T Stamp Inc

Overview

Trust Stamp was incorporated under the laws of the State of Delaware on April 11, 2016 as “T Stamp Inc.” T Stamp Inc. and its subsidiaries (“Trust Stamp”, “we”, or the “Company”) develop and market identity authentication software for enterprise and government partners and peer-to-peer markets.

Trust Stamp develops proprietary artificial intelligence-powered identity and trust solutions at the intersection of biometrics, privacy, and cybersecurity, that enable organizations to protect themselves and their users while empowering individuals to retain ownership of their identity data and prevent fraudulent activity using their identity.

Trust Stamp tackles industry challenges including data protection, regulatory compliance, and financial accessibility, with cutting-edge technology including biometric science, cryptography, and machine learning. Our core technology irreversibly transforms identity information to create tokenized identifiers that enable accurate authentication while minimizing the need to store or share sensitive data. By retaining the usefulness of biometric-derived data while minimizing the risk, we allow businesses to adopt biometrics and other anti-fraud initiatives while protecting personal information from hacks and leaks.

Trust Stamp’s key sub-markets are identity authentication for the purpose of account opening, access, and fraud detection, the creation of tokenized digital identities to facilitate financial and societal inclusion, and in-community case management software for alternatives to detention and other governmental uses.

As biometric solutions proliferate, so does the need to protect biometric data. Stored biometric images and templates represent a growing and unquantified financial, security, and PR liability and are the subject of governmental, media, and public scrutiny since biometric data cannot be “changed” once they are hacked, as they are directly linked to the user’s physical features and/or behaviors. Privacy concerns around biometric technology have led to close attention from regulators, with multiple jurisdictions placing biometrics in a special or sensitive category of personal data and demanding much stronger safeguards around collection and safekeeping.

To address this unprecedented danger and increased cross-industry need to establish trust quickly and securely in virtual environments, Trust Stamp has developed its Irreversibly Transformed Identity Token, or IT 2TM, solutions, which replace biometric templates with a cryptographic hash that can never be rebuilt into the original data and cannot be used to identify the subject outside the environment for which it is designed.

Trust Stamp’s data transformation and comparison technology is vendor and modality-agnostic, allowing organizations including other biometric services providers to benefit from the increased protection, efficiency, and utility of our proprietary tokenization process. With online and offline functionality, Trust Stamp technology is effective in even the most remote locations in the world.

Trust Stamp also offers end-to-end solutions for multi-factor biometric authentication for account access and recovery, KYC/AML compliance, customer onboarding, and more, which allow organizations to approve more genuine users, keep bad actors from accessing systems and services and retain existing users with a superior user experience.

Markets

Trust Stamp has evaluated the market potential for its services in part by reviewing the following reports, articles, and data sources, none of which were commissioned by the Company, and none of which are to be incorporated by reference:

Data Security and Fraud

•In 2022, 4,145 publicly disclosed breaches exposed over 22 billion records according to the “2021 Year End Report: Data Breach QuickView” published by Flashpoint.

•The cumulative merchant losses to online payment fraud between 2023 and 2027 will exceed $343 billion globally according to a 2022 report titled “Fighting Online Payment Fraud in 2022 & Beyond” published by Juniper Research.

Trust Stamp addresses this market with biometric identity verification and biometric authentication solutions — which offer Trust Stamp’s proprietary irreversible identity token to perform biometric-based matching in a secure and tokenized domain, matching tokenized personally identifiable information while implementing liveness detection.

Biometric Authentication

•By 2027, the value of biometrically authenticated remote mobile payments will reach $1.2 trillion globally, according to a 2022 report titled “Mobile Payment Biometrics” published by Juniper Research.

•The global biometric system market size is valued at $41.1 billion per annum in 2023, with a forecast compound growth of 20.4% from 2023 to 2030 with a 2030 revenue forecast of $150.6 billion according to the 2023 report titled “Biometric Technology Market Size, Share & Trends Analysis Report By Component, By Offering, By Authentication Type, By Application, By End-use, By Region, And Segment Forecasts, 2023 — 2030” published by Grand View Research.

