{"id":4284,"date":"2022-08-24T16:19:00","date_gmt":"2022-08-24T16:19:00","guid":{"rendered":"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/"},"modified":"2026-08-11T00:00:56","modified_gmt":"2026-08-11T00:00:56","slug":"hyperspace-security-design","status":"publish","type":"page","link":"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/","title":{"rendered":"Hyperspace Security Design"},"content":{"rendered":"<style>\n .lst-kix_2pqoj7yqcbc0-6 > li:before{content:\"\u25cf  \"}.lst-kix_2pqoj7yqcbc0-7 > li:before{content:\"\u25cb  \"}.lst-kix_2pqoj7yqcbc0-2 > li:before{content:\"\u25a0  \"}.lst-kix_2pqoj7yqcbc0-0 > li:before{content:\"\u25cf  \"}.lst-kix_2pqoj7yqcbc0-1 > li:before{content:\"\u25cb  \"}.lst-kix_2pqoj7yqcbc0-8 > li:before{content:\"\u25a0  \"}ul.lst-kix_dpa8cp4doet4-7{list-style-type:none}ul.lst-kix_dpa8cp4doet4-8{list-style-type:none}ul.lst-kix_goky85f7lyx8-8{list-style-type:none}ul.lst-kix_dpa8cp4doet4-5{list-style-type:none}ul.lst-kix_dpa8cp4doet4-6{list-style-type:none}ul.lst-kix_dpa8cp4doet4-3{list-style-type:none}ul.lst-kix_dpa8cp4doet4-4{list-style-type:none}ul.lst-kix_dpa8cp4doet4-1{list-style-type:none}ul.lst-kix_goky85f7lyx8-3{list-style-type:none}ul.lst-kix_dpa8cp4doet4-2{list-style-type:none}ul.lst-kix_goky85f7lyx8-2{list-style-type:none}ul.lst-kix_goky85f7lyx8-1{list-style-type:none}.lst-kix_5iu32rubc7u6-1 > li:before{content:\"\u25cb  \"}ul.lst-kix_dpa8cp4doet4-0{list-style-type:none}ul.lst-kix_goky85f7lyx8-0{list-style-type:none}ul.lst-kix_goky85f7lyx8-7{list-style-type:none}ul.lst-kix_goky85f7lyx8-6{list-style-type:none}ul.lst-kix_goky85f7lyx8-5{list-style-type:none}.lst-kix_5iu32rubc7u6-0 > li:before{content:\"\u25cf  \"}ul.lst-kix_goky85f7lyx8-4{list-style-type:none}.lst-kix_5iu32rubc7u6-3 > li:before{content:\"\u25cf  \"}.lst-kix_5iu32rubc7u6-5 > li:before{content:\"\u25a0  \"}.lst-kix_5iu32rubc7u6-2 > li:before{content:\"\u25a0  \"}.lst-kix_5iu32rubc7u6-6 > li:before{content:\"\u25cf  \"}.lst-kix_5iu32rubc7u6-4 > li:before{content:\"\u25cb  \"}.lst-kix_2szf7eexr8z3-8 > li:before{content:\"\u25a0  \"}ul.lst-kix_thazg04u1d1d-1{list-style-type:none}ul.lst-kix_thazg04u1d1d-0{list-style-type:none}ul.lst-kix_top7qzsku2zx-0{list-style-type:none}ul.lst-kix_thazg04u1d1d-3{list-style-type:none}ul.lst-kix_top7qzsku2zx-1{list-style-type:none}ul.lst-kix_thazg04u1d1d-2{list-style-type:none}ul.lst-kix_top7qzsku2zx-2{list-style-type:none}ul.lst-kix_rz3p43oycv74-0{list-style-type:none}ul.lst-kix_rz3p43oycv74-2{list-style-type:none}ul.lst-kix_rz3p43oycv74-1{list-style-type:none}.lst-kix_2szf7eexr8z3-2 > li:before{content:\"\u25a0  \"}.lst-kix_2szf7eexr8z3-0 > li:before{content:\"\u25cf  \"}.lst-kix_2szf7eexr8z3-1 > li:before{content:\"\u25cb  \"}.lst-kix_282g4nuy3j0q-1 > li:before{content:\"\u25cb  \"}.lst-kix_5jh5hqbn5xl5-2 > li:before{content:\"\u25a0  \"}.lst-kix_282g4nuy3j0q-2 > li:before{content:\"\u25a0  \"}.lst-kix_5jh5hqbn5xl5-1 > li:before{content:\"\u25cb  \"}.lst-kix_5jh5hqbn5xl5-5 > li:before{content:\"\u25a0  \"}.lst-kix_goky85f7lyx8-6 > li:before{content:\"\u25cf  \"}.lst-kix_282g4nuy3j0q-5 > li:before{content:\"\u25a0  \"}.lst-kix_goky85f7lyx8-7 > li:before{content:\"\u25cb  \"}.lst-kix_282g4nuy3j0q-3 > li:before{content:\"\u25cf  \"}.lst-kix_5jh5hqbn5xl5-4 > li:before{content:\"\u25cb  \"}.lst-kix_282g4nuy3j0q-4 > li:before{content:\"\u25cb  \"}.lst-kix_5jh5hqbn5xl5-3 > li:before{content:\"\u25cf  \"}.lst-kix_goky85f7lyx8-8 > li:before{content:\"\u25a0  \"}.lst-kix_2szf7eexr8z3-3 > li:before{content:\"\u25cf  \"}ul.lst-kix_thazg04u1d1d-8{list-style-type:none}ul.lst-kix_thazg04u1d1d-5{list-style-type:none}.lst-kix_2szf7eexr8z3-4 > li:before{content:\"\u25cb  \"}.lst-kix_2szf7eexr8z3-5 > li:before{content:\"\u25a0  \"}ul.lst-kix_thazg04u1d1d-4{list-style-type:none}.lst-kix_282g4nuy3j0q-6 > li:before{content:\"\u25cf  \"}ul.lst-kix_thazg04u1d1d-7{list-style-type:none}ul.lst-kix_thazg04u1d1d-6{list-style-type:none}.lst-kix_2szf7eexr8z3-6 > li:before{content:\"\u25cf  \"}.lst-kix_2szf7eexr8z3-7 > li:before{content:\"\u25cb  \"}.lst-kix_282g4nuy3j0q-7 > li:before{content:\"\u25cb  \"}.lst-kix_5jh5hqbn5xl5-0 > li:before{content:\"\u25cf  \"}.lst-kix_282g4nuy3j0q-8 > li:before{content:\"\u25a0  \"}.lst-kix_top7qzsku2zx-1 > li:before{content:\"-  \"}.lst-kix_rz3p43oycv74-5 > li:before{content:\"\u25a0  \"}.lst-kix_rz3p43oycv74-7 > li:before{content:\"\u25cb  \"}.lst-kix_top7qzsku2zx-3 > li:before{content:\"-  \"}.lst-kix_top7qzsku2zx-5 > li:before{content:\"-  \"}.lst-kix_rz3p43oycv74-1 > li:before{content:\"\u25cb  \"}.lst-kix_goky85f7lyx8-0 > li:before{content:\"\u25cf  \"}.lst-kix_ft2i69o3rob-3 > li:before{content:\"\u25cf  \"}.lst-kix_ft2i69o3rob-1 > li:before{content:\"\u25cb  \"}.lst-kix_ft2i69o3rob-5 > li:before{content:\"\u25a0  \"}.lst-kix_goky85f7lyx8-2 > li:before{content:\"\u25a0  \"}.lst-kix_5jh5hqbn5xl5-6 > li:before{content:\"\u25cf  \"}.lst-kix_rz3p43oycv74-3 > li:before{content:\"\u25cf  \"}.lst-kix_5jh5hqbn5xl5-8 > li:before{content:\"\u25a0  \"}.lst-kix_goky85f7lyx8-4 > li:before{content:\"\u25cb  \"}ul.lst-kix_akvyymgceazq-0{list-style-type:none}.lst-kix_dpa8cp4doet4-7 > li:before{content:\"\u25cb  \"}.lst-kix_dpa8cp4doet4-5 > li:before{content:\"\u25a0  \"}.lst-kix_ft2i69o3rob-7 > li:before{content:\"\u25cb  \"}.lst-kix_thazg04u1d1d-6 > li:before{content:\"\u25cf  \"}.lst-kix_top7qzsku2zx-7 > li:before{content:\"-  \"}ul.lst-kix_akvyymgceazq-6{list-style-type:none}ul.lst-kix_akvyymgceazq-5{list-style-type:none}ul.lst-kix_akvyymgceazq-8{list-style-type:none}ul.lst-kix_akvyymgceazq-7{list-style-type:none}ul.lst-kix_akvyymgceazq-2{list-style-type:none}ul.lst-kix_akvyymgceazq-1{list-style-type:none}ul.lst-kix_akvyymgceazq-4{list-style-type:none}.lst-kix_thazg04u1d1d-8 > li:before{content:\"\u25a0  \"}ul.lst-kix_akvyymgceazq-3{list-style-type:none}.lst-kix_thazg04u1d1d-4 > li:before{content:\"\u25cb  \"}.lst-kix_5iu32rubc7u6-8 > li:before{content:\"\u25a0  \"}.lst-kix_dpa8cp4doet4-1 > li:before{content:\"\u25cb  \"}.lst-kix_dpa8cp4doet4-3 > li:before{content:\"\u25cf  \"}.lst-kix_c045acpbq3ib-5 > li:before{content:\"\u25a0  \"}.lst-kix_thazg04u1d1d-2 > li:before{content:\"\u25a0  \"}.lst-kix_c045acpbq3ib-7 > li:before{content:\"\u25cb  \"}.lst-kix_thazg04u1d1d-0 > li:before{content:\"\u25cf  \"}ul.lst-kix_282g4nuy3j0q-3{list-style-type:none}ul.lst-kix_282g4nuy3j0q-2{list-style-type:none}ul.lst-kix_282g4nuy3j0q-1{list-style-type:none}ul.lst-kix_282g4nuy3j0q-0{list-style-type:none}ul.lst-kix_282g4nuy3j0q-7{list-style-type:none}ul.lst-kix_282g4nuy3j0q-6{list-style-type:none}ul.lst-kix_282g4nuy3j0q-5{list-style-type:none}ul.lst-kix_282g4nuy3j0q-4{list-style-type:none}ul.lst-kix_282g4nuy3j0q-8{list-style-type:none}.lst-kix_c045acpbq3ib-3 > li:before{content:\"\u25cf  \"}.lst-kix_c045acpbq3ib-1 > li:before{content:\"\u25cb  \"}.lst-kix_2pqoj7yqcbc0-4 > li:before{content:\"\u25cb  \"}.lst-kix_akvyymgceazq-7 > li:before{content:\"\u25cb  \"}.lst-kix_akvyymgceazq-6 > li:before{content:\"\u25cf  \"}.lst-kix_akvyymgceazq-8 > li:before{content:\"\u25a0  \"}ul.lst-kix_izefyhgfp0tt-1{list-style-type:none}.lst-kix_izefyhgfp0tt-8 > li:before{content:\"\u25a0  \"}ul.lst-kix_5jh5hqbn5xl5-7{list-style-type:none}ul.lst-kix_izefyhgfp0tt-2{list-style-type:none}ul.lst-kix_5jh5hqbn5xl5-6{list-style-type:none}ul.lst-kix_izefyhgfp0tt-3{list-style-type:none}.lst-kix_izefyhgfp0tt-7 > li:before{content:\"\u25cb  \"}ul.lst-kix_izefyhgfp0tt-4{list-style-type:none}ul.lst-kix_5jh5hqbn5xl5-8{list-style-type:none}ul.lst-kix_c045acpbq3ib-1{list-style-type:none}ul.lst-kix_izefyhgfp0tt-5{list-style-type:none}.lst-kix_izefyhgfp0tt-6 > li:before{content:\"\u25cf  \"}ul.lst-kix_c045acpbq3ib-0{list-style-type:none}ul.lst-kix_izefyhgfp0tt-6{list-style-type:none}ul.lst-kix_c045acpbq3ib-3{list-style-type:none}ul.lst-kix_izefyhgfp0tt-7{list-style-type:none}ul.lst-kix_c045acpbq3ib-2{list-style-type:none}ul.lst-kix_ft2i69o3rob-8{list-style-type:none}ul.lst-kix_izefyhgfp0tt-8{list-style-type:none}ul.lst-kix_ft2i69o3rob-7{list-style-type:none}ul.lst-kix_ft2i69o3rob-6{list-style-type:none}ul.lst-kix_ft2i69o3rob-5{list-style-type:none}ul.lst-kix_5jh5hqbn5xl5-1{list-style-type:none}ul.lst-kix_ft2i69o3rob-4{list-style-type:none}ul.lst-kix_5jh5hqbn5xl5-0{list-style-type:none}ul.lst-kix_ft2i69o3rob-3{list-style-type:none}ul.lst-kix_5jh5hqbn5xl5-3{list-style-type:none}ul.lst-kix_ft2i69o3rob-2{list-style-type:none}ul.lst-kix_5jh5hqbn5xl5-2{list-style-type:none}ul.lst-kix_ft2i69o3rob-1{list-style-type:none}ul.lst-kix_5jh5hqbn5xl5-5{list-style-type:none}ul.lst-kix_ft2i69o3rob-0{list-style-type:none}ul.lst-kix_5jh5hqbn5xl5-4{list-style-type:none}.lst-kix_izefyhgfp0tt-0 > li:before{content:\"\u25cf  \"}.lst-kix_u3tlaa94wryn-6 > li:before{content:\"-  \"}.lst-kix_izefyhgfp0tt-1 > li:before{content:\"\u25cb  \"}.lst-kix_u3tlaa94wryn-5 > li:before{content:\"-  \"}.lst-kix_u3tlaa94wryn-7 > li:before{content:\"-  \"}.lst-kix_izefyhgfp0tt-2 > li:before{content:\"\u25a0  \"}.lst-kix_u3tlaa94wryn-4 > li:before{content:\"-  \"}.lst-kix_u3tlaa94wryn-8 > li:before{content:\"-  \"}ul.lst-kix_c045acpbq3ib-5{list-style-type:none}.lst-kix_izefyhgfp0tt-4 > li:before{content:\"\u25cb  \"}ul.lst-kix_c045acpbq3ib-4{list-style-type:none}ul.lst-kix_c045acpbq3ib-7{list-style-type:none}.lst-kix_izefyhgfp0tt-3 > li:before{content:\"\u25cf  \"}.lst-kix_izefyhgfp0tt-5 > li:before{content:\"\u25a0  \"}ul.lst-kix_c045acpbq3ib-6{list-style-type:none}ul.lst-kix_c045acpbq3ib-8{list-style-type:none}.lst-kix_akvyymgceazq-0 > li:before{content:\"\u25cf  \"}ul.lst-kix_izefyhgfp0tt-0{list-style-type:none}.lst-kix_akvyymgceazq-1 > li:before{content:\"\u25cb  \"}.lst-kix_u3tlaa94wryn-0 > li:before{content:\"-  \"}.lst-kix_akvyymgceazq-2 > li:before{content:\"\u25a0  \"}.lst-kix_u3tlaa94wryn-2 > li:before{content:\"-  \"}.lst-kix_u3tlaa94wryn-1 > li:before{content:\"-  \"}.lst-kix_u3tlaa94wryn-3 > li:before{content:\"-  \"}.lst-kix_akvyymgceazq-3 > li:before{content:\"\u25cf  \"}.lst-kix_akvyymgceazq-5 > li:before{content:\"\u25a0  \"}.lst-kix_akvyymgceazq-4 > li:before{content:\"\u25cb  \"}ul.lst-kix_2szf7eexr8z3-8{list-style-type:none}.lst-kix_top7qzsku2zx-0 > li:before{content:\"-  \"}.lst-kix_top7qzsku2zx-2 > li:before{content:\"-  \"}ul.lst-kix_2szf7eexr8z3-5{list-style-type:none}ul.lst-kix_2szf7eexr8z3-4{list-style-type:none}ul.lst-kix_2szf7eexr8z3-7{list-style-type:none}ul.lst-kix_2szf7eexr8z3-6{list-style-type:none}.lst-kix_rz3p43oycv74-6 > li:before{content:\"\u25cf  \"}ul.lst-kix_2pqoj7yqcbc0-1{list-style-type:none}ul.lst-kix_2pqoj7yqcbc0-0{list-style-type:none}ul.lst-kix_2pqoj7yqcbc0-3{list-style-type:none}.lst-kix_top7qzsku2zx-4 > li:before{content:\"-  \"}ul.lst-kix_2pqoj7yqcbc0-2{list-style-type:none}.lst-kix_top7qzsku2zx-6 > li:before{content:\"-  \"}.lst-kix_rz3p43oycv74-8 > li:before{content:\"\u25a0  \"}.lst-kix_ft2i69o3rob-0 > li:before{content:\"\u25cf  \"}.lst-kix_rz3p43oycv74-0 > li:before{content:\"\u25cf  \"}ul.lst-kix_2pqoj7yqcbc0-8{list-style-type:none}.lst-kix_ft2i69o3rob-2 > li:before{content:\"\u25a0  \"}.lst-kix_goky85f7lyx8-1 > li:before{content:\"\u25cb  \"}.lst-kix_goky85f7lyx8-3 > li:before{content:\"\u25cf  \"}ul.lst-kix_2pqoj7yqcbc0-5{list-style-type:none}ul.lst-kix_2pqoj7yqcbc0-4{list-style-type:none}ul.lst-kix_2pqoj7yqcbc0-7{list-style-type:none}ul.lst-kix_2pqoj7yqcbc0-6{list-style-type:none}.lst-kix_rz3p43oycv74-2 > li:before{content:\"\u25a0  \"}ul.lst-kix_2szf7eexr8z3-1{list-style-type:none}ul.lst-kix_2szf7eexr8z3-0{list-style-type:none}ul.lst-kix_2szf7eexr8z3-3{list-style-type:none}ul.lst-kix_2szf7eexr8z3-2{list-style-type:none}.lst-kix_goky85f7lyx8-5 > li:before{content:\"\u25a0  \"}.lst-kix_ft2i69o3rob-4 > li:before{content:\"\u25cb  \"}.lst-kix_282g4nuy3j0q-0 > li:before{content:\"\u25cf  \"}.lst-kix_5jh5hqbn5xl5-7 > li:before{content:\"\u25cb  \"}.lst-kix_rz3p43oycv74-4 > li:before{content:\"\u25cb  \"}.lst-kix_dpa8cp4doet4-8 > li:before{content:\"\u25a0  \"}.lst-kix_ft2i69o3rob-6 > li:before{content:\"\u25cf  \"}.lst-kix_dpa8cp4doet4-4 > li:before{content:\"\u25cb  \"}.lst-kix_dpa8cp4doet4-6 > li:before{content:\"\u25cf  \"}.lst-kix_ft2i69o3rob-8 > li:before{content:\"\u25a0  \"}.lst-kix_thazg04u1d1d-5 > li:before{content:\"\u25a0  \"}ul.lst-kix_rz3p43oycv74-4{list-style-type:none}ul.lst-kix_top7qzsku2zx-7{list-style-type:none}ul.lst-kix_rz3p43oycv74-3{list-style-type:none}ul.lst-kix_top7qzsku2zx-8{list-style-type:none}ul.lst-kix_rz3p43oycv74-6{list-style-type:none}ul.lst-kix_rz3p43oycv74-5{list-style-type:none}.lst-kix_top7qzsku2zx-8 > li:before{content:\"-  \"}ul.lst-kix_rz3p43oycv74-8{list-style-type:none}ul.lst-kix_top7qzsku2zx-3{list-style-type:none}ul.lst-kix_rz3p43oycv74-7{list-style-type:none}ul.lst-kix_top7qzsku2zx-4{list-style-type:none}ul.lst-kix_top7qzsku2zx-5{list-style-type:none}ul.lst-kix_top7qzsku2zx-6{list-style-type:none}.lst-kix_thazg04u1d1d-7 > li:before{content:\"\u25cb  \"}ul.lst-kix_5iu32rubc7u6-0{list-style-type:none}ul.lst-kix_u3tlaa94wryn-8{list-style-type:none}ul.lst-kix_5iu32rubc7u6-4{list-style-type:none}ul.lst-kix_5iu32rubc7u6-3{list-style-type:none}ul.lst-kix_5iu32rubc7u6-2{list-style-type:none}ul.lst-kix_5iu32rubc7u6-1{list-style-type:none}ul.lst-kix_u3tlaa94wryn-2{list-style-type:none}ul.lst-kix_5iu32rubc7u6-8{list-style-type:none}ul.lst-kix_u3tlaa94wryn-3{list-style-type:none}ul.lst-kix_5iu32rubc7u6-7{list-style-type:none}ul.lst-kix_u3tlaa94wryn-0{list-style-type:none}ul.lst-kix_5iu32rubc7u6-6{list-style-type:none}ul.lst-kix_u3tlaa94wryn-1{list-style-type:none}ul.lst-kix_5iu32rubc7u6-5{list-style-type:none}.lst-kix_5iu32rubc7u6-7 > li:before{content:\"\u25cb  \"}.lst-kix_thazg04u1d1d-3 > li:before{content:\"\u25cf  \"}ul.lst-kix_u3tlaa94wryn-6{list-style-type:none}ul.lst-kix_u3tlaa94wryn-7{list-style-type:none}ul.lst-kix_u3tlaa94wryn-4{list-style-type:none}ul.lst-kix_u3tlaa94wryn-5{list-style-type:none}.lst-kix_c045acpbq3ib-4 > li:before{content:\"\u25cb  \"}.lst-kix_dpa8cp4doet4-0 > li:before{content:\"\u25cf  \"}.lst-kix_dpa8cp4doet4-2 > li:before{content:\"\u25a0  \"}.lst-kix_c045acpbq3ib-6 > li:before{content:\"\u25cf  \"}.lst-kix_c045acpbq3ib-8 > li:before{content:\"\u25a0  \"}.lst-kix_thazg04u1d1d-1 > li:before{content:\"\u25cb  \"}.lst-kix_c045acpbq3ib-2 > li:before{content:\"\u25a0  \"}.lst-kix_c045acpbq3ib-0 > li:before{content:\"\u25cf  \"}.lst-kix_2pqoj7yqcbc0-3 > li:before{content:\"\u25cf  \"}.lst-kix_2pqoj7yqcbc0-5 > li:before{content:\"\u25a0  \"}\n<\/style>\n<p style=\"padding:0;margin:0;color:#000000;font-size:11pt;font-family:&quot;Arial&quot;;line-height:1.15;orphans:2;widows:2;text-align:justify\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Security is a top priority at Hyperspace and is taken seriously. This document describes the current state of security at Hyperspace. This information can change rapidly, as we are constantly improving our security and continue to build our product.<\/span><\/p><p style=\"padding:0;margin:0;color:#000000;font-size:11pt;font-family:&quot;Arial&quot;;line-height:1.15;orphans:2;widows:2;height:11pt;text-align:justify\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\"><\/span><\/p><p style=\"padding:0;margin:0;color:#000000;font-size:11pt;font-family:&quot;Arial&quot;;line-height:1.15;orphans:2;widows:2;text-align:justify\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Hyperspace follows industry standards and guidelines for security compliance and successfully undergoes security approvals with Fortune 500 and Global 1000 organizations on a monthly basis. We understand the value of formal certifications and have an active program underway to pursue SOC 2 Type II and ISO 27001 certification, further demonstrating our commitment to maintaining a secure and trusted environment.