CM.com N.V. — Annual Report 2025

Feb 13, 2026

Annual Report 2025 Frontcover Contents CEO Message Highlights 2025 Management Board Report Our Strategy Our Platform for Customer Interaction Performance and Results 2025 Our Culture Our Commitment to Sustainability Shareholder Value Creation Risk Management Corporate Governance Governance Management Board Composition Supervisory Board Composition Supervisory Board Report Remuneration Report Sustainability Statements General Environmental EU Taxonomy Report Social Impacts Governance ESRS Content Index List of data points that derive from other EU legislation Financial Statements Consolidated Financial Statements Corporate Financial Statements Other Information Independent Auditor's Report Definitions and Abbreviations Backcover Annual Report 2025 CEO Message Dear reader, As we reflect on 2025, I want to highlight the progress CM.com has made during a year of transformation. While the year brought its share of complexities, it also highlighted the strength of our business model, the dedication of our teams, and the opportunities ahead. By the second half of the year, we saw clear improvements in performance, successfully meeting our revised guidance and positioning ourselves for sustainable growth in the future. 2025 was a year of building foundations - foundations for innovation, operational excellence, and long-term value creation. Our transformation into an AI-first company remains central to our strategy, and the advancements we made this year have set the stage for exciting opportunities in 2026 and beyond. Financial Performance and Operational Excellence Throughout 2025, CM.com demonstrated its ability to adapt and deliver results in a dynamic market environment. While certain areas of our business, such as Messaging and FX-sensitive revenue streams, experienced some pressure, we achieved a 7% increase in Annual Recurring Revenue (ARR). This growth reflects the strength of our subscription-based business model and reinforces the stability of our revenue base. Our disciplined approach to cost management and focus on improving our gross margin contributed to further EBITDA growth, underscoring our commitment to operational excellence. A key milestone this year was the successful refinancing of our € 100 million convertible bonds ahead of schedule. By securing an € 80 million revolving credit facility and raising € 20 million in equity, we strengthened our financial position and created a solid foundation for future growth. These efforts reflect our focus on prudent financial management and our ability to execute on strategic priorities. Innovation and Product Development 2025 was a year of innovation and forward momentum for CM.com. The launch of our Agentic AI Platform HALO marked a significant step forward in our product portfolio. In a world where the speed of change increases rapidly, fueled by AI, CM.com responded and expanded its product portfolio for its customers. The rapid adoption of HALO highlights its potential to redefine customer engagement and business operations. HALO builds on the fast-moving technological landscape, tapping into CM.com’s deep in-house R&D expertise and our agnostic platform design, which allows us to innovate ahead of the market. Being headquartered in Europe also means HALO is developed within strict regulatory frameworks, meeting the highest European standards. In 2025, CM.com further reinforced this position by becoming one of the first technology companies worldwide to obtain ISO 42001 certification, the international standard for responsible AI development and management. This certification underscores our commitment to delivering AI solutions that are transparent, controllable, and compliant with European regulations, strengthening trust among customers in regulated sectors. Together, these strengths position HALO as the future of personalized, scalable customer interactions, and we are excited about its long-term impact. Next to that, CM.com also introduced Voice AI to be able to speak to an AI agent – also via WhatsApp. It underlines the growth in richer, more personalized messaging and interactive communication on a mass scale. This trend is on the rise, and the demand for WhatsApp and RCS rose substantially. For our ticketing clients, we introduced a ticket resale platform, expanding our capabilities and unlocking new revenue opportunities. While the summer period saw fewer events and cautious consumer spending, we are optimistic about the potential for growth as we expand into European markets. These developments demonstrate our ability to adapt to evolving market conditions and seize opportunities for growth. Strategic Vision and Focus for 2026 On our Capital Markets Day, we unveiled the concept of the CM.com platform for customer interaction. This platform represents the next evolution of our business, combining AI-driven capabilities with our expertise in customer interaction and payments. Our ability to combine and integrate various elements of our product portfolio into a unified solution empowers our customers to create personalized, automated, and impactful interactions with their customers. Our platform is not just a product - it is a vision for the future of customer experience, and we are committed to bringing this vision to life. Looking ahead to 2026, we are focused on growing profitably while continuing to innovate and expand our capabilities. By leveraging AI, we aim to enhance scalability, efficiency, and margins, while navigating market dynamics with care and precision. We are confident in our ability to build on the progress made in 2025 and capture the opportunities that lie ahead. Leadership Transition and Team Resilience 2025 also marked a transition in our leadership team, with Jörg de Graaf stepping down as CFO effective November 1. I would like to thank Jörg for his contributions to CM.com and for his collaboration as a colleague, and wish him all the best in his future endeavors. We are delighted to welcome Geert Beullens as our incoming CFO. Geert brings over 25 years of financial experience, including his tenure at ASML, and we look forward to working with him to execute on the growth opportunities ahead. Geert’s nomination will be formally presented at the upcoming AGM in April 2026. I am truly grateful for our talented and resilient teams, who continue to adapt, innovate, and support our customers every day. Their dedication and creativity are the driving forces behind our success, and I deeply appreciate their contributions to building a stronger CM.com. Closing Thoughts As we close the chapter on 2025, we are energized by the progress we made as an organization and the opportunities that lie ahead. The fundamentals of our business remain strong: a scalable platform, an international client base, and a commitment to innovation. We are confident in our ability to unlock the value we see within our firm as we continue to build a CM.com that creates sustainable value for all stakeholders. Thank you for your continued trust and support. I look forward to embarking on the next phase of our journey as we focus on growing profitably, expanding our capabilities, and shaping the future of customer interaction, AI, and payments. Sincerely, Jeroen van Glabbeek - CEO CM.com Our Strategy In 2025, Artificial Intelligence became a defining force in how companies operate and communicate. For CM.com, this was the next logical step in our long-term product vision: a single, intelligent platform that orchestrates every interaction between businesses and their customers. With the launch of HALO, our Agentic AI Platform, we added a new layer of intelligence on top of our Platform for Customer Interaction. HALO shifts AI from being reactive to truly proactive and task-oriented: instead of simply answering questions, it understands context, takes action, and coordinates complex workflows across communication, marketing, service, and payments. Over time, the CM.com Platform, powered by HALO, will increasingly act as the “operating system” of customer interaction - continuously learning from data, optimizing journeys, and orchestrating the right interaction, on the right channel, at the right moment. Our mission remains to make life easier, safer, and more beautiful. Mobile has always been the fabric of that mission; AI now becomes its amplifier. Where we once started with SMS as a single channel, we now design for continuous, fluid conversations that move effortlessly across WhatsApp, RCS, Messenger, email, voice, and in-person touchpoints. HALO uses unified customer profiles and real-time data from every interaction - including payments and live events - to help our customers deliver experiences that feel personal at scale, without adding complexity behind the scenes. Looking ahead, our product strategy is focused on three principles: AI-native by design - embedding Agentic AI deeply into every part of the platform, from customer service and marketing to ticketing and payments. One unified data foundation - a single source of truth that powers personalization, automation, prediction, and decisioning in real time. Channel-agnostic interaction - building journeys around people, not channels, so interactions remain consistent and contextual wherever they happen. This is the direction in which we are evolving our integrated platform: from tools that support interactions to an intelligent system that continuously optimizes them. Our Business Model: Seamless Experiences Our business model is built around a simple idea: one intelligent platform that makes it easy for our customers to create seamless experiences for theirs. By unifying communication, marketing, service, payments, and live experiences in a single Platform for Customer Interaction, we help organizations replace fragmented point solutions with one coherent, data-driven journey for end-users. As market trends shift towards vendor consolidation and AI-powered “all-in-one” solutions, our focus is to be that central platform of choice. Clients can start with a single capability - such as messaging, customer service, payments, or ticketing - and expand over time, adding new channels and use cases without adding complexity. HALO, our Agentic AI layer, further accelerates this by automating tasks, orchestrating journeys, and enabling smarter decisioning across the entire platform based on unified data as stored in our Customer Data Platform. Every interaction that runs through CM.com - whether it’s a message, a payment, a support conversation, or a ticket scan - adds to a richer understanding of the end-user. This creates a positive feedback loop: more engagement leads to better insights; better insights lead to more relevant, efficient, and personal experiences. Over time, our customers benefit from higher satisfaction, loyalty, and conversion, while end-users experience interactions that feel natural, intuitive, and consistently on-brand. In practice, this means customer journeys can flow effortlessly across channels and touchpoints: from a marketing message to a service interaction, from a ticket purchase to an on-site payment, all powered by one integrated platform. Our role in this model is to provide the technology, intelligence, and reliability that make these journeys work — so our customers can focus on their relationships with the people they serve. Value Creation Our value creation model is centered on one integrated Platform for customer interaction, powered by advanced technology and the expertise of our people. By combining communication, marketing, service, payments, and live experiences in a single environment based on contextual data, we help customers design journeys that feel effortless for end-users and efficient for their teams. With the introduction of HALO, our Agentic AI Platform, this model moved into a new phase. Customers can now create their own AI Agents - without coding or complex prompting - to handle standard processes, automate workflows, and support teams across the entire customer lifecycle. Multiple AI Agents can work together across channels to create seamless, 24/7 customer service experiences, from first contact to resolution. Our platform is channel-agnostic, but deeply channel-aware. It supports rich OTT channels like WhatsApp and RCS, which enable more interactive, feature-rich conversations than traditional SMS. At the same time, SMS remains a foundational part of the ecosystem, often serving as the starting point to activate these richer channels and ensure global reach. When a conversation turns into a transaction, it is completed within the same platform. Our in-house payment processing is directly connected to Visa and Mastercard, bypassing intermediary layers that many providers rely on. This direct setup enables faster, more flexible, and tightly integrated payment flows that can be embedded directly into customer journeys - from a message or chatbot to a checkout and receipt, all in one environment. By continually investing in AI, connectivity, and payments, we ensure our platform can support the full commercial journey: from engagement and intent to transaction and loyalty. This end-to-end approach is how we create value for our customers and, in turn, for their customers. Enterprise-Ready Compliance For many of our customers, trust, security, and compliance are as critical as innovation. Through collaborations with institutions such as banks, governments, global leading law firms, and insurance companies, we have developed an enterprise-grade compliance framework that is tested and proven in highly regulated environments. As regulatory requirements grow in scope and complexity, this framework becomes an increasingly important part of our value proposition. It covers data protection, security, fraud prevention, and sector-specific standards, ensuring that new capabilities such as Agentic AI and integrated payments are delivered in a controlled, compliant way. We continuously invest in training, governance, and horizon-scanning to stay ahead of evolving regulations. This allows our customers to scale their use of our platform with confidence, knowing that the experiences they create are not only seamless and intelligent, but also robust, secure, and compliant by design. Sustainability CM.com continuously works to improve the way it operates, with a strong focus on durability and efficiency. While AI requires significant energy resources, it also offers great potential to drive sustainable innovation for both our customers and our organization. As outlined in the Our Culture chapter, the company began its transformation toward becoming an AI-first organization in 2025. Furthermore, CM.com consistently evaluates working conditions for its employees, who represent one of its most important assets. Creating an environment that fosters entrepreneurship and enables employees to fully leverage their talents is essential to enhancing company performance. Providing the right tools and technologies to support staff in executing the company’s growth strategy remains a key priority. For example, AI agents are increasingly handling tasks within CM.com’s organizational structure, rapidly improving efficiency and accuracy. Beyond technological advancement, CM.com is equally committed to safeguarding the personal well-being of its employees. Several initiatives were introduced to enhance health, balance, and engagement — more about these initiatives can be found in the section on Our commitment to Sustainability. As part of its sustainable footprint, CM.com leases electric company cars for employee travel to client appointments and actively manages its energy consumption. The company strives to provide the right working environment for its staff while minimizing its impact on the planet. CM.com’s Sustainability Statements outline its key focus areas and results under the EU Taxonomy, demonstrating steady progress while recognizing that there is still work to be done. Remaining at the forefront of innovation also means doing so in a sustainable way. Our Platform for Customer Interaction For more than 25 years, we’ve been building technology that makes life easier, safer, and more beautiful. In a world where people spend hours a day on their phones, mobile has become the primary place where conversations, transactions, and relationships happen. Our role is to help businesses be present in those moments - with relevance, reliability, and impact. CM.com offers one unified Platform for Customer Interaction that brings together communication, marketing, customer service, payments, and live experiences. Instead of multiple point solutions and vendors, our customers work with a single, integrated platform that connects every interaction across the customer journey. Communicate on every channel Our platform enables businesses to have secure, scalable conversations with their customers on the channels they use every day: SMS, Voice, WhatsApp, RCS, Email, and more. With direct connections to over 1,000 mobile network operators worldwide, we ensure reliable message delivery at global scale, serving more than 16,000 customers - including some of the world’s largest technology companies. As richer messaging channels like WhatsApp and RCS grow, our platform helps businesses move from one-way notifications to contextual, conversational interactions that feel personal and timely. Create AI-powered customer experiences At the heart of our platform is a suite of AI-driven customer service and marketing capabilities that turn every interaction into an opportunity to engage. Our Platform for customer interaction includes: AI-powered service tools such as an intelligent agent inbox and no-code chatbots that handle routine questions, route complex cases, and support human agents in real time. Multichannel marketing automation that orchestrates personalized campaigns across messaging, email, and other channels. A Customer Data Platform (CDP) that unifies data from messaging, payments, website behavior, service tickets, and campaigns into real-time 360-degree customer profiles. In 2025, we strengthened this foundation with HALO, our Agentic AI Platform. HALO marks a shift from reactive to proactive AI: instead of simply answering questions, it can autonomously perform complex tasks, such as handling emails end-to-end or resolving service requests via voice. This improves response times, reduces operational costs, and unlocks new levels of personalization at scale. Turn payments into engagement Payments are a crucial part of the customer journey. Our platform combines online and in-person payments in one ecosystem, enabling merchants across Europe to accept all major payment methods through both payment terminals (powered by our own software) and comprehensive online payment services. We offer an offline payment module that keeps transactions running even without a stable internet connection - particularly valuable for events and outdoor venues. Live Event Experiences Our platform also powers live experiences for museums & parks, sports organizations, and music & event venues. With integrated ticketing, event apps, payments, and secure ticket resale, we help organizers deliver seamless visitor journeys from first click to final applause. By unifying ticket, payment, and engagement data, businesses gain rich fan profiles and can use AI-driven campaigns and messaging to boost ticket sales, increase on-site spend, and turn one-time visitors into loyal communities. Strong engagement starts with knowing your customers. Discover more about our full proposition and solutions on our company website. Performance and Results 2025 Five-Year Financial Overview x € million 2025 2024 2023 2022 2021 Revenue 259.4 274.2 266.2 283.2 237.0 Cost of services (178.1) (191.1) (187.7) (211.3) (174.4) Gross profit 81.3 83.1 78.5 72.0 62.7 Gross margin % 31.3% 30.3% 29.5% 25.4% 26.5% Employee benefit expenses (44.7) (45.7) (54.3) (55.1) (40.7) Other operating expenses (18.6) (20.9) (26.9) (43.3) (25.6) Other operating income 0.4 - - - - Operating result, EBITDA 18.4 16.5 (2.7) (26.5) (3.7) EBITDA margin % 7.1% 6.0% (1.0%) (9.4%) (1.6%) One-offs (1.4) (1.6) (1.8) (4.2) - Operating result, Adjusted EBITDA 19.8 18.1 (0.9) (22.3) (3.7) Amortization, depreciation, and impairments (22.9) (31.7) (21.8) (18.1) (15.6) Operating result, EBIT (4.6) (15.3) (24.6) (44.6) (19.3) Financing income 9.2 1.2 1.3 4.7 2.1 Financing expenses (8.3) (5.2) (5.6) (5.0) (4.1) Share of results in associates - - (0.6) (0.2) (0.0) Result before tax (3.6) (19.3) (29.5) (45.0) (21.3) Income tax (0.1) (0.6) 0.7 0.2 3.9 Result after tax (3.8) (19.8) (28.7) (44.7) (17.5) Other comprehensive result1 (0.5) 0.1 (0.2) 1.2 0.9 Total comprehensive result (4.3) (19.7) (28.9) (43.6) (16.6) Basic loss per share (in €) (0.12) (0.68) (1.00) (1.51) (0.58) Diluted loss per share (in €) (0.12) (0.68) (1.00) (1.51) (0.58) The other comprehensive result consists completely of foreign currency translation which may be reclassified subsequently to profit or loss. Our Culture At CM.com, our actions are driven by a positive entrepreneurial spirit that fits seamlessly into the framework of our global organization. We seek to hire and nurture individuals who are eager to innovate, develop, and lead in their field. Our employees are not only encouraged to be free thinkers with a growth mindset but are also valued as team players. Our non-hierarchical structure empowers everyone to contribute based on their unique strengths and interests. And, of course, we make it a point to have fun together – an essential component for sustaining our vibrant culture! At the heart of our culture are four shared values: Drive & Lead: We are action-oriented, seizing opportunities, acting decisively, and sharing information transparently. Grow & Learn: Creative solutions, informed perspectives, effective implementation, continuous reflection, and learning from mistakes define our approach. Together & Care: Humility, approachability, and empathy guide our interactions, fostering inclusiveness and integrity. Speed & Change: We embrace change and navigate uncertainty with an open mind, continually enhancing our skills. We are committed to maintaining our culture to drive sustainable growth, with shared values at its core, enabling us to embrace change, adapt, innovate, and thrive in a dynamic environment, contributing to the creation of sustainable long-term value. Our DNA is captured in the principle “Do what you like, do what you’re good at, and contribute” — inspiring our employees to find purpose in their work, use their strengths, and make a meaningful impact every day. For more information and metrics on Diversity & Inclusion, employee engagement, training, and skills development, please read the Social chapter of our Sustainability Statements. The CM.com TeamTree The tree is a perfect metaphor for our organization, capturing the essence of our organic, non-hierarchical growth. From roots to leaves, every part functions in harmony and contributes to the health of the whole organism. Our organizational structure empowers small, self-managed teams to innovate, grow, and nurture talent, all while supporting colleagues across the entire organization. This unity defines CM.com and drives us toward sustained success. Empowering colleagues across the globe At CM.com, we believe the growth of our people is essential to the success of our organization. That’s why we actively invest in learning opportunities, training programs, and personal development at every level. We don’t just train for skills, we train with purpose. Across all our training programs, we mix colleagues from different departments and business units. This encourages cross-functional collaboration, strengthens our internal network, and creates opportunities for knowledge sharing. Besides this, we link our trainings to our CM.com Shared Values to promote these and foster these internally, ensuring to reinforce CM.com’s unique culture. Beyond many department-specific and team workshops, we also invested in company-wide programs: CM.com Leadership Program In 2025, we launched the CM.com Leadership Program. This was our first dedicated training for current team leads. This program focuses on what it means to be a lead within CM.com: examples of training elements are mastering conversation techniques, absence management, and human skills to reinforce our CM.com Shared Values (Drive & Lead, Grow & Learn, Together & Care, and Speed & Change). Our ambition is to make our leadership training a yearly initiative, ensuring that every team lead is equipped with the right tools to lead with impact. CMBA: Our High-Potential Program Since 2021, our CMBA talent program has helped accelerate internal talent across departments. The CMBA focuses on personal leadership, business strategy, and operating in a global context. Within the CMBA, we focus on two groups; The Rising Stars and The Future Leaders. In 2025 both of the groups have finished this program successfully. In November 2025, we started with two new groups with colleagues from all around the world. A quote from a CMBA candidate; “The CMBA helped me step out of my daily bubble and connect with colleagues from different parts of the organization. It expanded my internal network and gave me a broader understanding of the business, which has been invaluable in my day-to-day work.” Young Professional Program Our Young Professional Program offers monthly soft skills training sessions derived from our CM.com Shared Values. These sessions are designed to strengthen communication, collaboration, and critical thinking skills early in our colleagues' careers. Besides this, it helps our young professionals in increasing their internal network and provides the opportunity to learn from colleagues from different areas within the company. In 2025 we had trainings on: Communication, Feedback, Networking, Presenting Skills, Thriving through Change, Mastering Productivity, and more. In 2025 we have decided to open up the trainings for colleagues from outside the Young Professional Program as well, when seats were available. Global Onboarding Program – GO Days To help new colleagues hit the ground running, our 3-day Global Onboarding Program connects them to our culture, systems, and teams. This recurring program has been running for several years, forming valuable connections across departments and regions. As we move into 2026, our ambition is to keep raising the bar for ourselves. We want to continue with the successful programs, but also want to expand with other type of trainings. From AI skills to soft skills and departmental training, we will continue to invest in the growth of our people, which in turn drives the growth of our company. Our Journey to an AI-First Company We believe that AI empowers our customers to get more value out of our products, while also offering opportunities to make work smarter, simpler, and more enjoyable within our own organization. Our ambition is to embed this AI-driven mindset deeply into our culture and daily operations. At the core of our culture is the principle of digital inclusiveness — ensuring that technology, particularly AI, is accessible and beneficial to everyone. We recognize that the rise of AI may widen social inequalities if access to technology, knowledge, or skills is unevenly distributed. At CM.com, we take a proactive stance in addressing these challenges both internally and in society at large. Within our organization, we encourage every employee to explore and apply AI in their work. During recruitment, we emphasize that all employees should be capable of creating an AI agent — a reflection of our hands-on, innovative spirit. Employees receive access to AI tools and training, and we share knowledge through initiatives like the “Agent of the Week” competition, AI workshops, and the AI Frontrunners community, where colleagues exchange insights and benchmark tools globally. In addition, our annual DEV Days event, where we bring together all developers for learning purposes, also had a strong focus on AI workshops and the use of AI within our development teams. Our quarterly meetings feature live AI demonstrations, showcasing how AI can enhance daily work — for example, by using our Voice Agent to place real-time orders. Beyond our own workforce, we are committed to bridging the digital divide in society. We recognize that future generations need equal access to AI education to thrive in a rapidly changing world. To contribute to this, CM.com offers AI training initiatives and collaborates with primary schools, in partnership with JINC, an organization supporting schools in underprivileged areas. By introducing children — especially girls — to technology in a creative, accessible, and inclusive way, we aim to inspire future talent and break down gender stereotypes in the tech industry. At CM.com, we believe that technology should empower people. By fostering digital inclusiveness, developing AI skills, and nurturing a culture of curiosity and collaboration, we strive to create a future where innovation benefits everyone — both within our company and beyond. Our Commitment to Sustainability In 2025, we continued to make strides in advancing our Environmental, Social, and Governance (ESG) agenda. Despite the ongoing uncertainty surrounding the implementation of the Corporate Sustainability Reporting Directive (CSRD), as well as the amendments thereto under the Omnibus I-package, we remained committed to the path we have set. Building on the commitments outlined in our previous sustainability statements, we have worked diligently to integrate ESG considerations into our strategy, operations, and stakeholder engagement. Our approach to material topics has evolved further this year, guided by both intrinsic motivation and a business perspective. Recognizing the growing importance of energy provision and talent acquisition — particularly in the context of AI — we have deepened our focus on these areas. While AI requires significant energy resources, it also offers great potential to drive sustainable innovation for both our customers and our organization. To fully leverage this potential, we are investing in attracting and developing top AI talent through collaborations with leading knowledge institutions in the Netherlands. This includes offering internships, co-developing AI curricula, and inspiring the next generation through educational initiatives in AI and robotics for young children. This ensures a future pipeline of talent to advance sustainability and innovation. Environmental Stewardship As climate change is a material topic for CM.com, we continue to measure our emissions, refine our approach, and contribute meaningfully to the transition to a low-carbon economy. Additionally, we expanded our circular economy practices, increasing the use of recycled materials in our supply hardware chain and minimizing waste generation across our operations. These efforts were supported by enhanced data collection and monitoring systems, ensuring transparency and accountability in our environmental performance. Social Responsibility Our DMA-driven approach to social responsibility focuses on fostering an inclusive and equitable workplace while addressing broader societal challenges. On the next page, we further highlight our commitment to improving digital accessibility, demonstrating our efforts to help create more inclusive online experiences for people with disabilities. In 2025, we strengthened our diversity, equity, and inclusion (DEI) programs and placed strong emphasis on employee well-being. We introduced several initiatives to promote mental and physical health, including an in-house lunch ordering system to minimize food waste while providing healthy meals, the launch of CM Vitalize Week with discounted gym memberships, and employees also gained access to a range of well-being programs and support services addressing both mental and physical health. Beyond our organization, we expanded our community engagement efforts, investing in local partnerships that tackle key social issues such as education, poverty, digital inclusiveness, and economic empowerment. Recognizing the crucial role of talent in driving innovation and growth —particularly in the age of AI— we have made talent acquisition and development a central element of our social responsibility strategy. Governance and Transparency Strong governance is the foundation of our ESG strategy, and the double materiality assessment ("DMA") framework has been instrumental in shaping our approach. In 2025, we enhanced our governance framework by adopting more robust policies on ethical business practices, data privacy, and supply chain transparency. Looking Ahead While we are proud of the progress made in 2025, we recognize that there is still much work to be done. As we move forward, we remain steadfast in our commitment to driving positive change and addressing the challenges of climate change, social inequality, and ethical governance. By continuing to align our actions with the DMA framework and our long-term sustainability goals, we aim to create a more sustainable and resilient future for all. We thank our employees, partners, and stakeholders for their unwavering support and collaboration in advancing our ESG journey. Together, we are making a meaningful impact and building a legacy of sustainability for generations to come. For more detailed information on our DMA, Environmental, Social, and Governance initiatives, and CSRD-aligned disclosures, please refer to our Sustainability Statements. Accessibility and Inclusion One in six people globally lives with a significant disability. While accessibility refers to the technical ability to use products and services, inclusion relates to the feeling of being able to participate fully. At CM.com, we aim to address both. Driven by our Be part of it philosophy, we feel a strong intrinsic motivation to make our products and services accessible to everyone. Although our business model is primarily B2B, our solutions are used by millions of consumers. We therefore see it as our responsibility to consider accessibility across the entire chain, even in situations where we are not formally accountable. Accessibility is equally important within our own organisation. Everyone should be able and feel welcome to work at CM.com, which means our internal systems and tools must also meet accessibility standards. From June 2025, the European Accessibility Act enforces digital accessibility requirements for web shops and communication services. Our dedicated Accessibility project owner is leading the company-wide Accessibility initiative, embedding it into our organizational DNA as a social responsibility beyond regulatory compliance. Together with our Head of Risk & Compliance, he has established a robust audit structure that recognizes that accessibility is not a one-time fix but a continuous journey in which we keep investing. The initiative is focused on driving a cultural shift toward accessibility across all aspects of our organization. Raising awareness through knowledge sharing and workshops, creating ambassadors, and embedding the discipline in fostering collaborations between legal, HR, compliance, product, and client. We initially focused on implementing the necessary changes in the core of our products, our Design Language System “Aurora”, to ensure we can support clients using assistive technologies. Company-wide iterative internal audits of all products are conducted. Each product is assessed against the EN 301 549 accessibility standard, with findings and remediation plans documented. Two CM.com employees are currently pursuing the internationally recognized CPWA certification from the International Association of Accessibility Professionals to further improve their expertise. Beyond these assessments, we aim to strengthen internal capabilities by exploring the training of accessibility ambassadors and offering enhanced training for R&D teams.Our goal is to embed Accessibility-by-Design into our development lifecycle, supported by clear governance and reporting to ensure lasting accountability. We invest in strategic partnerships that embrace this topic and bring expertise and substantial experience on accessibility. Through these collaborations, we jointly share knowledge with the market and support clients in achieving their accessibility goals. These efforts not only allow us to increase our collective societal impact but also strengthen our reputation and open opportunities in sectors, such as the public domain, where accessibility requirements are especially stringent. Shareholder Value Creation CM.com is committed to creating value for investors over both the short and long term. This is achieved through the focused execution of its strategy, aligned with ambitious financial and non-financial objectives. Building and maintaining strong relationships with the investor community remains a priority, supported by transparent communication and fair disclosure. By providing accurate, complete, and timely information, CM.com enables investors to make informed decisions. Through press releases, webcasts, conference calls, and other communication channels, CM.com offers clear insights into its performance, strategic progress, and key developments. Developments in 2025 Throughout 2025, CM.com actively engaged with the investor community to update stakeholders on its growth strategy and financial developments. In February 2025, alongside the publication of the FY 2024 results, CM.com launched a comprehensive refinancing package to replace the outstanding € 100 million convertible bonds by a debt package of € 80 million. CM.com was able to redeem the outstanding convertible bonds early at a discount, paying € 87 million for all the outstanding bonds. Next to that, CM.com strengthened its balance sheet by issuing € 20 million in new equity at € 6.70 per share. On November 5, 2025, CM.com received an unsolicited, non-binding indication of interest from Bird to acquire all issued and outstanding shares in CM.com N.V. After careful review in line with our fiduciary duties, the Management Board and Supervisory Board unanimously concluded that the proposal did not reflect the current and future value of CM.com, nor did it offer a more compelling path for our clients, employees, or shareholders than our stand-alone strategy. CM.com's remains committed to executing the profitable growth strategy outlined at the Capital Markets Day, leveraging its strong technology platform, AI capabilities, and global footprint to create long-term value for all stakeholders. In line with its long-term strategy, CM.com has set financial ambitions towards 2028, including gross profit growth of at least 15% year-on-year, a gross margin of approximately 35%, and an EBITDA margin between 12% and 15%. In November CM.com further strengthened its capital position through a € 5 million private placement with Dutch entrepreneur Valentijn Rensing, founder of Youfone. CM.com issued 1,020,408 new shares at € 4.90 per share, in line with the authority granted by the Annual General Meeting of Shareholders, resulting in an initial stake of approximately 3% for Rensing, with the intention to increase this to above 5%. This long-term investment from an experienced telecom entrepreneur underlines the confidence in CM.com’s strategy, technology, and market position, while providing additional financial flexibility to support our balance sheet and accelerate our strategic growth initiatives. Transparent Communication and Reporting CM.com is committed to providing accurate and timely information to shareholders, investors, analysts, and other stakeholders. This, to ensure all parties remain well informed about CM.com’s strategy and performance. Financial and strategic updates are shared through annual reports, interim reports, press releases, and the company website. CM.com’s Investor Relations page serves as a central hub for financial calendars, reports, press releases, presentations, webcasts, and shareholder information. Investor Relations acts as the primary point of contact for current and potential shareholders, analysts, and other stakeholders. CM.com adheres to high standards of integrity and compliance with applicable laws, regulations, and best practices. To ensure compliance and transparency in interactions with investors and other stakeholders, CM.com has a Bilateral Contact Policy. Silent periods Ahead of financial results announcements, CM.com observes silent periods during which it refrains from engaging in meetings with analysts or shareholders. Silent periods last 30 days before the publication of annual and semi-annual results and seven working days before the release of first- and third-quarter trading updates. Capital Structure In 2025, CM.com successfully restructured its capital base. Following the early redemption of € 100 million convertible bonds due in September 2026, CM.com now has an € 80 million Revolving Credit Facility (RCF) with HSBC, ING, and ABN AMRO. This facility was utilized to repurchase the convertible bonds for € 87 million. Additionally, CM.com issued € 20 million in equity to strengthen its balance sheet and allocated small amounts of shares for its Long-Term Incentive Plan (LTIP) and Restricted Stock Unit (RSU) programs. On November 12, 2025, CM.com issued € 5 million worth of shares separately to Coöperatie Rensing Group in a private placement agreement. This was the result of months of engagement and discussion and resulted in an expansion in number of shareholders by investors such as Gleneagles B.V. The company remains committed to maintaining a robust capital structure to support its growth strategy and deliver value to shareholders. Equity and voting rights CM.com has one type of share, which is an ordinary share. Each share has equal weight and voting rights, where one share equals one voting right. NUMBER OF SHARES OUTSTANDING January 1, 2025 29,131,999 February 17, 2024 32.117.074 Issue ABB March 14, 2025 32.122.074 Issue RSU March 31, 2025 32.141.681 Issue LTIP June 30, 2025 32.147.077 Issue RSU November 11, 2025 33.169.519 Issue RSU + Coöperatie Rensing Group December 31, 2025 33,170,913 Issue RSU ISIN Code: NL0012747059 Reuters: CMCOM.AS Bloomberg: CMCOM NA CM.com is listed on Euronext Amsterdam. CM.com is part of the MSCI Global Small Cap Indices and MSCI Micro Caps Index. Indicative Free Float CM.com is a founder-led company, with the two founders jointly owning 44% of the shares at December 31, 2025. In 2024, the two founders announced a sell-down program, to be spread over 7 years. This, to reduce their aggregate holdings from approximately 50% to 40% to improve liquidity in the shares. Following the refinancing transaction and the subsequent issue of new shares in February 2025, the founders paused their sell-down program for a period of at least 12 months and participated as buyers in the share issue. As a result of the private placement on November 12, 2025, the founders’ shareholdings were diluted to 22.0% each. Currently, CM.com’s free float is approximately 41%. CM.com strives to increase the share of institutional investors supportive of its growth strategy, while further enhancing its visibility in global capital markets and improving share liquidity. Major Shareholders As per the Financial Supervision Act, the Act on the Disclosure of Major Holdings in Listed Companies (WMZ), and the Decree Takeover Directive, the following parties are known to CM.com as shareholders with an interest of 3% or more of the share capital of CM.com on December 31, 2025: Shareholders Shareholding as published by the AFM Date of last notification at the AFM Jeroen van Glabbeek 22.0% April 1, 2025 Gilbert Gooijers 22.0% April 1, 2025 B.V. Beleggingsfonds "Hoogh Blarick" (De Engh) 5.01% August 16, 2023 Coöperatie Rensing Group 3.53% November 11, 2025 GlenEagles B.V. 3.32% December 1, 2025 J.N.A. Van Caldenborgh 3.09% March 16, 2021 Management and Supervisory Board Shareholdings The Management Board members have the following shareholdings in the company: Jeroen van Glabbeek (CEO): 7,298,228 shares Gilbert Gooijers (COO): 7,298,228 shares On November 1, 2025, Jörg de Graaf stepped down as Chief Financial Officer (CFO) of CM.com. Until his departure, Jörg de Graaf held 13,747 shares in CM.com. The Chairman of the Supervisory Board, Jacques van den Broek, owns 5,500 shares in CM.com since June 5, 2023. Furthermore, Supervisory Board member Stephan Nanninga indirectly owns 105,679 shares of CM.com via his 25% ownership of Lindespac B.V. These shares stems from his earlier shareholding in Dutch Star Companies ONE N.V., which was renamed into CM.com N.V. Other members of the Supervisory Board do not own CM.com shares. SHARE PRICE INFORMATION1 Opening price on January 2, 2025 € 5.70 Lowest closing price € 3.97 Highest closing price € 8.18 Closing price on December 31, 2025 € 4.50 Market cap at opening on January 2, 2025 € 166,052,394 Market cap at closing on December 31, 2025 € 149,269,109 Average daily trading volume (nr of shares) 80,025 Daily volume – highest (nr of shares) 752,898 Daily volume – lowest (nr of shares) 2,846 Source: Investing.com Share Price Development Research Coverage Currently, ING, ODDO ABN AMRO BHF, and Kepler Cheuvreux analysts actively cover the CM.com share. Although analyst reports and valuations contain the independent views of analysts and not ours, they are of great importance to us. These reports help (institutional) investors make well-informed investment decisions. The following analysts cover CM.com as of the date of this annual report: Institutions Analysts ING Thymen Rundberg ODDO ABN AMRO BHF Wim Gille Kepler Cheuvreux Robert Vink Dividend Policy CM.com intends to retain any future distributable profit to expand the growth and development of the company’s business and, therefore, does not anticipate paying any dividends to shareholders in the foreseeable future. CM.com’s dividend policy can also be found on our company website. 2026 Financial Calendar April 16, 2026 Release Q1 2026 trading update April 17, 2026 Annual General Meeting CM.com July 21, 2026 Release HY 2026 results October 16, 2026 Release Q3 2026 trading update Risk Management As a global and entrepreneurial company, CM.com continuously seeks to balance effective risk management with regulatory compliance across the organization. Risk and compliance management is embedded throughout the organization and forms an integral part of both strategic decision-making and day-to-day operations. In 2025, CM.com further refined its risk management methodology to align with its evolving services and regulatory environment, including enhancements to the Enterprise Risk Management framework, compliance mapping, and alignment with ISO standards and applicable legislation. These updates, approved by the Management Board and the Audit Committee, strengthened accountability, transparency, and reporting quality. CM.com applies the principles of the three-lines model to ensure effective governance, dependable risk management, and a robust internal control system. Within this framework, the business (first line), Risk and Compliance (second line), and Internal Audit (third line) operate independently while working in close collaboration. First-line management is responsible for identifying, managing, and mitigating risks within CM.com’s defined risk appetite, which accepts low to moderate risk magnitudes and remains unchanged compared to previous years. Risks assessed as substantial or high exceed this risk appetite and require enhanced or additional control measures. Risks are managed through a combination of Actively Managed Risks (AMR), which require direct oversight, and risks monitored through the Internal Control Environment (ICE). The allocation between AMR and ICE is regularly reviewed by senior management, supported by independent oversight from the second line. Second-line risk management and assurance activities support the first line through risk assessments, advice, and improved reporting, while maintaining independent oversight. A single, consistent risk management methodology is applied across the organization, enabling alignment between risk identification, control implementation, and assurance activities. An annual plan is prepared based on stakeholder interests, external developments, audit outcomes, and internal changes such as reorganizations, new products, and the effectiveness of risk management practices. Trust in the quality, reliability, and compliance of CM.com’s services underpins sustainable growth. CM.com supports this trust through transparency, proactive compliance with applicable legislation, and adherence to recognized industry standards, including ISO and PCI, supported by independent assurance such as ISAE 3402. Relevant assurance outcomes are made available through CM.com’s Trust Center. In response to customer expectations and technological developments, CM.com expanded its assurance framework in 2025, adding ISO 27701 certification for privacy information management within CPaaS services and ISO 42001 certification for AI management systems. Existing certifications, including ISO 27001, were successfully renewed, and additional certifications were obtained where required, such as HDS certification for the French market and ISAE 3402 Type 2 reports for payment services. A culture of integrity and compliance is promoted across CM.com through awareness initiatives, support in the implementation and testing of controls, and adherence to applicable laws, regulations, and internal policies. In 2025, the focus was on early engagement with the business, close collaboration with Legal and the CISO, and embedding new legislation into operational procedures. Compliance is validated through control testing and risk reporting. During the year, two concerns related to business ethics were raised via the Speak-Up channels and were handled appropriately. These cases highlighted opportunities to further strengthen awareness of company values and the code of conduct, resulting in the introduction of mandatory compliance, privacy, and security training. Participation is monitored and incorporated into performance reviews under the “Grow & Learn” company value. The Internal Audit function fulfills the third line of defense within CM.com and operates in accordance with the Dutch Corporate Governance Code. Internal Audit provides independent assurance to the Management Board and the Supervisory Board Audit Committee on the quality and effectiveness of internal controls, risk management, governance, and systems and processes across both the first and second lines of defense. Each year, a risk analysis is performed to determine the scope of the annual audit plan. The 2025 audit plan was approved in December 2024, and progress and outcomes were reported quarterly to the Management Board and the Audit Committee. In line with the Dutch Corporate Governance Code, an external quality assessment of the Internal Audit function was conducted in the fourth quarter of 2024, concluding that the function complies with the requirements of the Code. The next assessment is scheduled to take place by 2029. Statement on Risk Management As of 2025, the Statement on Risk Management (Verklaring Omtrent Risicobeheersing – VOR) has become applicable under the Dutch Corporate Governance Code. CM.com acknowledges the importance of this statement as a key governance instrument to enhance transparency regarding the design, implementation, and effectiveness of the company’s risk management and internal control framework. In response to the VOR requirements, CM.com has further strengthened its enterprise risk management framework. This framework covers the full scope of financial reporting, sustainability, operational, and compliance risks, which are embedded in the Key Topics section. Based on the company’s risk appetite, an appropriate risk response is defined for each material risk, including the design of controls and, where relevant, targeted control testing. The effectiveness of the risk management and internal control framework is defined as the degree to which material risks are: appropriately identified and assessed; mitigated through adequately designed and operating controls; and continuously monitored, escalated, and remediated where necessary. Identified deficiencies and improvement actions are recorded in a central Improvement Register, including clear ownership, timelines, and prioritization based on risk impact. Progress is monitored through dashboard reporting and is periodically reviewed by the Management Board. Management has assessed the effectiveness of the company’s risk management and internal control framework based on the implementation of the approach described above and on the findings and observations substantiated through reporting by the Risk and Compliance team. This assessment forms the basis for the In Control Statement included in this Annual Report. Emerging risks landscape CM.com operates in a rapidly changing environment where risks are increasingly interconnected. While established risk themes remain relevant, new legislative, technological, and societal developments continue to reshape priorities. Managing these risks in an integrated and forward-looking manner is essential to maintaining stakeholder trust and supporting sustainable growth. Technological developments, particularly in artificial intelligence, present both opportunities and risks. AI enables efficiency gains and new customer value propositions, while also challenging existing business models. At the same time, stakeholders - especially customers and employees - are becoming more vocal, with sustainability and climate-related topics driving much of this engagement. CM.com actively incorporates these perspectives into its strategy. Cybersecurity and data protection remain among the most critical risks. The increasing use of AI by threat actors has intensified the speed and sophistication of cyber threats, making employee awareness and a strong security culture as important as technical safeguards. Regulatory developments such as DORA and NIS2, applicable from 2025, further reinforce the need for a resilient and comprehensive approach to ICT risk management. Artificial intelligence also introduces regulatory and ethical considerations. The EU AI Act, effective in 2025, requires transparency, governance, and responsible use of AI. CM.com addresses these requirements by promoting AI literacy and embedding governance frameworks within its services, enabling innovation while ensuring compliance. Regulatory complexity continues to increase, driven by developments such as GDPR, PSD2/PSD3, DORA, the European Accessibility Act, sustainability reporting updates including the Omnibus I package, and telecommunications regulations. CM.com closely monitors these developments and adapts its operations accordingly. External uncertainties, including geopolitical developments and macroeconomic volatility, may impact global trade, supply chains, and customer demand. Strengthening organizational resilience, therefore remains a priority. This includes managing talent and human capital risks, as competition for skilled IT and AI professionals intensifies and employee expectations continue to evolve. See the Key Topics section for more details. Overview of Key Topics 1. HR Resourcing and Efficiency CM.com continues its journey to become a talent-driven organization where employees are supported in their development and contribute to the objectives of CM.com. To achieve this, the focus is on retaining highly qualified talent and supporting employees in optimizing their career paths to take on roles that best match their skills and ambition, supported by the internal vacancy portal. As part of the CM.com people strategy, we focus on hiring young, entry-level talent and developing them internally through functional growth paths and talent management programs, such as the CMBA and leadership programs. Employee learning and development are further supported through an expanding range of trainings offered via the CM Academy (online learning platform). CM.com aims to optimize the individual development potential of our current and future employees. CM.com continues to actively embed its culture and inclusive values across all teams globally through initiatives such as the D&I Taskforce and awareness trainings. Completion of mandatory trainings is increasingly integrated into the performance evaluation processes, reinforcing shared responsibility for inclusion, compliance, and professional development. As the emphasis on retaining and empowering highly qualified employees aligns with previous years, the risk level remains moderate. 