FR EA
1025-00008 · Quorum Insurance Holdings · Client Strategy
memo-pre-negotiation-strategy-risk.docx DOCUMENT M&A / Corporate
4 / 76 ← → ✕
Contract analysis Extract to table

PRIVILEGED AND CONFIDENTIAL — ATTORNEY-CLIENT COMMUNICATION — ATTORNEY WORK PRODUCT

MEMORANDUM

August 22, 2022

TO: Carolyn Whitford, General Counsel & Executive Vice President, Quorum Insurance Holdings Corp.

CC: Gregory Stahl, Vice President, Legal Affairs, Quorum Insurance Holdings Corp.

FROM: Leonard Cross, Partner, and Wendy Schultz, Associate, Calderwood & Harkness LLP

RE: Pre-Negotiation Strategy & Risk Assessment — Proposed Enterprise Data-Licensing Arrangement with Meridian Credit intelligence, Inc.

Matter No.: C&H Matter No. 1025-00008

Right-click to update Table of Contents

I. Executive Summary

Calderwood & Harkness LLP ("C&H" or the "Firm") was engaged on August 8, 2022 to advise, negotiate, and document a five-year enterprise data-licensing arrangement (the "Transaction" or the "Proposed License") between Quorum Insurance Holdings Corp. ("Quorum" or the "Company"), a Delaware corporation listed on Nasdaq (ticker: QIHC) and headquartered at 1200 Atlantic Street, Suite 3400, Stamford, CT 06901, and Meridian Credit intelligence, Inc. ("Meridian" or "MCI"), a Georgia corporation, privately held, headquartered at 3300 Peachtree Road NE, Suite 2100, Atlanta, GA 30326. This memorandum sets forth our recommended pre-negotiation strategy, provides an assessment of Quorum's leverage and associated risks, identifies Meridian's likely positions and underlying motivations, and recommends a tactical approach in advance of the term sheet exchange phase.

The Transaction carries a total deal value of $60,000,000 over the five-year initial term, structured as $10,800,000 in Year 1 and $12,300,000 per year in Years 2 through 5, together with a one-time implementation fee of $1,500,000. The license would grant Quorum access to Meridian's consumer credit-file data, commercial credit data, and alternative-data feeds, which Quorum intends to integrate into its automated underwriting, fraud detection, and customer propensity scoring operations.

Based on our preliminary analysis of the commercial terms, regulatory landscape, and counterparty dynamics, we have identified two critical negotiating issues that are expected to dominate the negotiation:

1. Most Favored Nation ("MFN") Pricing Clause. Quorum's demand for contractual assurance that the per-record pricing it receives under the license will be no less favorable than pricing offered by Meridian to comparable insurance-industry licensees.

2. Derived-Data Ownership and Commercialization Rights. Quorum's rights to create, own, and commercially exploit derived data products — including, most critically, QuorumScore™ outputs — that are built using Meridian's licensed data as an input.

These two issues implicate Quorum's competitive strategy and revenue growth projections, and we anticipate that Meridian, under the influence of its majority private-equity owner and IPO advisors, will resist meaningful concessions on both.

The parties executed a mutual Non-Disclosure Agreement (NDA-QIH-MCI-2022-001) on August 15, 2022, and we expect Meridian to deliver its initial term sheet by approximately mid-September 2022. Meridian's outside counsel for this Transaction is Kessler Pruitt & Ashe LLP ("KP&A"), based in Atlanta, with Partner Graham Whitley serving as lead counsel. KP&A is a well-regarded firm with significant experience in technology licensing and data transactions, and we expect the negotiations to be conducted at a high level of sophistication on both sides.

The C&H team assembled for this engagement is as follows:

• Leonard Cross, Partner — Responsible Partner

• Nathaniel Bower, Partner — Billing Partner

• Wendy Schultz, Associate — Lead Associate

• Omar Siddiqui, Associate — Working Associate

• Patricia Heng, Senior Counsel, Technology Transactions

• David Cartwright, Partner, Data Privacy & Cybersecurity

• Lisa Johannsen, Associate, Data Privacy

• Marcus Weill, Associate, Corporate/Commercial

The purpose of this memorandum is to equip Quorum's General Counsel and legal team with a comprehensive strategic framework before substantive negotiations commence. In the sections that follow, we provide a detailed transaction overview, assess Quorum's negotiating leverage (both strengths and weaknesses), analyze Meridian's likely positions and the motivations driving them, identify key risks, and recommend a prioritized and sequenced negotiating strategy.

II. Transaction Overview

A. Business Rationale for the License

Quorum intends to license Meridian's data products in order to ingest consumer credit-file data, commercial credit data, and alternative-data feeds into Quorum's proprietary analytics infrastructure. The licensed data will be used to enhance automated underwriting models, improve claims-fraud detection algorithms, and refine customer propensity scoring across Quorum's property and casualty, life, and specialty insurance lines. The Transaction is driven by Quorum's enterprise data strategy, which seeks to integrate best-in-class third-party data sources with Quorum's proprietary first-party data to achieve superior risk assessment and pricing accuracy.

Quorum's Chief Data Officer, Rajesh Anand, and SVP Underwriting Analytics, Diane Lowell, have identified the Meridian data as mission-critical for Quorum's competitive strategy. Mr. Anand's team has conducted preliminary data-quality assessments indicating that Meridian's consumer credit-file coverage and alternative-data feeds are among the most comprehensive available in the U.S. market, and that integrating this data into Quorum's existing analytics platform would produce statistically significant improvements in underwriting accuracy and fraud detection rates.

Central to Quorum's competitive advantage — and to the strategic importance of this Transaction — is QuorumScore™, Quorum's proprietary predictive underwriting model. QuorumScore is the subject of a pending USPTO application (Serial No. 97/482,116) and represents a significant investment in data science and actuarial engineering. QuorumScore blends Meridian credit data with Quorum's first-party claims, policy, and telematics data to produce a composite risk score that Quorum uses internally for underwriting decisions and that Quorum plans to license externally as a B2B data product. Quorum projects that the QuorumScore B2B licensing revenue line will generate $40–50 million in annual revenue by 2027, making it a material component of Quorum's growth narrative and a key driver of shareholder value.

