Corporate Governance Framework

Document owner: General Counsel / Corporate Secretary Version: 3.0 Effective date: January 1, 2026 Last updated: January 15, 2026 Classification: Public — Trust Center Review cadence: Annual; committee charters reviewed biennially Company: Acme Cloud, Inc. Address: 1200 Market Street, Suite 400, San Francisco, CA 94103, USA Primary contacts: trust@acmecloud.com | security@acmecloud.com | privacy@acmecloud.com

---

1. Executive Summary and Purpose

This Corporate Governance Framework document describes Acme Cloud, Inc.'s ("Company," "we," "us," or "our") governance structure, board composition, committee responsibilities, executive oversight mechanisms, and accountability framework. Strong corporate governance underpins our commitments to security, privacy, ethical conduct, and stakeholder value as documented throughout this Trust Center.

Governance Principles:

Principle	Description	Implementation
Board Independence	Maintain majority independent board with independent oversight	4 of 5 directors independent; independent committees
Accountability	Clear lines of responsibility and reporting	Defined authorities, escalation paths
Transparency	Open communication with stakeholders	Regular reporting, Trust Center, investor updates
Risk Oversight	Active board engagement with enterprise risks	Committee structure, regular briefings, escalation protocols
Ethical Conduct	Tone from the top emphasizing integrity	Code of Conduct, ethics program, Board engagement
Stakeholder Consideration	Balance interests of shareholders, employees, customers, communities	ESG program, stakeholder engagement

Document Purpose:

This document supports:

Audience	Purpose
Enterprise procurement teams	Assess governance maturity and accountability
Security and compliance reviewers	Understand oversight of security and privacy programs
Investors and shareholders	Evaluate governance quality and risk management
Regulators	Demonstrate governance compliance
Partners and customers	Verify responsible corporate practices

---

2. Definitions

For purposes of this document, the following terms shall have the meanings set forth below:

Term	Definition
Board of Directors	The elected body responsible for overseeing the management of the Company and protecting shareholder interests.
Independent Director	A director who has no material relationship with the Company that could interfere with the exercise of independent judgment, as determined under applicable listing standards and Company policy.
Executive Officer	The CEO, CFO, and other officers designated by the Board as executive officers of the Company.
Audit Committee	Board committee responsible for financial reporting oversight, internal controls, compliance, and cybersecurity/privacy oversight.
Compensation Committee	Board committee responsible for executive compensation, equity plans, and human capital oversight.
Nominating and Governance Committee	Board committee responsible for board composition, director nominations, governance policies, and ESG oversight.
Charter	The governing document that defines a committee's purpose, composition, duties, and authorities.
Fiduciary Duty	The legal obligation of directors to act in good faith, with due care, and in the best interests of the Company and its shareholders.
Enterprise Risk Management (ERM)	The systematic process of identifying, assessing, and managing risks across the organization.
Related Party Transaction	A transaction between the Company and a director, officer, significant shareholder, or their family members or affiliated entities.
Conflict of Interest	A situation where a director's or officer's personal interests may conflict with their duties to the Company.
Executive Session	A board or committee meeting without management present, typically attended only by independent directors.
CISO	Chief Information Security Officer, responsible for the Company's information security program.
CPO	Chief Privacy Officer, responsible for the Company's privacy program.
ESG	Environmental, Social, and Governance factors considered in corporate strategy and reporting.
Material Transaction	A transaction of sufficient significance to require Board approval, as defined in delegation of authority.
Public Company Readiness	Governance practices aligned with requirements for publicly traded companies.