2. Competition, Product Portfolio, and Innovation The conversational commerce market will continue to evolve over the coming years, moving from the simple one-way interactions of the past to a richer form of customer engagement enabled by technological innovation. Our future success depends on our ability to respond timely to commercial and technological developments, as well as the success of new product introductions, which rely on the effective execution of our R&D programs. If our go-to-market and service development strategies are not aligned, we risk being outpaced in the rapidly changing and highly competitive markets in which we operate. To stay ahead of the competition, we create value by innovating our services and platforms to support our strategy. Standardization, consolidation, and scalability are key themes driving the development of our product portfolio today. As we continue this path, we will ensure that our products are integrated into one platform and will constantly monitor the wider market to avoid missing critical commercial and technological advancements. Over the past two years, we have increased our focus on AI innovations, leading to a strategy of being an “AI-First” company. The major outcome of this strategy is the release of our own AI Platform, HALO, in 2025. HALO unites everything needed for customer experience in one platform, combining AI Agents, Messaging, Voice, Data, and Marketing—all developed, owned, and operated by CM.com. 3. Corporate Financing Access to capital markets and an accurate view of future funding needs are essential to the implementation of our strategy. We need to maintain strong and transparent relationships with the capital markets and banking partners to reflect the fundamental value of our business and maintain financial and strategic flexibility. CM.com is listed on Euronext Amsterdam. Since our listing, we have devoted considerable time and effort to building investor interest in CM.com. 4. Finance and Control (including Financial Reporting) CM.com manages financial risks, including credit, market, and liquidity risks. Credit risk from customer receivables is mitigated through credit limits, monitoring, and actions on overdue invoices. Market risk includes interest rate exposure on the € 80 million revolving credit facility (EURIBOR + margin) and foreign currency risk, particularly USD, partially offset by natural hedging. Liquidity risk is managed through budgets, cash flow planning, and the revolving credit facility to ensure sufficient liquidity under various conditions. For more information on these risks, reference is made to note 11 in the consolidated financial statements. These financial risks, combined with the increased focus on EBITDA growth and compliance with financial covenants, have heightened sensitivity to performance metrics, raising the gross risk level from moderate in 2024 to substantial in 2025. CM.com’s financial health is continuously monitored using key financial indicators, including Revenue, Gross profit growth, OPEX, EBITDA, Net debt, Leverage ratio, and cash position. Failure to respond adequately to changes in these metrics or reliance on inaccurate data could negatively impact the company’s strategy for sustainable growth. To mitigate this risk, robust accounting and reporting processes ensure accurate, complete, and timely financial reporting. These processes, along with the internal control framework, are reviewed annually to align with organizational changes, enhance financial insights, and strengthen controls. Financial and operational performance metrics are monitored regularly. Monthly analyses by the Finance Department and periodic reporting, including quarterly forecasts, are shared with the Supervisory Board, Management Board, and leadership teams. 5. Information Security The security of our platform is our top priority. As this platform grows, so does the potential impact of a successful cyberattack. Failing to properly deal with cyberattacks could lead to loss of (customer) data as well as disruption or damage to our systems. Ultimately, any such disruption would lead to a loss of confidence in our brand. With our increasing presence at the center of society’s digital ecosystem, it is even more challenging and important to address these issues. We are, therefore, committed to continuously improving our security program. This is focused on improving the operational security of our platform and the security awareness of our employees. Our commitment to cybersecurity remains a cornerstone of our operational excellence and a key driver of trust. Building on our foundation, we have strengthened defenses through comprehensive research, partnerships, and innovations. We have explored advanced security tools, ensuring our systems remain resilient. By collaborating with industry experts, we have enhanced security policies and optimized systems for improved configuration and audit capabilities. Our custom AI solutions are now more robust, and we have integrated effective tools for data discovery and analysis. Our proactive incident response measures effectively address issues such as hardware theft, data leaks, physical breaches, and unauthorized access attempts. We have strengthened our security workforce by achieving and renewing key certifications, including ISO27001, ISO27701, and HDS, the French certification ensuring compliance with strict security and confidentiality standards for hosting health data. By designing tailored security awareness training programs and addressing vulnerabilities, we maintain a rigorous focus on platform security. Through cross-team collaboration, we have reinforced critical environments with robust threat modeling. We remain committed to fostering a secure, stable, and trusted environment. Through smarter systems, advanced tools, and continuous training, we aim to further reduce incidents, strengthening CM.com's standing as a secure digital platform. Our journey in cybersecurity is ongoing, marked by dedication and a shared goal: unwavering security for every user. 6. Business Continuity Management CM.com recognizes that the need to safeguard service availability is paramount. To recover from disruptive incidents in the shortest possible time and ensure a rapid restoration of services, a significant level of planning and preparation is required. Therefore, CM.com has developed a comprehensive Business Continuity Plan to minimize potential damage to the business caused by major issues impacting our staff, office, and data center locations, or equipment. In addition, CM.com has taken several measures to ensure that the likelihood of a major incident is minimized. These include continuous investments in the stability and performance of our cloud platform, and performing regular load and capacity tests on our platform and other services. We also perform disaster recovery tests based on different scenarios to align them with the current risks, such as critical supplier dependencies, ransomware, and geo-redundancy. In addition, we enact backup and recovery strategies and build redundancy into our operations by establishing multiple server locations to host our cloud platform. Our Network Operating Center (NOC) monitors the availability and traffic across all our systems 24/7. We adhere to the ISO 9001, ISO 20000, and ISO 27001 standards, which provide us with guidance to further improve and deliver our high-quality, reliable services. 7. Leadership and Governance Effective leadership and governance are key to CM.com, ensuring clear goals, open communication, and alignment with company values. A strong tone at the top, combined with a management strategy based on planning, doing, checking, and acting, drives performance, integrity, and informed decision-making. CM.com’s Code of Conduct guides employees on ethical behavior, covering anti-corruption, human rights, and conflicts of interest, supported by the Speak-Up Policy for reporting concerns. Updated in 2025, the Code now includes real-life scenarios and ethical AI, reflecting CM.com’s AI-first strategy. The Risk and Compliance team maintained and tested internal control frameworks in 2025, providing periodic risk reports to the Management Board and Supervisory Board. These reports ranked risks, monitored developments, and supported the In Control Statement, increasing awareness of key risks among stakeholders. Our governance includes accountability, measurable objectives, and agile practices. 8. Customers and Opportunities We strive to deliver exceptional products and services, enabling our customers to enhance the lives of their own customers by making them easier, safer, and more beautiful. Customer experience is a core element of our company, and we focus on maintaining satisfaction and growing alongside our customers to better meet their needs. We believe that high customer satisfaction, paired with a strong brand identity, will help us attract new customers globally. Data plays a crucial role in this process. We integrate Customer Satisfaction Score (CSAT) and Customer Health Status measurements into our strategy to gain deeper insights into customer needs and target service improvements for maximum value delivery. By analyzing probability and data points, we mitigate churn and implement tailored customer plans to retain clients. Keeping our customers happy and expanding our base is key to achieving our growth ambitions. In 2025, our AI capabilities advanced significantly, empowering our customers to excel in their customer engagement. Our commitment to the responsible development and use of AI systems earned us the ISO42001 certification, making us one of the first technology companies in the Netherlands to achieve this milestone. 9. Regulations and Compliance The Risk and Compliance function at CM.com operates in a business partner model, combining independent oversight with close collaboration across the organization to ensure compliance with applicable laws and regulations. In response to increasing regulatory complexity and supervisory expectations, CM.com has continued to strengthen its governance, risk management, and compliance framework. CM.com is committed to acting with integrity. In 2025, a revised Code of Conduct was implemented, supported by mandatory employee training that is actively monitored. High participation levels and the absence of substantiated misconduct or Code of Conduct breaches during the year indicate that the framework is operating effectively. Legal and Risk and Compliance monitor and assess new and evolving legislation relevant to CM.com’s activities, including the EU Artificial Intelligence Act, the European Accessibility Act, and telecom-specific requirements. Identified compliance risks remain within the Management Board’s approved risk appetite and are assessed as moderate. Continuous enhancements to the compliance framework support a controlled and transparent operating environment. Payment-Specific Risk and Compliance For CM.com’s payments business, an updated Risk Appetite Statement guides risk management practices. All reporting and payment obligations to Dutch supervisory authorities were met in 2025. In line with European Banking Authority guidelines, a designated board member oversees anti-money laundering and financial crime prevention. Internal audit findings are addressed with relevant risk owners to ensure timely remediation. Ongoing regulatory developments, including DORA, NIS2, and GDPR, are continuously embedded into operations to ensure demonstrable compliance. 10. Environmental, Social, and Governance (ESG) In 2025, CM.com continued to advance its Environmental, Social, and Governance (ESG) agenda, recognizing the close interconnection between financial performance and sustainability. CM.com assesses its impact across its value chain and integrates ESG considerations into strategic and operational decision-making, while identifying and managing risks that may affect long-term performance. Following extensive preparation in previous years to meet regulatory requirements such as the Corporate Sustainability Reporting Directive (CSRD) and the EU Taxonomy, CM.com further implemented its ESG framework in 2025. This included the full integration of the Double Materiality Assessment (DMA), which identifies and prioritizes material ESG topics. CM.com strengthened its ESG controls, which are now subject to validation and verification. Sustainability reporting is subject to limited assurance by an external auditor, requiring CM.com to demonstrate effective control over ESG topics and related risks. As a result, ESG topics transitioned from Actively Managed Risk (AMR) to the Internal Control Environment (ICE), and the risk score was reduced to moderate. In Control and Responsibility Statement The Management Board states, based on the approach described above, that, to the best of its knowledge: the Management Board report provides sufficient insights into any deficiencies in the effectiveness of the internal risk management and control systems with regard to the risks as referred to in best practice provision 1.2.1 of the Corporate Governance Code. In the 2025 financial year, no major failings have been detected; the risk management and control systems provide reasonable assurance that the 2025 financial reporting does not contain any material inaccuracies; based on the current state of affairs, it is justified that the financial reporting is prepared on a going concern basis; the risk management and control systems provide limited assurance that the 2025 sustainability reporting does not contain any material inaccuracies; the Management Board at balance sheet date is not aware that the internal risk management and control systems do not provide sufficient comfort that the operational and compliance risks are effectively managed considering the company's risk appetite, where "sufficient comfort" is to be read as: comfort considering our risk appetite, the complexity of our company, inherent limitations to these systems and other disclosures on these systems in our Management Board report; and the Management Board report states those material risks and uncertainties, as referred to in best practice provision 1.2.1 of the Corporate Governance Code, that are relevant to the expectation of CM.com’s continuity for the period of twelve months after the issue date of this Management Board report. Properly designed and implemented risk management and internal control systems significantly reduce, but cannot fully eliminate, the possibility of human errors, poor judgment, deliberate circumvention of controls, fraud or infringements of laws, rules, or regulations, or the occurrence of unforeseeable circumstances. Another factor considered within CM.com’s risk management approach is that efforts related to risk management and internal control systems should be balanced against the costs of implementation and maintenance. Each member of the Management Board declares that, to the best of his knowledge: the financial statements in this Annual Report 2025 are prepared in accordance with accounting standards (in accordance with International Financial Reporting Standards (IFRS) as issued by the International Accounting Standards Board (IASB), adopted and endorsed by the European Union (EU-IFRSs), and with the statutory provisions of Part 9, Book 2 of the Dutch Civil Code), and give a fair and accurate view of the assets, liabilities, and financial positions as at December 31, 2025 and profit or loss of the company (and its affiliates included in the consolidation taken as a whole); the Sustainability Report, which is subject to implementation of the CSRD into Dutch legislation covering financial year 2025, has been prepared in accordance with the sustainability reporting standards referred to in Article 29b of the Accounting Directive and with the requirements of Article 8(4) of Regulation (EU) No. 2020/ 852 of the European Parliament and of the Council of June 18, 2020, on the establishment of a framework to promote sustainable investment and amending Regulation (EU) 2019/2088 (OJEU 2020, L 198); and the Management Board Report includes a fair and accurate view of the position on December 31, 2025, the developments and performance during the financial year 2025 of the company (and its affiliates included in the consolidation taken as a whole), together with a description of the principal risks the company is confronted with. Breda, The Netherlands February 12, 2026 Jeroen van Glabbeek – CEO Gilbert Gooijers - COO Governance This chapter outlines the corporate governance framework of CM.com and provides insights into: Our corporate structure, including corporate bodies and share capital. The rules and regulations applicable to CM.com. Diversity within the Supervisory Board, the Management Board, the Executive Committee, and Senior Management. Other corporate governance matters. Corporate Structure CM.com is a public limited liability company, incorporated under Dutch law. Our shares are listed on Euronext Amsterdam. Accordingly, our governance framework is based on Dutch legislation and our Articles of Association, complemented by internal policies and procedures. Proper corporate governance, including a focus on sustainable long-term value creation and maintaining CM.com’s company culture, is an important component of our way of working. CM.com has a two-tier board structure, with a Management Board and a Supervisory Board. The Management Board manages the company's operations and strategy, while the Supervisory Board provides independent oversight and advice. Both the Management Board and Supervisory Board report to the General Meeting, where shareholders exercise their voting rights. The founders are actively involved as members of the Management Board. In addition to their executive positions, they are members of the Founder Committee. CM.com's corporate bodies are: General Meeting. Supervisory Board, supported by the: Audit Committee; and Nomination, Selection, and Remuneration (NSR) Committee. Management Board, supported by the: Executive Committee. Founder Committee. General Meeting Our shareholders are important for the governance of CM.com. In 2025, we engaged with shareholders through financial updates (some accompanied by webcast), an investor deep dive, the Capital Markets Day, press releases, and the Annual General Meeting held on May 9, 2025. Additional details are included in the Shareholder Value Creation chapter. The Annual General Meeting is held within six months of the end of the financial year (31 December). Our next meeting is scheduled for 17 April 2026. Shareholders may cast votes on agenda items of a General Meeting either in person or by proxy. Each share carries one vote, and resolutions are adopted by an absolute majority of the votes cast, with no quorum required, unless otherwise required by law or the Articles of Association. Regular voting items include: Approval of the consolidated and corporate financial statements. Determination of the dividend – in line with the Dividend Policy. Advisory vote on the remuneration report. Discharge of the Management Board and Supervisory Board. (Re)appointment of the external auditor. Authorization of the Management Board, with Supervisory Board approval, to: issue shares and grant rights to acquire shares; and restrict or exclude preemptive rights. Authorization of the Management Board, with Supervisory Board approval, to repurchase shares. Finally, the following actions (among others) require the approval of the General Meeting: Appointing, suspending, or dismissing a member of the Management Board. Appointing, suspending, or dismissing a member of the Supervisory Board, provided that the Founder Committee is authorized to do so for up to one-third of these positions. Discharging a member of the Management Board or Supervisory Board. Adapting a remuneration policy for the Management Board or the Supervisory Board. Determining the remuneration of the Supervisory Board. Issuing shares or granting rights to acquire shares outside the authorization provided to the Management Board by the General Meeting. Repurchasing shares outside the authorization provided to the Management Board by the General Meeting. Reducing the issued share capital. Taking any action resulting in an important change in the identity or character of CM.com. Adopting the annual accounts. Appointing an auditor. Amending the Articles of Association at the proposal of the Management Board that has been approved by the Supervisory Board. Supervisory Board The Supervisory Board advises the Management Board on a wide range of topics. In addition to advising the Management Board, the Supervisory Board supervises the Management Board. This supervision includes strategy, policies, risk management, and overall performance. For more information, please see our Supervisory Board Report. The Supervisory Board consists of six members. Profiles of the members are included in the Supervisory Board Composition section. Supervisory Board members are appointed by the General Meeting on the basis of a binding nomination from the Supervisory Board, while that the Founder Committee is authorized to appoint up to one-third of its members. Supervisory Board members are generally appointed for a period of four years and may be reappointed. The first reappointment may be for a maximum period of four years. The second reappointment may be for a maximum period of two years, which may be extended by a further two years. The Founder Committee may designate one member of the Supervisory Board as chair. Supervisory Board members may be suspended or dismissed by the corporate body that has appointed them. The duties, composition, and statement of the Supervisory Board and its committees are included in the Supervisory Board Report. Management Board The Management Board is collectively responsible for the overall management, strategic direction and performance of CM.com. It defines objectives, sets the strategy and risk management framework, and ensures effective daily operations. The Management Board may perform all acts related to achieving these objectives, except those which are prohibited by Dutch law or the Articles of Association or which are expressly assigned to the General Meeting, the Founder Committee, or the Supervisory Board. The rules of procedure of the Management Board determine the division of responsibilities among the Managing Directors. The Management Board has delegated its responsibility to identify and consequently manage sustainability matters to the CFO. Despite this division of responsibilities, the Management Board remains collectively responsible for the management of CM.com. In performing their duties, the members of the Management Board are guided by the interests of CM.com and its business enterprise, taking into consideration CM.com’s stakeholders. The Management Board provides the Supervisory Board with all information necessary for the Supervisory Board to exercise its duties in a timely manner. The Management Board submits resolutions to the Supervisory Board and/or the General Meeting and/or the Founder Committee for approval, as required by Dutch law, the Articles of Association, or the Management Board's rules of procedure. In 2025 the Management Board consists of: Name Date of birth Position Appointment period Jeroen van Glabbeek April 7, 1979 CEO February 20, '20 - indefinite Gilbert Gooijers February 14, 1979 COO February 20, '20 - indefinite Jörg de Graaf October 13, 1976 CFO April 30, '20 - November 1, '25 (second term) Profiles of the members are included in the Management Board Composition section. The proposal to appoint Geert Beullens as a member of the Management Board will be included on the agenda for the 2026 General Meeting. Management Board members are appointed by the General Meeting through a binding nomination by the Supervisory Board. The founders have been appointed as Management Board members for an indefinite period. Both founders wish to continue in their active roles as Managing Directors for as long as possible to implement and safeguard CM.com’s long-term strategy. Any member of the Management Board may be dismissed by the General Meeting. A resolution of the General Meeting to dismiss a Managing Director who is a founder requires a resolution adopted with a two-thirds majority of the votes cast, representing more than half of the issued share capital. Executive Committee The Executive Committee enhances and broadens the knowledge and expertise supporting the Management Board. It assists in executing strategy and operational priorities. The Executive Committee is bound by the Management Board's rules of procedure. Notwithstanding the existence of the Executive Committee, the rights and obligations of the Management Board under Dutch law, the Articles of Association, and the Dutch Corporate Governance Code remain in full force. Therefore, the Management Board remains accountable for the actions and decisions (if applicable) of the Executive Committee and bears ultimate responsibility toward the Supervisory Board and for CM.com’s external reporting to its shareholders. On December 31, 2025 the Executive Committee consists of the Management Board members and: General Manager International; Head of Human Resources; and Head of Legal Founder Committee The Founder Committee ensures that the founders remain actively involved in CM.com. The committee consists of: Jeroen van Glabbeek and Gilbert Gooijers, each appointed for an indefinite term. A founder ceases as a member five years after ending active involvement in CM.com (i.e. not being a Management Board or Supervisory Board member or holding another meaningful and value-adding position within the CM.com group). In addition, a founder ceases to be a member of the Founder Committee, if: (i) the founders jointly hold fewer than 6,400,000 shares in CM.com; (ii) voluntarily resignation; or (iii) death. The Founder Committee will meet at the request of any member of the Founder Committee. In 2025, the Founder Committee did not convene. The Founder Committee has the right to: Approve the number of members of the Management Board and Supervisory Board. Appoint or replace the chair of the Supervisory Board. Directly appoint, suspend, and dismiss up to one-third of the Supervisory Board members. In addition, a resolution of the General Meeting to (a) amend the Articles of Association, if the rights of the Founder Committee or the founders are prejudiced in the proposed amendment, (b) effect a legal merger, (c) effect a legal division, (d) effect any other form of corporate restructuring if such corporate restructuring requires a resolution of the General Meeting, or (e) dissolve CM.com, will require the prior approval of the Founder Committee. The Founder Committee has the right to decide at its discretion whether to exercise these rights. Works Council Our Works Council is relevant for corporate governance in the Netherlands as certain resolutions are subject to its advice or consent. At CM.com, we value the views of our employees. Therefore, the Works Council is relevant in a broader sense. Accordingly, the Works Council and Management Board held meetings approximately every six weeks in 2025. Shares CM.com has a single class of shares, each carrying one vote. As at December 31, 2025, no shares were held in the treasury. No shares with limited entitlement to profits or reserves, nor bearer shares, have been issued. The company is not aware of any shareholder agreements restricting share transfers or voting rights. CM.com has an Employee Share Purchase Plan, allowing employees to voluntarily periodically acquire shares at a fixed percentage of their gross salary. Additionally, CM.com has share plans as described under note 22. Share-based Payments of the consolidated financial statements. Rules and Regulations CM.com is subject to various legal and regulatory requirements. Key corporate governance frameworks include: Dutch Law, Especially Book 2 of the Dutch Civil Code ("DCC") As of this report, CM.com is not yet subject to the provisions of Dutch law applicable to large corporations. On 23 June 2023, CM.com lodged a declaration with the trade register of the Dutch Chamber of Commerce. Once the declaration has been registered at the trade register for three consecutive years, the large company regime (as included in articles 2:158 up to and including 2:164 of the DCC) shall apply to CM.com. This will lead to a further concentration of control for the Supervisory Board over certain decisions, resolutions, and transactions. Since the large company regime becomes applicable in 2026, CM.com will propose to amend its Articles of Association. Articles of Association The Articles of Association ware last amended on April 30, 2020 and are available in English and Dutch. Dutch Corporate Governance Code The Corporate Governance Code, as amended in March 2025 applies to CM.com. CM.com complies with the Corporate Governance Code and endorses its principles, with the exception of the following: Best practice provision 2.2.1 states that a member of the Management Board is appointed for a maximum period of four years. As addressed above, both founders have been appointed for an indefinite period. Whenever the position of the founders in their capacity as Management Board members leads to a conflict of interest, CM.com has a thorough procedure that must be followed. Best practice provision 4.3.3, which only applies to companies that are not subject to the large company regime, states that the binding nature of a nomination (for the appointment or dismissal of a Managing Director or a member of the Supervisory Board) may be canceled by a portion of the issued share capital not exceeding one third. The Articles of Association state that a majority of two-thirds of the votes cast is required for such a cancellation. As a result, the cancellation of the binding nature is currently only possible through a combined action of one or both of the founders, in their capacity as shareholders, and other shareholder(s). This deviation from the Corporate Governance Code is temporary and will be taken into consideration with the proposed amendment of the Articles of Association. When CM.com applies the large company regime, CM.com intends to update its Articles of Association accordingly. All internal rules and policies are published on our company website, except for the Insider Dealing Policy. Whenever a person (internal or external) is added to an insider list, he or she will be notified along with the Insider Dealing Policy. Internal Rules and Policies CM.com has the following internal rules and policies relating to Corporate Governance: Management Board Rules of Procedure Supervisory Board Rules of Procedure Profile of the Supervisory Board Audit Committee Charter Nomination, Selection, and Remuneration Committee Charter Stakeholder Contact Policy Diversity & Inclusion Policy Speak Up Policy Code of Conduct Management Board Remuneration Policy Supervisory Board Remuneration Policy Supervisory Board Rotation Schedule Tax Policy Dividend Policy Insider Dealing Policy The following values are of such importance to CM.com that they are included in the Code of Conduct: Operating with integrity. Privacy & security. Social responsibility. Some examples of how our values are effectively incorporated and complied with include: Our dedicated Data Privacy Governance Board, which consists of a multidisciplinary team of qualified professionals who govern our Global Privacy Program. CM.com’s Speak Up Policy and Speak Up line, which encourages and helps everyone within the CM.com group to raise concerns about any suspected misconduct, irregularities, or incidents. Mandatory training throughout the year of all employees on multiple security topics. Diversity CM.com has set out its diversity targets for the Management Board, Executive Committee, Senior Management, and Supervisory Board in the Diversity & Inclusion Policy. As in previous years, the diversity aspects taken into consideration are not limited to gender but also include nationality, age, education, and experience. The purpose of the Diversity & Inclusion Policy is to achieve a diversified composition of the boards to facilitate a well-balanced decision-making process and the proper functioning of the respective Boards. During 2025, the composition of the Management Board changed, while the composition of the Supervisory Board remained unchanged. Following the departure of the company’s Head of Central Sales in 2025, the Executive Committee decreased by one member. In 2025, the composition of Senior Management also changed. Upon the departure of members of Senior Management, the company assessed whether and, if so, how the resulting vacancies would be filled. As a result, the size of Senior Management decreased by five members. In the assessment and fulfilment of vacancies, multiple factors were taken into consideration, including the company’s Diversity & Inclusion policy, while ensuring that the most suitable individuals were appointed to each position. This resulted in a slight increase in the representation of women in Senior Management to 38.7% in 2025 (2024: 36.1%), with men representing 61.3% (2024: 63.9%). The information presented below regarding the Executive Committee and Senior Management relates exclusively to employees of CM.com. Following the above, CM.com’s male/female distribution is as follows, as of December 31, 2025: Men % Women % Target% women Target year Management Board 2 100% 0 0% 30.0% 2032 Supervisory Board 4 66.7% 2 33.3% 33.3% 2022 Executive Committee 5 100% 0 0% 30.0% 2027 Senior Management 19 61.3% 12 38.7% 30.0% 2027 Information about our policies and taken actions to meet and maintain our set diversity targets are included in the Social chapter of our Sustainability Statements. Other Corporate Governance Matters In line with legislation, CM.com discloses its: Conflicts of interest. Anti-takeover measures. Transactions with shareholders holding 10% or more. Corporate Governance Statement. Potential Conflicts of Interest CM.com is aware that the founders will continue as directors and are members of the Founder Committee while remaining (indirect) shareholders. If this (or any other situation) gives rise to a conflict of interest, the director may not participate in the deliberations and decision-making process on a subject where a conflict of interest exists. To avoid overlooking conflicts of interest, a (potential) conflict of interest of material significance must be reported to the chairperson of the Supervisory Board. The Supervisory Board decides whether a member of the Management Board has a conflict of interest. The rules on conflicts of interest for the Management Board members are included in the Management Board's rules of procedure. For the year 2025, CM.com is not aware of any (potential) conflict of interest between the private interests or other duties of members of the Management Board and the private interests or other duties of members of the Supervisory Board toward CM.com. Consequently, the best practice provisions 2.7.3 and 2.7.4 of the Corporate Governance Code were complied with. Anti-takeover Measures CM.com has not imposed restrictions on transferring (depository receipts of) CM.com shares. CM.com can take the following anti-takeover measures: Issue shares. The Management Board can issue shares within the authorization granted by the General Meeting, subject to the Supervisory Board’s approval. If the authorization by the General Meeting toward the Management Board is absent (or used for other purposes), the General Meeting may resolve to issue shares. Repurchase shares. The Management Board may repurchase shares within the authorization granted by the General Meeting, subject to the Supervisory Board’s approval. 180-day response time (Dutch Corporate Governance Code). The Management Board and Supervisory Board may invoke a response time of up to 180 days. 250-day reflection period (article 2:114b DCC). The Management Board, subject to the Supervisory Board’s approval, may invoke a legally binding reflection period of up to 250 days in response. In 2025, CM.com did not enter into agreements with any of its directors or employees that would lead to a payment obligation on termination of employment in connection with a public offering. Transactions with Shareholders Holding 10% or More For the year 2025, CM.com is, apart from the related party transactions disclosed in the Notes to the Consolidated Financial Statements, not aware of any transaction between CM.com and a shareholder holding at least 10% of the shares in CM.com. Corporate Governance Statement The information required to be included in this Corporate Governance Statement as described in the Decree on the Content of the Management Board Report (Besluit inhoud bestuursverslag) can be found in the following sections of this Annual Report: The statement on compliance with the principles and best practice provisions of the Corporate Governance Code and deviations therefrom can be found in this section under the subsection ‘Dutch Corporate Governance Code.’ Information concerning the main features of the internal risk management and control systems relating to the financial reporting process can be found under the ‘Risk' section and the ‘Supervisory Board Report’ section, subsection ‘Audit Committee.’ Information regarding the functioning of the General Meeting and the main authorities and rights of the General Meeting can be found in this section, under the subsection ‘General Meeting.’ Information regarding the composition and operation of the Management Board and the Supervisory Board and its committees can be found in this section, under the subsections ‘Management Board’ and ‘Supervisory Board’ and the ‘Supervisory Board Report’ chapter. Information regarding the Diversity & Inclusion Policy in relation to the composition of the Management Board, Supervisory Board, and Senior Management can be found in this section, under the subsection ‘Diversity' and the Social chapter of our Sustainability Statements.’ Management Board Composition Jeroen van Glabbeek (Dutch, 1979) Founder, Chief Executive Officer (CEO) and Managing Director Before founding CM.com as ClubMessage in 1999 together with Gilbert Gooijers, Jeroen van Glabbeek studied Technology Management at the University of Technology in Eindhoven (1997-2002). In 1998, he started his career as a project manager at Getronics PinkRoccade Civility. He also completed the Nyenrode Business University's Advanced Management Program in 2009. As of October 1, 2025, he is a member of the supervisory board of BOM Holding B.V. (Brabantse Ontwikkelings Maatschappij), an organization strengthening the Brabant economy through development, investment and internationalization. Gilbert Gooijers (Dutch, 1979) Founder, Chief Operating Officer (COO) and Managing Director In 1999, Gilbert Gooijers founded and launched CM.com (at the time still known as ClubMessage) together with Jeroen van Glabbeek. Gilbert Gooijers obtained a degree in Technology Management from the University of Technology in Eindhoven (1997-2002). He also completed the Nyenrode Business University's Advanced Management Program in 2009. Gilbert is a member of the board of Stichting TURF, a non-profit organization dedicated to stimulating and positioning Breda based on its potential and vision. Supervisory Board Composition Jacques van den Broek (Dutch, 1960, second term) Chair of the Supervisory Board and member of the NSR Committee Jacques van den Broek is the former CEO of Randstad N.V. and has held various leadership positions within Randstad for more than 30 years. He was CEO from 2014 to 2022. After graduating in law, he held a management position with an international trading company before joining Randstad. Currently, Jacques is chair of the supervisory board of Intergamma (leading DIY chain in the Netherlands and Belgium). He is also Chair of the board of the Leiden Academic hospital and since April 2025 a member of the board of Total Care. Finally, he chairs the Dutch Committee for Entrepreneurship, an advisory body of the Dutch Ministry of Economic Affairs. Mariken Tannemaat (Dutch, 1971, second term) Vice-Chair of the Supervisory Board and Chair of the NSR Committee Mariken Tannemaat is a member of the supervisory boards of CM Payments B.V., and ABN AMRO Bank N.V. She also serves as a non-executive director at Prudential Assurance Company Limited and Investment Funds Direct Limited and advises the management board of Erasmus Enterprise B.V. Previously, she was Chief Innovation Officer (CIO) at Robeco and NN Group, where she oversaw the Customer & Commerce business unit at Nationale Nederlanden. She has also held key roles at ING Direct in Paris, London, and Amsterdam. Stephan Nanninga (Dutch, 1957, second term) Member of the Supervisory Board and Chair of the Audit Committee Stephan Nanninga is a supervisory board member at Bunzl Plc, IMCD N.V., and Cabka N.V. Previously, he held executive roles at Technische Unie, CRH, and Royal Dutch Shell in the Netherlands and abroad. From 2007 to 2016, he was a board member at SHV Holdings N.V., serving as CEO from 2014 to 2016. Stephan will technically not be an independent member under the Dutch Corporate Governance Code, as he was a director of Dutch Star Companies Promotors Holding B.V., an associated company of CM.com N.V., five years before his appointment. Lex Beins (Dutch, 1965, second term) Member of the Supervisory Board and the Audit Committee Lex Beins is the founder of Pyton Communication Services B.V., Beins Travel Group B.V., and cofounder of Cheaptickets.nl. In 2011, Cheaptickets.nl was merged into Travix International B.V. Lex served as a member of the supervisory board of P1Travel B.V. until July 2025. Currently, he is chairperson of the supervisory board of Écart Invest 1 B.V. Joëlle Frijters (Dutch, 1974, second term) Member of the Supervisory Board Joëlle Frijters is a technology entrepreneur and former CEO. She co-founded Improve Digital, which was sold to Swisscom in 2016, remaining CEO until 2017. Previously, she held international roles at Microsoft and KLM. Currently, she serves on the supervisory boards of Basic-Fit N.V., HightechXL Group B.V., and Timber and Building Supplies Holland N.V. (a HAL investment), where she is also on the remuneration committee. Additionally, she is an advisory board member at Cronos Groep and part of an independent commission overseeing TTT seed capital funds at the Netherlands Enterprise Agency. Diederik Karsten (Dutch, 1956, second term) Member of the Supervisory Board and the NSR Committee Diederik Karsten is currently also a member of the supervisory boards of Holland Casino N.V. and of Stadion Amsterdam N.V. (Johan Cruijff Arena). Previously, he held supervisory board roles at, among others, VodafoneZiggo Group, easyJet (UK), E-Plus (Germany), ANP Holding and Telenet (Belgium). He has held several management positions in FMCG at Procter and Gamble and PepsiCo (in the Netherlands, UK, Germany and the US) and executive positions in the Telecoms and Media industries at KPN (as CEO Mobile N.V.) and at Liberty Global (as CCO of the group). Supervisory Board Report Dear shareholders, As we close the year 2025, I am pleased to address you on behalf of the Supervisory Board of CM.com. This year has been marked by significant innovation and the navigation of challenges that have further shaped CM.com. CM.com further strengthened its position as a trusted, innovation-driven partner for businesses worldwide, with one clear focus: building a single, intelligent Platform for Customer Interaction that connects every interaction between companies and their clients. A year of platform-driven innovation In 2025, CM.com advanced its long-term vision by adding powerful new capabilities to its unified platform. The launch of HALO, CM.com’s proprietary Agentic AI platform, was a pivotal milestone. HALO is an intelligence layer woven into the entire platform, enabling businesses to design smarter, more autonomous, and more personalized customer journeys across communication, payments, and live experiences. It reflects CM.com’s commitment to using AI as a practical, value-creating engine for its customers. The platform was further enriched with innovations that deepen engagement and trust. The ticketing resale platform for events brings transparency, security, and control to secondary ticket sales, helping organizers protect their brands and deliver better fan experiences within the same CM.com ecosystem they use for primary ticketing, messaging, and payments. Voice AI, including its integration with WhatsApp and other channels, opens up new possibilities for people to interact naturally with businesses in a more intuitive and more accessible way. The continued rise of rich messaging channels such as WhatsApp and RCS was anticipated and embraced in the platform architecture, ensuring that CM.com’s customers can reach their audiences via interactive, high-impact conversations while relying on the platform’s strong global messaging backbone. These developments all serve the same strategic goal: one platform, powered by AI and data, that helps our customers deliver seamless, secure, and meaningful experiences at scale. Transformation, focus, and execution 2025 was a year in which AI reshaped expectations for technology providers and enterprises alike. In this dynamic environment, CM.com sharpened its strategic focus around its core strengths: its integrated Platform for Customer Interaction, AI capabilities, and enterprise-ready compliance and reliability. The Supervisory Board has closely supported the Management Board as CM.com invested in HALO, platform integration, and operational excellence, positioning the company to capture new opportunities and drive profitable growth. We remain convinced that CM.com’s stand‑alone strategy – centered on one unified, AI-powered platform – offers the strongest foundation for sustainable value creation for customers, employees, and shareholders. Strengthening leadership and governance 2025 also marked an important leadership transition. After 5.5 years, Jörg de Graaf stepped down as CFO of CM.com. Under his tenure, CM.com reinforced its financial steering capabilities and risk management framework, supporting the evolution from a fast-growing scale-up to a more mature, scalable technology company. On behalf of the Supervisory Board, I thank Jörg for his significant contribution and wish him every success in his next chapter. We are pleased to welcome Geert Beullens as incoming CFO. With more than 22 years of experience at ASML, Geert brings deep expertise in driving profitable growth, scaling technology businesses globally, and maintaining financial discipline in complex, high-growth environments. His appointment reflects our commitment to strong governance, strategic clarity, and long-term value creation. Geert’s nomination will be formally presented at the upcoming AGM in April 2026. Looking ahead As AI continues to transform markets and customer expectations, agility, creativity, and clear strategic focus remain essential. CM.com is well-positioned to benefit from these developments: it has a robust, scalable technology platform; an increasingly AI-native product vision; and a growing base of loyal enterprise and mid-market customers who depend on CM.com for critical customer interactions. The Supervisory Board will continue to support and challenge the Management Board in executing the strategy: simplifying and strengthening the platform, embedding HALO more deeply across the product portfolio, and driving profitable growth with disciplined capital allocation. On behalf of the Supervisory Board, I would like to thank our employees for their dedication, our clients for their trust, and you, our shareholders, for your continued support. Your confidence in CM.com’s mission and strategy enables the company to keep pushing boundaries and delivering on its promise: one platform that makes customer interactions easier, safer, and more meaningful. Yours sincerely, Jacques van den Broek - Chairman of the Supervisory Board of CM.com Composition of the Supervisory Board The composition of the Supervisory Board is in accordance with their profile. During 2025, the composition of the Supervisory Board remained unchanged following the reappointments in the Annual General Meeting of CM.com N.V. on May 9, 2025. The Supervisory Board has an Audit Committee and a Nomination, Selection, and Remuneration (NSR) Committee. Each of the committees has a preparatory and advisory role to the Supervisory Board. The committees cannot adopt resolutions on behalf of the Supervisory Board. Each committee has a charter on its role, responsibilities, and functioning. Their charters are published on the company's website. Meetings are convened at least four times a year following a schedule set annually by the Supervisory Board. Additional meetings are held at any Supervisory Board or Management Board request. The Supervisory Board held four meetings in 2025 and one offsite meeting in May for two days to discuss strategy in more depth. Furthermore, three ad hoc calls were arranged at short notice in early November to discuss the intended announcement of an acquisition proposal. Given the low absenteeism rates, it is fair to conclude that the Supervisory Board members are dedicated to CM.com. Supervisory Board meeting and attendance Name Supervisory Board Audit Committee Nomination, Selection, and Remuneration Committee Jacques van den Broek 100% Not applicable 100% Mariken Tannemaat 100% Not applicable 100% Lex Beins 100% 100% Not applicable Joëlle Frijters 100% Not applicable Not applicable Diederik Karsten 100% Not applicable 100% Stephan Nanninga 100% 100% Not applicable The table on the next page contains information about the members of the Supervisory Board. Positions outside CM.com are included in the description of each member of the Supervisory Board. All members of the Supervisory Board are appointed in accordance with Dutch law. Independence 83.3% (5 out of 6) of the Supervisory Board members meet the independence criteria as described in Sections 2.17 to 2.19 of the Corporate Governance Code. Only Stephan Nanninga does not meet those criteria. He was a director of Dutch Star Companies Promotors Holding B.V., an associated company of CM.com N.V., five years before his appointment as a member of the Supervisory Board. A Supervisory Director holds any (in)direct participation in CM.com (such as shares) as a long-term investment. Resolutions and Conflict of Interest The Supervisory Board resolves issues by an absolute majority of the votes cast unless Dutch law, the Articles of Association, or the Rules of Procedure governing the internal proceedings of the Supervisory Board prescribe a larger majority. A Supervisory Board member may not participate in the adoption of resolutions (including deliberations in respect of these) if he or she has a direct or indirect personal interest that conflicts with the interests of the company and its associated business enterprises. For the exact wording of the regulation, reference is made to the Supervisory Board Rules of Procedure. During 2025, no Supervisory Board member had a conflict of interest. Name Position(s) at CM.com Birth year Nationality International experience Financial expertise Specific experience Gender Initial appointment Second term appointment Term expires