IMPD (or SPC when applicable)	X	 	 
	6.
    Receipt, storage and accountability of drug supplies	 	X	 
	7.
    Provide labels for PK samples	 	X	 
	8.
    Prepare randomisation code 	 	X	 
	STUDY
    INITIATION	 	 	 
	1.
    Collect pre-study documents	 	X	 
	2.
    Obtain approval from Ethics Committee	 	X	 
	STUDY
    CONDUCT 	 	 	 
	1.
    Recruitment and screening of subjects	 	X	 
	2.
    Execute study procedures 	 	X	 
	3.
    Perform subjects’ supervision during study 	 	X	 
	4.
    Perform ongoing procedures described in the protocol	 	X	 
	5.
    Perform end of study evaluation of subjects 	 	X	 
	6.
    Administration site clinical trial file	 	X	 
	7.
    Serious Adverse Events (SAE) recording	 	X	 
	8.
    Notify SAE to Client	 	X	 
	9.
    Notify SAE to Health Authorities and Ethics Committee	 	X	 
	10.
    Sample handling 	 	X	 
	13.
    Monitoring by external party	X	 	 
	DATA
    MANAGEMENT	 	 	 
	1.
    Development & design of CHDR database (not CDISC)	 	X	 
	2.
    Data entry (double data entry for CRF)	 	X	 
	3.
    Data QC	 	X	 
	4.
    eCRF data entry	 	X	 

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 14  of 32

    

 

	5.
    Address Client queries 	 	X	 
	6.
    Data verification before database lock	 	X	 
	7.
    Database lock	 	X	 
	8.
    Integration of PD data or other data in database	 	X	 
	PD
    ASSESSMENT 	 	 	 
	1.
    Organize shipment of PD samples	 	X	 
	2.
    PD sample analysis	 	X	 
	STATISTICAL
    ANALYSIS	 	 	 
	1.
    Write the Statistical Analysis Plan (SAP)	 	X	 
	2.
    Review SAP	X	X	 
	3.
    Provide Interim safety/PD analysis reports	 	X	 
	4.
    Provide Blind Data Review (BDR) report	 	X	 
	5.
                                            Perform, PD (incl. non-compartmental analysis) and

    safety
    analysis
	 	X	 
	6.
    Provide safety/PD analysis reports	 	X	 
	7.
    Review safety/PD analysis reports	X	X	 
	MEDICAL
    WRITING	 	 	 
	1.
    Produce integrated CSR	 	X	 
	2.
    Prepare scientific publication (Subject to Article 9.1.)	X	X	 

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 15  of 32

    

 

Annex
6

 

PROCESSOR
AGREEMENT

 

	 	1.	AIM
    ImmunoTech Inc., having its registered office at at 2117 SW Highway 484, Ocala, Florida 34473, United States lawfully represented
    in this matter by its President and Chief Executive Officer Thomas K. Equels, M.S. J.D. (hereinafter: “the Controller”);
    and
	 	 	 
	 	2.	Centre
    for Human Drug Research having its registered office at Zernikedreef 8, 2333CL in Leiden, the Netherlands lawfully represented in
    this matter by its Chief Executive Officer Prof Dr J. Burggraaf (hereinafter “the Processor”).

 

hereinafter
also referred to collectively as: “the Parties” and individually as “a Party”;

 

WHEREAS:

 

	 	(a)	the
    Processor provides services for the benefit of the Controller, as set out in the sponsor agreement between the Client and CHDR (as
    defined below);
	 	(b)	the
    services entail the processing of Personal Data, including Data concerning health;
	 	(c)	the
    Processor solely processes the data concerned on the instructions of the Controller and not for purposes of his own;
	 	(d)	as
    of 25 May 2018 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation)
    will be applicable.

