MINTDOWNLOADS™

CORPORATE GOVERNANCE & COMPLIANCE CHARTER

(Enterprise Governance Framework)

I. PURPOSE

This Corporate Governance & Compliance Charter (“Charter”) establishes the governance, oversight, ethics, accountability, and risk management framework of MintDownloads™ (“Company”).

This Charter is designed to:

Ensure lawful global operations

Maintain regulatory compliance

Protect stakeholders (users, vendors, investors)

Establish internal accountability

Support institutional investment readiness

II. GOVERNING PRINCIPLES

The Company operates under:

Legality

Transparency

Ethical Conduct

Risk Accountability

Financial Integrity

Data Protection

AI Responsibility

Global Regulatory Awareness

III. BOARD STRUCTURE

A. Board of Directors

Responsible for:

Strategic oversight

Risk supervision

Financial governance

CEO appointment and removal

Approval of material policies

Board shall meet quarterly at minimum.

B. Committees

Audit & Risk Committee

Oversees AML, fraud, cybersecurity, tax compliance

Reviews financial statements

Monitors reserves and payout risk

Compliance & Ethics Committee

Monitors regulatory obligations

Oversees sanctions compliance

Handles whistleblower reports

Technology & AI Oversight Committee

Reviews AI system usage

Reviews content moderation algorithms

Monitors bias, discrimination risk

IV. INTERNAL CONTROL FRAMEWORK

The Company maintains:

Segregation of duties

Dual-authorization for fund transfers

Audit logs for administrative actions

Role-based access control (RBAC)

Vendor risk scoring

Blockchain monitoring tools

V. COMPLIANCE PROGRAM

Includes:

AML/KYC enforcement

GDPR compliance

Tax compliance monitoring

Intellectual property enforcement

AI governance

Mandatory annual compliance training for staff.

VI. ETHICS & CONDUCT

All officers, employees, and contractors must:

Avoid conflicts of interest

Maintain confidentiality

Reject bribery and corruption

Report suspicious activity

Whistleblower protections apply.

VII. RISK MANAGEMENT

Risk categories monitored:

Operational risk

Financial risk

Regulatory risk

Cybersecurity risk

Reputational risk

AI liability risk

Cross-border enforcement risk

Quarterly risk assessment required.

VIII. DATA GOVERNANCE

Includes:

Data classification policies

Encryption standards

Access audit controls

Retention schedules

Breach response procedures

IX. RECORD RETENTION

Financial, tax, AML, and compliance records retained in accordance with jurisdictional requirements (5–10 years minimum).

X. REVIEW & AMENDMENT

Charter reviewed annually by Board