Regulatory Compliance: Guidance to ensure your eKYC processes meet all relevant regulations.

Risk Minimization: Strategies to minimize compliance risks and avoid penalties.

Smooth Onboarding: Assistance for a seamless onboarding process for your eKYC solution.

Ongoing Support: Continuous support to address any regulatory changes or updates.

Service Scope

1. Company will provide relevant materials to assist Customer for its approval application with Hong Kong Monetary Authority (HKMA), and such materials may include the following:

Documents

• Manual review user guide of ZOLOZ Solution
• High-level introduction of ZOLOZ Solution
• Detailed model logic explanation (white paper) of ZOLOZ Solution
• SOC 2 Type 2 audit report

Certificates

• PCI-DSS
• ISO27001
• ISO27701
• iBeta Level 2
• SOC2

2. Company will provide one (1) online technical training for not more than two (2) hours in connection with integration of Solution with Customer System.

3. Company will provide one (1) online Solution training for not more than two (2) hours with respect to Big Data and Artificial Intelligence (BDAI) technologies for independent assessor or Customer’s internal risk team.

4. Company will provide one (1) online operation training for not more than two (2) hours for Customer’s eKYC manual review team.

5. Company will provide reasonable assistance to respond to Customer’s reasonably necessary inquiries regarding Solution or evidence requests regarding TPRA (“Customer’s Inquiries”), provided that Customer’s Inquiries are (i) specific and directly relevant to Solutions, (ii) not covered in the SOC2 report or other materials provided by Company, and (iii) the number of Customer’s Inquiries is limited to fifty (50). If any additional assistance is required from Company, Company will charge and Customer shall pay USD1,500 for every ten (10) Customer’s Inquiries.

6. Upon Customer’s request, Company will participate in weekly meetings for not more than one (1) hour per week with Customer within one (1) month after the Solution go-live date.

7. Upon Customer’s request, Company will provide online training for not more than two (2) hours once a year for two (2) consecutive years after the Solution go-live date.