Skip to main content

๐Ÿ“œ DOCUMENT RETENTION POLICY


Field

Value

Document ID

OTCM-POL-DRP-001

Version

1.0

Effective Date

January 30, 2026

Classification

CONFIDENTIAL

Approved By

Board of Directors


๐Ÿ“‹ TABLE OF CONTENTS

  1. Article I: Purpose and Scope
  2. Article II: Definitions
  3. Article III: Document Retention Schedule
  4. Article IV: Blockchain and Digital Asset Records
  5. Article V: Electronic Records Management
  6. Article VI: Litigation Hold Procedures
  7. Article VII: Document Destruction
  8. Article VIII: Responsibilities
  9. Article IX: Compliance and Enforcement
  10. Article X: Administration

๐ŸŽฏ ARTICLE I: PURPOSE AND SCOPE

Section 1.1 โ€” Purpose

This Document Retention Policy (the "Policy") establishes standards and procedures for the retention, preservation, and destruction of Company records. The Policy is designed to:

๐ŸŽฏ Objective

Description

โš–๏ธ

Legal Compliance

Ensure compliance with legal and regulatory retention requirements

๐Ÿ›ก๏ธ

Litigation Protection

Protect the Company in actual or potential litigation

๐Ÿ“Š

Business Continuity

Support business operations and historical reference

๐Ÿ”

Data Security

Protect sensitive and confidential information

๐Ÿ’พ

Storage Efficiency

Manage storage costs and information overload

๐Ÿ”—

Blockchain Integrity

Preserve immutable blockchain records appropriately

Section 1.2 โ€” Regulatory Framework

This Policy is adopted pursuant to and in compliance with:

โš–๏ธ Regulation

Retention Impact

Securities Exchange Act of 1934

Broker-dealer and transfer agent records

SEC Rules 17a-3, 17a-4

Books and records requirements

SEC Rules 17Ad-6, 17Ad-7

Transfer agent recordkeeping

Sarbanes-Oxley Act

Audit workpapers, financial records

IRS Code Section 6001

Tax records

ERISA

Employee benefit records

Wyoming Business Corporation Act

Corporate records

SEC January 2026 Guidance

Tokenized securities records

Section 1.3 โ€” Scope

This Policy applies to all records created, received, or maintained by the Company, including:

๐Ÿ“ Record Type

Examples

๐Ÿ“„

Paper Documents

Contracts, certificates, correspondence

๐Ÿ’ป

Electronic Files

Emails, spreadsheets, databases, presentations

๐Ÿ”—

Blockchain Records

Smart contracts, transaction logs, wallet data

๐ŸŽฅ

Media

Audio, video, photographs

๐Ÿ’ฌ

Communications

Instant messages, text messages, voicemails

โ˜๏ธ

Cloud Data

SaaS applications, cloud storage


๐Ÿ“– ARTICLE II: DEFINITIONS

Section 2.1 โ€” Key Definitions

๐Ÿ“„ "Record"

Any information, regardless of physical form or characteristics, created, received, or maintained by the Company in the conduct of its business, including documents, data, and blockchain entries.

๐Ÿ”— "Blockchain Record"

Any data stored on a distributed ledger, including smart contract code, transaction hashes, wallet addresses, token transfers, and metadata associated with ST22 Security Tokens or OTCM Utility Tokens.

โš–๏ธ "Litigation Hold"

A directive to preserve all documents and records potentially relevant to pending, threatened, or reasonably anticipated litigation, government investigation, or audit.

๐Ÿ“ "Record Custodian"

The department or individual responsible for maintaining and managing specific categories of records.

๐Ÿ—‘๏ธ "Destruction"

The permanent elimination of records through shredding, incineration, deletion, or other means that render the record unreadable and unrecoverable.

๐Ÿ’พ "Active Record"

A record currently in use or referenced frequently for business operations.

๐Ÿ“ฆ "Inactive Record"

A record no longer needed for daily operations but retained for legal, regulatory, or historical purposes.

๐Ÿ”’ "Permanent Record"

A record that must be retained indefinitely due to legal requirements, historical significance, or ongoing business value.