---

3. Board of Directors Composition and Structure

3.1 Current Board Composition

Director	Role	Independent	Committee Memberships	Tenure	Background
Sarah Chen	CEO, Director	No	None (management)	Since 2019 (Founder)	15+ years technology leadership; Stanford CS; former VP Engineering at major SaaS company
Michael Torres	Chair of the Board	Yes	Audit (Chair), Compensation	Since 2021	Former CFO of public technology company; CPA; extensive public company experience
Dr. Priya Sharma	Director	Yes	Audit, Nominating & Governance (Chair)	Since 2022	Former CISO of Fortune 500 company; PhD Computer Science; cybersecurity expertise
James Okonkwo	Director	Yes	Compensation (Chair), Nominating & Governance	Since 2023	CEO of enterprise software company; extensive go-to-market experience
Lisa Nakamura	Director	Yes	Audit, Nominating & Governance	Since 2024	Former General Counsel of public technology company; privacy law expertise

3.2 Board Composition Metrics

Metric	Current Status	Target	Notes
Total directors	5	5–7	Appropriate for current stage
Independent directors	4 of 5 (80%)	Majority	Exceeds majority requirement
Gender diversity	3 women (60%)	Minimum 40%	Exceeds target
Ethnic diversity	3 of 5 (60%)	—	Strong representation
Cybersecurity expertise	1 director	At least 1	Dr. Sharma (former CISO)
Financial expertise	2 directors	At least 2	Torres (Audit Committee financial expert), Nakamura
Average tenure	2.4 years	—	Balanced refreshment
CEO/founder on board	Yes	—	Founder representation

3.3 Board Independence Standards

A director is considered independent if they:

Independence Criterion	Requirement
No employment	Not a current employee; not employed within past 3 years
No material compensation	No compensation from Company except director fees within past 3 years
No affiliate relationship	Not affiliated with material customer, supplier, or partner
No family relationship	No immediate family member is an executive officer
No auditor relationship	Not affiliated with Company's external auditor
No interlocking directorates	Not an executive of another company where Company executive serves on board
No material financial interest	No direct or indirect material financial interest in Company transactions

3.4 Board Leadership Structure

Role	Current Holder	Rationale
Chair of the Board	Michael Torres (Independent)	Independent chair provides oversight independence from CEO
CEO	Sarah Chen	Founder with operational leadership
Lead Independent Director	N/A	Not required with independent chair

The Board has determined that an independent Chair structure is appropriate at this stage, providing:

• Clear separation of oversight and management
• Independent leadership of Board meetings
• Direct line between Board and investors
• Enhanced oversight of CEO performance

---

4. Board Committees

4.1 Audit Committee

Element	Detail
Chair	Michael Torres
Members	Michael Torres, Dr. Priya Sharma, Lisa Nakamura
Independence	All members independent
Financial Expert	Michael Torres (former CFO), Dr. Priya Sharma
Meetings (FY2025)	5 regular meetings + 2 special sessions
Charter Review	Biennial (last reviewed Q4 2025)

Primary Responsibilities:

Responsibility Category	Specific Duties	Frequency
Financial Reporting	Review financial statements, accounting policies, significant judgments	Quarterly
External Audit	Appoint auditor, review audit plan, evaluate performance	Annual
Internal Controls	Assess internal control effectiveness	Quarterly
Compliance	Oversee legal and regulatory compliance	Quarterly
Cybersecurity	Receive CISO briefings, review security program	Quarterly
Privacy	Receive CPO briefings, review privacy program	Quarterly
Ethics Program	Oversee whistleblower program and ethics metrics	Semi-annual
Related Party Transactions	Review and approve related party transactions	As needed
Risk Oversight	Assess financial, compliance, security, privacy risks	Quarterly

Cybersecurity and Privacy Oversight:

Activity	Frequency	Content
CISO briefing	Quarterly	Security metrics, incident summary, threat landscape, program updates
CPO briefing	Quarterly	Privacy metrics, regulatory developments, DSR summary
SEV1 incident notification	Within 24 hours	Immediate briefing on critical security incidents
SOC 2 results review	Annual	Audit findings, remediation status
Penetration test review	Annual	Executive summary, critical findings
Regulatory update	Quarterly	Privacy law developments, compliance status
Tabletop exercise observation	Annual	Board participation in cyber incident exercise

