Cybersecurity Compliance

Last Updated on July 5, 2026

Welcome to Marketeq Digital Inc. (hereinafter referred to as "Marketeq," "we," "us," or "our"). This Cybersecurity Compliance document (the "Policy") describes Marketeq's commitment to protecting its systems and information against cyber threats and to complying with applicable cybersecurity laws, regulations, and standards. As an IT consulting firm, Marketeq treats cybersecurity as a core priority and integrates it into its operations. This Policy supplements our Data Encryption and Security Policy and Information Governance and Management Policy. If you have any questions regarding this Policy, you may contact us at legal@marketeqdigital.com.

1. Purpose and Scope

The purpose of this Policy is to describe Marketeq's approach to cybersecurity compliance. This Policy applies to Marketeq's systems, networks, and information, and to the personnel and third parties who interact with them. It reflects our commitment to protecting against cyber threats and to complying with applicable cybersecurity requirements. This Policy is intended to support the security and resilience of our operations. Compliance with this Policy is expected of all who interact with our systems.

2. Cybersecurity Governance

Marketeq maintains a governance approach to cybersecurity that assigns responsibility for managing cyber risk and establishes principles for protecting its systems and information. We integrate cybersecurity considerations into our decision-making and operations. Our governance approach is designed to ensure that cyber risk is identified, assessed, and managed appropriately. We periodically review our cybersecurity practices to ensure they remain effective. Sound governance underpins our cybersecurity efforts.

3. Risk Management

Marketeq takes a risk-based approach to cybersecurity, seeking to identify, assess, and mitigate the cyber risks relevant to its operations. We consider the threats and vulnerabilities that may affect our systems and information and implement measures proportionate to the associated risks. We recognize that the cyber threat landscape evolves and that our risk management must remain responsive to change. We use risk assessments to inform our security measures and priorities. A risk-based approach helps us to allocate our resources effectively.

4. Technical and Organizational Measures

Marketeq implements appropriate technical and organizational measures to protect its systems and information against cyber threats. These measures, described more fully in our Data Encryption and Security Policy, may include access controls, encryption, network protections, and monitoring. We complement technical measures with organizational practices, including awareness and training. Together, these measures are designed to reduce the likelihood and impact of cyber incidents. We maintain our security measures with regard to prevailing standards and evolving threats.

5. Compliance with Cybersecurity Requirements

Marketeq seeks to comply with the cybersecurity laws, regulations, and standards applicable to its operations. We recognize that cybersecurity requirements may arise under various laws and may include obligations relating to risk management, incident disclosure, and the protection of certain categories of information. We take reasonable steps to understand and comply with the requirements applicable to us. Where a client engagement involves specific cybersecurity requirements, we seek to align our practices accordingly. Compliance with applicable requirements is an important element of our cybersecurity efforts.

6. Incident Detection and Response

Marketeq maintains procedures for detecting, investigating, and responding to cybersecurity incidents. Upon identifying a potential incident, we act promptly to contain it, assess its impact, and take appropriate remedial measures. Where an incident gives rise to a notification or disclosure obligation, we seek to comply with the applicable requirements within the relevant timeframes. We document incidents and the measures taken in response to support continuous improvement. Effective incident response helps to minimize harm and to restore normal operations.

7. Awareness and Training

Marketeq promotes cybersecurity awareness among its personnel and provides training designed to help them recognize and respond to cyber threats. We recognize that personnel play an important role in maintaining cybersecurity and that human factors are a significant element of cyber risk. Our awareness and training efforts are intended to foster a culture of security. Personnel are expected to comply with our security policies and to remain vigilant against cyber threats. Awareness and training complement our technical safeguards.

8. Third Parties

Marketeq considers cybersecurity in its relationships with third parties who interact with its systems or information. We take reasonable steps to ensure that such parties maintain appropriate security measures and comply with relevant requirements. Where appropriate, we impose cybersecurity-related obligations on third parties through our agreements with them. Further detail regarding our approach to vendors is set out in our Vendor Data Handling Policy. Managing third-party cyber risk is an important element of our cybersecurity efforts.

9. Changes to This Policy

Marketeq reserves the right to modify or update this Cybersecurity Compliance document at any time to reflect changes in our practices, technology, or legal requirements. Any changes will become effective upon posting the revised Policy, and we encourage you to review it periodically. Where changes are material, we will endeavor to communicate them through appropriate means.

10. Contact Information

If you have any questions, concerns, or wish to report a cybersecurity concern, please contact us at legal@marketeqdigital.com. We are committed to protecting our systems and information and to addressing cybersecurity matters promptly and responsibly.