๐Ÿ“… ARTICLE III: DOCUMENT RETENTION SCHEDULE

Section 3.1 โ€” Corporate Records

๐Ÿ“ Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ›๏ธ

Articles of Incorporation

Permanent

Including all amendments

๐Ÿ“œ

Bylaws

Permanent

Including all amendments

๐Ÿ“‹

Board Minutes

Permanent

All board and committee meetings

๐Ÿ—ณ๏ธ

Shareholder Meeting Minutes

Permanent

Annual and special meetings

๐Ÿ“Š

Stock Ledger

Permanent

All ownership records

๐Ÿ“„

Stock Certificates

Permanent

Issued and cancelled

๐Ÿท๏ธ

Assumed Name Certificates

Permanent

DBA filings

๐Ÿ“

Annual Reports to State

Permanent

All jurisdictions

โœ…

Board/Committee Resolutions

Permanent

All formal resolutions

๐Ÿ“‹

Shareholder Consents

Permanent

Written consents in lieu of meeting

Section 3.2 โ€” Financial Records

๐Ÿ“ Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“Š

Annual Financial Statements

Permanent

Audited statements

๐Ÿ“ˆ

Quarterly Financial Statements

7 years

Internal and external

๐Ÿ“’

General Ledger

Permanent

All entries

๐Ÿ’ณ

Accounts Payable Records

7 years

Invoices, payment records

๐Ÿ’ฐ

Accounts Receivable Records

7 years

Invoices, collection records

๐Ÿฆ

Bank Statements

7 years

All accounts

โœ…

Bank Reconciliations

7 years

Monthly reconciliations

๐Ÿงพ

Expense Reports

7 years

Employee reimbursements

๐Ÿ“‹

Budgets

5 years

Annual budgets

๐Ÿ”

Audit Reports

Permanent

Internal and external

๐Ÿ“Š

Audit Workpapers

7 years

Per SOX requirements

Section 3.3 โ€” Tax Records

๐Ÿ“ Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“‹

Income Tax Returns

Permanent

Federal and state

๐Ÿ“Š

Tax Workpapers

7 years

Supporting documentation

๐Ÿ’ฐ

Payroll Tax Returns

7 years

All filings

๐Ÿงพ

Sales Tax Returns

7 years

All jurisdictions

๐Ÿ“„

1099 Forms Issued

7 years

Information returns

๐Ÿ“

W-2 Forms

7 years

Employee wage statements

๐Ÿข

Property Tax Records

Permanent

Assessments and payments

๐Ÿ“‹

Tax Exemption Documents

Permanent

Certificates and rulings

Section 3.4 โ€” Employment Records

๐Ÿ“ Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ‘ค

Employee Personnel Files

7 years after termination

General employment records

๐Ÿ“‹

I-9 Forms

3 years after hire or 1 year after termination (longer)

Immigration verification

๐Ÿ’ฐ

Payroll Records

7 years

Wages, deductions, hours

๐Ÿฅ

Benefits Records

7 years after plan termination

ERISA requirement

๐Ÿ“Š

Performance Reviews

5 years after termination

Evaluations

โš ๏ธ

Disciplinary Records

7 years after termination

Warnings, actions

๐Ÿ†

Training Records

5 years after termination

Certifications, completions

๐Ÿ“

Employment Applications

3 years

Hired and not hired

๐Ÿ”’

Background Check Records

5 years

Per FCRA

๐Ÿ“‹

OSHA Records

5 years

Injury/illness logs

Section 3.5 โ€” Contracts and Legal

๐Ÿ“ Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“œ

Executed Contracts

10 years after expiration

All material contracts

๐Ÿข

Real Estate Documents

Permanent

Deeds, leases, mortgages

๐Ÿ“‹

Intellectual Property

Permanent

Patents, trademarks, copyrights

โš–๏ธ

Litigation Files

10 years after final resolution

All legal matters

๐Ÿ“

Settlement Agreements

Permanent

All settlements

๐Ÿ”’