4.2 Compensation Committee

Element	Detail
Chair	James Okonkwo
Members	James Okonkwo, Michael Torres, Lisa Nakamura
Independence	All members independent
Meetings (FY2025)	4 regular meetings
Charter Review	Biennial (last reviewed Q3 2025)

Primary Responsibilities:

Responsibility Category	Specific Duties	Frequency
Executive Compensation	Set CEO and executive officer compensation	Annual
Incentive Plans	Design and approve annual and long-term incentive plans	Annual
Equity Administration	Oversee equity compensation plans and grants	Quarterly
Pay Equity	Review pay equity analysis and actions	Annual
DEI Metrics	Review workforce diversity metrics	Semi-annual
Human Capital	Assess talent development, succession, culture	Annual
Compensation Philosophy	Approve compensation philosophy and peer group	Annual
Compensation Risk	Assess compensation risk alignment	Annual

Compensation Philosophy Integration:

Element	Application
Market positioning	Target 50th–75th percentile for total compensation
Pay for performance	Significant portion of executive pay tied to performance
Security/compliance goals	Executive objectives include security and compliance metrics
DEI accountability	Representation targets included in executive objectives
Long-term alignment	Equity vesting periods encourage long-term focus

4.3 Nominating and Governance Committee

Element	Detail
Chair	Dr. Priya Sharma
Members	Dr. Priya Sharma, James Okonkwo, Lisa Nakamura
Independence	All members independent
Meetings (FY2025)	3 regular meetings
Charter Review	Biennial (last reviewed Q4 2025)

Primary Responsibilities:

Responsibility Category	Specific Duties	Frequency
Board Composition	Assess skills, diversity, and refreshment needs	Annual
Director Nominations	Identify and evaluate director candidates	As needed
Board Evaluation	Conduct board and committee self-evaluations	Annual
Governance Policies	Review and recommend governance policy updates	Annual
ESG Oversight	Review ESG strategy and reporting	Semi-annual
Modern Slavery	Review Modern Slavery Statement	Annual
Sustainability	Review environmental commitments	Annual
Succession Planning	Oversee CEO and key executive succession	Annual

Board Skills Matrix:

Skill/Experience	Chen	Torres	Sharma	Okonkwo	Nakamura	Coverage
Technology/Product	✓		✓	✓		3/5
Cybersecurity			✓			1/5
Finance/Accounting		✓			✓	2/5
Legal/Regulatory					✓	1/5
Go-to-Market/Sales				✓		1/5
Public Company		✓	✓		✓	3/5
SaaS/Cloud	✓			✓		2/5
Enterprise Sales				✓		1/5
M&A		✓		✓	✓	3/5
International			✓		✓	2/5

---

5. Executive Leadership and Accountability

5.1 Executive Leadership Team

Executive	Title	Reports To	Key Governance Responsibilities
Sarah Chen	Chief Executive Officer	Board of Directors	Overall strategy, culture, stakeholder relations, Board recommendations
David Kim	Chief Financial Officer	CEO	Financial controls, investor relations, SOX readiness, audit coordination
Maria Santos	Chief Information Security Officer	CEO + Audit Committee (dotted)	Security program, risk management, incident response, Board briefings
Rachel Williams	Chief Privacy Officer	General Counsel	Privacy program, GDPR/CCPA compliance, DPA management, Board briefings
James Park	Chief Technology Officer	CEO	Engineering, product security, architecture, technology strategy
Angela Foster	General Counsel & Corporate Secretary	CEO	Legal, ethics, corporate governance, contracts, Board administration
Marcus Johnson	Chief People Officer	CEO	HR, talent, culture, DEI, compensation administration
Jennifer Lee	Chief Revenue Officer	CEO	Sales, customer success, revenue operations
Robert Chen	Chief Operating Officer	CEO	Operations, infrastructure, business continuity