 

DECLARE
TO HAVE AGREED THE FOLLOWING:

 

Article
1 Definitions

 

	1.1.	In
    this Processor Agreement the following capitalised terms shall have the following meanings

 

	 	a.	General
    Data Protection Regulation (GDPR): Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the
    protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing
    Directive 95/46/EC;
	 	b.	Personal
    Data: any information relating to an identified or identifiable natural person (‘Data Subject’); an identifiable natural
    person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification
    number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic,
    cultural or social identity of that natural person as defined in article 4 of the GDPR;
	 	c.	Processing:
    any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means,
    such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure
    by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, as defined
    in article 4 of the GDPR;
	 	d.	Controller:
    the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes
    and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State
    law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law, as defined in article
    4 of the GDPR;

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 16  of 32

    

 

	 	e.	Processor:
    a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller, as defined
    in article 4 of the GDPR;
	 	f.	Sub-Processor:
    any non-subordinated third party engaged by the Processor in the processing of Personal Data within the scope of the Agreement, other
    than Employees;
	 	g.	Third
    party: a natural or legal person, public authority, agency or body other than the Data Subject, Controller, Processor and persons
    who, under the direct authority of the controller or processor, are authorised to process personal data, as defined in article 4
    of the GDPR;
	 	h.	Consent
    of the Data Subject any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes by which he
    or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or
    her, as defined in article 4 of the GDPR;
	 	i.	Personal
    data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of,
    or access to, personal data transmitted, stored or otherwise processed, as defined in article 4 of the GDPR;
	 	j.	Data
    concerning health: Personal data related to the physical or mental health of a natural person, including the provision of health
    care services, which reveal information about his or her health status, as defined in article 4 of the GDPR;
	 	k.	Genetic
    data: personal data relating to the inherited or acquired genetic characteristics of a natural person which give unique information
    about the physiology or the health of that natural person and which result, in particular, from an analysis of a biological sample
    from the natural person in question, as defined in article 4 of the GDPR;
	 	l.	Biometric
    data: personal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics
    of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic
    data
	 	m.	Data
    Protection Officer (DPO): a person who advises, informs and reports independently either of the Parties about the protection of personal
    data, who acts in accordance with the articles 37-39 of the GDPR;
	 	n.	Incident:
    means either

 

	 	i	an
    investigation into or a seizure of Personal Data by government officers or a serious suspicion that this will take place;
	 	ii	a
    personal data breach within the meaning of article 4(12) GDPR;

 

	 	o.	Agreement:
    the sponsor agreement between Controller and Processor concerning CHDR2049;
	 	p.	Study
    Protocol: the document that describes the objective(s), design, methodology, statistical considerations and organisation of a clinical
    study;
	 	q.	Study:
    the clinical study as described in the Study Protocol.

 

	1.2.	Wherever
    this Processor Agreement refers to certain standards, the most recent version of that standard is always referred to. To the extent
    that the standard concerned is no longer maintained, the most recent version of the logical successor of that standard that represents
    the state of art in the subject matter of the standard referred to should be read instead.

 

Article
2. Subject-Matter of this Processor Agreement

 

	2.1.	This
    Processor Agreement concerns the processing of Personal Data by the Processor on the instructions of the Controller within the scope
    of the performance of the Agreement or Agreements.
	2.2.	The
    Parties are concluding the Agreement or Agreements in order to make use of the Processor’s expertise in the areas of processing
    and securing Personal Data for the purposes ensuing from the Agreement or Agreements and further described in this Processor Agreement.
    The Processor guarantees that he is properly qualified for this purpose.
	2.3.	This
    Processor Agreement forms an inseparable part of the Agreement or Agreements. To the extent that the provisions of the Processor
    Agreement are inconsistent with the provisions of the Agreement or Agreements, the provisions of the Processor Agreement shall prevail.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 17  of 32

    

 

Article
3. Execution of processing

 

	3.1.	The
    Processor guarantees that he will only process Personal Data for the benefit of the Controller to the extent that:

 

	 	a.	this
    is necessary for the performance of the Agreement or
	 	b.	the
    Controller has given further written instructions for that purpose.

 

