Contract analysis

1. Master Software-as-a-Service Agreement (MSA): The principal agreement governing the subscription, licensing, service levels, data security, intellectual property, indemnification, limitation of liability, term, termination, and other core terms of the parties' relationship.

2. Order Form: The initial order form to be executed concurrently with the MSA, setting forth the specific subscription tiers, licensed user counts, pricing, payment schedule, and implementation milestones applicable to the Meridian deployment.

3. SLA Exhibit (Exhibit A): A detailed service level agreement exhibit specifying uptime availability commitments, performance metrics, measurement methodologies, SLA credit calculations, credit cap structures, exclusions, and critical incident response and escalation procedures.

4. Security Exhibit (Exhibit B): A comprehensive data security exhibit setting forth Skybridge's technical and organizational security measures, encryption standards, access controls, vulnerability management, penetration testing obligations, security incident notification procedures, and audit and compliance frameworks.

5. Data Processing Addendum (DPA) (Exhibit C): A data processing addendum governing the processing, storage, and transmission of Meridian's data, including Gramm-Leach-Bliley Act ("GLBA") nonpublic personal information ("NPI") and personally identifiable information ("PII"), in compliance with applicable data protection laws and regulations.

6. Acceptable Use Policy (Exhibit D): An acceptable use policy setting forth the permitted and prohibited uses of the SkyComply™ platform by Meridian and its authorized users.

7. Source Code Escrow Agreement: A three-party source code escrow agreement among Skybridge, Meridian, and Sentinel Escrow Services, Inc. (Escrow Agreement No. SCE-2025-04417), providing for the deposit of SkyComply™ source code and release under specified trigger events (e.g., Skybridge insolvency, material uncured breach, or cessation of business operations).

8. Subprocessor Flow-Down Terms Addendum (Orion Cloud Services, Inc.): A subprocessor addendum or flow-down agreement addressing the data processing and security obligations that flow through from the MSA to Skybridge's cloud infrastructure provider, Orion Cloud Services, Inc., which hosts the SkyComply™ platform.

9. Certificate of Insurance Request Letter (Coastal Assurance Corporation): A formal request to Skybridge's cyber liability and errors & omissions insurer, Coastal Assurance Corporation, for the issuance of a certificate of insurance and any endorsements required by Meridian, including potential additional insured status.

10. Pinnacle Ridge Board Consent: A written board consent from Pinnacle Ridge Capital Partners, LP, authorizing Skybridge to enter into the MSA and related transaction documents, in satisfaction of PRCP's contractual approval right over contracts exceeding $25,000,000 in total contract value. The form of consent will be prepared by this engagement team and submitted to Alcott & Grenier LLP for review. SECTION 4: SCOP