/ legal /

Ethics reporting

Draft pending legal review. This text is a working draft and is not yet legally binding.

Last updated: 27 September 2026

Nexvanta is committed to conducting business honestly, ethically and in compliance with the law. If you become aware of conduct that may violate the law or our policies, we want to hear about it. This page explains how to report a concern confidentially and how we protect people who report in good faith.

1. Who can report

Anyone: employees, former employees, job applicants, contractors, clients, suppliers, business partners and members of the public.

2. What you can report

  • Fraud, bribery, kickbacks or other financial misconduct.
  • Violations of laws or regulations, including data protection, export control, anti-corruption and government contracting rules.
  • Misuse of client data, security breaches that have not been reported, or misrepresentation of security or compliance work.
  • Discrimination, harassment or retaliation.
  • Workplace health and safety issues.
  • Any other violation of our policies.

3. How to report

  • Email: ethics@nexvantasecurity.com
  • Mail: Bruja Neo LLC, Attn: Ethics & Compliance — Confidential, 6300 Riverside Plaza Lane Northwest, Albuquerque, New Mexico 87120, USA

You may report anonymously, although providing contact details helps us follow up. Please describe what happened, when and where, who was involved, and any documents or evidence available.

4. What happens next

  • We will acknowledge your report within 5 business days when you provide a way to contact you.
  • Reports are reviewed by a designated member of Nexvanta's management who is independent of the people involved.
  • We investigate promptly and fairly, and take appropriate corrective action where misconduct is confirmed.

5. Confidentiality and no retaliation

We keep reports confidential and share information only with the people who need it to investigate and resolve the matter, or as required by law. Nexvanta strictly prohibits retaliation against anyone who reports a concern in good faith or cooperates in an investigation. Anyone who retaliates will be subject to discipline, up to and including termination.

6. Reporting to government agencies

Nothing on this page or in any Nexvanta agreement or policy prevents you from reporting possible violations of law directly to a government agency — such as the U.S. Equal Employment Opportunity Commission (EEOC), the Occupational Safety and Health Administration (OSHA), the Department of Justice, the Securities and Exchange Commission (SEC) or the New Mexico Attorney General — or from participating in their investigations, without notice to us.

7. Privacy

Personal information included in reports is used only to review, investigate and resolve the concern and to meet our legal obligations, as described in our Privacy Policy.