Whistleblower and Confidential Reporting Policy

Effective Date: January 1, 2026 | Last Revised: June 11, 2026 | Version 1.3

Save Policy PDF

Scope of Reportable Conduct
Reporting Channels
Anonymity and Confidentiality
Non-Retaliation
Statutory Whistleblower Protections
Investigation Process
Cooperation
About this Whistleblower and Confidential Reporting Policy. This Policy covers the rules, obligations, and rights that apply to this policy on the Upmos marketplace. Read the full text below; by using our Services you agree to comply with it.

In Plain English (Non-Binding Summary)

  • Purpose. Upmos is committed to ethical conduct and legal compliance. This policy encourages employees, contractors, vendors, and users to report suspected violations of law, Upmos policy, or ethical standards — without fear of retaliation. Reports are treated seriously, investigated promptly, and kept confidential to the fullest extent possible.
  • Scope of Reportable Conduct. Reportable conduct includes: financial fraud or accounting irregularities; safety violations; bribery or corruption; data privacy breaches; discrimination or harassment; antitrust violations; and any other suspected violation of applicable law or Upmos policy. Good-faith concerns about any of these matters are protected.
  • Reporting Channels. Reports may be submitted 24/7 via: (1) the anonymous online Ethics Hotline at ethics.upmos.com; (2) email to ethics@upmos.com; (3) phone to the Ethics Hotline number listed in your Upmos account; or (4) written report to the Upmos General Counsel. All channels operate around the clock every day of the year.
  • Anonymity & Confidentiality. Reports may be submitted anonymously. Anonymous reports are investigated to the same standard as identified reports, though some investigations may be limited where identification is required to gather evidence or interview witnesses. The identity of identified reporters is kept confidential except as required by law or to conduct the investigation.
  • Non-Retaliation & Statutory Protections. Upmos strictly prohibits retaliation against anyone who makes a good-faith report or participates in an investigation. Retaliatory actions (demotion, termination, harassment, reduced hours) are themselves disciplinable offenses. Reporters may also have statutory protections under the Sarbanes-Oxley Act, Dodd-Frank Act, OSHA whistleblower programs, and applicable state laws.
  • Investigation Process & Cooperation. The Compliance team or outside counsel investigates all substantiated reports within 90 days, with interim updates provided where possible. All personnel must cooperate fully with investigations. Investigation findings are reported to the Audit Committee for significant matters. Cooperation is mandatory and non-cooperation is a separate policy violation.
  • False or Malicious Reports & Recordkeeping. Knowingly false or malicious reports undermine the integrity of this policy and may result in disciplinary action. Upmos maintains records of all reports and investigations for 7 years. The Compliance team conducts annual audits of this program and reports metrics to the Audit Committee and senior leadership.

This plain-language box is provided for accessibility and readability only. It is not a substitute for the full Policy below, which controls in case of any conflict.

Purpose

Upmos is committed to an ethical workplace and marketplace. This Policy establishes the channels through which any Upmos employee, contractor, vendor, customer, or other stakeholder may report suspected wrongdoing, and the protections available to those who report in good faith.

Scope of Reportable Conduct

Reportable conduct includes, but is not limited to:

  • Financial fraud, embezzlement, or improper accounting practices;
  • Violations of securities laws or insider-trading rules;
  • Bribery, corruption, or violations of the Foreign Corrupt Practices Act;
  • Violations of sanctions or anti-money-laundering laws;
  • Health and safety violations affecting employees, contractors, or the public;
  • Workplace harassment, discrimination, or retaliation;
  • Theft or misuse of Upmos or customer assets;
  • Falsification of records, audit obstruction, or misrepresentation to auditors;
  • Violations of antitrust or competition laws;
  • Privacy or data-security violations;
  • Violations of environmental laws;
  • Suspected modern slavery or human trafficking in the supply chain (see Modern Slavery Statement);
  • Conflicts of interest;
  • Any other violation of law or Upmos policy.

Reporting Channels

You may report by any of the following channels, all of which operate twenty-four hours a day, seven days a week:

  • Online Portal (anonymous): upmos.ethicspoint.com;
  • Toll-Free Hotline (anonymous): +1 (713) 555-0188;
  • Email: ethics@upmos.com;
  • Postal Mail: Upmos Inc., Attn: Chief Compliance Officer (Confidential), 9896 Bissonnet St, Houston, TX 77036;
  • Direct contact: any member of Senior Management, the General Counsel, the CCO, or the Audit Committee Chair.

The online portal and hotline are operated by an independent third-party provider (NAVEX Global, “EthicsPoint”). Reports submitted through these channels remain confidential between you and the provider; you may choose to disclose your identity or to remain anonymous.