Trust Stamp addresses this market through its biometric authentication and liveness detection products — which offer Trust Stamp’s proprietary irreversible identity token to perform biometric matching in a secure and tokenized domain. This permits biometric authentication without the risk of storing pictures and biometric templates.

Financial and Societal Inclusion

•As of 2021, 1.4 billion people were unbanked according to the “Global Findex Database 2021” published by The World Bank.

•131 million small and medium-sized enterprises in emerging markets lack access to finance, limiting their ability to grow and thrive (UNSGSA Financial Inclusion Webpage, Accessed March 2023).

•The global market for Microfinance is estimated at $157 Billion in the year 2020, and is projected to reach $342 billion by 2026 according to the 2022 report titled “Microfinance - Global Market Trajectory & Analytics” published by Global Industry Analysts, Inc.

Trust Stamp’s biometric authentication, liveness detection, and information tokenization enable individuals to verify and establish their identities using data derived from biometrics. While individuals in this market lack traditional means of identity verification, Trust Stamp provides a means to authenticate identity that preserves an individual’s privacy and control over that identity.

Alternatives to Detention (“ATD”)

•The ATD market includes Federal, State, and Municipal agencies for both criminal justice and immigration purposes. Trust Stamp addresses the ATD market with applications built on Trust Stamp’s privacy-preserving solutions allowing individuals to comply with ATD requirements using ethical and humane technology methodologies. Trust Stamp has developed innovative patented technologies for use in the ATD market encompassing biometrics, geolocation, and tokenization as well as a proprietary, tamper-resistant, battery-free “Tap-In-Band” that can complement or replace biometric check-in requirements and provide a lower-cost and more humane alternative to traditional “ankle bracelet” technology.

In addition to its key sub-markets, the Company is developing products and working with partners and industry organizations in other sectors that offer significant market opportunities, in particular, the travel, healthcare, Metaverse platform and cryptographic key and account credential safekeeping sectors. For example, the Company has developed a “crypto key vault” solution that leverages proven facial biometric authentication and irreversible data transformation technology to protect private keys for digital assets while ensuring long-term data protection and access credential availability.

Principal Products and Services

Trust Stamp’s most important technology is the Irreversibly Transformed Identity Token TM(also known as the IT 2 TM, Evergreen Hash TM, EgHash TM and MyHash TM) combined with a data architecture that can use one or multiple sources of biometric or other identifying data. Once a “hash translation” algorithm is created, like-modality hashes are comparable regardless of their origin. The IT 2 protects against system and data redundancy, providing a lifelong “digital-DNA” that can store (or pivot to) any type of KYC or relationship data with fields individually hashed or (salted and) encrypted, facilitating selective data sharing. Products utilizing the IT 2 are Trust Stamp’s primary products, accounting for the majority of its revenues during the year ended December 31, 2023.

We adhere to the best practices outlined in the National Institute of Standards and Technology (“NIST”) and International Organization for Standardization (“ISO”) frameworks, and our policies and procedures in managing personally identifiable information (“PII”) comply with General Data Protection Regulation (“GDPR”) requirements wherever such requirements are applicable.

IT 2 Solutions

The IT 2 replaces biometric templates and scans with meaningless numbers, letters, and symbols to remove sensitive data from the reach of criminals using a proprietary process by which a deep neural network irreversibly converts biometric and other identifying data, from any source, into the secure tokenized identity. This IT 2 is unique to the user, is different every time it is generated from a live subject, and cannot be reverse-engineered and rebuilt into the user’s face or other original identity data.

Each token can be stored and compared to all other tokens from the same modality, allowing the Company’s AI-powered analytics to predict if a single subject has generated two or more tokens, even if the subject has passed conventional KYC with, e.g., falsified identity documents. Using this technology, an IT 2 can be employed for re-authentication purposes, including account recovery, password-less login, new account creation, and more, across the organization or even within a consortium of organizations, all in a low-cost and low-friction delivery that is fast and secure.

