Code of Conduct, Whistleblower Protection, and Anti-Corruption Policy
Combined policy governing acceptable conduct for Hardline personnel, whistleblower protections under federal and state law, and Hardline’s commitment to anti-bribery, anti-corruption, and conflict-of-interest avoidance.
Version 1.0-draft · Last updated: 2026-05-10 · Effective: Pending counsel sign-off
1.Scope and Application
This Policy applies to (a) all employees, contractors, officers, directors, and interns of Hardline Lending, Inc.; (b) all temporary and seasonal workers; and (c) all vendors and consultants who agree to it. It applies to conduct in the course of Hardline business, including outside ordinary business hours, on personal devices used for Hardline purposes, and in any forum where the individual is reasonably understood to be representing Hardline.
This Policy is a statement of expected conduct, not a contract of employment. Hardline reserves the right to amend it. Where it differs from any individual’s offer letter or written employment contract, the more protective standard for individuals and the more rigorous standard for conduct apply.
2.Whistleblower Protections
Hardline encourages anyone who knows of, or reasonably suspects, a violation of law, regulation, or this Policy to report it through one of the channels in §3. No person may retaliate against a reporter for making a report in good faith. Retaliation is itself a violation of this Policy and of federal and state law.
- Sarbanes-Oxley §806 (18 U.S.C. §1514A): protects employees from retaliation for reporting securities-law violations.
- Dodd-Frank §922 (15 U.S.C. §78u-6): protects whistleblowers reporting securities violations to the SEC; permits monetary awards.
- False Claims Act (31 U.S.C. §3730(h)): protects whistleblowers reporting fraud against the government; permits qui tam recoveries.
- Consumer Financial Protection Act §1057 (12 U.S.C. §5567): protects employees of CFPB-covered persons.
- Defend Trade Secrets Act §1833(b) (18 U.S.C. §1833(b)): immunity for confidential disclosure of trade secrets to government officials or attorneys for reporting a suspected violation, or in a court filing under seal. Hardline expressly incorporates this immunity into every NDA and confidentiality agreement covering Hardline personnel.
- NLRA §7: protects concerted activity for mutual aid, including discussions of wages and working conditions.
- OSHA, Title VII, ADA, ADEA, FMLA, FLSA retaliation protections.
Cal. Labor Code §1102.5 (broad public-policy whistleblower), §232.5 (working-conditions discussion), §6310 (OSHA-equivalent), and analogues in every state where Hardline has personnel. Cal. Gov’t Code §12653 for licensed personnel.
Hardline does not require, and will not enforce, any agreement that prohibits or restricts reporting suspected violations of law to a government agency, providing testimony in response to a subpoena, or recovering a whistleblower award. Existing NDAs, severance agreements, and confidentiality agreements purporting to do so are unenforceable to that extent and are construed not to restrict protected disclosures.
3.Reporting Channels
- Direct to the QI: [QI email]. Written, by phone, or in person. May be anonymous.
- Direct to the CEO: [CEO email] or by phone.
- Direct to outside counsel: for sensitive matters, particularly where the report concerns the CEO or QI — at [counsel firm contact]. Counsel will route appropriately. Counsel cannot represent the reporter individually except by separate engagement.
- Anonymous channel: [hotline vendor if adopted]; until then, postal mail to a P.O. box listed at /legal/contact.
Hardline expressly recognizes the right to report externally without exhausting internal channels and without consulting Hardline beforehand. External channels include:
- The Securities and Exchange Commission (Office of the Whistleblower) for federal securities violations.
- The Consumer Financial Protection Bureau for federal consumer-financial-law violations.
- The Federal Trade Commission for federal consumer-protection violations.
- The U.S. Department of Justice for fraud, foreign-corruption, and federal criminal matters.
- The IRS Whistleblower Office for tax violations.
- The relevant state Attorney General for state-law violations.
- The California Department of Financial Protection and Innovation for state consumer-financial-law violations.
- OSHA for workplace-safety matters; EEOC for discrimination.
- Any other federal, state, or local agency with jurisdiction.
4.Anti-Retaliation Commitment
Hardline will not, and no person acting for Hardline will, retaliate against a person who in good faith (a) reports a suspected violation, (b) participates in an investigation, (c) refuses to participate in conduct the person reasonably believes is unlawful, or (d) exercises any right under federal or state whistleblower law.
