AVEPOINT, INC.

AvePoint's Form 10-K Item 1C cybersecurity disclosure describes its risk management framework, ISO 27001/27701/27017 certifications, governance structure, and board oversight via the Nominating and Corporate Governance Committee. The Company states it has experienced cyberattacks in the past that it believes were immaterial, and that in 2025 it did not identify any privacy or cybersecurity threats that materially affected or are reasonably likely to materially affect its business.