Our technology is being used for enhanced due diligence, KYC/AML compliance, synthetic identity fraud reduction and “second chance” approval for customer onboarding and account access, together with the delivery of humanitarian and development services. The solution allows organizations to approve more users, keep bad actors from accessing systems and services, and retain existing users with a superior user experience.

Our hashing and matching technology can maximize the effectiveness of all types of identity data while rendering it safer to use, store, and share. Whatever the source of identity data, it can be stored and compared as an IT 2. See the chart below for examples.

Distribution

Through licensing we allow customers to utilize our technology in a wide variety of applications. Uses can include (e.g.):

•The provision of services and hashing to enterprises, NGOs, and government, to overlay on third-party biometric and identity data.

•Hash licensing, translation, and certification services for biometric vendors.

•Management of zero-knowledge-proof services, whether as a tributary between Identity Lakes or operating consortium lakes.

•Tokenized identity creation for large scale deployments, such as humanitarian and government identity programs.

Licensing Agreements

License agreements are typically a hosted offering, on-premise solution, or both pursuant to which the customer pays for the initial product development plus a license fee for the use of Trust Stamp’s technologies on a periodic and/or volume-based basis. In addition to consuming and paying for Trust Stamp’s services for their own use, some key customers also serve as channel partners by offering Trust Stamp products to their own customer base, whether as stand-alone products, or integrated into their own services as upgraded product offerings.

SaaS Agreements

Software-as-a-Service ("SaaS") agreements are typically serviced through the Company’s Orchestration Layer platform, which is being utilized in new global identity authentication system with Fidelity Information Services, LLC ("FIS"). The platform includes our proprietary tokenization technology and is designed to provide easy integration with and access to, Trust Stamp’s products, chargeable on a per-use basis. The Orchestration Layer facilitates no-code and low-code implementations, making adoption faster and even more cost-effective for a broader range of potential customers. It is expected to accelerate the Company’s evolution, from being exclusively a custom solutions provider, to also offering a modular and highly scalable SaaS model with low-code implementation.

Competition

We can potentially work with any identity data from any source, potentially breaking vendor and modality lock-in, but our primary market target is the biometric service industry, which is growing exponentially while being threatened by a consumer, media, and legislative backlash against storing biometric data. The IT 2 can potentially be overlaid on any biometric or other identity data provider.

In general, we compete for customer budget with any company in the identity authentication industry. Major competitors in this space include companies such as NEXT Biometrics, IDEMIA, Synaptics, Cognitec, Innovatrics, Suprema, FaceTec, Rank One Computing, Acuant, Jumio, Onfido, Ping, and Mitek. However, we believe that, due to the uniqueness of our technology solution, the Company does not currently have any direct competitors for the core IT 2 solutions upon which the growth in our business plan is focused.

The commercial advantage of our solution is our ability to work across providers and modalities and we continue to pursue a first-mover advantage including our global–scale partnership which is achieving a network effect in the global

Humanitarian and Development market. We believe that this combination will make it unattractive for a potential competitor to replicate the six-years and multi-million dollars that we have already expended, to try and circumvent our multiple (and continuing) patent filings and/or offer a parallel product based upon a different technology.

We believe that given sufficient time and resources, we can augment any biometric modalities including face, hand, iris, voice, gait, and behavior, together with any other identifying data which places us in a unique position versus providers of biometric services.

We are unaware of any other provider being able to offer or support a proliferation of authentication modalities in this fashion, and therefore we believe there are no other companies that directly compete with us in this space. If our go-to-market strategy is successful, biometric service providers can be channel distributors, and not necessarily competitors.

Growth Strategy

Our strategy is to:

•Expand the scope and range of services that we provide to and through our existing clients.

•Continue to add significant new clients for our current and future services.

•Offer our services via channel partners with substantial distribution networks.