<\/span><\/p><p style=\"padding:0;margin:0;color:#000000;font-size:11pt;font-family:&quot;Arial&quot;;line-height:1.15;orphans:2;widows:2;height:11pt;text-align:justify\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\"><\/span><\/p><p style=\"padding:0;margin:0;color:#000000;font-size:11pt;font-family:&quot;Arial&quot;;line-height:1.15;orphans:2;widows:2;text-align:justify\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">For access to our further security and compliance materials, please contact our security team at security@hyperspace.mv.<\/span><\/p><h1 id=\"h.svxxbu24e76b\" style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:20pt;padding-bottom:8pt;line-height:1.25;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:20pt;font-family:&quot;Arial&quot;;font-style:normal\">Cloud Security<\/span><\/h1><h2 id=\"h.l0nsg76a8ilw\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.28;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Security Architecture &amp; Infrastructure<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.28;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span>At Hyperspace, we follow cloud-native best practices, leveraging the security policies of the public clouds we use. Our architecture is designed to be cloud-agnostic, with future plans to operate on Google Cloud, Azure, and AWS. Currently, all of our application services are hosted on Google Cloud Platform (GCP)<\/span><span style=\"font-weight:700\">&nbsp;<\/span><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">with user scenes and media assets hosted on Amazon Web Services (AWS). Therefore, our security policies follow GCP&#39;s and AWS&#39;s best practices. When this document refers to Hyperspace servers, it means instances within GCP. We do not operate any physical hosting facilities or computer hardware of our own.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.28;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span>You can find more information about GCP&#39;s security processes here:<\/span><span><a href=\"https:\/\/cloud.google.com\/security\" style=\"color:inherit;text-decoration:inherit\">&nbsp;<\/a><\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/cloud.google.com\/security\" style=\"color:inherit;text-decoration:inherit\">https:\/\/cloud.google.com\/security<\/a><\/span><\/p><h2 id=\"h.t1zqgnrbdp9k\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.28;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Data Center Physical Security<\/span><\/h2><h3 id=\"h.1wfxp6kd0hwm\" style=\"padding-top:12pt;margin:0;color:#434343;padding-left:0;font-size:14pt;padding-bottom:12pt;line-height:1.28;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"font-weight:700\">Facilities<\/span><span style=\"color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;<\/span><\/h3><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.28;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Hyperspace uses infrastructure from Google Cloud (GCP) and Amazon Web Services (AWS). The data centers we use hold certifications such as ISO 27001, PCI DSS Service Provider Level 1, and SOC 1 and 2.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.28;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Our providers use robust controls to ensure the security and availability of their systems, including backup power, fire detection and suppression, and secure device destruction.<\/span><\/p><ul class=\"lst-kix_akvyymgceazq-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.28;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span>Learn more about <\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/cloud.google.com\/security\/compliance\/offerings#\/focusArea=Security\" style=\"color:inherit;text-decoration:inherit\">Google Cloud Datacenter Security<\/a><\/span><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.28;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span>Learn more about <\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/aws.amazon.com\/compliance\/data-center\/controls\/\" style=\"color:inherit;text-decoration:inherit\">AWS Data Center Controls<\/a><\/span><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">.<\/span><\/li><\/ul><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.28;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"font-weight:700\">On-Site Security<\/span><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;GCP and AWS implement layered physical security controls to ensure on-site security. These include vetted security guards, fencing, video monitoring, and intrusion detection technology.<\/span><\/p><ul class=\"lst-kix_ft2i69o3rob-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.28;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span>Learn more about <\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/cloud.google.com\/security\/infrastructure\/design#security_of_physical_premises\" style=\"color:inherit;text-decoration:inherit\">GCP Physical Security<\/a><\/span><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.28;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span>Learn more about <\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/aws.amazon.com\/compliance\/data-center\/perimeter-layer\/\" style=\"color:inherit;text-decoration:inherit\">AWS Physical Security<\/a><\/span><span>.<\/span><\/li><\/ul><h2 id=\"h.2tp38zpx9657\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Network and Access Security<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">In-house Security Team<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Our security team actively responds to security alerts and events to maintain a secure environment.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Third-Party Penetration Tests<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;We conduct third-party penetration tests on our application and infrastructure at least annually. All findings are tracked and remediated. Reports are available upon request, subject to an appropriate NDA.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Threat Detection &amp; Vulnerability Scanning<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;We leverage Google Cloud&#39;s threat detection services for continuous monitoring of malicious activity and perform regular internal vulnerability scans. Any identified issues are tracked to remediation.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">DDoS Mitigation<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;We use a layered approach to DDoS protection, including Cloudflare&#39;s CDN with built-in protection, native GCP and AWS tools, and application-specific mitigation techniques.<\/span><\/p><h2 id=\"h.3ckrxmrkr9n8\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Access Control<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Hyperspace uses a least-privilege access model, ensuring staff only have the access necessary for their roles. This is enforced and monitored through regular audits, with two-factor authentication (2FA) required for all production systems.