Written Information Security Policy (WISP) Update

Version 2.0

Date: August 27, 2025

Confidential and Proprietary

1. Program Overview

This Information Security Program (ISP) establishes Akili Ventures’ (“Akili”) policies, procedures, and safeguards to protect systems, data, and digital assets.

Objectives

• Confidentiality: Only authorized persons may access data.
• Integrity: Data must remain accurate and tamper-free.
• Availability: Data must be accessible to those who need it, when needed.

This ISP incorporates best practices from:

• ISO 27001:2022 (Information Security Management)
• NIST Cybersecurity Framework 2.0 (2024)
• NIST SP 800-53 and SP 800-61 Rev. 3 (2023)
• SANS Critical Security Controls

Scope

This policy applies to all Akili Ventures employees, directors, contractors, consultants, vendors, and any third party with access to Firm systems or data.

Vendors must comply with Akili’s standards or demonstrate equivalent controls. High-risk vendors are subject to additional oversight.