Jacques van den Broek Chair of the Supervisory Board and member of the NSR Committee 1960 Dutch Yes Yes Human Resources, listed companies, sales and general management Male September 2021 AGM 2025 AGM 2029 Mariken Tannemaat Vice-Chair of the Supervisory Board and Chair of the NSR Committee 1971 Dutch Yes Yes Retail, IT, investment, payments Female February 2020 AGM 2024 AGM 2028 Lex Beins Member of the Supervisory Board and the Audit Committee 1965 Dutch Yes Yes E-commerce, IT, entrepreneurship, investments, payments, business processing Male February 2020 AGM 2024 AGM 2026 Joëlle Frijters Member of the Supervisory Board 1974 Dutch Yes - Technology, international expansion of SaaS business, entrepreneurship Female September 2021 AGM 2025 AGM 2029 Diederik Karsten Member of the Supervisory Board and the NSR Committee 1956 Dutch Yes - Telecom innovation Male February 2020 AGM 2024 AGM 2028 Stephan Nanninga Member of the Supervisory Board and Chair of the Audit Committee 1957 Dutch Yes Yes Supervisory Board of listed companies, distributions, financial audits, and M&A Male February 2020 AGM 2024 AGM 2028 Work of the Supervisory Board The Supervisory Board supervises the Management Board and the general course of business within CM.com. Its responsibilities include overseeing the company’s strategy, policies, management and overall affairs, as well as advising the Management Board on matters of strategic importance. The Supervisory Board also monitors the company’s relationship with its shareholders and other stakeholders. The Supervisory Board met regularly throughout 2025, with meetings convened at least four times a year in accordance with an annual schedule set by the Supervisory Board. Meetings were generally held at the company’s headquarters in Breda and covered all aspects of the company’s operations and governance. In addition to the regular meetings, a two-day offsite meeting was held in May 2025 to discuss strategy in greater depth. Furthermore, three ad hoc calls were arranged at short notice in early November to discuss the intended announcement of an acquisition proposal. Additional meetings were held whenever requested by either the Supervisory Board or the Management Board. Through these meetings, the Supervisory Board maintained a comprehensive and well-informed view of developments within the organization and its workforce. CM.com actively involved the Supervisory Board in the organization by inviting its members to internal events such as quarterly meetings and company gatherings, thereby ensuring strong visibility and engagement across the company. Members of the NSR committee attended the CMBA Rising Star and Future Leader final presentations, acting as jury members, and participated in the graduation ceremonies. In 2025, the Supervisory Board devoted significant attention to refining the company’s strategic direction. Together with the Management Board, multiple strategic scenarios were explored to safeguard sustainable long-term growth and value creation. These scenarios were assessed with regard to market positioning, financial resilience and the ability to respond effectively to changing market conditions. Particular emphasis was placed on maintaining strategic flexibility and control over the company’s future, including preparedness for potential acquisition interest. A key element of the strategy discussed was the continued use of artificial intelligence and digital transformation as drivers of differentiation and growth. The Supervisory Board supported initiatives aimed at strengthening CM.com’s positioning as a leading European technology provider, with a focus on a clear and simplified value proposition, product innovation and a strong commitment to privacy, security and certification standards. Financial discipline formed an integral part of the strategic discussions. The Supervisory Board closely monitored the financial performance of CM.com N.V., receiving regular updates on EBITDA development, cash flow and forecasts. The Board reviewed and approved the annual budget and business plans, assessed covenant compliance and monitored liquidity and financing arrangements. Rather than focusing solely on budget adherence, the Supervisory Board emphasized performance against strategic and financial targets, supported by rolling forecasts and strict performance management. Profitability and sustainable value creation remained key focus areas throughout the year. The Supervisory Board regularly reviewed margin development, pricing strategies and monetization initiatives, with the aim of optimizing revenue quality and strengthening the company’s financial position. In addition, the design and operation of the internal risk management and control systems were evaluated to ensure their effectiveness and to support sound decision-making. The Supervisory Board also recognized the importance of culture, leadership and talent development. Attention was given to fostering a positive and inclusive working environment, transparent communication and effective succession planning. Talent management and leadership development were discussed within the relevant committee structure, with a focus on retaining key capabilities and supporting long-term organizational continuity. Diversity and inclusion were acknowledged as essential components of a strong and future-proof organization. The Supervisory Board, through its NSR committee, reviewed progress in this area and emphasized the importance of a balanced and inclusive workforce and leadership teams. Through its meetings, interactions and oversight activities, the Supervisory Board remained closely involved with the company throughout 2025 and fulfilled its supervisory and advisory role with a clear focus on long-term value creation, sound governance and strategic resilience. Audit Committee Report The Audit Committee supports the Supervisory Board in fulfilling its oversight responsibilities by supervising, monitoring and advising the Management Board on the effectiveness of CM.com’s internal risk management and control systems. In this context, the Committee oversees the integrity of the company’s financial and non-financial reporting, compliance with recommendations from internal and external auditors, the company’s tax policy and financing arrangements, as well as its information and communications technology, including cybersecurity-related risks. The Audit Committee maintains regular contact with and supervises the external auditor, prepares the nomination of the external auditor for appointment by the General Meeting, and advises the Supervisory Board on the approval of the financial statements, the annual budget and major capital expenditures. In addition, the Committee supports the Supervisory Board in the exercise of its governance duties, including the preparation of nominations and reviews. The Audit Committee meets as often as required for the proper performance of its duties and whenever requested by one or more of its members, but in any event at least four times a year. In 2025, the Audit Committee held six meetings. All Committee members, the internal auditor and the external auditor attended all meetings in 2025. The Chief Financial Officer (CFO) also attended all meetings, and the Chief Executive Officer (CEO) and business experts were invited for specific agenda items where relevant. Key topics discussed in 2025 The agenda during these meetings combined recurring governance topics with developments relevant to CM.com’s operating environment and long-term objectives. Regular items included press releases, management reporting, the review of annual plans and budgets, and quarterly updates from Internal Audit and Risk and Compliance. These were discussed in conjunction with the company’s financial results, outlooks and forecasts, cost reduction measures, the refinancing of the convertible bonds and the monitoring of bank covenants, as well as the CFO transition and the HALO sales plan. The Committee also addressed broader external and emerging risks, including ESG matters, geopolitical and macroeconomic developments, artificial intelligence (AI) risks and opportunities, fraud and integrity, and cybersecurity. These topics were assessed in relation to their impact on strategy, risk exposure and the control environment. As part of its integrated oversight, the Audit Committee reviewed the 2025 annual plan of the external auditor, together with the engagement letter, management letter, auditor’s report, remuneration and reappointment. With regard to the 2025 interim and full-year financial statements, the Committee was satisfied with the explanations and findings provided by the Management Board and the external auditor and advised the Supervisory Board accordingly. The Audit Committee also reviewed the 2025 Internal Audit Plan and Internal Audit Charter, which were approved by the Supervisory Board in December 2024. Quarterly Internal Audit reports provided insight into audit activities, findings and observations across the group. The Committee monitored the implementation of recommendations and the timely follow-up of agreed actions addressed to the business. Finally, the Committee reviewed the company’s strategic plan and monitored its key risks, risk exposure, the In Control Statement and the design, operation and (level of) effectiveness of the risk management and internal control systems. In doing so, the Audit Committee also advised the Supervisory Board on the sustainability reporting process and material sustainability topics, enabling informed oversight and decision-making. Nomination, Selection, and Remuneration Committee Report The Nomination, Selection, and Remuneration Committee advises the Supervisory Board on the exercise of its duties regarding the Remuneration Policy of the Management Board and prepares proposals for the Supervisory Board on these subjects. Both remuneration policies were adopted by the General Meeting at the proposal of the Supervisory Board on April 21, 2022 and continued to serve as the framework for compensation decisions during this reporting year. The Committee’s duties include preparing the remuneration proposals for individual Management Board members for determination by the Supervisory Board, as well as, where applicable, preparing proposals for the Supervisory Board on an updated Remuneration Policy for the Management Board, to be adopted by the General Meeting. The Committee also advises the Supervisory Board on its duties regarding the selection and appointment of Management Board members, Supervisory Board members, and the consultation of the Founder Committee in that regard. The Committee meets whenever one or more of its members have requested such a meeting and at least twice a year. In 2025, the Nomination, Selection, and Remuneration Committee held five scheduled meetings and one additional interim call. Discussions during these meetings included: The remuneration of the Management Board, Supervisory Board, Executive Committee, and Business Unit Leadership teams; Management Board 2025 results for the Long-Term and Short-Term Incentive Plans; Target settings for the LTIP and STIP for the Management Board for 2026; Salary review process for 2026; Employee engagement; Succession planning of (Supervisory) Board Members; Equal pay for similar weight roles; Talent sessions focused on succession, potential assessment, and leadership development; Discussions on CSRD and ESG objectives and their integration into performance frameworks; and The transition toward a structured company (structuurvennootschap). In addition, the NSR Committee progressed the search for a new CFO, working closely with an executive recruiter. Key criteria included gender balance, sector experience, finance expertise, geographical flexibility, and technological capability. Benchmark data from the Amsterdam Small Cap Index remained the primary reference point for Management Board remuneration. European benchmark data were updated based on observed market movements and used as supportive information. The Committee also functioned as an important sounding board on engagement, leadership development, and target setting. In addition, the integration of the Customer Satisfaction Score (CSAT) and Customer Health Status measurements - replacing NPS - into the company’s strategy and as part of the LTIP framework, to gain deeper insights into customer needs and more targeted service improvements to maximise value delivery. Governance Developments The Committee reviewed the organizational implications of CM.com’s transition toward a structured company, including the formal role of the Works Council. The Committee also discussed the composition and functioning of the Supervisory Board and its Committees, with attention to required expertise and a balanced division of roles. Evaluation Within CM.com, we are always looking for ways to improve. Therefore, the overall composition of the Supervisory Board, as well as the different committees and their members, have been evaluated. Evaluation of the Supervisory Board The Supervisory Board evaluated its own performance, as well as that of its committees and members. During the individual-evaluation, the members of the Management Board were not present. The evaluation focused on: (i) substantive matters, interaction within the Supervisory Board or its committees, and the interaction with the Management Board; (ii) key events and lessons learned; and (iii) the desired profile, composition, competencies, and expertise of the Supervisory Board. Based on the evaluations, the Supervisory Board concluded that, overall, its committees and members have functioned effectively and efficiently. The Supervisory Board appreciates the openness and transparency of the Management Board and the further invitations throughout the year. This allows the Supervisory Board to gain a broader and deeper view of the company and its business, while allowing its members to share their knowledge and experience. At the 2025 AGM, two Supervisory Board members were re-appointed. The Supervisory Board reconfirmed that its current composition provides an appropriate balance of expertise, skills and experience. A proposal will be submitted to the General Meeting to adjust Supervisory Board remuneration annually in line with CM.com’s merit increase. Evaluation of the Management Board The Supervisory Board evaluated the functioning of the Management Board as a whole and each member individually, with preparatory work by the NSR Committee. These evaluations took place without the presence of the Management Board. Based on these evaluations, the Supervisory Board concluded that the Management Board continued to perform effectively and efficiently during the year 2025. In addition, the Management Board conducted its own self‑evaluation, which led to similar conclusions. Remuneration Report Legal Reference The 2025 Remuneration Report is in line with the applicable Dutch legislation (Article 2:135b and Article 2:145(2) of the Dutch Civil Code and the Dutch Corporate Governance Code). The 2025 Remuneration Report will be submitted to the General Meeting of Shareholders for an advisory vote. The advisory vote during the AGM of 2025 on the previous Remuneration Report was overwhelmingly positive, with 100% approval and only 207 votes against. This strong support demonstrates alignment with shareholders' expectations and has been taken into account in preparing the 2025 Remuneration Report. The detailed voting results can be found on the company's website. Summary of the Objectives of the Remuneration Policy The Remuneration Policy for the Management Board and Supervisory Board is crafted to align with CM.com's long-term strategic goals. By offering competitive compensation tied to clear short- and long-term targets, we position ourselves to attract and retain capable directors who can steer CM.com forward as an entrepreneurial entity in a dynamic and challenging market landscape in order to remain at the forefront of innovation. Our Remuneration Policy aims to drive high performance, addressing both financial metrics and personal objectives while rewarding talent in line with market benchmarks suited to CM.com. The core principles of our remuneration strategy are: Attract and Retain Excellence: Provide a reward structure and compensation levels that are competitive with other internationally operating Western European companies of similar size and complexity, enabling CM.com to draw and maintain top talent and highly qualified directors. Cultivate a High-Performance Culture: Foster an environment where Senior Management is keenly focused on achieving business outcomes that align with CM.com's strategy, purpose, and core values. Ensure Fairness and Consistency: Maintain a reward framework that is internally consistent and equitable. Support Strategic and Sustainable Growth: Reinforce the business strategy and promote long-term sustainable value creation for all stakeholders. Adhere to Legal and Social Standards: Ensure compliance with local laws and regulations while remaining attentive to societal expectations. To support the alignment of our Remuneration Policy with our long-term sustainable strategy, the Nomination, Selection, and Remuneration (NSR) Committee regularly reviews and evaluates the remuneration framework for the Management Board, as well as the remuneration of individual Board members. When deemed appropriate, the NSR Committee submits corresponding proposals to the Supervisory Board for approval. For further details of the current Remuneration Report, please refer to the company's website, which includes the policy as approved by 93% of the votes at the General Meeting of Shareholders on April 21, 2022. Remuneration for the Management Board Remuneration Structure The remuneration for the Management Board contains a base salary, an short-term incentive (STI), and an long-term incentive (LTI), which together are referred to as the total direct compensation (TDC). The total remuneration complies with the Remuneration Policy. To support the alignment of our Remuneration Policy with our long-term growth strategy, regular reviews are conducted of the remuneration structure for the Management Board and the remuneration of the individual Board Members. The Company’s LTI principles are laid down in a long-term incentive plan (LTIP), which is an equity-based, pay-for-performance plan aimed at rewarding long-term performance and the delivery of stakeholder value. TDC is composed as follows, denominated as a percentage of the base salary:1 Pay Mix Below threshold At threshold On target Maximum Base Salary 100.00% 100.00% 100.00% 100.00% STI 0.00% 17.50% 35.00% 61.25% LTI 0.00% 20.00% 40.00% 70.00% Traditionally, CM.com focused on fixed remuneration (base salary), resulting in relatively low variable income compared to the market. To address this, the long-term variable component has been adjusted over time, most recently in 2024, when the on-target LTI percentage was raised to 40% in line with the Remuneration Policy approved on April 21, 2022, bringing TDC more in line with market practice. In 2025, CM.com continued on its path toward improved profitability, guided by clear targets to support this goal, in particular through the Short-Term Incentive Plan, which includes challenging performance thresholds and carries the risk of lower variable payouts. Scenario analyses are conducted to assess the potential financial outcomes of both under performance and maximum performance. Various scenarios were discussed during NSR Committee meetings as part of the decision-making process. These analyses, combined with the ambitious targets set in line with our strategic objectives, are considered to be appropriate relative to the potential variable components expressed as percentages above. Base Salary The foundation of our reward strategy is the base salary, which provides our Board members with a guaranteed level of income paid in monthly installments. As noted above, CM.com has traditionally placed primary emphasis on this fixed component. When determining the appropriate base salary adjustments for each Management Board member, we consider, among other factors, the following: Attract and Retain Excellence We aim to reward our Management Board members at the midpoint of the relevant market. For Management Board and Supervisory Board positions, we benchmark against the local reference market using the current constituents of the AScX index of Euronext Amsterdam, CM.com’s listing environment. Looking at the AScX companies, this results in a position of P25, as our average positioning within the AScX based on revenue and market capital is just above the 25th percentile. We are also using the European reference market as a secondary source of information, in line with the ISS best practice guidelines. Within this reference group, CM.com is positioned around the median. Ensure Fairness and Consistency within CM.com Within CM.com, we place great importance on ensuring that salary levels are positioned fairly in relation to those of other employees within the organization. Consistent with our values, differences in salary should be driven by role characteristics (such as responsibility, relevant experience, complexity, and educational requirements) and not by personal characteristics, including age, gender, or ethnic background. For all executive roles, including Management Board members, internal salary positioning is reviewed annually based on the specific requirements of the role. Adjustments are made where necessary and are aligned with the general merit increase process applied throughout the organization. Base salary levels for the Management Board are reviewed annually, using the relevant reference markets described above. For each position, we assess the appropriate placement of the Management Board member relative to the market midpoint for comparable roles. In the local reference market, this corresponds to positioning around the 25th percentile (P25), while in the European reference market positioning is aimed at the median. New salary levels are determined by comparing current salaries with the updated market midpoints, taking into account the general merit increase applied across the organization and, in particular, the adjustments granted to the most senior staff. Base salaries within CM.com are generally targeted between 80% and 120% of the relevant market reference point. For the Management Board specifically, we also aim for Total Direct Compensation (TDC) to fall within 80% to 120% of the market midpoint. Upon the recommendation of the NSR Committee, the Supervisory Board decided to increase the base salary of the CEO and COO by € 13,135 (3%) gross per annum to € 450,975 gross per annum, effective as of 1 January 2025. The base salary of the CFO was increased by € 9,438 (3%) gross per annum to € 324,038 gross per annum, effective as of 1 January 2025. These changes are in line with the increase received by employees with an succesful, based on a merit increase of 3% in September 2024. Short-term Incentive Members of the Management Board are eligible for a cash-based, performance-related STI plan. STI awards are based on achievements against predetermined financial and personal targets, which are set annually by the Supervisory Board prior to the start of the performance period. The on-target STI opportunity for 2025 was set at 35% of base salary, which is consistent with the targeted TDC range of 80% to 120% of the market midpoint. STI payouts are determined based on actual performance between threshold and maximum levels, with awards calculated on a linear basis as follows: Actual performance result Pay-out as % of target Pay-out as % of annual base salary Below threshold 0% 0% Between threshold and on-target Linear between 50% and 100% Linear between 17,5% and 35% On-target performance 100% 35% Between on-target and maximum Linear between 100% and 175% Linear between 35% and 61,25% Maximum 175% 61.25% The financial performance targets (75% of the STI scorecard) are set in advance, with weightings based on on-target performance, and results are adjusted to avoid distortion from unusual or one-off events outside the individual’s control. The STI targets for 2025 are directly derived from the 2025 annual budget, approved by the Supervisory Board on January 22, 2025. The budget does not include any future M&A; therefore, the impact of new M&A will be excluded from actuals. This approach reflects our continued focus on profitability and long-term sustainable value creation. The financial objectives for 2025 are summarized in the table below: STI FY 2025 KPI Weight Score Financials (75%) Gross Profit 20% 40.0% OPEX1 10% 165.6% EBITDA1 25% 62.9% Free cash flow 20% 0.0% Total 53.7% Excluding severance and restructuring costs Following the assessment of the Supervisory Board, and based on the recommendation of the NSR Committee, the overall financial score was 53.7%, reflecting a performance between threshold and on-target for EBITDA, an almost maximum performance for OPEX, and below threshold performance for both Gross profit and Free cash flow, whereby the NSR Committee exercised its discretionary authority with respect to Gross profit. Personal objectives (25% of the STI scorecard) were set by the Supervisory Board in the form of clear and concise personal targets for each Management Board member for 2025, aligned with the following themes: Jeroen van Glabbeek (CEO): Strategic vision and leadership, value creation, specific business objectives, and executive sponsorship of the Pay business unit. Gilbert Gooijers (COO): Business unit operations, value creation sales & marketing, and executive sponsorship of the Live business unit. Jörg de Graaf (CFO): Corporate finance, value creation, specific business objectives, and executive sponsorship of the Engage business unit. The personal targets set for 2025 directly reflect the Supervisory Board’s vision of achieving our long-term ambition of becoming a profitable and sustainable company. These targets are intended to drive long-term sustainable value creation. Following the assessment of the Supervisory Board, and based on the recommendation of the NSR Committee, the personal objectives - representing 25% of the STI scorecard for individual Management Board members - were assessed at 85% for the CEO and 87% for the COO. The CFO did not receive an assessment due to his departure during 2025. While significant progress was initiated across numerous initiatives in 2025, some of these efforts could not yet be brought to completion. This was primarily due to the Management Board’s need to reallocate time and priorities in 2025 in response to evolving market circumstances and other developments. Consequently, less focus could be directed toward individual targets than originally anticipated. Despite the challenges, the achievements realized throughout 2025 are considered highly commendable. The NSR Committee values the dedication and leadership displayed by the Management Board in steering the organization forward Short-term Incentive: Management Board Scorecard STI FY 2025 KPI Weight Score CEO Weighted score CEO Score COO Weighted score COO Score CFO Weighted score CFO Financials (75%) Gross Profit 20% 40.0% 8.0% 40.0% 8.0% n/a n/a OPEX1 10% 165.6% 16.6% 165.6% 16.6% n/a n/a EBITDA1 25% 62.9% 15.7% 62.9% 15.7% n/a n/a Free cash flow 20% 0.0% 0.0% 0.0% 0.0% n/a n/a Non-financial (25%) Personal objectives 25% 85.0% 21.3% 87.0% 21.8% n/a n/a Total 61.5% 62.0% - Excluding severance and restructuring costs Long-term Incentive The LTI plan is designed to link a portion of Management Board remuneration to the company’s long-term sustainable performance and the creation of stakeholder value, thereby aligning the interests of Management Board members with those of shareholders. To achieve this, conditional performance shares are used. The on-target incentive opportunity is determined at the grant date and is set at 40% of annual base salary for all Management Board members. The number of conditional performance shares is calculated based on the average closing share price during the five trading days preceding the grant date. The awards under the LTI are subject to a three-year performance period starting on January 1 of each financial year, and they vest on April 1, following the end of that performance period. The vesting scheme attached to the conditional performance shares is as follows: Actual performance result Vesting as % of target Below threshold 0% Between threshold and on-target Linear between 50% and 100% On-target performance 100% Between on-target and maximum Linear between 100% and 175% Maximum 175% The performance criteria determine the vesting of the awards granted under the 2025 LTI plan, which will vest in 2028. The Supervisory Board believes that these criteria are fully aligned with the company’s long-term objectives and support sustainable value creation. The performance criteria set for the 2025 LTI plan are as follows: Total Shareholder Return (TSR) (weight 25%) is defined as the increase in share price including reinvested dividends. TSR is measured over a three-year performance period, using the three-month average share price before the grant date and the three-month average before the end of the performance period. For 2025–2027, our TSR reference groups align with our benchmarking group. The TSR target compares CM.com’s TSR to that of the European reference market2 used for Management Board benchmarking. The average percentile ranking of CM.com’s TSR relative to this index determines the performance score — with the threshold level set at the median. Cumulative EBITDA (weight 25%) represents the total EBITDA generated by CM.com over the three-year performance period. The average customer health score (weight 20%) reflects multiple aspects of our customer relationships, including customer satisfaction, churn rate, and payment history. These elements are combined into a single overall score. ESG – Gender diversity: female leadership (weight 15%) measures the proportion of women in leadership roles within CM.com. Employee engagement (weight 15%) measures the development of employee engagement and well-being. Vested shares are subject to a mandatory two-year holding period during which participants may not dispose of any shares, except to cover income taxes due upon vesting. This holding period continues to apply after termination of employment. Overview of Achieved Targets 2023 LTI plan The vesting of the performance-based shares for the 2023–2025 performance period will take place on 1 April 2026. The vesting percentage has been determined at 57% of the target, based on the following scores: LTI Plan 2023 - 2025 KPI Weight Score Weighted score Financials (50%) Relative TSR1 25% 0% 0% Average Revenue CAGR 25% 0% 0% Non-financials (50%) Customer satisfaction 20% 175% 35% ESG - Gender diversity: female leadership2 15% 108% 16% Employee engagement 15% 40% 6% Total 57% Compared to European reference market plus local reference market (AScX). % women in leadership roles according to CM.com structure. The relative TSR score, based on the company’s average percentile ranking compared to the reference markets used (the AScX index for the 2023 awards, and the European Peer Group for the 2024 and 2025 awards), was below the threshold. In line with the company’s shift in focus toward profitability, average revenue growth was also below the threshold, as expected. The company is very pleased with the customer satisfaction score and remains committed to maintaining these high levels going forward. The % of women in leadership roles was slightly above the threshold; in line with expectations. The employee engagement score was slightly below the threshold; however, it should be noted that the threshold was set at a relatively high level. Therefore, the NSR Committee exercised its discretionary authority in determining the final score. Please note that the CFO also receives pension benefits and a mobility allowance. This is not reflected in the table, as it has no impact on the STI and the LTI, which are only based on base salary. European reference market includes the following companies: TomTom, Claranova, 74Software, Mensch und Maschine Software, PSI Software, RM, Linedata Services, Vitec Software Group AB, Truecaller, Accesso Technology Group, and Banqup Group. Annualized Target Remuneration This overview presents the annualized target remuneration of the Management Board members for the full 2025 financial year: Position Name Base Salary STI (%) STI (on-target) LTI (%) LTI (on-target) Total Direct Compensation CEO Jeroen van Glabbeek € 450,975 35% € 157,841 40% € 180,390 € 789,206 COO Gilbert Gooijers € 450,975 35% € 157,841 40% € 180,390 € 789,206 CFO Jörg de Graaf € 324,038 35% € 113,413 40% € 129,615 € 567,067 Additional contractual arrangements applicable to the CFO include a monthly mobility allowance of €2,000 and participation in the CM.com DC pension scheme, supplemented by an additional annual premium of €10,000 to compensate for the fiscal cap on pensionable salary (2025: €137,800). Actual Remuneration The overview below shows the contractual remuneration elements paid or payable for the 2025 financial year: Position Name Fixed remuneration Variable remuneration Total remuneration Proportion fixed and variable remuneration Base Salary Fringe benefits Post-employment/ pension benefits One-year variable Multi-year variable1 CEO Jeroen van Glabbeek € 450,975 € 97,115 € 17,082 € 565,172 80% / 20% COO Gilbert Gooijers € 450,975 € 97,904 € 17,082 € 565,961 80% / 20% CFO Jörg de Graaf (until October 31, 2025) € 270,032 € 20,530 € 16,388 € - € 12,147 € 319,096 96% / 4% In 2025, 43.75% of the LTIP granted in 2022 has vested at a market price of € 6.52 per share, resulting in the values as mentioned. Over 2025, no revisions, claw-back actions, or other deductions were applied to the remuneration of any Management Board member. All remuneration was borne by the company, and no severance payments were made to any of the Management Board members. In addition, no remuneration for any Management Board member was charged to any entity other than CM.com Netherlands B.V. during 2025. No variable remuneration was awarded to Jörg de Graaf due to his departure as of October 31, 2025. The actual remuneration was determined in accordance with the Remuneration Policy, and CM.com confirms that no deviations, due to exceptional circumstances, were made from the decision-making process for its implementation or from the Remuneration Policy itself. The overview below shows the employee benefit amounts for the Management Board members, as recognized in the profit or loss statement for the respective financial years. Name, position Year Base salary Social security contribution1 Post-employment/ pension benefits STI in cash LTI Shares/share based payments Other benefits Total Jeroen van Glabbeek, CEO 2025 € 450,975 € 14,627 € 97,115 € 126,603 € 689,320 2024 € 437,840 € 12,993 € 155,203 € 73,905 € 679,941 2023 € 421,000 € 7,224 € 193,305 € 87,266 € 708,795 Gilbert Gooijers, COO 2025 € 450,975 € 14,627 € 97,904 € 126,603 € 690,109 2024 € 437,840 € 12,993 € 153,288 € 73,905 € 678,026 2023 € 421,000 € 7,224 € 193,305 € 87,266 € 708,795 Jörg de Graaf, CFO until October 31, 2025 2025 € 270,032 € 15,350 € 16,388 - (€106,858) € 20,530 € 215,442 2024 € 314,600 € 16,575 € 19,741 € 112,894 € 82,293 € 21,638 € 567,741 2023 € 302,500 € 10,572 € 19,112 € 138,895 € 65,021 € 16,200 € 552,300 Social Security contribution for CFO based on fixed-term contract. Base salary, social security contributions, post-employment and pension benefits, STI in cash, and other benefits are classified as short-term employee benefits, as further detailed in note 21 of the consolidated financial statements. Additional information on the classification and accounting treatment of LTI shares and other share-based payments is provided in note 22 of the consolidated financial statements. Historical Development The overview below presents a five-year comparison of the remuneration of the Management Board members and the company’s performance: 2021 2022 2023 2024 2025 Management Board members' remuneration (in EUR) Jeroen van Glabbeek (CEO) € 486,454 € 549,936 € 708,795 € 679,941 € 689,320 Annual change % 36% 13% 29% -4% 1% Gilbert Gooijers (COO) € 486,454 € 549,632 € 708,795 € 678,026 € 690,109 Annual change % 36% 13% 29% -4% 2% Jörg de Graaf (CFO until October 31, 2025) € 415,659 € 435,988 € 552,300 € 567,741 € 215,442 Annual change % 26% 5% 27% 3% -62% Company Performance: Revenue (in EUR ‘000) € 237,047 € 283,231 € 266,234 € 274,249 € 259,394 Annual change % 67% 19% -6% 3% -5% Average number of employees of CM.com during the year, converted to full-time equivalents (FTE)1 650 880 833 675 648 Annual change % 71% 35% -5% -19% -4% Wages and salaries (in EUR ‘000) € 48,122 € 68,733 € 67,500 € 58,612 € 57,752 Annual change % 71% 43% -2% -13% -1% Average remuneration per FTE (in EUR ‘000) 74 78 81 87 89 Annual change % 0% 6% 4% 7% 3% CEO pay ratio 6.57 7.04 8.74 7.83 7.73 Annual change % 35% 7% 24% -10% -1% As of 2024, interns are excluded from the FTE calculations, ensuring consistent application of this definition throughout the Annual Report. Performance and STI outcomes The overview below presents the performance of the Management Board members during the 2025 financial year and demonstrates how this performance has been translated into remuneration outcomes under the 2025 STI plan. No variable remuneration was awarded to Jörg de Graaf due to his departure as of October 31, 2025. Name, position Type of performance criteria Relative weighting Information on performance targets Actual performance and outcome a) Threshold performance a) On-target performance a) Maximum performance a) Measured performance b) Corresponding awards b) Corresponding awards b) Corresponding awards b) Actual awards outcome Jeroen van Glabbeek, CEO Financial Objectives 75% a) 50% a) 100% a) 175% a) 53.70% b) € 59,190 b) € 118,381 b) € 207,167 b) € 63,573 Personal Objectives 25% a) 50% a) 100% a) 175% a) 85% b) € 19,730 b) € 39,460 b) € 69,056 b) € 33,542 Gilbert Gooijers, COO Financial Objectives 75% a) 50% a) 100% a) 175% a) 53.70% b) € 59,190 b) € 118,381 b) € 207,167 b) € 63,573 Personal Objectives 25% a) 50% a) 100% a) 175% a) 87% b) € 19,730 b) € 39,460 b) € 69,056 b) € 34,331 Details of LTI Plan Grants and Holdings The overview below presents the total number of performance shares granted to the Management Board members under the respective LTI plans, along with the movements and balances for the 2025 financial year. Name, position Performance period Award date Vesting date End of holding period Opening balance Shares awarded Shares vested1 Shares forfeited2 Closing balance3 Subject to holding period4 Jeroen van Glabeek, CEO 2025-2027 01-Apr-25 01-Apr-28 01-Apr-30 - 25,911 - - 25,911 - 2024-2026 01-Apr-24 01-Apr-27 01-Apr-29 25,797 - - - 25,797 - 2023-2025 01-Apr-23 01-Apr-26 01-Apr-28 16,663 - - - 16,663 - 2022-2024 21-Apr-22 01-Apr-25 01-Apr-27 5,988 - 2,620 3,368 0 1,370 2021-2023 01-Jan-21 01-Apr-24 01-Apr-26 - - - - - 1,049 Gilbert Gooijers, COO 2025-2027 01-Apr-25 01-Apr-28 01-Apr-30 0 25,911 - - 25,911 - 2024-2026 01-Apr-24 01-Apr-27 01-Apr-29 25,797 - - - 25,797 - 2023-2025 01-Apr-23 01-Apr-26 01-Apr-28 16,663 - - - 16,663 - 2022-2024 21-Apr-22 01-Apr-25 01-Apr-27 5,988 - 2,620 3,368 - 1,370 2021-2023 01-Jan-21 01-Apr-24 01-Apr-26 - - - - - 1,049 Jörg de Graaf, CFO until October 31, 2025 2025-2027 01-Apr-25 01-Apr-28 01-Apr-30 - 18,618 - 18,618 - - 2024-2026 11-Dec-24 01-Sep-26 01-Jul-29 22,502 - - 22,502 - - 2024-2026 01-Apr-24 01-Apr-27 01-Apr-29 18,536 - - 18,536 - - 2023-2025 01-Apr-23 01-Apr-26 01-Apr-28 11,973 - - 11,973 - - 2022-2024 21-Apr-22 01-Apr-25 01-Apr-27 4,258 - 1,863 2,395 - 973 2021-2023 01-Jan-21 01-Apr-24 01-Apr-26 - - - - - 411 154,165 70,440 7,103 80,760 136,742 6,222 The vesting percentage was 43.75% for the performance shares that vested on April 1, 2025. The unvested shares forfeited when Jörg de Graaf stepped down as CFO as of November 1, 2025. Shares are granted and remain unvested at year-end, as they are subject to performance conditions. The Company sold on behalf of the Management Board members the number of shares needed to cover withholding taxes due upon vesting in 2025. No stock options were awarded to the Management Board in 2025, nor is there an intention to grant stock options in the coming years. In line with the Remuneration Policy, CM.com has not provided any loans, advance payments, or guarantees to the Management Board. The minimum shareholding guidelines set out in the Remuneration Policy (i.e., 1% of annual fixed base salary) have been met. An overview of the number of shares held by the members of the Management Board as of December 31, 2025 can be found in the Shareholder value creation section of this Annual Report. Remuneration for the Supervisory Board Annualized Target Remuneration The remuneration of the Supervisory Board was determined by the General Meeting of Shareholders on May 9, 2025 and is in accordance with the Supervisory Board Remuneration Policy. For 2025, the fees for the Supervisory Board Chair and members were increased by 3%, consistent with the merit increase applied to the overall CM.com employee population in 2024. This overview presents the annualized target remuneration of the Supervisory Board members for the full 2025 financial year: Boards Compensation Supervisory Board Chair Supervisory Board € 52,500 per annum Member Supervisory Board € 37,100 per annum Audit Committee Chair Audit Committee Additional € 7,200 per annum Member Audit Committee Additional € 4,100 per annum Nomination, Selection and Remuneration Committee Chair NSR Committee Additional € 7,200 per annum Member NSR Committee Additional € 4,100 per annum No variable performance-based, equity-based, or pension compensation is provided to members of the Supervisory Board, ensuring that they remain fully independent from the company’s results. In 2025, CM.com did not grant any loans, advances, guarantees, or share acquisition rights to members of the Supervisory Board. Actual Remuneration The overview below presents the contractual remuneration elements paid or payable for the five most recent financial years. Amounts are excluding the compensation for roles in CM Payments B.V. Boards. Name Supervisory Board Audit Committee NSR Committee 2021 2022 2023 2024 2025 Jacques van den Broek1 Chair - Member € 5,624 € 48,169 € 54,000 € 55,000 € 56,600 Mariken Tannemaat Vice-chair - Chair € 25,250 € 42,000 € 42,000 € 43,000 € 44,300 Lex Beins Member Member - € 24,750 € 39,000 € 39,000 € 40,000 € 41,200 Joëlle Frijters Member - - € 5,624 € 35,000 € 35,000 € 36,000 € 37,100 Diederik Karsten Member - Member € 24,750 € 39,000 € 39,000 € 40,000 € 41,200 Stephan Nanninga Member Chair - € 23,188 € 42,000 € 42,000 € 43,000 € 44,300 Martin van Pernis2 Chair - Member € 39,750 € 16,616 € - € - € - David de Buck3 Vice-chair Chair - € 18,938 € - € - € - € - Took over chair position from April 21, 2022. Resigned from the Board per April 21, 2022. Resigned from the Board from September 30, 2021 General Basis of Preparation General basis for preparation of the sustainability statements As of the financial year 2024, CM.com reports under sustainability reporting standards introduced by the EU 1Corporate Sustainability Reporting Directive (CSRD). The sustainability statements of CM.com have been: Prepared in accordance with European Sustainability Reporting Standards (ESRS).2 Prepared on a consolidated basis and includes CM.com N.V. and its subsidiaries (hereafter: CM.com). The scope of consolidation is the same as for the consolidated financial statements. Subject to limited assurance by the external auditor. Within the scope of our double materiality assessment of impacts, risks, and opportunities (IROs), the upstream value chain is defined as tier 1 suppliers and contractors (including co-locations and data centers), while the downstream value chain consists of customers, consumers, and end-users. Our reporting on policies, actions, and/or targets relates to our own operations within our direct sphere of influence. If elements of the upstream and/or downstream value chain are included, this will be indicated and disclosed in these sustainability statements, including disclosures where we rely on estimates and industry standards. Disclosures in relation to specific circumstances Time horizons Unless otherwise indicated, the terms short-, medium- and long-term time horizons used in this Sustainability statements are defined in line with the stipulations set out in ESRS 1. Short-, medium- and long-term time horizons are taken to mean, respectively, one year or less (2026), two to five years (2027 to 2030) and more than five years (2031 and beyond). Incorporation by reference When information is incorporated by reference, the relevant section in the annual report is indicated. The ESRS Content Index also provides a list and description of all ESRS disclosure requirements and a reference to where the information is addressed in this annual report. Critical Accounting Estimations, Assumptions and Judgments In preparing the sustainability statements, management used accounting estimates, assumptions, and judgments that affect the disclosed metrics, the most significant of which are for the company’s GHG emission-related environmental disclosures, the total remuneration ratio, and the performance review participation rate disclosed as part of the social disclosures. As a result, there is inherent uncertainty in our calculations. To keep stakeholders informed and to enhance comparability and understandability, we have indicated when estimates and assumptions were applied and if metrics or amounts are subject to a high level of measurement uncertainty in the disclosures of these metrics in the subsequent sections of these sustainability statements. As sustainability reporting continues to evolve, so do the metrics and methodologies used. This applies to all data included in this report and may lead to revisions or updated interpretations in the future. In our commitment to transparency, we include forward-looking information within our statements to share our future-oriented goals and initiatives. We believe that discussing our plans and anticipated outcomes is essential for addressing issues such as climate change and resource management. However, it is important to note that forward-looking information inherently involves uncertainties and assumptions about future conditions. While we strive to provide the most accurate projections possible, actual results may differ due to factors beyond our control. By clearly stating these uncertainties, we enhance stakeholder understanding and maintain transparency in our sustainability journey. Phase-in provisions used We made use of the following phased-in disclosure requirements in line with ESRS 1 Appendix C: SBM-3 Disclosure requirement 48e (anticipated financial effects); E1-6 Disclosure requirement 51, 53 and 55 (gross Scope 3 GHG emissions, and GHG emissions intensity); E1-9 Disclosure requirement 64-70 (anticipated financial effects); S1-11 Disclosure requirement 72-76 (social protection); S1-13 Disclosure requirement 81-85 (training and skills development metrics, respectively the average number of training hours per employee, by gender); S1-15 Disclosure requirement 93 (work-life balance, for non-NL employees). Council Directive 2022/2464/EC of 14-12-2022 regarding corporate sustainability reporting and amending EU Regulation 537/2014, Directive 2004/109/EC, Directive 2006/43/EC, and Directive 2013/13/EU. As set out in Annex 1 to the Commission Delegated Regulation (EU) 2023/2772 of 31-07-2023 supplementing Directive 2013/34/EU of the European Parliament and of the Council as ameded by Commission Delegated Regulation (EU) 2025/1416 of 11-07-2025 regarding the postponement of the date of application of the disclosure requirements for certain undertakings (Quick Fix). Governance Managementʼs role and responsibilities CM.com installed the CSRD working group, containing expertise from Legal, ESG, Risk and Compliance, and Reporting. Throughout 2025, the working group met regularly to discuss developments and progress related to the CSRD, and related sustainability topics. Members of the working group followed sustainability courses, and attended several sustainability events and webinars. Next to the working group, key process owners on Senior Management level are involved and accountable for all required information on disclosure requirements relevant to their domain. Within CM.com, key process owners are designated to report to the working group. Members of the working group assist these key process owners with the identification of sustainability matters, reporting requirements, and further improving the provided information, resulting in the disclosures in these sustainability statements. The rules of procedure for both the Management Board and the Supervisory Board, as well as the Audit Committee Charter, outline their responsibilities concerning Sustainability Matters. The Management Board is tasked with identifying and managing sustainability matters, respectively material IROs, and has delegated this responsibility to the CFO. Together with the working group, he provides periodic reports to the Management Board and the Audit Committee regarding sustainability, ensuring that the Management Board, Audit Committee, and Supervisory Board are informed and able to bring sustainability matters into their decision-making. The Supervisory Board supervises how the Management Board identifies and manages sustainability matters. This oversight is facilitated by the Audit Committee, which assists in preparing the Supervisory Board's decisions concerning the integrity and quality of the company's financial and sustainability reporting, as well as the effectiveness of its internal risk management and control systems. More specifically, the Audit Committee monitors (i) the financial and sustainability reporting process and drawing up proposals to safeguard the integrity of the process (ii) the identification and management of sustainability matters and issuing advise to the Supervisory Board in that regard (iii) the effectiveness of the internal control systems, the internal audit function and the risk management systems with regard to the company's financial and sustainability reporting. For further details on the performance and frequency of duties, please refer to our Supervisory Board Report. Several members of the Supervisory Board hold positions in Sustainability Committees at companies with years of experience in sustainability reporting and membership in the Dow Jones Sustainability Index. Members with less direct experience have gained knowledge this year, particularly regarding the CSRD, through training such as webinars. The Management Board, Supervisory Board, and Audit Committee are sufficiently qualified to perform their duties for the identification and management of sustainability matters. A broader description of the roles and responsibilities of our Boards, and information regarding their composition and diversity, is available under Governance in our Management Board Report. Integration of sustainability-related performance in incentive schemes CM.com has integrated sustainability-related performance into the incentive schemes of the Management Board and Senior Management. The set targets mostly regard the material social topics: Employee Engagement and Diversity & Inclusion. The Remuneration policy for the Management Board is followed, as established by the General Meeting upon the proposal of the Supervisory Board, based on the advice of the Nomination, Selection and Remuneration (NSR) Committee. The remuneration of our Management Board members is described in our Remuneration Report. Incentives for Senior Management, as described below, are adopted and approved by the Management Board. In the Short-Term Incentive Plan (STIP) for our Management Board, we have included a few personal objectives (non-financial targets). One of the COO's targets is to improve employee engagement by fostering dialogue between leaders and employees. This represents one-third of the organizational development target, which accounts for 10% of the total target. The business unit leadership teams also participate in a Short-Term Incentive Plan designed to incentivize them based on their business unit's performance results. Within this plan, employee engagement in the respective business unit is specified as a key target, carrying a weight of 20%, to underscore its significance. Our Long-Term Incentive Plan (LTIP) applies to our Management Board, our Executive Committee, and specific senior leaders. In LTIP 2025-2027, we have included a clear target on gender diversity concerning female leadership, measured as the percentage of women in leadership roles (on target: 33% women in leadership roles) and another target on overall employee engagement for 2027 (on target: 75). Both targets have a weight of 15% each, so in total 30% of total targets. This again shows the long-term commitment of our management towards these targets. Statement on Due Diligence We acknowledge the significance of performing due diligence on environmental and social impacts, within our value chain. The results of our due diligence process are incorporated in our double materiality assessment. To reflect the main aspects and steps of our undertaken due diligence process, our references to our core elements of due diligence are included in the table below. Core elements of due diligence Paragraphs in the sustainability statements Embedding due diligence in governance, strategy, and business model ESRS 2 GOV-2, GOV-3 ESRS 2 SBM-3 Engaging with affected stakeholders ESRS 2 GOV-2 ESRS 2 SBM-2 ESRS 2 IRO-1 ESRS 2 MDR-P ESRS E1-1 ESRS S1-2 Identifying and assessing negative impacts on people and the environment ESRS 2 SBM-3 ESRS 2 IRO-1 Taking actions to address negative impacts on people and the