734 Broadway
New York, NY
Date: May 1, 2025
TO WHOM IT MAY CONCERN:
This letter serves as formal attestation regarding the internal control environment at Shade Inc. ("Company") for the period commencing November 16, 2024 through May 15, 2025 ("Bridge Period").
The Company previously underwent a System and Organization Controls (SOC) 2 Type 1 examination conducted by Laika Compliance, which culminated in a report dated November 15, 2024 ("Examination Date"). Said examination yielded no exceptions or qualifications.
The undersigned hereby affirms that the internal controls and safeguards evaluated during the aforementioned SOC 2 Type 1 examination have remained substantially unchanged and have continued to operate effectively throughout the Bridge Period. The control environment has, if anything, been strengthened in preparation for our SOC 2 Type 2 examination, which commenced immediately following the Examination Date and is scheduled to conclude on May 15, 2025.
During the Bridge Period, the Company successfully migrated its authentication infrastructure from Firebase to WorkOS, thereby enhancing security capabilities through the implementation of Single Sign-On (SSO) and SAML authentication protocols. This migration was executed without security incidents or service disruptions.
The Company hereby attests that:
This attestation is provided solely for informational purposes and should not be construed as a replacement for a SOC 2 Type 2 examination report. The Company assumes no obligation to update this letter for events or circumstances occurring after the date hereof.
Sincerely,
Gurish Sharma Chief Information Security Officer Shade Inc.
Emerson Dove Chief Technology Officer Shade Inc.