1. Purpose and Scope

These Child Safety Standards set out how Enclira prevents, detects, responds to and reports child sexual abuse and exploitation across the services we operate and the technology we provide to our customers.

These Standards apply to:

• Enclira websites and web applications.
• Enclira mobile applications.
• White-labelled applications and websites powered by Enclira.
• Community, membership and social-networking functionality.
• Messaging, communication and notification services.
• Content, media and file-storage functionality.
• Events, forms, surveys, polls and grievance functionality.
• Marketplace and service-provider functionality.
• AI and IRA functionality.
• Any other Enclira service that allows users to create, share or exchange content.

These Standards should be read together with the Enclira Terms of Service, Privacy Policy and Data Processing Agreement. Where these Standards and another Enclira document address the same subject, these Standards apply to child-safety matters.

2. Our Commitment

Enclira has zero tolerance for child sexual abuse and exploitation. There is no context, community setting, private space, permission configuration or customer instruction in which such conduct is permitted on the Platform.

We commit to:

• Prohibiting CSAE conduct and content across every Enclira-powered service.
• Providing accessible in-product mechanisms for users to report CSAE.
• Reviewing credible reports promptly and acting on confirmed violations.
• Removing violating content and terminating the accounts responsible.
• Reporting confirmed CSAM to the appropriate authorities where legally required or permitted.
• Preserving relevant records in support of lawful investigations.
• Cooperating with law enforcement, regulators and recognized child-protection organizations.
• Maintaining a published point of contact for child-safety matters.
• Complying with applicable child-safety laws in the jurisdictions in which we operate.
• Reviewing these Standards regularly and updating them as law, guidance and our services evolve.

3. Definitions

For purposes of these Standards:

• “Child” or “minor” means a person under the age of 18, or such higher age as applicable local law defines for child-protection purposes.
• “CSAE” means child sexual abuse and exploitation, including any conduct that sexually abuses, sexualizes, exploits, endangers or trafficks a child.
• “CSAM” means child sexual abuse material — any visual or other depiction of sexually explicit conduct involving a child.
• “Grooming” means building a relationship, trust or emotional connection with a child in order to sexually abuse, exploit or traffick them.
• “Sextortion” means threatening to reveal intimate imagery of a person in order to obtain further imagery, sexual activity, money or anything else of value.
• “Minor sexualization” means depicting, describing or presenting a child in a sexualized manner, whether or not the material is explicit and whether the depiction is real, computer-generated, animated or AI-generated.
• “Customer” means an organization or person operating a community, application or White-Label Service using Enclira technology.
• “Customer Administrator” means a person authorized by a Customer to administer its Enclira environment.

4. Prohibited Conduct

The following conduct is strictly prohibited on every Enclira-powered service:

• Creating, uploading, storing, sharing, requesting, soliciting, advertising, linking to or distributing CSAM.
• Sexualizing a child in any form of content, including text, imagery, audio, video, avatars, animation, drawings and AI-generated material.
• Grooming a child, or attempting to.
• Sextortion involving a child, or attempting to.
• Sexual solicitation of, or sexual communication with, a child.
• Facilitating, arranging, advertising or promoting child sex tourism, child trafficking or any other exploitation of a child.
• Sharing or seeking contact information, location or access to a child for the purposes of abuse or exploitation.
• Instructing, encouraging or normalizing the sexual abuse of children.
• Using Enclira AI features to generate, refine, translate, describe or obtain CSAE material.
• Using Enclira to evade detection of, or enforcement against, CSAE conduct anywhere.
• Impersonating a child, or misrepresenting age, in order to contact or exploit minors.
• Circumventing an enforcement action taken by Enclira for a child-safety violation, including by creating a new account.

These prohibitions apply regardless of whether a space is public, private, invitation-only, encrypted in transit, self-hosted under a customer’s branding or otherwise restricted.

5. Prohibited Content

Enclira prohibits content that depicts, describes, promotes, solicits or facilitates CSAE, including:

• CSAM in any format, including images, video, audio, live streams, documents and links.
• Sexualized depictions of minors, whether real, fictional, computer-generated or AI-generated.
• Non-consensual intimate imagery involving a minor.
• Material that presents a minor as an object of sexual interest.
• Material advertising, requesting or offering CSAE material or access to a child.
• Content providing guidance on grooming, evading detection, or committing offences against children.
• Off-platform links, file references or codes used to distribute CSAE material.

Enclira does not require a legal determination before acting. Content reasonably assessed as CSAE is removed and the associated accounts are actioned pending review.

6. Age Requirements and Eligibility

Users must meet the minimum age required by applicable law and by the community or application they are using.