environment ESRS 2 MDR-A ESRS E1-1, E1-3 ESRS S1-4 Tracking the effectiveness of these efforts ESRS 2 MDR-M, MDR-T ESRS E1-4, E1-5, E1-6, ESRS S1-5, S1-6, S1-9, S1-13, S1-15 Risk Management and Internal Controls Since 2024, CM.com has embedded sustainability in its overall risk management and control framework by translating sustainability IROs in the manner defined under Double materiality assessment (DMA), to fit into our enterprise risk management. The DMA scores are utilized for risk prioritization within the overarching ERM framework, as well as in developing mitigating strategies and controls. We also leveraged our internal control framework for sustainability reporting related risks, relating to relevance, faithful representation, comparability, verifiability, and understandability of disclosed information, based on ESRS 1 (Appendix B). Furthermore, sustainability reporting should align with legislation (e.g., CSRD, ESRS, and EU Taxonomy), even if not (yet) applicable to CM.com. The scope of risk management on sustainability reporting includes all underlying disclosure requirements of these sustainability statements, plus all relevant data from source systems that substantiate the disclosures. The qualitative and quantitative information provided is relevant as of the reporting date and covers the reporting period of the financial year 2025 unless stated otherwise. The company has designed and implemented a system of risk management and internal control relating to sustainability risks. Internal controls were established, building on the diversity of expertise within the working group and the company’s key process owners. This approach supports the identification, assessment and mitigation of the principal risks to the company’s objectives. Governance structures are in place to ensure that the Management Board is actively involved in risk oversight and that the Audit Committee provides independent supervision. Through this governance framework, management is able to continuously monitor the effectiveness of the internal control environment and confirm, in the context of the VOR ("Verklaring Omtrent Risicobeheersing"), that the risk management and control systems provide reasonable assurance regarding the reliability of financial reporting, of which sustainability information forms an integral part. Also, in preparing these sustainability statements, the EFRAG IG 3 List of ESRS Data Points is used to verify and monitor that all disclosure requirements are addressed. We have engaged our independent external auditor, Deloitte Accountants B.V., to provide limited assurance on our sustainability statements. For the assurance report, we refer to the Independent Auditor's Report. The Annual Report of which these sustainability statements form an integrated part is published after approval by the Audit Committee. For further information on these processes and systems, how findings of risk assessment and internal controls are integrated into relevant functions and processes, and on the periodic reporting of findings to the Management Board and Supervisory Board, see Risk Management. Strategy Our business model and value chain In our Management Board report, Our Strategy chapter highlights the core elements of our strategy. Our business model focuses on creating value for our clients by integrating mobile technology into our Engagement Platform. This approach is illustrated in our Value Creation Model, as presented in Our Strategy chapter. To stay aligned with the continuously evolving opportunities in our industry, we chose to adapt our organizational structure. As a result, CM.com has been transformed into an organization built around dedicated business units. Our value chain and potential stakeholders are visually presented on the next page. Topic Interaction with strategy and business model Climate change Our strategy emphasizes leveraging renewable energy and optimizing energy consumption across our own operations and our clients. By integrating AI-based solutions, we enhance efficiency and reduce unnecessary energy use, contributing to lower GHG emissions. Reference is made to the Environmental section for further disclosure on AI versus energy consumption. Power efficiency is crucial for all our solutions, which is why our applications run on state-of-the-art hardware. We remain committed to reducing our total GHG footprint and are exploring innovative approaches to sustainability as part of our strategy through our local presence and one-platform approach. Diversity & Inclusion A diverse and inclusive workforce fuels innovative solutions through varied perspectives and improving problem-solving capabilities. As a global player, our commitment to diversity ensures we understand and meet the needs of our diverse clientele across different regions. It creates a workplace culture where employees feel valued, enhances the organization's reputation and attracts a wider pool of talent. Employee engagement Our workforce is crucial in executing our strategy, contributing to cross-selling, forming partnerships, and developing innovative products. To retain and motivate them, we focus on enhancing engagement and providing the right working conditions. By striving to be the employer of choice, we foster our people's dedication and success, which in turn translates into value for our customers. Training and skills Training and skills development are crucial for maintaining a competitive edge, so employees remain adaptable in a changing market. They are fundamental to our strategy, equipping our workforce to innovate and meet the diverse needs of our global clients. By investing in training, we reaffirm our commitment to quality and strive to be an employer of choice for top talent in the industry by offering career growth opportunities. Privacy & Data Security Success is determined by the trust placed in us. Privacy and data security are therefore central to our operations — both in employee processes and in our privacy-by-design products — ensuring the protection of data belonging to employees, clients, consumers, and end-users. CM.com continuously monitors and adapts to new and evolving privacy, data protection, and cybersecurity regulations to ensure full compliance and maintain stakeholder trust. Business Ethics A strong corporate culture centered on values and business ethics positively impacts our workforce and benefits our reputation and relationships with business partners and stakeholders. Double Materiality Assessment In 2024, CM.com published its first sustainability statements based on the Impact, Risk and Opportunity (IROs) identified through the double materiality assessment (DMA). The Double Materiality Assessment (DMA) - conducted by the CSRD working group - was initiated in 2023, and finalized in 2024. In line with the company’s internal policies, these sustainability IROs, as part of the enterprise risk management framework, were reassessed in 2025. This reassessment included a peer analysis, comparing the 2024 sustainability reports of CM.com’s main competitors by reviewing the material topics disclosed and evaluating any deviations. In addition, the assessment incorporated emerging risks that may affect CM.com as a result of internal and external developments anticipated in 2025. The outcomes of this review were discussed and finalized by the CSRD working group and subsequently shared with the Management Board. Furthermore, there were no material changes in CM.com’s organizational or operational structure during 2025. The same applies to the company’s relevant stakeholder groups, which remained consistent throughout the reporting period. Based on the outcomes of these activities, management concludes that the 2024 materiality assessment remains valid as of December 31, 2025, except that Reliability of our Solutions is no longer considered a material topic in the DMA and will therefore not be included in the 2025 sustainability statements. Following the reassessment, this topic no longer meets the financial materiality threshold and is also no longer material from an impact perspective. No need saying that CM.com continues to maintain high service availability, with pricing, functionality, and innovation being the main drivers of customer satisfaction and retention. Section Material topics 2024 Material topics 2025 Environmental Climate change Climate change Social Diversity & Inclusion Diversity & Inclusion Employee engagement Employee engagement Training and skills development Training and skills development Privacy & Data security Privacy & Data security Governance Business Ethics Business Ethics Reliability of our solutions - At CM.com, our commitment to sustainability is grounded in a rigorous materiality assessment process. In this section, we describe our original processes to identify and assess material IROs. We started with the long list of sustainability matters covered in topical ESRS published by the EFRAG (ESRS 1 - AR 16), which we assessed for potential material IROs throughout our value chain, included below. Relevant stakeholders are identified in the upstream, own operations, downstream, the supporting activities, and the environment we operate in. We considered the operating activities that are carried out in and what financial impact they have. This deep dive into our value chain helps us identify where we can have the greatest impact, ensuring that our sustainability efforts are both meaningful and effective. This assessment was carried out by the working group as a starting point for which potential topics could be relevant for CM.com and is enriched with knowledge of the industry and engagement with our internal and external stakeholders. Our peer analysis has been used to benchmark our practices against industry standards. Interests and views of stakeholders To ensure that our assessment is comprehensive and reflective of the concerns and aspirations of those we serve and work with, we have engaged in extensive dialogue with our internal stakeholders and reached out to external stakeholders via a survey, on which the response rate was limited. In the figure below, we identified the potential stakeholders in our value chain. In deep dive sessions with the key process owners within CM.com, we categorized stakeholders as either an 'affected stakeholder' or 'users of sustainability reporting' and assessed the influence of CM.com on these stakeholders and vice versa. Based on this assessment, we identified relevant stakeholder groups for CM.com with whom we actively engage. We've included an overview of our key stakeholders on the next page, describing how we engage with them, and the purpose of the engagement. Included are the stakeholder groups on which we deem our sustainability impact and vice versa material. Stakeholder engagement entails seeking input and feedback to understand the concerns and the evidence of actual and potential impacts of the company on people and the environment. This helps to substantiate the importance of sustainability matters through the lenses of the affected stakeholder groups or users of the sustainability statements. The views and interests of affected stakeholders concerning sustainability-related impacts are shared with the Management Board and Audit Committee as part of the regular updates. Further learning and continuous interaction with stakeholders might lead to insights that will influence our Double Materiality Assessment in the future. Relevant stakeholder groups How we engage Purpose of the engagement Customers - Regular (customer satisfaction) dialogues, surveys, and questionnaires through sales, marketing, and customer service teams - Tender requests - Customer support via multiple channels - Understanding the needs of our (future) customers - Identifying room for improvement - Increase customer satisfaction - Adapting our solutions to changing customer expectations Employees - Regular check-ins and yearly performance reviews (and career dialogues upon request) - Regular update sessions, per team/department, business unit, or company-wide such as quarterly townhall meetings - Training and development programs - Quarterly employee satisfaction survey - Speak-up program - Company feed where employees can share a contribution - Organize dinners, events and workshops for employees to engage - Attending the Works Council - Improve internal communication and collaboration - Be an employer of choice - Promote diversity and inclusion - Promote career development and skill enhancement to boost CM.com's future performance - Foster a culture in which employees thrive and contribute - Increase employee satisfaction and retention rates - Presented and validated IRO's with Works Council Suppliers - Periodic supplier evaluations, and contract negotiations by procurement - Regular check-ins and (sustainability) requests - Ensure quality and reliability of deliverance - Optimizing costs and efficiency in the supply chain while building sustainable and strategic partnerships - Creating a sustainable future for next generations Investors, Shareholders, Analysts - Annual general meeting and quarterly reports - Regular updates and presentations - Periodic investor calls, meetings and roadshows - Regular engagement with analysts - Inform about financial performance and strategies - Strengthening trust and investor relations - Attracting and retaining capital for growth Local government, Regulatory bodies - Compliance audits and reporting - Formal and informal meetings - Ensuring compliance with laws and regulations - Influence policy and regulatory development - Promoting transparency and accountability Society including educational institutions - Collaborative projects with schools and universities - Community and educational programs and events - Engaging by taking place in panels - One-on-one engagements with interested parties - Media scanning - Supporting education and talent development - Connect with experienced talent - Enhancing social responsibility and reputation Description of the process to identify and assess material IROs Once we had an initial idea of possible material topics to be included in our materiality assessment, we sought input from our key process owners and defined a short list of expected sustainability IROs. The topics on this list are weighed based on impact materiality ('inside-out') and financial materiality ('outside-in'), the so-called double materiality assessment (DMA). The assessment of impact materiality for a negative impact is based on the severity of the impact, whereas for potential negative impacts, it considers both the severity and the likelihood of the impact. Severity is based on scale, scope, and the irremediable character of the impact. Scaled from one to four (minor, moderate, significant, and severe). For positive impacts, materiality is based on scale and scope, and in the case of potential impacts, also the likelihood. Aligning with our enterprise risk framework, scores based on ESRS definitions were translated, whereby sub-scores on the sum of scale, scope, and irremediability were weighted and, if applicable, multiplied by the estimated likelihood. Likelihood is rated using four levels from unlikely to very likely using percentages, based on our knowledge, public information, and historical data as far as presently available. In general, also time horizons are considered in assessing materiality. A sustainability matter is material from a financial perspective if it triggers, or could reasonably be expected to trigger, material financial effects on the company's development, financial position, financial performance, cash flows, access to finance, or cost of capital. Dependency on natural, human, and social resources can be sources of financial risks or opportunities. The assessment of financial materiality for risks and opportunities is based on a combination of the likelihood of occurrence and the potential magnitude of the financial effects, using a threshold. We have chosen to include Gross profit as a benchmark to determine the threshold for financial materiality in our double materiality assessment. It provides a direct and sensitive measure of core business performance, aligns with stakeholder priorities, enables industry comparisons, and highlights the financial impacts of sustainability initiatives. By focusing on Gross profit, CM.com can ensure that materiality assessments are both comprehensive and relevant, effectively linking financial performance with sustainability considerations to support informed decision-making and strategic planning. A risk or opportunity is assessed to be material if the expected financial impact exceeds 2% of the Gross profit realized over the previous reporting year. Based on the above statements, we have scored the likelihood and size on a range of one to four and recorded the outcomes for both the financial and impact materiality as stated below. Where substantial and high scores are deemed material for either impact materiality or financial materiality, aligned with our enterprise risk framework (ERM). Very likely 4 Moderate Substantial High High Likely 3 Moderate Substantial Substantial High Possible 2 Low Moderate Substantial High Unlikely 1 Low Low Moderate High 1 2 3 4 Minor / Low Moderate / Moderate Significant / Substantial Severe / High Disclosure requirements covered by the sustainability statements The material topics, as well as more detailed descriptions of their associated IROs, are presented in the next sections, respectively Environmental, Social, and Governance. All material topics are disclosed in accordance with the Minimum Disclosure Requirements (MDR). The table presents the link between the material topics and one or more sustainability matters as identified by the ESRS. Material topics Includes ESRS sustainability matter(s) Climate change Energy (ESRS-E1) Climate change mitigation (ESRS-E1) Diversity & Inclusion Diversity (ESRS-S1) Gender equality and equal pay for work of equal value (ESRS-S1) Employee engagement Work-life balance (ESRS-S1) Social protection (ESRS-S1) Training and skills development Training and skills development (ESRS-S1) Privacy & Data security Privacy (ESRS-S1&S4) Business Ethics Corporate culture (ESRS-G1) Corruption and bribery (ESRS-G1) Protection of whistle-blowers (ESRS-G1) A description of ESRS disclosure requirements is included in the ESRS Content Index. If the MDR are not met, when policies and/or actions are not adopted or no measurable outcome-oriented targets are set it is explained in the ESRS Content Index. Similarly, a list of data points derived from other EU legislation is provided, offering an overview of the relevant information. Environmental Material Environmental Impacts, Risks and Opportunities Material topic Impacts, risks and opportunities Value chain Time horizon Description Climate change Negative impact Upstream Own operations Downstream Short, medium and long-term Our business activities have a negative environmental impact due to GHG emissions (including energy consumption) associated with our own operations and those of our suppliers, who deliver goods or render services to us, and downstream sales of POS terminals. These emissions contribute to global climate change, which results in widely known environmental impacts and indirectly people's well-being and safety. We strive to substantially reduce our GHG emissions, in accordance with the 1.5⁰ C path set out in the Paris Agreement.1 Transitional Risk (Policy & Legal) Upstream Own operations Downstream Medium and long-term The transition to a low-carbon economy may impose stricter CO2 reduction regulations, increasing compliance costs and investment needs. CM.com risks not meeting these legal obligations, potentially leading to reputational damage and loss of customer, and/or investor trust, and challenges in attracting top talent. We need to demonstrate our commitment to sustainability, or suppliers, clients, and potential talent may be less inclined to engage with us. The Paris Agreement is an international treaty on climate change, as adopted by 196 parties (including the European Union on behalf of amongst others, the Netherlands) at the UN Climate Change Conference (COP21) in Paris, France, on 12 December 2015. The Paris Agreement entered into force on 4 November 2016 and as further elaborated in the Dutch Klimaatakkoord, as adopted on July 2, 2019. Climate Change At CM.com, sustainability is an integral part of our identity and operations. As an innovative player in digital communications, our technologies, products, and services empower individuals to be better informed, more conscious, connected, and in control of their lives. We recognize that our business activities have an environmental impact through the greenhouse gas (GHG) emissions generated by our operations and our broader value chain. Our primary sources of GHG emissions include purchased goods and services (such as SMS and voice traffic, public cloud services, and POS terminals), business travel, employee commuting, and the energy consumption associated with our offices and data center co-locations. Due to the nature of our business model and asset base, as well as our use of renewable energy - our headquarters are fully powered by green electricity and operate as GHG-emission neutral - our actual impact within Scope 1 and Scope 2 emissions remains relatively limited. This assessment is supported by the results of our Carbon Footprint Measurement. In anticipation of potential changes in EU sustainability reporting requirements under the Omnibus package, including those expected to become applicable to the company, and in light of the flexibilities provided, the phase-in provisions have been applied and Scope 3 greenhouse gas emissions are therefore no longer disclosed for the 2025 reporting year. Although our direct impact is relatively small, these emissions still contribute to global climate change, which in turn causes well-known environmental consequences and indirectly affects people’s well-being and safety. Failing to meet the expectations of our stakeholders could lead to loss of business opportunities and challenges in attracting and retaining top talent in the short to medium term. We therefore identify this as a climate-related transition risk. Effectively managing our GHG emissions strengthens our position as an attractive business partner and employer, and helps secure long-term access to the labor market. CM.com acknowledges its responsibility to take meaningful action to help mitigate climate change. We strive to reduce our GHG emissions and, where necessary, applying credible compensation measures, in alignment with the Paris Agreement’s 1.5°C pathway. Climate Scenario Analysis and Risk Assessment Assessing material climate-related risks and opportunities requires the analysis of both physical and transition risks, including current and emerging regulatory requirements. We evaluate these risks and opportunities using our established risk methodology and governance processes, supported by qualitative scenario analysis. At this stage, only qualitative information is disclosed; no estimated or anticipated financial effects of material physical or transition risks are reported. The process for identifying, assessing, and managing climate-related risks and opportunities is fully integrated into our overall risk management process. Climate-related considerations are assessed alongside other business risks within our enterprise risk framework, facilitated by our Risk Management and Compliance team. In 2025, responsibility for climate-related risks was assigned to our ESG Manager, who provides oversight and active support in managing these risks. The Risk and Compliance team employs a risk dashboard to assess climate-related and other business risks, providing updates and validation to the Management Board as part of our In Control Statement. As no significant changes occurred in our business model, risk profile, or external context during the reporting year, it was not necessary to repeat the resilience analysis in 2025. Complementing our initial Double Materiality Assessment, we conducted a business resilience analysis in 2024 to identify, understand, and manage the transition and physical risks and opportunities associated with our own operations and data center co-locations in the context of climate change. This analysis evaluated the company’s ability to adapt to regulatory developments, market fluctuations, and emerging threats while maintaining customer trust and operational efficiency. In doing so, we considered the recommendations of the Task Force on Climate-Related Financial Disclosures (TCFD). To support this assessment, we conducted a climate scenario analysis using two scenarios from the Intergovernmental Panel on Climate Change (IPCC), explained below. These scenarios were used to evaluate the potential impacts of physical climate-related hazards and transition risks and opportunities across short-, medium-, and long-term time horizons. A high-emission scenario was considered for physical risks, focusing on mid- and long-term timeframes. Under this scenario, assuming no significant mitigation efforts, global temperatures could rise by approximately 4°C above pre-industrial levels by 2100. To analyze the regions where CM.com and its data center co-locations operate, we used data from Copernicus and KNMI Climate Scenarios. Climate risks from extreme weather, temperature rise, sea level rise, heat stress, and cold waves/frost are not deemed significant for CM.com up to 2050, as it operates with relatively low investment in physical assets. Our assets include our headquarters in Breda, rented office space, and data center co-locations. For our assessment, we focused on offices covering 90% of employees and significant co-locations, both with a lifespan of over 10 years. To assess transition risks, we considered the IPCC's RCP 1.9 scenario aiming to limit global warming below 1.5°C by 2050. Under this scenario, CM.com anticipates a widespread shift to renewable energy sources and continued improvements in energy efficiency worldwide. Anticipated environmental regulations and policies are expected to tighten globally, accelerating the transition to environmentally friendly and low-carbon technologies. As a result, changing customer preferences towards more sustainable products and services may make the existing services of CM.com less attractive and we risk reputation damage if CM.com cannot demonstrate an active contribution to sustainable development, e.g., by reducing emissions from its own operations and value chain. Additionally, the transition to a low-carbon economy may lead to stricter regulations, particularly concerning CO2 reduction, which may lead to increased investments and costs for compliance. This transition risk (policy & legal) is assessed as material for medium- and long-term and relates to both own operations as the value chain, based on potential size and likelihood. Climate Change Our Approach and Policies: How We Manage Our Impact CM.com has implemented an overarching Environmental, Social, and Governance (ESG) Policy that addresses sustainability in a broad sense. In 2025, an additional Environmental Policy1 was initiated to specifically address climate change. In addition to measuring our Scope 1 and Scope 2 GHG emissions, we have adopted an ISO 14001-certified Environmental Management System (EMS) as of 2024 to effectively identify, manage, and mitigate environmental risks. The EMS provides a structured framework that helps us reduce environmental impacts, ensure legal compliance, achieve our sustainability objectives, identify and address environmental risks, and drive continual improvement. Throughout 2025, our ESG Manager - who reports to the CFO and works closely with topic owners across housing, fleet, travel, IT, procurement, and talent - contributed to the further development and implementation of our sustainability strategy. Sustainability is also a recurring topic on the agendas of both the Management Board and the Supervisory Board and is discussed regularly in Audit Committee meetings. Actions CM.com is committed to supporting the goals of the Paris Agreement and aims to contribute to the global transition needed to mitigate the impacts of climate change. We work to minimize our environmental footprint across both our own operations and our broader value chain. As part of our efforts to address climate change, CM.com purchases renewable energy for its headquarters. In 2024, we also invested in 66 solar panels to generate sustainable energy on the roof of our headquarters. The main actions taken during 2025 to reduce Scope 1 and 2 emissions focused on the increased use of renewable electricity, the reduction of fossil fuel consumption, and improvements in energy efficiency. Our electricity providers for office locations are transitioning to renewable energy sources and, for our most impactful offices, renewable electricity is already being utilized. Where feasible, we plan to switch the remaining offices to renewable electricity contracts. In 2025, we made further progress in this area: our office in London (UK) is now fully heated electrically, with no gas usage, and operates on renewable electricity. In addition, our office in Denmark is now fully supplied with renewable energy. In parallel, CM.com aims to avoid acquiring or leasing new fossil fuel vehicles. During 2025, no new lease cars were added and only existing leases were renewed. Finally, we aim to implement measures to improve energy efficiency and reduce Scope 1 and 2 emissions. When equipment is replaced, priority is given to the purchase and installation of energy-efficient devices. The results of this positive contribution to renewable energy production are presented in the table under Results. AI-First company versus energy consumption Responsible AI deployment enables us to innovate for our customers, strengthen efficiency, and enhance our competitiveness. CM.com continues to expand its portfolio of customer-facing AI solutions - such as the generative AI platform HALO and AI voice agents - positioning the company as a frontrunner in intelligent communication technologies. By enabling more efficient digital interactions and reducing the need for resource-intensive processes—such as physical travel or manual communication workflows - these innovative technologies also contribute to reducing the carbon footprint across the supply chain. As demand for our AI-integrated products continues to grow, we remain committed to embedding sustainability into our journey toward becoming an AI-First company. We recognize that energy consumption is a central topic within the global AI landscape, particularly for organizations conducting extensive model pretraining. CM.com does not perform large-scale pretraining of AI models. Instead, we efficiently finetune Open Weights models and use closed-source models such as Azure OpenAI, Google Gemini, and Anthropic Claude, thereby reusing the substantial computational efforts already undertaken by major AI developers such as Meta. Our AI-related workloads predominantly consist of inference and finetuning. Inference involves using a trained AI model to make predictions or decisions based on new, unseen data. Finetuning refers to optimizing an existing pre-trained model for a specific task or dataset to enhance its performance. For both processes, we use state-of-the-art hardware (GPUs) selected for their energy efficiency, helping us minimize power consumption while maximizing production capacity. GHG emissions associated with our use of public cloud infrastructure are limited, as our major cloud providers operate on renewable electricity. We continue to integrate ESG principles into our supplier management processes - for example, by evaluating suppliers’ sustainability practices, ethical AI development standards, and data governance frameworks. These considerations form an important part of our assessments, although they are weighed alongside essential AI-specific criteria such as technical performance, model accuracy, pricing structure, and innovation capability. Outlook We are committed to measuring the impact and effectiveness of our intended measures annually as part of these sustainability statements. We are still in the process of further formalizing target setting for reducing GHG emissions, including proposed short-, medium-, and long-term targets. Please note that this policy is pending Management Board approval as per the signing date of the sustainability statements. Results Energy Consumption and Mix CM.com's energy consumption originates from the electricity usage in offices, the fuel and electricity usage of leased cars, and limited gas usage for heating offices. The total usage mainly originates from renewable energy, whereby the overall decrease is resulting from the overall lower energy usage of our offices and fewer leased cars. Energy produced and consumed from self-generated non-fuel renewable energy by CM.com relates to the installed solar panels at our CM Campus. Energy consumption and production in MWh 2025 2024 2023 Δ 2025 to 2023 Total energy consumption 2,565 2,641 2,974 (14%) Consumption from fossil energy 538 7301 1,047 (49%) Share in total of energy consumption 21% 28% 35% Consumption from nuclear sources 80 651 67 19% Share in total of energy consumption 3% 2% 2% Consumption from renewable energy 1,947 1,8461 1,860 5% Share in total of energy consumption 76% 70% 63% Of which Fuel consumption from renewable sources - - Electricity, heat, steam, and cooling from renewable sources 1,893 1,729 1,860 2% Consumption of self-generated non-fuel renewable energy 54 47 - Energy production Renewable energy production 54 48 - Non-renewable energy production - - - Based on new information acquired on our spain locations we have reclassified their usage from fossil and nuclear to renewable, as the locations use 100% green energy. The total energy usages has remained unchanged. Methodologies Used and Assumptions The total energy consumption is based upon the identical boundaries and inputs used for the scope one and two calculations, as presented in the next section. Following this, identical assumptions and extrapolations apply. First, the petrol and diesel consumption (in liters) was converted into MWh consumption based upon the lowerering heating values of Petrol (E10) and Diesel (B7) following the GLEC framework V3. Related to electricity consumption, all green electricity purchased is classified as 100% renewable. CM.com adopts a conservative approach in line with ESRS Disclosure Requirement E1-5 AR 32 j, whereby CM.com only considers these energy consumptions as deriving from renewable sources if the origin of the purchased energy is clearly defined in the contractual arrangements with its suppliers. For calculations, all other facilities with unknown energy sources use the electricity mix of their respective countries. This data is broken down into categories of renewable, nuclear, and non-renewable energy, based on EMBER 2024 information. Greenhouse Gas (GHG) Emissions CM.com's carbon footprint for 2025 (scope 1 and 2) shows a decrease versus 2023 (base year). This saving is the result of fewer office locations, a smaller and more sustainable fleet, and a decreasing and renewable energy consumption in foreign offices. Overall, this leads to a lower energy consumption, as presented in the previous section, resulting in lower GHG emissions. As a result, both scope 2 location-based and market-based emissions have decreased in 2025 compared to 2024. GHG emissions in tCO₂e 2025 2024 2023 Δ 2025 to 2023 Scope 1 GHG emissions Gross scope 1 GHG emissions 78 76 127 (39%) % from regulated emission trading schemes - - - Scope 2 GHG emissions Gross scope 2 GHG emissions, location-based 588 662 725 (19%) Gross scope 2 GHG emissions, market-based 193 212 243 (21%) Total GHG emissions (location-based) 666 738 852 (22%) Total GHG emissions (market-based) 271 288 370 (27%) Methodologies Used and Assumptions In this section, we elaborate on the methodologies used and assumptions applied. CM.com accounts for all scope one and two emissions from its operations. The scope of the total GHG emissions is based on the operational control approach following the financial consolidation, as disclosed in note 27 Group structure of the consolidated financial statements. Scope one direct GHG emissions from owned or controlled sources mainly relate to fuel consumption for our vehicles and some gas usage for heating a limited number of external office facilities. Given that our business minimally uses refrigerants, their impact on our environmental footprint is minor. Our analysis shows that refrigerants are immaterial to our operations, existing only in office installations. In the last 3 years, there were no refills in the Netherlands, as confirmed by our facilities manager. These facilities represent 72% of our locations, based on the number of FTEs at the end of the reporting period. Scope two indirect GHG emissions are from energy purchased and consumed by the company. These emissions occur outside the organization but are a consequence of our electricity consumption for vehicles and facilities. Our headquarters in Breda, Netherlands, which accounts for 59,2% (2023: 58,4%) of the total energy usage of all facilities, purchases exclusively green Dutch wind electricity. Next to this, four other offices purchase green electricity. For our other offices, grey electricity is assumed. Scope two emissions are presented as location-based emissions (average emissions intensity of grids where energy consumption occurs using region-specific average emission factors) and market-based emissions (based on contractual energy purchases (e.g., specific suppliers or products) considering renewable energy certificates (RECs) and similar instruments). For both scope one and two GHG emissions, we have used the actual usage for the period from January 2025 up to and including November 2025, and extrapolated the usage for the last month. This approach assumes the usage of December 2025 is equal to the average monthly consumption rate of the eleven other months during the year. In some smaller locations, where actual usage for 2025 was not yet available, we used 2024 actual usage as a proxy. This was the case for approximately 20% of the Scope two GHG emissions. If no actual usage data were available, we used the square meters rented and the local market average GHG emissions as a proxy. GHG Intensity GHG intensity per € million revenue 2025 2024 Δ Total GHG emissions (location-based) in tCO₂ 666 738 (10%) Total GHG emissions (market-based) in tCO₂ 271 288 (6%) Revenue (in € millions) 259.4 274.2 (5%) GHG intensity (location-based, per € million revenue)1 2.57 2.69 (4%) GHG intensity (market-based, per € million revenue) 1.04 1.05 (1%) GHG intensity is calculated as total GHG emissions (market- and location-based) divided by revenue (in millions) of the reporting period as presented in our consolidated financial statements. Emissions in this table include scope one and scope two GHG emissions only, whereas in the prior period, we also reported scope three emissions. EU Taxonomy Report In accordance with the EU Taxonomy Disclosure Requirements and following the publication of the amended reporting options in the Official Journal of the European Union, the company has applied the existing (pre-amendment) EU Taxonomy reporting rules when reporting on the 2025 financial year. This choice is made in line with the transitional provisions, which allow reporting undertakings to apply either the existing or the amended disclosure requirements for the 2025 reporting period. The EU Taxonomy is one of the cornerstones of the Green Deal, the EU’s strategy to become the first climate-neutral continent by 2050. Redirecting capital flows toward sustainable investments and increasing transparency are central to achieving this goal. For this purpose, the European Commission (EC) developed a classification system for sustainable activities called the EU Taxonomy. The EU Taxonomy provides investors with a common language for identifying sustainable economic activities. Under the EU Taxonomy, companies must disclose the proportion of their turnover, capital expenditure, and operational expenditure that meets the criteria outlined in the EU Taxonomy and provide both investors and other stakeholders with transparent information to enable them to make informed investment decisions. The EU Taxonomy identifies the following six environmental objectives: Climate change mitigation (CCM). Climate change adaptation (CCA). The sustainable use and protection of water and marine resources. The transition to a circular economy. Pollution prevention and control. The protection and restoration of biodiversity and ecosystems. As of December 31, 2024, CM.com is required to disclose its taxonomy-eligible activities1 and taxonomy-aligned activities2 in terms of the six environmental objectives. Eligibility indicates that an activity is in scope for screening under the taxonomy regulation. Once an activity is assessed to be eligible against the EU Taxonomy, this activity is assessed for alignment. For an economic activity to be classified as aligned, it will have to adhere to the following requirements: Compliance against the identified Technical Screening Criteria (TSC). Meet the requirements of the Do Not Significantly Harm (DNSH) criteria. Compliance against the Minimum Social Safeguard (MSS) criteria. CM.com has performed its asessments in accordance with the EU Taxonomy Disclosure delegated act and environmental act. 2025 EU Taxonomy Eligibility Assessment In 2025, CM.com carried out an eligibility assessment of its four primary activities related to the designated business units Connect, Engage, Pay, and Live against the six environmental objectives. This assessment of taxonomy-eligibility is based on the specific description of the respective activities provided in the Climate Delegated Act. Based on this assessment, we concluded that the economic activities carried out in our four designated business units can all be mapped under activity 8.2 computer programming, consultancy, and related services. This activity is mapped as an adaptation activity under Climate Change Adaptation (CCA) and as such the related turnover cannot qualify as eligible. Corresponding Operating Expenditures (OPEX) and Capital Expenditures (CAPEX) can qualify as eligible activities when certain requirements are met. For this adaptation activity (8.2), we need to demonstrate that a climate risk and vulnerability assessment has been performed and that an expenditure plan has been set up to implement adaptation solutions that reduce our activities' most significant physical climate risks. Only if these requirements are fulfilled, we can count the related CAPEX and OPEX of the adaptation activity for taxonomy-eligibility. However, it is important to note that due to the nature of these activities as adaptation activities, the turnover is not eligible under the EU Taxonomy. In 2024, CM.com updated and expanded the comprehensive Climate Risk and Vulnerability Assessment conducted in 2023, incorporating the latest developments and emerging insights. This updated analysis, in which existing and additional new sources (e.g. Copernicus interactive Atlas tool) were used, builds upon the previous assessment, identifying potential new risks and opportunities arising from evolving climate conditions and market demands. Our investigation objects, including offices and co-locations, were reassessed with a long-term perspective aligned with other CSRD paragraphs, maintaining a projected lifetime of over 10 years, and thus considering future IPCC climate scenarios. This ongoing evaluation highlights our commitment to ensuring that our adaptation strategies remain robust and sustainable, addressing both current and future environmental challenges. As no significant changes occurred in our business model, risk profile, or external context during the reporting year, it was not necessary to repeat this resilience assessment in 2025. Our analysis covered all physical climate risks as categorized by the EU Taxonomy, including temperature-related, wind-related, water-related, and solid mass-related risks. For temperature-related risks, we looked into the potential impact of, among others, extreme heat and cold on our infrastructure and the efficiency of our cooling and heating systems. In terms of wind-related risks, we evaluated, among others, the structural integrity of our buildings and facilities in the face of strong winds and storms. The assessment also delved into water-related risks, focusing on aspects such as the potential effects of flooding, heavy rainfall, and rising sea levels on our operations. This part of the analysis was particularly relevant for our locations near coastlines or in flood-prone areas. For solid mass-related risks, we considered issues like land subsidence and the stability of the ground on which our buildings are situated. Reference is made to the in-depth analysis under section Climate Scenario Analysis and Risk Assessment. Throughout this extensive assessment, we utilized climate projections, including insights from the KNMI report, with a special focus on scenarios relevant to the Netherlands. This enabled us to create a comprehensive understanding of various potential climate scenarios and their likely impact on our operations. Based on these insights, we are now better positioned, as we have developed and implemented effective adaptation strategies that mitigate these identified physical climate risks. Turnover The KPI related to turnover is calculated in accordance with Article 8 of the EU Taxonomy Regulation. The numerator of each business unit was compiled by taking the total eligible turnover for that business unit for 2025. The total denominator equals the total turnover combined for all the different business units, as stated in note 4 Revenue recognition and segment reporting of the consolidated financial statements. Following the outcome of the eligibility assessment for 2025, the turnover is not eligible as it is derived from activity 8.2 computer programming, consultancy, and related services which concerns an adaptation activity in the EU Taxonomy. Hence, the related turnover associated with eligible activities is 0%. CAPEX The KPI related to CAPEX has been compiled in accordance with Article 8 of the EU Taxonomy Regulation for 2025. The numerator is compiled by taking the total eligible CAPEX for 2025. This is the CAPEX that directly relates to our taxonomy-eligible economic activities, being those linked to '8.2 computer programming, consultancy, and related services'. For CAPEX, the total denominator amounts to € 16.5 million and equals total CAPEX including the additions as set out in the movement schedules of note 5 Intangible assets, note 7 Property, plant and equipment, and note 8 Right-of-use assets of the consolidated financial statements. As the total CAPEX in the scope of the EU taxonomy is directly associated with taxonomy-eligible activities, respectively 8.2 ' Computer programming, consultancy, and related activities, related CAPEX associated with eligible activities is 100%. In total, 100% of CM.com’s CAPEX in 2025 is deemed to be eligible for the EU Taxonomy, of which 0% is aligned. OPEX The KPI related to OPEX has been compiled in accordance with Article 8 of the Taxonomy Regulation for 2025. The numerator is compiled by taking the total eligible OPEX for 2025. This is the OPEX that directly relates to our taxonomy-eligible economic activities, being those linked to '8.2 computer programming, consultancy, and related services'. For OPEX, the total denominator amounts to € 12.2 million and includes the non-capitalized costs relating to R&D, IT maintenance and repair expenses, and immaterial other expenses, part of note 21 Employee benefits and note 23 Other operating expenses of the consolidated financial statements. As the total OPEX in the scope of the EU taxonomy is directly associated with taxonomy-eligible activities, respectively 8.2 ' Computer programming, consultancy, and related activities, related OPEX associated with eligible activities is 100%. In total, 19% of CM.com’s OPEX in 2025 is deemed to be eligible for the EU Taxonomy, of which 0% is aligned. FY 2025 Alignment Assessment of the EU Taxonomy Only once an activity is deemed to be eligible against the EU Taxonomy can it be assessed for alignment. For an economic activity to be classified as aligned, it must do the following (as set out in the EU Taxonomy Regulations): Comply with the identified TSC activities. Meet the requirements of the Do No Significant Harm (DNSH) criteria. Comply with the Minimum Social Safeguard (MSS) criteria. CM.com has put significant effort into conducting a Climate Risk and Vulnerability Assessment in previous years, assessing compliance with the other TSC activities, and conducting an analysis on adherence to the Minimum Social Safeguard (MSS) criteria preliminarily resulting in alignment for its identified eligible activities. In 2025, CM.com had planned to further refine and deepen the assessments underlying the alignment of its economic activities with the applicable EU taxonomy requirements. However, this process has been deferred, as additional evaluation is required before determining the appropriate timeline. As stated above, CM.com set its alignment percentage at 0% as the criteria are not met. Taxonomy-eligible economic activity means an economic activity that is described in the delegated acts adopted pursuant to Article 10(3), Article 11(3), Article 12(2), Article 13(2), Article 14(2), and Article 15(2), of Regulation (EU) 2020/852, irrespective of whether that economic activity meets any or all of the technical screening criteria laid down in those delegated acts. Taxonomy-aligned economic activity means an economic activity that complies with the requirements laid down in Article 3 of Regulation (EU) 2020/852. EU-Taxonomy Nuclear and Gas Table This section presents the Taxonomy Table for Nuclear and Gas as outlined in the Complementary Climate Delegated Act. The table categorizes and evaluates the environmentally sustainable activities associated with nuclear and natural gas energy sectors. It provides a framework for recognizing eligible investments and practices that contribute to the transition towards a low-carbon economy. The table aims to guide stakeholders in identifying activities that align with the European Union's climate and energy objectives, ensuring transparency and consistency in sustainable finance practices. Nuclear and fossil gas related activities Nuclear energy related activities: 1 CM.com carries out, funds or has exposures to research, development, demonstration and deployment of innovative electricity generation facilities that produce energy from nuclear processes with minimal waste from the fuel cycle. NO 2 CM.com carries out, funds or has exposures to construction and safe operation of new nuclear installations to produce electricity or process heat, including for the purposes of district heating or industrial processes such as hydrogen production, as well as their safety upgrades, using best available technologies. NO 3 CM.com carries out, funds or has exposures to safe operation of existing nuclear installations that produce electricity or process heat, including for the purposes of district heating or industrial processes such as hydrogen production from nuclear energy, as well as their safety upgrades. NO Fossil gas related activities: 4 CM.com carries out, funds or has exposures to construction or operation of electricity generation facilities that produce electricity using fossil gaseous fuels. NO 5 CM.com carries out, funds or has exposures to construction, refurbishment, and operation of combined heat/cool and power generation facilities using fossil gaseous fuels. NO 6 CM.com carries out, funds or has exposures to construction, refurbishment and operation of heat generation facilities that produce heat/cool using fossil gaseous fuels. NO Social Impacts Material Social Impacts, Risks and Opportunities Material topic IRO Value chain Time horizon Description Diversity & Inclusion Positive impact Own operations Short, medium and long-term Embracing diversity within our workforce is essential for fostering innovation and enhancing performance. A diverse team brings varied perspectives and ideas, driving innovation. By prioritizing inclusivity and equality for all employees (regardless of gender (identity), age, ethnic background, religion, and sexual orientation), we aim to create a workplace where every employee knows he or she is valued and respected. Employee engagement Positive impact, opportunity Own operations Short, medium and long-term Engaged employees are more productive, innovative, and committed to their work. High levels of engagement lead to higher talent retention, better talent attraction, higher employee satisfaction, and improved performance. Negative impact, risk Own operations Short, medium and long-term Failing to provide flexible and healthy working conditions negatively impacts the well-being of our workforce and can result in higher levels of employee absence and will negatively impact performance and innovative thinking. Training and skills development Positive impact Own operations Short, medium and long-term Continuous learning and development are crucial for personal and professional growth. Providing our employees with opportunities to enhance their skills boosts their well-being and job satisfaction, and ensures that our company remains competitive and adaptable. By prioritizing skills development, we empower our employees to reach their full potential and drive our company’s success. Risk Own operations Short, medium and long-term The risk related to not investing in training is a workforce that may become stagnant and less capable of meeting future challenges. Privacy & Data security Negative impact, risk Own operations Downstream Short, medium and long-term Protecting the privacy of our employees, clients, and end-users is paramount. Data privacy incidents can have severe repercussions, including loss of trust and legal consequences. We are committed to safeguarding personal data and ensuring compliance with all relevant regulations. Maintaining robust privacy practices protects sensitive information and upholds our reputation as a trustworthy and responsible organization. By focusing on Diversity & Inclusion, Employee engagement, Training and skills development, and Privacy & Data security, we aim to create and maintain a thriving, innovative, and resilient workforce. These efforts enhance our company’s performance and help us pursue our goal to stay at the forefront of innovation while contributing positively to our workforce and, therefore, to the future of our company. Own Workforce Characteristics of Our Employees The characteristics of our employees are sourced from information available in our human resource platform, as registered via our employee administration system. No estimates are applied when reporting on the characteristics of our employees. Headcount is reported as the number of employees at the end of the reporting period. Interns with the primary intention of learning on the job and gathering knowledge and experience are not considered employees in the sustainability statements. Reference is made to note 21. Employee Benefits of the financial statements, where the average number of employees of CM.com during the year is converted to full-time equivalents (FTEs). A split has been made by region based on the location of the legal entity in which the employee is employed. Apart from the Netherlands, there are no other countries where CM.com has more than 50 employees or represents at least 10% of its total number of employees. Upon joining our company, employees are in most cases offered a temporary contract that can be converted to a permanent position after a specified period. Our Principles for Integrity and Responsibility (hereafter: Code of Conduct) applies to all employees, contractors, and agency workers (hereafter: workforce). The Code of Conduct provides clear guidelines on how we expect our workforce to conduct their work with integrity and in alignment with our core values. They contain provisions on many areas relevant to our social impacts, such as fair treatment and diversity, a safe working environment, and how to find support. Headcount by contract type and region, broken down by gender per 31 December 2025: Female Male Not disclosed Total % % female The Netherlands 135 341 - 476 74% 28% Permanent employees 110 298 - 408 86% 27% Temporary employees 25 43 - 68 14% 37% Non-guaranteed hours employees - - - - - - Rest of the world 55 115 - 170 26% 32% Permanent employees 41 95 - 136 80% 30% Temporary employees 14 20 - 34 20% 41% Non-guaranteed hours employees - - - - - Total headcount per 31 December 2025 190 456 - 646 100% 29% Headcount by contract type and region, broken down by gender per 31 December 2024: Female Male Not disclosed Total % % female The Netherlands 140 383 - 523 74% 27% Permanent employees 112 323 - 435 83% 26% Temporary employees 28 60 - 88 17% 32% Non-guaranteed hours employees - - - - - - Rest of the world 57 125 - 182 26% 31% Permanent employees 44 108 - 152 84% 29% Temporary employees 13 17 - 30 16% 43% Non-guaranteed hours employees - - - - - Total headcount per 31 December 2024 197 508 - 705 100% 28% Retention The employee turnover rate is calculated as the number of employees (on a temporary or permanent contract) who have left the company relative to the number of employees at the end of the reporting period. 