•Offer our technology on a “low code” basis, providing access via an orchestration layer and/or open-APIs to enable implementation by a broader range of clients.

•The addition of alternate authentication tools including non-facial-biometric options and non-biometric-knowledge and device-based tools facilitating two and multi-factor authentication.

•Offer our IT 2 technology for use by other biometric and data services providers to protect and extend the usability of their data.

•Provide ready-to-use / customizable platforms that leverage our IT 2 technology in specialized markets.

Human Capital

Given the geographic diversity of its team, and to facilitate cost-effective administration, Trust Stamp secures the services of its permanent team members through a variety of administrative structures that include wholly owned subsidiaries, professional employer organizations, and consulting contracts. As of December 31, 2023, the Company had 14 full-time and 1 part-time team member that works out of the United States, 26 full-time members and 1 part-time team member that work out of Malta, 10 full-time team members in Poland and Central Europe, 1 full-time and 4 part-time team members in the United Kingdom, 1 full-time team member in the Isle of Man, 14 full-time team members and 2 part-time team members working in the Philippines, 11 full-time team members working in Rwanda, 2 full-time team members in Denmark, and 1 full-time team member working remotely in India. Our permanent team is augmented as needed by contract development and other staff on both a long and short-term basis.

Outsourcing

We design and develop our own products. We use an outsourcing company, 10Clouds, for additional development staff as needed. 10Clouds is considered a related party. In addition, we also utilize SourceFit, a company in the Philippines, for PEO services, representing approximately 2% of our operating expenses during the year ended December 31, 2023. Amazon Web Services provides cloud hosting and processing services, representing approximately 3% of our operating expenses during the year ended December 31, 2023.

Key Customers

The Company’s initial business consisted of developing proprietary privacy-first identity solutions and then implementing them through custom applications built and maintained for a small number of key customers. In 2022, the Company added to its product offerings a modular and highly scalable SaaS model with low-code or no implementation (“the Orchestration Layer”). Although the Company remains open to significant opportunities to deliver custom solutions, sales of Orchestration Layer products are the primary focus of the Company’s sales and development initiatives. This strategic pivot in the Company’s go-to-market approach negatively impacted revenue in 2023 while we believe that it will substantially increase potential revenue in 2024 and thereafter.

Historically, the Company generated most of its income through two long-term partnerships, comprising a relationship with an S&P 500 bank with services provided pursuant to a Master Software Agreement entered into in 2017, together with a relationship with Mastercard International (“Mastercard”) with services provided under the terms of a ten-year technology services agreement entered into in March 2019 (the "TSA”). Both of those relationships remain strong, and the Company anticipates future revenue growth from the two relationships.

Under the TSA, IT 2 TM technology is being implemented by Mastercard for Humanitarian & Development purposes as a core element of its Community Pass and Inclusive Identity offerings. Use cases include not only financial services for individuals and businesses but also empowering people and communities to meet basic needs, such as nutritious food, clean water, housing, education, and healthcare. The Company is paid to develop and host software solutions utilizing the IT 2 and to support Mastercard’s implementations. In addition, the Company is paid on a “per user per year” basis for all transactions utilizing its technology. In December of 2022, the Company entered into a modification of the agreed pricing schedule with Mastercard to move from a per-use to a per-user-year model to broaden the range of potential use cases. The TSA may be terminated by either party in the event of a material breach by the other party that remains uncured within thirty days after notice is received of such a breach. Either party may terminate the TSA if the other party becomes, including, but not limited to, insolvent, subject to bankruptcy, dissolved, or liquidated. Unless the TSA is terminated, the TSA will automatically renew for additional one year-periods in perpetuity unless either party provides ninety days written notice of intent not to renew. To date, the Company has received guaranteed minimum annual payments on account of usage. According to the October 2023 interview of Mastercard Executive Vice President and Founder of the Community Pass from the article titled “Mastercard’s Community Pass founder says digital ID platform improving lives, digital inclusion” published by Biometric Update. Mastercard’s Community Pass program currently serves approximately 3.5 million users and is targeting 30 million users by 2027. Based upon information provided to us by Mastercard we anticipate user-based revenue starting in 2024 and growing year-on-year thereafter.