5.2 Executive Committee Structure

Committee	Members	Purpose	Frequency
Executive Committee	CEO, CFO, CTO, General Counsel	Strategic decisions, significant transactions	Weekly
Security Council	CISO, CTO, General Counsel, CPO, COO	Security decisions, incident response	Monthly + as needed
Risk Committee	CFO, CISO, General Counsel, COO	Enterprise risk management	Monthly
Product Council	CEO, CTO, CRO, CPO	Product strategy, roadmap	Bi-weekly
People Council	CEO, CPO (People), General Counsel	Talent, culture, DEI	Monthly

5.3 CISO Access and Independence

Access Mechanism	Description
Direct CEO reporting	CISO reports directly to CEO
Audit Committee access	CISO has direct access to Audit Committee without management interference
Emergency escalation	CISO can request emergency Audit Committee session for SEV1 incidents
Budget independence	Security budget approved by CEO with Audit Committee visibility
Board attendance	CISO attends Board meetings for security briefings quarterly
Executive session	CISO meets with Audit Committee in executive session annually

---

6. Risk Management and Oversight

6.1 Enterprise Risk Management Framework

Risk Category	Executive Owner	Board/Committee Oversight	Key Controls
Cybersecurity	CISO	Audit Committee	Security Overview, SOC 2
Privacy & Data Protection	CPO	Audit Committee	Privacy Policy, GDPR program
Third-Party/Vendor	CISO + VP Procurement	Audit Committee	Third-Party Risk Management
Business Continuity	COO	Full Board (material events)	Business Continuity Plan
Regulatory & Compliance	General Counsel	Audit Committee	Compliance Frameworks
Financial	CFO	Audit Committee	Internal controls, external audit
People & Culture	Chief People Officer	Compensation Committee	DEI Report, Code of Conduct
Strategic	CEO	Full Board	Strategy reviews
Operational	COO	Audit Committee	Operations reviews
Reputation	CEO + General Counsel	Full Board	Crisis management
AI/Technology	CTO + CISO	Audit Committee	AI Usage Policy

6.2 Risk Assessment Process

Phase	Activity	Frequency	Output
Identification	Risk workshops, incident analysis, regulatory monitoring	Continuous	Risk register
Assessment	Impact and likelihood evaluation, control effectiveness	Annual (full), quarterly (update)	Risk ratings
Prioritization	Risk ranking, appetite comparison	Quarterly	Top risks list
Mitigation	Control implementation, risk transfer, acceptance	Ongoing	Mitigation plans
Monitoring	KRI tracking, control testing, incident correlation	Continuous	Risk dashboards
Reporting	Executive reporting, Board reporting	Quarterly	Risk reports

6.3 Risk Appetite Statement

Risk Category	Appetite Level	Description
Cybersecurity	Low	Zero tolerance for preventable breaches; aggressive risk reduction
Privacy	Low	Full compliance required; no tolerance for violations
Financial	Moderate	Conservative financial management; appropriate leverage
Operational	Moderate	Reliability prioritized; measured innovation
Strategic	Moderate-High	Appropriate risk-taking for growth; disciplined expansion
Reputational	Low	Protect brand and stakeholder trust
Compliance	Low	Full regulatory compliance required

6.4 Board Risk Reporting

Report	Content	Frequency	Recipient
Top Risks Dashboard	Top 10 risks, trend, mitigation status	Quarterly	Full Board
Security Metrics	Security KPIs, incidents, program status	Quarterly	Audit Committee
Privacy Metrics	Privacy KPIs, DSRs, regulatory developments	Quarterly	Audit Committee
Compliance Status	Certification status, audit findings, regulatory changes	Quarterly	Audit Committee
Incident Reports	SEV1 immediate; SEV2 monthly summary	Per severity	Audit Committee
Risk Assessment	Annual comprehensive risk assessment	Annual	Full Board