In addition, the license is intended to support Quorum's expanding insurtech platform operations. As Quorum continues to develop digital distribution channels and embedded insurance products, access to real-time credit and alternative data through Meridian's API delivery capabilities will be essential to delivering the instantaneous underwriting decisions that these platforms require.

The combination of these internal and external use cases — internal underwriting enhancement, fraud detection, and the external commercialization of QuorumScore — makes this Transaction one of the most strategically significant data-licensing arrangements that Quorum has contemplated. It also makes the negotiation of derived-data rights a matter of existential importance to Quorum's growth strategy.

B. Data Products at Issue

The proposed license would cover three distinct Meridian data products, each with its own coverage, delivery method, and volume characteristics:

The total estimated monthly volume under the proposed license is approximately 437 million records per month, which represents approximately 87.4% of the 500 million records/month base tier contemplated in the preliminary pricing structure. This leaves a meaningful but limited buffer before overage pricing would apply. Given Quorum's growth trajectory and the anticipated expansion of insurtech platform operations, we should carefully analyze whether the 500 million records/month base tier provides sufficient headroom over the five-year term, or whether a higher base tier should be negotiated at the outset.

The delivery architecture — combining SFTP batch delivery with REST API real-time access for the Consumer Credit File product — will require significant technical integration work on both sides. The one-time implementation fee of $1,500,000 reflects the cost of this integration, and the detailed technical specifications will be documented in a Technical Schedule A to the Master Data License Agreement ("MDLA"). Priya Nair, Quorum's Director of Data Engineering, will be the primary technical contact for this workstream and should be consulted on all data delivery specifications during the drafting of Technical Schedule A.

C. Deal Economics

The aggregate deal economics of the proposed license are summarized as follows:

Total Deal Value: $60,000,000 over the five-year initial term

Fee Structure:

Reconciliation: $10,800,000 (Year 1) + $49,200,000 (Years 2–5: $12,300,000 × 4) = $60,000,000

The Year 1 fee is discounted relative to Years 2–5 to reflect the anticipated six-month implementation and ramp period during which Quorum will not have full data access. During this ramp period, Quorum will be integrating Meridian's data feeds into its existing infrastructure, validating data quality, and calibrating its models. The reduced Year 1 fee acknowledges that Quorum will not realize the full value of the license until integration is complete.

Payment Terms: Quarterly in advance. Year 1 quarterly installments of $2,700,000; Years 2–5 quarterly installments of $3,075,000.

One-Time Implementation/Integration Fee: $1,500,000, billed separately from and not included in the $60,000,000 license value. This fee covers Meridian's professional services in connection with the technical integration, including API configuration, data mapping, testing, and initial support. The implementation fee will be invoiced upon execution of the MDLA and is non-refundable.

Late Payment Interest: 1.5% per month (18% per annum) on overdue amounts. We note that this rate is on the higher end of market practice for enterprise data-licensing agreements and may warrant negotiation downward to 1.0% per month or the lesser of 1.5% per month and the maximum rate permitted by applicable law.

Data-Volume Tiers: The base tier accommodates up to 500 million records per month. Any records consumed in excess of the base tier will be subject to an overage rate of $0.003 per record. Given that Quorum's estimated monthly volume of 437 million records represents approximately 87.4% of the base tier, the overage pricing is not expected to be triggered immediately, but should be monitored over the life of the agreement. We recommend negotiating a volume-based discount on overage pricing and/or a mechanism to adjust the base tier upward at predetermined intervals.

D. Counterparty Profile

Meridian Credit intelligence, Inc. is a leading provider of consumer and commercial credit data, credit scoring, and alternative-data analytics in the United States. Based on management representations provided during preliminary discussions (which will be validated as audited financial information becomes available), Meridian's key financial metrics are as follows:

• FY 2023 Revenue: ~$1.42 billion

• FY 2023 EBITDA: ~$438 million (approximately 30.8% EBITDA margin)

• External Auditor: Galloway Nash LLP (Atlanta)

Meridian is majority-owned by Breckenridge Capital Partners Fund IV, L.P. ("Breckenridge" or "BCP"), a growth-equity fund that holds a 62.5% ownership stake in Meridian. The general partner of BCP Fund IV is Breckenridge Capital Management LLC, located at 600 Lexington Avenue, 28th Floor, New York, NY 10022. The Managing Partner of Breckenridge Capital Management is Elaine Drummond, and the partner overseeing the Meridian investment is Caleb Rourke, who sits on Meridian's board of directors.

Breckenridge's ownership position and board representation are highly relevant to the negotiation dynamics of this Transaction. As discussed in greater detail in Section IV below, Breckenridge's investment thesis for Meridian is centered on the concept of Meridian's "proprietary data moat" — the idea that Meridian's data exclusivity and pricing power are core to its equity story and long-term valuation. Any contractual provision that Breckenridge perceives as diluting this data moat — including MFN pricing clauses and broad derived-data rights — will face significant resistance.

Meridian's investment bank, Whitmore Zanthor & Co. (383 Madison Avenue, New York, NY 10179; Managing Director Rachel Ng-Castillo), is advising Meridian on a potential initial public offering targeted for the 2025–2026 time frame. The IPO timeline is a critical contextual factor for this negotiation: it creates both a source of resistance (Meridian's desire to preserve its equity narrative) and a source of leverage for Quorum (Meridian's desire to demonstrate contracted, recurring revenue from blue-chip customers).

Key Meridian Personnel:

Meridian's outside counsel for this Transaction is Kessler Pruitt & Ashe LLP ("KP&A"), an Atlanta-based firm with a strong technology transactions and licensing practice. The lead partner is Graham Whitley, who is well known in the data-licensing space and has represented Meridian in several prior enterprise licensing transactions. We expect KP&A to be a capable and well-prepared counterpart, and our negotiating strategy should account for the likelihood that Meridian's positions will be supported by sophisticated legal arguments.

III. Assessment of Quorum's Negotiating Leverage

A clear-eyed assessment of Quorum's negotiating leverage is essential to calibrating our opening positions, identifying areas of vulnerability, and designing a fallback strategy that preserves Quorum's core interests. We address both strengths and weaknesses below.