Some Enclira customers operate communities that lawfully involve minors — for example schools, educational institutions, youth organizations, sports bodies and family-oriented associations. Where a customer does so, that customer is responsible for:

• Determining the applicable minimum age for its community.
• Obtaining verifiable parental or guardian consent where required.
• Providing the notices required by applicable children’s privacy law.
• Configuring visibility, messaging and directory permissions appropriately for minors.
• Restricting adult access to spaces intended for minors.
• Supervising and moderating its community.
• Applying appropriate retention and access controls to minors’ information.

Enclira may require a customer to demonstrate appropriate safeguards, may restrict features in youth-serving environments, and may decline or discontinue service where the required safeguards are not in place.

7. Prevention

Enclira is designed so that communities are private, permissioned and administered. We use that architecture as a child-safety control. Preventive measures may include:

• Membership-based access rather than open, unauthenticated public participation.
• Role and permission systems that limit who may contact, view or message whom.
• Administrator controls over joining, groups, spaces, directories and content visibility.
• Configurable restrictions on direct messaging and member discoverability.
• Account authentication and verification controls.
• Rate limiting and anti-abuse controls that constrain mass contact attempts.
• Safety guidance surfaced to customers operating youth-serving communities.
• Safety controls applied to AI and IRA features to refuse CSAE-related prompts and outputs.

8. Detection and Moderation

Enclira uses a combination of user reporting, administrator moderation, automated signals and human review to identify CSAE.

Depending on the service and configuration, this may include:

• In-product reporting available to users and administrators.
• Moderation tooling provided to Customer Administrators.
• Automated detection signals for abuse, spam and prohibited content.
• Escalation paths that route suspected CSAE to trained Enclira reviewers.
• Investigation of linked accounts, devices and communities following a confirmed violation.
• Review of trust-and-safety signals reported by third-party providers and hosting partners.

Automated systems can produce errors, and no detection system identifies every violation. Human review governs enforcement decisions in CSAE matters.

9. In-Product Reporting

Every Enclira-powered application provides a mechanism for users to report content, messages, profiles and behaviour that violate these Standards, including CSAE.

A report can generally be submitted:

• From the content, message, profile or listing in question.
• Through the reporting or grievance functionality available in the application.
• To a Customer Administrator or moderator of the relevant community.
• Directly to Enclira using the contacts in section 10.

Reports concerning CSAE are prioritized. You do not need an account with the relevant community to report CSAE to Enclira.

Users are never required to reproduce, download, forward or retain suspected CSAM in order to make a report. Describe what you saw and where you saw it, and we will retrieve the material through our own systems.

10. Reporting to Enclira

Child-safety concerns can be reported directly to Enclira Labs Private Limited at any time:

• Child-safety reports: support@enclira.com, with “Child Safety” in the subject line.
• Law-enforcement, regulator and app-store contact: legal@enclira.com.
• Security and preservation requests: security@enclira.com.
• Registered office: Enclira Labs, Arenesha Coworking Space, 6th Floor, The District, Financial District, Nanakramguda, Hyderabad, Telangana 500032, India.

Where known, please include the application or community name, the account or profile involved, a description of the content or behaviour, the approximate date and time, and any reference or link that identifies where it appeared.

If a child is in immediate danger, contact your local emergency services first. Reporting to Enclira does not replace reporting to law enforcement.

11. Handling of Reports

When Enclira receives a credible CSAE report, we will:

• Acknowledge and triage the report on a priority basis.
• Restrict access to the reported content pending review.
• Assign the matter to a trained reviewer with restricted, logged access.
• Assess the content and the surrounding account and community activity.
• Take enforcement action where the report is confirmed.
• Preserve relevant records in support of any lawful investigation.
• Report the matter to the appropriate authorities where legally required or permitted.
• Notify the affected Customer where appropriate and legally permissible.

Access to suspected CSAE material within Enclira is restricted to the minimum number of trained personnel necessary, is logged, and is used only for review, reporting and preservation.

Enclira will not disclose information about a report where doing so would compromise an investigation, endanger a child, or breach applicable law.

12. Enforcement

Confirmed violations of these Standards result in enforcement action that may include:

• Immediate removal of the violating content.
• Immediate suspension of the account or accounts responsible.
• Permanent termination of the account and associated accounts.
• Blocking of attempts to re-register.
• Suspension or restriction of the community or space involved.
• Suspension or termination of the Customer’s subscription and environment.
• Reporting to the appropriate authorities.
• Referral to the relevant app store or infrastructure provider where required.

For CSAE, termination is the default outcome for the accounts responsible. Enclira does not require a prior warning, a strike history or a repeat violation before terminating an account for CSAE.

Where a customer’s environment is used to facilitate CSAE, or where a customer fails to act on credible reports, Enclira may suspend or terminate that customer’s services.

