AUDDIA INC.
For the period ended Dec 31, 2025. Filed Mar 6, 2026.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2025 · Filed Mar 6, 2026
Extracted filing text, with the paragraph anchors used by the comparison.
See the whole filing, with its images and exhibitsContents
Item 1C. Cybersecurity
| Item 1C. | Cybersecurity |
|---|
We recognize the importance of securing our data and information systems and have a process for assessing, mitigating, overseeing and managing cybersecurity and related risks. This process is supported by both management and our Board of Directors.
The Company’s cybersecurity function is led by a contracted Chief Technology Officer (“Contract CTO”), who provides strategic oversight and reports directly to the Chief Executive Officer. The Contract CTO is responsible for managing the Company’s cybersecurity risk and overseeing the protection of our networks, systems, and data. To execute these responsibilities, the Company utilizes a combination of internal personnel andmultiple external technology partners, including two independent IT service firms that support system administration, infrastructure management, and security monitoring. These resources employ industry-standard tools and processes designed to prevent, identify, escalate, investigate, and resolve security incidents in a timely manner. Additionally, with fewer than 20 employees and contractors, the Company’s small size facilitates rapid communication and coordinated response to potential cybersecurity risks.
The Company’s aggressive prevention and response protocols consist of the following:
| · | Password management – employees are encouraged to maintain strong passwords and are educated on the risks around passwords; |
| · | Network administration – the Company maintains a single, small-scale network which is configured to prevent external penetrations and is secured with limited administrative access and strong passwords; |
| · | Firewall – configured to prevent unauthorized external access; |
| · | Virtual Private Networks – closely and carefully managed following industry best practices; |
| · | Training and communication – the Company monitors various types of threats, routinely educates employees on high risk threats, and communicates any potential identified threats to all employees and related third parties. |
Our Board of Directors is responsible for overseeing our enterprise risk management activities. The Board of Directors receives an update on the Company’s risk management process and the risk trends related to cybersecurity at least annually. Additionally, on a quarterly basis, the Audit Committee will receive updates from Management on cybersecurity. Any material threat that may arise will be communicated to the Board of Directors and Audit Committee upon identification.
While the Company has not, as of the date of this Form 10-K, identified a cybersecurity threat or incident that resulted in a material adverse impact to its business, results of operations or financial condition, there can be no guarantee that the Company willnot experience such an incident in the future.
The text of this filing, as the company filed it with the SEC, without its images or exhibits. This is not investment advice.