---

7. Ethics and Compliance Program

7.1 Ethics Program Governance

Element	Implementation	Oversight
Code of Conduct	Code of Conduct — annual certification	Board Audit Committee
Whistleblower Program	Whistleblower Policy — 24/7 hotline	Board Audit Committee
Anti-Corruption	FCPA/UK Bribery Act training, third-party due diligence	Audit Committee
Conflicts of Interest	Annual disclosure by directors and officers	Nominating & Governance Committee
Insider Trading	Policy with trading windows and pre-clearance	General Counsel
Vendor Ethics	Vendor Code of Conduct	Audit Committee
Modern Slavery	Modern Slavery Statement	Nominating & Governance Committee

7.2 Compliance Officer Structure

Role	Responsibilities	Reporting
General Counsel	Chief Compliance Officer; overall ethics program	CEO, Board Audit Committee
CISO	Security compliance, security-related regulations	CEO, Board Audit Committee
CPO	Privacy compliance, data protection regulations	General Counsel, Board Audit Committee
Compliance Manager	Day-to-day compliance operations	General Counsel

7.3 Board Ethics Oversight Metrics (FY2025)

Metric	Value	Board Review
Ethics hotline reports	23	Semi-annual summary
Substantiated findings	8 (35%)	Semi-annual summary
Retaliation claims	2 (unsubstantiated)	Immediate notification
Code certification completion	99.1%	Annual
Conflicts disclosed	47	Annual summary
Training completion	99.1%	Annual
Ethics culture survey	91% feel safe reporting	Annual

---

8. Shareholder Rights and Engagement

8.1 Current Ownership Structure

Acme Cloud is currently a privately held company with the following governance practices aligned with public company standards for future readiness:

Practice	Current Status	Public Company Standard
Audited financial statements	Annual audit	Required
Independent audit committee	Yes	Required
Independent compensation committee	Yes	Required
Majority independent board	Yes (80%)	Required (majority)
Code of conduct	Yes	Required
Whistleblower program	Yes	Required
Related party transaction policy	Yes	Required
Insider trading policy	Yes	Required

8.2 Shareholder Communication

Communication	Audience	Frequency	Content
Quarterly updates	Major shareholders	Quarterly	Financial results, operational metrics, strategic updates
Board observation rights	Lead investors	Per agreement	Board meeting attendance
Annual meeting	All shareholders	Annual	Financial review, governance matters, Q&A
Material developments	All shareholders	As needed	Significant transactions, leadership changes
Governance documents	Shareholders (NDA)	Upon request	Charter, bylaws, committee charters

8.3 Shareholder Approval Requirements

Matter	Approval Required
Board elections	Shareholder vote
Equity plan amendments	Shareholder vote
Major acquisitions	Shareholder consent per agreement
Equity issuances (above threshold)	Shareholder consent per agreement
Charter/bylaws amendments	Shareholder vote
Change of control	Shareholder vote per agreement

---

9. Director Compensation and Development

9.1 Non-Employee Director Compensation

Component	Amount	Notes
Annual cash retainer	$40,000	Paid quarterly
Board Chair additional retainer	$25,000	Independent chair
Audit Committee Chair retainer	$20,000	Additional to member fee
Compensation Committee Chair retainer	$15,000	Additional to member fee
Nominating Committee Chair retainer	$10,000	Additional to member fee
Audit Committee member retainer	$10,000	Per member
Other committee member retainer	$5,000	Per member
Initial equity grant	RSUs valued at $150,000	4-year vesting
Annual equity grant	RSUs valued at $75,000	1-year vesting
Meeting fees	None	Included in retainer

9.2 Director Orientation and Education

Program	Content	Timing
New director orientation	Business overview, strategy, financials, governance, security/privacy programs	Within 30 days of appointment
Cybersecurity briefing	Threat landscape, Company security posture, director responsibilities	Annual
Privacy/regulatory update	Privacy law developments, compliance obligations	Annual
Industry trends	Market dynamics, competitive landscape, technology trends	Annual
External education	Attendance at governance, security, or industry programs	Encouraged; Company-funded

9.3 Board Evaluation Process

Evaluation	Scope	Frequency	Process
Full Board self-evaluation	Board effectiveness, meeting quality, information flow	Annual	Written survey + discussion
Committee self-evaluation	Committee effectiveness, charter compliance	Annual	Written survey + discussion
Individual director feedback	Peer feedback (optional)	Biennial	Facilitated by N&G Chair
External evaluation	Independent governance review	Planned for 2027	Third-party facilitator