A. Strengths

1. Scale and Significance of the Deal. Quorum is a large-scale buyer of data services, and the proposed $60 million, five-year license represents a significant enterprise transaction for Meridian. For context, $60 million over five years would represent approximately 0.85% of Meridian's projected five-year revenue (assuming flat revenues of ~$1.42 billion annually). While this may appear modest as a percentage of total revenue, it is a substantial single-customer contract, particularly in the context of Meridian's enterprise licensing business, where individual contracts of this magnitude are relatively uncommon. The deal would rank among Meridian's largest enterprise licenses, and the loss or non-execution of the contract would be commercially meaningful.

2. Blue-Chip Reference Customer Value. Quorum's profile — a Nasdaq-listed, investment-grade insurer with FY 2023 revenue of $4.18 billion, net income of $312 million, total assets of $27.6 billion, and a market capitalization of approximately $8.9 billion as of the engagement opening — makes Quorum a highly attractive reference customer for Meridian. A multi-year contract with Quorum would strengthen Meridian's revenue visibility, demonstrate the depth and quality of its customer base, and provide a compelling data point for Meridian's IPO narrative regarding contracted, recurring revenues from creditworthy counterparties. We should not underestimate the value that Quorum's brand and financial profile bring to Meridian's equity story.

3. Sophisticated Data Utilization. Quorum's in-house data science capabilities, exemplified by QuorumScore and its broader analytics platform, demonstrate that Quorum is a sophisticated licensee that will maximize data utilization and drive high consumption volumes. This is strategically valuable to Meridian for two reasons. First, high utilization strengthens the commercial rationale for the deal from Meridian's perspective, as it ensures that Quorum will continue to consume data at or near the base tier and potentially trigger overage pricing. Second, a sophisticated platform-level data partner enhances Meridian's market positioning as a provider whose data is integrated into mission-critical applications by leading insurance carriers.

4. Competitive Alternatives. VP Enterprise Procurement Thomas Ng has indicated that Quorum is also evaluating alternative credit-data providers, including other major credit bureaus and emerging alternative-data aggregators. While the depth of these alternatives varies (as discussed under "Weaknesses" below), the existence of a competitive evaluation process provides Quorum with negotiating leverage. Meridian must recognize that Quorum has options, and that an unreasonable negotiating posture risks losing the deal to a competitor.

5. Independent Pricing Benchmark. Quorum has retained Pinnacle Ridge Advisory LLC (200 Clarendon Street, Suite 4400, Boston, MA 02116; Managing Director Franklin Osei) to perform an independent data-quality assessment and pricing benchmark study. The benchmark study, expected by February 2023, will arm Quorum with market-rate comparisons that can be used to substantiate its MFN demands and pricing negotiation positions. An independent, third-party pricing benchmark is a powerful tool in data-licensing negotiations because it shifts the burden of proof to Meridian: if the benchmark demonstrates that Quorum is paying above-market rates, Meridian will need to justify the premium or accept a price adjustment.

B. Weaknesses

1. Oligopolistic Market Structure. The U.S. credit-data market is characterized by an oligopolistic structure, with a small number of dominant providers controlling the vast majority of consumer and commercial credit data. While Quorum is evaluating alternative providers, it is far from certain that any alternative can offer the equivalent depth and breadth of coverage that Meridian provides — specifically, approximately 310 million consumer records and 42 million business records, together with the AltSignal alternative-data feeds. The limited number of viable alternatives constrains Quorum's ability to credibly threaten to walk away from the Transaction if negotiations stall.

2. QuorumScore Switching-Cost Risk. QuorumScore's dependence on Meridian data as a training input creates significant switching-cost risk. If negotiations fail and Quorum is forced to rebuild its models on an alternative data source, there will be material time and engineering costs associated with retraining models, validating performance, and potentially re-filing or amending the pending USPTO application. Quorum's data science team has estimated that a full migration to an alternative data source would require approximately 12–18 months and substantial engineering resources. This switching cost reduces Quorum's leverage because Meridian may calculate that Quorum is unlikely to walk away from the deal given the cost and disruption of doing so.

3. Public Company Timeline Pressure. As a publicly traded company, Quorum faces disclosure and timeline pressures that Meridian, as a privately held entity, does not. The importance of the QuorumScore B2B licensing revenue roadmap to Quorum's growth narrative — and the fact that this roadmap has been discussed, at least in general terms, with analysts and investors — creates urgency around executing the Meridian license. If Meridian perceives that Quorum is under time pressure to close the deal, it may adopt a harder negotiating posture, knowing that Quorum has limited ability to delay indefinitely.

4. Asymmetric Disclosure Pressures. Relatedly, Meridian is not subject to the public disclosure requirements that apply to Quorum. While Quorum must carefully manage the timing and content of any disclosures regarding the Transaction (including any potential materiality analysis under SEC reporting obligations), Meridian operates in a more opaque information environment. This asymmetry may give Meridian a tactical advantage in terms of timeline management and information control during the negotiation.

We believe that Quorum's strengths — particularly its scale, reference-customer value, and the IPO-enhancing nature of the deal — outweigh its weaknesses, but only if the negotiation is conducted with discipline and a clear understanding of the limits of Quorum's leverage. The weaknesses identified above underscore the importance of preparing well-considered fallback positions on key issues, rather than adopting an all-or-nothing approach that risks impasse.

IV. Assessment of Meridian's Likely Positions and Motivations

Understanding Meridian's likely positions and the motivations driving them is critical to designing an effective negotiating strategy. In this section, we analyze the influence of Breckenridge Capital Partners and Whitmore Zanthor on Meridian's negotiating posture, and we forecast Meridian's expected positions on the two critical issues (MFN and derived data) as well as other key terms.

A. Breckenridge Capital Partners' Influence

The single most important factor shaping Meridian's negotiating posture is the influence of Breckenridge Capital Partners Fund IV, L.P., which holds 62.5% of Meridian's equity. Caleb Rourke, the Breckenridge partner overseeing the Meridian investment, sits on Meridian's board and plays an active role in strategic decision-making. Based on our market intelligence and prior experience with Breckenridge portfolio companies, we assess the following:

MFN Resistance. Breckenridge has been advising Meridian's board to resist MFN clauses in enterprise licenses. From Breckenridge's perspective, MFN clauses compress margins by constraining Meridian's ability to engage in price discrimination across its customer base. More significantly, MFN clauses in large enterprise licenses could be flagged as margin risks during IPO due diligence, potentially undermining the narrative that Meridian has pricing power and can sustain or expand margins over time. Breckenridge's investment thesis depends on Meridian's ability to demonstrate pricing flexibility and margin resilience, and MFN clauses are fundamentally inconsistent with that narrative.