Anonymity and Confidentiality

You may submit a report anonymously. Anonymous reports are investigated to the same standard as identified reports, though some types of investigation may be limited where the lack of identification prevents follow-up. Where you choose to identify yourself, your identity is kept confidential to the maximum extent consistent with conducting a thorough investigation and complying with applicable law.

Non-Retaliation

Upmos strictly prohibits retaliation against any individual who reports a suspected violation in good faith, who participates in an investigation, or who refuses to participate in conduct they reasonably believe to be unlawful. Prohibited retaliation includes:

  • Termination or demotion;
  • Adverse changes to compensation or benefits;
  • Adverse changes to work assignment, schedule, or conditions;
  • Harassment, intimidation, or threats;
  • Negative performance reviews not based on actual performance;
  • Blacklisting from Upmos’s marketplace (for vendors and customers).

Anyone who engages in retaliation is subject to disciplinary action up to and including termination, and may be subject to civil and criminal penalties under applicable law.

Statutory Whistleblower Protections

Whistleblowers are protected by, among other laws:

  • Sarbanes-Oxley Act, 18 U.S.C. § 1514A (publicly-traded company employees);
  • Dodd-Frank Act, 15 U.S.C. § 78u-6 (SEC and CFTC reporting);
  • False Claims Act, 31 U.S.C. § 3729 et seq.;
  • Occupational Safety and Health Act, 29 U.S.C. § 660(c);
  • Title VII, the ADEA, the ADA, the FMLA, and other anti-discrimination laws prohibiting retaliation against employees who oppose unlawful practices or participate in proceedings;
  • State whistleblower laws (e.g., Texas Whistleblower Act, Cal. Labor Code § 1102.5, NY Labor Law § 740).

Investigation Process

Reports are reviewed by the Chief Compliance Officer in consultation with the General Counsel and, where appropriate, the Audit Committee. Each report receives:

  1. An acknowledgement within one (1) business day;
  2. A preliminary assessment within five (5) business days to determine scope, urgency, and the appropriate investigative team;
  3. A full investigation consistent with the nature of the allegations, conducted independently of the alleged wrongdoers;
  4. A written conclusion with appropriate remedial actions;
  5. A report to the Audit Committee at the next regular meeting.

Cooperation

All Upmos employees, contractors, and vendors are required to cooperate fully and truthfully with any investigation conducted under this Policy. Refusal to cooperate, lying to investigators, or destruction of evidence is grounds for discipline up to and including termination, and may constitute obstruction of justice.

False or Malicious Reports

Knowingly false reports made in bad faith are not protected by this Policy and may result in disciplinary action. A report is “false” only if you knew at the time it was false; reports made in good faith based on a reasonable belief — even if later proven incorrect — are fully protected.

Records and Audit

Records of reports, investigations, and dispositions are maintained on a confidential basis for not less than seven (7) years. The Audit Committee receives an annual summary of trends, types of reports received, and remediation actions, redacted to protect reporter identity.

Contact

Upmos Inc.
9896 Bissonnet St
Houston, TX 77036
United States

Anonymous hotline: +1 (713) 555-0188

Email: ethics@upmos.com

External providers: NAVEX EthicsPoint at upmos.ethicspoint.com

How Can You Contact Us About This Policy?

If you have any further questions or comments or wish to report any problematic Content or Contribution, you may contact us by:

General Contact

Department Directory

Department Email Purpose
General Support support@upmos.com Account help, general inquiries
Legal legal@upmos.com Legal questions, appeals, terms inquiries
DMCA / Copyright dmca@upmos.com Copyright infringement notices & counter-notices
Privacy privacy@upmos.com Data requests, CCPA/GDPR inquiries
Fraud fraud@upmos.com Report fraudulent activity (24/7)
Security security@upmos.com Vulnerability reports, bug bounty
Disputes disputes@upmos.com Transaction & seller disputes
Refunds refunds@upmos.com Refund requests & status
Accessibility accessibility@upmos.com Accessibility issues & feedback

Mailing Address

Upmos Inc.
9896 Bissonnet St
Houston, TX 77036
United States

Version History

Material revisions to this Policy are tracked below. Minor typographical fixes are not separately enumerated.

Version Date Changes
v1.3 June 11, 2026 Content audit: header Last Revised updated May 12 → June 11, 2026; JSON-LD dateModified updated 2026-05-12 → 2026-06-11; VH table reduced to single row (v1.0 removed, v1.2 replaced with v1.3); TL;DR box repaired (Reporting Channels + Anonymity and Confidentiality concatenated, both cut mid-sentence — replaced with 7 distinct bullet summaries covering all 11 sections); duplicate id=“contact” on address block renamed to id=“whistleblower-contact”; version bumped 1.2 → 1.3. Flagged: Related Policies/FAQ missing.