NDAs/Confidentiality Agreements

10 years after expiration

Non-disclosure agreements

๐Ÿ“„

Insurance Policies

Permanent

All policies

๐Ÿ’ณ

Insurance Claims

10 years after settlement

Claims and correspondence

๐Ÿ“‹

Licenses and Permits

Permanent

Current and expired

โš–๏ธ

Legal Opinions

Permanent

Outside counsel opinions

Section 3.6 โ€” Securities and Regulatory Records

๐Ÿ“ Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“Š

SEC Filings

Permanent

All forms filed

๐Ÿ“‹

Form D Filings

Permanent

Reg D exemption notices

๐Ÿ“œ

Private Placement Memoranda

Permanent

Offering documents

โœ…

Subscription Agreements

Permanent

Investor subscriptions

๐Ÿ‘ค

Accredited Investor Verification

7 years

Documentation of status

๐Ÿ“Š

Cap Table Records

Permanent

All ownership records

๐Ÿ“‹

Investor Communications

7 years

Reports, notices

๐Ÿ”’

Insider Trading Records

7 years

Pre-clearance, blackout

๐Ÿ“„

Related Party Transaction Records

7 years

Approvals, documentation

๐Ÿ“Š

Section 16 Filings

Permanent

Forms 3, 4, 5


๐Ÿ”— ARTICLE IV: BLOCKCHAIN AND DIGITAL ASSET RECORDS

Section 4.1 โ€” Immutable Blockchain Records

โš ๏ธ IMPORTANT: Blockchain records are inherently immutable and cannot be deleted. This Policy addresses the retention of related off-chain records and metadata.

๐Ÿ”— Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“œ

Smart Contract Source Code

Permanent

All deployed contracts

๐Ÿ”

Smart Contract Audits

Permanent

Security audit reports

๐Ÿ“Š

Deployment Records

Permanent

Transaction hashes, addresses

๐Ÿ”ง

Contract Upgrade History

Permanent

All modifications

Section 4.2 โ€” ST22 Security Token Records

๐Ÿ”— Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿฆ

Custody Agreements

Permanent

Empire Stock Transfer agreements

๐Ÿ“„

Series M Share Certificates

Permanent

Underlying equity documentation

๐Ÿ“Š

Token Minting Records

Permanent

Issuance documentation

๐Ÿ”—

Transfer Hook Configurations

Permanent

Security control settings

๐Ÿ“‹

Reserve Oracle Data

7 years

Daily balance verifications

๐Ÿ‘ค

Token Holder Registry

Permanent

Off-chain holder information

๐Ÿ“Š

Transaction Logs

7 years

Off-chain transaction records

Section 4.3 โ€” OTCM Utility Token Records

๐Ÿ”— Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“œ

Token Sale Documents

Permanent

ICO/offering materials

โœ…

SAFT/Purchase Agreements

Permanent

Token purchase agreements

๐Ÿ“Š

Token Distribution Records

Permanent

All distributions

๐Ÿ”’

Vesting Schedules

7 years after full vesting

Locked token records

๐Ÿ’ฐ

Staking Records

7 years

Staking activity logs

Section 4.4 โ€” Wallet and Key Management

๐Ÿ” Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ’ณ

Company Wallet Addresses

Permanent

All controlled wallets

๐Ÿ”‘

Key Generation Records

Permanent

Key ceremony documentation

๐Ÿ‘ฅ

Multi-Sig Configurations

Permanent

Signer requirements

๐Ÿ“‹

Wallet Access Logs

7 years

Access and transaction logs

๐Ÿ”„

Key Rotation Records

7 years

Key changes and reasons

Section 4.5 โ€” Platform Operations

๐Ÿ”— Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“‹

Issuer Onboarding Records

Permanent

All issuer documentation

๐Ÿ“Š

Trading Volume Data

7 years

Historical platform data

๐Ÿ’ง

Liquidity Pool Records

7 years

Pool configurations, balances

๐Ÿ“ˆ

Bonding Curve Parameters

Permanent

Historical configurations

๐Ÿ”ง

Platform Incident Reports

7 years

Security incidents, outages

๐Ÿ“Š

API Access Logs

3 years

Third-party integrations

Section 4.6 โ€” Transfer Agent Records

Per SEC Rules 17Ad-6 and 17Ad-7:

๐Ÿ“‹ Record Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“Š

Master Securityholder File

Permanent

DLT-based records

๐Ÿ”„

Transfer Journals

6 years

All transfers

โŒ

Cancelled Certificates

6 years

Physical and digital

๐Ÿ“‹

Stop Transfer Orders

6 years

Stop orders and releases

๐Ÿ“

Written Communications

6 years

Holder correspondence

๐Ÿ“Š

Reconciliation Records

6 years

Daily reconciliations


๐Ÿ’ป ARTICLE V: ELECTRONIC RECORDS MANAGEMENT

Section 5.1 โ€” Email Retention

๐Ÿ“ง Email Category

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ’ผ

Business Critical

Per subject matter schedule

Contracts, legal, financial

๐Ÿ“‹

Operational

3 years

Day-to-day business

๐Ÿ—‘๏ธ

Transitory

1 year

Scheduling, routine inquiries

โš ๏ธ

Litigation Hold

Until hold released

All related emails

๐Ÿ“ง Email Best Practices:

โœ… Practice

Description

๐Ÿ“

Filing

File business-critical emails to appropriate folders

๐Ÿท๏ธ

Categorization

Use consistent subject lines and categories

๐Ÿ”—

Attachments

Save important attachments separately

๐Ÿšซ

Personal

Do not use company email for personal matters

Section 5.2 โ€” Instant Messaging and Collaboration Tools

๐Ÿ’ฌ Platform

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ’ผ

Slack/Teams (Business)

3 years

Business channels

๐Ÿ“Š

Project Channels

Life of project + 3 years

Project-specific

๐Ÿ”’

Confidential Channels

7 years

Legal, HR, Finance

๐Ÿ“ฑ

Text Messages (Business)

3 years

Business-related SMS

Section 5.3 โ€” Cloud Storage and SaaS

โ˜๏ธ System

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“

Google Drive/OneDrive

Per document type

Apply document schedules

๐Ÿ“Š

CRM Data

7 years after relationship ends

Customer/issuer records

๐Ÿ’ฐ

Accounting Software

7 years

Financial data

๐Ÿ‘ค

HR Systems

Per employment record schedule

Personnel data

๐Ÿ”ง

Development Tools

Life of product + 5 years

Code repositories, tickets

Section 5.4 โ€” Database Records

๐Ÿ’พ Database Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ‘ค

User Account Data

7 years after account closure

Platform user records

๐Ÿ“Š

Transaction History

7 years

All platform transactions

๐Ÿ“ˆ

Analytics Data

5 years

Aggregated platform data

๐Ÿ“‹

Audit Logs

7 years

System access logs

๐Ÿ”

Security Logs

7 years

Authentication, authorization

Section 5.5 โ€” Backup and Disaster Recovery

๐Ÿ’พ Backup Type

๐Ÿ“… Retention Period

๐Ÿ“‹ Notes

๐Ÿ“…

Daily Backups

30 days

Rolling daily

๐Ÿ“†

Weekly Backups

12 weeks

Rolling weekly

๐Ÿ“Š

Monthly Backups

24 months

Rolling monthly

๐Ÿ“

Annual Backups

7 years

Year-end snapshots

๐Ÿ”—

Blockchain Node Data

Permanent

Full node archives


โš–๏ธ ARTICLE VI: LITIGATION HOLD PROCEDURES

Section 6.1 โ€” Triggering Events

A Litigation Hold must be implemented when any of the following occurs:

๐Ÿšจ Trigger Event

Action Required

โš–๏ธ

Lawsuit Filed

Immediate hold on all related records

๐Ÿ“‹

Demand Letter Received

Immediate hold pending evaluation

๐Ÿ”

Government Investigation

Immediate hold on all related records

โš ๏ธ

Anticipated Litigation

Hold when litigation reasonably anticipated

๐Ÿ“Š

Regulatory Inquiry

Hold on all requested categories

๐Ÿ”’

Internal Investigation

Hold as directed by Legal

Section 6.2 โ€” Litigation Hold Process

โšก Step

Action

Responsible Party

1๏ธโƒฃ

Identify triggering event

Legal Department

2๏ธโƒฃ

Define scope of hold

Legal Department

3๏ธโƒฃ

Identify custodians and systems

Legal + IT

4๏ธโƒฃ

Issue written hold notice

Legal Department

5๏ธโƒฃ

Suspend destruction of affected records

All Custodians

6๏ธโƒฃ

Collect and preserve relevant records

IT + Custodians

7๏ธโƒฃ

Document preservation efforts

Legal Department

8๏ธโƒฃ

Monitor compliance with hold

Legal Department

9๏ธโƒฃ

Release hold when appropriate

Legal Department

Section 6.3 โ€” Litigation Hold Notice

All Litigation Hold notices must include:

