(xxxiii) OFAC. None of the Company, any of its subsidiaries or, to the knowledge of the Company, any director, officer, agent, employee, affiliate or representative of the Company or any of its subsidiaries is an individual or entity (“Person”) currently the subject or target of any sanctions administered or enforced by the United States Government, including, without limitation, the U.S. Department of the Treasury’s Office of Foreign Assets Control (“OFAC”), the United Nations Security Council, the European Union, His Majesty’s Treasury, or other relevant sanctions authority (collectively, “Sanctions”), nor is the Company located, organized or resident in a country or territory that is the subject of Sanctions; and the Company will not directly or indirectly use the proceeds of the sale of the Securities, or lend, contribute or otherwise make available such proceeds to any subsidiaries, joint venture partners or other Person, to fund any activities of or business with any Person, or in any country or territory, that, at the time of such funding, is the subject of Sanctions or in any other manner that will result in a violation by any Person (including any Person participating in the transaction, whether as underwriter, advisor, investor or otherwise) of Sanctions.
(xxxiv) Lending Relationship. Except as disclosed in the Registration Statement, the General Disclosure Package and the Prospectus, the Company (i) does not have any material lending or other relationship with any bank or lending affiliate of any Underwriter and (ii) does not intend to use any of the proceeds from the sale of the Securities to repay any outstanding debt owed to any affiliate of any Underwriter.
(xxxv) Statistical and Market-Related Data. Any statistical and market-related data included in the Registration Statement, the General Disclosure Package or the Prospectus are based on or derived from sources that the Company believes, after reasonable inquiry, to be reliable and accurate and, to the extent required, the Company has obtained the written consent to the use of such data from such sources.
(xxxvi) Cybersecurity, Information Technology, and Data Privacy. Except as would not be expected, individually or in the aggregate, to result in a Material Adverse Effect, during the past three (3) years: (A) to the Company’s knowledge, there has been no security breach or incident, unauthorized access or disclosure, or other compromise of or relating to the Company or its subsidiaries information technology assets and equipment, and computer systems, networks, hardware, software, and databases (collectively, “IT Systems”) or information that identifies, relates to or may reasonably be used to identify an individual, and is regulated under the Privacy Laws (defined below) (“Personal Data”) or other material confidential information; and (B) neither the Company nor its subsidiaries have been notified in writing of any security breach or incident, unauthorized access or disclosure or other compromise to their IT Systems or Personal Data. Except as would not be expected, individually or in the aggregate, to result in a Material Adverse Effect: (A): the Company and its subsidiaries have implemented appropriate controls designed to maintain and protect the integrity, availability, privacy and security of their IT Systems; and (B)the IT Systems are adequate and operational for the business of the Company as now operated. None of the software developed or owned by the Company is subject to any escrow obligation or any condition, obligation or other requirement that it be licensed pursuant to a free or open source software license or that the source code for such software be delivered, disclosed, licensed or otherwise made available to any other person. Except as would not be expected, individually or in the aggregate, to result in a Material Adverse Effect: (A) the Company and its subsidiaries comply and during the past three (3) years have complied with applicable laws or statutes rules and regulations of any Governmental Entity (the “Privacy Laws”), their respective internal policies and contractual obligations relating to the privacy and security of IT Systems and Personal Data and to the protection of such IT Systems and Personal Data, including the collection, use, transfer, processing, disposal, disclosure, handling, storage, and analysis of Personal Data; (B) during the past three (3) years, the Company has not received any written notice, claim, complaint, demand or letter from any person or Governmental Entity, in respect of its business, under applicable Privacy Laws; and (C) to the Company’s knowledge, during the past three (3) years, the Company has not been and is not the subject of any inquiry or investigation by any Governmental Entity regarding any of the foregoing.
12