---

10. Succession Planning

10.1 CEO Succession Planning

Scenario	Plan Element	Board Oversight
Emergency succession	Interim CEO designation; documented authority transfer	Reviewed annually by N&G Committee
Planned succession	Internal candidate development; external market awareness	Discussed annually by full Board
CEO development	Ongoing feedback; development plan	Annual CEO evaluation by independent directors

10.2 Key Executive Succession

Role	Succession Depth	Development Plans	Board Visibility
CEO	Emergency interim designated	Board engagement	Full Board
CFO	1 internal candidate	Finance leadership development	Audit Committee
CISO	1 internal candidate	Security leadership development	Audit Committee
CTO	2 internal candidates	Technical leadership development	Full Board
General Counsel	External required	N/A	N&G Committee

10.3 Board Succession

Consideration	Current Status
Mandatory retirement	None currently
Term limits	None currently
Refreshment approach	Skills-based assessment; average tenure monitoring
Pipeline development	Ongoing candidate identification
Diversity targets	Maintain 40%+ gender diversity; seek additional expertise

---

11. SOC 2 and ISO 27001 Control Mapping

11.1 SOC 2 Trust Services Criteria Mapping

Control ID	Control Description	Governance Implementation
CC1.1	Demonstrates commitment to integrity and ethical values	Board oversight of ethics, Code of Conduct, tone from top
CC1.2	Board exercises oversight responsibility	Independent committees, regular meetings, risk oversight
CC1.3	Management establishes structure, reporting lines	Executive structure, clear responsibilities
CC1.4	Demonstrates commitment to competence	Director skills, executive qualifications, training
CC1.5	Enforces accountability	Performance management, disciplinary procedures
CC2.1	Obtains and generates relevant information	Board reporting, metrics, risk dashboards
CC2.2	Communicates internally	Management reporting, employee communication
CC2.3	Communicates externally	Shareholder communication, Trust Center
CC3.1	Specifies suitable objectives	Strategic planning, risk appetite
CC3.2	Identifies and assesses risks	ERM program, Board risk oversight
CC3.3	Considers fraud in risk assessment	Ethics program, internal controls
CC3.4	Identifies and assesses changes	Regulatory monitoring, risk updates
CC4.1	Selects and develops ongoing evaluations	Audit Committee oversight, internal audit
CC4.2	Evaluates and communicates deficiencies	Finding remediation, Board reporting
CC5.1	Selects and develops general controls	Control framework, policy structure

11.2 ISO 27001:2022 Annex A Control Mapping

Control	Control Title	Governance Implementation
A.5.1	Policies for information security	Board-approved security policy framework
A.5.2	Information security roles and responsibilities	CISO role, Audit Committee oversight
A.5.3	Segregation of duties	Committee independence, management separation
A.5.4	Management responsibilities	Executive accountability, Board oversight
A.5.31	Legal, statutory, regulatory and contractual requirements	Compliance program, regulatory monitoring
A.5.35	Independent review of information security	Audit Committee, external audit
A.5.36	Compliance with policies, rules and standards	Compliance monitoring, certification

---

12. Governance Timeline and Key Activities

12.1 Annual Governance Calendar

Month	Activity	Responsible
January	Board approval of strategic plan and budget	Full Board
February	Audit Committee financial statement review	Audit Committee
March	Compensation Committee pay equity review	Compensation Committee
April	Q1 security/privacy briefings	Audit Committee
May	Board strategy session	Full Board
June	Mid-year risk assessment	Audit Committee
July	Q2 security/privacy briefings	Audit Committee
August	Compensation benchmarking	Compensation Committee
September	Board skills assessment	N&G Committee
October	Q3 security/privacy briefings; annual meeting prep	Audit Committee, Full Board
November	Tabletop cyber exercise; CEO evaluation	Full Board
December	Annual policy reviews; budget approval	Full Board