2025 2024 Employees who left the company in the reporting period 144 155 % of total employee turnover 22% 22% As of December 31, 2025, CM.com employed 646 own employees (705 in 2024) and engaged 29 self-employed contractors (31 in 2024) as well as 1 agency worker (7 in 2024). Of the contractors, 8 were independent specialists contributing their knowledge and experience in our R&D and General departments (12 in 2024), while 21 were operational staff members supporting live events for our clients in the Netherlands (19 in 2024). Diversity & Inclusion Our Approach and Policies: How We Manage Our Impact At CM.com, diversity drives our innovation and is essential to a thriving, forward thinking workplace. We are committed to creating an inclusive environment with equal opportunities for all employees, regardless of gender (identity), age, ethnic background, religion, sexual orientation, social status, disability, chronic illness, working time, or contract type. Our approach to Diversity and Inclusion is embedded in the way we work and formalized through our core policies: The Principles for Integrity and Responsibility (Code of Conduct), Employee Handbook, Working Conditions Policy for Dutch employees, and the Diversity and Inclusion Policy. These policies clearly state that CM.com does not tolerate bullying, discrimination, or harassment. Accountability for these policies lies with our Head of HR. Employees have clear and accessible reporting channels to address misconduct through their manager, HR, or an independent external confidential adviser. In addition, our Speak Up tool ensures concerns can be raised safely, confidentially, and without fear of retaliation. All policies are now centrally published in CM.com’s Policy House, providing employees with a single, accessible source for all relevant governance documents. Each policy is reviewed and updated annually to remain current, compliant, and aligned with best practices. CM.com’s Diversity & Inclusion Policy outlines the company's commitment to diversity within the Management Board, Executive Committee, Senior Management, and the Supervisory Board, in line with the Dutch Corporate Governance Code. We are committed to maintaining gender diversity, ensuring at least 33% of our Supervisory Board and 30% of our Senior Management are women. Additionally, we aim for at least 30% female representation in our Management Board by 2032. Beyond gender representation, CM.com continues to broaden nationality and age diversity to ensure a balance of education and experience across leadership levels. These commitments are supported through inclusive recruitment, retention, mentoring, and development initiatives. CM.com is dedicated to providing equal opportunities for men and women in their career paths, as transparently reported through our Sociaal Economische Raad (SER) diversity reporting. Diversity was a key consideration during the recruitment process for a new CFO in 2025. The search focused on candidates with strong technology and growth experience, broad financial expertise, and proven experience in a listed company environment, while also emphasizing gender diversity, nationality, and proximity to the company’s home market. Women were well represented throughout the selection process and in the final rounds. Ultimately, the selected candidate best matched the full set of required competencies and strategic priorities of the company. The appointment resulted in a male candidate; the process reflects the company’s continued commitment to diversity and inclusion, the selection of the best candidate for the role, and progress towards its long-term diversity objectives. Our Principles At its core, Diversity & Inclusion means that at CM.com: Diversity is about bringing in a wide range of perspectives and experiences Inclusion ensures that every voice is heard and every employee has the chance to contribute and thrive Equity guarantees fairness in opportunities and decision-making Accessibility removes barriers so everyone can participate fully Belonging creates a culture where people feel free to be themselves Or, to put it in CM terms: Diversity: Being invited to the party Accessibility: Being able to enter the building Inclusion: Being asked to dance Belonging: Being able to dance how you want Equity: Having a turn to pick the DJ This framework was introduced during the Global Leadership Training, reinforced through the We Are CM onboarding session, and communicated across internal channels to align understanding across the organization. Actions: Building an Inclusive Culture At CM.com, diversity is our superpower, fueling innovation and driving success. Every job posting includes our commitment: “Here, diversity is our superpower. Our diverse perspectives fuel innovation and drive us forward. We celebrate every member, regardless of age, background, or beliefs.” Our inclusive culture is strengthened through our representation in traineeships and hiring processes, diverse recruitment panels, and formalized internal application processes that ensure equal access to opportunities for all employees. We celebrate diversity of nationalities, cultures, and perspectives that make up our workforce. While English serves as our common business language, we actively embrace linguistic and cultural diversity through language courses, time zone awareness, and accessible facilities for employees and visitors with disabilities. Learn more about Accessibility & Inclusion at CM.com, specifically in relation to our products and services, and gain insights from our Accessibility Specialist in our Managment Board Report under the Our Commitment to Sustainability section. We strengthen inclusion through training programs such as: We are CM Training (Onboarding): Interactive onboarding sessions focused on discrimination awareness, reporting pathways, internal policies, and the importance of inclusion and safety at work. Leadership Training: A two-day workshop hosted at our Breda Headquarters, bringing together Team Leads from across the world and all business units. The Diversity & Inclusion session focused on microaggressions, bias awareness, intercultural communication, fairness, and pathways to reporting misbehavior. By connecting leaders from different regions, cultures, and experiences, this training fostered a truly global perspective on inclusion, ensuring that our leaders are equipped to champion diversity across all CM.com locations. To further embed inclusion across the organization, CM.com has an established Diversity & Inclusion Task force, composed of employees from all over the world, from Cape Town, to London, to our Head Quarters in Breda. The Task Force serves as the first point of contact for issues related to equal opportunity and bias and plays an active role in identifying challenges and proposing solutions to strengthen fairness and inclusion across the company. Results Gender distribution in number and percentage at Senior Management level: 2025 % 2024 % Supervisory Board1 Female 2 33% 2 33% Male 4 67% 4 67% Management Board Male 2 100% 3 100% Senior Management2 Female 12 36% 13 36% Male 21 64% 23 64% Supervisory Board members are not employees of the company. Members of the Executive Committee and BU Leadership Teams Further information on the composition of the Management Board, Supervisory Board, and Senior Management is disclosed in the Governance section of this Annual Report. Age distribution among employees: 2025 % 2024 % Under 30 years old 169 26% 204 29% 30 to 50 years old 423 65% 439 62% Over 50 years old 54 8% 62 9% Total headcount 646 100% 705 100% Remuneration metrics CM.com is committed to ensuring that all employees, regardless of gender, are compensated fairly and equally. The gender pay gap provides insight into any pay disparities between male and female employees within the company. The gender pay gap is defined as the difference in average gross hourly pay level between female and male employees, expressed as a percentage of the average gross hourly pay level of male employees. It is essential to note that this figure alone does not reflect the full scope of gender pay equity within CM.com. According to our data analysis, the pay gap is mainly caused by an underrepresentation of women in higher job grades – an issue we are actively addressing as part of our strategic objectives – and significant differences in international salaries, making aggregated comparisons less representative for gender pay gaps based on same-level roles. The annual total remuneration ratio provides insight into whether wide pay disparities exist. The ratio is defined as the annual remuneration total for the highest-paid individual divided by the median of employees' annual total remuneration (excluding the highest-paid individual). 2025 2024 Unadjusted gender-pay gap 25% 26% Total remuneration ratio 12.1 13.3 Methodologies Used and Assumptions Employee-specific salary data is largely retrieved from our payroll service provider's system and relates to employees employed at the end of the reporting period. Components of pay levels included in the calculations are actual gross salaries, cash benefits (such as sales and short-term bonuses), and benefits in kind all derived from the payroll system and paid out during the reporting year, along with the value of long-term incentive bonuses (share-based) granted in the reporting year. Data is extrapolated to full-time equivalents (FTEs), and assuming employment for the entire year for those who joined mid-year. Employee Engagement Our Approach and Policies: How We Manage Our Impact At CM.com, our employee engagement is driven by our credo, “Do what you like, do what you’re good at, and contribute,” which is emphasized in our Employee Handbook, the Club Manifesto, along with our shared values that are the foundation of our culture and the key to our success. By fostering intrinsic motivation and excellence, we prioritize monitoring engagement through corporate values, conducting employee engagement surveys, and providing safe and healthy working conditions for our entire workforce. Working Conditions Dutch CM.com employees on a temporary or permanent contract are protected by our working conditions, which is part of every employee contract. These comply with labor laws and regulations, covering social protection such as paying living wages, secure employment, social security, leave, retirement, and working hours. Our CM.com Employee Handbook outlines the regulations and benefits available to our Dutch employees in case of sickness, disability, (family-related) leave, and retirement. Also, information on working hours in case of overtime, pregnancy, adoption, or recent birth is described. Furthermore, safety instruction videos are available to prevent workplace accidents. We plan to develop specific working conditions and employee handbooks for each of our foreign offices in the future. In accordance with ESRS S1-11, social protection requires entities to disclose whether their employees are covered against income loss due to major life events. The standard identifies the following five majorlife events for disclosure: sickness, unemployment (starting from when the worker is employed by the undertaking), employment injury and acquired disability, parental leave and retirement. Additionally, entities must disclose any countries where such coverage is not provided. At this stage, we do not yet have detailed information at this level and apply for the transition relief. As we are utilizing phase-in provisions, no targets have been set yet. In accordance with ESRS S1-15, work-life balance requires entities to disclose the extent to which employees are entitled to and make use of family-related leave. We report on family-related leave according to the definitions of ESRS, i.e., it includes maternity leave, paternity leave, and parental leave from work. Everyone employed by CM.com entities in the Netherlands is entitled to take family-related leave, regardless of gender. In addition to maternity leave for the primary caregiver giving birth, Dutch law allows secondary caregivers to take five weeks of additional birth leave at 70% of the daily wage, covered by the Dutch employee insurance agency UWV. CM.com supplements this payment to 100% of the maximum daily wage. At this stage, we do not yet have detailed information at this level for employees who are employed outside the Netherlands and apply for the transition relief. As we are utilizing phase-in provisions, no targets have been set yet. Results The percentage of Dutch employees that took family-related leave is calculated by the number of (male/female) Dutch employees that took family-related leave relative to the number of (male/female) Dutch employees at the end of the reporting period. 2025 2024 Dutch employees who took family-related leave 9% 10% Family-related leave taken by gender: Female 8% 14% Male 9% 9% Actions CM.com believes that physical and mental health are very important for the overall health of employees. That’s why CM.com offers vitality workshops on a regular basis and access to our care team. The team consists of external experts who can provide support and advice on issues. The issues don’t necessarily need to be work-related. The care team consists of a corporate social worker, an occupational physician, an occupational psychologist, a budget coach, a financial adviser, a dietitian, and an external confidential adviser. CM.com fosters collaboration and a sense of community through specific guidelines for working together and encouraging office work over remote work. Events like Dev Days, an internal network event for our developers, bring employees from different backgrounds together to collaborate on new solutions. Additionally, the company supports an informal work environment and organizes various social gatherings, such as sports activities, Friday afternoon drinks, social trips abroad, and board game nights. These initiatives help employees feel valued and comfortable being themselves, which in turn allows them to flourish and contribute effectively to the company’s growth. To measure employee sentiment and engagement, we conduct a global employee engagement survey annually. The results are reviewed at the highest levels, including the Management Board and Senior Management, with the HR department leading discussions on employment matters and guiding future actions and communication strategies. This survey allows us to measure the effectiveness of our actions. To enhance responsiveness, a new survey tool was introduced in 2024, enabling more frequent and topic-specific surveys. The survey questions are distributed quarterly, and anonymous results are shared with team leads, who are encouraged to address feedback and proactively discuss survey outcomes during team meetings. Striving to be an employer of choice, we aimed for an employee engagement score of 80 over 2025 (on target score for LTIP 2023-2025). During 2025, CM.com scored 74 (2024: 73). The on target score for LTIP 2025-2027 is set on 75 over 2027. Engaging With Our Own Workforce Engaging with our workforce and their representatives is a cornerstone of our approach to managing impacts and fostering a positive work environment. Our HR department is responsible for dialogue on employment matters. We believe that open communication and the active involvement of employees in workforce-related decision-making processes are crucial for our success. Besides the employee surveys, we maintain a robust communication framework that includes quarterly town hall meetings and regular CEO and CFO updates where employees have the opportunity to send in questions beforehand or ask them live. We offer live and recorded training sessions on various topics. In the Netherlands, our Management Board members bi-monthly engage with the Works Council representing the interests of the Dutch CM.com employees, discussing, for example, topics like Diversity & Inclusion and outcomes of the employee survey. CM.com as a company is obligated to share important information with the Works Council which in return may have the right to give advice or the right of consent, depending on the topic, and the right to propose initiatives. The exact rights and responsibilities of the Works Council are described in the WOR. Feedback from the Works Council helps us prioritize actions that address the most pressing issues for our employees and directly influence our decision-making processes. For example, the introduction of a new survey tool and the implementation of more regular surveys in 2024 are direct responses to the need for more timely and actionable feedback. These initiatives demonstrate our commitment to creating a responsive and inclusive workplace where employees feel empowered to contribute to the company’s success. For clarity, CM.com has no Works Councils outside the Netherlands. Additionally, we have established an easily accessible site on our company intranet that outlines various options for employee representation, such as HR business partners, a Speak-Up tool, Works Councils, a Diversity & Inclusion task force, the care team, and personal development dialogues. New or changed employment conditions are communicated through email and intranet updates. Remediation and Channels to Raise Concerns Being a socially safe and respectful workplace is essential to creating a culture that empowers and facilitates our workforce to speak up and raise concerns or questions, as well as provide remedies in cases where employees have experienced negative circumstances. Our CM.com Working Conditions Policy, which is part of the employment contract for Dutch employees, is very clear on our zero tolerance for bullying, harassment, and/or discrimination on any ground. The policy includes clear steps that can be taken as well as possible consequences and disciplinary actions in case this behavior does seem to occur. Multiple reporting channels are offered, both internally and externally, through confidential advisers. Individuals are encouraged to first discuss matters directly with the individual(s) involved or escalate to a direct lead, HR business partner, or the Head of Risk & Compliance. Concerns can also be addressed with an external confidant or through the external Speak-Up tool. Our Speak-Up Policy (Whistle-blower Policy) is intended to encourage everyone to speak up about any misconduct. This policy goes beyond things like bullying and harassment and includes, for example, criminal offenses or violation of the law, human rights violations, bribery and corruption, and threats to the environment. All reports and concerns need to be reported through the Speak-Up Tool, in order for the Speak-Up Committee to take them into consideration. Reference is made to the section Business Ethics for more information. Training and Skills Development Our Approach and Policies: How We Manage Our Impact At CM.com, we foster a culture of continuous learning and improvement, with professional and personal development captured under our shared value "Grow & Learn." Investing in career and skills development demonstrates our commitment to our workforce and helps us attract, grow, and retain talent. We believe continuous training is crucial in a rapidly evolving technological landscape to stay at the forefront of innovation and contribute to the company’s success. To support this we established an internal Training Policy covering all employees of CM.com, including contractors and agency workers, and with accountability lying with our HR department. The policy is a guiding framework to ensure that our workforce is well-informed and equipped to conduct their work effectively and in alignment with our shared values and regulatory requirements. By aligning training needs with organizational goals, job requirements, and performance evaluations, we ensure every team member is knowledgeable. Actions To foster the growth of our existing talent, CM.com offers a mix of training formats, including both internal and external sessions, classroom learning, and e-learning modules, tailored to fit different learning styles and needs. We have implemented various initiatives to champion our 'Grow & Learn' shared value, such as (but not limited to) our CM Academy (online learning platform); Udemy (technical e-learnings); LinkedIn Learning; we support fresh starters through our Young Professional program; equip future leaders with essential skills and knowledge through the CMBA - Our high-potential program which focuses on personal leadership, business strategy, and operating in a global context; our DEV Day's - a yearly event for our developers to connect, share knowledge, and learn from each other; and our COO hosts workshops on developing presentation skills. The CM.com Employee Handbook (for Dutch employees) outlines the available opportunities for participating in external training programs. In 2025, we launched the CM.com Leadership Program, our first dedicated training for current team leads. The program focuses on what it means to lead at CM.com, covering conversation techniques, absence management, human skills, and reinforcing our Shared Values (Drive & Lead, Grow & Learn, Together & Care, Speed & Change). We aim to make this leadership training an annual initiative, ensuring all team leads are equipped to lead with impact. We believe that AI empowers our customers to maximize the value of our products while offering significant opportunities within our own organization. We encourage employees to explore AI applications and propose ways to improve work processes. As an AI-driven company, we strive to embed this philosophy throughout our organization. Our AI specialists host workshops like "How to Build an AI Agent" to promote knowledge sharing and skill development. All employees have access to AI technologies and are supported in developing their skills. We also collect and share practical AI use cases across the organization, including initiatives like the "Agent of the Week" competition to showcase innovative AI applications. Learn more about talent development at CM.com and becoming an AI-first company through insights from our Talent Manager and Head of HR in our Management Board report under the Our Culture section. We monitor the usage of training options, aiming that 95% of our employees (excluding employees on parental or long-term sickness leave) participate in at least one learning or development activity annually. Participation and scoring are addressed by team leads during the annual performance review cycle under 'cultural fit'. We ensure equal access to training hours for all employees, regardless of gender, promoting an inclusive and balanced learning environment. Across all our training initiatives, we intentionally bring together colleagues from various departments and business units. This fosters cross-functional collaboration, strengthens internal networks, and encourages knowledge sharing beyond the classroom. We encourage employees to think about and grow their careers through career dialogues. Additionally, we offer workshops to help teams and individuals discover their personality styles, enhancing engagement and motivation. By fostering an environment where employees feel understood and valued, we aim to boost overall engagement. We believe periodic performance review contributes to the professional growth and development of our employees. Results Every employee has an annual performance review meeting unless they have been employed for less than four months before the review or if a contract termination was communicated. For clarity, employees in the Netherlands, Germany, Belgium, and Denmark who started after April, as well as employees outside these countries who started during 2025, are considered not to have participated in the performance review for 2025. While they are not included in the review process, these employees are included in the denominator of the calculation. The numerator of the calculation contains an estimation based on employment date and, the number of reviews is proportional to the number agreed upon by management. Employees who request a career dialogue in addition to their annual performance review do not lead to a higher participation rate in the calculation. 2025 2024 Employees who participated in regular performance reviews and/or career dialogue: 92% 87% Participation percentage by gender: Female 90% 86% Male 93% 88% In accordance with ESRS S1-13, training and skills development metrics require entities also to disclose the average number of training hours per employee, by gender. At this stage, we do not yet have detailed and robust information at this level and apply for the transition relief. Outlook Our internal training programs are consistently evaluated by employees, allowing us to continuously improve the content and delivery of our offerings. We focus on providing training that is relevant to our employees’ current roles and prepares them for future opportunities. From AI and digital skills to soft skills and specialized departmental training, we are dedicated to supporting the growth of our people, which drives the success of our company. Consumers and End-Users In this section, we will address the (potential) impacts and risks related to the material topic of Privacy & Data Security, as indicated in our Double Materiality Assessment. This sustainability matter is covered in topical ESRS S4 under the subtopic 'Information-related impacts for consumers and/or end-users,' specifically 'Privacy.' Considering CM.com also anticipates potential negative impacts and risks on its own workforce in this context, we have expanded the scope in this chapter, also addressing own workforce. Privacy & Data Security At CM.com, privacy and data security are integral to our operations and essential for maintaining the trust of our stakeholders. In today’s digital world, safeguarding personal and corporate data is not only a regulatory requirement but also a responsibility we embrace to uphold our reputation and integrity. The trust placed in us by our employees, clients, and partners depends on our ability to protect their data from unauthorized access and breaches, which could result in harm to individuals, financial penalties, and reputational damage. As an AI-first organization, CM.com embeds privacy, security, and responsible AI principles into the design of its solutions. Our AI governance is aligned with ISO 42001, which helps identify and mitigate AI-related risks, including those affecting data protection, transparency, and accountability. Together with our privacy and security controls, this ensures that innovation remains trustworthy, compliant, and socially responsible. As a licensed Payment Service Provider and a global conversational commerce leader, CM.com connects enterprises and brands to billions of mobile users worldwide. Our services enable seamless communication between businesses and their customers, often involving the handling of sensitive and confidential data. While our primary focus is on serving businesses, we also interact directly with consumers and end-users in specific cases, such as ticket insurance within our Live offering and customer support for ticketing services. This responsibility underscores the importance of our robust privacy and data security measures. Our Approach and Policies: How We Manage Our Impact CM.com has established a comprehensive Privacy Program to ensure compliance with data protection regulations and uphold the highest standards of privacy and data security. This program is guided by our Privacy Policy and overseen by the Data Privacy Governance Board ('DPGB'), a multi-disciplinary team comprising members of the Legal, HR, Security, Revenue Operations, and Risk & Compliance departments. The DPGB adopts a risk-based approach to data protection, ensuring compliance with the European General Data Protection Regulation (GDPR) and other applicable regional privacy laws. The DPGB is responsible for defining and implementing privacy policies, raising awareness among employees, and managing the data process register. This register ensures that every service and internal process involving personal data has a designated data process owner. Each data process owner is a representative of the relevant CM.com product team or department responsible for processing data on an operational level, often product owners and HR employees. They are responsible for maintaining and updating the data process register, ensuring compliance with privacy legislation. The DPGB reviews all data processing activities annually, with additional oversight provided by the Internal Audit department on a rotational basis. This review monitors if data is properly processed and measures are taken to sufficiently safeguard the data. To effectively manage privacy-related risks, CM.com has established an extensive Risk & Control framework aligned with industry standards, including ISO 27001, ISO 27017, and ISO 27018. This framework involves annual testing and reporting to the Management Board and Audit Committee to evaluate the effectiveness of our data protection measures. In 2025, CM.com extended the achieved ISO standards by obtaining ISO 27701 (Privacy Information Management System) and ISO 42001 (AI Management System) for AI-related products, underscoring our commitment to data privacy. Obligations from these new ISO certifications are also embedded in our internal risk and control framework. In the event of a data breach involving Personally Identifiable Information (PII), CM.com has a clear Incident Management Policy supported by tools and processes to ensure a coordinated and effective response. The new incident process enhances CM.com's ability to identify PII-related incidents and other legal obligations, such as DORA and NIS2. It also ensures timely and accurate reporting to oversight bodies. The incident management process aligns with ISO 27001 and ISO 27018 standards, and CM.com provides clients with the necessary information to meet regulatory obligations. Additionally, our platform, status.cm.com keeps all stakeholders informed of any service disruptions or planned maintenance. Privacy is a key focus in the development of all CM.com software and applications. From the design phase, we implement privacy-enhancing measures such as advanced encryption, strict access controls, and 1data retention policies. Following the principle of ‘privacy by design,’ CM.com performs Privacy Impact Assessments (PIAs) for new projects or initiatives to identify and mitigate privacy risks early. For sensitive data, we apply additional security measures to ensure maximum protection. Actions To maintain a culture of privacy and security, CM.com provides ongoing training for all employees. In late 2024, we updated our basic privacy training and integrated it into the CM Academy. All employees must complete mandatory training modules annually, as outlined in our Training Policy and described in Own Workforce section. Starting in 2025, we aim for a 95% completion rate for mandatory security and compliance training within set timeframes. For new employees, these trainings are part of the onboarding process. Privacy awareness training participation was 87%. Participation in mandatory training is improving but requires further attention. Advanced training for data process owners was introduced in November 2025, with participation actively monitored by the DPGB. Participation measeured at year-end was 65%. Besides training participation, no other targets are adopted to manage private and data security-related material negative impacts and risks, as these are covered by our Risk & Control framework as described. To further raise awareness, a internal Privacy Knowledge Page for employees was implemented, providing all relevant information about privacy at CM.com. Additionally, the data processing register was fully migrated to a new environment, enabling CM.com, as of 2025, to automate updates, review the accuracy and relevance of data processes, and actively monitor and report on the progress of updating the register. The register now reflects all changes in services and internal processes, with stopped services decommissioned and new services added before year-end. In preparation for the EU Artificial Intelligence Act, AI-related requirements were also incorporated into the register. This Act establishes a legal framework for AI, promoting innovation while safeguarding the fundamental rights and safety of consumers and end-users. As AI developers and users, we are committed to complying with this regulation. Results CM.com’s proactive approach to privacy and data security delivered positive results. In 2025, no data breaches required notification to the Dutch Data Protection Authority under GDPR, and no complaints were received from the Dutch Data Protection Authority. There were no data breaches in other countries either. These outcomes reflect our commitment to minimizing privacy risks and protecting entrusted data. To promote transparency and accountability, we encourage stakeholders to report concerns or violations related to CM.com or its representatives, via our Speak-Up tool. Our publicly available Speak-Up Policy ensures concerns are addressed and whistle-blowers are protected. For more information, reference is made to the Business Ethics section. Please note that this policy is pending Management Board approval as per the signing date of the sustainability statements. Governance Material Governance Impacts, Risks, and Opportunities Material topic IRO Value chain Time horizon Description Business Ethics Positive impact Own operations Short, medium and long-term A strong corporate culture centered on values and business ethics positively impacts our workforce and benefits our reputation and relationships with business partners and stakeholders. By promoting a culture of transparency and integrity, we enhance employee satisfaction and attract clients who value ethical practices, ultimately boosting CM.com’s reputation and financial health. Moreover, companies known for ethical behavior can influence industry standards, leading to broader positive social impacts. Negative impact, Risk Upstream Own operations Downstream Short, medium and long-term Unethichal behavior may lead to (potential) negative impact on people and stakeholders of our corporate culture. Preventing unethical behavior is expected to protect the company and its stakeholders from the consequences of such actions, potentially resulting in financial loss and reputational damage. Positive impact Upstream Own operations Downstream Short, medium and long-term The protection of whistleblowers empowers all stakeholders to report potential misconduct, thereby contributing to maintaining a secure working environment Business Ethics Our Approach and Policies: How We Manage Our Impact At CM.com, we are deeply committed to fostering a culture of trust, integrity, and social responsibility. These principles form the foundation of our business ethics and guide our interactions with clients, employees, partners, and stakeholders. As a global leader in conversational commerce, we understand the importance of maintaining the highest ethical standards in all aspects of our operations. This commitment is reflected in our robust policies, proactive approach to compliance, and dedication to creating a safe and transparent environment for everyone associated with CM.com while contributing to a positive societal impact. Our approach to business ethics is built on a strong foundation of values that define who we are and how we operate. At CM.com, we believe that ethical business practices are not just a requirement but a responsibility. Our Code of Conduct, which is accessible on our website and intranet, serves as a cornerstone for our ethical framework. It outlines clear principles for all employees, contractors, and partners to act with integrity and align their actions with CM.com core values, as described in Our Culture section. The Management Board oversees business conduct and ensures compliance with the Code of Conduct, which is aligned with the Dutch Corporate Governance Code. This ensures that every individual representing CM.com adheres to the highest standards of ethical behavior and actively works to prevent actions that could harm the company’s reputation or interests. Our Code of Conduct encompasses a wide range of policies, including anti-corruption and bribery, anti-harassment, gifts and hospitality, insider trading, security, and privacy. These policies are designed to safeguard our operations, protect our stakeholders, and ensure that CM.com remains a trusted partner in the industry. To make the policies more visible and searchable, with use of our HALO product an AI agent is built, called Norma, which allows CM.com employees to search for policies and specific content from the Policy House, a knowledge base with all policies. Based on the number of policy search prompt we see an increase in awareness of the policies and how to act in line with these. Driven by the updated Dutch Corporate Governance Code, specifically the Statement on Risk Management, CM.com deems it important to be transparent about risk management implementation for operational and compliance risks and where necessary keep improving on these topics. Compliance in this matter includes both regulations as well as policies supporting ethical behavior. For more information see our Management Board report under the Risk Management section. Anti-Fraud and Corruption Policy At CM.com, we recognize the risks associated with fraud and corruption and are committed to mitigating them. Our Anti-Fraud and Corruption Policy emphasize the importance of cultivating an ethical business environment that prioritizes safety and integrity. Employees are expected to act ethically and report any suspicions of fraud or bribery through our dedicated Speak-Up channels. To prevent unethical behavior, we have established clear guidelines for accepting gifts and hospitality. For example, any gift exceeding €250 requires prior approval to ensure it does not compromise CM.com reputation or interests. Violations of these policies are treated seriously and may result in disciplinary action. By encouraging transparency and accountability, we aim to uphold the highest standards of ethical conduct. CM.com is dedicated to integrity in business, complying with laws, regulations, and company policies. Awareness of potential violations is key to safeguarding our company and stakeholders from any (financial) consequences. During 2025, no incidents of bribery or corruption have been reported, nor have there been any convictions or fines for violating anti-corruption and anti-bribery laws. Speak-Up: Promoting Transparency and Accountability We believe that an open and secure work environment is essential for fostering trust and collaboration. Our Speak-Up Policy empowers employees, clients, suppliers, and other stakeholders to report suspected misconduct or violations in a safe and confidential manner. This proactive approach allows us to address concerns promptly and prevent potential issues from escalating. CM.com offers multiple reporting channels, both internally and externally, including confidential advisors and an independent Speak-Up Tool. This tool provides a 24/7 platform for reporting concerns in employees’ native languages, with the option to remain anonymous. The Speak-Up Policy guarantees that no retaliatory action will be taken against individuals who report concerns in good faith, in line with the Dutch Whistleblower Protection Act and the EU Directive 2019/1937. To ensure accessibility and awareness, the Speak-Up Policy is prominently featured on our website and intranet and is included in mandatory training programs. We also conduct regular surveys to measure employees’ trust in the policy and their comfort level in raising concerns. Reported issues are handled by the Speak-Up Committee, which operates independently from management to ensure objectivity and thorough investigations. The committee reports its findings to the Management Board on a quarterly basis. In 2025, 2 cases of possible misconduct have been reported and processed in line with the Speak Up policy. The investigation by the Speak -Up committee showed that the 2 cases were one-off deviations from the desired ethical behavior. Follow-up actions to create more awareness about desired behavior have been taken, as well as improvement in operational procedures preventing more likewise cases to happen. Actions: Building a Culture of Ethics At CM.com, we believe that fostering a culture of ethics requires continuous education and engagement. Our corporate values—honesty, integrity, and respect—are deeply embedded in our policies and reinforced through various initiatives. From onboarding new employees to quarterly meetings and leadership updates, we ensure that our ethical principles are consistently communicated and upheld. Our CM Academy offers mandatory training modules that provide employees with the knowledge and tools they need to act with integrity. These e-learning courses cover key policies, ethical decision-making, and reporting channels for concerns as well as basic knowledge on among others security and privacy. In 2025, we updated our basic compliance training to reflect the latest legal and regulatory requirements. Since the start of 2025, we actively monitor training completion aiming at 95% completion rate for mandatory security and compliance training within designated timeframes. The Code of Conduct training reached 90% participation. This is an increase in comparison to previous years but can be increased still. Actions are taken to improve the participation grade via actively involving BU management teams and HR business partners. Including participation of mandatory trainings in the yearly employee performance reviews, as part of the cultural fit axis, is postponed to 2026. CM.com not only communicates about and provides training on business ethics but also validates via employee surveys whether employees perceive CM.com as a safe environment, specifically that CM.com will take appropriate action when an employee experiences misconduct. In general, this is the case resulting in a 8.0 score (out of 10) in the employee survey. In providing payment services, CM.com actively monitors and prevents illegal activities through Know Your Customer (KYC) and customer due diligence procedures. We exercise due care and attention when accepting new customers and partners, refusing to engage with those on national or international sanction lists. In 2025, CM.com started to expand the KYC procedures to other service offerings. In providing payment services, CM.com actively monitors and prevents illegal activities through Know Your Customer (KYC) and customer due diligence procedures. We exercise due care and attention when accepting new customers and partners, refusing to engage with those on national or international sanction lists. In 2025 CM.com started to expand the KYC procedures to other service offerings. The scope of business ethics is expanded with the enforcement of the Accessibility Act. For the products and services that are in scope of this act, like pin terminals, ticketing services but also our chatbot solutions gap analysis against Voluntary Product Accessibility Template (VPAT) Level A and Level AA requirements are performed. If necessary, improvements will be made and monitored. This will continue in 2026. Learn more about Accessibility & Inclusion at CM.com, and gain insights from our Accessibility Specialist in our Management Board Report under the Our Commitment to Sustainability section. ESRS Content Index Disclosure Requirement Note Explanatory notes General disclosures - ESRS 2 BP-1 General basis for preparation of the sustainability statements Basis of preparation ESRS-2 5d: CM.com has not used the option to omit a specific piece of information corresponding to intellectual property, know-how or the results of innovation. BP-2 Disclosures in relation to specific circumstances Basis of preparation There are no other specific circumstances than referenced. ESRS-2 13, 14, and 17 are not applicable GOV-1 The role of the administrative, management and supervisory bodies Governance , Supervisory Board Report , Governance GOV-2 Information provided to and sustainability matters addressed by the undertaking’s administrative, management and supervisory bodies Governance GOV-3 Integration of sustainability related performance in incentive schemes Remuneration report , Governance GOV-4 Statement on sustainability due diligence Governance GOV-5 Risk management and internal controls over sustainability reporting Risk management , Governance SBM-1 Market position, strategy, business model(s) and value chain Value creation , Management Board report , Strategy , Social , Strategy , Materiality assessment , stakeholder engagement SBM-2 Interests and views of stakeholders Materiality assessment , stakeholder engagement ESRS-2 45c is not applicable as our strategy and business model were not adjusted. SBM-3 Material IROs and their interaction with strategy and business model(s) Materiality assessment , material topics Material IROs are disclosed at the beginning of every sustainability section. Current financial effects for material risks and opportunities are deemed not material, we expect no adjustments on book values of assets or liabilities in the upcoming year. ESRS-2 48e: CM.com applies the phase-in provision in accordance with Appendix C of ESRS 1. IRO-1 Description of the processes to identify and assess material IROs Materiality assessment , Risk management ESRS-2 53biii: No external experts were introduced in this process. ESRS-2 53h: No changes compared to prior period. IRO-2 Disclosure requirements in ESRS covered by the undertaking’s sustainability statements ESRS Content index ESRS-2 59: Our reporting meets the requirements of ESRS 1 section 3.2 MDR-P Policies adopted to manage material sustainability matters All material topics are disclosed taking the Minimum Disclosure Requirements (MDR) into account, including entity-specific metrics, in addition to the ones explicitly required by ESRS. If the MDR are not met, when policies and/or actions are not adopted or no measurable outcome-oriented targets are set it is explained in the ESRS Content Index. ESRS-2 AR69: Our current action plan does not require significant operational expenditures (Opex) and/or capital expenditures (Capex). ESRS-2 77b: Metrics are not validated by an external body other than our external assurance provider. MDR-A Actions and resources in relation to material sustainability matters MDR-M Metrics in relation to material sustainability matters MDR-T Tracking effectiveness of policies and actions through targets ESRS E1: Climate change ESRS 2 - GOV 3 Integration of sustainability related performance in incentive schemes Remuneration report , Governance E1-1 Transition plan for climate change mitigation Climate change: Climate change mitigation ESRS-E1 14,16abcdhij: CM.com has not yet adopted a transition plan, and no concrete timeline has been defined, ESRS-E1 16e: At this stage, there are no concrete plans in place to increase alignment with the EU Taxonomy on climate change mitigation, ESRS-E1 16g: CM.com is not excluded from the EU-Paris aligned Benchmarks. ESRS 2 - SBM 3 Disclosure Requirement related to ESRS 2 SBM-3 – Material IROs and their interaction with strategy and business model Material environmental IROs, Climate change: Climate scenario analysis and risk assessment ESRS 2- IRO 1 Disclosure Requirement related to ESRS 2 IRO-1 – Description of the processes to identify and assess material climate related IROs Material environmental IROs, Climate change, Gross Scopes 1, 2, 3, and Total GHG emissions AR 11b: Applied time horizons are as defined in ESRS 1. AR 15: CM.com did not make critical climate-related assumptions in its financial statements. E1-2 Policies related to climate change mitigation and adaptation Climate change: Our approach and policies: how we manage our impact E1-3 Actions and resources in relation to climate change policies Climate change ESRS-E1 28, 29: CM.com has not yet adopted a transition plan and, therefore, actions are limited; no concrete timeline has been defined. E1-4 Targets related related to climate change mitigation and adaptation Climate change: Climate change mitigation ESRS-E1 32-34: CM.com has not yet adopted a transition plan and, therefore, not yet adopted targets; no concrete timeline has been defined. E1-5 Energy consumption and mix Overview of energy consumption ESRS-E1 38, 40-43: Not applicable as we don't have activities in high climate impact sectors, based upon the designated NACE code from CM.com (J) and the NACE codes being classified as high climate impact sectors (A until H, plus L). ESRS-E1 39: No non-renewable energy generation, therefor not disclosed. E1-6 Gross Scopes 1, 2, 3 and Total GHG emissions Greenhouse gas (GHG) emissions ESRS-E1 48b: CM.com does not have any scope 1 emissions from regulated emission trading schemes. ESRS-E1 AR 41: Disaggregation of emission related information does not add insights and is - in practice - not feasible without assumptions that would not improve the quality of the information presented. ESRS-E1 AR 45: Our Scope 2 emissions include bought electricity (for offices and fleet) and heat. Steam and cooling are not applicable to CM.com. We only include scope 2 emissions that are the result of our own procurement. ESRS-E1 AR48: Milestones and targets years are not yet set because transition plan is not adopted, therefore this part of the table is not disclosed. ESRS S1: Own workforce ESRS 2 - SBM 2 Disclosure Requirement related to ESRS 2 SBM-2 – Interests and views of stakeholders Materiality assessment ESRS 2 - SBM 3 Disclosure Requirement related to ESRS 2 SBM-3 – Material IROs and their interaction with strategy and business model Material social IROs , Own workforce ESRS-S1 14e: Not applicable due to the nature of our business ESRS-S1 14f and 14g: We have no operations at risk and no operations in countries or geographic areas considered at risk ESRS-S1 15 and 16: Not applicable to CM.com S1-1 Policies related to own workforce Own workforce: Diversity & Inclusion, Employee engagement, Training & skills development, Privacy & data security ESRS-S1 20, 21 and 22: CM.com has