Derived-Data Concerns. Breckenridge views unfettered derived-data rights granted to licensees as a direct threat to what Breckenridge characterizes as Meridian's "proprietary data moat." The concept of a data moat is central to Breckenridge's equity story for Meridian: the argument that Meridian's data is proprietary, difficult to replicate, and generates sustainable competitive advantages that justify premium pricing and high valuation multiples. If Meridian's licensees can freely transform licensed data into derived products that compete with — or substitute for — Meridian's own offerings, the data moat argument is weakened. Breckenridge is therefore likely to instruct Meridian's management team and legal counsel to resist broad derived-data rights and to seek contractual mechanisms (license-backs, revenue shares, transformation standards) that preserve Meridian's control over the downstream use of its data.

IPO Advisory Influence. Whitmore Zanthor & Co., as Meridian's IPO advisor, has reinforced Breckenridge's positions by raising concerns that broad MFN and derived-data rights in large enterprise licenses could negatively impact Meridian's valuation narrative. In a competitive IPO market, where data companies are valued based on the perceived defensibility of their data assets and the predictability of their pricing, contractual provisions that limit pricing flexibility or allow customers to commercialize derived products without constraint would likely attract scrutiny from prospective investors and their due diligence advisors. Whitmore Zanthor's influence on Meridian's negotiating posture should not be underestimated.

We expect these private-equity and investment-banking dynamics to create a negotiating environment in which Meridian's resistance on MFN and derived-data issues is not merely a commercial preference but a strategic imperative driven by the company's capital markets trajectory. This does not mean that compromise is impossible — but it does mean that the negotiation will require careful framing and creative problem-solving.

B. Expected Meridian Positions — MFN

We anticipate that Meridian will categorically refuse any most favored nation pricing clause in its initial response to Quorum's term sheet. Meridian's likely arguments, in order of emphasis, are as follows:

(a) Confidentiality Obligations. Meridian will argue that its agreements with other licensees contain confidentiality provisions that prohibit the disclosure of pricing terms, and that an MFN clause would require Meridian to breach those obligations by implicitly or explicitly revealing the pricing it offers to other customers.

(b) Impracticability of Cross-Licensee Comparisons. Meridian will contend that its enterprise licenses are bespoke arrangements with different product mixes, data volumes, delivery configurations, service levels, and commercial contexts, making meaningful cross-licensee price comparisons impracticable. Meridian will argue that an MFN clause based on per-record pricing fails to account for the qualitative differences between licenses and would produce arbitrary and potentially misleading results.

(c) IPO Due Diligence Risk. While Meridian may not explicitly invoke the IPO timeline, its counsel is likely to raise the concern that an MFN clause in a major enterprise license could be flagged as a margin risk or pricing constraint during the IPO due diligence process. This argument is unlikely to be made directly but may be communicated through back-channel discussions or framed as a broader concern about the precedent-setting nature of the clause.

(d) Antitrust Sensitivities. In the credit-data market, where a small number of providers dominate, MFN clauses have attracted antitrust scrutiny on the theory that they may facilitate price-signaling or dampen competition. Meridian's counsel, KP&A's Graham Whitley, is sophisticated in technology licensing and may invoke antitrust concerns — including references to FTC enforcement actions and academic literature on MFN effects in concentrated markets — as a basis for refusing the clause. We note that this antitrust argument has some merit in certain contexts, though we believe it can be addressed through appropriate drafting. Wendy Schultz will prepare a separate memorandum analyzing the antitrust considerations applicable to MFN clauses in credit-data markets.

We should be prepared for Meridian to treat the MFN issue as a line in the sand, at least initially. Our strategy, as described in Section VI below, accounts for this by holding a pricing audit right fallback in reserve.

C. Expected Meridian Positions — Derived Data

The derived-data issue is likely to be the most contentious and technically complex aspect of the negotiation. We expect Meridian to take the following positions:

Copyright "Derivative Work" Argument. Meridian is expected to argue that any derived data incorporating, based on, or traceable to Meridian's raw data constitutes a "derivative work" under Section 103 of the Copyright Act and therefore remains subject to Meridian's underlying intellectual property rights. This argument, while superficially plausible, conflates the copyright concept of a derivative work with the contractual concept of derived data and overstates the scope of copyright protection available for factual data compilations. We will prepare a detailed legal analysis addressing this point (see Section VIII, Open Questions and Next Steps).

Specific Demands. We expect Meridian to demand the following:

(i) License-Back. A perpetual, royalty-free, irrevocable license-back to Meridian on all derived data created by Quorum, for Meridian's own internal and commercial use. This would effectively give Meridian access to Quorum's proprietary analytics outputs, including QuorumScore, and permit Meridian to use those outputs to enhance its own products or to license them to Quorum's competitors.

(ii) Commercialization Restrictions. A prohibition on Quorum selling, sublicensing, or otherwise commercializing derived data unless such data has been "sufficiently transformed" such that no Meridian raw data can be reverse-engineered from the derived data, with Meridian having sole discretion to determine whether the standard of "sufficient transformation" has been met. This standard is inherently subjective and would give Meridian an effective veto over Quorum's ability to commercialize any derived data product.

(iii) Revenue Share. A 15% revenue share on net revenues from Quorum's external commercialization of any derived data that Meridian has approved for commercialization under the "sufficient transformation" standard described above.

Taken together, these demands would fundamentally undermine the value proposition of QuorumScore and the projected $40–50 million B2B licensing revenue line. A license-back would expose Quorum's proprietary innovations to a counterparty that could use them competitively. The "sufficient transformation" standard with Meridian's sole discretion is commercially unworkable. And a 15% revenue share on projected revenues of $40–50 million would represent $6–7.5 million annually in payments to Meridian that are unjustified given that the value of QuorumScore is attributable overwhelmingly to Quorum's proprietary data science, first-party data, and actuarial expertise — not to Meridian's raw data inputs.