13. Reporting to Authorities

Where Enclira confirms CSAM or other CSAE conduct, we will report it to the appropriate authorities and child-protection bodies where legally required or permitted. Depending on the jurisdiction and the circumstances, this may include:

• Indian law-enforcement authorities and the National Cyber Crime Reporting Portal.
• The National Center for Missing & Exploited Children (NCMEC), where applicable.
• Local law enforcement in the jurisdiction of the affected child or the reported account.
• Competent regulators and supervisory authorities.
• Recognized hotlines and child-protection organizations.
• App-store and infrastructure providers where their policies or agreements require notification.

Enclira intends to comply with applicable child-protection law, including India’s Protection of Children from Sexual Offences Act, 2012, the Information Technology Act, 2000 and rules made under it, and equivalent requirements in other jurisdictions in which Enclira or its customers operate.

14. Preservation of Evidence

Where Enclira identifies or receives a credible report of CSAE, we may preserve relevant content, account records, access logs and technical information for the period required by applicable law or reasonably necessary to support an investigation.

Preserved material is:

• Segregated from ordinary production systems where technically feasible.
• Access-controlled and restricted to authorized personnel.
• Logged so that access can be audited.
• Retained only as long as required for legal, investigative or reporting purposes.
• Disclosed only to competent authorities or as otherwise required by law.

A deletion request — including an account-deletion request — does not override a legal preservation obligation relating to CSAE.

15. Cooperation With Law Enforcement

Enclira cooperates with law enforcement, regulators and recognized child-protection organizations in matters involving CSAE.

Lawful requests should be directed to legal@enclira.com and should identify the requesting authority, the legal basis for the request, the accounts or content concerned, and the information sought.

Enclira will respond to valid legal process in accordance with applicable law, and may act on an emergency basis where there is a credible risk of imminent harm to a child.

Nothing in Enclira’s agreements with its customers prevents Enclira from complying with lawful child-protection requests or from making a report required by law.

16. Customer and Administrator Responsibilities

Enclira provides technology that customers configure and operate, including under their own branding. Customers and Customer Administrators are responsible for:

• Enforcing these Standards within their communities.
• Publishing community rules consistent with these Standards.
• Moderating their communities and acting on reports they receive.
• Escalating suspected CSAE to Enclira and to law enforcement.
• Configuring permissions, visibility and messaging appropriately, particularly where minors participate.
• Restricting administrator and moderator access to appropriate, vetted personnel.
• Complying with applicable child-protection, safeguarding and children’s privacy law.
• Not instructing Enclira to take any action that would obstruct a child-safety investigation.

A customer may not disable, bypass or configure away the reporting mechanism required by these Standards.

Enclira may restrict features, require additional safeguards, or suspend or terminate services where a customer does not meet these responsibilities.

17. AI and IRA Features

Enclira applies these Standards to its AI functionality, including IRA, AI assistants, automated workflows and AI-assisted search and content features.

Accordingly:

• AI features must not be used to generate, describe, refine, translate or retrieve CSAE material.
• AI-generated depictions that sexualize a minor are treated as prohibited content regardless of how they were produced.
• Prompts and outputs indicating CSAE may be blocked, logged and escalated for human review.
• Third-party AI providers used by Enclira are subject to their own safety obligations and may independently enforce against such use.

Enforcement against a user for CSAE applies whether the material was uploaded, written or generated through an Enclira AI feature.

18. Privacy and Data Protection

Enclira handles child-safety reports in a manner consistent with the Enclira Privacy Policy and applicable data-protection law.

In child-safety matters, Enclira may process personal information — including information relating to the reporter, the reported user and any affected child — where necessary to review a report, protect a child, comply with a legal obligation, report to an authority, or establish, exercise or defend legal claims.

Enclira limits such processing to what is necessary, restricts access to trained personnel, logs that access, and does not use child-safety material for analytics, product improvement or AI model training.

19. Internal Accountability

Enclira maintains internal measures to support these Standards, which may include:

• Designated personnel responsible for child-safety escalations.
• Guidance and training for personnel who handle reports.
• Documented escalation and reporting procedures.
• Access controls and logging for child-safety material.
• Records of reports received, actions taken and reports made to authorities.
• Periodic review of these Standards and the procedures supporting them.

20. Point of Contact

Enclira maintains a published point of contact for child-safety matters, including inquiries from users, customers, regulators, law enforcement and app-store providers:

• Enclira Labs Private Limited.
• Child-safety reports: support@enclira.com (subject line “Child Safety”).
• Legal, regulatory and app-store contact: legal@enclira.com.
• Website: https://www.enclira.com.
• Registered office: Enclira Labs, Arenesha Coworking Space, 6th Floor, The District, Financial District, Nanakramguda, Hyderabad, Telangana 500032, India.

21. Changes to These Standards

Enclira may update these Standards to reflect changes in applicable law, regulatory and app-store guidance, our services, or our safety practices.

The revised version will carry an updated “Last updated” date. Material changes may additionally be communicated through email, application notices, website notices or customer portals.

22. Effective Date

These Child Safety Standards are effective from 17 August 2026.

Version: 1.0.