	3.2.	Within
    the scope of the provisions of Article 3.1 under a.), the Processor shall only process the Personal Data in accordance with the Agreement
    and the Study Protocol that is drawn up in accordance with the Agreement. Part of the written instructions within the scope of Article
    3.1 under b.) will be the Data Transfer Agreement between the Controller and the Processor specifying the technical method, timelines
    and specifications of any data transfer.
	3.3.	The
    Processor will only process the types of personal data from the Data Subjects participating in the study, as laid down in the Study
    Protocol.
	3.4.	The
    Processor shall follow all reasonable instructions given by the Controller in connection with the processing of the Personal Data.
    The Processor shall immediately inform the Controller if the instructions are – in his view - in breach of the applicable legislation
    relating to personal data.
	3.5.	Without
    prejudice to the provisions of the first paragraph of this Article 3, the Processor shall be allowed to process Personal Data if
    any legal requirement (including any court or administrative orders based thereon) requires that processing by him. In that case
    the Processor shall inform the Controller, before the processing, of the intended processing and the legal requirement, unless that
    law or court or administrative orders prohibit such information on important grounds of public interest. The Processor shall enable
    the Controller, where possible, to raise a defence against this mandatory processing and shall also otherwise restrict the mandatory
    processing to what is strictly necessary.
	3.6.	The
    Processor shall demonstrably process the Personal data in a proper and careful manner and in agreement with his obligations as a
    Processor under the GDPR, and other laws and regulations. Within that scope the Processor shall in any event maintain a record of
    the processing activities within the meaning of Article 30 GDPR and provide the Controller with a copy of that record at the latter’s
    first request.
	3.7.	In
    regard to processing Data concerning health, the Processor guarantees that he will not act in breach of the applicable health legislation.
	3.8.	Unless
    the Processor has obtained the Controller’s explicit prior written consent, he shall not process Personal Data or arrange for
    the processing of Personal Data by himself or by third parties in countries outside the European Union (“EU”), unless
    the Processor is legally obliged so by law. If the latter is the case, the Processor informs the Controller of that legal requirement
    before processing, unless that law prohibits such information. Processing Personal Data or arranging for the processing of Personal
    Data outside of the EU will take place under the conditions as set out in annex 3.
	3.9.	The
    Processor guarantees that the Employees involved have signed non-disclosure agreements and shall allow the Controller to review these
    non-disclosure agreements at the latter’s request. Before providing the Controller with a copy of the Study data processed
    by the Processor, the Processor will pseudonymise the data by removing name and address information of the study subjects.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 18  of 32

    

 

Article
4. Security of Personal Data and monitoring

 

	4.1.	The
    Processor shall demonstrably take appropriate and effective technical and organisational security measures (Annex 2), which correspond,
    given the state of the art and the costs involved therein, with the nature of the Personal Data to be processed, in order to protect
    the Personal Data from loss, unauthorised review, corruption or any form of unlawful processing and also to guarantee the (timely)
    availability of the data. These security measures include measures that may already have been provided for in the Agreement. The
    measures shall in any event include:

 

	 	a.	measures
    to ensure that only authorised Employees have access to the Personal Data for the described purposes;
	 	b.	measures
    ensuring that the Processor and his Employees and Sub-Processors can only access the Personal Data via registered accounts, with
    an adequate logging of such accounts, which allow access to only the Personal Data which the person or legal person needs to access;
	 	c.	measures
    to protect the Personal data from accidental or unlawful destruction, accidental loss or amendment or unauthorised or unlawful storage,
    processing, access or disclosure;
	 	d.	measures
    for the purpose of identifying weaknesses in relation to the processing of Personal Data in the systems used to provide services
    to the Controller;
	 	e.	measures
    to guarantee the timely availability of the Personal Data;
	 	f.	measures
    to ensure that the Personal Data are separated in a logical way from the Personal Data the Processor is processing either for himself
    or on behalf of third parties.

 

	4.2.	The
    Controller shall be entitled to monitor (or arrange for the monitoring of) the compliance with the measures set out above in Articles
    4.1 The Processor shall in any event allow the Controller, if so requested by the Controller, to investigate (or arrange for the
    investigation of) this at least once a year at a time to be determined by mutual agreement between the Parties and, furthermore,
    whenever the Controller has a reason for doing so, based on information or privacy incidents (or the suspicion that such incidents
    have occurred). The Processor shall reasonably lend assistance with such an investigation. The Processor shall follow any instructions
    for the adjustment of his security policies that the Controller may reasonably give following such an investigation, within a reasonable
    period of time.
	4.3.	The
    Parties acknowledge that security requirements keep changing and that effective security requires frequent reviews and the regular
    improvement of outdated security measures. The Processor shall therefore periodically review the measures as implemented on the basis
    of this Article 4 and, where necessary, improve the measures in order to keep meeting the obligations of this Article 4. The foregoing
    shall not affect the Controller’s power of instruction to take (or arrange for the taking of) additional measures, if necessary.