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Role-Based Access Control (RBAC)<\/span><span style=\"color:#1b1f29\">&nbsp;We enforce RBAC to manage user privileges and provide built-in roles that grant specific access levels within a metaverse world, down to a space-level granularity. More details can be found at<\/span><span style=\"color:#1b1f29\"><a href=\"https:\/\/hyperspace.mv\/academy\/user-roles\/\" style=\"color:inherit;text-decoration:inherit\">&nbsp;<\/a><\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/hyperspace.mv\/academy\/user-roles\/\" style=\"color:inherit;text-decoration:inherit\">https:\/\/hyperspace.mv\/academy\/user-roles\/<\/a><\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Network &amp; Service Access<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;The only ways to access stored data, servers, or services within Hyperspace&#39;s VPC are through our VPN servers or Hyperspace API endpoints.<\/span><\/p><ul class=\"lst-kix_c045acpbq3ib-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">VPN Access:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;VPN access for Hyperspace operations staff requires a unique TLS auth key, CA certificate, and individual credentials. It also requires a hardware token for 2FA. Access is limited to necessary employees and can be revoked quickly.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">SSH Access:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;We use a configuration management system to control SSH access via public SSH keys. Passwords are not used, and SSHing as root is disabled. Keys can be quickly removed and rotated if a laptop is lost or a key is compromised.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Employee Laptops:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Employee laptops have Mobile Device Management (MDM) enabled, which enforces strong passwords, disk encryption, a network firewall, and the ability to remotely lock or wipe the device.<\/span><\/li><\/ul><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Network Security Within the VPC<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;We use specific network security groups for our instances. By default, none are publicly reachable. We follow an allowlist-only approach, ensuring only necessary ports and protocols are open from required sources.<\/span><\/p><ul class=\"lst-kix_5iu32rubc7u6-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Load Balancers:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Our Internet-facing load balancers for the API and Dashboard accept only HTTPS traffic on port 443 and redirect all HTTP traffic.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Cloudflare:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;We use Cloudflare endpoints for our website and Dashboard, which also terminate TLS connections and redirect HTTP to HTTPS.<\/span><\/li><\/ul><h2 id=\"h.r6cfwc683ktg\" style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:12pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Application &amp; Data Access<\/span><\/h2><ul class=\"lst-kix_5jh5hqbn5xl5-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Dashboard Access:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Access is based on valid user credentials, and we rely on OAuth 2.0 for both internal and customer authorization. We can configure per-customer authentication using Google, Okta, or any service that federates via SAML.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">API Access:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Access is controlled by API keys, which are created in the Dashboard or API. Each key&#39;s access is limited to the resources of the creating user. All API keys are stored in a secure, encrypted database.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Cloud Resource Access:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Access to GCP and AWS resources is managed through IAM users and roles. We grant access to instances via instance roles, and to developers and administrators via service accounts that require 2FA tokens.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Cluster Manager API:<\/span><span style=\"color:#1b1f29\">&nbsp;Access is controlled via a role-based access mechanism tied to the GCP or AWS SSO user.<\/span><\/li><\/ul><h1 id=\"h.ga2p7fh4hus4\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:20pt;padding-bottom:6pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:20pt;font-family:&quot;Arial&quot;;font-style:normal\">Security Architecture<\/span><\/h1><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Data in Transit<\/span><span style=\"color:#1b1f29\">&nbsp;All data transmitted between customers and Hyperspace is encrypted using TLS. We currently use the <\/span><span style=\"color:#1b1f29;font-weight:700\">TLSv1.2_2021<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;security policy for our HTTPS load balancers. For our website and Dashboard, Cloudflare distributions terminate TLS connections.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Within Hyperspace&#39;s Virtual Private Cloud (VPC), data is transmitted between our internal services. Importantly, data is never sent outside of the VPC. The only entry points to the VPC are through the Hyperspace API and a VPN for our operations staff.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Data at Rest<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Data is persisted in two places, both with encryption enabled:<\/span><\/p><ul class=\"lst-kix_2pqoj7yqcbc0-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">On our servers:<\/span><span style=\"color:#1b1f29\">&nbsp;These use GCP SSD persistent volumes encrypted with <\/span><span style=\"color:#1b1f29;font-weight:700\">AES256<\/span><span style=\"color:#1b1f29\">. For more information, visit:<\/span><span style=\"color:#1b1f29\"><a href=\"https:\/\/cloud.google.com\/docs\/security\/encryption\/default-encryption\" style=\"color:inherit;text-decoration:inherit\">&nbsp;<\/a><\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/cloud.google.com\/docs\/security\/encryption\/default-encryption\" style=\"color:inherit;text-decoration:inherit\">https:\/\/cloud.google.com\/docs\/security\/encryption\/default-encryption<\/a><\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">In S3 storage buckets:<\/span><span style=\"color:#1b1f29\">&nbsp;Used for user scenes and media assets, this data is encrypted both in transit and at rest using the <\/span><span style=\"color:#1b1f29;font-weight:700\">AES-256<\/span><span style=\"color:#1b1f29\">&nbsp;block cipher. For more details, visit:<\/span><span style=\"color:#1b1f29\"><a href=\"https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/serv-side-encryption.html\" style=\"color:inherit;text-decoration:inherit\">&nbsp;<\/a><\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/serv-side-encryption.html\" style=\"color:inherit;text-decoration:inherit\">https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/serv-side-encryption.html<\/a><\/span><\/li><\/ul><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">Encryption keys are managed by <\/span><span style=\"color:#1b1f29;font-weight:700\">GCP and AWS Key Management Services (KMS)<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">. The master keys are never exposed and never leave the KMS hardware. For specific commercial installations, we can offer a way for customers to provide their own master key. All customer API keys and integration credentials are also stored in a secure, encrypted database.