Contract analysis

I. Executive Summary The purpose of this memorandum is to analyze and critique the "sufficient transformation" standard proposed by Meridian Credit intelligence, Inc. ("Meridian") in Article VII of the draft Master Data License Agreement ("MDLA") as a precondition to Quorum Insurance Holdings Corp.'s ("Quorum") ability to commercialize Derived Data to third parties. This analysis is being provided in advance of the n

II. Background and Procedural Context A. The Parties and the Transaction Quorum Insurance Holdings Corp. Quorum is a Delaware corporation, publicly traded on the Nasdaq Stock Market under the ticker symbol QIHC, and headquartered at 1200 Atlantic Street, Suite 3400, Stamford, Connecticut 06901. Quorum operates as a multi-line insurance carrier and insurtech platform, offering property and casualty, specialty, and lif

III. Detailed Analysis of Meridian's "Sufficient Transformation" Standard A. Text of Meridian's Proposed Provision The operative language of Meridian's proposed provision, as set forth in Section 7.4(b) of the draft MDLA (Meridian/KP&A draft, dated November 4, 2022), reads in full as follows:

Section 7.4(b). Commercialization of Derived Data. Licensee shall not sell, sublicense, distribute, or otherwise make available any Derived Data to any third party unless such Derived Data has been sufficiently transformed such that no Licensed Data can be reverse-engineered, extracted, or otherwise derived therefrom, as determined by Licensor in its sole and absolute discretion. It is important to note that Meridian

2. No Defined Criteria, Timelines, or Cure Mechanisms Even setting aside the structural conflict of interest, the "sufficient transformation" standard as drafted suffers from a complete absence of procedural safeguards. Specifically: No objective criteria. The provision contains no definition of what constitutes "sufficient transformation." It does not specify the methodology, the technical standard, the degree of tr

1. The "No Reverse-Engineering" Absolute Standard The substantive core of Meridian's proposed standard is the requirement that "no Licensed Data can be reverse-engineered, extracted, or otherwise derived" from the Derived Data. This is an absolute impossibility standard — it does not require that reverse-engineering be difficult, impractical, or commercially infeasible, but that it be impossible. No qualified data sc

2. Ambiguity in What Constitutes Meridian "Raw Data" The "sufficient transformation" standard prohibits the reverse-engineering of any "Licensed Data" — a defined term that encompasses all three Meridian data products (MCI Consumer Credit File, MCI CommercialView, and MCI AltSignal), comprising in the aggregate approximately 437 million records updated monthly. The standard does not clarify the level of granularity a

IV. Impact on QuorumScore™ and Quorum's Commercial Strategy A. QuorumScore™ Overview QuorumScore™ is Quorum's proprietary predictive underwriting model, designed to generate granular, individual-level risk scores for use in property and casualty insurance underwriting, pricing, and portfolio management. A United States Patent and Trademark Office trademark application for "QuorumScore" is pending under Serial Number

V. Proposed Objective Alternative Standards In lieu of Meridian's subjective, sole-discretion standard, we propose the following objective, measurable alternative standards for inclusion in a revised Article VII. These alternatives are designed to be technically defensible, commercially reasonable, consistent with market practice, and responsive to Meridian's legitimate interest in preventing the wholesale redistribu

VI. Negotiation Recommendations A. Immediate Actions Based on the analysis set forth in this memorandum, we recommend the following immediate actions:

1. Reject the "sole and absolute discretion" standard unequivocally. In any written or oral communications with Meridian and KP&A, Quorum's position should be framed in terms of (a) commercial unreasonableness, (b) Meridian's inherent conflict of interest as both counterparty and competitor, and (c) inconsistency with market practice for enterprise data-licensing transactions. The rejection should be firm and clear —