๐Ÿ“‹ Element

Description

๐Ÿ“…

Date

Date hold is effective

๐Ÿ“‹

Matter

General description of matter (if appropriate)

๐Ÿ“

Scope

Categories of records subject to hold

โฑ๏ธ

Time Period

Relevant date range

๐Ÿšซ

Prohibition

Clear prohibition on destruction

๐Ÿ‘ค

Contact

Person to contact with questions

โœ…

Acknowledgment

Requirement to acknowledge receipt

Section 6.4 โ€” Blockchain Records and Litigation Holds

๐Ÿ”— Record Type

Hold Procedure

๐Ÿ“Š

On-Chain Data

No action needed (immutable)

๐Ÿ“‹

Off-Chain Metadata

Standard hold procedures apply

๐Ÿ’ณ

Wallet Access Logs

Preserve all access records

๐Ÿ”ง

Smart Contract Modifications

Document and preserve

๐Ÿ“Š

Platform Analytics

Export and preserve relevant data

Section 6.5 โ€” Consequences of Non-Compliance

๐Ÿšจ Consequence

Description

โš–๏ธ

Spoliation Sanctions

Court-imposed penalties for destruction

๐Ÿ“Š

Adverse Inference

Jury may assume destroyed evidence was harmful

๐Ÿ’ฐ

Monetary Sanctions

Fines and cost-shifting

๐Ÿ‘ค

Personal Liability

Individual responsibility for destruction

๐Ÿšช

Termination

Employment termination for intentional destruction


๐Ÿ—‘๏ธ ARTICLE VII: DOCUMENT DESTRUCTION

Section 7.1 โ€” Destruction Authorization

Records may only be destroyed when:

โœ… Condition

Requirement

๐Ÿ“…

Retention Period Expired

Minimum retention period has passed

โš–๏ธ

No Litigation Hold

No active or anticipated hold

๐Ÿ”

No Audit

No pending audit requiring records

โœ…

Approval Obtained

Required approvals received

๐Ÿ“‹

Documented

Destruction properly documented

Section 7.2 โ€” Destruction Methods

๐Ÿ“ Record Type

๐Ÿ—‘๏ธ Destruction Method

๐Ÿ“„

Paper Documents (Confidential)

Cross-cut shredding or incineration

๐Ÿ“„

Paper Documents (Non-Confidential)

Recycling acceptable

๐Ÿ’พ

Electronic Media

Secure wiping (DoD 5220.22-M or equivalent)

๐Ÿ’ฟ

Hard Drives/SSDs

Degaussing and physical destruction

โ˜๏ธ

Cloud Data

Certified deletion with confirmation

๐Ÿ”—

Blockchain Data

Cannot be destroyed (document off-chain only)

Section 7.3 โ€” Destruction Documentation

All destruction must be documented with:

๐Ÿ“‹ Field

Description

๐Ÿ“…

Date

Date of destruction

๐Ÿ“

Records Destroyed

Description of records

๐Ÿ“†

Date Range

Dates covered by records

๐Ÿ—‘๏ธ

Method

Destruction method used

๐Ÿ‘ค

Authorized By

Person authorizing destruction

๐Ÿ‘ค

Performed By

Person/vendor performing destruction

๐Ÿ“„

Certificate

Certificate of destruction (if vendor)

Section 7.4 โ€” Annual Destruction Cycle

๐Ÿ“… Month

Activity

January

Identify records eligible for destruction

February

Verify no litigation holds or audits

March

Obtain required approvals

April

Execute destruction

May

Document and file certificates

Section 7.5 โ€” Destruction Prohibitions

๐Ÿšซ NEVER destroy records:

  • Subject to a Litigation Hold
  • Requested by regulators or auditors
  • Before retention period has expired
  • Without proper authorization
  • That may be relevant to anticipated litigation

