Sociale Digital maintains a formal security program in accordance with current best industry standards that is designed to: (i) ensure the security and integrity of the data of its customers their end user, including cardholder data (collectively, "Customer Data"); (ii) protect against threats or hazards to the security or integrity of the Customer Data; and (iii) prevent unauthorized access to the Customer Data; such security program conforms to the Service Organizational Controls Report. The company and the Customer Offerings have complied with, and are complying with, the Payment Card Industry Payment Application Data Security Standard (PA-DSS) and PCI Data Security Standard (PCI-DSS) as applicable to Sociale Digital. Social Digital cards are issued by various issuing banks pursuant to the appropriate regulatory licenses. Sociale Digital operates as an approved Program Manager and registered service provider. All transfers of funds are processed by Sociale Digital partner financial institutions using Sociale Digital's "SPE" technology. Funds are processed by via authorized and regulated third parties including but not limited to Wirecard, and services may be carried out via the group's subsidiary and related group of companies.