Zapata Quantum, Inc.

SECTION 4.14. Data Processing; Privacy; Security.

(a) The Company has at all times been in compliance with all applicable (i) Law, (ii) policies, statements, representations, or notices, (iii) industry standards (including, as applicable, the Payment Card Industry Data Security Standard) by which it is bound, and (iv) requirements of any Contract, in each case, relating to the Processing of Company Data, privacy, data protection, or data security (collectively, the “Privacy and Data Security Requirements”), except, in each case, as has not been and would not reasonably be expected to be, individually or in the aggregate, material to the Company. The Company has at all applicable times had all material rights, consents, and authorizations to Process Company Data as Processed by or for the Company, and such rights, consents and authorizations will not be affected by the consummation of the transactions contemplated by this Agreement. There has been no material Action against the Company relating to the Processing of Company Data, privacy, data protection, data security, or the confidentiality, availability, or integrity of any Business System or Company Data, and to the knowledge of the Company, no such Action has been threatened.

(b) The Company has implemented reasonable and appropriate plans, policies, and measures to preserve and protect the confidentiality, availability, security, and integrity of all Business Systems and Company

Data, including data security, disaster recovery, incident response and business continuity measures, facilities, policies, and plans. There has been no material breach, security incident, or successful ransomware, denial of access attack, denial of service attack, hacking, or similar event with respect to any Business System, nor any accidental, unlawful, or unauthorized access to, or other Processing of, Company Data.