๐Ÿ‘ฅ ARTICLE VIII: RESPONSIBILITIES

Section 8.1 โ€” Board of Directors

๐Ÿ“‹ Responsibility

Description

โœ…

Approval

Approve this Policy and material amendments

๐Ÿ‘๏ธ

Oversight

Oversee compliance with retention requirements

๐Ÿ“Š

Review

Review annual compliance report

Section 8.2 โ€” Chief Executive Officer

๐Ÿ“‹ Responsibility

Description

๐ŸŽฏ

Tone at Top

Set expectations for compliance

๐Ÿ’ฐ

Resources

Allocate resources for implementation

๐Ÿ“‹

Accountability

Hold departments accountable

Section 8.3 โ€” Chief Legal Officer / General Counsel

๐Ÿ“‹ Responsibility

Description

โš–๏ธ

Litigation Holds

Implement and manage litigation holds

๐Ÿ“‹

Legal Guidance

Advise on retention requirements

๐Ÿ”

Compliance

Monitor compliance with legal requirements

๐Ÿ“Š

Updates

Recommend Policy updates

Section 8.4 โ€” Chief Financial Officer

๐Ÿ“‹ Responsibility

Description

๐Ÿ’ฐ

Financial Records

Ensure retention of financial records

๐Ÿ”

Audit Support

Support audit record requirements

๐Ÿ“Š

Tax Records

Ensure retention of tax records

Section 8.5 โ€” Chief Technology Officer

๐Ÿ“‹ Responsibility

Description

๐Ÿ”—

Blockchain Records

Oversee blockchain record retention

๐Ÿ’พ

Systems

Implement technical retention controls

๐Ÿ”

Security

Ensure secure storage and destruction

๐Ÿ’พ

Backups

Manage backup retention schedules

Section 8.6 โ€” Compliance Officer

๐Ÿ“‹ Responsibility

Description

๐Ÿ“‹

Administration

Day-to-day Policy administration

๐ŸŽ“

Training

Conduct retention training

๐Ÿ”

Monitoring

Monitor compliance

๐Ÿ“Š

Reporting

Prepare compliance reports

Section 8.7 โ€” Department Heads (Record Custodians)

๐Ÿ“‹ Responsibility

Description

๐Ÿ“

Department Records

Ensure proper retention of department records

๐Ÿ‘ฅ

Staff Training

Train staff on retention requirements

๐Ÿ—‘๏ธ

Destruction

Authorize department record destruction

โš–๏ธ

Litigation Holds

Implement holds within department

Section 8.8 โ€” All Employees

๐Ÿ“‹ Responsibility

Description

๐Ÿ“

Compliance

Comply with this Policy

๐ŸŽ“

Training

Complete required training

โš–๏ธ

Holds

Comply with litigation holds

๐Ÿšจ

Reporting

Report potential violations


โš ๏ธ ARTICLE IX: COMPLIANCE AND ENFORCEMENT

Section 9.1 โ€” Training

๐ŸŽ“ Training Type

Frequency

Audience

๐Ÿ“‹

Initial Training

Upon hire

All employees

๐Ÿ”„

Annual Refresher

Annually

All employees

๐Ÿ”—

Blockchain-Specific

Upon assignment

Technical staff

โš–๏ธ

Litigation Hold

As needed

Affected custodians

๐Ÿ‘”

Management Training

Annually

Department heads

Section 9.2 โ€” Auditing

๐Ÿ” Audit Type

Frequency

Scope

๐Ÿ“‹

Compliance Audit

Annually

Policy compliance

๐Ÿ’พ

Systems Audit

Annually

Technical controls

๐Ÿ”—

Blockchain Audit

Quarterly

On-chain/off-chain alignment

๐Ÿ—‘๏ธ

Destruction Audit

Annually

Destruction practices

Section 9.3 โ€” Violations

Violations of this Policy may result in:

