Pineapple Financial Inc.

ITEM IC. CYBERSECURITY

The Company maintains policies and procedures designed to identify, assess, and manage cybersecurity risks that could affect its business operations, customer data, or information systems. These controls include use of third-party security software, multi-factor authentication, restricted administrative access, periodic penetration testing, and employee awareness training.

Management oversees cybersecurity risk as part of the Company’s broader enterprise risk-management program, and reports periodically to the Board of Directors on cybersecurity preparedness and incident response planning. The Company also engages qualified third-party service providers to monitor its network and maintain compliance with applicable privacy and data-protection regulations.

As of the date of this report, the Company has not identified any cybersecurity incidents or risks that have materially affected its business strategy, results of operations, or financial condition. The Company continues to evaluate and enhance its information-security posture as threats evolve.