no Human Rights policy. We don't see a material risk for incompliance based on CM.com's business activities in the Netherlands and foreign sales offices. Our terms and conditions of employment are in line with regional law and legislation. Our whistleblower procedure is based on the UN Guiding Principles on Business and Human Rights. ESRS-S1 23: CM.com has no specific workplace accidents policy. ESRS-S1 24c: CM.com has not identified groups particularly vulnerable in own workforce. S1-2 Processes for engaging with own workforce and workers’ representatives about impacts Employee engagement ESRS-S1 27d and 27e, 28 and 29: Not applicable to CM.com S1-3 Processes to remediate negative impacts and channels for own workforce to raise concerns Employee engagement , Privacy & data security , Business Ethics S1-4 Taking action on material impacts on own workforce, and approaches to managing material risks and pursuing material opportunities related to own workforce, and effectiveness of those actions Diversity & Inclusion , Employee engagement , Training & skills development , Privacy & data security MDRs are incorpporated in the disclosures of our material sustainability matters. S1-5 Targets related to managing material negative impacts, advancing positive impacts, and managing material risks and opportunities Governance , Diversity & Inclusion, Employee engagement, Training & skills development MDRs are incorporated in the disclosures of our material sustainability matters. ESRS S1 47: The process of target setting is described under Governance in section General (p. xx), CM.com's own workforce and the worker's representatives are not directly engaged in this process. S1-6 Characteristics of the undertaking’s employees Characteristics of our employees ESRS-S1 50e: Where applicable, contextual information is provided. S1-7 Characteristics of nonemployees in the undertaking’s own workforce Characteristics of our employees ESRS-S1 55c: Where applicable, contextual information is provided. S1-9 Diversity metrics Diversity & Inclusion, results S1-11 Social protection Employee engagement ESRS-S1 72-76: CM.com makes use of the phase-in provision in accordance Appendix C of ESRS 1. S1-13 Training and skills development metrics Training & skills development ESRS-S1 AR79: Since the company does not differentiate between employees regarding training and performance review, no further breakdown by employee category is provided. S1-15 Work-life balance metrics Employee engagement S1-16 Compensation indicators Diversity & Inclusion, results ESRS S4: Consumers and end-users ESRS 2 - SBM 3 Disclosure Requirement related to ESRS 2 SBM-3 – Material IROs and their interaction with strategy and business model Material social IROs , Consumers and end-users ESRS-S4 11,12: In the context of protecting Privacy and PII data, no distinction is made between different groups of consumers and end-users. S4-1 Policies related to consumers and end-users Privacy & Data security ESRS-S4 15: In the context of protecting Privacy and PII data, no distinction is made between different groups of consumers and end-users. ERSRS-S4 16,17: CM.com has no human rights policy commitments relevant to consumers and/or end-users other than our whistleblower procedure being based on the UN Guiding Principles on Business and Human Rights. S4-2 Processes for engaging with consumers and end-users about impacts There are no general processes for engaging with consumers and end-users and their representatives about actual and potential impacts on them, as this is covered by legislation. S4-3 Processes to remediate negative impacts and channels for consumers and end-users to raise concerns Privacy & Data security , Business Ethics S4-4 Taking action on material impacts on consumers and end- users, and approaches to managing material risks and pursuing material opportunities related to consumers and end-users, and effectiveness of those actions Privacy & Data security , Business Ethics ESRS-S4 31b,32c: Specific actions to provide or enable remedy to an actual material impact are only considered necessary in case of incidents, as described clients are informed immediately. ESRS-S4 34: CM.com is not aware of contributing to material negative impacts on consumers and/or end-users through own practices. ESRS-S4 35: No severe human rights issues or incidents connected to consumers and/or end-users have been reported. S4-5 Targets related to managing material negative impacts, advancing positive impacts, and managing material risks and opportunities Privacy & Data security ESRS G1: Business Ethics ESRS 2- GOV 1 Disclosure Requirement related to ESRS 2 GOV-1 – The role of the administrative, management and supervisory bodies Corporate Governance General, Governance (p. xx-xx) ESRS-2 5b: Not specifically disclosed. See general sections in Roles and responsibilities section and in Report of the Supervisory Board, ESRS 2- IRO 1 Disclosure Requirement related to ESRS 2 IRO-1 – Description of the processes to identify and assess material IROs General: Materiality Assessment G1-1 Business conduct policies and corporate culture Governance: Business Ethics: Business Conduct Policies and Corporate Culture + Speak Up Policy ESRS-G1-1-10b: alignment with UN Convention is not yet tested and therefore not available, hence no related timetable available as well. ESRS-G1-1-10d: not applicable considering we do have Speak Up policies. ESRS-G1-1-10f: animal welfare is not a relevant topic for CM.com ESRS-G1-1-10h: We believe all employees are at a certain degree of risk and therefore have a training programme that is cross-functional. G1-3 Procedures to address corruption and bribery Governance: Business Ethics: Prevention & Detection of Corruption and Bribery + Speak Up Policy ESRS-G1-3-21b: We believe all employees are at a certain degree of risk and therefore have a training programme that is cross-functional. G1-4 Incidents of corruption or bribery Governance: Business Ethics: Prevention & Detection of Corruption and Bribery List of data points that derive from other EU legislation ESRS Standard Data point that derives from other EU legislation Reference to Sustainability statements General disclosures - ESRS 2 GOV-1 Board's gender diversity Governance Supervisory Board report GOV-1 Percentage of board members who are independent Governance Supervisory Board report GOV-4 Statement on sustainability due diligence Governance ESRS E1: Climate change E1-1 Transition plan to reach carbon neutrality by 2025 Climate change: Climate change mitigation E1-1 Undertakings excluded from Paris-aligned Benchmarks Climate change: Climate change mitigation E1-4 GHG emission reduction targets Climate change: Climate change mitigation E1-5 Energy consumption and mix Overview of energy consumption E1-6 Gross scope 1, 2, 3 and total GHG emissions Characteristics of our employees E1-6 Gross GHG emissions intensity Characteristics of our employees ESRS S1: Own workforce S1-1 Policies related to own workforce Diversity & Inclusion Employee engagement Training & skills development Privacy & data security S1-3 Grievance and complaints handling mechanisms Employee engagement Privacy & data security Business Ethics S1-16 Unadjusted gender pay gap Diversity & Inclusion, results S1-16 Excessive CEO pay ratio Diversity & Inclusion, results ESRS S4: Consumers and end-users S4-1 Policies related to consumers and end-users Privacy & Data security ESRS G1: Business conduct G1-1 Protection of whistleblowers Governance: Business Ethics: Business Conduct Policies and Corporate Culture + Speak Up Policy Consolidated Financial Statements Consolidated Statement of Financial Position as at December 31, 2025 Consolidated Statement of Comprehensive Result for the Year Ended December 31, 2025 Consolidated Statement of Changes in Equity for the Year Ended December 31, 2025 Consolidated Statement of Cash Flows for the Year Ended December 31, 2025 Notes to the Consolidated Financial Statements Key Disclosures Other Disclosures Corporate Financial Statements Corporate Statement of Financial Position as at December 31, 2025 Corporate Statement of Comprehensive Result for the Year Ended December 31, 2025 Notes to the Corporate Financial Statements Consolidated Financial Statements Consolidated Statement of Financial Position as at December 31, 2025 (After proposal of appropriation of result) x € 1,000 Note 2025 2024 Goodwill 5/6 20,617 20,617 Intangible fixed assets 5 67,748 70,085 Property, plant, and equipment 7 7,900 8,889 Right-of-use assets 8 21,307 24,630 Long-term receivables 13 1,783 1,397 Deferred tax assets 9 1,151 1,242 Total non-current assets 120,506 126,860 Short-term loan receivables 13 3,128 4,786 Inventories 364 450 Trade and other receivables 14 48,927 59,295 Cash and cash equivalents1 15 33,210 38,400 Total current assets 85,629 102,931 Total assets 206,135 229,791 Of which restricted: € 20.1 million (2024: € 20.3 million). Refer to note 15 for more details. x € 1,000 Note 2025 2024 Share capital 1,990 1,748 Share premium reserve 155,706 131,114 Reserves 1,303 7,224 Accumulated deficits (131,714) (133,243) Total equity 10 27,285 6,843 Borrowings 16 85,299 13,247 Convertible bonds 17 - 97,630 Deferred tax liabilities 9 741 1,585 Provisions 18 86 134 Other liabilities merchants 168 185 Total non-current liabilities 86,294 112,781 Current portion of borrowings 16 2,695 3,032 Trade and other payables 19 81,466 99,604 Contract liabilities 20 7,544 7,036 Current tax liabilities 851 495 Total current liabilities 92,556 110,167 Total equity and liabilities 206,135 229,791 Consolidated Statement of Comprehensive Result for the Year Ended December 31, 2025 x € 1,000 Note 2025 2024 Revenue 4 259,394 274,249 Cost of services 4 (178,095) (191,142) Gross profit 81,299 83,107 Employee benefits 21 (44,715) (45,699) Other operating expenses 23 (18,602) (20,946) Other operating income 377 - Operating result, EBITDA 18,359 16,462 Amortization, depreciation, and impairments 5/7/8 (22,909) (31,732) Operating result, EBIT (4,550) (15,270) Financial income 24 9,184 1,232 Financial expenses 24 (8,282) (5,220) Result before tax (3,648) (19,258) Income tax 9 (138) (555) Result after tax (3,786) (19,813) Other comprehensive result1 (482) 109 Total comprehensive result (4,268) (19,704) Basic loss per share (in €) 10 (0.12) (0.68) Diluted loss per share (in €) 10 (0.12) (0.68) The other comprehensive result consists completely of foreign currency translation which may be reclassified subsequently to profit or loss. Consolidated Statement of Changes in Equity for the Year Ended December 31, 2025 x € 1,000 Note Share capital Share premium reserve Equity component convertible bonds Treasury shares Foreign currency translation reserve Accumulated deficits Total Balance at January 1, 2024 1,747 130,969 5,738 (347) 1,676 (113,499) 26,284 Result for the year - - - - - (19,813) (19,813) Other comprehensive result - - - - 109 - 109 Convertible bonds (net of tax)1 17 - - (221) - - - (221) Issuance of shares related to business combinations 1 145 - - - - 146 Issuance of shares to employees 10/22 - - - 269 - 69 338 Balance at December 31, 2024 1,748 131,114 5,517 (78) 1,785 (133,243) 6,843 Result for the year - - - - - (3,786) (3,786) Other comprehensive result - - - - (482) - (482) Convertible bonds (net of tax)2 17 - - (5,517) - - 5,517 - Issuance of shares 10 240 24,245 - - - - 24,485 Issuance of shares to employees 10/22 2 347 - 78 - (202) 225 Balance at December 31, 2025 1,990 155,706 - - 1,303 (131,714) 27,285 The equity component of convertible bonds is presented net of tax (note 17). It includes a Deferred tax liability recognized through equity offset by a related deferred tax asset recognized through equity, see note 9. On March 11, 2025, CM.com repurchased its convertible bonds for € 87 million, refer to note 17. As part of this transaction, the equity component of the convertible bonds of € 5.5 million, previously recognized as a separate component of equity, was reclassified to accumulated deficits in accordance with IAS 32.IE46, with no impact on total equity. Consolidated Statement of Cash Flows for the Year Ended December 31, 2025 x € 1,000 Note 2025 2024 Operating result (4,550) (15,270) Adjustments for: - Amortization, depreciation, and impairments 5/7/8 22,909 31,732 - Movement in provisions 18 (48) (10) Changes in working capital: - Inventories 86 287 - Trade and other receivables 14 7,452 (6,537) - Trade and other payables 19 (17,245) 9,727 - Contract liabilities 20 508 536 - Trade and other receivables from merchants and financial institutions 14 2,907 (2,491) - Trade and other payables to merchants and financial institutions 19 (2,189) 459 Interest received 24 370 1,031 Corporate income tax 9 (730) (1,454) Share benefit program personnel 22 225 338 Cash flow from operating activities 9,695 18,348 Investments in intangible assets 5 (14,442) (14,841) Investments in property, plant, and equipment 7 (872) (2,199) Loans granted / advance payments 13 (191) (6,505) Repayment of loans granted / advance payments 13 1,236 2,411 Deposits paid 13 (97) (168) Deposits refunded 13 130 308 Disposal / (acquisitions) of subsidiaries and associates (net of cash)1 - 231 Cash flow from investing activities (14,236) (20,763) Net proceeds from issuance of shares 10 24,485 - Net proceeds from credit facility 16 78,272 - Repayment of credit facility 16 (5,000) - Extinguishment of convertible bonds 17 (88,438) - Repayment of lease liabilities 16 (2,909) (3,989) Repayment of tax debt 16 (277) (268) Movement other long-term liabilities to merchants (17) (6) Interest paid 24 (6,679) (3,278) Cash flow from financing activities (563) (7,541) Changes in cash and cash equivalents (5,104) (9,956) Cash and cash equivalents at January 1 38,400 48,599 Currency results on cash and cash equivalents (86) (243) Cash and cash equivalents at December 31 15 33,210 38,400 Related to the settlement of earn-out receivable from the divestment of PHOS Services Ltd. in 2023. Notes to the Consolidated Financial Statements 1. Corporate Information The activities of CM.com N.V. (CM.com) and its group companies (for a list of group companies, see note 27) primarily consist of advising, guiding, implementing, and assisting companies approaching its target audience through modern (media) techniques. CM.com N.V. has its statutory seat at Konijnenberg 30, Breda, the Netherlands, and is registered with the Chamber of Commerce under registration number: 70523770. The shares of CM.com N.V. (the ultimate parent) are listed on Euronext Amsterdam under the ticker symbol CMCOM. 2. Basis of Preparation The consolidated financial statements of CM.com have been prepared in accordance with International Financial Reporting Standards (IFRS) as issued by the International Accounting Standards Board (IASB), adopted and endorsed by the European Union (“EU-IFRS”), and with the statutory provisions of Part 9, Book 2 of the Dutch Civil Code. The Management Board has assessed the going concern assumption in the preparation of the consolidated financial statements. This assessment was based on the assumptions underlying the strategic business plan for the period 2026–2028. The achievement of this plan is important for realizing the projected EBITDA levels required to comply with the financial covenants under the company’s financing arrangements. The plan includes clearly defined growth initiatives and ongoing OPEX optimization measures. Together, these are expected to generate sufficient operating cash flows to meet financial obligations and to maintain adequate headroom for continued investments in the business. Based on sensitivity analyses and the outcomes of various scenarios, Management believes that, provided the key initiatives in the strategic plan are successfully executed, the company has adequate resources to continue in operational existence for at least twelve months after the adoption of the financial statements. No events or conditions have been identified that would give rise to significant doubt about the company’s ability to continue as a going concern. Accordingly, the consolidated financial statements have been prepared on a going concern basis. The consolidated financial statements have been prepared on a historical cost basis, except for financial assets and liabilities, which are valued at fair value through profit or loss or at amortized costs. The consolidated financial statements are presented in euros and rounded to the nearest thousand, unless otherwise stated. The euro is the functional currency of the company. The financial information relating to CM.com N.V. is presented in the corporate financial statements. The corporate financial statements have been prepared in accordance with sub-article 8 of article 362, Book 2 of the Dutch Civil Code. The accounting policies applied in the corporate financial statements are consistent with those applied in the consolidated financial statements. Current assets are assets that are expected to be realized in the company's normal operating cycle and are held primarily for trading purposes. They are anticipated to be realized within twelve months after the reporting period. All other assets are considered non-current. Current liabilities are those expected to be settled within the company's normal operating cycle, held primarily for trading, and due to be settled within twelve months. They also include liabilities for which the entity does not have an unconditional right to defer settlement beyond twelve months (note that settlement by issuing equity instruments does not affect classification). Other liabilities that don't meet (one of) these criteria are classified as non-current. Transactions in foreign currencies are translated into euros using the exchange rates applicable at the transaction date. At the reporting date, monetary assets and liabilities denominated in foreign currencies are translated to euros using the rates at the reporting date. Exchange rate differences are recognized in profit or loss. Fair Value Estimation Fair value is the price that would be received to sell an asset or paid to transfer a liability in an orderly transaction between market participants at the measurement date, regardless of whether that price is directly observable or estimated using another valuation technique. As no financial assets and liabilities of the group, except for the convertible bonds, are traded in active markets, the fair value of financial assets and liabilities is estimated by discounting the future contractual cash flows at current market interest rates that are available to the group for similar financial assets and liabilities. Fair value for measurement and/or disclosure purposes in these consolidated financial statements is determined on such a basis, except for share-based payment transactions that are within the scope of IFRS 2 and leasing transactions that are within the scope of IFRS 16. All assets and liabilities for which fair value is measured or disclosed in the consolidated financial statements are categorized within level 2 of the fair value hierarchy, as the company uses observable market data for the interest rates. The different valuation methods are referred to as "hierarchies" as described below: level 1: The fair value is determined using quoted (unadjusted) market prices in active markets for identical assets or liabilities. level 2: The fair value is calculated using inputs other than quoted prices included within level 1 that are observable for the asset or liability, either directly (that is, as prices) or indirectly (that is, derived from prices) observable. level 3: The fair value is determined using inputs for the asset or liability that are not based on observable market data (unobservable inputs). 3. Basis of Consolidation The consolidated financial statements are prepared by consolidating the financial statements of the company and its subsidiaries. Subsidiaries are entities controlled by CM.com. CM.com controls an entity when it has power over the investee, is exposed to or has the right to variable returns from its involvement with that entity, and can influence those returns through its power over the entity. CM.com reassesses whether or not it controls an investee if facts and circumstances indicate that there are changes to one or more of the three elements of control listed above. Control is generally achieved by owning more than 50% of the voting rights. When the company has less than a majority of the voting rights of an investee, it considers that it has power over the investee when the voting rights are sufficient to give it the practical ability to direct the relevant activities of the investee unilaterally. The company considers all relevant facts and circumstances in assessing whether or not the company’s voting rights in an investee are sufficient to give it power, including: the size of the company’s holding of voting rights relative to the size and dispersion of holdings of the other vote holders; potential voting rights held by the company, other vote holders, or other parties; rights arising from other contractual arrangements; any additional facts and circumstances that indicate that the company has, or does not have, the current ability to direct the relevant activities at the time that decisions need to be made, including voting patterns at previous shareholders’ meetings. The financial statements of subsidiaries are included in the consolidated financial statements from the date control begins until the date control ends. Accounting policies of subsidiaries have been adjusted where necessary to align with the policies adopted by CM.com. Specifically, the results of subsidiaries acquired or disposed of during the year are included in profit or loss from the date CM.com gains control until the date that CM.com ceases to control the subsidiary or foundation. During consolidation, intercompany balances and transactions, cash flows relating to transactions between members of the group and any unrealized gains and losses or income and expenses from intercompany transactions, are eliminated. Unrealized gains from transactions with associates are eliminated against the investment to the extent of CM.com’s interest in the investee. Unrealized losses are eliminated in the same way as unrealized gains, but only if there is no indication of impairment. Where necessary, adjustments are made to the financial statements of subsidiaries to bring the accounting policies used in line with CM.com’s accounting policies. Key Disclosures 4. Revenue Recognition and Segment Reporting CM.com’s operations are divided into segments, reflecting our business unit structure. Management monitors business performance at gross profit level and overall costs. Not all costs, assets, and liabilities are directly allocated to CM.com’s segments, and therefore not presented as such. Non-current assets, such as intangible assets, goodwill and property, plant, and equipment, are mainly located in the Netherlands. Since 2024, CM.com’s operating segments consist of Connect, Engage, Pay, and Live. Connect Connect revenue consists of omnichannel messaging (such as Bulk SMS, WhatsApp, Apple Business Chat, and RCS) and voice services that form part of CM.com's core service offering. Revenue from these products can be transactional and are recorded when they occur (point-in-time) or as part of a subscription plan being recorded on a straight-line basis over the duration of the contract. The cost of services for the Connect segment comprises primarily of fees paid to mobile network operators and OTT providers for the purchase of mobile messages, voice, mobile data capacity, and OTT communication capabilities. Engage Engage revenue consists of a portfolio of services that contribute to the optimization of our client’s mobile business journey with their (potential) clients. Subscription fees are charged for access to these platform features. Revenue for these services is recognized on a straight-line basis over the duration of the contract. The cost of services for the Engage segment comprises primarily of cloud costs and fees paid to suppliers of CM.com’s supplementary platform features, data, email, digital signing, identification, and verification services. Pay Pay revenue is derived from online and in-person payments and consists of settlement- and start-rate fees, hardware sales, and service-level agreements. Settlement fees include fees paid by merchants, usually as a percentage of the transaction value as well as interchange and payment network fees incurred from financial institutions and a mark-up charged by CM.com for its payment services. Start-rate fees comprise fixed fees per transaction for the use of CM.com’s platform. The hardware sale-related revenues are transactional and are recognized when they occur (point-in-time). Service-level agreements are recognized over time. Cost of services for Pay comprises primarily of fees paid to financial services providers, as well as interchange and payment network fees charged by financial institutions for facilitating payments through CM.com’s platform and the purchase of payment terminals. Live Live revenue is generated from ticketing and related services. Revenues include ticket service fees, event-application subscriptions, rental of POS terminals and scanners, and insurance fees. Ticket service fees consist of fixed or percentage-based fees per transaction and are recognized at a point-in-time, as are the rental of POS terminals and scanners, and the insurance fees. Event-application subscriptions and, in certain cases, subscription-based ticket fees are recognized over time. The cost of sales for Live mainly consists of the purchase or rental of POS terminals, transaction fees, and cloud costs. An insurance payout provision (see note 18) is both recognized and released within the cost of sales. Finally, there are some client-specific cost of sales for individual events. Segment Reporting The revenue and results generated by each of CM.com’s operating segments, disaggregated by service lines and corresponding to the reportable segments, are summarized as follows: 2025 x € 1,000 Connect Engage Pay Live Total Revenue 204,700 29,749 13,049 11,896 259,394 Cost of services (166,493) (3,398) (6,001) (2,203) (178,095) Gross profit 38,207 26,351 7,048 9,693 81,299 Operational income and expenses (62,940) Operating result, EBITDA 18,359 Amortization, depreciation, and impairments (22,909) Operating result, EBIT (4,550) Financial income and expenses 902 Result before tax (3,648) 2024 x € 1,000 Connect Engage Pay Live Total Revenue 220,286 28,495 13,031 12,437 274,249 Cost of services (179,946) (3,725) (5,665) (1,806) (191,142) Gross profit 40,340 24,770 7,366 10,631 83,107 Operational income and expenses (66,645) Operating result, EBITDA 16,462 Amortization, depreciation, and impairments (31,732) Operating result, EBIT (15,270) Financial income and expenses (3,988) Result before tax (19,258) Geographic Reporting In the table below revenue is disaggregated by CM.com's operating segments and geographical location, which is determined based on the billing address of the legal establishment of our customers. 2025 x € 1,000 Connect Engage Pay Live Total EMEA 114,383 27,227 12,946 11,649 166,205 of which the Netherlands 34,517 20,462 10,976 8,805 74,760 of which France 33,540 1,697 26 251 35,514 APAC 59,342 1,838 36 100 61,316 Americas 30,975 684 67 147 31,873 of which the USA 30,447 365 - 61 30,873 204,700 29,749 13,049 11,896 259,394 2024 x € 1,000 Connect Engage Pay Live Total EMEA 110,897 26,251 12,935 12,227 162,310 of which the Netherlands 39,424 20,276 10,310 9,525 79,535 of which France 30,903 1,588 40 24 32,555 APAC 67,470 1,598 57 62 69,187 of which Singapore 35,296 5 - - 35,301 Americas 41,919 646 39 148 42,752 of which the USA 41,221 320 - 94 41,635 220,286 28,495 13,031 12,437 274,249 In 2025 no single client or partner contributed more than 10% to CM.com’s revenue. In 2024, one client contributed € 34.6 million to Connect revenue in the USA. Revenue is reduced by an amount of € 560 thousand (2024: € 769 thousand) related to partner commissions paid to agents. 5. Intangible Assets and Goodwill Goodwill and intangible assets with indefinite useful lives are stated at cost less accumulated impairments. Goodwill and intangible assets with indefinite useful lives are not amortized and are tested for impairment annually. Negative goodwill is recognized directly in profit or loss as other income. An impairment in respect of goodwill cannot be reversed. For more information, see note 6. Intangible assets with finite useful lives are stated at cost less accumulated amortization and, if applicable, less impairments. Intangible assets with finite useful lives are assessed for impairment whenever there is an indication that the intangible asset may be impaired. Subsequent expenditure is capitalized only when it increases the future economic benefits embodied in the specific asset to which it relates. All other expenditure, including expenditure on internally generated goodwill and brands, is recognized in profit or loss as incurred. Research costs are expensed as incurred. Development expenditures on an individual project are recognized as an intangible asset when CM.com can demonstrate the availability for use, the capability to generate future economic benefits, and the ability to measure the expenditure reliably during development. Following initial recognition of the development expenditure as an asset, the asset is carried at cost less accumulated amortization and, if applicable, less accumulated impairments. During the period of development, the asset is tested for impairment annually. Amortization is recognized in profit or loss on a straight-line basis over the estimated useful lives of intangible assets, other than goodwill and domain names, which have indefinite useful lives, from the date they are available for use. Amortization methods, useful lives, and residual values are reviewed at each reporting date and adjusted if appropriate. At the end of each reporting period, the company assesses whether there is any indication that an impairment loss recognized in prior periods for an asset other than goodwill may no longer exist or may have decreased. If any such indication exists, the entity shall estimate the recoverable amount of that asset. A summary of the movements in intangible assets and goodwill is provided: x € 1,000 Platform (software)1 Goodwill Customer relations Other Total Costs At December 31, 2023 79,188 29,841 28,382 4,831 142,242 Additions related to external costs 158 - 120 489 767 Development costs 14,430 - - - 14,430 Divestments (4,961) - - (226) (5,187) Currency difference - - 60 - 60 At December 31, 2024 88,815 29,841 28,562 5,094 152,312 Additions related to external costs 142 - 26 - 168 Development costs 14,274 - - - 14,274 Divestments (9,375) - (6,752) (564) (16,691) Currency difference (2) - (72) - (74) At December 31, 2025 93,854 29,841 21,764 4,530 149,989 Amortization and impairments At December 31, 2023 25,309 444 14,240 1,398 41,391 Amortization 12,731 - 2,731 520 15,982 Impairments 301 8,780 - 290 9,371 Divestments (4,961) - - (226) (5,187) Currency difference - - 53 - 53 At December 31, 2024 33,380 9,224 17,024 1,982 61,610 Amortization 13,085 - 2,429 515 16,029 Impairments 685 - - - 685 Divestments (9,375) - (6,752) (564) (16,691) Currency difference (1) - (67) 59 (9) At December 31, 2025 37,774 9,224 12,634 1,992 61,624 Carrying amount At December 31, 2024 55,435 20,617 11,538 3,112 90,702 At December 31, 2025 56,080 20,617 9,130 2,538 88,365 Estimated useful lives (years) 5-10 indefinite 10 5-10 / indefinite Platform (software) contains capitalized development hours. In total € 49,592 thousand of the net book value of this category is self-generated (2024: € 45,518 thousand). 6. Impairment Test CM.com tests goodwill and intangible assets with indefinite useful lives annually, or whenever management identifies conditions that may indicate a risk of impairment. For the purpose of impairment testing, goodwill acquired in a business combination is, from the acquisition date, allocated to each cash-generating units (CGUs), that are expected to benefit from the combination, irrespective of whether other assets or liabilities of the acquirement are assigned to those units. Domain names with indefinite useful lives are applicable to all CGUs and allocated based on an allocation key. During the restructuring into business units in 2024, several assets, (including goodwill and intangible assets with indefinite useful lives) were reallocated among CGUs to ensure they accurately reflect the business units (as explained in note 4): 2025 x € 1,000 Connect Engage Pay Live Goodwill 1,029 17,973 - 1,615 Domain names 858 497 - 212 Pre-tax WACC 16.75% 15.13% 15.95% 13.29% Post-tax WACC 12.43% 11.22% 11.83% 9.86% 2024 x € 1,000 Connect Engage Pay Live Goodwill 1,029 17,973 - 1,615 Domain names 888 461 - 218 Pre-tax WACC 14.50% 13.74% 15.91% 13.11% Post-tax WACC 10.76% 10.19% 11.80% 9.72% CGUs are tested for impairment by comparing the carrying amount of each CGU to its recoverable amount. The recoverable amount is based on the net present value of future estimated cash flows (value-in-use). The value-in-use calculation is based on cash flow projections over five years, except for CGU Pay, which uses a seven-year forecast per IAS 36.33(b) due to its ramp-up phase and long-term growth potential. Projections are derived from the strategic business plan (2026–2028), approved by the Management and Supervisory Boards, with forecasts beyond 2028 developed top-down. Based on consistent year-over-year growth assumptions, the plan projects gross profit CAGRs of 5% for Connect, 25% for Engage, and 4% for Live for 2025-2028. CGU Pay assumes stable growth to achieve industry-standard EBITDA margins, with a projected gross profit CAGR of 13% for 2025–2032. Key assumptions include a 2.30% growth rate (2024: 2,20%) and a post-tax weighted average cost of capital (WACC) based on peer benchmarks and CM.com’s target capital structure (see table). Sensitivity analysis shows sufficient headroom across CGUs to absorb adverse changes in WACC (+1%) and growth rates (-0.5%). No impairment charges were recognized during 2025. During 2024 an impairment charge of € 8.8 million, relating to Goodwill associated with acquisitions in CGU Pay, was recognized under "Amortization, Depreciation, and Impairments" in the profit or loss account. For CGU Pay, the extended forecast reflects its scale-up phase, requiring additional years to achieve industry-average EBITDA margins through transaction volume growth and cost control. Gross profit CAGR from 2020–2025 was 16%, including SepaSoft B.V.’s acquisition, and current payment industry conditions support stable margins. Detailed targets and a robust forecasting process provide confidence in achieving growth through sales focus and integrated platform services. The impairment test for CGU Pay was validated by an independent market-based valuation using comparable company (CCA) and transaction (CTA) methods. Revenue multiples, adjusted for differences, confirm the fair value of CGU Pay, reflecting its scalability in revenue and profitability, requiring significant time to realize its full potential. 7. Property, Plant, and Equipment Property, plant, and equipment are presented at cost less accumulated depreciation and, if applicable, less impairments. Costs include the purchase price and all costs directly attributable to bringing the asset to the location and condition for it to be capable of operating as intended by management. Depreciation is based on the estimated useful life and calculated as a fixed percentage of cost, taking into account any residual value. Depreciation commences from the date an asset is brought into use. Depreciation is recognized in profit or loss on a straight-line basis over the estimated useful life. Depreciation methods, useful lives, and residual values are reviewed at each reporting date. A summary of the movements in property, plant, and equipment is provided: x € 1,000 Platform (hardware) Furniture & fixtures Vehicles Hardware workplace Leasehold improvements Total Costs At December 31, 2023 3,770 2,554 270 1,953 2,820 11,367 Additions 1,721 108 24 293 53 2,199 Divestments (612) (114) (41) (373) (15) (1,155) Currency difference 30 1 - 11 - 42 At December 31, 2024 4,909 2,549 253 1,884 2,858 12,453 Additions 420 81 - 297 74 872 Divestments (255) - - - (83) (338) Currency difference (47) (2) - (20) - (69) At December 31, 2025 5,027 2,628 253 2,161 2,849 12,918 Depreciation and impairments At December 31, 2023 1,462 268 174 298 645 2,847 Depreciation 540 339 5 610 275 1,769 Impairments 67 - - - - 67 Divestments (612) (114) (37) (373) (15) (1,151) Currency difference 16 - - 16 - 32 At December, 31 2024 1,473 493 142 551 905 3,564 Depreciation 568 346 4 623 282 1,823 Impairments - - - - - - Divestments (255) - - - (83) (338) Currency difference (24) - - (7) - (31) At December 31, 2025 1,762 839 146 1,167 1,104 5,018 Carrying amount At December 31, 2024 3,436 2,056 111 1,333 1,953 8,889 At December 31, 2025 3,265 1,789 107 994 1,745 7,900 Estimated useful lives (years) 10 10 5 5 10 8. Right-of-Use Assets Right-of-use (ROU) assets are initially measured at cost and subsequently presented at cost less accumulated amortization and, if applicable, less impairments, and adjusted for remeasurements of the related lease liability. The cost of a right-of-use asset comprises the present value of the lease payments outstanding at the commencement date, discounted using the interest rate implicit in the lease. If that rate cannot be readily determined, CM.com’s incremental borrowing rate is used. In practice, CM.com generally applies its incremental borrowing rate as the discount rate. Right-of-use assets are amortized over the term of the lease liability using a straight-line method as a fixed percentage of cost, taking into account any residual value. Amortization commences when the asset is available for use. Lease liabilities are presented under borrowings, see note 16. Right-of-use assets are presented as a separate line in the statement of financial position. In the statement of profit or loss, amortization of right-of-use assets and interest on lease liabilities are recognized separately. In the cash flow statement, the low-value leases (value lower than € 5 thousand when new) and short-term leases (less than twelve months) are presented as part of the cash flow from operating activities. Interest paid and the repayments related to leases are presented as part of the cash flow from financing activities. The maturity analysis for lease liabilities is disclosed in note 11. Amortization methods and useful lives are reviewed at each reporting date. Group as a Lessee The determination of whether an arrangement is (or contains) a lease is based on the substance of the arrangement at the inception. An arrangement is, or contains, a lease if its fulfillment depends on the use of a specific asset and it conveys the right to control the use of that asset, even if the asset is not explicitly specified in the contract. CM.com recognizes a right-of-use asset and a corresponding lease liability for all lease arrangements in which it is the lessee, except for short-term leases and leases (lease term of twelve months or less), and leases of low-value assets. For these exempt leases, lease payments are recognized as an operating expense on a straight-line basis over the lease term, unless another systematic basis better represents the pattern of consumption of the economic benefits of the underlying asset. CM.com recognizes right-of-use assets and lease liabilities at the lease commencement date. CM.com applies the practical expedient under IFRS 16 not to separate non-lease components from lease components. The expenses and total cash outflow for leases are as follows: x € 1,000 2025 2024 Interest expense on lease liabilities 518 547 Expenses relating to short-term leases 723 692 Repayment of lease liabilities 2,909 3,989 A summary of the movements in right-of-use assets is provided: x € 1,000 Land and buildings Furniture & fixtures Platform (Hardware) Platform (Software) Vehicles Total Costs At December 31, 2023 20,330 120 16,524 1,127 958 39,059 Additions 1,849 - - - 229 2,078 Ending of lease agreements (1,269) (91) (101) - (226) (1,687) Currency difference 39 - 32 - - 71 At December 31, 2024 20,949 29 16,455 1,127 961 39,521 Additions 1,194 - - - 21 1,215 Ending of lease agreements (125) - - - (56) (181) Remeasurement (lease-term change) (52) - - - - (52) Currency difference (89) - (79) - - (168) At December 31, 2025 21,877 29 16,376 1,127 926 40,335 Amortization and impairments At December 31, 2023 6,085 91 4,668 678 360 11,882 Amortization 2,442 22 1,639 113 250 4,466 Ending of lease agreements (1,169) (91) (101) - (201) (1,562) Impairments - - 77 - - 77 Currency difference 24 - 4 - - 28 At December 31, 2024 7,382 22 6,287 791 409 14,891 Amortization 2,369 7 1,637 113 219 4,345 Ending of lease agreements (125) - - - (32) (157) Impairments - - 27 - - 27 Currency difference (65) - (13) - - (78) At December 31, 2025 9,561 29 7,938 904 596 19,028 Carrying amount At December 31, 2024 13,567 7 10,168 336 552 24,630 At December 31, 2025 12,316 - 8,438 223 330 21,307 9. Taxation Fiscal Unity CM.com N.V. forms a fiscal unity for corporate income tax purposes with the Dutch subsidiaries, excluding CM.com Ticket Guarantee N.V. Income tax is allocated to individual members of the fiscal unity as if they were independently liable for tax. Current income tax Current income tax assets and liabilities are measured at the amount expected to be recovered from or paid to the tax authorities. The tax rates and tax laws used to compute these amounts are those that are enacted or substantively enacted at the reporting date in the countries where CM.com operates and generates taxable income. Management periodically evaluates positions taken in the tax returns with respect to situations in which applicable tax regulations are subject to interpretation and establishes provisions where appropriate. The effective income tax amount on the company’s result before tax differs from the statutory income tax amount that would arise using the applicable statutory income tax rate. Major components of the income tax expenses are: x € 1,000 2025 2024 Current tax: Current period 995 708 Adjustments prior periods (35) 60 Deferred tax: Movement in temporary differences (2,084) (1,101) Movement in tax losses carried forward 1,230 856 Tax rate differences 32 32 Taxation according to profit or loss account 138 555 The effective tax rate for 2025 is minus 3.8% (2024: minus 2.9%) and can be reconciled as follows: x € 1,000 2025 2024 Result before tax (3,648) (19,258) Income tax expense at statutory tax rate (25.8%) (941) (4,969) Non-deductible expenses 922 2,680 Tax-deductible equity items1 (133) - Rate differential (219) (440) Non-recognition of deferred tax asset 1,230 3,987 Tax losses utilized (686) (542) Deferred tax asset through equity - (221) Tax relating to prior periods (35) 60 Tax charged against result before tax 138 555 Effective tax rate (3.8%) (2.9%) Refers to costs recognized in equity (€ 515 thousand), directly attributable to the capital injection completed on February 12, 2025 (see Consolidated statement of equity). These costs are tax-deductible but excluded from accounting profit. Deferred Tax Deferred tax assets (DTA) are recognized for unused tax losses, to the extent that it is probable that future taxable profits will be available against which the losses can be utilized. Other deferred tax assets arise from temporary differences between the carrying amounts and the tax bases of right-of-use assets, deferred costs, and convertible bonds. Deferred tax liabilities arise from temporary differences between the carrying amounts of assets and their corresponding tax bases. Deferred tax is measured using the tax rates that are expected to apply to the period in which the temporary differences reverse, based on tax laws that have been enacted or substantively enacted at the reporting date. Deferred tax assets and liabilities are offset when there is a legally enforceable right to offset current tax assets against current tax liabilities, and when the deferred tax assets and liabilities relate to income taxes levied by the same tax authority on the same taxable entity. 2025 CM.com has tax losses carried-forward of € 111.5 million as at December 31, 2025, out of which € 0.2 million expires in the following five years (for this no DTA is formed) and € 0.2 million will expire after five years (for this, a DTA of € 34 thousand is formed). € 111.2 million can be carried forward indefinitely (for this a total of € 2.8 million a DTA is formed). For unused tax losses of € 100.6 million no deferred tax asset is formed. 2024 CM.com has tax losses carried-forward of € 115.7 million as at December 31, 2024, out of which € 0.9 million expires in the following five years (for this no DTA is formed) and € 0.3 million will expire after five years (for this a DTA of € 13 thousand is formed). € 114.5 million can be carried forward indefinitely (for this a total of € 4 million a DTA is formed). For unused tax losses of € 99.4 million no deferred tax asset is formed. Deferred tax assets recognized and movements thereon: x € 1,000 Total Convertible bonds Right-of-use assets Tax losses Deferred costs Carrying amount as at December 31, 2023 after netting 1,136 - 124 410 602 Netting of tax 8,440 643 3,750 4,047 - Carrying amount as at December 31, 2023 before netting 9,576 643 3,874 4,457 602 Mutations through profit or loss (856) - - (856) - Mutations through equity (221) (221) - - - Charge to profit or loss (128) - (162) - 34 Exchange differences 25 - - 7 18 Carrying amount as at December 31, 2024 before netting 8,396 422 3,712 3,608 654 Netting of tax (7,154) (422) (3,556) (3,176) - Carrying amount as at December 31, 2024 after netting 1,242 - 156 432 654 Netting of tax 7,154 422 3,556 3,176 - Mutations through profit or loss (1,230) (422) - (808) - Charge to profit or loss (215) - (364) - 149 Exchange differences (65) - - (17) (48) Carrying amount as at December 31, 2025 before netting 6,886 - 3,348 2,783 755 Netting of tax (5,735) - (3,183) (2,552) - Carrying amount as at December 31, 2025 after netting 1,151 - 165 231 755 Deferred tax liabilities recognized and movements thereon: x € 1,000 Total Convertible bonds Right-of-use liabilities Other temporary differences Carrying amount as at December 31, 2023 after netting 1,535 345 - 1,190 Netting of tax 8,440 643 3,750 4,047 Carrying amount as at December 31, 2023 before netting 9,975 988 3,750 5,237 Mutations through profit or loss (1,197) (355) (194) (648) Effect of change in tax rate (39) - - (39) Carrying amount as at December 31, 2024 before netting 8,739 633 3,556 4,550 Netting of tax (7,154) (422) (3,556) (3,176) Carrying amount as at December 31, 2024 after netting 1,585 211 - 1,374 Netting of tax 7,154 422 3,556 3,176 Mutations through profit or loss (2,266) (633) (373) (1,260) Exchange differences 3 - - 3 Carrying amount as at December 31, 2025 before netting 6,476 - 3,183 3,293 Netting of tax (5,735) - (3,183) (2,552) Carrying amount as at December 31, 2025 after netting 741 - - 741 Other Disclosures 10. Capital Management CM.com manages its capital to ensure that entities in CM.com will be able to continue as a going concern while maximizing the return to shareholders through the optimization of the debt and equity balance. CM.com’s overall strategy remains unchanged from 2024. The capital structure of the company consists of net debt and shareholders’ equity. Net debt is defined as the nominal value of the outstanding revolving credit facility (RCF) as disclosed in note 16, less unrestricted cash at bank as disclosed in note 15. In 2024, net debt included the convertible bonds as disclosed in note 17. Shareholders’ equity comprises issued ordinary share capital, share premium, reserve, and accumulated deficits, as presented in the consolidated statement of financial position and disclosed below. At January 1, 2025, CM.com had 29,131,999 issued and authorized ordinary shares, with a total nominal value of € 1,748 thousand. The share premium reserve amounted to € 131,114 thousand. In February 2025, CM.com raised € 20 million in equity through an accelerated bookbuild in order to strengthen its balance sheet. In connection with this transaction, 2,985,075 ordinary shares were issued at a nominal value of € 6.70 per share, as part of the refinancing of the convertible bonds. Transaction costs of € 515 thousand, directly attributable to the capital increase, were recognized as a deduction from equity. In November 2025, CM.com issued 1,020,408 ordinary shares to Coöperatie Rensing Group in a private placement agreement, representing proceeds of € 5 million, at a nominal value of € 4.90 per share. In addition, 33,431 shares were issued under employee incentive plans, comprising the Restricted Share Unit (RSU) and Long-Term Incentive Plan (LTIP). In total, 4,038,914 shares were issued during the year. As a result, the total number of issued shares increased to 33,170,913 as at December 31, 2025, with a total nominal value of € 1,990 thousand. The share premium reserve increased to € 155,706 thousand as at December 31, 2025 (2024: € 131,114 thousand). At the balance sheet date, all outstanding shares are ordinary shares. In 2022, the company repurchased 143,925 of its own shares in connection with business combinations and 60,000 of its own shares to satisfy obligations arising from equity-settled share-based compensation plans. Of these shares, 5,039 vested during 2025 (2024: 17,472 shares), as disclosed in note 22. At year-end, the balance of treasury shares amounted to nil (2024: € 78 thousand) and represented nil shares (2024: 5,039 shares). The legal reserves amount to € 50,895 thousand (2024: € 47,303 thousand) and are considered non-distributable in accordance with Dutch law. As disclosed in note 7 of the corporate financial statements, these reserves relate to capitalized development costs and the foreign currency translation reserve. Consequently, no dividends are available for distribution. Basic and Diluted Loss Per Share The weighted average number of ordinary shares used as the denominator in the calculation of basic and diluted loss per share amounted to 31,151,456 (2024: 29,121,682). The total result after tax used in the calculation of basic and diluted loss per share for 2025 amounted to € 3,786 thousand (2024: € 19,813 thousand). In 2024, potential ordinary shares arising from the convertible bonds were considered anti-dilutive in accordance with IAS 33.41, as their assumed conversion would have decreased the loss per share from continuing operations. Accordingly, these potential ordinary shares were excluded from the calculation of diluted earnings per share for the year ended December 31, 2024. 