 

Article
5. Monitoring, information duties and incident management

 

	5.1.	The
    Processor shall actively monitor breaches of the security measures and report on any personal data breaches to the Controller in
    agreement with this Article 5.
	5.2.	After
    becoming aware of an incident, the Processor shall notify the Controller without undue delay and provide the latter on that occasion
    with all the relevant information about:

 

	 	1)	the
    nature of the Incident;
	 	2)	the
    Personal data that have or may have been affected;
	 	3)	the
    discovered and probable consequences of the Incident; and
	 	4)	the
    measures taken or to be taken in order to address the Incident or to limit the consequences/damage as much as possible.

 

	5.3.	Without
    prejudice to the other obligations of this Article, the Processor shall take the measures he may reasonably be expected to take in
    order to address the Incident as soon as possible or to limit the further consequences of that Incident as much as possible. The
    Processor shall consult the Controller without delay in order to make further agreements about this subject.
	5.4.	The
    Controller hereby instructs the Processor in advance to investigate an Incident, formulate a correct response and take appropriate
    follow-up steps with regard to the Incident. If the Dutch Data Protection Authority (“Autoriteit Persoonsgegevens”)
    needs to be notified, the Controller will instruct the Processor accordingly. This also applies to the Data Subject as provided in
    Article 5.7.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 19  of 32

    

 

	5.5.	The
    Processor shall always have written procedures in place which enable him to provide the Controller with an immediate reaction in
    respect of an Incident and to effectively cooperate with the Controller in order to handle the Incident. The Processor shall provide
    the Controller with a copy of such procedures, if so requested by the Controller.
	5.6.	Any
    notifications pursuant to Article 5.2 shall be immediately directed to the Controller or, if relevant, to the Employees of the Controller
    as identified by the Controller in writing during the term of this Processor Agreement. If the Controller has appointed a Data Protection
    Officer (DPO), the notifications shall be directed to this DPO.
	5.7.	The
    Processor may not provide information about Incidents to Data Subjects or other third parties, except where the Processor has a legal
    obligation to do so or the Parties have so agreed otherwise.
	5.8.	If
    and to the extent that the Parties have agreed that the Processor shall have direct contact with the authorities or other third parties
    with regard to an Incident, then the Processor shall keep the Controller informed hereof on a continuous basis.

 

Article
6. Assistance duties

 

	6.1.	The
    GDPR and other (privacy) legislation grant Data Subjects certain rights. The Processor shall assist the Controller in such manner
    as described in the Agreement
	6.2.	The
    Processor shall forward any complaint by or request from a Data Subject relating to the processing of Personal Data that he has received
    to the Controller without delay. CHDR will remove any information that can lead to identification of the study subject and ensure
    that the information can be identified only by the study number.
	6.3.	On
    the Controller’s first request the Processor shall provide the Controller with all the relevant information on the aspects
    of his processing of the Personal Data, so that the Controller can demonstrate, partly on the basis of that information, that he
    is complying with the applicable (privacy) legislation.
	6.4.	On
    the Controller’s first request the Processor shall also lend all the required assistance with the performance of the legal
    obligations the Controller has under the applicable privacy legislation (such as performing a PIA).

 

Article
7. Engagement of Sub-Processors

 

	7.1.	The
    Processor shall not outsource his activities that consist of the processing of Personal Data or that require the processing of Personal
    Data to a Sub-Processor without the Controller’s prior written consent. The foregoing shall not apply to the Sub-Processors
    mentioned in Annex 1, of which the Controller has ascertained that the processing is within the mandate given to the Processor under
    this Processing Agreement.
	7.2.	Where
    the Controller consents to the engagement of a Sub-Processor, the Processor shall impose obligations on this Sub-Processor that are
    (at minimum) equal to the Processor’s own obligations under the Processor Agreement or the law and which shall fit within the
    scope of the processing mandate granted to Processor under this Processing Agreement. The Processor shall record these arrangements
    in writing and shall monitor their compliance by the Sub-Processor. In particular, the Processor shall impose on the Sub-Processor
    the obligation to implement appropriate technical and organizational measures in such a manner that the processing will meet all
    obligations under the GDPR. The Processor shall provide the Controller with a copy of the agreement or agreements entered into with
    the Sub-Processor at the Controller’s request.
	7.3.	The
    Controller’s consent for the outsourcing of work to a Sub-Processor does not alter the fact that the use of Sub-Processors
    in a non-EU country requires consent in agreement with Article 3.7 of this Processor Agreement.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 20  of 32

    

 

Article
8. Confidentiality

 

	8.1.	The
    processor is obliged to keep any Personal Data received from or processed for the Controller confidential.
	8.2.	Each
    Party shall keep any information received from the other Party confidential unless

 

	 	a.	The
    other Party has given explicit consent in writing,
	 	b.	The
    information is already public without the interference of the receiving Party,
	 	c.	The
    processor is legally obliged to provide the information because of a law suit or a legal obligation.