In 2022, the Company expanded its key customer base to include a relationship with FIS, a relationship-focused upon the implementation of our Orchestration Layer and underlying technologies in FIS’ Global KYC product offering.

The Orchestration Layer is a low-code platform that is designed to be a one-stop shop for Trust Stamp services and provides easy integration to our products; chargeable on a per-use basis. The Orchestration Layer utilizes the Company’s next-generation identity package, offering rapid deployment across devices and platforms, with custom workflows that seamlessly orchestrate trust across the identity lifecycle for a consistent user experience in processes for onboarding and KYC/AML, multi-factor authentication, account recovery, fraud prevention, compliance, and more. The Orchestration Layer facilitates no-code and low-code implementations of the Company’s technology making adoption and updating faster and cost-effective for a broader range of potential customers.

In the third quarter of 2022, the Company acquired its first 2 new customers on the Orchestration Layer through its partnership with FIS, and in the fourth quarter of 2022, 4 additional FIS customers onboarded. As of December 31, 2023, a total of 40 financial institutions with over $327 billion in assets have been onboarded via FIS, bringing the total number of (FIS and non-FIS) customers either fully implemented or are currently implementing the Orchestration Layer to 43. The first (non-FIS) client onboarded to the Orchestration Layer in the third quarter of 2022 has generated $233 thousand of revenue for the Company to date including $182 thousand during the year ended December 31, 2023. Although each of the institutions onboarded via FIS pays a small onboarding fee, given the typical time taken by a financial institution to test, implement, and roll out any new technology, the Company does not anticipate significant revenue from the new FIS customers until 2024.

Reinforced by the product-market fit indicated by the FIS roll-out, the Company is building an internal direct sales force to offer the Orchestration Layer to non-FIS institutions. A key criterion for the account executives recruited is possessing significant experience and a successful track record in the identity solutions market. The Company anticipates significant banked revenue in 2024.

In Management's opinion, while the unanticipated loss of any one of our current customers, including our channel partnership with FIS, could have an adverse effect on the Company’s financial position, it would not prevent us from continuing our operations.

Regulation

Our business is not currently subject to any licensing requirements in any jurisdiction in which we operate, other than the requirement to hold a business license in the City of Atlanta (with which we are in compliance), and the requirement to hold a trading license in Rwanda (with which we are in compliance). Given the significant focus on the use of biometrics in many countries, we do anticipate additional regulation being introduced in one or more jurisdictions in which we operate, and such requirements could be burdensome and/or expensive or even impose requirements that we are unable to meet.

We are subject to substantial governmental regulation relating to our technology and will continue to be for the lifetime of our Company. By virtue of handling sensitive PII and biometric data, we are subject to numerous statutes related to data privacy, and additional legislation and given the current focus on the collection, storage, and use of biometrics, additional regulation should be anticipated in every jurisdiction in which we operate. Examples of American and European federal statutes we could be subject to are:

•Health Insurance Portability and Accountability Act (HIPAA)

•Health Information Technology for Economic and Clinical Health Act (HITECH)

•The General Data Protection Regulation 2016/679 (GDPR)

•ePrivacy Privacy Directive

•The California Privacy Rights Act (CPRA)

•The California Consumer Privacy Act (CCPA)

•Biometric Information Privacy Act (BIPA)

HIPAA and HITECH

Under the administrative simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act “HITECH”), the U.S. Department of Health and Human Services (“HHS”) issued regulations that establish uniform standards governing the conduct of certain electronic healthcare transactions and requirements for protecting the privacy and security of protected health information (“PHI”), used or disclosed by covered entities and business associates. Covered entities and business associates are subject to HIPAA and HITECH. Our subcontractors that create, receive, maintain, transmit, or otherwise process PHI on behalf of us are HIPAA “business associates” and must also comply with HIPAA as a business associate.