We regard each of these demands as unacceptable to Quorum in its proposed form, and our negotiating strategy (Section VI.C) is designed to resist them while preserving sufficient flexibility to reach a commercially reasonable compromise if necessary.

D. Other Likely Meridian Positions

Beyond MFN and derived data, we anticipate the following positions from Meridian on other key terms:

Dispute Resolution. Meridian is expected to push for binding arbitration under the American Arbitration Association ("AAA") Commercial Arbitration Rules, seated in New York, with a three-arbitrator panel. Meridian's preference for arbitration likely reflects a desire for confidentiality (avoiding public court filings that could be discovered during IPO due diligence or by media) and a perception that arbitration is more favorable to data licensors. Quorum's preference, by contrast, is for exclusive jurisdiction in the United States District Court for the Southern District of New York or, alternatively, the Commercial Division of the New York Supreme Court, New York County. Court jurisdiction offers Quorum the benefits of established case law, appellate review, and the ability to seek injunctive relief on an expedited basis.

Post-Termination Data Treatment. Meridian will likely demand the return or certified destruction of all Meridian raw data within 90 days of termination or expiration of the MDLA, which is a standard and commercially reasonable provision. However, Meridian is expected to seek to extend post-termination restrictions to derived data as well, arguing that derived data incorporating Meridian inputs should be subject to the same return/destruction obligations, or at minimum to continued use restrictions following termination. The treatment of derived data post-termination is expected to be among the most disputed contractual provisions, as it directly implicates the survivability of QuorumScore and other Quorum analytics products that incorporate Meridian data inputs.

Insurance Requirements. Meridian will likely require Quorum to maintain cyber liability coverage with an aggregate limit of not less than $50,000,000, reflecting the scale and sensitivity of the data being processed under the license. Meridian's own insurance coverage is expected to include $25,000,000 aggregate for cyber and technology errors and omissions liability and $5,000,000 per occurrence for commercial general liability. We should confirm with Quorum's risk management team that Quorum's existing cyber liability coverage is sufficient to meet Meridian's requirements, or whether an increase in coverage limits will be necessary.

V. Key Risk Identification

We have identified six key risks associated with the Transaction that should inform Quorum's negotiating strategy and decision-making. Each risk is described below, together with our assessment of its significance and recommended mitigation measures.

A. Risk 1: MFN Resistance and Pricing Exposure

Risk Description. If Meridian successfully refuses any MFN protection and Quorum lacks contractual audit or benchmarking rights, Quorum will have no mechanism to verify that it is receiving competitive pricing relative to other Meridian enterprise licensees. Over the five-year term of the license, Meridian could enter into more favorable pricing arrangements with competitor insurers — including carriers that compete directly with Quorum in the P&C, life, and specialty lines — without any obligation to extend equivalent pricing to Quorum. This pricing exposure is compounded by the oligopolistic structure of the credit-data market, which limits Quorum's ability to switch providers mid-term if it discovers that it is paying above-market rates.

Quorum's Proposed MFN Scope. Quorum's preferred MFN clause would cover all U.S.-domiciled insurance carriers, managing general agents ("MGAs"), and insurtech firms with annual premiums written of $500 million or more. This scope is designed to capture the universe of direct competitors while excluding small-scale licensees whose pricing may not be comparable due to differences in volume and data consumption patterns.

Risk Mitigation. We recommend developing a carefully calibrated fallback position in the event that the full MFN is rejected. Specifically, we propose a limited pricing audit right with the following parameters:

• Exercisable once per contract year by Quorum;

• Conducted by an independent third-party auditor mutually approved by both parties;

• Scope limited to verifying that Quorum's effective per-record rate does not exceed 110% of the lowest effective per-record rate charged by Meridian to any comparable insurance-industry licensee (defined as any U.S.-domiciled insurance carrier, MGA, or insurtech firm with annual premiums written of $500 million or more);

• The auditor would report only a "pass/fail" result to Quorum (i.e., whether Quorum's rate exceeds the 110% threshold), without disclosing the actual pricing terms of any other licensee, thereby addressing Meridian's confidentiality concerns;

• If the audit reveals that Quorum's rate exceeds the 110% threshold, Meridian would be required to reduce Quorum's rate to the threshold level on a prospective basis.

This fallback is designed to address Meridian's principal objections (confidentiality, impracticability of comparisons) while preserving Quorum's core interest in pricing protection. We recommend holding this fallback in reserve and not introducing it until the full MFN has been presented and rejected, as discussed in our tactical approach (Section VI.B).

The Pinnacle Ridge pricing benchmark study, expected by February 2023, will be critical to substantiating Quorum's market-rate arguments and informing the MFN negotiation. Franklin Osei's team is conducting a comprehensive benchmarking analysis of enterprise credit-data licensing pricing across the U.S. insurance industry, which will provide Quorum with objective, third-party evidence of prevailing market rates.

B. Risk 2: Derived-Data Restrictions and QuorumScore Exposure

Risk Description. The derived-data provisions pose what we regard as the most significant commercial risk in this Transaction. The potential adverse outcomes are as follows:

License-Back Risk. If Meridian obtains a perpetual, royalty-free license-back on derived data, it would gain access to the outputs of Quorum's proprietary models — including QuorumScore — and could use those outputs to enhance its own data products or license them to Quorum's direct competitors. This would transform a data-licensing relationship into an involuntary partnership in which Quorum's innovations are shared with the very counterparty that supplies the raw data input. The competitive implications are severe: Meridian could offer a competing product to Quorum's B2B licensing customers, leveraging Quorum's own intellectual property to do so.

Revenue Share Risk. If Meridian imposes a 15% revenue share on derived data commercialization, this directly erodes the projected $40–50 million in annual B2B licensing revenue from QuorumScore. A 15% share would represent approximately $6–7.5 million annually in payments to Meridian — a significant and, in our view, unjustified wealth transfer given that the value of QuorumScore derives primarily from Quorum's proprietary data science, actuarial modeling, and first-party data, not from Meridian's raw data inputs.

