Whistleblower & Non-Retaliation Policy

Document Reference: AUC-GOV-WBP-001
Version: 2.6.0
Effective Date: October 24, 2026
Last Updated: October 24, 2026
Classification: Public / Corporate Governance
Statutory Alignment: Sarbanes-Oxley Act § 806 | Dodd-Frank Act § 922 | Directive (EU) 2019/1937 (EU Whistleblower Directive) | UK Public Interest Disclosure Act 1998

Executive Summary (ISO 24495-1 Plain-Language Overview)

[!IMPORTANT] Legal Precedence Notice: This plain-language summary is provided solely for reader convenience and compliance audit navigation pursuant to ISO 24495-1:2023. It does not constitute binding legal terms, covenants, or warranties. In the event of any ambiguity, conflict, or inconsistency between this summary and the operative articles below, the operative articles strictly govern and control.

• Scope & Protected Matters: Covers reporting of financial fraud, AI safety circumventions, benchmark manipulation, antitrust violations, data privacy breaches, and workplace discrimination or harassment.
• Absolute Non-Retaliation Guarantee: Enforces zero tolerance for retaliation against any individual who submits a report or participates in an investigation in good faith, in accordance with SOX § 806 and EU Directive 2019/1937.
• Confidential & Anonymous Intake: Individuals can report 24/7/365 via secure web portal (https://trust.auctoric.ai/whistleblower) or email (ethics@auctoric.ai) with option for complete anonymity.
• Strict Investigation Timelines: Written acknowledgment provided within seven (7) calendar days; comprehensive investigations are targeted for completion within sixty (60) days.
• Independent Board Oversight: Reports regarding executive officers or financial reporting escalate directly to the Audit Committee of the Board of Directors.

High-Intent Whistleblower FAQ (AEO Direct Answers)

What protections exist against retaliation for reporting misconduct at Auctoric?

Auctoric enforces a strict zero-tolerance non-retaliation policy. Under Section 4, no individual reporting in good faith will suffer discharge, demotion, suspension, threats, harassment, or adverse employment action. Any personnel engaging in retaliation face immediate termination and potential civil or criminal liability under SOX § 806.

Can whistleblower reports be submitted anonymously?

Yes. Under Section 3, reports can be submitted anonymously through our secure web portal at https://trust.auctoric.ai/whistleblower. Reporters receive an encrypted tracking key to monitor progress, submit additional evidence, and communicate with investigators without disclosing their identity.

What is the SLA and procedure for investigating submitted reports?

Under Section 5.1, intake triage occurs within 24 hours, written acknowledgment is issued to the reporter within seven (7) calendar days, and investigations are conducted independently under Audit Committee oversight with formal resolution targeted within sixty (60) calendar days.

1. Purpose and Philosophy

Auctoric, LLC (“Auctoric”) is committed to upholding the highest standards of legal compliance, ethical conduct, financial integrity, and algorithmic safety. We recognize that employees, contractors, and partners are frequently the first to identify systemic risks, fraud, safety bypasses, or unlawful behavior.

This Whistleblower & Non-Retaliation Policy (“Policy”) establishes safe, confidential, and anonymous mechanisms for reporting concerns without fear of adverse employment consequences, retaliation, or professional detriment.

2. Scope of Reportable Conduct

This Policy encourages reporting of any suspected or confirmed misconduct, including but not limited to:

1. Financial Malpractice & Accounting Fraud: Falsification of financial statements, misrepresentation of revenues, tax evasion, internal control circumvention, or auditor interference.
2. AI Safety & Algorithmic Deception: Falsifying model benchmark evaluations, intentionally concealing model hallucinations or safety filter bypasses, training public models on customer data in breach of contractual covenants, or violating EU AI Act prohibited practices.
3. Bribery, Corruption & Antitrust: Violations of the Foreign Corrupt Practices Act (FCPA), commercial kickbacks, bid-rigging, or illegal price-fixing arrangements.
4. Data Privacy & Cybersecurity Violations: Concealing data breaches, deliberate unauthorized exfiltration of customer information, or willful circumvention of SOC 2 / ISO 27001 controls.
5. Harassment, Discrimination & Labor Abuses: Severe workplace harassment, civil rights violations, or workplace safety hazards.

3. Reporting Channels & Confidentiality

Auctoric provides multiple independent reporting channels. Individuals may choose to identify themselves or remain completely anonymous:

3.1 Whistleblower Reporting Portal

Operated 24 hours a day, 365 days a year:

• Web Portal: https://trust.auctoric.ai/whistleblower
• Direct Ethics Inquiries: ethics@auctoric.ai

3.2 Direct Internal Escalation

• Legal & Compliance Counsel: legal@auctoric.ai
• Audit Committee & Ethics Oversight: ethics@auctoric.ai
• Corporate Address: Auctoric, LLC, Attn: Audit Committee Chair, 2740 SW Martin Downs Blvd., Suite 130, Palm City, FL 34990 (Marked: “CONFIDENTIAL & PRIVILEGED - TO BE OPENED ONLY BY AUDIT COMMITTEE”)

4. Protection Against Retaliation (Strict Zero Tolerance)

Auctoric maintains an absolute zero-tolerance policy against retaliation:

• Protected Activities: No person who in good faith reports a concern, assists another person in reporting, or participates in an investigation shall suffer discharge, demotion, suspension, threat, harassment, or discrimination in terms of employment.
• Legal Shield: This protection applies regardless of whether the investigation ultimately substantiates the reported concern, provided the report was made with an honest, reasonable belief in its truth.
• Sanctions for Retaliation: Any employee, supervisor, officer, or director found to have engaged in retaliatory behavior will be subject to immediate disciplinary termination and personal civil/criminal liability under applicable federal and state whistleblower statutes.

5. Investigation and Resolution Process

flowchart TD
    Report["1. Report Submitted (Anonymous / Identified)"] --> Triage["2. Intake & Independent Triage (Within 24 Hours)"]
    Triage --> Ack["3. Written Acknowledgment to Reporter (Within 7 Days)"]
    Ack --> Inv["4. Formal Investigation by Independent Counsel / Audit Team"]
    Inv --> Findings["5. Investigative Report & Corrective Actions"]
    Findings --> Board["6. Escalation to Audit Committee of Board"]
    Board --> Closure["7. Case Closure & Reporter Notification"]

5.1 Timelines & Due Process

1. Receipt Acknowledgment: The reporter receives a tracking key and written acknowledgment within seven (7) calendar days of submission.
2. Independent Investigation: Reports involving senior executives or accounting practices are investigated directly under the oversight of the Audit Committee of the Board of Directors, with external legal counsel where appropriate.
3. Resolution: Reports are thoroughly investigated within sixty (60) days. Summary resolution updates are provided to the reporter via the secure portal tracking key.

6. Retention and Records

All records concerning whistleblower reports, investigative findings, and remediation actions are maintained securely by the Legal Department for a minimum of seven (7) years in encrypted, access-restricted storage.