Skip to main content

Nixxy, Inc.

For the period ended Dec 31, 2025. Filed Apr 15, 2026.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2025 · Filed Apr 15, 2026

NIXX$0.21-2.4%Stored close · as of Nov 9, 2026

Extracted filing text, with the paragraph anchors used by the comparison.

See the whole filing, with its images and exhibits

Item 1C. Cybersecurity

We recognize the importance of cybersecurity in protecting our operations, customer information, and proprietary data. We are committed to implementing robust security measures to mitigate the risk of cyber incidents that could potentially disrupt our business operations or compromise theintegrity of our data.

Engage Third-parties on Risk Management

Our cybersecurity strategy encompasses a comprehensive suite of measures designed to protect our systems and data from unauthorized access, use, alteration, or destruction. These measures include, but are not limited to:

·Implementation of advanced cybersecurity technologies, including firewalls, intrusion detection systems, and encryption protocols, to safeguard our network and data.
·Regular security assessments and penetration testing conducted by external experts to identify and remediate potential vulnerabilities.
·Establishing and maintaining incident response and recovery plans to ensure timely and effective responses to any cybersecurity incidents.

Oversee Third-party Risk

To manage the risks associated with third-party service providers, we plan to conduct regular calls with our providers to monitor compliance on an ongoing basis. Issues that arise are addressed immediately with mitigating measures added to avoid future problems.

Risks from Cybersecurity Threats

We have not faced cybersecurity risks in connection with our business strategy, results of operations, or financial condition, to date, we have not experienced threats to and security incidents related to our data and systems, including denial of service and phishing attacks.

Risk Management Personnel

Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with our third-party provider, the Company's manager of Information Technology (referred to as “IT”). Their knowledge, experience and relationship with our third-party vendor are instrumental in developing and executing our cybersecurity strategies.

Risk Management Reporting

The IT Team provides updates to upper Management on a routine basis or as potentially critical risks from cybersecurity threats or incidents arise. In addition, theaudit committee will be notified if any material cybersecurity concerns that may impact internal controls, data storage, or the integrity of our financial reporting.

Risk Management

Despite our diligent efforts to secure our systems and data, we acknowledge that no cybersecurity measures can completely eliminate the risk of cyber incidents. The evolving nature of cyber threats means that we must continually adapt our cybersecurity strategies to address new and emerging risks.

In recognition of these risks, these controls are supported primarily through trusted third-party enterprise platforms, including Google G-Suite, QuickBooks, our cloud-based telecommunications switching infrastructure, DocuSign, and other enterprise service providers utilized from time to time. The Company’s internal processes are to review and handling of notices, alerts, and reports generated by these platforms. Specifically:

·Continuous monitoring of networks and systems is performed by third-party providers, with the Company receiving and reviewing alerts and reports relating to any unauthorized or suspicious activity.
·Cybersecurity updates and enhancements are managed and deployed by the respective enterprise platform providers, with the Company relying on notifications and update communications provided by those vendors.
·Information sharing regarding cybersecurity threats and best practices is facilitated through third-party providers, industry partners, and relevant government agencies, with the Company receiving and assessing such communications as part of its oversight process.
·Maintaining cyber insurance to mitigate the financial impact of potential cybersecurity incidents.

Potential Impact of Cybersecurity Incidents

We recognize that a significant cybersecurity incident could have material adverse effects on our business, including operational disruptions, financial losses, legal liabilities, and damage to our reputation. Such incidents could also result in the loss of proprietary information or the exposure of sensitive customer data, leading to further financial and reputational harm.

In conclusion, while we are committed to employing comprehensive cybersecurity measures to protect against cyber threats, there are inherent risks associated with cybersecurity that could impact our business. We continue to monitor our cybersecurity landscape actively and adapt our defenses to mitigate these risks as much as possible.

ContentsView on SEC.gov

The text of this filing, as the company filed it with the SEC, without its images or exhibits. This is not investment advice.