"Sufficient Transformation" Veto Risk. The "sufficient transformation" standard with Meridian having sole discretion is commercially and legally unworkable. This standard would give Meridian an effective veto over Quorum's ability to commercialize any derived data product, creating an ongoing dependency and power imbalance that is inconsistent with the arm's-length commercial nature of the relationship. Moreover, the subjectivity of the standard invites disputes and could lead to protracted disagreements over whether particular products meet the threshold.

ML Model Output Classification. A technical nuance that will require careful legal and scientific analysis is the question of whether the outputs of Quorum's machine-learning models — which are trained on, among other things, Meridian data — constitute "derived data" at all within the meaning of the contractual definition. There is a credible argument that only the trained model weights and parameters are derivative of the training data, while live predictions generated by applying the trained model to new, non-Meridian inputs are independent outputs that do not incorporate or reproduce any Meridian data. This distinction, if accepted, would significantly narrow the scope of any derived-data restrictions and protect the core of QuorumScore's commercial value. We will develop this argument in the forthcoming IP memorandum.

Risk Mitigation. We recommend engaging Caldwell & Strauss LLP (100 Pearl Street, Hartford, CT 06103; Partner Angela Firth) — Quorum's longstanding intellectual property counsel — to coordinate on IP portfolio implications and to assist in developing robust legal positions on derived-data ownership. Caldwell & Strauss has deep familiarity with Quorum's IP portfolio, including the pending QuorumScore USPTO application, and their involvement will ensure consistency between the positions taken in the Meridian negotiation and Quorum's broader IP strategy. Angela Firth is not billing on this matter but will provide background IP portfolio guidance to Quorum's in-house team and will coordinate with C&H on derived-data ownership positions.

C. Risk 3: Standish National Bank Covenant Trigger

Risk Description. Quorum's $1.2 billion revolving credit facility with Standish National Bank, N.A. (280 Congress Street, Boston, MA 02210; Relationship Manager Philip Yardley) contains a covenant provision that is directly implicated by this Transaction. Specifically, Section 7.12(b) of the Amended and Restated Credit Agreement dated June 15, 2021, provides:

"The Borrower shall not enter into any license, sublicense, or similar arrangement with respect to intellectual Property having an aggregate value in excess of $25,000,000 without the prior written consent of the Required Lenders."

The proposed Meridian data license has an aggregate value of $60,000,000, which exceeds the $25,000,000 threshold by $35,000,000 — representing 240% of the covenant threshold ($60,000,000 ÷ $25,000,000 = 2.4×). Accordingly, Quorum must obtain a lender consent letter or covenant waiver from Standish National Bank (or, more precisely, from the "Required Lenders" as defined in the Credit Agreement) before executing the MDLA. Entry into the MDLA without obtaining the required consent would constitute an event of default under the Credit Agreement, with potentially severe consequences for Quorum's access to the revolving facility and its broader credit relationships.

Timing Consideration. Based on our experience with lender consent processes in comparable situations, we estimate that the consent process will take approximately 4–8 weeks from the date of Quorum's formal request. This timeline includes the preparation and submission of the consent request package, the lender's internal review and credit analysis, any follow-up questions or requests for additional information, and the formal issuance of the consent letter. To avoid the lender consent process becoming a bottleneck at closing, we strongly recommend initiating the process early in the negotiation — no later than November 2022 — so that consent is in hand before the MDLA is ready for execution.

Risk Mitigation. We recommend that Marcus Weill begin preparing the lender consent request letter and analyzing potential structuring alternatives that might mitigate the covenant trigger. Possible structuring alternatives include:

• Splitting the license across two or more Quorum subsidiaries, with each subsidiary entering into a separate license agreement below the $25,000,000 threshold;

• Structuring the arrangement as a series of phased commitments, each below the threshold, rather than a single five-year license with a $60,000,000 aggregate value; or

• Characterizing certain components of the arrangement (e.g., the implementation fee, overage charges) as services or operational expenses rather than intellectual property license payments, potentially reducing the aggregate "value" of the license for covenant purposes.

We note, however, that each of these alternatives carries risks — including the risk that Standish or its counsel views the structuring as an attempt to circumvent the covenant, which could undermine Quorum's credibility with the lender group. Direct consent is likely the most prudent approach, and we recommend pursuing it as the primary strategy while evaluating structuring alternatives as a contingency.

D. Risk 4: Regulatory Complexity

Risk Description. The Transaction implicates a complex web of federal and state regulatory requirements governing the collection, use, and sharing of consumer financial and personal data. The principal regulatory frameworks are as follows:

Fair Credit Reporting Act (FCRA). As a provider of consumer credit data, Meridian is a "consumer reporting agency" under the FCRA, and Quorum's use of the licensed data will be subject to the FCRA's permissible purpose requirements. The MDLA must include a certification schedule in which Quorum specifies the applicable permissible purpose categories under which it will access and use the data. For insurance underwriting purposes, the relevant permissible purposes include the evaluation of insurance applications (15 U.S.C. § 1681b(a)(3)(C)) and account review for existing policyholders (15 U.S.C. § 1681b(a)(3)(F)(ii)). The certification schedule must be carefully drafted to cover all of Quorum's intended use cases while remaining within the boundaries of permissible purpose.

Gramm-Leach-Bliley Act (GLBA). As a financial institution, Quorum is subject to the GLBA's requirements regarding the protection and sharing of consumers' nonpublic personal information. The MDLA should include appropriate representations and covenants regarding GLBA compliance, including safeguards for the handling of nonpublic personal information received from Meridian.

CCPA/CPRA (California Consumer Privacy Act / California Privacy Rights Act). The derived-data commercialization issue has significant CCPA/CPRA implications. If Quorum creates derived data products that incorporate California consumers' personal information and commercializes those products to third parties, Quorum must comply with CCPA/CPRA requirements regarding consumer opt-out rights (the right to opt out of the "sale" or "sharing" of personal information), de-identification requirements, and the distinction between "service provider," "contractor," and "third party" processing. The MDLA should address these issues contractually, including by specifying the parties' respective roles under the CCPA/CPRA framework and establishing obligations regarding de-identification of derived data prior to commercialization.