11. Risk Management Credit Risk Credit risk represents the financial loss that would be recognized at the reporting date if a customer or counterparty to a financial instrument fails to meet its contractual obligations and arises principally from CM.com’s receivables from customers. CM.com’s exposure to credit risk is mainly influenced by the individual characteristics of each customer. The demographics of CM.com’s customer base, including the default risk associated with the industry and the country in which customers operate, have a less significant impact on credit risk. CM.com mitigates credit risk by setting appropriate credit limits for each customer. The creditworthiness of debtors is continuously monitored, and appropriate actions are taken with respect to overdue invoices. Exposure to Credit Risk The carrying amount of financial assets represents CM.com’s maximum exposure to credit risk. For an overview of the carrying amounts of Trade and other receivables, reference is made to note 14. No significant concentration of credit risk existed at the reporting date. Expected credit losses on trade receivables and accrued revenue are measured using a provision matrix, based on historical payment behavior over a 12-month period for each debtor and an analysis of the debtor’s current financial position. These estimates are adjusted for debtor-specific factors, general economic conditions in the industries in which the debtors operate, and an assessment of both current and forward-looking economic conditions at the reporting date. The company has two other categories of financial assets that are subject to credit risk. Other and loan receivables, as disclosed in note 13, consist of contract assets relating to advance payments made to specific Live clients. These amounts are repaid through income generated from ticket sales. As at December 31, 2025, the repayment of a loan receivable with a carrying amount of € 2.9 million (2024: € 3.9 million) was overdue. Based on the contractual arrangements, underlying guarantees, and legal advice, management’s best estimate is that the loan receivable is fully recoverable; therefore, a 0% risk rate has been applied in the measurement of expected credit losses. As at December 31, 2025, the company also recognized a contingent asset (see note 25) relating to a prepaid sublease agreement for one of its buildings. A 0% risk rate has been applied. For other financial assets, such as deposits, it is assumed that, given the low credit risk and the limited amounts involved, the expected credit losses are not significant. The changes in the provision for expected credit losses are as follows: x € 1,000 2025 2024 Balance as per January 1 2,681 2,087 Additions to provision 968 1,534 Utilization of provision (1,119) (710) Release of provision (749) (230) Balance as per December 31 1,781 2,681 The aging of accounts receivables and accrued revenue is set out below: x € 1,000 2025 2025 2024 2024 Gross Net Gross Net Current 35,308 35,046 38,593 38,206 1 - 30 days 4,007 3,955 8,685 8,547 31 - 60 days 1,488 1,446 791 753 > 60 days 1,865 1,646 2,509 2,185 100% provided 1,206 - 1,794 - 43,874 42,093 52,372 49,691 The buckets and expected credit losses (ECL) are estimated as follows: Buckets ECL % 2025 2024 Current 0.8% 1.0% 1 - 30 days 1.4% 1.7% 31 - 60 days 4.7% 5.8% > 60 days 10.7% 14.1% 100% provided 100.0% 100.0% The ECL improvement reflects enhanced payment behavior driven by direct debit migration and strengthened APAC credit management processes aligned with local practices, resulting in more timely collections and structurally lower credit risk across the portfolio. Impairment of Financial Assets CM.com applies the IFRS 9 simplified approach to measure expected credit losses, whereby a lifetime expected credit loss allowance is recognized for all trade receivables and accrued revenue, excluding VAT. To determine expected credit losses, trade receivables and accrued revenue are grouped based on shared credit risk characteristics, primarily determined by days past due. Accrued revenue relates to unbilled services and is considered to have substantially the same credit risk characteristics as current trade receivables for similar contract types. Expected loss rates are based on historical payment patterns and the corresponding credit losses experienced in prior periods. Trade receivables are written off when there is no reasonable expectation of recovery. Indicators of this include, among others, the failure of a debtor to engage in a repayment plan with CM.com or to make contractual payments. Impairments on trade receivables and accrued revenue are recognized, excluding VAT, through profit or loss under other operational expenses. Subsequent recoveries of amounts previously written off are credited against the same line item. Market Risk Market risk is the risk that changes in market prices, such as interest rates and foreign currencies, may adversely affect CM.com’s income or the value of its financial instruments. The objective of market risk management is to manage and control market risk exposures within acceptable limits, while optimizing the return on risk. CM.com's market risk exposure primarily relates to interest rate risk and foreign currency risk. Interest Rate Risk Interest rate risk is the risk that the fair value or future cash flows of an exposure will fluctuate as a result of changes in interest rates. CM.com is exposed to interest rate risk on its revolving credit facility (see note 16). The interest rate consists of a variable component (EURIBOR) plus a fixed margin ranging between 4.75% and 5.50% per annum, depending on the leverage ratio. Interest expenses are calculated monthly in arrears based on the outstanding drawn amount. As of December 31, 2025, € 75 million was drawn under the facility, exposing the company to fluctuations in EURIBOR rates. A 100 basis point increase in EURIBOR would result in additional annual interest expense of approximately € 750 thousand on the current drawn amount and CM.com continuously monitors interest rate developments. The interest rate risk is considered remote. Foreign Currency Risk Foreign currency risk is the risk that the fair value or future cash flows will fluctuate as a result of changes in foreign exchange rates. CM.com's global operations create exposure to foreign currency risk, primarily arising from sales and purchases denominated in currencies other than the functional currency. This risk is partially mitigated through natural hedging by matching sales and purchase contracts in the same local currencies. CM.com's exposure to foreign currency risk was as follows based on notional amounts: 2025 x € 1,000 USD GBP CNY ZAR INR SEK Cash and cash equivalents 354 268 203 204 63 - Short-term loan receivables - 2,877 - - - - Trade receivables 7,901 74 184 129 103 296 Trade payables (2,928) (2,127) (18) (109) (8) (205) 5,327 1,092 369 224 158 91 2024 x € 1,000 USD GBP CNY ZAR INR JPY Cash and cash equivalents 1,354 37 339 259 136 180 Short-term loan receivables - 4,385 - - - - Trade receivables 16,011 176 103 132 97 16 Trade payables (5,842) (1,130) (40) (89) (37) (720) 11,523 3,468 402 302 196 (524) The amounts disclosed exclude the activities of the foundations, as their cash, receivables, and payables are both received and settled in the same currency. Consequently, the foreign currency risk relating to these balances is considered remote. Foreign Currency Sensitivity The summary below shows the effect on profit or loss of a reasonably possible change in foreign exchange rates of +5%, with all other variables held constant, for the primary foreign currencies. x € 1,000 2025 2024 USD 251 533 GBP 172 158 CNY 18 19 SEK 14 - ZAR 11 14 INR 10 10 JPY 2 (25) Liquidity Risk Liquidity risk is the risk that CM.com will be unable to meet its financial obligations as they fall due. CM.com’s approach to managing liquidity risk is to ensure, as far as possible, that sufficient liquidity is available at all times to meet liabilities when due, under both normal and stressed conditions, without incurring unacceptable losses or risking damage to CM.com’s reputation. Liquidity budgets are prepared periodically, and liquidity risks are managed through interim monitoring and, where necessary, adjustments to cash flow planning and funding arrangements. These liquidity budgets take cash constraints into account. CM.com ensures that it maintains sufficient cash on demand to meet expected operational expenses and financial obligations. This assessment excludes the potential impact of extreme circumstances that cannot reasonably be predicted, such as natural disasters. On February 12, 2025, CM.com entered into a facility agreement with HSBC Continental Europe, ING Bank N.V., and ABN AMRO Bank for a revolving credit facility (RCF) with a principal amount of € 80 million. The facility includes customary covenants and guarantees in the event of default. Further details are disclosed in note 16. Exposure to Liquidity Risk The table below summarizes CM.com’s financial liabilities based on contractual undiscounted cash flows. 2025 x € 1,000 Note 0-3 months 4-12 months 1-5 years Over 5 years Total Carrying amount Lease liabilities 16 863 2,394 9,357 3,283 15,897 13,696 Revolving credit facility 16 - - 75,000 - 75,000 73,790 Trade payables 19 28,495 - - - 28,495 28,495 Other financial liabilities 19 53,822 - - - 53,822 53,822 Tax debt 16 75 224 224 - 523 508 83,255 2,618 84,581 3,283 173,737 170,311 The principal amount of the revolving credit facility of € 75 million is presented in the maturity bucket aligned with the facility's contractual maturity of February 2028, with two one-year extension options available, see note 16. Subsequent to the reporting date, in January 2026, the company repaid € 5 million. As no contractual obligation existed at December 31, 2025, to settle this amount, the repayment does not impact the contractual maturity analysis disclosed above. 2024 x € 1,000 Note 0-3 months 4-12 months 1-5 years Over 5 years Total Carrying amount Lease liabilities 16 1,190 2,680 9,562 5,148 18,580 15,494 Convertible bonds 17 1,000 1,000 102,000 - 104,000 97,630 Trade payables 19 42,284 - - - 42,284 42,284 Other financial liabilities 19 57,815 - - - 57,815 57,815 Tax debt 16 75 224 523 - 822 785 102,364 3,904 112,085 5,148 223,501 214,008 12. Financial Instruments Financial assets and liabilities are initially recognized when CM.com becomes a party to the contractual provisions of the instrument. Financial Assets The financial assets to which CM.com is a party include trade and other receivables, loan receivables, deposits, equity investments, cash and cash equivalents. Classification and Measurement Financial assets are initially recognized at fair value plus, in the case of financial assets not measured at fair value through profit or loss, transaction costs that are directly attributable to their acquisition. Trade receivables without a significant financing component are initially measured at the transaction price. After initial recognition, financial assets are subsequently measured either at amortized cost or at fair value through profit or loss, depending on both CM.com’s business model for managing the financial assets and the contractual cash flow characteristics of the financial asset. A financial asset is measured at amortized cost using the effective interest method if both of the following conditions are met: the asset is held within a business model whose objective is to hold assets to collect contractual cash flows; and the contractual terms of the asset give rise on specified dates to cash flows that are solely payments of principal and interest on the principal amount outstanding. Financial assets held for trading, such as equity investments, are valued at fair value through profit or loss. Financial assets measured at amortized cost are subsequently reduced by impairment losses. For the recognition of expected credit losses on financial assets not measured at fair value through profit or loss, reference is made to note 11. Interest income is calculated using the effective interest method. Interest income, foreign exchange results, and impairment losses are recognized in profit or loss. The carrying amounts of CM.com’s financial assets are considered to be a reasonable approximation of their fair values. Derecognition of Financial Assets CM.com derecognizes a financial asset when the contractual rights to the cash flows from the asset expire, or when it transfers the financial asset and the transfer qualifies for derecognition. A transfer qualifies for derecognition when substantially all of the risks and rewards of ownership of the financial asset are transferred, or when CM.com neither transfers nor retains substantially all of the risks and rewards of ownership and does not retain control of the financial asset. Any gain or loss arising from derecognition is recognized in profit or loss. Financial Liabilities Financial liabilities to which CM.com is a party include trade and other payables, and borrowings, including lease liabilities. In prior periods, these also included convertible bonds. Classification and Measurement Financial liabilities are initially recognized at fair value less, in the case of financial liabilities not measured at fair value through profit or loss, transaction costs that are directly attributable to their issue. After initial recognition, financial liabilities are subsequently measured at amortized cost, except for contingent consideration arising from business combinations, which is measured at fair value through profit or loss, with changes in fair value recognized in profit or loss. Any difference between the proceeds (net of transaction costs) and the redemption amount is recognized in profit or loss over the term of the borrowings using the effective interest method. Lease liabilities are initially measured at the present value of the lease payments that are not paid at the commencement date, discounted using the interest rate implicit in the lease or, if that rate cannot be readily determined, CM.com’s incremental borrowing rate. Generally, CM.com uses its incremental borrowing rate as the discount rate. Subsequently, the lease liability is increased by interest expense and reduced by lease payments made. The lease liability is remeasured when there is a change in future lease payments resulting from: a change in an index or rate; a change in the estimate of amounts expected to be payable under a residual value guarantee; or changes in the assessment of whether a purchase or extension option is reasonably certain to be exercised, or a termination option is reasonably certain not to be exercised. A maturity analysis of lease liabilities is disclosed in note 11. Derecognition of Financial Liabilities CM.com derecognizes a financial liability when its contractual obligations are discharged or cancelled, or expire. A financial liability is also derecognized when its terms are modified and the resulting cash flows are substantially different. In such cases, a new financial liability is recognized at fair value based on the modified terms. Upon derecognition of a financial liability, the difference between the carrying amount extinguished and the consideration paid, including any non-cash assets transferred or liabilities assumed, is recognized in profit or loss. Offsetting of Financial Instruments Financial assets and financial liabilities are offset and the net amount is presented in the consolidated statement of financial position only when CM.com has a currently enforceable legal right to offset the recognized amounts and intends to settle on a net basis or to realize the asset and settle the liability simultaneously. Hedging Although CM.com may enter into hedging arrangements to manage its exposure to financial risks, it does not apply hedge accounting. Gains and losses on hedging instruments that are not designated in a hedging relationship are recognized directly in profit or loss. 13. Long-Term and Short-Term Loan Receivables Long-term and short-term loan receivables per the end of the reporting period consist of the following: x € 1,000 2025 2024 Deposits 1,127 1,194 Other receivables 596 143 Other participation 60 60 Long-term receivables 1,783 1,397 Short-term loan receivables 3,128 4,786 4,911 6,183 Other and short-term loan receivables mainly consist of advance payments made to specific Live clients. These amounts are repaid through income generated from ticket sales. No impairments were recognized on long-term and short-term loan receivables in 2025 and 2024. CM.com’s exposure to credit risk and sensitivity analysis for financial assets and liabilities are disclosed in note 11. The other participation relates to an investment in 5% of the shares of Wireless Interactions & NFC Accelerator 2013 B.V. A summary of the movements in long-term and short-term loan receivables is provided: x € 1,000 2025 2024 Carrying amount as at January 1 6,183 2,108 Movements: Loans granted / advance payments 590 6,505 Repayment of loans granted / advance payments (1,236) (2,407) Write off loans granted / advance payments (399) (4) Deposits paid 97 168 Deposits refunded (130) (308) Currency difference (194) 121 Carrying amount as at December 31 4,911 6,183 14. Trade and Other Receivables Trade and other receivables per the end of the reporting period consist of the following: x € 1,000 2025 2024 Trade receivables 22,834 29,024 Accrued revenue 19,259 20,667 Prepayments 1,913 1,767 Receivables from merchants and financial institutions 3,385 6,292 VAT and payroll tax receivables 687 744 Other receivables 849 801 48,927 59,295 The trade and other receivables do not include any receivables that are payable later than twelve months after the balance sheet date. An expected credit loss provision is recognized, amounting to € 1,781 thousand (2024: € 2,681 thousand), and netted with the trade receivables balance. CM.com’s exposure to credit risk and sensitivity analysis for financial assets and liabilities are disclosed in note 11. 15. Cash and Cash Equivalents Cash and cash equivalents at the end of the reporting period consist of the following: x € 1,000 2025 2024 Cash at bank 13,138 18,055 Cash at bank restricted 20,072 20,345 33,210 38,400 Cash at bank restricted is mainly related to the foundation's activities and to be settled with merchants of Pay and Live clients. Considering that the company cannot use these balances for its own activities, they are recorded as restricted cash. The remaining balances are related to bank guarantees, as disclosed in note 25. All other cash and cash equivalents are available for immediate use by the company. 16. Borrowings Borrowings per the end of the reporting period consist of the following: x € 1,000 2025 2024 Revolving credit facility 73,790 - Lease liabilities 13,696 15,494 Tax debt 508 785 87,994 16,279 Current portion of borrowings 2,695 3,032 85,299 13,247 A summary of the movements in borrowings is provided: x € 1,000 2025 2024 Carrying amount as at January 1 16,279 18,574 Movements: Drawdown of credit facility 80,000 - Repayment of credit facility (5,000) - Credit facility related expenses (1,728) - Amortization of credit facility related expenses 518 - Additions to lease liabilities 1,215 2,078 Repayment of lease liabilities (2,909) (3,989) Ending of lease liabilities (76) (129) Repayment of tax debt (277) (268) Currency difference (28) 13 Carrying amount as at December 31 87,994 16,279 Revolving Credit Facility On February 12, 2025, CM.com N.V. entered into a new credit facility agreement with a consortium of banks, consisting of HSBC Continental Europe, ING Bank N.V., and ABN AMRO Bank. In December 2025, an amendment was signed between CM.com N.V. and the banks to align the financial covenants with the revised EBTIDA guidance issued in the Q3 press release. This revolving credit facility (RCF) has a principal amount of € 80 million and a term until February 12, 2028, with two extension options of one year each. The total committed amount will be reduced to € 65 million in February 2027. Thereafter, the commitment will be reduced quarterly by €0.5 million. In relation to this facility, CM.com has provided security in the form of a floating charge on receivables, bank accounts, and share capital of the entities within the obligor group. As of December 31, 2025, € 75 million of the facility has been drawn. The new credit facility was obtained to refinance the company's existing debt position and specifically to repurchase the outstanding convertible bonds (see note 17), which was completed on March 11, 2025. In addition to this facility, a capital injection of € 20 million was raised through an accelerated bookbuild offering. The facility replaced the former RCF that expired on March 10, 2025. Throughout the loan period, a borrowing base requirement ensures that total outstanding loans do not exceed the borrowing base, defined as multiples of revenue adjusted for retention rates. If exceeded, the company must repay the excess amount. Additionally, the company must maintain a minimum liquidity covenant of € 10 million on quarter ends, of which € 5 million of any available and undrawn amount of the RCF can be taken into account. During the initial covenant period, an increasing minimum trailing twelve months (TTM) EBITDA covenant applies. For the second period, starting April 1, 2027 (previously October 1, 2026), the company must comply with a maximum leverage ratio of 2.50x or less, and a minimum debt service coverage ratio of 1.20x or greater. Management expects that these covenants and repayments will be reasonably realized based on the assumptions outlined in the business plan for 2026-2028. The interest rate consists of a margin plus EURIBOR. The margin varies between 4.75% and 5.50% per annum, depending on the leverage ratio. At the commencement of the facility up until December 31, 2025, the margin was 5.5%. Interest expenses are calculated monthly in arrears based on the drawn amount, the applicable margin, and EURIBOR. In addition, a quarterly commitment fee is due, calculated as 35% of the applicable margin on the undrawn portion of the facility. Transaction costs of € 1,728 thousand directly attributable to the facility arrangement have been included in the initial measurement of the financial liability and are amortized over the term of the facility using the effective interest method. The unamortized transaction costs of the former RCF, amounting to € 137 thousand, have been recognized directly as an expense in the profit or loss under financial expenses upon termination of the former facility. The main risks associated with this financing are: Interest rate risk due to the variable interest rate (EURIBOR) to which the company is exposed. Refinancing risk at the end of the term. Covenant risk if CM.com's financial performance falls below the required levels. CM.com continuously monitors these risks and periodically evaluates whether additional measures are necessary to mitigate these risks. CM.com has been and is compliant with all covenant requirements under the facility agreement between the commencement date and December 31, 2025. Based on current business plans and financial projections, management expects to remain in compliance with all covenant requirements throughout the term of the facility. The facility is fully classified as a non-current liability in the statement of financial position, considering the repayment terms do not require settlement of any portion within twelve months of the reporting date. Subsequent to year-end, in January 2026, the company repaid € 5 million to reduce the outstanding balance. In accordance with IAS 1, the classification of the facility is based on the contractual terms existing at the reporting date, and the company had no obligation at December 31, 2025, to make this repayment. 17. Convertible Bonds On 9 September 2021, CM.com issued convertible bonds due September 2026 at 100% of their nominal value in an aggregate principal amount of € 100 million. The convertible bonds have an interest rate of 2% payable semi-annually in arrears in equal installments on 9 March and 9 September each year, commencing first on 9 March 2022. The convertible bonds have a maturity of five years and a denomination of € 100 thousand each. The bonds are convertible into ordinary shares at the option of the bondholders during the conversion period ending on the earlier of seven business days prior to the maturity date or any relevant redemption date. The initial conversion price was set at € 53.30 (30% premium over the reference share price). Initial recognition and subsequent measurement At inception, the net proceeds from the issue of the convertible bonds were allocated between a financial liability component and an equity component, representing the fair value of the embedded option to convert the liability into equity of CM.com. The liability component was subsequently measured at amortized cost using the effective interest method. Interest expense was calculated by applying an effective interest rate of 3.55% to the liability component. The difference between the carrying amount at initial recognition and the amount outstanding at December 31, 2024 represented the unwinding of the discount through interest expense, net of interest paid. The equity component was determined as the residual amount after deducting the fair value of the financial liability from the net proceeds and was recognized in equity within the convertible bonds reserve. As at December 31, 2024, the equity component (net of tax) amounted to € 5,517 thousand. Upon initial recognition, a deferred tax liability of € 1,698 thousand was recognized directly in equity, offset by a related deferred tax asset of € 1,113 thousand, also recognized in equity. Extinguishment in 2025 On March 11, 2025, CM.com N.V. repurchased its outstanding convertible bonds for € 87 million, following approval by the bondholders at their meeting on March 6, 2025. At the date of repurchase, the carrying amount of the liability component, net of unamortized transaction costs, was € 97,252 thousand. The extinguishment resulted in a gross gain of € 10,252 thousand, calculated as the difference between the carrying amount of the liability component (€ 97,252 thousand) and the repurchase price (€ 87 million). This gross gain comprises € 10,726 thousand from the difference between the carrying amount and the repurchase price, offset by € 475 thousand due to the release of unamortized transaction costs. Transaction costs of € 1,438 thousand directly attributable to the extinguishment were recognized in profit or loss. Consequently, a net gain of € 8,814 thousand was recognized in profit or loss as financial income, as disclosed in note 24. The repurchase was funded through a new credit facility agreement, with a principal amount of € 80 million as disclosed in note 16, and a capital injection of € 20 million as disclosed in note 10. As a result of the repayment, no liability balance remains outstanding at year-end. During 2025, no further movements were recorded in the equity component (2024: € 221 thousand). Following the repayment of the convertible bonds, the remaining balance in the convertible bonds reserve was reclassified to accumulated deficits within equity, as disclosed in the consolidated statement of changes in equity. As a result, the balance of the convertible bonds reserve is nil at December 31, 2025. As a result of the repayment, the related deferred tax position was derecognized, as disclosed in note 9. The movement of the financial liability is presented in the table below. x € 1,000 2025 2024 Carrying amount of liability component at January 1 97,630 95,922 Repayment of convertible bonds (87,000) Gain on extinguishment of convertible bonds (10,252) Interest charged (using effective interest rate) (378) 1,708 Carrying amount of liability component at December 31 - 97,630 18. Provisions The provision relates solely to expected payouts for refunds to customers who purchased insurance with their tickets. The company has applied the simplified approach under IFRS 17, as all insurance policies sold have a coverage period of less than twelve months. 19. Trade and Other Payables Trade and other payables per the end of the reporting period consist of the following: x € 1,000 2025 2024 Trade payables 28,495 42,284 Payables to merchants and financial institutions 24,169 26,358 Invoices to be received for services 16,656 16,471 VAT and payroll tax payables 5,302 5,847 Other accruals 6,844 8,644 81,466 99,604 These amounts represent liabilities for goods and services provided to the group, prior to the end of the reporting period, which are unpaid. The accruals are short-term in nature. Payables to merchants and financial institutions represent funds pending transfer to merchants of CM Payments B.V. and Live clients. These funds were either received on the restricted bank accounts (note 15) or were in transit as of the reporting date and recorded as receivables from financial institutions (note 14) The other accruals mainly consist of personnel accruals and non-trade invoices to be received. 20. Contract Liabilities Revenue received in advance mainly consists of prepaid subscription fees, which are recognized on a straight-line basis over the contract period, and prepaid CPaaS balances, which are recognized based on usage. The balance as at December 31, 2024 is expected to be fully settled in 2025, and the balance as at December 31, 2025 is expected to be fully settled in 2026. 21. Employee Benefits x € 1,000 2025 2024 Wages and salaries 48,225 49,269 Social security charges 7,583 7,402 Pension costs 1,944 1,942 WBSO government grant (1,618) (1,370) Capitalized development costs (11,419) (11,544) 44,715 45,699 Employee benefits include restructuring expenses amounting to € 1,417 thousand (2024: € 1,490 thousand). The restructuring expenses relate to severance payments and salary continuation during the notice period. The average number of employees of CM.com during the year, converted to full-time equivalents (FTEs), was 648 (2024: 675), of which 177 FTEs are working outside the Netherlands (2024: 180). The breakdown per department of average number FTEs is as follows: 2025 2024 Sales & Marketing 298 315 Research & Development 250 256 General & Administration 100 103 648 675 Defined Contribution Pension Plans All pension solutions are classified as defined contribution pension plans. Accordingly, CM.com’s obligation is limited to the contributions it committed to pay. In such case, the size of the employee’s pension depends upon the contributions the company pays to the plan or an insurance company and upon the return on capital generated by these contributions. Consequently, the actuarial risk and investment risk are borne by the employee. The company’s obligations to pay contributions to defined contribution plans are recognized as a cost. Short-term Employee Benefits The undiscounted amount of short-term employee benefits is recognized in the accounting period when the related service was rendered. A provision is recognized for the expected cost of bonus payments when the company has a legal or constructive obligation to make such payments as a result of employee services rendered and the obligation can be reliably measured. Government Grants Government grants are recognized when there is reasonable assurance that the grant will be received and all attached conditions will be complied with. CM.com receives WBSO, a government grant for research and development work in the Netherlands. It is implemented by the Netherlands Enterprise Agency (RVO) and promotes technical innovation. The WBSO government grant decreases the social security charges and is therefore recognized as a tax credit under the employee benefits in the year they are related to. As the primary condition of this governmental grant is not related to an asset purchased, constructed or otherwise acquired, the grant is not capitalized and not allocated to the useful live of the asset. 22. Share-Based Payments Equity-settled share-based payments to employees are measured at the fair value of the equity instruments at the grant date. The fair value excludes the effect of non-market-based vesting conditions. The fair value determined at the grant date of the equity-settled share-based payments is expensed on a straight-line basis over the vesting period, based on the company’s estimate of the number of equity instruments that will eventually vest. At each reporting date, CM.com revises its estimate of the number of equity instruments expected to vest as a result of the effect of non-market-based vesting conditions. The impact of the revision of the original estimates, if any, is recognized in profit or loss under Employee benefits such that the cumulative expense reflects the revised estimate, with a corresponding adjustment to reserves. For cash-settled share-based payments, a liability is recognized measured initially at the fair value of the liability. At each reporting date until the liability is settled, and at the date of settlement, the fair value of the liability is remeasured, with any changes in fair value recognized in profit or loss under Employee benefits. The following share-based payments schemes existed during the period: Long-Term Incentive Plans (LTIP’s) for key individuals in senior leadership positions; Restricted Share Unit Plan (RSU) for a number of key talents within CM.com; and Key Person Plan (KPP) for a number of key employees within CM.com. Long-Term Incentive Plan The Management Board recognizes the importance of its employees to the future success of the company. A Long-Term Incentive Plan (LTIP) has been introduced for key individuals in senior leadership positions. Relevant grants under the LTIPs: LTIP 2022-2025 granted at April, 1 and 21, 2022. The vesting date is April 1, 2025. LTIP 2023-2026 granted at May 24, 2023. The vesting date is April 1, 2026. LTIP 2024-2027 granted at April 1, 2024. The vesting date is April 1, 2027. LTIP 2025-2028 granted at April 1, and September 1, 2025. The vesting date is April 1, 2028. The number of awards made under the plan that will vest and become unconditional is subject to continued employment and the actual performance on the Total Shareholder Return (TSR), revenue or gross profit Compound Annual Growth Rate (CAGR) or cumulative EBITDA, Customer Satisfaction, ESG - Gender diversity, and Employee Satisfaction performance conditions. The company used the Monte Carlo model to determine the fair value of the TSR portion of the conditional awards. Key assumptions to the TSR shares 2025: April 1, 2025 Share price at grant date 6.52 Expected volatility 41.2% Vesting period (years) 3.0 Annual dividend increase -% Risk-free interest rate (Eurozone, UK, Sweden) 2.0/4.0/2.2 Fair value at grant date 8.33 Key assumptions to the TSR shares 2024: April 1, 2024 Share price at grant date 6.95 Expected volatility 45.0% Vesting period (years) 3.0 Annual dividend increase -% Risk-free interest rate (Eurozone, UK, Sweden) 2.5/3.9/2.6 Fair value at grant date 7.22 Key assumptions to the TSR shares 2023: May 24, 2023 Share price at grant date 7.95 Expected volatility 46.9% Vesting period (years) 2.9 Annual dividend increase -% Risk-free interest rate (Eurozone, UK, Sweden) 2.6/4.4/2.8 Fair value at grant date 3.42 Key assumptions to the TSR shares 2022: x € 1,000 April 1, 2022 April 21, 2022 Share price at grant date 19.4 17.3 Expected volatility 49.9% 50.0% Vesting period (years) 3.0 2.9 Annual dividend increase -% -% Risk-free interest rate (Eurozone, AScX / US, NASDAQ-100) 0.14/2.57 0.33/2.81 Fair value at grant date 9.07 6.91 The LTIP awards granted to employees are classified as equity-settled in accordance with the earlier described policy. Restricted Share Unit Plan The Restricted Share Unit Plan was introduced during 2022, to create competitive advantage in attracting, motivating and retaining key talent within CM.com. It comprises of ordinary shares for no consideration. The condition for vesting is that the relevant employee is still employed by the company on vesting date and has not given or have not been given notice of termination of employment. There are no market performance conditions in this plan that effect the vesting. Key Person Plan The Key Person Program was introduced for a number of key employees within CM.com and comprises a share-based bonus settled in cash. The condition for vesting is that the relevant employee continues to be employed by the company for two years after grant date. There are no market performance conditions in this plan. Shares A summary of the movements in outstanding shares for the different plans is provided: LTIP RSU At December 31, 2023 128,830 33,899 Granted 141,985 34,825 Forfeited (19,415) (7,967) Vested (5,833) (11,639) At December 31, 2024 245,567 49,118 Granted 121,965 10,388 Forfeited (139,737) (1,983) Vested (19,608) (18,863) At December 31, 2025 208,187 38,660 None of the outstanding shares were exercisable at December 31, 2025. Cash-Settled Share-Based Payments (KPP) The company issues to certain employees share appreciation rights (SARs) that require the company to pay the intrinsic value of the SAR to the employee at the date of exercise. The company has recorded liabilities of € 15 thousand (2024: € 15 thousand) and no expenses are recorded this year (2024: € 3 thousand). The total intrinsic value at December 31, 2025 € 4.50 (2024: € 5.69). Expenses The expenses of the different plans are recognized in profit or loss under Employee benefits can be specified as follows: x € 1,000 2025 2024 LTIP (equity-settled) 104 147 RSU (equity-settled) 121 199 KPP (cash-settled) - 3 225 349 23. Other Operating Expenses x € 1,000 2025 2024 IT expenses 6,581 6,642 General expenses 6,213 6,7231 Marketing and sales expenses 3,125 2,875 Other staff expenses 1,952 2,3231 Housing expenses 1,933 1,858 Contractors and agency personnel expenses 1,434 2,107 Expected credit losses 219 1,304 Capitalized development costs (2,855) (2,886) 18,602 20,946 In the comparative figures, € 182 thousand related to car expenses has been reclassified from 'other staff expenses' to 'general expenses' to align with the classification of other transportation-related costs. Capitalized development costs are allocated to Employee Benefits (see note 21) and Other Operating Expenses. In the prior period, capitalized development costs were classified under general expenses. From 2025 onwards, they are presented as a separate line item to align with the presentation in the Employee Benefits note. No restructuring expenses are included in the current period (2024: € 138 thousand). The prior period restructuring expenses primarily relate to legal fees. For information on the exposure to credit risk and the expected credit losses, refer to note 11. 24. Financial Income and Expenses Financial Income x € 1,000 2025 2024 Net gain on extinguishment of convertible bonds 8,814 - Bank interest received 314 673 Other interest received 56 358 Currency results - 201 9,184 1,232 The net gain of € 8,814 thousand resulting from the extinguishment of convertible bonds, represents the gross gain of € 10,252 thousand from the difference between the liability component's carrying amount and the repurchase price, less the transaction costs of € 1,438 thousand directly attributable to the extinguishment. For more detailed information on the bonds' extinguishment, refer to note 17. Financial Expenses x € 1,000 2025 2024 Interest on revolving credit facility 5,452 3101 Currency results 1,174 - Interest on convertible bonds 633 3,708 Interest on right-of-use liabilities 518 547 Other interest paid 337 179 Bank interest paid 168 242 Fair value losses - 234 8,282 5,220 In the comparative figures, € 310 thousand related to the previous (standby) revolving credit facility has been reclassified from bank interest paid to interest on revolving credit facility, as this is presented separately from 2025 onwards. Interest on revolving credit facility includes interest charges, commitment fees, and amortization on transaction costs associated with the RCF. For more information related to this facility, refer to note 16. Currency results represent gains and losses arising from the translation and settlement of monetary assets and liabilities denominated in foreign currencies. Interest on convertible bonds has decreased compared to the prior year due to the extinguishment of the convertible bonds in March 2025. Refer to note 17 for more details. 25. Contingencies and commitments As of December 31, 2025, the company has a contingent asset of € 425 thousand (2024: € 725 thousand) relating to a (sub)lease agreement for one of its buildings to a third party. As of December 31, 2025, the legal entities that are part of the group have outstanding bank guarantees amounting to € 50 thousand (2024: € 63 thousand). As of December 31, 2025, the company has contingent liabilities in respect to commercial disputes amounting to € 1.3 million (2024: nil). CM.com N.V. forms a fiscal unity for corporate income tax and VAT with its Dutch subsidiaries. Under the Dutch Tax Collection Act, all members of a fiscal unity are jointly and severally liable for taxes owed by that fiscal unity. The following entities are excluded from this fiscal unity: CM.com Ticket Guarantee N.V. (VAT and CIT) CM Payments B.V. (VAT) Payplaza B.V. (VAT) As of October 1, 2025, CM Payments B.V. and Payplaza B.V. form their own separate fiscal unity for VAT purposes. 26. Related Party Transactions All legal entities that can be controlled, jointly controlled, or significantly influenced are considered related parties. Entities that can control the company or its subsidiaries are also considered related parties. In addition, the members of the Management Board and the Supervisory Board are considered key management personnel as defined in IAS 24. All transactions with related parties are made at terms equivalent to those that prevail in arm’s length transactions. The following transactions were carried out with related parties: Leases from related parties; Purchases from/services to related parties; and Management Board and Supervisory Board remuneration Related party lease obligations CM.com has rental agreements with CM Campus B.V. and CM Campus 2 B.V. (hereinafter “CM Campus”), which is a related party by its shareholders (2 members of the Management Board of CM.com N.V.). The rent charged by CM Campus is at arm's length and amounted to € 1.3 million for 2025 (2024: € 1.2 million). The lease agreements relating to CM Campus are considered right-of-use assets and have a carrying amount of € 7.0 million (2024: € 7.8 million). The corresponding right-of-use liabilities have a carrying amount of € 7.3 million (2024: 8.0 million). The accounts receivable position related to CM Campus amounted to € 46 thousand (2024: € 10 thousand). CM.com has provided facility, finance, and legal services during 2025 for CM Campus, charged at arm's length, for an amount of € 29 thousand (2024: € 28 thousand). Related party services As of October 1, 2025, one of the members of the Management Board of CM.com N.V. is also a member of the supervisory board of BOM Holding B.V. (Brabantse Ontwikkelings Maatschappij). CM.com provided facility services to BOM Holding B.V. on an arm’s length basis for € 2 thousand (2024: nil). There was no outstanding receivable or payable balance in relation to BOM Holding B.V. as at December 31, 2025 (2024: nil). One of the members of the Management Board of CM.com N.V. is also a member of the board of directors of Stichting TURF. During 2025, CM.com provided facility services to Stichting TURF on an arm’s length basis for € 10 thousand (2024: nil), of which € 3 thousand was prepaid at year-end, resulting in a payable balance as at December 31, 2025. Management Board and Supervisory Board remuneration x € 1,000 2025 2024 Management Board remuneration: Short-term employee benefits 1,488 1,676 Post-employment benefits 21 20 Share-based payments 146 230 Supervisory Board remuneration: Short-term benefits 265 257 1,919 2,183 The Remuneration Policy for members of the Management Board was developed by the Supervisory Board, and approved, adopted, and amended by the General Meeting. For more information, see Remuneration of the Management Board and Remuneration of the Supervisory Board. As part of key management compensation, the remuneration of Geert Beullens, who succeeded Jörg de Graaf as CFO effective November 1, 2025, and whose appointment will be proposed for approval at the next General Meeting, is included in the Management Board remuneration above. 27. Group Structure CM.com N.V. in Breda (the Netherlands) is the head of a group of legal entities. A summary of the information required under Article 2:379 of the Dutch Civil Code is given: Name Statutory Seat Principal Activities Share in Issued Share Capital CM.com N.V. Breda (The Netherlands) Holding company 100% CM.com Netherlands B.V. Breda (The Netherlands) Telecommunications services 100% CM.com International B.V. Breda (The Netherlands) Telecommunications services 100% CM Payments B.V. Breda (The Netherlands) Payments processing 100% CM Platform B.V. Breda (The Netherlands) R&D 100% SEPASoft B.V.1 Amsterdam (The Netherlands) Point of Sale Gateway n/a PayPlaza B.V. Amsterdam (The Netherlands) Point of Sale Gateway 100% CM.com Ticketing B.V. Utrecht (The Netherlands) Ticketing services 100% CM.com R&D 1 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 2 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 3 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 4 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 5 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 6 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 7 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 8 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 9 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 10 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 11 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 12 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 13 B.V. Breda (The Netherlands) R&D 100% CM.com R&D 14 B.V. Breda (The Netherlands) R&D 100% CM.com Ticket Guarantee N.V. Breda (The Netherlands) Ticket insurances 100% CM.com Belgium N.V. Zaventem (Belgium) Marketing and sales office 100% CM.com Germany GmbH Frankfurt (Germany) Marketing and sales office 100% CM Telecom UK Ltd. Tonbridge (UK) Marketing and sales office 100% CM Telecom France SAS Paris (France) Marketing and sales office 100% CM Telecom Hong Kong Ltd. Hong Kong (China) Marketing and sales office 100% CM Telecom Shenzhen Co. Ltd. Shenzhen (China) Marketing and sales office 100% CM Telecom Singapore Private Ltd. Singapore (Singapore) Marketing and sales office 100% CM.com Japan K.K. Tokyo (Japan) Marketing and sales office 100% CM Telecom South Africa Ltd. Cape Town (South Africa) Marketing and sales office 100% CM.com US Inc. Wilmington, Delaware (USA) Marketing and sales office 100% CM Telecom FZ-LLC Dubai (UAE) Marketing and sales office 100% CM Communication Platform & Technology, S.L.U. Barcelona (Spain) Marketing and sales office 100% CMCOM Turkey Elektronik Haberlesme Ltd Sti2 Istanbul (Turkey) Marketing and sales office n/a CM.com Kenya Ltd.2 Nairobi (Kenya) Marketing and sales office n/a Communication Platform India Private Limited Bangalore (India) Marketing and sales office 100% CM.com Italy S.r.l. Milan (Italy) Marketing and sales office 100% CM.COM Mexico, S. de R.L. de C.V.2 Mexico City (Mexico) Marketing and sales office n/a CM.com Brasil Ltda.2 Sao Paulo (Brasil) Marketing and sales office n/a CM.com Kazakhstan Limited Liability Company2 Almaty (Kazakhstan) Marketing and sales office n/a CM.com Denmark AS Copenhagen (Denmark) Marketing and sales office 100% CM.com Stichting Breda (The Netherlands) Third-party Funds Foundation n/a Stichting YourTicketProvider2 Breda (The Netherlands) Third-party Funds Foundation n/a Entity ceased to exist during 2025 following legal merger. Entity ceased to exist during 2025 following liquidation. 28. Auditor’s Remuneration With reference to section 2:382a (1) and (2) of the Dutch Civil Code, the following fees for the financial year have been charged by Deloitte Accountants B.V. as well as by other Deloitte member firms to the company and its subsidiaries: x € 1,000 2025 2024 Audit fees 789 755 Review fees 60 150 Other services 7 9 856 914 The above includes the audit fees with respect to the Dutch statutory audits, which cannot be split from the total audit fees. The fees also include the fee for local statutory financial statements outside the Netherlands for an amount of € 249 thousand (2024: € 274 thousand). 29. Critical Accounting Judgments and Estimations The preparation of the consolidated financial statements in conformity with IFRS requires management to make judgments, estimates, and assumptions that affect the application of accounting policies and the reported amounts of assets, liabilities, income, and expenses. These estimates inherently contain a degree of uncertainty. Actual results may differ from these estimates under different assumptions or conditions. The areas involving the most significant judgments and estimates are described in this section. Critical judgments in applying the company’s accounting policies Compliance with the financial covenants under the revolving credit facility depends on future financial performance and is inherently judgmental. Management assesses the likelihood of meeting these covenants using assumptions and projections outlined in the business plan for 2026-2028. Management assesses the likelihood of meeting these covenants using assumptions and projections from the 2026–2028 business plan, which are expected to be reasonably achieved. When assessing the going concern assumption and RCF classification, management considers the potential consequences of covenant breaches, including the possibility of accelerated repayment demands or restrictions on access to the facility. If CM.com has control of goods or services when they are delivered to a customer, then CM.com is the principal in the sale to the customer, otherwise, CM.com is acting as an agent. Whether CM.com is considered to be the principal or an agent in the transaction depends on analysis by management of both the legal form and substance of the agreement between CM.com and its business partners; such judgments impact the amount of reported revenue and operating expenses but do not impact reported assets, liabilities, or cash flows. Scenarios requiring judgment to determine whether CM.com is a principal or an agent include, for example, those where CM.com delivers third-party content to customers. Revenue for premium SMS is presented on a net basis. Key sources of estimation uncertainty Deferred tax asset valuation The valuation of deferred tax assets involves signification estimation due to the inherent uncertainty in predicting future taxable income. The utilization of our deferred tax assets depends on future taxable income and tax planning strategies. The recognition of deferred tax assets is based on the assessment of whether it is more likely than not that sufficient taxable profit will be available in the future to utilize the reversal of temporary differences and tax losses. Recognition of deferred tax assets involves judgment regarding the future financial performance of the particular legal entity or tax group that has recognized the deferred tax asset. Disputed contract receivable As at December 31, 2025, the company has recognized a receivable related to a commercial contract with a business counterparty that is currently subject to legal proceedings. The counterparty disputes the amount claimed and has initiated litigation to contest the company’s position. The assessment of the recoverable amount of this receivable involves estimation uncertainty, particularly in evaluating: the probability of success of the company’s legal position; the range of possible outcomes, including potential settlement scenarios; and the expected timing of any cash inflows. Management’s assessment is based on, among other factors, a legal opinion obtained from the company’s external legal counsel, the status of the proceedings, and experience with similar disputes. External legal counsel has issued an opinion that the company’s legal position is very strong and that it is expected to prevail in full. On this basis, management expects to recover the full amount of the receivable and has not recognized an impairment loss in excess of the expected credit loss determined in accordance with IFRS 9 (note 11). Nevertheless, the ultimate outcome of the litigation is inherently uncertain. A material adverse change in the expected outcome (for example, if the group were to lose the case or agree a settlement at a substantially lower amount than claimed) could result in a material impairment of the receivable in a future period. Useful lives of non-current assets The useful lives have to be determined for intangible assets and property, plant, and equipment. The useful lives are estimated based on best practices within CM.com. CM.com reviews the remaining useful lives of its non-current assets annually. The uncertainty included in this estimate is that the useful lives are estimated longer than the actual useful lives of the intangible assets and property, plant, and equipment, which could possibly result in accelerated amortization and depreciation in future years and/or impairments at the end of the actual useful lives of the related intangible assets and property, plant, and equipment. We have reassessed the useful lives and no change is required in 2025. Impairment of non-financial assets Goodwill and intangible assets with indefinite useful lives (note 5) are tested for impairment annually. Impairment tests are based on risk-adjusted future cash flows discounted using appropriate discount rates. These future cash flows are based on forecasts which are inherently judgmental. Future events could cause the assumptions to change which could have an adverse effect on the future results. Specific estimates and judgments used in impairment testing are detailed in note 6. A forecast period of five years (seven years for CGU Pay) is used for the value-in-use calculation for the impairment test on goodwill and intangible assets with indefinite useful life (e.g. domain names). The cash flow projections are based on the financial forecast approved by the Management Board, covering a three-year period (2026-2028). The cash flow projections beyond that three-year period are derived from our strategic guidance which focuses on gross profit growth. CGUs are tested for impairment by comparing the carrying amount of each CGU to its recoverable amount. The Management Board has assessed the reasonableness of the assumptions on which its current cash flow projections are based. 30. Changes in Accounting Policies The accounting policies adopted in the preparation of the consolidated financial statements are consistent with those followed in the preparation of CM.com's annual consolidated financial statements for the year ended December 31, 2024, except for: EBITDA is monitored by Management as an indicator of the company's performance. CM.com considers EBITDA to provide additional insight to its users to reflect the profitable growth strategy. Therefore EBITDA was added as an intermediate count in the statement of comprehensive result. This is in line with the definitions in IFRS 18, however, we did not perform a full early adoption of the standard (effective as of 2027), and as such we have added the definition of EBITDA to the list of alternative performance measures which can be found in the Definitions and Abbreviations. Other operating income: As of the beginning of 2025, we have generated a significant stream of income from the subleasing of our properties, and therefore, we present this separately under "Other Operating Income" as we do not consider subleasing part of our core business. New standards, amendments, and/or interpretations to existing IFRS standards became effective in 2025. These new standards, amendments, and interpretations, as far as they are relevant, have no material impact on the valuation and classification of assets and liabilities of the company, nor on its income statement or cash flows. New standards, amendments, and/or interpretations to existing IFRS standards have been published that only need to be applied to accounting periods beginning on or after January 1, 2026. As far as these standards, amendments, and interpretations are applicable to the Group, these are expected to have no effect on the valuation and classification of assets and liabilities. The group is currently assessing the impact of IFRS 18 on the presentation and disclosure of its financial statements and, as the analysis is not yet complete, the full effects cannot yet be reliably determined. The group has decided not to opt for early adoption. 