Retaliation includes termination, demotion, suspension, threats, harassment, salary reduction, punitive schedule changes, reduction of responsibilities, refusal to hire, negative references, blacklisting, denial of benefits, exclusion from meetings or communications, intimidation, surveillance, and pressure to drop a report. Subtle social retaliation (exclusion from team events, cold treatment) is also prohibited.
Any person experiencing or observing retaliation should report immediately through the §3 channels. Retaliation is treated as a separate violation, investigated independently, and subject to discipline up to termination.
5.Anti-Corruption and Anti-Bribery
Hardline complies strictly with the FCPA (15 U.S.C. §§78dd-1 et seq.). No person acting for Hardline may, directly or indirectly: offer, promise, authorize, or pay anything of value to any foreign government official, foreign political party or party official, candidate for foreign political office, or official of a public international organization, to influence official action or to obtain or retain business; make payments to third parties knowing any portion will be passed to a foreign official; falsify books and records to conceal a payment; or authorize a facilitating payment without prior written approval from the CEO after consultation with outside counsel.
Hardline currently has no foreign operations. Any future foreign operations require pre-launch FCPA training and outside-counsel review.
Hardline complies with the U.K. Bribery Act 2010: bribery of public officials (§1), commercial bribery of any person (§2), failure to prevent bribery (§7), and bribery of foreign public officials (§6). The Act has extraterritorial reach to U.S. companies with sufficient U.K. nexus; Hardline applies its standards globally. This Policy and Hardline’s training program are designed to constitute “adequate procedures” under U.K. Ministry of Justice guidance.
Federal mail and wire fraud statutes, the Travel Act (18 U.S.C. §1952), and state commercial-bribery statutes (e.g., N.Y. Penal Law §180.00 et seq., Cal. Penal Code §641.3) prohibit bribery of private parties. No person acting for Hardline may offer, promise, authorize, or pay anything of value to any private-sector counterparty’s employee or agent to obtain or retain business, secure favorable terms, or influence commercial decisions, except as permitted under §6 (gifts and entertainment).
6.Gifts and Entertainment
The fundamental test: whether the gift or entertainment could reasonably appear to influence the recipient’s business judgment.
- De minimis only. Gifts to or from any single counterparty in any rolling twelve-month period must not exceed $100 aggregate; no single gift over $50. Customary holiday gifts, conference meals, and branded swag of trivial value are within the limit.
- No cash or cash-equivalents. Never give or accept cash, gift cards, prepaid cards, cryptocurrency, securities, or anything readily convertible to cash.
- Pre-approval thresholds. Anything over $50 single or $100 annual aggregate requires CEO pre-approval in writing. Anything to or from a government employee requires CEO and outside-counsel pre-approval.
- Entertainment. Modest meals at industry conferences and dinners during deal negotiations are acceptable. Lavish entertainment (multi-day junkets, marquee-event tickets not customary in the industry) is prohibited.
- Documentation. Gifts/entertainment received over $25 must be reported to the QI within seven days. Gifts/entertainment given over $25 must be expensed with description and counterparty identification.
7.Conflicts of Interest
A conflict exists when a personal, family, financial, or other interest could compromise (or reasonably appear to compromise) objective judgment for Hardline. Hardline does not prohibit all conflicts; it requires disclosure and management.
Every covered person must disclose to the QI any actual or potential conflict at onboarding and within seven days of becoming aware of any new conflict.
- Holding investment, equity, or debt in a Hardline counterparty, vendor, or competitor.
- Personal use of the Hardline platform as a borrower or lender (permitted but must be disclosed; arm’s length pricing).
- Family member employed by or invested in a counterparty, vendor, or competitor.
- Outside employment, consulting, or board service.
- Romantic relationship with anyone whose work overlaps with Hardline.
- Receipt of a meaningful gift, benefit, or opportunity from a counterparty.
Disclosed conflicts are managed by the CEO in consultation, where appropriate, with outside counsel. Options: recusal, divestment, modification of duties, additional disclosure, or separation from Hardline.
8.Insider Information and Material Non-Public Information
Hardline is not publicly traded. Even so, Hardline personnel routinely have access to MNPI about Hardline, users, counterparties (some of whom may be public), and vendors (many of whom are public). Misuse of MNPI may be a federal securities violation.
- No trading. Do not trade in securities of any company about which you possess MNPI obtained through your Hardline role.
- No tipping. Do not share MNPI with any person who is not a Hardline employee or contractor with a need to know.
- Confidentiality. Treat all MNPI as confidential. Do not discuss in public places. Do not share screenshots.
9.Behavioral Standards
Tell the truth. Do not misrepresent facts to users, counterparties, vendors, investors, regulators, the press, or each other. Where you do not know, say so. Where you make a mistake, surface it promptly.