State Insurance Data-Security Regulations. Quorum is subject to state insurance data-security regulations in its domiciliary state and in each state in which it operates. Of particular significance is the New York Department of Financial Services Cybersecurity Regulation, 23 NYCRR 500, which imposes comprehensive cybersecurity requirements on covered financial institutions, including third-party service provider oversight obligations, encryption requirements, and incident response and notification protocols. To the extent that Meridian is a "Third Party Service Provider" within the meaning of 23 NYCRR 500, Quorum must ensure that the MDLA includes contractual provisions satisfying the regulation's requirements for due diligence and risk assessment of third-party service providers, written policies and procedures governing the relationship, and guidelines for due diligence processes.

Data-Breach Notification. We recommend requiring a 48-hour notification period from the date of discovery for both parties in the event of a data breach or security incident involving licensed data. This is consistent with emerging best practices and with the notification timelines required under 23 NYCRR 500 and other state breach notification laws.

SOC 2 and ISO 27001 Certifications. The Data Security Addendum should require Meridian to maintain a current SOC 2 Type II report (issued by its external auditor, Galloway Nash LLP) and ISO 27001 certification throughout the term of the license. Quorum maintains its own SOC 2 Type II report (issued by Felton Thorpe & Co. LLP, for the period ending December 31, 2023) and should be prepared to provide evidence of its own certifications to Meridian as part of the mutual security assurance framework.

Next Steps on Regulatory Analysis. David Cartwright and Lisa Johannsen will prepare separate memoranda on each of the following regulatory frameworks: (i) FCRA and GLBA compliance requirements and their implications for the MDLA; (ii) CCPA/CPRA implications for derived data commercialization; and (iii) 23 NYCRR 500 compliance requirements and their implications for the Data Security Addendum. These memoranda will inform the drafting of the regulatory-facing provisions of the MDLA and its schedules.

VP Regulatory & Compliance Claudia Reeves should be consulted on insurance-specific regulatory requirements, including any state-level requirements beyond those identified above.

E. Risk 5: Breckenridge IPO Timeline Creating Counterparty Inflexibility

Risk Description. As discussed in Section IV.A, Breckenridge Capital Partners and Whitmore Zanthor have significant influence over Meridian's negotiating posture, and both are focused on preserving a valuation narrative centered on data exclusivity and pricing power. If Breckenridge and Whitmore Zanthor harden Meridian's board against meaningful concessions on MFN and derived-data provisions — viewing any concession as a threat to the IPO narrative — the negotiation may reach an impasse on these issues. An extended impasse could delay the Transaction beyond the target execution date, increase legal costs, and potentially force Quorum to pursue alternative data sources with the attendant switching costs and timeline risks.

Countervailing Leverage. However, the IPO timeline also creates leverage for Quorum. A signed $60 million, five-year contract with a Nasdaq-listed, multi-billion-dollar insurer would be a positive data point for Meridian's S-1 filing and IPO roadshow. The deal itself, if structured and documented appropriately, enhances Meridian's contracted revenue base, improves revenue visibility, and demonstrates customer quality — all of which are key metrics that prospective IPO investors evaluate. This is a powerful argument, and we recommend deploying it affirmatively rather than defensively.

Recommended Framing. We recommend framing Quorum's positions on MFN and derived data as commercially reasonable, market-standard provisions that will withstand IPO due diligence scrutiny — rather than provisions that should cause concern. The narrative should be: "These provisions are standard in enterprise data-licensing agreements between sophisticated parties. Their presence in the MDLA will demonstrate to IPO investors that Meridian's customer relationships are governed by professionally negotiated, market-standard agreements — not that Meridian's pricing power or data exclusivity is at risk." This framing recharacterizes Quorum's demands from a threat to Meridian's equity story into a validation of it.

F. Risk 6: Extended Negotiation Timeline and Fee Exposure

Risk Description. Given the complexity and sensitivity of the MFN and derived-data issues, the strategic dynamics introduced by Breckenridge and Whitmore Zanthor, and the regulatory overlay, negotiations may extend well beyond initial expectations. The multiple workstreams — including the parallel lender consent process, regulatory analysis, IP coordination with Caldwell & Strauss, and the Pinnacle Ridge benchmark study — add layers of complexity that could contribute to timeline extension.

Fee Management. C&H's engagement is subject to a soft fee cap of $1,800,000 for the negotiation and documentation phase of this Transaction. Based on the team's hourly rates, we estimate that the cap provides approximately the following capacity:

Recommended Fee Management. We recommend efficient work allocation, with associates handling first-pass drafting, research, and analysis to the greatest extent practicable. Partner and senior counsel time should be reserved for strategic guidance, issue-escalation, and direct negotiation sessions. We will provide monthly fee status reports to Gregory Stahl and will raise any concerns about pace of spend against the soft cap as early as possible. If it becomes apparent that the negotiation will extend significantly beyond the anticipated timeline, we will discuss options with Quorum, including adjusting the scope of work, phasing deliverables, or requesting an adjustment to the soft cap.

VI. Recommended Negotiating Strategy

Based on our assessment of Quorum's leverage, Meridian's likely positions, and the key risks described above, we recommend the following negotiating strategy.

A. Prioritization of Issues

We recommend a three-tier prioritization framework that distinguishes between issues where Quorum must prevail, issues that are important but where compromise is acceptable, and issues that can be traded in exchange for concessions on higher-priority items.

Tier 1 — Must-Win:

Derived-Data Ownership and Commercialization Rights. Quorum must own all intellectual property in derived data. Quorum must not grant a license-back to Meridian. Quorum must retain the unrestricted right to commercialize derived data — especially QuorumScore outputs — without any revenue share or Meridian consent requirement. This is the single most important issue in the negotiation. If Quorum cannot secure adequate derived-data rights, the strategic value of the Transaction is materially diminished, and the Company should consider whether alternative data sources, despite their limitations, represent a preferable path.

Tier 1 — Strong Push:

Most Favored Nation Pricing Clause. Quorum should demand a full MFN clause as its opening position and pursue it vigorously. However, unlike derived-data ownership, the MFN issue has a well-defined fallback (the pricing audit right) that preserves Quorum's core interest in pricing protection while addressing Meridian's principal objections. Accordingly, while we recommend a strong push on MFN, we classify it as a "strong push" rather than a "must-win" because an acceptable alternative exists.

Tier 2 — Important:

• Dispute Resolution. Quorum prefers court jurisdiction over binding arbitration and should advocate for this position. If arbitration is unavoidable, Quorum should negotiate a single arbitrator (rather than three) and limited discovery to reduce cost and time.