<\/span><\/p><h2 id=\"h.zb4rydof\" style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:16pt;background-color:#ffffff;border-left-style:solid;font-family:&quot;Arial&quot;;orphans:2;text-align:left;padding:0;margin:0;border-right-width:0pt;line-height:1.15;page-break-after:avoid;border-left-width:0pt;border-top-style:solid;border-bottom-width:0pt;border-bottom-style:solid;widows:2\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Confidentiality<\/span><\/h2><p style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;border-left-style:solid;font-family:&quot;Arial&quot;;orphans:2;text-align:left;padding:0;margin:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;border-bottom-width:0pt;border-bottom-style:solid;widows:2\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Hyperspace maintains confidentiality by strictly controlling access to systems, services, and data. Access is granted on a need-to-know basis to authorized users, service accounts, and employees.<\/span><\/p><ul class=\"lst-kix_goky85f7lyx8-0 start\" style=\"padding:0;margin:0\"><li style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;margin-left:36pt;border-left-style:solid;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;text-align:left;padding:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;margin-right:0;border-bottom-width:0pt;border-bottom-style:solid;margin-bottom:0;widows:2\"><span style=\"color:#1b1f29;font-weight:700\">Secrets Management:<\/span><span style=\"color:#1b1f29\">&nbsp;Sensitive information required for services at runtime is stored as <\/span><span style=\"color:#1b1f29;font-weight:700\">Kubernetes Secrets<\/span><span style=\"color:#1b1f29\">&nbsp;within our GCP environment. Access to these secrets is managed via Kubernetes roles, adhering to the principle of least privilege. Employee access to third-party services is secured using <\/span><span style=\"color:#1b1f29;font-weight:700\">1Password<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">.<\/span><\/li><li style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;margin-left:36pt;border-left-style:solid;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;text-align:left;padding:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;margin-right:0;border-bottom-width:0pt;border-bottom-style:solid;margin-bottom:0;widows:2\"><span style=\"color:#1b1f29;font-weight:700\">Data Encryption:<\/span><span style=\"color:#1b1f29\">&nbsp;User credentials are encrypted at rest using <\/span><span style=\"color:#1b1f29;font-weight:700\">AES-256<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;within a dedicated database.<\/span><\/li><\/ul><h2 id=\"h.dzi7o296df9l\" style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:16pt;background-color:#ffffff;border-left-style:solid;font-family:&quot;Arial&quot;;orphans:2;text-align:left;padding:0;margin:0;border-right-width:0pt;line-height:1.15;page-break-after:avoid;border-left-width:0pt;border-top-style:solid;border-bottom-width:0pt;border-bottom-style:solid;widows:2\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Audit Logging<\/span><\/h2><p style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;border-left-style:solid;font-family:&quot;Arial&quot;;orphans:2;text-align:left;padding:0;margin:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;border-bottom-width:0pt;border-bottom-style:solid;widows:2\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">We implement comprehensive audit logging to ensure accountability and monitor activity across our infrastructure.<\/span><\/p><p style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;border-left-style:solid;font-family:&quot;Arial&quot;;orphans:2;text-align:left;padding:0;margin:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;border-bottom-width:0pt;border-bottom-style:solid;widows:2\"><span style=\"color:#1b1f29\">All actions on our cloud infrastructure are logged using <\/span><span style=\"color:#1b1f29;font-weight:700\">GCP Cloud Logging<\/span><span style=\"color:#1b1f29\">. For each cluster, including production, logs are securely transferred to a dedicated GCP Cloud Storage bucket located in a separate security account. This bucket is configured with <\/span><span style=\"color:#1b1f29;font-weight:700\">write-only access<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">, which prevents logs from being modified or deleted.<\/span><\/p><h2 id=\"h.h008dhd2etga\" style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:16pt;background-color:#ffffff;border-left-style:solid;font-family:&quot;Arial&quot;;orphans:2;text-align:left;padding:0;margin:0;border-right-width:0pt;line-height:1.15;page-break-after:avoid;border-left-width:0pt;border-top-style:solid;border-bottom-width:0pt;border-bottom-style:solid;widows:2\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Defense in Depth<\/span><\/h2><p style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;border-left-style:solid;font-family:&quot;Arial&quot;;orphans:2;text-align:left;padding:0;margin:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;border-bottom-width:0pt;border-bottom-style:solid;widows:2\"><span style=\"color:#1b1f29\">Hyperspace employs a <\/span><span style=\"color:#1b1f29;font-weight:700\">defense-in-depth<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;strategy to protect its assets through multiple, layered security controls.<\/span><\/p><ul class=\"lst-kix_izefyhgfp0tt-0 start\" style=\"padding:0;margin:0\"><li style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;margin-left:36pt;border-left-style:solid;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;text-align:left;padding:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;margin-right:0;border-bottom-width:0pt;border-bottom-style:solid;margin-bottom:0;widows:2\"><span style=\"color:#1b1f29;font-weight:700\">Access Control:<\/span><span style=\"color:#1b1f29\">&nbsp;Access to all systems requires <\/span><span style=\"color:#1b1f29;font-weight:700\">two-factor authentication (2FA)<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">. Elevated privileges, which are required for critical operations, are also protected by 2FA.<\/span><\/li><li style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;margin-left:36pt;border-left-style:solid;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;text-align:left;padding:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;margin-right:0;border-bottom-width:0pt;border-bottom-style:solid;margin-bottom:0;widows:2\"><span style=\"color:#1b1f29;font-weight:700\">Network Segregation:<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Development and production environments are isolated through strict network segregation to prevent unauthorized access and limit the potential blast radius of any breach.<\/span><\/li><li style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;margin-left:36pt;border-left-style:solid;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;text-align:left;padding:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;margin-right:0;border-bottom-width:0pt;border-bottom-style:solid;margin-bottom:0;widows:2\"><span style=\"color:#1b1f29;font-weight:700\">Least Privilege:<\/span><span style=\"color:#1b1f29\">&nbsp;The <\/span><span style=\"color:#1b1f29;font-weight:700\">principle of least privilege<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;is enforced for all employee accounts, limiting permissions to only what is necessary for their roles.<\/span><\/li><li style=\"border-right-style:solid;color:#000000;border-top-width:0pt;font-size:11pt;background-color:#ffffff;margin-left:36pt;border-left-style:solid;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;text-align:left;padding:0;border-right-width:0pt;line-height:1.15;border-left-width:0pt;border-top-style:solid;margin-right:0;border-bottom-width:0pt;border-bottom-style:solid;margin-bottom:0;widows:2\"><span style=\"color:#1b1f29;font-weight:700\">Intrusion Detection:<\/span><span style=\"color:#1b1f29\">&nbsp;An <\/span><span style=\"color:#1b1f29;font-weight:700\">Intrusion Detection System (IDS)<\/span><span style=\"color:#1b1f29\">&nbsp;is used to continuously monitor all development and production environments, providing immediate alerts to the security team upon detection of anomalies.