H. UPLOAD & CONFIDENTIALITY NOTICE

Canonical document identifier: CSM-UPLOAD-CONFIDENTIALITY

Version: 1.0.0

Effective / approval date: September 18, 2026

Launch scope: Canada excluding Quebec — Soft Launch 0.1

Status: LOCKED / APPROVED FOR IMPLEMENTATION

Upload only information reasonably necessary for your Request.

Do not upload:

• passwords;
• authentication secrets;
• payment-card information;
• unnecessary government identification;
• unnecessary personal information;
• privileged legal communications;
• controlled military/defence technical information;
• weapons-related restricted technical information;
• material you do not have authority to provide.

By uploading material, Customer confirms that:

1. it has authority to provide the material for the Request;
2. the Request has a lawful business purpose;
3. Customer is not knowingly submitting material prohibited under CSM's Restricted & Prohibited Sourcing Policy.

Potential controlled or otherwise restricted material may be quarantined.

Quarantined material will not enter ordinary:

• OCR;
• parsing;
• indexing;
• embeddings;
• AI workflows;
• research context;
• ordinary researcher access

unless properly cleared.

J. RESTRICTED & PROHIBITED SOURCING POLICY

Canonical document identifier: CSM-RESTRICTED-SOURCING

Version: 1.0.0

Effective / approval date: September 18, 2026

Launch scope: Canada excluding Quebec — Soft Launch 0.1

Status: LOCKED / APPROVED FOR IMPLEMENTATION

CSM provides lawful B2B sourcing research.

CSM may refuse or stop research involving:

• illegal commerce;
• stolen goods;
• counterfeit acquisition/distribution;
• sanctions evasion;
• export/import/customs evasion;
• firearms;
• ammunition;
• explosives;
• prohibited weapons;
• controlled military/defence goods or technical information outside CSM's lawful authority;
• dangerous CBRN-related sourcing;
• illegal drugs or controlled substances;
• other unlawful activity.

Certain Requests require manual or legal review, including potentially:

• hazardous chemicals;
• dangerous-goods-sensitive products;
• medical/health products;
• PPE;
• life-safety products;
• dual-use/export-controlled technology;
• sanctions-linked persons/jurisdictions;
• regulated pesticides/therapeutics;
• highly regulated food products;
• surveillance/interception technologies;
• licence-sensitive goods.

Possible states include:

• CLEAR
• CUSTOMER_INFORMATION_REQUIRED
• MANUAL_REVIEW_REQUIRED
• LEGAL_REVIEW_REQUIRED
• PROHIBITED
• QUARANTINED_UPLOAD

No package level, including Strategic, overrides this Policy.

K. CONTROLLED GOODS / EXPORT / SANCTIONS HANDLING

Incorporated into: CSM-RESTRICTED-SOURCING version 1.0.0

Status: LOCKED / APPROVED FOR IMPLEMENTATION

Controlled Goods

CSM is not holding itself out as registered to examine controlled technical material.

Where CSM identifies a reasonable possibility that submitted information may constitute controlled goods or controlled technology:

1. ordinary processing stops;
2. the information is quarantined;
3. it does not enter ordinary research or AI systems;
4. CSM may request non-controlled clarifying information;
5. CSM may decline the Request;
6. appropriate legal/compliance review may be obtained where necessary.

Customer's representation or indemnity does not authorize CSM to engage in conduct prohibited by law.

Export controls

CSM may provide sourcing context but does not undertake to issue export permits, customs rulings or legal export-control opinions.

Customer remains responsible for compliance applicable to its downstream transaction.

Sanctions

CSM may conduct proportionate sanctions screening relevant to the Request.

A potential match or material unresolved sanctions concern stops ordinary progression.

The Canadian Consolidated Autonomous Sanctions List may be used as an administrative screening source, but the applicable regulations remain authoritative.

CSM may refuse or terminate a Request where sanctions risk cannot be appropriately resolved.