SEC Filing Document

Company: BIOVENTRIX, INC.
Ticker: 
CIK: 1283259
Filing Type: S-1/A
Document Type: EX-1.1
Date Filed: 2026-03-18
Accession Number: 0001493152-26-010642
Exchange: 
SIC Code: 3841
SIC Description: Surgical & Medical Instruments & Apparatus
URL: https://www.sec.gov/Archives/edgar/data/1283259/000149315226010642/ex1-1.htm

Chunk 9 of 21
Word Count: 892
Character Count: 5928

Document Content:

and foreign laws, rules, regulations, decisions and orders relating to the protection of human health and safety, the environment or hazardous or toxic substances or wastes, pollutants or contaminants (collectively, “Environmental Laws”); (ii) have received and are in compliance with all permits, licenses or other approvals required of them under applicable Environmental Laws to conduct its business as described in the Registration Statement, the Pricing Disclosure Package and the Prospectus; and (iii) have not received notice of any actual or potential liability for the investigation or remediation of any disposal or release of hazardous or toxic substances or wastes, pollutants or contaminants, except, in the case of any of clauses (i), (ii) or (iii) above, for any such failure to comply or failure to receive required permits, licenses, other approvals or liability as would not, individually or in the aggregate, reasonably be expected to result in a Material Adverse Change.

IT Systems, Data Security and Cybersecurity. The Company and its Subsidiaries’ information technology assets and equipment,
computers, systems, networks, hardware, software, websites, applications, and databases (collectively, “IT Systems”)
are adequate for, and operate and perform in all material respects as required in connection with the operation of the business of the
Company and its Subsidiaries as currently conducted, and, to the knowledge of the Company, free and clear of all material bugs, errors,
defects, Trojan horses, time bombs, malware and other corruptants. The Company and its Subsidiaries have implemented commercially reasonable
physical, technical and administrative controls, policies, procedures, and safeguards to maintain and protect their material confidential
information and the integrity, continuous operation, redundancy and security of all IT Systems and data, including “Personal Data,”
used in connection with their businesses. “Personal Data” means (i) a natural person’s name, street address,
telephone number, e-mail address, photograph, social security number or tax identification number, driver’s license number, passport
number, credit card number, bank information, or customer or account number; (ii) any information which would qualify as “personally
identifying information” under the Federal Trade Commission Act, as amended; (iii) “personal data” as defined by the
European Union General Data Protection Regulation (“GDPR”) (EU 2016/679) and by the UK GDPR (as defined below), as
applicable; (iv) any information which would qualify as “protected health information” under the Health Insurance Portability
and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act (collectively, “HIPAA”);
and (v) any other piece of information that allows the identification of such natural person, or his or her family, or permits the collection
or analysis of any data related to an identified person’s health or sexual orientation. Except as disclosed in the Registration
Statement, the Pricing Disclosure Package and the Prospectus, (a) there has been no material security breach or incident, material unauthorized
access or disclosure, or other material compromise relating to the Company’s and its Subsidiaries’ IT Systems and Personal
Data and (b) neither the Company nor any of its Subsidiaries has been notified of, and has no knowledge of any event or condition that
would result in, any material security breach or incident, material unauthorized access or disclosure or other material compromise to
its IT Systems and Personal Data. The Company and its Subsidiaries are presently in material compliance with all applicable laws or statutes
and all judgments, orders, rules and regulations of any court or arbitrator or governmental or regulatory authority, internal policies
and contractual obligations relating to the privacy and security of IT Systems and Personal Data and to the protection of such IT Systems
and Personal Data from unauthorized use, access, misappropriation or modification.

Compliance with Data Privacy Laws. The Company and its Subsidiaries are, and at all prior times were, in material compliance with
any and all applicable data privacy and security laws and regulations, including, without limitation, HIPAA and the GDPR (including as
it continues to form part of law in the United Kingdom by virtue of section 3 of the European Union (Withdrawal) Act 2018 (the “UK
GDPR”)), as applicable (collectively, the “Privacy Laws”). To ensure compliance with the Privacy Laws, the
Company and its Subsidiaries have in place, comply with, and take appropriate steps reasonably designed to ensure compliance in all material
respects with their policies and procedures relating to data privacy and security and the collection, storage, use, disclosure, handling,
and analysis of Personal Data (the “Policies”). The Company and its Subsidiaries have, to the knowledge of the Company,
at all times made all disclosures to users or customers required by applicable laws and regulatory rules or requirements, and none of
such disclosures made or contained in any Policy have, to the knowledge of the Company, been inaccurate or in violation of any applicable
laws and regulatory rules or requirements in any material respect. The Company further certifies that neither it nor any Subsidiary:
(i) has received notice of any actual or potential liability under or relating to, or actual or potential violation of, any of the Privacy
Laws, and has no knowledge of any event or condition that would reasonably be expected to result in any such notice; (ii) is currently
conducting or paying for, in whole or in part, any investigation, remediation, or other corrective action pursuant to any Privacy Law;
or (iii) is a party to any order, decree, or agreement that imposes any obligation or liability under any Privacy Law.