<\/span><\/li><\/ul><h2 id=\"h.pk18g51khaqx\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Availability and Continuity<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Uptime<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Hyperspace is deployed on public cloud infrastructure with services configured to scale dynamically based on demand. We perform regular load tests and API response time tests as part of our release cycle to ensure stable performance.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">You can view our public <\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/status.hyperspace.mv\/\" style=\"color:inherit;text-decoration:inherit\">status page<\/a><\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;for real-time system availability, scheduled maintenance, and incident history.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Disaster Recovery<\/span><span style=\"color:#1b1f29\">&nbsp;In the event of a major outage, we have a tested and reviewed Disaster Recovery (DR) plan that allows us to deploy our application to alternative hosting. Our DR deployment uses the same configuration management and release processes as our production environment, ensuring all security configurations and controls are applied consistently.<\/span><\/p><h2 id=\"h.xbv3gv47r1sj\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Application Security<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Quality Assurance<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Our Quality Assurance team reviews and tests the codebase for each project. Our security team provides resources and recommendations to the QA team to investigate and remediate security vulnerabilities in the code.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Environment Segregation<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Our testing, staging, and production environments are logically separated. No customer data is ever used in a development or test environment.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Security Mindset Program<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Hyperspace runs a Security Mindset program with active participation from every development team.<\/span><\/p><h2 id=\"h.65hpumux86z5\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Personnel Security<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Security Awareness<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;All new hires must complete a robust Security Awareness Training program within 30 days of employment. All employees receive annual training, with quarterly focused sessions on topics like secure coding and data privacy.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Information Security Program<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;Hyperspace maintains a comprehensive set of information security policies, which are distributed to all employees and contractors. <\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Employee Background Checks<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;All employees undergo a background check prior to employment, covering a 5-year criminal history (where legal) and a 5-year employment verification.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Confidentiality Agreements<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;All employees are required to sign Non-Disclosure and Confidentiality agreements.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Access Controls<\/span><span style=\"color:#1b1f29\">&nbsp;Access to our systems and network devices is granted through a documented, approved request process. All logical access to our servers and management systems requires <\/span><span style=\"color:#1b1f29;font-weight:700\">two-factor authentication<\/span><span style=\"color:#1b1f29\">. We use a <\/span><span style=\"color:#1b1f29;font-weight:700\">least-privilege methodology<\/span><span style=\"color:#1b1f29\">&nbsp;and perform quarterly reviews to ensure all permissions are commensurate with an employee&#39;s job function. Access is revoked immediately upon termination or change of role.<\/span><\/p><h1 id=\"h.85xjdp9qjexw\" style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:20pt;padding-bottom:12pt;line-height:1.28;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:20pt;font-family:&quot;Arial&quot;;font-style:normal\">Data Privacy<\/span><\/h1><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">At Hyperspace, we are committed to protecting the privacy and personal data of all our users, no matter where you are located. We adhere to a global privacy standard based on the principles of transparency, data minimization, and user control.<\/span><\/p><h3 id=\"h.dta9wsnwr3bv\" style=\"padding-top:12pt;margin:0;color:#434343;padding-left:0;font-size:14pt;padding-bottom:12pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:&quot;Arial&quot;;font-style:normal\">For Our Customers in the United States<\/span><\/h3><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">As a USA-based company, we are fully committed to complying with applicable state-level data privacy laws, with a particular focus on the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).<\/span><\/p><h3 id=\"h.n6myyiahyh6p\" style=\"padding-top:12pt;margin:0;color:#434343;padding-left:0;font-size:14pt;padding-bottom:12pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:&quot;Arial&quot;;font-style:normal\">For Our Customers in the European Union (EU), United Kingdom (UK), and Switzerland<\/span><\/h3><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Hyperspace maintains compliance with the European Union&rsquo;s General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss Federal Act on Data Protection (FADP).<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">For the transfer of personal data from the EEA, UK, and Switzerland to our US-based infrastructure, we rely on the following primary legal mechanisms:<\/span><\/p><h4 id=\"h.hziuw8adz1rm\" style=\"padding-top:12pt;margin:0;color:#666666;padding-left:0;font-size:12pt;padding-bottom:12pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#666666;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:12pt;font-family:&quot;Arial&quot;;font-style:normal\">Standard Contractual Clauses (SCCs)<\/span><\/h4><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">For data transfers with customers or partners we rely on the European Commission&#39;s approved Standard Contractual Clauses (SCCs). We also use these clauses in our agreements with any third-party sub-processors we may use. In line with the requirements of the <\/span><span style=\"color:#1b1f29;font-style:italic\">Schrems II<\/span><span style=\"color:#1b1f29\">&nbsp;ruling, we supplement these clauses with additional safeguards, including a Transfer Impact Assessment, to ensure that personal data remains protected with a level of security and privacy essentially equivalent to that of the GDPR.<\/span><\/p><h3 id=\"h.65ajxdouhls5\" style=\"padding-top:8pt;margin:0;color:#434343;padding-left:0;font-size:14pt;padding-bottom:8pt;line-height:1.2857142857142858;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:&quot;Arial&quot;;font-style:normal\">PCI-DSS<\/span><\/h3><p style=\"padding-top:0pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Hyperspace, as a card-not-present merchant, outsources all cardholder functions to a PCI-DSS Level 1 service provider. A copy of our SAQ-A is available upon request.