1. PURPOSE AND REGULATORY POSITIONING

This Permitted Partnerships & Custom Solutions Framework (the "Framework") establishes the parameters within which Cregis Custody FZE may engage with third parties while maintaining compliance with regulatory requirements.

Cregis is licensed by the Dubai Virtual Assets Regulatory Authority (VARA) to provide Virtual Asset Custody Services only.

2. REGULATORY PRINCIPLES

All partnerships must comply with the following principles:

• Custody services remain legally, operationally, and functionally independent;
• No delegation of regulated custody responsibilities without VARA permission;
• Clear, fair, and non-misleading communications;
• Full compliance with VARA Rules, Directives, and Marketing Regulations.

3. PERMITTED PARTNERSHIP MODELS

Subject to regulatory assessment and internal approval, Cregis may engage in the following partnership arrangements:

a. White-Label or Co-Branded Custody Services

• Cregis remains clearly identified as the VARA-licensed custodian;
• regulatory responsibility for custody services remains with Cregis;
• clients are not misled as to the identity of the custody provider;
• all required VARA disclosures are maintained.

b. Tokenised Asset Custody Solutions

• safekeeping of tokenised assets;
• secure wallet and key-management solutions;
• custody support for tokenised instruments issued or managed by licensed third parties.

Cregis does not act as an issuer, advisor, distributor, or promoter of tokenised assets unless separately licensed by VARA.

4. ACTIVITIES OUTSIDE SCOPE

Unless separately authorised by VARA, Cregis does not provide or partner to provide exchange services, broker-dealer activities, advisory services, staking, yield or reward programs, lending, or discretionary asset management.

5. GOVERNANCE AND OVERSIGHT

All partnerships are subject to compliance review, risk assessment, conflicts evaluation, and approval by Senior Management or the Board, with regulatory notification or approval obtained where required.