Protect Hardline information and user information. Use it only for the purpose for which it was collected, per the Privacy Policy and WISP. Do not retain Hardline data on personal devices or accounts.
Treat every user fairly. Apply criteria neutrally. Do not discriminate on the basis of race, color, national origin, sex, religion, age, disability, sexual orientation, gender identity, marital status, familial status, source of income, or any other protected characteristic. Disparate-impact analysis governs even where intent is absent.
Hardline’s books and records must accurately reflect every transaction. No off-book payments, no false invoices, no creative coding to obscure the substance of a transaction.
Hardline does not tolerate harassment, intimidation, bullying, sexual misconduct, or discrimination in any forum where Hardline business is conducted.
Lawful off-duty conduct is not prohibited. Personnel must not be impaired during Hardline work or at Hardline events.
Hardline systems, equipment, and accounts are for Hardline business. Modest personal use is acceptable. Use that violates law, violates this Policy, or creates security risk is prohibited.
10.Investigation Procedure
- Acknowledgment. Receipt acknowledged within three business days where the reporter is known.
- Triage. Commander assesses seriousness, whether outside counsel must be engaged, whether a litigation hold attaches, whether a regulator must be notified.
- Independence. Investigator is independent of the alleged subject. Where the CEO is the subject, the QI engages outside counsel directly. Where both CEO and QI are subjects, outside counsel reports to the board (or, pre-board, to a designated independent person).
- Confidentiality. Information shared on a need-to-know basis. Reporter’s identity protected to the maximum extent consistent with thorough investigation.
- Cooperation. All personnel required to cooperate truthfully.
- Documentation. Investigator maintains written record of steps taken, evidence reviewed, witnesses interviewed, findings, and conclusions, subject to privilege protections where outside counsel directs the investigation.
- Outcome notice. Reporter is informed that the investigation is complete and appropriate action taken, to the extent doing so does not breach the privacy of any subject or other applicable confidentiality.
11.Disciplinary Consequences
- Verbal counseling.
- Written warning placed in the personnel file.
- Mandatory additional training.
- Suspension with or without pay.
- Demotion or reassignment.
- Reduction or forfeiture of equity vesting consistent with the equity plan.
- Termination of employment or contractor relationship.
- Referral to law enforcement or regulators.
- Civil recovery of damages caused by the violation.
Termination for cause is reserved for serious violations: fraud, theft, bribery, falsification of records, misuse of MNPI, violation of material confidentiality, harassment or discrimination, retaliation against a whistleblower, or repeated lesser violations after warning. Termination decisions are made by the CEO after consultation with the QI and outside counsel.
12.Acknowledgment and Training
- Read this Policy at onboarding and annually thereafter.
- Sign the Acknowledgment Form (§13) at hire and annually.
- Complete annual training: whistleblower protections, anti-corruption, MNPI / trading prohibitions, conflicts disclosure, behavioral standards.
- Complete role-specific training for sensitive roles (engineering with production database access — additional security and privacy training under WISP).
13.Acknowledgment Form
Hardline Code of Conduct, Whistleblower, and Anti-Corruption Policy — Acknowledgment
I acknowledge that I have received, read, and understood the Hardline Code of Conduct, Whistleblower Protection, and Anti-Corruption Policy dated [date]. I understand that compliance is a condition of my engagement with Hardline.
I agree to comply with this Policy in all aspects of my work for Hardline. I will promptly disclose any actual or potential conflict of interest, any gifts or entertainment exceeding the de minimis thresholds, any MNPI of which I become aware, and any suspected violation of law, regulation, or this Policy.
I understand that Hardline prohibits retaliation against any person who in good faith reports a suspected violation or participates in an investigation, and I commit not to retaliate.
I understand that I may report suspected violations through any internal channel (§3.1) or directly to any government agency (§3.2), and that no agreement I have with Hardline restricts my right to do so. I understand that under the Defend Trade Secrets Act §1833(b) I am immune from liability for confidential disclosure of a trade secret to a government official or attorney for the purpose of reporting or investigating a suspected violation of law.
(Annual re-acknowledgment: a re-signed copy of this form is required each January and upon any material amendment.)
14.Policy Maintenance
The QI reviews this Policy annually and proposes amendments to the CEO. Amendments are reviewed by outside counsel before adoption. All versions retained perpetually under the Document Retention and Destruction Policy.
Questions: [QI email] or outside counsel at [firm contact]. There is no penalty for asking.