<\/span><\/p><h2 id=\"h.3tq9gb8bdmch\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Privacy Policy<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">For details on how Hyperspace handles data, please refer to our full privacy policy. You can find it at: <\/span><span style=\"color:#1b1f29;font-weight:700\">hyperspace.mv\/privacy<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">If you have any questions or concerns about your privacy, feel free to contact us directly at: <\/span><span style=\"color:#1b1f29;font-weight:700\">privacy@hyperspace.mv<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">.<\/span><\/p><h2 id=\"h.z5bm6op9j07b\" style=\"padding-top:14pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:6pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Third-Party Security and Vendor Management<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">At Hyperspace, we recognize the risks that come with working with third-party vendors. We have a thorough process to ensure that all vendors meet our security standards before we partner with them. If a vendor doesn&#39;t meet our requirements, we won&#39;t move forward with them. We also continuously monitor and reassess the security of our selected vendors, adapting to any changes.<\/span><\/p><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">For our core infrastructure and services, we use a select group of third-party sub-processors. We apply the same strict security evaluation process to these sub-processors as outlined in our Vendor Management Policy.<\/span><\/p><p style=\"padding-top:0pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">The list of subprocessors, which is incorporated herein by reference and applies to both Customers and Participants (Experiences), is accessible at the following location: <\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/hyperspace.mv\/academy\/subprocessors\/\" style=\"color:inherit;text-decoration:inherit\">https:\/\/hyperspace.mv\/academy\/subprocessors\/<\/a><\/span><\/p><h2 id=\"h.uy1hnvv5qk12\" style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:16pt;padding-bottom:12pt;line-height:1.15;page-break-after:avoid;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:16pt;font-family:&quot;Arial&quot;;font-style:normal\">Responsible Disclosure Policy<\/span><\/h2><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">At Hyperspace, we value the role of the security research community in helping us maintain a secure system. If you believe you&#39;ve found a vulnerability, we invite you to report it to us.<\/span><\/p><h3 id=\"h.g57a6i9c90f9\" style=\"padding-top:16pt;margin:0;color:#434343;padding-left:0;font-size:14pt;padding-bottom:4pt;line-height:1.15;page-break-after:avoid;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:&quot;Arial&quot;;font-style:normal\">How to Report a Vulnerability<\/span><\/h3><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">Please email your findings to <\/span><span style=\"color:#1b1f29;font-weight:700\">security@hyperspace.mv<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">. Your report should include:<\/span><\/p><ul class=\"lst-kix_rz3p43oycv74-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Finding Name<\/span><span style=\"color:#1b1f29\">&nbsp;and <\/span><span style=\"color:#1b1f29;font-weight:700;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Severity<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Domain<\/span><span style=\"color:#1b1f29\">&nbsp;and <\/span><span style=\"color:#1b1f29;font-weight:700;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">URL<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">A detailed <\/span><span style=\"color:#1b1f29;font-weight:700\">Proof-of-Concept<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;to reproduce the issue<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:700\">Evidence<\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">, such as screenshots or video<\/span><\/li><\/ul><h3 id=\"h.5jsbada9fak5\" style=\"padding-top:16pt;margin:0;color:#434343;padding-left:0;font-size:14pt;padding-bottom:4pt;line-height:1.15;page-break-after:avoid;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:&quot;Arial&quot;;font-style:normal\">General Guidelines<\/span><\/h3><ul class=\"lst-kix_2szf7eexr8z3-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">All testing must be done within your own account.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">We only accept solo submissions.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Do not access, modify, or delete other people&#39;s data. Only use accounts you own or have explicit permission to use.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Please allow us a reasonable amount of time to fix the issue before publicly disclosing it.<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Public disclosure of vulnerabilities is not currently permitted.<\/span><\/li><\/ul><h3 id=\"h.jeq7xhmtuttf\" style=\"padding-top:16pt;margin:0;color:#434343;padding-left:0;font-size:14pt;padding-bottom:4pt;line-height:1.15;page-break-after:avoid;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:&quot;Arial&quot;;font-style:normal\">Out-of-Scope Activities and Exclusions<\/span><\/h3><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Please refrain from the following activities:<\/span><\/p><ul class=\"lst-kix_dpa8cp4doet4-0 start\" style=\"padding:0;margin:0\"><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Denial of Service (DoS\/DDoS)<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Spamming or Email Bombing\/Flooding<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Social Engineering or phishing of our employees<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Physical attacks on our property<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Using automated vulnerability scanners<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Testing third-party SaaS applications<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Username\/Email enumeration<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Clickjacking<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Missing security headers (e.g., DMARC, SPF, etc.)<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">OAuth misconfigurations<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">Logout Cross-Site Request Forgery<\/span><\/li><li style=\"padding-top:12pt;color:#000000;padding-left:0pt;font-size:11pt;padding-bottom:12pt;line-height:1.15;margin-right:0;background-color:#ffffff;margin-left:36pt;font-family:&quot;Arial&quot;;margin-top:0;orphans:2;margin-bottom:0;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">EXIF and Geolocation data-related vulnerabilities<\/span><\/li><\/ul><h3 id=\"h.pk3o0spdj58b\" style=\"padding-top:16pt;margin:0;color:#434343;padding-left:0;font-size:14pt;padding-bottom:4pt;line-height:1.15;page-break-after:avoid;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#434343;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:14pt;font-family:&quot;Arial&quot;;font-style:normal\">Rewards<\/span><\/h3><p style=\"padding-top:12pt;margin:0;color:#000000;padding-left:0;font-size:11pt;padding-bottom:12pt;line-height:1.15;background-color:#ffffff;font-family:&quot;Arial&quot;;orphans:2;widows:2;text-align:left;padding-right:0\"><span style=\"color:#1b1f29\">While we don&#39;t offer cash rewards, we will gratefully list your name in our <\/span><span style=\"text-decoration-skip-ink:none;-webkit-text-decoration-skip:none;color:#1155cc;text-decoration:underline\"><a href=\"https:\/\/hyperspace.mv\/academy\/bug-hunters-hall-of-fame\/\" style=\"color:inherit;text-decoration:inherit\">Bug Hunters Hall of Fame<\/a><\/span><span style=\"color:#1b1f29;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\">&nbsp;for valid submissions.