 

	8.3.	If
    article 8.2 under c is applicable, the Processor informs the Controller of that legal requirement before processing, unless that
    law prohibits such information.

 

Article
9. Liability

 

	9.1.	Each
    Party shall be responsible and liable for his own actions.
	9.2.	The
    Controller shall indemnify the Processor and hold the Processor harmless from all claims, actions, rights of third parties and fines
    and other enforcement actions of the any Data Protection Authority which are the immediate consequence of an imputable shortcoming
    by the Controller and/or his contractors and/or Processors in the performance of his obligations under this Processor Agreement and/or
    any violation of the GDPR by the Controller and/or his contractors and/or Processors. The same holds true for any liability coming
    forth from an action or omission of any Sub-Processor contracted by Processor for the purposes of the execution of the Agreement
    and/or this Processing Agreement.
	9.3.	Any
    restriction of liability shall also cease to apply for the Party concerned in the case of an intentional act or omission or gross
    negligence on the part of that Party.
	9.4.	Parties
    agree that in case of discrepancies pertaining to liability between the Processor Agreement and the Agreement, the Processor Agreement
    prevails.

 

Article
11. Term and termination

 

	11.1.	This
    Processor Agreement shall take effect on the date on which it is signed. The Processor Agreement shall end 25 years after database
    lock.
	11.2.	After
    it has been signed by both parties, the Processor Agreement shall form an integral and inseparable part of the Agreement. However,
    termination of the Agreement on any ground whatsoever does not terminate the Processor Agreement, unless the Parties agree otherwise
    in writing.
	11.3.	Obligations
    which are intended to continue also after the termination of this Processor Agreement in view of their nature shall continue to apply
    after the termination of this Processor Agreement. These provisions for instance include those which ensue from the provisions on
    confidentiality, liability, dispute resolution and the applicable law.
	11.4.	Without
    prejudice to the provisions on this subject in the Agreement, either Party shall be entitled to suspend the performance of this Processor
    Agreement and the Agreement relating to it or to dissolve it with immediate effect without the intervention of the court, if:

 

	 	g.	the
    other Party is dissolved or ceases to exist otherwise;
	 	h.	the
    other Party materially fails in the performance of his obligations under this Processor Agreement and that failure has not been remedied
    within 30 days following written notice of default;
	 	i.	either
    Party is declared bankrupt or applies for a moratorium.

 

	11.5.	The
    Controller shall be entitled to dissolve (“ontbinden”) this Processor Agreement and the Agreement with immediate effect,
    if the Processor indicates that he is not able (or no longer able) to comply with the reliability requirements imposed on personal
    data processing in the legislation and/or in the case-law.
	11.6.	Without
    the Controller’s explicit and written consent, the Processor may not transfer this Processor Agreement and the rights and obligations
    connected with this Processor Agreement to a third party.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 21  of 32

    

 

Article
12. Retention period of Personal Data

 

	12.1.	The
    Processor shall not retain the Personal Data any longer than is strictly necessary in any form that can lead to the identification
    of the Data Subject, taking into account the retention period as laid down in the Agreement. The Controller instructs the Processor
    to anonymize the Personal Data after the retention period has lapsed.
	12.2.	At
    the choice of the Controller, the Processor deletes or returns all the personal data to the Controller after the end of the provision
    of services relating to processing, and deletes existing copies unless Union or Dutch law requires storage of the personal data,
    pursuant to article 28(3)(g) of the GDPR, for as far as this is compatible with ICH-GCP and the applicable Dutch legislation pertaining
    to clinical studies.

 

Article
13. Intellectual Property Rights

 

	13.1.	To
    the extent that the Personal Data or their collection is protected by an intellectual property right, the Controller grants the Processor
    consent to use the Personal Data within the scope of the performance of this Processor Agreement, the Agreement and the Study Protocol.