HIPAA and HITECH include privacy and security rules, breach notification requirements, and electronic transaction standards.

The privacy rules cover the use and disclosure of PHI by covered entities and business associates. The privacy rules generally prohibit the use or disclosure of PHI, except as permitted under certain limited circumstances. The privacy rules also set forth individual patient rights, such as the right to access or amend certain records containing his or her PHI, or to request restrictions on the use or disclosure of his or her PHI.

The security rules require covered entities and business associates to safeguard the confidentiality, integrity, and availability of electronically transmitted or stored PHI by implementing administrative, physical, and technical safeguards. Under HITECH’s Breach Notification Rule, a covered entity must notify individuals, the Secretary of the HHS, and in some circumstances, the media of breaches of unsecured PHI.

In addition, we may be subject to state health information privacy and data breach notification laws, which may govern the collection, use, disclosure, and protection of health-related and other personal information. State laws may be more stringent, broader in scope, or offer greater individual rights with respect to PHI than HIPAA, and state laws may differ from each other, which may complicate compliance efforts.

Entities that are found to be in violation of HIPAA as the result of a failure to secure PHI, a complaint about our privacy practices, or an audit by HHS, may be subject to significant civil and criminal fines and penalties and additional reporting and oversight obligations if such entities are required to enter into a resolution agreement and corrective action plan with HHS to settle allegations of HIPAA non-compliance.

GDPR

The European Union's General Data Protection Regulation ("GDPR") imposes onerous accountability obligations requiring data controllers and processors to maintain a record of their data processing and policies. It requires data controllers to implement more stringent operational requirements for processors and controllers of personal data, including, for example, transparent and expanded disclosure to data subjects (in a concise, intelligible, and easily accessible form) about how their personal information is being used, imposes limitations on retention of information, increases requirements pertaining to health data and pseudonymized (i.e., key-coded) data, introduces mandatory data breach notification requirements, and sets higher standards for data controllers to demonstrate that they have obtained valid consent for certain data processing activities. Fines for non-compliance with the GDPR will be significant—the greater of €20 million or 4% of global turnover. The GDPR provides that European Union member states may introduce further conditions, including limitations, to make their own further laws and regulations limiting the processing of genetic, biometric, or health data.

ePrivacy Directive

The ePrivacy directive sets out the rules relating to the processing of personal data across public communications networks. This directive requires businesses to ensure consent requests are made and that consent is received from the user before the use of cookies is made. Businesses must communicate the privacy rules with accurate and specific information regarding the data contained in the cookie. Information must be communicated before the consent requests are made, in plain language. Organizations must ensure that users are able to withdraw consent in the same simple manner as the initial consent request.

CPRA and CCPA

The California Privacy Rights Act ("CPRA") and the California Consumer Privacy Act ("CCPA") define and establish various rights that consumers residing in California have over the privacy of their data along with the responsibilities of businesses when collecting personal information. It requires businesses that control the collection of consumers’ personal information to inform them of the category, purpose, and duration the business intends to retain such information. It lists the consumers’ right to correct their data and have their data deleted. Customers may also exercise their right to limit the sale or sharing of their personal or sensitive personal information. Fines for non-compliance can range from $100 to $750 per consumer per incident. Additionally, in certain cases, the California Privacy Protection Agency may impose administrative fines ranging from $2,500 to $7,500 for each violation.

BIPA

The Biometric Information Privacy Act ("BIPA"), which was enacted in 2008, addresses the collection, use, and retention of biometric information by private entities. Under the law, a private entity must inform an individual, or their legally authorized individual, that the biometric information is being collected and stored, and the specific purpose and the length of time for the collection, storage, and use of the biometric information, before obtaining or possessing their biometric information for the purposes of capturing, storing or sharing it. In addition, prior to collecting any biometric information, the regulation required businesses to obtain a written release for the collection of the biometric information from the individual, or the individual’s legally authorized representative after notice has been given. BIPA provides statutory damages of up to $1,000 for each negligent violation, and up to $5,000 for each intentional or reckless violation.

