| Code of Ethics & Business Conduct | 2024 21 Safeguard our non-public informationN - Do not leave it where others can see or have access to it; - Access and store it only on approved devices; - Do not discuss it in public places, including on social media (even private or direct messages); - Make sure confidential documents are secure always, even if they are in your desk or office; an8 - Dispose of all confidential information according to our policies. All Affirmers must sign the appropriate confidentiality agreement as a condition of their association with Affirm. If you become aware of any improper use or disclosure of the Companys non-public information, consult with the Ethics team. If you improperly use or disclose any of the Companys non-public information, you may be subject to disciplinary and/or legal action and liability, regardless of whether you receive any benefit from the use or disclosure. As applicable, an individual shall not be held criminally or civilly liable under any federal or state trade secret law for the disclosure of a trade secret that: (i) is made (a) in confidence to a federal, state, or local government official, either directly or indirectly, or to an attorney; and (b) solely for the purpose of reporting or investigating a suspected violation of law; or (ii) is made in a complaint or other document filed in a lawsuit or other proceeding, if such filing is made under seal. An individual who files a lawsuit for retaliation by an employer for reporting a suspected violation of law may disclose the employers trade secret to the attorney of the individual and use the trade secret information in the court proceeding if the individual files any document containing the trade secret under seal and does not disclose the trade secret, except pursuant to court order. Affirmers responsibility to protect our non-public information does not end when they leave the Company. You are still legally obligated and bound by your employment contract to protect non-public information. Do not share it with any current, former, or future employers. We depend on Affirmers to do what is right and take appropriate measures to preserve our non-public information. Help us protect Company assets. If you know or suspect that any of our assets, including non-public information, have been lost, stolen, or misused, report it immediately (within 24 hours) to the Global Safety & Physical Security team and/or the Information Security team, as applicable. They will promptly investigate the matter and take appropriate action. P r o t e c t i n g o u r c o m p a n y