INVT is committed to safeguarding the security of its customers' facilities and products. This process is applicable to cybersecurity vulnerabilities related to our company's products reported by external customers or internal employees. We have established relevant mechanisms for vulnerability reporting, vulnerability analysis and handling, and vulnerability disclosure.

Vulnerability Reporting

After discovering a vulnerability, the vulnerability reporter should submit product-related security vulnerability information via our security contact email (psirt@invt.com). We usually reply to the received messages within one working day.

To facilitate the analysis and handling of vulnerabilities, please provide the following information:

• Affected products, models, hardware versions and firmware/software versions;

• Vulnerability description, reproduction steps and impact explanation;

• Whether the vulnerability has been made public and whether it has been discovered and exploited;

• Contact information of the reporter.

Vulnerability Analysis and Handling

The analysis and handling of vulnerabilities will be carried out in accordance with relevant national cybersecurity regulations and INVT's vulnerability handling procedures.

Vulnerability Disclosure

None at this time.