Confidential Channel Reception and Handling Procedure

This procedure establishes the rules for the reception, registration, analysis, handling, and closure of communications submitted to CloudWalk's Whistleblowing Channel, in compliance with CMN Resolution No. 4,859/2020.

It constitutes the official regulation of the Whistleblowing Channel and must be publicly disclosed on the institutional website.

It applies to all reports, including anonymous ones, made by employees, customers, users, partners, or suppliers, regarding indications of illegalities related to CloudWalk's activities.

CloudWalk provides a confidential channel accessible at: https://confidencial.cloudwalk.io/

Reports are received and handled by a Committee composed of qualified representatives from the Compliance, Legal, and People areas, with support from other areas when necessary.

The handling observes confidentiality, independence, impartiality, and neutrality. All reports are registered with restricted access control, ensuring traceability and audit trail. CloudWalk protects good-faith whistleblowers against any retaliation.

The designated Committee is responsible for preparing a semi-annual report containing, at a minimum, the number of communications received, the nature of the communications, the areas responsible for handling, the average handling time, and the measures adopted by the institution.

The aforementioned report has reference dates of June 30 and December 31, and must be approved by the Board of Directors in accordance with CW's articles of association within 90 days from the date of its preparation, and maintained at the disposal of the Central Bank of Brazil for a minimum of five years.

This procedure is approved in accordance with the articles of association of CloudWalk Instituição de Pagamento e Serviços Ltda. (leader of the Conglomerate) and shall be reviewed every three years or sooner, in the event of a relevant change in regulations or internal processes.