<\/span><\/p><p style=\"padding:0;margin:0;color:#000000;font-size:11pt;font-family:&quot;Arial&quot;;line-height:1.15;orphans:2;widows:2;height:11pt;text-align:left\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\"><\/span><\/p><p style=\"padding:0;margin:0;color:#000000;font-size:11pt;font-family:&quot;Arial&quot;;line-height:1.15;orphans:2;widows:2;height:11pt;text-align:left\"><span style=\"color:#000000;font-weight:400;text-decoration:none;vertical-align:baseline;font-size:11pt;font-family:&quot;Arial&quot;;font-style:normal\"><\/span><\/p>","protected":false},"excerpt":{"rendered":"Security is a top priority at Hyperspace and is taken seriously. This document describes the current state of security at Hyperspace. This information can change rapidly, as we are constantly improving our security and continue to build our product.Hyperspace follows industry standards and guidelines for security compliance and successfully undergoes security approvals with Fortune 500 [&hellip;]","protected":false},"author":9,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-4284","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hyperspace Security Design<\/title>\n<meta name=\"description\" content=\"Read Hyperspace Security Design for Hyperspace commitments, safeguards, and requirements for secure, responsible immersive learning.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hyperspace Security Design\" \/>\n<meta property=\"og:description\" content=\"Read Hyperspace Security Design for Hyperspace commitments, safeguards, and requirements for secure, responsible immersive learning.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/\" \/>\n<meta property=\"og:site_name\" content=\"Metaverse Academy\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/people\/Hyperspacemv-Metaverse-For-Business\/61571016491364\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-11T00:00:56+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@learnbrite\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/hyperspace-security-design\\\/\",\"url\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/hyperspace-security-design\\\/\",\"name\":\"Hyperspace Security Design\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/#website\"},\"datePublished\":\"2022-08-24T16:19:00+00:00\",\"dateModified\":\"2026-08-11T00:00:56+00:00\",\"description\":\"Read Hyperspace Security Design for Hyperspace commitments, safeguards, and requirements for secure, responsible immersive learning.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/hyperspace-security-design\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/hyperspace-security-design\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/hyperspace-security-design\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hyperspace Security Design\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/#website\",\"url\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/\",\"name\":\"Hyperspace Academy\",\"description\":\"Learn to build WebXR metaverse experiences for 3D, 360, VR\\\/AR\",\"publisher\":{\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/#organization\",\"name\":\"Hyperspace Academy\",\"url\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/Hyperspace-academy-logo-0.75x-white.png\",\"contentUrl\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/Hyperspace-academy-logo-0.75x-white.png\",\"width\":225,\"height\":42,\"caption\":\"Hyperspace Academy\"},\"image\":{\"@id\":\"https:\\\/\\\/hyperspace.mv\\\/academy\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/people\\\/Hyperspacemv-Metaverse-For-Business\\\/61571016491364\\\/\",\"https:\\\/\\\/x.com\\\/learnbrite\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hyperspace Security Design","description":"Read Hyperspace Security Design for Hyperspace commitments, safeguards, and requirements for secure, responsible immersive learning.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/","og_locale":"en_US","og_type":"article","og_title":"Hyperspace Security Design","og_description":"Read Hyperspace Security Design for Hyperspace commitments, safeguards, and requirements for secure, responsible immersive learning.","og_url":"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/","og_site_name":"Metaverse Academy","article_publisher":"https:\/\/www.facebook.com\/people\/Hyperspacemv-Metaverse-For-Business\/61571016491364\/","article_modified_time":"2026-08-11T00:00:56+00:00","twitter_card":"summary_large_image","twitter_site":"@learnbrite","twitter_misc":{"Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/","url":"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/","name":"Hyperspace Security Design","isPartOf":{"@id":"https:\/\/hyperspace.mv\/academy\/#website"},"datePublished":"2022-08-24T16:19:00+00:00","dateModified":"2026-08-11T00:00:56+00:00","description":"Read Hyperspace Security Design for Hyperspace commitments, safeguards, and requirements for secure, responsible immersive learning.","breadcrumb":{"@id":"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hyperspace.mv\/academy\/hyperspace-security-design\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hyperspace.mv\/academy\/"},{"@type":"ListItem","position":2,"name":"Hyperspace Security Design"}]},{"@type":"WebSite","@id":"https:\/\/hyperspace.mv\/academy\/#website","url":"https:\/\/hyperspace.mv\/academy\/","name":"Hyperspace Academy","description":"Learn to build WebXR metaverse experiences for 3D, 360, VR\/AR","publisher":{"@id":"https:\/\/hyperspace.mv\/academy\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hyperspace.mv\/academy\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/hyperspace.mv\/academy\/#organization","name":"Hyperspace Academy","url":"https:\/\/hyperspace.mv\/academy\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hyperspace.mv\/academy\/#\/schema\/logo\/image\/","url":"https:\/\/hyperspace.mv\/academy\/wp-content\/uploads\/2022\/02\/Hyperspace-academy-logo-0.75x-white.png","contentUrl":"https:\/\/hyperspace.mv\/academy\/wp-content\/uploads\/2022\/02\/Hyperspace-academy-logo-0.75x-white.png","width":225,"height":42,"caption":"Hyperspace Academy"},"image":{"@id":"https:\/\/hyperspace.mv\/academy\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/people\/Hyperspacemv-Metaverse-For-Business\/61571016491364\/","https:\/\/x.com\/learnbrite"]}]}},"_links":{"self":[{"href":"https:\/\/hyperspace.mv\/academy\/wp-json\/wp\/v2\/pages\/4284","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hyperspace.mv\/academy\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/hyperspace.mv\/academy\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/hyperspace.mv\/academy\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/hyperspace.mv\/academy\/wp-json\/wp\/v2\/comments?post=4284"}],"version-history":[{"count":8,"href":"https:\/\/hyperspace.mv\/academy\/wp-json\/wp\/v2\/pages\/4284\/revisions"}],"predecessor-version":[{"id":26854,"href":"https:\/\/hyperspace.mv\/academy\/wp-json\/wp\/v2\/pages\/4284\/revisions\/26854"}],"wp:attachment":[{"href":"https:\/\/hyperspace.mv\/academy\/wp-json\/wp\/v2\/media?parent=4284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}