 

Article
14. Final provisions

 

	14.1.	The
    recitals form an inseparable part of this Processor Agreement.
	14.2.	If
    one or more of the provisions of this Processor Agreement are null and void or voidable, the other provisions shall continue in full
    effect.
	14.3.	This
    Processor Agreement can only be changed upon written consent of both Parties.
	14.4.	The
    Parties shall endeavor to resolve any conflicts by mutual agreement. This includes the possibility of ending the dispute by means
    of mediation to be decided by mutual agreement.
	14.5.	All
    notices from one Party to the other will be in writing to the address set forth hence after. Notices shall be sent by overnight courier,
    certified mail, return receipt requested or by other means of a delivery requiring a written acknowledged receipt. All notices shall
    be effective upon receipt.

 

Contact
details Controller

 

DPO:

Jelmer
Pieters MBA CIPP/E

[***]

 

Contact
details Processor:

 

		[***]	

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 22  of 32

    

 

Article
15 Applicable law and competent court

 

	15.1.	This
    Processor Agreement is exclusively governed and construed in accordance with the laws of the Netherlands.
	15.2.	Any
    disputes regarding or in connection with the Processing Agreement shall be exclusively decided by arbitration. The number of arbitrators
    shall be three. Each party shall choose one arbiter, whom together shall appoint the third arbitrators. The seat of arbitration shall
    be the Netherland. The governing laws shall be the laws of the Netherlands.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 23  of 32

    

 

This
Processor Agreement is drawn up in duplicate and signed in:

 

	Leiden
    on 31/01/2021	 Ocala,
    Florida USA on 01/29/2021

 

	/s/
    Dr Jacobus Burggraaf	 	/s/
    Peter W. Rodino
	Centre
    for Human Drug Research	 	AIM
    ImmunoTech Inc.
	Prof
    Dr Jacobus Burggraaf	 	Peter
    W. Rodino, III
	Chief
    Executive Officer	 	General
    Counsel

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 24  of 32

    

 

Annex
1 Sub-Processors

 

Pharmacy:

Apotheek
LUMC

LUMC,
L0-P30, Albinusdreef 2, 2333 ZA Leiden, The Netherlands

 

Safety
Laboratory Analysis:

Afdeling
Klinische Chemie en Laboratoriumgeneeskunde (AKCL)

LUMC,
E2-P, Albinusdreef 2, Leiden, 2333ZA, Netherlands

 

Safety
Laboratory Analysis (microbiology):

Centraal
Klinisch Microbiologisch Laboratorium (CKML)

LUMC,
E4-P, Albinusdreef 2, Leiden, 2333ZA, Netherlands

 

Archive
management

Iron
Mountain Nederland B.V.

Cairostraat
1

3047
BB Rotterdam

 

Cloud
services

Microsoft Azure

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 25  of 32

    

 

Annex
2 Technical and Organizational Measures of Processor

The
Processor shall implement and maintain the following technical and organizational measures:

 

	(1)
    Access control to premises and facilities
	 
	Measures
    to prevent unauthorised persons from gaining access to data processing systems with which Personal Data are processed or used:

 

	Measure	Check
    applicable	 
	Are
    the access points secured?	[X]	 
	Which
    measures are in place to ensure access control?	 	 
	–
    Magnetic card	[X]	 
	–
    Chip card	[  ]	 
	–
    Key	[  ]	 
	–
    Works security	[  ]	 
	–
    Surveillance facilities	[X]	 
	–
    CCTV	[X]	 
	–
    alarm system	[X]	 
	–
    Others: 	[  ]	 
	Admission
    control system to restrict access to authorized employees	[X]	 
	Porter
    (24/7)	[  ]	 
	Regulations
    regarding external staff, cleaning staff, and visitors	[X]	 
	Regulations
    of access control regarding telecommuters/homeworkers	[X]	 
	 	 	 
	(2)
    Access control to systems
	 
	Measures
    to prevent data processing systems from being used without authorisation:
	 	 	 
	Measure	Check
    applicable	 
	Determined,
    secured storage places for data carriers (e.g. USB sticks)	[X]	 
	Only
    authorized persons can access data carriers	[X]	 
	Data
    carriers are management according to a determined process 	[X]	 
	Data
    carriers for different principals are kept separately	[  ]	 
	Data
    carriers can be securely destroyed 	[X]	 

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 26  of 32

    

 