Intellectual Property

Patents

A summary of the Company’s issued patents and pending patent applications on April 1, 2024 is provided in the table below.

Trademarks

The following is a summary of Trust Stamp’s issued and pending Trademarks as of April 1, 2024.

Subsidiaries and Affiliates

Given the geographic diversity of our team and to facilitate cost-effective administration, Trust Stamp conducts various aspects of its operations through subsidiaries. All subsidiaries share resources across the entire Trust Stamp organization. The officers and directors of Trust Stamp have influence over the operations of all subsidiaries and employees across jurisdictions. Only one of our subsidiaries, Biometric Innovations Limited, has its own management team.

T Stamp Inc. Corporate Structure Chart

Operational Subsidiaries

Tstamp Incentive Holdings. On April 9, 2019, management created a new entity, Tstamp Incentive Holdings (“TSIH”) to which the Company issued 320,513 shares of Class A Common Stock that the Board of Directors of TSIH could use for employee stock awards in the future. The purpose of the entity was to provide an analogous structure to a traditional stock incentive plan. As of December 31, 2023, 54,734 shares of Class A Common Stock are still held by TSIH – however, all of these shares of Class A Common Stock have been allocated for issuance pursuant to employee Restricted Stock Units that vested on January 2, 2024. As of the date of this report, no shares of Class A Common Stock are held by TSIH as all shares have been issued pursuant to employee Restricted Stock Units. The Company has no plans to issue additional equity securities to TSIH and as such, it is expected this entity will become dormant going forward.

Biometric Innovations Limited (formerly “Trust Stamp Fintech Limited”). Biometric Innovations Limited is our Company’s United Kingdom ("UK") operating subsidiary. It was established to act as the contracting entity for development contractors in the UK, and it has its own board and management team. The purpose of this entity was to establish beachhead operations in the country to service a contract entered by the Company with the National Association of Realtors and Property Mark. This entity serves as a sales and marketing function for the product “NAEA” which was developed for the contract between the listed parties. On June 11, 2020, the Company entered into a stock exchange transaction with Biometric Innovations Limited, becoming a 100% owner of the entity. The stock exchange transaction was not pursuant to any formal written agreement.

Trust Stamp Malta Limited. Trust Stamp Malta Limited is a wholly owned subsidiary of T Stamp Inc. It operates an R&D Campus in the Republic of Malta, for which it has entered into a lease with a local commercial landlord in Malta, Vassallo Group Realty Ltd. The goal of Trust Stamp Malta Limited is to advance our biometric authentication technology. As part of the creation of this entity, we entered into an agreement with the government of Republic of Malta for a repayable advance of up to €800,000 to cover 75% of the first 24 months of payroll costs for any employee who begins 36 months from the execution of the agreement on July 8, 2020.

Trust Stamp Rwanda Limited. The Company opened an office in Rwanda, Africa in April 2021. The Company has established an R&D center in Rwanda together with a back-office facility for the purpose of our expansion into Africa.

Metapresence Limited. Trust Stamp established Metapresence Limited on November 23, 2021 as a wholly owned crypto-asset subsidiary in the Isle of Man. Metapresence Limited participates in The Digital Isle of Man Accelerator Program, which provides access to a range of government services including regulatory acceleration support and guided access into the regulatory sandbox, where flexible licensing conditions enable digital asset businesses to explore opportunities and adapt as the technology evolves. Metapresence Limited is intended to market the group’s Metaverse related products for use cases outside the European Union. As of the date of this report, the entity has no operations.

Trust Stamp Denmark ApS. Trust Stamp established Trust Stamp Denmark ApS on June 6, 2021 as a wholly owned subsidiary in Copenhagen, Denmark. Trust Stamp Denmark ApS focuses on developing and marketing GDPR compliant products in Denmark and throughout the European Union from a strategic Danish base that can passport authorized products throughout the European Union. In furtherance of that goal, Trust Stamp Denmark ApS has obtained D-Seal Certification and is working with a prominent Danish law firm to publish opinions on the status of Trust Stamp’s products under GDPR.