12.2 FY2025 Governance Highlights

Date	Event	Outcome
January 2025	Board approved FY2025 strategic plan	Unanimous approval
March 2025	Audit Committee SOC 2 review	Clean opinion received
May 2025	New director appointment (Lisa Nakamura)	Approved unanimously
June 2025	Compensation Committee pay equity adjustments	$60K in adjustments approved
September 2025	Board skills assessment	Identified need for additional technology expertise
November 2025	Cyber tabletop exercise	Communication improvements identified
January 2026	Board approved ESG Report and Modern Slavery Statement	Published to Trust Center

12.3 FY2026 Governance Priorities

Priority	Target	Status
ISO 27001 certification	Q3 2026	On track
External board evaluation	Q4 2026	Planned
Board cybersecurity training	Q2 2026	Scheduled
Public company readiness assessment	Q4 2026	Planning
ESG framework enhancement	Ongoing	In progress

---

Related Trust Center documents

compliance frameworks, code of conduct, whistleblower, esg report, dei report, security overview, privacy policy, modern slavery

---

Document revision history

Version	Date	Author	Summary of changes
1.0	2024-06-01	Legal & Compliance	Initial Trust Center publication
2.0	2025-03-15	GRC Program	SOC 2 Type II alignment refresh; expanded subprocessors
2.5	2025-09-01	Security Engineering	Encryption standards update; ISO 27001 mapping
3.0	2026-01-15	Trust Center Program	Full procurement-grade expansion; 34-document set

---

Contact

Acme Cloud, Inc. 1200 Market Street, Suite 400 San Francisco, CA 94103, USA

Channel	Email	Use case
Trust & procurement	trust@acmecloud.com	Security questionnaires, trust reviews
Security	security@acmecloud.com	Incidents, vulnerabilities, control questions
Privacy	privacy@acmecloud.com	DSRs, privacy assessments
Legal	legal@acmecloud.com	Contractual, DPA, legal notices

---

13. Governance Document Availability

13.1 Document Access

Document	Availability	Access Requirements
Audit Committee Charter	Investors, Enterprise customers	NDA
Compensation Committee Charter	Investors, Enterprise customers	NDA
Nominating & Governance Committee Charter	Investors, Enterprise customers	NDA
Certificate of Incorporation	Investors	Standard request
Bylaws	Investors	NDA
Investor Rights Agreement	Signatories	Confidential
Board meeting minutes	Board members, auditors	Highly restricted

13.2 Governance Inquiries

Inquiry Type	Contact	Response Time
Investor governance questions	corporate-secretary@acmecloud.com	5 business days
Enterprise customer governance questions	trust@acmecloud.com	3 business days
Charter/document requests	corporate-secretary@acmecloud.com	10 business days
Shareholder communication	corporate-secretary@acmecloud.com	Per subject matter

---

14. Future Governance Evolution

14.1 Public Company Readiness

Preparation Area	Current Status	Gap	Target
Independent audit committee	Complete	None	Complete
SOX controls	In preparation	Control documentation	Q4 2026
Disclosure controls	Developing	Formalize procedures	Q3 2026
Investor relations	Basic	Build function	Q2 2026
Board independence	Exceeds requirements	None	Maintain
Committee charters	Public company standard	Minor updates	Q2 2026
D&O insurance	Adequate	Review limits	Annual

14.2 Governance Enhancement Roadmap

Enhancement	Timeline	Rationale
External board evaluation	2027	Governance best practice
Additional independent director	As needed	Skills coverage
Lead independent director	If chair structure changes	Governance balance
Public company policies	Pre-IPO	Regulatory compliance
Enhanced disclosure practices	Ongoing	Transparency

This Corporate Governance Framework is effective as of January 1, 2026. The document is reviewed annually and updated as governance practices evolve. For inquiries, contact corporate-secretary@acmecloud.com or trust@acmecloud.com.