	(3)
    Access control to data	 	 
	 	 	 
	Measures to ensure that persons entitled to use a data processing system have access only to the data to which they have a right of access, and that Personal Data cannot be read, copied, modified or removed without authorisation in the course of processing or use and after storage:
	 	 	 
	Measure	Check
    applicable	 
	Only
    authorized persons can access IT systems	[X]	 
	There
    are differing permissions for example for reading, deleting, changing	[X]	 
	There
    are differing permissions for access to data, applications, and operating system	[X]	 
	There
    is a process to regulate data recovery from a backup	[X]	 
	The
    use of applications and files is recorded 	[X]	 
	Testing
    and production environments are separate	[X]	 
	 	 	 
	(4)
    Transmission control 	 	 
	 	 	 
	Measures
    to ensure that Personal Data cannot be read, copied, modified or removed without authorisation during electronic transmission or
    during their transport or storage on data media, and that it is possible to check and establish to which bodies a transfer of Personal
    Data by means of data transmission facilities is envisaged:	 	 
	 	 	 
	Measure	Check
    applicable	 
	Data
    carriers are sent securely	[X]	 
	Data
    carrier transports are escorted	[  ]	 
	All
    data is transmitted only in encrypted form	[X]	 
	E-mail
    is sent encrypted	[X]	 
	Data
    transfers are secured through an encrypted VPN or similar	[X]	 
	Only
    authorized persons can transfer and receive data Dedicated Data Transfer Agreement will be concluded for each study as agreed per
    Article 3.2.	[X]	 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 27  of 32

    

 

	(5)
    Data entry control
	 
	Measures
    to ensure that it is possible to subsequently check and establish whether and by whom Personal Data have been input into, modified
    in, or removed from, data processing systems:
	 	 	 
	Measure	Check
    applicable	 
	Only
    persons with specific permissions can enter data	[X]	 
	Data
    entry is recorded	[X]	 
	Administrative
    action (for example changing user permissions) is recorded	[X]	 
	 	 	 
	(6)
    Data Processing control 	 	 
	 	 	 
	Measures
    to ensure that Personal Data processed on a commissioned basis are processed strictly in accordance with the instructions of the
    principal:	 
	 	 	 
	Measure	Check
    applicable	 
	Employees
    are given express data protection instructions 	[X]	 
	Employees
    are bound by secrecy obligations	[X]	 
	 	 	 
	(7)
    Availability control 	 	 
	Measures
    to ensure that Personal Data are protected from accidental destruction or loss:
	 	 	 
	Measure
    Check applicable
	 
	A
    data backup maintained on at least a daily basis	[X]	 
	Data
    carriers are stored disaster-proof	[X]	 
	There
    is a determined process in case of emergencies 	[X]	 
	Systems
    are redundant	[X]	 
	There
    is an uninterruptible power source 	[X]	 
	A
    business continuity management policy is place 	[X]	 

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 28  of 32

    

 

	(8)
    Separation control 	 	 
	 
	Measures
    to ensure that data collected for different purposes are processed separately:
	 	 	 
	Measure	Check
    applicable	 
	Data
    of principals are kept on physically separated systems	[  ]	 
	Data
    of principals are kept logically separated 	[X]	 
	Different
    employees deal with the data of different 	[  ]	 
	Backups
    are kept physically separated for different principals	[  ]	 

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 29  of 32

    

 

Annex
3. Processing outside of the EU

 

Introduction

 

Transfers
are not defined in the GDPR. However, article 44 of the GDPR indicates that any transfers to third countries or international organizations
may not take place unless the transfer is compliant with chapter V of the GDPR. CHDR interprets transfer as meaning both (1) the act
of sending data actively to a party located in another country outside of the EU and (2) entering the data in a system that is hosted
in a country outside of the EU. Furthermore, any possibility for processing the personal data from a location located outside the EU
shall be qualified as transfer.

 

As
indicated in article 3.8 of this Processor Agreement, the Parties will describe in this annex on which ground an international transfer
of personal data outside of the EU shall take place. Below, three steps have been described. The Parties will have to verify step-by-step
whether one of the steps applies.

Please
note that the Parties cannot choose on which lawful basis they will transfer the data to a third party in a country outside of the EU.
If Step I applies, that will be the basis for the transfer. Only if a step is not applicable, Parties may proceed with the following
step.