• Post-Termination Treatment of Derived Data. Quorum must ensure that all derived data survives termination of the MDLA and remains Quorum's property with continued, perpetual use and commercialization rights.

• Data Security and Breach Notification Standards. Quorum should insist on robust security standards and a 48-hour breach notification period, consistent with 23 NYCRR 500 and industry best practices.

Tier 3 — Tradeable:

• Implementation Timeline Flexibility. Quorum can offer flexibility on the implementation schedule if doing so generates goodwill or facilitates concessions on higher-priority items.

• Specific SLA Service Credit Mechanics. The detailed mechanics of service credits for downtime or data-quality failures are commercially important but can be negotiated with more flexibility than Tier 1 or Tier 2 issues.

• Insurance Coverage Levels. Quorum can accommodate reasonable insurance requirements within the range of industry practice. If Meridian's $50,000,000 aggregate cyber liability requirement is consistent with Quorum's existing coverage, this issue should be non-controversial.

B. Tactical Approach — MFN

Our recommended tactical approach on the MFN issue is designed as a two-stage strategy:

Stage 1: Full MFN. Open with a demand for a comprehensive most favored nation pricing clause covering all U.S.-domiciled insurance carriers, managing general agents, and insurtech firms with annual premiums written of $500 million or more. The clause should require Meridian to extend to Quorum any more favorable pricing terms offered to any comparable licensee within the defined scope, on a retroactive and prospective basis. Present this demand as Quorum's firmly held position, supported by the commercial rationale that Quorum is committing to a $60 million, five-year contract and is entitled to assurance that it is receiving the most competitive pricing available.

Stage 2: Pricing Audit Right Fallback. Anticipate that Meridian will reject the full MFN and prepare the pricing audit right as a fallback to be introduced in a subsequent negotiation round. The key design features of the fallback are:

• Exercisable once per contract year;

• Conducted by an independent third-party auditor approved by both parties;

• 110% ceiling: Quorum's effective per-record rate must not exceed 110% of the lowest effective per-record rate charged to any comparable insurance-industry licensee;

• Auditor reports only pass/fail result to Quorum — no disclosure of specific pricing terms;

• Prospective rate reduction if the 110% threshold is exceeded.

Critical Timing. Do not introduce the pricing audit right fallback prematurely. The fallback should be held in reserve until after the full MFN has been presented, discussed, and rejected, and after Meridian's objections have been fully articulated. Introducing the fallback too early risks anchoring the negotiation at a lower level than necessary and signals to Meridian that the full MFN is not Quorum's genuine expectation. The sequence should be: (i) present the full MFN; (ii) absorb Meridian's rejection and objections; (iii) in a subsequent round, present the pricing audit right as a "creative alternative" that addresses Meridian's stated concerns while preserving Quorum's legitimate commercial interests.

Framing. Frame the pricing audit right as a confidentiality-preserving alternative that directly addresses Meridian's concerns about disclosing other licensees' pricing. Emphasize that the audit right does not require Meridian to disclose any pricing information to Quorum — it only requires an independent verification that Quorum's pricing is within a reasonable range of market rates. This framing neutralizes Meridian's confidentiality objection and shifts the burden of resistance to less defensible grounds.

Pinnacle Ridge Leverage. Leverage the Pinnacle Ridge benchmark study (expected February 2023) to establish that Quorum is paying at or above market rates and that pricing protection is commercially justified. If the benchmark study confirms that Quorum's proposed pricing is consistent with or above market rates, this provides powerful evidence to support the MFN demand. If the benchmark study reveals that Quorum's proposed pricing is below market rates, we should reassess the MFN strategy accordingly.

C. Tactical Approach — Derived Data

Our recommended approach on derived data is to establish clear intellectual property ownership from the outset and to resist all forms of license-back, revenue share, and commercialization restrictions.

Affirmative Position. Assert that Quorum shall own all intellectual property in any derived data, defined broadly to include all data, models, scores, indices, analytics outputs, and other materials created by Quorum using licensed Meridian data as an input, in whole or in part. Quorum shall have unrestricted rights to use, sublicense, distribute, and commercialize all derived data without additional fees, royalties, revenue shares, or Meridian consent. This ownership right shall be irrevocable and shall survive termination of the MDLA.

Legal Analysis — "Derivative Work" Rebuttal. Prepare a detailed legal analysis distinguishing between "derivative works" under the Copyright Act and contractual "derived data." The analysis should address the following points:

• Under Feist Publications, Inc. v. Rural Telephone Service Co., 499 U.S. 340 (1991), raw factual data is not protectable by copyright. To the extent that Meridian's data consists of factual compilations, copyright protection (if any) extends only to the selection, coordination, and arrangement of the data — not to the underlying facts.

• Quorum's machine-learning model outputs are not "derivative works" within the meaning of 17 U.S.C. § 103. A derivative work must incorporate a protected expression from the preexisting work. Model outputs generated by applying a trained model to new inputs do not incorporate or reproduce any protectable expression from the training data.

• Even if some derived data could be characterized as a derivative work in the copyright sense, the parties are free to allocate intellectual property ownership by contract. Copyright's default rules are precisely that — defaults that sophisticated commercial parties can and routinely do modify by agreement. The MDLA should expressly allocate ownership of derived data to Quorum as a matter of contract.

QuorumScore Protection. QuorumScore™ should be specifically identified by name and by category in the MDLA as a derived data product owned exclusively by Quorum. The MDLA should include a provision confirming that blended models incorporating Quorum's first-party data (claims data, policy data, telematics data) together with licensed Meridian data are Quorum's proprietary intellectual property, regardless of the proportion of Meridian data used as an input.

License-Back Resistance. Frame the license-back demand as a non-starter that would give Meridian access to Quorum's proprietary innovations and competitive intelligence. The license-back is not merely a contractual concession — it is a transfer of competitive advantage. If Meridian obtained a license to QuorumScore outputs, it could use those outputs to develop competing products, license them to Quorum's competitors, or incorporate them into Meridian's own data products. This outcome is fundamentally inconsistent with the commercial relationship that the parties are establishing. No sophisticated data licensee would accept such a provisio