refunded to its holders as part of Circle SAS's bankruptcy proceedings, without the holder necessarily having to
file a claim for compensation.
1.2. Third-party Risks. When Circle SAS relies on a third party to provide services that are important to
EURC, Circle SAS generally enters into an agreement containing specific clauses ensuring that the service
provider cannot terminate the business relationship without advanced notice. Some of these agreements (such
as the agreements concerning the safeguarding accounts used to invest the EURC Reserves) are also subject
to regulatory obligations. In addition, Circle SAS implements internal procedures whose purpose is to limit
disruption in the event that an important service provider terminates an agreement or becomes unable to
provide its services to Circle SAS. Finally, third parties with whom Circle SAS contracts are subject to due
diligence procedures to ensure their financial viability and to limit any other risks of non-compliance. To further
mitigate dependency risk, Circle SAS applies a diversification strategy, aiming to avoid excessive concentration
with any single banking, custody, or operational partner. This includes maintaining relationships with multiple
safeguarding institutions and service providers where feasible, regularly assessing diversification metrics, and
establishing contingency options to ensure operational continuity in the event of a third-party failure or service
interruption.
1.3. Market Risks. Circle SAS’s systems and procedures are set up in a way that ensures that EURC
redemptions will occur in the timeframe set out in the Redemption Policy, even if volatility in crypto-asset
markets causes a significant increase in redemption requests.
1.4. Risks of Loss. The redemption right of eligible EURC holders remains exercisable even if Circle SAS
suffers a loss at the level of the safeguarded assets. As is required under Applicable Law, Circle SAS is well-
capitalised and funded and, as an electronic money institution, Circle SAS is subject to regulatory capital and
own-funds requirements. In the event that the loss should exceed Circle SAS’s ability to redeem the EURC
holders, the EURC Recovery Plan or the EURC Redemption Plan may be triggered.
1.5. AML/CFT Risks. Each EURC redemption request to Circle SAS requires the holder to comply with the
laws and regulations applicable to anti-money laundering and counter-terrorist financing in the EU. Moreover, if
Circle SAS determines that EURC transactions linked to public addresses are likely to be associated with
criminal offenses, Circle SAS may decide to freeze the associated EURC (temporarily or permanently). Also, if
Circle SAS receives an injunction from a competent authority to freeze EURC, Circle SAS will comply with such
a request.
1.6. Personal Data Risks. Pursuant to the GDPR, Circle SAS is required to take all necessary precautions
with regard to the nature of the data and the risks presented by the processing of such data, to preserve the
security of EURC holders' personal data and, in particular, to prevent it from being distorted, damaged, or
accessed by unauthorised third parties.
2. Mitigation measures concerning the token-related risks