The
Parties will then need to indicate on which legal basis the transfers shall be based and will indicate which data shall be transferred
to which party and country.

 

Step
I.

 

Please
check and indicate whether the Controller or any third party (including sub-processors) to whom the data is sent (hereinafter:
“Receiving Party”) is located in a country within the EU. If that is the case, this annex is not applicable. If the Receiving
Party is located outside the EU, please verify whether there is an adequacy decision for the country in which the Receiving Party
is located via the following web-link: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en

 

On
the 1 October 2020, the European Commission had recognized:

 

	 	●	Andorra;
	 	●	Argentina;
	 	●	Canada
    (commercial organizations);
	 	●	Faroe
    islands,
	 	●	Guernsey;
	 	●	Israel;
	 	●	Isle
    of Man;
	 	●	Japan
	 	●	Jersey;
	 	●	New
    Zealand;
	 	●	Switzerland;
	 	●	Uruguay;

 

As
providing adequate protection.

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 30  of 32

    

 

If
there is an adequacy decision, the personal data can be transferred to the third country based on the adequacy decision.

 

Please
indicate in the text box below that the processing will take place based on an adequacy decision, if that is the case.

 

 

Please
                                            indicate here whether an Adequacy decision is applicable and for which country:

...............................................third
country: ....................................

 

 

Step
II.

 

If
there is no adequacy decision, please verify whether appropriate safeguards have been provided by the Receiving Party. These can
be:

 

	 	(a)	a
    legally binding and enforceable instrument between public authorities or bodies;
	 	(b)	binding
    corporate rules in accordance with Article 47 GDPR;
	 	(c)	standard
    data protection clauses adopted by the Commission in accordance with the examination procedure referred to in Article 93(2) GDPR;
	 	(d)	standard
    data protection clauses adopted by a supervisory authority and approved by the Commission pursuant to the examination procedure referred
    to in Article 93(2) of the GDPR;
	 	(e)	an
    approved code of conduct pursuant to Article 40 GDPR together with binding and enforceable commitments of the controller or processor
    in the third country to apply the appropriate safeguards, including as regards data subjects’ rights; or
	 	(f)	an
    approved certification mechanism pursuant to Article 42 GDPR together with binding and enforceable commitments of the controller
    or processor in the third country to apply the appropriate safeguards, including as regards data subjects’ rights.
	 	(g)	contractual
    clauses between the controller or processor and the controller, processor or the recipient of the personal data in the third country
    or international organization; subject to authorization from the competent supervisory authority; or
	 	(h)	provisions
    to be inserted into administrative arrangements between public authorities or bodies which include enforceable and effective data
    subject rights, subject to authorization of the competent supervisory authorities .

 

In
addition to the existence of appropriate safeguards, CHDR has to verify with the Receiving Party that enforceable data subject rights
and effective legal remedies for data subjects are available. If that is the case, please indicate below in the text box on which appropriate
safeguards the personal data will be transferred.

 

 

Please
                                            indicate which appropriate safeguards have been provided by the Receiving Party: .............................................................................

 

CHDR
has asked the Receiving Party if enforceable data subject rights and effective legal remedies for data subjects are available. The answer
was:

 

    	 

    	CHDR2049-[AMP-COV-100]	3/24/2021	Page 31  of 32

    

 

If
the answer was: there are no appropriate safeguards or if there are appropriate safeguards but no enforceable data subject rights or
effective legal remedies available for data subjects, please proceed to Step III.

 

Step
III.

 

If
there are no appropriate safeguards, the transfer of the data is only allowed if one of the conditions named in article 49(1)
of the GDPR applies. The Parties will then only be allowed to transfer the data if the data

 

subject
has explicitly consented to the proposed transfer after having been informed of the possible risks of such transfers for
the data subjects due to the absence of an adequacy decision and appropriate safeguards. Please note that all requirements for consent
under the GDPR need to be met.

Please
amend the informed consent document for the study accordingly and indicate below in the textbox on which grounds the transfer will take
place.

 

Please
confirm here that there is no adequacy decision by the European Commission, that there are no appropriate safeguards and that therefore
the lawful basis of the transfer is explicit consent: we confirm that there is no adequacy decision by the European Commission and that
there are no appropriate safeguards. Therefore, the lawful basis of the transfer is explicit consent.

Source: [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00325-of-00352.parquet"}, [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00325-of-00352.parquet"}]]