๐Ÿšจ Consequence

Description

โš ๏ธ

Verbal Warning

Minor or first-time violations

๐Ÿ“

Written Warning

Repeated or more serious violations

๐Ÿšช

Termination

Intentional destruction or serious violations

โš–๏ธ

Legal Liability

Personal liability for spoliation

๐Ÿ’ฐ

Regulatory Penalties

Fines for regulatory non-compliance

Section 9.4 โ€” Reporting Violations

๐Ÿ“‹ Reporting Channel

Contact

๐Ÿ“ง

Compliance Officer

compliance@otcmprotocol.com

๐Ÿ“ž

Ethics Hotline

[To be established]

๐Ÿ‘”

Direct Supervisor

Department management

โš–๏ธ

Legal Department

legal@otcmprotocol.com

๐Ÿ›ก๏ธ No Retaliation: The Company prohibits retaliation against anyone who reports a good faith concern about Policy compliance.


๐Ÿ›๏ธ ARTICLE X: ADMINISTRATION

Section 10.1 โ€” Policy Owner

๐Ÿ“‹ Duty

Description

๐Ÿ“Š

Maintenance

Keeping Policy current

๐Ÿ”

Interpretation

Providing authoritative interpretation

๐Ÿ“‹

Amendments

Recommending amendments

๐Ÿ“Š

Reporting

Reporting to Board on compliance

Section 10.2 โ€” Annual Review

This Policy shall be reviewed annually by the Legal Department and updated as necessary to reflect:

๐Ÿ”„ Review Area

Consideration

โš–๏ธ

Legal Changes

New laws and regulations

๐Ÿ”—

Technology Changes

New systems and platforms

๐Ÿ’ผ

Business Changes

New business activities

๐Ÿ“Š

Audit Findings

Issues identified in audits

๐Ÿ†

Best Practices

Industry developments

Section 10.3 โ€” Amendment Procedures

๐Ÿ’ฐ Amendment Type

Approval Required

๐Ÿ“‹

Administrative

Chief Legal Officer

๐Ÿ“…

Retention Schedule Changes

CEO + CLO

๐Ÿ›๏ธ

Material Policy Changes

Board of Directors

Section 10.4 โ€” Questions

๐Ÿ“ง Contact: compliance@otcmprotocol.com

Questions regarding this Policy or specific retention requirements should be directed to the Compliance Officer or Legal Department.


โœ๏ธ ACKNOWLEDGMENT AND CERTIFICATION

I acknowledge that I have received and read the OTCM Protocol, Inc. Document Retention Policy. I understand its contents and agree to comply with all of its terms and conditions.

I understand that I am responsible for retaining records in accordance with this Policy and the applicable retention schedules.

I agree to comply with any Litigation Hold notices I receive and understand that failure to preserve records subject to a hold may result in serious consequences for the Company and for me personally.

I understand that intentional destruction of records in violation of this Policy or a Litigation Hold may result in disciplinary action, up to and including termination, and may expose me to personal legal liability.


Field

Value

Signature

_________________________________

Date

_________________________________

Printed Name

_________________________________

Title/Position

_________________________________

Department

_________________________________


๐Ÿ“Ž APPENDIX A: QUICK REFERENCE RETENTION SCHEDULE

๐Ÿข Corporate

Record

Retention

Articles/Bylaws

Permanent

Board Minutes

Permanent

Stock Records

Permanent

Annual Reports

Permanent

๐Ÿ’ฐ Financial

Record

Retention

Financial Statements

Permanent

General Ledger

Permanent

AP/AR Records

7 years

Bank Statements

7 years

๐Ÿ“‹ Tax

Record

Retention

Tax Returns

Permanent

Supporting Docs

7 years

๐Ÿ‘ค Employment

Record

Retention

Personnel Files

7 years after termination

Payroll

7 years

I-9 Forms

3 years or 1 year after term

Record

Retention

Contracts

10 years after expiration

Litigation Files

10 years after resolution

IP Records

Permanent

๐Ÿ”— Blockchain

Record

Retention

Smart Contracts

Permanent

Custody Agreements

Permanent

Token Records

Permanent

Transaction Logs

7 years


OTCM Protocol, Inc. A Wyoming Digital Asset Corporation

๐Ÿ“œ SEC Category 1 Issuer-Sponsored Tokenized Securities Infrastructure


Document ID: OTCM-POL-DRP-001 | Version 1.0 | Effective: January 30, 2026