Trust Stamp Nigeria Limited — Trust Stamp established Trust Stamp Nigeria Limited on January 31, 2024 as a wholly-owned subsidiary in Lagos, Nigeria. The establishment of the entity is aimed at exploring business opportunities and conducting operations in Nigeria.

Quantum Foundation—Trust Stamp Malta Limited established Quantum Foundation on October 13, 2022 as a wholly-owned subsidiary in the Republic of Malta. The establishment of the entity is to support the development of early-stage leading edge technology companies in the Republic of Malta. Quantum Foundation collaborated with Malta Enterprise and Plug and Play Switzerland to establish a Malta Acceleration Program to foster the start-up community in the country. The Program's intention is to drive innovation in the Republic of Malta, and ensure that everyone is able to enjoy the benefits of the latest technologies.

Non-Operational Subsidiaries

AIID Payments Limited. The Company established AIID Payments Limited to provide payments services to NGO’s and other non-profit and social-welfare entities and activities. As of the date of this report, the entity has no operations, and is essentially dormant.

T Avatar LLC. Trust Stamp established T Avatar LLC to provide anonymized age-verification tools for minors participating in online activities. The Company has completed the process of administratively dissolving T Avatar LLC and the dissolution was effective February 28, 2023.

Finnovation LLC. The Company established Finnovation LLC to provide an innovative FinTech, Blockchain and Digital Identity innovation incubator. As of the date of this report, this entity has no operations, and is essentially dormant.

T Stamp LLC. As described above, the Company was originally founded as “T Stamp LLC”, formed on November 9, 2015 as a Georgia limited liability company. In 2016, the Company effected a “hive down” business reorganization whereby the business of the Company was transferred into to a newly formed, wholly owned subsidiary, which was T Stamp Inc. (i.e. the Company). As of the date of this report, the Company is no longer a subsidiary of T Stamp LLC, and T Stamp LLC is no longer a majority owner of the Company. On January 6, 2022 all shares held by T Stamp LLC were distributed to its members on a pro rata basis according to their respective membership interests. On September 19, 2023, the Company received the Certificate of Termination from the state of Georgia, which represents the completion of dissolving T Stamp LLC.

Sunflower Artificial Intelligence Technologies. Based out of Poland, Trust Stamp established Sunflower Artificial Intelligence Technologies as the contracting entity for development contractors in Poland and Central Europe As of the date of this report, the contractors have entered into direct contracts with T Stamp Inc. On May 10, 2023, the Company received the Termination Resolution from the Polish Department of the National Court Register, which represents the completion of dissolving Sunflower Artificial Intelligence Technologies.

Trusted Mail Inc. The Company established Trusted Mail Inc. for development of an encrypted e-mail product (Trusted Mail ®) using our Company’s facial recognition technology. Trusted Mail technology is held by Trusted Mail, Inc., which is a majority-owned subsidiary of Trust Stamp Inc.. The remainder of Trust Mail Inc. is owned by FSH Capital, LLC and Second Century Ventures, which are related parties of the Company. As of the date of this report, this entity has no operations, and is essentially dormant.

TSI GovTech Corporation. Trust Stamp established TSI GovTech Corporation to contract for data management and server operations in Canada. This entity has had no operations since its inception.

Global Server Management Inc. The Company established Global Server Management Inc. to contract for data management and server operations in Canada. This entity has had no operations since its inception.

Available Information

Our website is www.truststamp.ai. As soon as reasonably practicable after such material is electronically filed or furnished to the Securities and Exchange Commission ("SEC"), our annual reports, quarterly reports, and current reports on form 8-K and all amendments to those reports are available on this website, free of charge.

Alternatively, you may access these reports at the SEC’s website at www.sec.gov.