31. Subsequent Events No events occurred from December 31, 2025, to the date of issue that could result in significant financial implications for the company. Corporate Financial Statements Corporate Statement of Financial Position as at December 31, 2025 (After proposal of appropriation of result) x € 1,000 Note 2025 2024 (restated) Intangible fixed assets 2 2,569 2,585 Property, plant, and equipment 3 103 108 Right-of-use assets 4 1,049 1,461 Financial fixed assets 5 33,201 31,379 Total non-current assets 36,922 35,533 Trade and other receivables 6 95,895 105,2451 Cash and cash equivalents 5,513 8,327 Total current assets 101,408 71,236 Total assets 138,330 106,769 Comparative figures restated for € 42,336 thousand due to reclassification of intercompany receivables and payables, which are now presented at relation level within amounts due from/to group companies. x € 1,000 Note 2025 2024 (restated) Share capital 1,990 1,748 Share premium reserve 155,706 131,114 Legal reserve 49,592 45,518 Equity component of convertible bonds - 5,517 Treasury shares - (78) Foreign currency translation reserve 1,303 1,785 Accumulated deficits (181,306) (178,724) Total shareholders’ equity 7 27,285 6,880 Borrowings 8 73,790 - Convertible bonds 9 - 97,630 Deferred tax liabilities 10 - 212 Total non-current liabilities 73,790 97,842 Trade and other payables 11 37,255 44,3831 Total current liabilities 37,255 2,047 Total equity and liabilities 138,330 106,769 Comparative figures restated for € 42,336 thousand due to reclassification of intercompany receivables and payables, which are now presented at relation level within amounts due from/to group companies. Corporate Statement of Comprehensive Result for the Year Ended December 31, 2025 x € 1,000 Note 2025 2024 Revenue 10 9 Employee benefits 12 (305) (175) Other operating expenses 13 (1,944) (2,077) Amortization, depreciation, and impairments 2/3/4 (433) (454) Operating result (2,672) (2,697) Financial income 14 13,486 5,653 Financial expenses 14 (7,206) (5,794) Result before tax 3,608 (2,838) Income tax 15 (2,444) (3,054) Result after tax 1,164 (5,892) Result participations 5 (4,987) (13,938) Net result for the year (3,823) (19,830) Other comprehensive result, net of tax 7 (482) 109 Total comprehensive result (4,305) (19,721) Notes to the Corporate Financial Statements 1. Basis of Preparation The corporate financial statements have been prepared in accordance with Title 9, Book 2 of the Dutch Civil Code, applying the option to use the accounting policies applied in the consolidated financial statements, which are based on IFRS-EU. For the general principles for the preparation of the financial statements, the principles for valuation of assets and liabilities, and determination of the result, as well as for the notes to the specific assets and liabilities and the results, reference is made to the notes to the consolidated financial statements, if not presented otherwise hereinafter. 2. Intangible Fixed Assets A summary of the movements in intangible fixed assets is provided: x € 1,000 Goodwill Corporate Domain Other Total Costs At December 31, 2023 1,465 1,551 165 3,181 Additions - - - - At December 31, 2024 1,465 1,551 165 3,181 Additions - - - - At December 31, 2025 1,465 1,551 165 3,181 Amortization At December 31, 2023 482 - 98 580 Amortization - - 16 16 At December 31, 2024 482 - 114 596 Amortization - - 16 16 At December 31, 2025 482 - 130 612 Carrying amount At December 31, 2024 983 1,551 51 2,585 At December 31, 2025 983 1,551 35 2,569 Estimated useful lives (years) indefinite indefinite 10 During 2025 and 2024 no impairments have been recognized. 3. Property, Plant, and Equipment A summary of the movements in property, plant, and equipment is provided: x € 1,000 Platform (hardware) Vehicles Other Total Costs At December 31, 2023 48 236 236 520 Divestments - - (196) (196) At December 31, 2024 48 236 40 324 Divestments - - (40) (40) At December 31, 2025 48 236 - 284 Depreciation At December 31, 2023 26 146 213 385 Depreciation 4 - 23 27 Divestments - - (196) (196) At December 31, 2024 30 146 40 216 Depreciation 5 - - 5 Divestments - - (40) (40) At December 31, 2025 35 146 - 181 Carrying amount At December 31, 2024 18 90 - 108 At December 31, 2025 13 90 - 103 Estimated useful lives (years) 10 5 5/10 During 2025 and 2024 no impairments have been recognized. 4. Right-of-Use Assets A summary of the movements in right-of-use assets is provided: x € 1,000 Platform (hardware) Platform (software) Total Costs At December 31, 2023 3,083 1,127 4,210 Ending of lease agreements (101) - (101) At December 31, 2024 2,982 1,127 4,109 At December 31, 2025 2,982 1,127 4,109 Amortization At December 31, 2023 1,660 677 2,337 Amortization 299 113 412 Ending of lease agreements (101) - (101) At December 31, 2024 1,858 790 2,648 Amortization 299 113 412 At December 31, 2025 2,157 903 3,060 Carrying amount At December 31, 2024 1,124 337 1,461 At December 31, 2025 825 224 1,049 During 2025 and 2024 no impairments have been recognized. 5. Financial Fixed Assets Financial fixed assets at the end of the reporting period consist of the following: x € 1,000 2025 2024 Participations in group companies: CM.com International B.V. 7,917 7,359 CM Payments B.V. 4,996 5,853 CM Telecom Hong Kong Ltd. 4,506 3,962 CM Telecom France SA 4,030 3,040 CM Telecom UK Ltd. 2,446 2,539 CM.com Belgium N.V. 2,379 2,020 CM Telecom Singapore 1,705 1,124 CM.com Germany GmbH 1,084 822 CM.com Ticket Guarantee N.V. 750 1,007 CM Communication Platform & Technology, S.L.U. 520 232 CM Telecom FZ-LLC 335 124 CM.com Denmark A/S 72 57 Communication Platform India Private Limited 11 34 CM.com Brasil Ltda - 121 30,751 28,294 Other: Deferred tax assets 2,387 3,022 Other participations 60 60 Deposits 3 3 2,450 3,085 33,201 31,379 Participations in group companies Participations in group companies with significant influence are measured at equity value, based on CM.com N.V.'s accounting principles. This includes other long-term interests that effectively form part of the net investment. Participating interests with a negative net equity value are valued at nil. If the company guarantees liabilities of the associated company or has an effective obligation to enable the associated company to pay its liabilities, a provision is formed, taking into account expected credit losses already deducted from receivables (per Dutch Accounting Standard 100.107a). CM.com's share in the results of associated companies with significant influence is included in profit or loss, determined based on CM.com N.V.'s accounting principles. See note 27 of the consolidated financial statements for an overview of all legal entities within the group. CM.com N.V. filed a 403-statement at the Chamber of Commerce for CM.com Netherlands B.V., CM.com Ticketing B.V., CM Platform B.V., and its subsidiaries (CM.com R&D 1-14 B.V.'s) from January 1, 2022 onward. Other The other participation relates to a 5% investment in Wireless Interactions & NFC Accelerator 2013 B.V. Associates without significant influence are valued at cost less impairments (if any). The deferred tax assets consist of carry-forward losses relating to the fiscal unity CM.com N.V. for corporate income tax. Please refer to note 9 of the consolidated financial statements for more information. Following is a summary of the movements of financial fixed assets: 2025 x € 1,000 Participations in group companies Other Carrying amount as at December 31, 2024 28,294 3,085 Movements: Share in result of participations (4,987) - Netting receivables with negative participations in group companies 8,788 - Dividend received (700) - Share capital repayment (120) Movement in deferred tax asset - (635) Currency result (524) - Carrying amount as at December 31, 2025 30,751 2,450 The dividend received relates to the participation CM.com Ticket Guarantee N.V. The share capital repayment relates to CM.com Brasil Ltda. prior to its liquidation (see note 27 of the consolidated financial statements). 2024 x € 1,000 Participations in group companies Other Carrying amount as at December 31, 2023 23,369 4,376 Movements: Share in result of group companies (13,938) - Netting receivables with negative participations in group companies 18,754 - Refund deposits - (35) Movement in deferred tax asset - (1,256) Currency result 109 - Carrying amount as at December 31, 2024 28,294 3,085 6. Trade and Other Receivables Trade and other receivables at the end of the reporting period consist of the following: x € 1,000 2025 2024 (restated) Receivables from group companies 95,808 105,0211 VAT receivables 73 47 Prepayments 9 172 Receivables from affiliated companies 5 5 95,895 105,245 Comparative figures restated for € 42,336 thousand due to reclassification of intercompany receivables and payables, which are now presented at relation level within amounts due from/to group companies. The interest charged on the current account with group companies is based on the 12-month EURIBOR and was 2.2% on average in 2025 (2024: 3.3%). There is no agreed repayment schedule and no securities are granted. The current account relations are settled periodically. Trade and other receivables do not include any receivables that are payable later than 12 months after the balance sheet date. 7. Shareholders' Equity A summary of the movements in shareholders' equity is provided: x € 1,000 Share capital Share premium reserve Capitalized development costs Equity component of convertible bonds Treasury shares Foreign currency translation reserve Accumulated deficits Total Balance at January 1, 2024 1,747 130,969 39,641 5,738 (347) 1,676 (153,086) 26,338 Result for the year - - - - - - (19,830) (19,830) Movement of reserve - - 5,877 - - - (5,877) - Other comprehensive result - - - - - 109 - 109 Convertible bonds (net of tax)1 - - - (221) - - - (221) Issuance of shares related to business combinations 1 145 - - - - - 146 Issuance of shares to employees - - - - 269 - 69 338 Balance at December 31, 2024 1,748 131,114 45,518 5,517 (78) 1,785 (178,724) 6,880 Result for the year - - - - - - (3,823) (3,823) Movement of reserve - - 4,074 - - - (4,074) - Other comprehensive result - - - - - (482) - (482) Convertible bonds (net of tax)2 - - - (5,517) - - 5,517 - Issuance of shares 240 24,245 - - - - - 24,485 Issuance of shares to employees 2 347 - - 78 - (202) 225 Balance at December 31, 2025 1,990 155,706 49,592 - - 1,303 (181,306) 27,285 The equity component of convertible bonds was presented net of tax (note 17 of the consolidated financial statements). It included a Deferred tax liability recognized through equity offset by a related deferred tax asset recognized through equity, see note 9 of the consolidated financial statements. On March 11, 2025, CM.com repurchased its convertible bonds for € 87 million, refer to note 17 of the consolidated financial statements. As part of this transaction, the equity component of the convertible bonds of € 5.5 million, previously recognized as a separate component of equity, was reclassified to accumulated deficits in accordance with IAS 32.IE46, with no impact on total equity. Accumulated deficits can be reconciled to the consolidated financial statements as follows: x € 1,000 2025 2024 Accumulated deficits as per consolidated financial statements (131,714) (133,243) Cumulative share in result of negative participations - 37 Capitalized development costs (49,592) (45,518) Accumulated deficits as per corporate financial statements (181,306) (178,724) Differences in net result compared to the consolidated financial statements are as follows: x € 1,000 2025 2024 Net result as per consolidated financial statements (3,786) (19,813) Share in result of negative participations (37) (17) Net result as per corporate financial statements (3,823) (19,830) Legal Reserve Pursuant to Dutch law, limitations exist related to the distribution of equity attributable to equity holders. Such limitations relate to the share capital and legal reserves. The legal reserve for foreign currency translation of participations in group companies is determined individually. The legal reserve for capitalized development cost is recognized for costs based on hours spend by R&D employees of CM.com and capitalized as intangible fixed assets, respectively platform (software) on the statement of financial position. Only self-generated assets are taken into account. 8. Borrowings The borrowings consist of the revolving credit facility entered into in 2025. For more information on the revolving credit facility, see note 16 of the consolidated financial statements for more information. 9. Convertible Bonds The convertible bonds were extinguished in 2025. Reference is made to note 17 of the consolidated financial statements for more information. 10. Deferred Tax Liabilities The movement in the deferred tax liabilities is as follows: x € 1,000 2025 2024 Carrying amount as at January 1 212 983 Mutations deferred tax liabilities (212) (771) Carrying amount as at December 31 - 212 The deferred tax liability was related to the valuation of the convertible bonds. Upon extinguishment of the convertible bonds the remaining deferred tax liability was reversed. For more information on the convertible bonds, see note 17 of the consolidated financial statements. 11. Trade and Other Payables Trade and other payables per the end of the reporting period consist of the following: x € 1,000 2025 2024 (restated) Payables to group companies 35,313 42,3361 Accruals 1,670 1,700 Trade payables 272 347 37,255 44,383 Comparative figures restated for € 42,336 thousand due to reclassification of intercompany receivables and payables, which are now presented at relation level within amounts due from/to group companies. 12. Employee Benefits Employee benefits mainly consist of restructuring accruals for severance payments and garden leave. Please refer to note 21 of the consolidated financial statements. Other employee benefits include accruals for long-term share-based payment plans and short-term incentive plans, as referred to in note 21 and note 22 of the consolidated financial statements. The average number of employees of CM.com N.V. during the year, converted to full-time equivalents (FTEs), was nil (2024: nil), as the board is remunerated via CM.com Netherlands B.V., and no other staff is employed within the company. For the remuneration of the management board, reference is made to note 26 of the consolidated financial statements and section Remuneration of the Management Board of the remuneration report. The tables included in the remuneration report are considered part of the financial statements and are audited. 13. Other Operating Expenses Other operating expenses for the reporting period consist of the following: x € 1,000 2025 2024 General expenses 1,518 1,613 IT expenses 218 278 Marketing and sales expenses 91 92 Other staff expenses 61 53 Housing expenses 56 41 1,944 2,077 14. Financial Income and Expenses x € 1,000 2025 2024 Financial income Net gain on extinguishment of convertible bonds 8,814 - Interest received from group companies 3,881 5,428 Currency results 597 - Bank interest received 194 225 13,486 5,653 Financial expenses Interest on revolving credit facility 5,452 310 Interest paid to group companies 955 915 Interest on convertible bonds 633 3,708 Bank interest paid 166 242 Currency results - 619 7,206 5,794 Financial income increased from € 5,653 thousand in 2024 to € 13,486 thousand in 2025, primarily due to the gain on extinguishment of the convertible bonds (€ 8,814 thousand), partially offset by lower intercompany interest income (€ 3,881 thousand in 2025 versus € 5,428 thousand in 2024). Financial expenses increased from € 5,793 thousand in 2024 to € 7,206 thousand in 2025, primarily due to higher interest on the revolving credit facility (€ 5,452 thousand in 2025 versus € 310 thousand in 2024) following the new credit facility agreement entered into on February 12, 2025, partially offset by lower convertible bond interest (€ 632 thousand in 2025 versus € 3,708 thousand in 2024) following the extinguishment of the convertible bonds on March 11, 2025. We refer to note 16 and note 17 of the consolidated financial statements for full disclosure on the revolving credit facility and the extinguishment of the convertible bonds. 15. Income Tax The income tax expense of € 2,444 thousand in 2025 (2024: € 3,054 thousand) primarily results from not recognizing deferred tax assets on subsidiary losses within the fiscal unity. The related tax expense is recognized by CM.com N.V. as head of the fiscal unity, in accordance with Dutch Accounting Standard 272.803. 16. Contingencies and Commitments The company has no contingent liabilities in respect of legal claims. As of December 31, 2025, CM.com N.V. has outstanding bank guarantees amounting to € 49 thousand (2024: € 49 thousand). CM.com N.V. forms a fiscal unity for corporate income tax and VAT with its Dutch subsidiaries. Under the Dutch Tax Collection Act, all members of a fiscal unity are jointly and severally liable for taxes owed by that fiscal unity. The following entities are excluded from this fiscal unity: CM.com Ticket Guarantee N.V. (VAT and CIT) CM Payments B.V. (VAT) Payplaza B.V. (VAT) As of October 1, 2025, CM Payments B.V. and Payplaza B.V. form their own separate fiscal unity for VAT purposes. 17. Auditor’s Remuneration In accordance with section 2:382a (1) and (2) of the Dutch Civil Code, we refer to note 28 of the consolidated financial statements for disclosure on the auditor's remuneration. 18. Subsequent Events No events occurred from December 31, 2025 to the date of issue that could result in significant financial implications for the company. 19. Proposed Result Appropriation The Management Board proposes, with the approval of the Supervisory Board, that the result for the financial year 2025 to be transferred to reserves. 20. Management and Supervisory Board Statement The members of the Supervisory Board signed the financial statements in order to comply with their statutory obligation pursuant to Article 2:101, paragraph 2, of the Dutch Civil Code. The members of the Management Board signed the financial statements in order to comply with their statutory obligation pursuant to Article 2:101, paragraph 2, of the Dutch Civil Code and Article 5:25c, paragraph 2 sub c, of the Financial Markets Supervision Act. Breda, February 12, 2026 Management Board Supervisory Board Jeroen van Glabbeek Jacques van den Broek Gilbert Gooijers Mariken Tannemaat Stephan Nanninga Lex Beins Joëlle Frijters Diederik Karsten Provision in the Articles of Association Related to Profit Appropriation According to the Articles of Association, the Management Board may reserve (a part of) the profits to the reserves, with the approval of the Supervisory Board. The remaining portion of the profits will be at the disposal of the General Meeting. Following approval by the Supervisory Board, the Management Board will put forward a proposal to the General Meeting for the remaining amount. A dividend distribution on Shares may only occur: after adoption of the Annual Accounts, which include the permitted distribution; and to the extent that the shareholders’ equity is sufficient, meaning that it exceeds the sum of the paid-up and called-up part of the capital and the mandatory reserves. The Articles of Association also state that the Management Board may decide to make interim distributions to shareholders, subject to the approval of the Supervisory Board. For an interim distribution, an interim statement needs to be available that shows that the shareholders’ equity is sufficient (as described above) is met. Independent Auditor's Report To the shareholders and the supervisory board of CM.com N.V. Report on the audit of the financial statements 2025 included in the annual report Our opinion We have audited the financial statements 2025 of CM.com N.V. (the Company), based in Breda. The financial statements comprise the consolidated and company financial statements. In our opinion: The accompanying consolidated financial statements give a true and fair view of the financial position of CM.com N.V. as at December 31, 2025, and of its result and its cash flows for 2025 in accordance with International Financial Reporting Standards as adopted by the European Union (EU-IFRS) and with Part 9 of Book 2 of the Dutch Civil Code. The accompanying company financial statements give a true and fair view of the financial position of CM.com N.V. as at December 31, 2025, and of its result for 2025 in accordance with Part 9 of Book 2 of the Dutch Civil Code. The consolidated financial statements comprise: The consolidated statement of financial position as at December 31, 2025. The following statements for 2025: the consolidated income statement, the consolidated statements of comprehensive income, changes in equity and cash flows. The notes comprising material accounting policy information and other explanatory information. The company financial statements comprise: The company balance sheet as at December 31, 2025. The company profit and loss account for 2025. The notes comprising a summary of the accounting policies and other explanatory information. Basis for our opinion We conducted our audit in accordance with Dutch law, including the Dutch Standards on Auditing. Our responsibilities under those standards are further described in the 'Our responsibilities for the audit of the financial statements' section of our report. We are independent of CM.com N.V. in accordance with the EU Regulation on specific requirements regarding statutory audit of public-interest entities, the Wet toezicht accountantsorganisaties (Wta, Audit firms supervision act), the Verordening inzake de onafhankelijkheid van accountants bij assurance-opdrachten (ViO, Code of Ethics for Professional Accountants, a regulation with respect to independence) and other relevant independence regulations in the Netherlands. Furthermore, we have complied with the Verordening gedrags- en beroepsregels accountants (VGBA, Dutch Code of Ethics for Professional Accountants). We believe the audit evidence we have obtained is sufficient and appropriate to provide a basis for our opinion. Information in support of our opinion We designed our audit procedures in the context of our audit of the financial statements as a whole and in forming our opinion thereon. The following information in support of our opinion was addressed in this context, and we do not provide a separate opinion or conclusion on these matters. Materiality Based on our professional judgment we determined the materiality for the financial statements as a whole at € 3.000.000. The materiality is based on 1,2% of revenue. We have also taken into account misstatements and/or possible misstatements that in our opinion are material for the users of the financial statements for qualitative reasons. We agreed with the supervisory board that misstatements in excess of € 150.000, which are identified during the audit, would be reported to them, as well as smaller misstatements that in our view must be reported on qualitative grounds. Scope of the group audit CM.com N.V. is at the head of a group of components. The financial information of this group is included in the financial statements of CM.com N.V.. The transaction processing, accounting and financial reporting for all group entities is centralized in the Netherlands. Consequently, we have performed all audit procedures for the group in the Netherlands and have been able to obtain sufficient and appropriate audit evidence about the group’s financial information to provide an opinion about the financial statements. Audit approach fraud risks We identified and assessed the risks of material misstatements of the financial statements due to fraud. During our audit we obtained an understanding of the company and its environment and the system of internal control, including: The risk assessment process; Management's process for responding to the risks of fraud and monitoring the system of internal control; How the Supervisory Board exercises oversight, as well as the outcomes. We evaluated the design and implementation of the system of internal control and in particular the fraud risk assessment, including the code of conduct, and whistle blower procedures. We evaluated fraud risk factors with respect to financial reporting fraud, misappropriation of assets and bribery and corruption. We involved Deloitte’s forensic specialists in these processes. We evaluated the design and the implementation and, of internal controls designed to mitigate fraud risks. In relation to the potential risks of financial statement fraud, we examined fraud risks concerning the management's override of controls, including an assessment of any evidence suggesting bias from the Management Board and other members of management. Our procedures include an assessment of the accounting policies which are related to subjective measurements and complex transactions, as these may be indicative of fraudulent financial reporting. With respect to the element of bias, we evaluated whether the judgements and decisions made by management in making the accounting estimates included in the financial statements represent a risk of fraudulent material misstatement. We tested the appropriateness of journal entries recorded in the general ledger and other adjustments made in the preparation of the financial statements. We also consider the presumed fraud risk related to revenue recognition applicable, pinpointed mainly to revenue recognized in relation to certain new or end-of-life offerings. We considered the outcome of audit procedures and evaluated whether any findings were indicative of fraud or non-compliance. For significant transactions we evaluated whether the business rationale of the transactions suggests that they may have been entered into to engage in fraudulent financial reporting or to conceal misappropriation of assets. We performed a retrospective review of management judgements and assumptions related to significant accounting estimates reflected in prior year financial statements. Impairment testing, and useful life of non-current assets are attention areas in our audit as these are subject to significant management judgement. We made inquiries with management, those charged with governance and with others within the Company, including the Legal Counsel, Internal Audit, Compliance Officer and Financial Reporting and Accounting. We obtained written representations that all known instances of (suspected) fraud and other irregularities have been disclosed to us. Management insights, estimates and assumptions that might have a major impact on the financial statements are disclosed in note 29 of the financial statements. This did not lead to indications for fraud potentially resulting in material misstatements. Audit approach compliance with laws and regulations We assessed the laws and regulations relevant to the company through discussion with representatives of several departments (amongst others Reporting, Legal, and Tax department), reading minutes and reports of internal audit. As a result of our risk assessment procedures, and while realizing that the effects from non-compliance could considerably vary, we considered the following laws and regulations: (corporate) tax law, the requirements under the International Financial Reporting Standards as adopted by the European Union (EU-IFRS) and Part 9 of Book 2 of the Dutch Civil Code with a direct effect on the financial statements as an integrated part of our audit procedures, to the extent material for the financial statements. Apart from these, CM.com N.V. is subject to other laws and regulations where the consequences of non-compliance could have a material effect on amounts and/or disclosures in the financial statements, for instance, through imposing fines or litigation. This category includes regulations specifically for payment service providers in relation to the payment licenses of CM Payments B.V. We obtained sufficient appropriate audit evidence regarding provisions of those laws and regulations generally recognized to have a direct effect on the consolidated financial statements. In addition, we considered major laws and regulations applicable to listed companies. Our procedures are more limited with respect to these laws and regulations that do not have a direct effect on the determination of the amounts and disclosures in the financial statements. Compliance with these laws and regulations may be fundamental to the operating aspects of the business, to CM.com N.V.'s ability to continue its business, or to avoid material penalties (e.g., compliance with the terms of operating licenses and permits or compliance with environmental regulations) and therefore non-compliance with such laws and regulations may have a material effect on the financial statements. Our responsibility is limited to undertaking specified audit procedures to help identify non-compliance with those laws and regulations that may have a material effect on the financial statements. Our procedures are limited to (i) inquiry of management, the those charged with governance, the management board and others within CM.com N.V. as to whether CM.com N.V. is in compliance with such laws and regulations and (ii) inspecting correspondence, if any, with the relevant licensing or regulatory authorities to help identify non-compliance with those laws and regulations that may have a material effect on the financial statements. Naturally, we remained alert to indications of (suspected) non-compliance throughout the audit. Finally, we obtained written representations that all known instances of (suspected) fraud or non-compliance with laws and regulations have been disclosed to us. Audit approach going concern The responsibilities of the Management Board and the Supervisory Board and ourselves, are outlined in the “Description of responsibilities regarding the financial statements” section below. Our procedures to evaluate management’s going concern assessment included, amongst others: Considering whether management identified events or conditions that may cast significant doubt on the entity’s ability to continue as a going concern (hereafter: going concern risks). Considering whether management’s going concern assessment includes all relevant information of which we are aware as a result of our audit and inquired with management regarding management's most important assumptions underlying their going concern assessment. Evaluating management’s current budget including cash flows for at least twelve months from the date of preparation of the financial statements, current developments in the industry and all relevant information of which we are aware as a result of our audit. Analyzing the financial position per balance sheet date in relation to the financial position per prior year balance sheet date to assess whether events or circumstances exist that may lead to a going concern risk, including compliance with relevant covenants. Performing inquiries with management as to their knowledge of going concern risks beyond the period of the management’s assessment. Under supervision of the Supervisory Board, management has assessed the going concern assumption, as part of the preparation of the consolidated financial statements. Management’s going concern assessment with a projection period until 30 June 2027 (“Projection Period”) is derived from the strategic business plan for 2026-2028. As disclosed in the Financial Statements (Note 2 Basis for preparation), the achievement of the strategic business plan is critical to realizing the projected EBITDA levels required to comply with the financial covenants under the company’s financing arrangements. The plan includes clearly defined growth initiatives and ongoing OPEX optimization measures. We have reviewed management’s going concern assessment. Based on the business plan for 2026-2028 and sensitivity scenarios, the Management Board believes that no events or conditions give rise to doubt about the ability of the group to continue in operation for at least twelve months after the adoption of the financial statements. We have reviewed the sensitivity analyses prepared by management and have performed an assessment on the reasonableness of the initiatives presented in order for the company to achieve the growth in EBITDA projected and required to comply with the financial covenants. This includes obtaining evidence on the commencement and initial results of these initiatives. Accordingly, we concur with the application of the going concern assumption for the December 31, 2025 financial statements. Our key audit matters Key audit matters are those matters that, in our professional judgment, were of most significance in our audit of the financial statements. We have communicated the key audit matters to those charged with governance. The key audit matters are not a comprehensive reflection of all matters discussed. The key audit matters considered as key to our audit are consistent with prior year. Key audit matter – Impairment test on goodwill and fixed assets DescriptionThe total carrying value of the company is significant upon impairment testing date, 1 October 2025. The carrying value amongst others include goodwill and other assets acquired in business combinations, capitalized development cost and tangible fixed assets. The carrying value has in accordance with IFRS been allocated to four cash generating units (“CGU’s). Management needs to assess whether the carrying value of these CGU’s can be recovered by future earnings and cashflows.The accounting standard IAS 36, prescribes the way the carrying values and the future cashflows need to be determined. The present values of the future cashflows are referred to as “value in use”. The company compared the value in use with the carrying value for the four CGU’s. The company used a number of assumptions for the estimation of future cash-flows and the WACC to calculate the present value. The most important assumption for the future cash-flows is the revenue growth within each CGU.CM.com focusses on further increasing EBITDA for 2026 as a result of growth initiatives and ongoing OPEX optimization. These initiatives are also used as input for the 2026 budgets and the medium and longer range forecasts. Management elaborated on the most important assumptions and conclusions in note 6 of the consolidated financial statements.The outcome of the impairment test was evaluated by management and concluded that the value in use exceeds the carrying value for all CGU’s.In response to the sensitivity of the Pay CGU, an external valuation specialist conducted a review on the value in use model for this CGU and a fair value less costs of disposal valuation based on market data. The results of that valuation support the value in use calculation. How the key audit matter was addressed in the auditWe have performed a number of audit procedures on the impairment analyses of which the following are considered as most important: We have determined that the forecasts for the first two years in the projection period (2026-2027) are based on the company’s budget that has been reviewed, discussed and approved by the Supervisory Board in their meeting of 12 December 2025. We performed several procedures to challenge the budget by among others recalculation, review of external market information and peer group benchmarking. We have reviewed the report of the external valuation specialist with respect to the CGU Pay, leading to the fair value less cost to sell valuation. We assessed the forecasts for the years 2026-2030 by comparing the projections to historical performance and to market information. In addition to the aforementioned forecast analysis, we performed an assessment of the extended forecast period for the CGU Pay. We have used Deloitte valuation specialists to assist us in our assessment. Particularly for the technical evaluations of the value in use by CM, for the assessment of the WACC, the long-term and inflationary growth rate. ObservationsWe concur with management’s view there is no material risk for impairment for all CGU’s. Management has prepared forecasts for the Pay CGU that show an improvement of the performance by combining an average annual growth rate (“CAGR”) in the seven-year projection period of 13%. We have stress tested management’s forecasts by applying scenarios with lower growth rates, higher WACCs, and applying different scenarios. This did not result in a different outcome of the impairment test.In combination with the disclosures on sensitivities and uncertainties that are reflected by management in note 6 to the financial statements, we consider the accounting and presentation acceptable. Key audit matter – Capitalization and amortization of internal development costs DescriptionThe Company has developed proprietary software that is used to run the business. The software is comprised of a so-called platform and a substantial number of enhancements or “features”. The features add specific or generic functionalities to the platform and are aimed to improve the performance, the user friendliness or the marketability of the platform. Development of new features is an ongoing process at the group.Costs related to the development of the features are capitalized as included in note 5 of the financial statements. Internal capitalized development costs are significant to the audit given the net book value involved of € 49.6 million as per December 31, 2025 (2024: € 45.5 million). In 2025, the capitalized internal costs (primarily payroll costs of developers) amounted to € 14.3 million (2024: € 14.4 million).Development expenditures on an individual project are recognized as an intangible asset in so far it is available for use, it is expected to generate future economic benefits and if expenses can be measured reliably. These assessments require management judgement.Due to estimates and the increasing amounts involved in the judgement in capitalization of development costs, we identified this as a key audit matter. How the key audit matter was addressed in the auditOur audit work included, amongst others, inquiry with management and developers to increase our business understanding around internal controls and segregation of duties, the recognition criteria, management of projects and the hourly rate used to calculate the amounts capitalized.In 2025, improvements were implemented regarding the internal controls on identification of development hours. Nevertheless, we adopted a non-control reliance approach and primarily performed substantive audit procedures. We have performed statistical sampling to test if the additions were properly capitalized. The input factors of the applied hourly rate were challenged and reconciled to supporting documentation.We have evaluated that the remaining useful life is appropriate.We also evaluated the adequacy of the company’s disclosures in note 5 of the financial statements.ObservationsBased on our procedures, we did not identify any reportable matters with respect to the development costs. Note 5 adequately discloses the development costs conform IAS 38. Report on the other information included in the annual report The annual report contains other information, in addition to the financial statements and our auditor's report thereon. The other information consists of: The Management Board’s report. Other information as required by Part 9 of Book 2 of the Dutch Civil Code. Other information is included in the annual report Based on the following procedures performed, we conclude that the other information: Is consistent with the financial statements and does not contain material misstatements. Contains all the information regarding the management report and the other information as required by Part 9 of Book 2 of the Dutch Civil Code. We have read the other information. Based on our knowledge and understanding obtained through our audit of the financial statements or otherwise, we have considered whether the other information contains material misstatements. By performing these procedures, we comply with the requirements of Part 9 of Book 2 of the Dutch Civil Code and the Dutch Standard 720. The scope of the procedures performed is substantially less than the scope of those performed in our audit of the financial statements. Management is responsible for the preparation of the other information, including the management report in accordance with Part 9 of Book 2 of the Dutch Civil Code, and the other information as required by Part 9 of Book 2 of the Dutch Civil Code. Report on other legal and regulatory requirements and ESEF Engagement We were engaged by the Board of Directors as auditor of CM.com N.V. on 23 November 2017, as of the audit for the year 2018 and have operated as statutory auditor ever since that financial year. No prohibited non-audit services We have not provided prohibited non-audit services as referred to in Article 5(1) of the EU Regulation on specific requirements regarding statutory audit of public-interest entities. European Single Electronic Format (ESEF) CM.com N.V. has prepared its annual report in ESEF. The requirements for this are set out in the Delegated Regulation (EU) 2019/815 with regard to regulatory technical standards on the specification of a single electronic reporting format (hereinafter: the RTS on ESEF). In our opinion, the annual report, prepared in XHTML format, including the (partly) marked-up consolidated financial statements, as included in the reporting package by CM.com N.V. complies in all material respects with the RTS on ESEF. Management is responsible for preparing the annual report including the financial statements in accordance with the RTS on ESEF, whereby management combines the various components into one single reporting package. Our responsibility is to obtain reasonable assurance for our opinion whether the annual report in this reporting package complies with the RTS on ESEF. We performed our examination in accordance with Dutch law, including Dutch Standard 3950N ‘Assurance-opdrachten inzake het voldoen aan de criteria voor het opstellen van een digitaal verantwoordingsdocument’ (assurance engagements relating to compliance with criteria for digital reporting). Our examination included amongst others: Obtaining an understanding of the company's financial reporting process, including the preparation of the reporting package. Identifying and assessing the risks that the annual report does not comply in all material respects with the RTS on ESEF and designing and performing further assurance procedures responsive to those risks to provide a basis for our opinion, including: obtaining the reporting package and performing validations to determine whether the reporting package containing the Inline XBRL instance and the XBRL extension taxonomy files has been prepared in accordance with the technical specifications as included in the RTS on ESEF; examining the information related to the consolidated financial statements in the reporting package to determine whether all required mark-ups have been applied and whether these are in accordance with the RTS on ESEF. Description of responsibilities regarding the financial statements Responsibilities of the management board and the supervisory board for the financial statements Management is responsible for the preparation and fair presentation of the financial statements in accordance with EU-IFRS and Part 9 of Book 2 of the Dutch Civil Code. Furthermore, management is responsible for such internal control as management determines is necessary to enable the preparation of the financial statements that are free from material misstatement, whether due to fraud or error. As part of the preparation of the financial statements, management is responsible for assessing the company's ability to continue as a going concern. Based on the financial reporting frameworks mentioned, management should prepare the financial statements using the going concern basis of accounting unless management either intends to liquidate the company or to cease operations, or has no realistic alternative but to do so. Management should disclose events and circumstances that may cast significant doubt on the company's ability to continue as a going concern in the financial statements. The supervisory board is responsible for overseeing the company's financial reporting process. Our responsibilities for the audit of the financial statements Our objective is to plan and perform the audit engagement in a manner that allows us to obtain sufficient appropriate audit evidence for our opinion. Our audit has been performed with a high, but not absolute, level of assurance, which means we may not detect all material misstatements, whether due to fraud or error, during our audit. Misstatements can arise from fraud or error and are considered material if, individually or in the aggregate, they could reasonably be expected to influence the economic decisions of users taken on the basis of these financial statements. The materiality affects the nature, timing and extent of our audit procedures and the evaluation of the effect of identified misstatements on our opinion. We have exercised professional judgment and have maintained professional scepticism throughout the audit, in accordance with Dutch Standards on Auditing, ethical requirements and independence requirements. Our audit included among others: Identifying and assessing the risks of material misstatement of the financial statements, whether due to fraud or error, designing and performing audit procedures responsive to those risks, and obtaining audit evidence that is sufficient and appropriate to provide a basis for our opinion. The risk of not detecting a material misstatement resulting from fraud is higher than for one resulting from error, as fraud may involve collusion, forgery, intentional omissions, misrepresentations, or the override of internal control. Obtaining an understanding of internal control relevant to the audit in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the company's internal control. Evaluating the appropriateness of accounting policies used and the reasonableness of accounting estimates and related disclosures made by management. Concluding on the appropriateness of management's use of the going concern basis of accounting, and based on the audit evidence obtained, whether a material uncertainty exists related to events or conditions that may cast significant doubt on the company's ability to continue as a going concern. If we conclude that a material uncertainty exists, we are required to draw attention in our auditor's report to the related disclosures in the financial statements or, if such disclosures are inadequate, to modify our opinion. Our conclusions are based on the audit evidence obtained up to the date of our auditor's report. However, future events or conditions may cause the company to cease to continue as a going concern. Evaluating the overall presentation, structure and content of the financial statements, including the disclosures. Evaluating whether the financial statements represent the underlying transactions and events in a manner that achieves fair presentation. We are responsible for planning and performing the group audit to obtain sufficient appropriate audit evidence regarding the financial information of the entities or business units within the group as a basis for forming an opinion on the financial statements. We bear the full responsibility for the auditor’s report. We communicate with those charged with governance regarding, among other matters, the planned scope and timing of the audit and significant audit findings, including any significant findings in internal control that we identified during our audit. In this respect we also submit an additional report to the audit committee in accordance with Article 11 of the EU Regulation on specific requirements regarding statutory audit of public-interest entities. The information included in this additional report is consistent with our audit opinion in this auditor's report. We provide those charged with governance with a statement that we have complied with relevant ethical requirements regarding independence, and to communicate with them all relationships and other matters that may reasonably be thought to bear on our independence, and where applicable, related safeguards. From the matters communicated with those charged with governance, we determine the key audit matters: those matters that were of most significance in the audit of the financial statements. We describe these matters in our auditor's report unless law or regulation precludes public disclosure about the matter or when, in extremely rare circumstances, not communicating the matter is in the public interest. Eindhoven, February 12, 2026 Deloitte Accountants B.V. R.H.M. Hermans Limited Assurance-Report of the Independent Auditor on the Sustainability Statement To the shareholders and supervisory board of CM.com N.V. Our conclusion We have performed a limited assurance engagement on the (consolidated) sustainability statement for 2025 of CM.com N.V. based in Breda (hereinafter: the company) included in section ‘Sustainability Statements’ of the accompanying management report including the information incorporated in the sustainability statement by reference (hereinafter: the sustainability statement). Based on our procedures performed and the assurance evidence obtained, nothing has come to our attention that causes us to believe that the sustainability statement is not, in all material respects: Prepared in accordance with the European Sustainability Reporting Standards (ESRS) as adopted by the European Commission and in accordance with the double materiality assessment process carried out by the company to identify the information reported pursuant to the ESRS. Compliant with the reporting requirements provided for in Article 8 of Regulation (EU) 2020/852 (Taxonomy Regulation) as applicable until December 31, 2025. Basis for our conclusion We have performed our limited assurance engagement on the sustainability statement in accordance with Dutch law, including Dutch Standard 3810N, 'Assurance-opdrachten inzake duurzaamheidsverslaggeving' (Assurance engagements relating to sustainability reporting) which is a specified Dutch standard that is based on the International Standard on Assurance Engagements (ISAE) 3000 (Revised) ’Assurance engagements other than audits or reviews of historical financial information’. Our responsibilities in this regard are further described in the section ‘Our responsibilities for the limited assurance engagement on the sustainability statement’ of our report. We are independent of CM.Com N.V. in accordance with the ‘Verordening inzake de onafhankelijkheid van accountants bij assurance-opdrachten’ (ViO, Code of Ethics for Professional Accountants, a regulation with respect to independence) and other relevant independence regulations in the Netherlands. Furthermore, we have complied with the ‘Verordening gedrags- en beroepsregels accountants’ (VGBA, Dutch Code of Ethics for Professional Accountants). The ViO and VGBA are at least as demanding as the International code of ethics for professional accountants (including International independence standards) of the International Ethics Standards Board for Accountants (the IESBA Code). We believe that the assurance evidence we have obtained is sufficient and appropriate to provide a basis for our conclusion. Emphasis of matter We draw attention to section Critical Accounting Estimations, Assumptions and Judgments’ on page 60 of the sustainability statement that identifies the quantitative metrics and monetary amounts that are subject to a high level of measurement uncertainty and discloses information about the sources of measurement uncertainty and the assumptions, approximations and judgements the company has made in measuring these in compliance with the ESRS. The comparability of sustainability information between entities and over time may be affected by the lack of historical sustainability information in accordance with the ESRS and by the absence of a uniform practice on which to draw, to evaluate and measure this information. This allows for the application of different, but acceptable, measurement techniques, especially in the initial years. Our conclusion is not modified in respect of this matter. Limitations to the scope of our assurance engagement In reporting forward-looking information in accordance with the ESRS, management of the company is required to prepare the forward-looking information on the basis of disclosed assumptions about events that may occur in the future and possible future actions by the company. The actual outcome is likely to be different since anticipated events frequently do not occur as expected. Forward-looking information relates to events and actions that have not yet occurred and may never occur. We do not provide assurance on the achievability of this forward-looking information. Our conclusion is not modified in respect of this matter. Responsibilities of management and the supervisory board for the sustainability statement Management is responsible for the preparation of the sustainability statement in accordance with the ESRS, including the double materiality assessment process carried out by the company as the basis for the sustainability statement and disclosure of material impacts, risks and opportunities in accordance with the ESRS. As part of the preparation of the sustainability statement, management is responsible for compliance with the reporting requirements provided for in Article 8 of Regulation (EU) 2020/852 (Taxonomy Regulation) as applicable until December 31, 2025. Management is also responsible for selecting and applying additional entity-specific disclosures to enable users to understand the company’s sustainability-related impacts, risks or opportunities and for determining that these additional entity-specific disclosures are suitable in the circumstances and in accordance with the ESRS. Furthermore, management is responsible for such internal control as it determines is necessary to enable the preparation of the sustainability statement that is free from material misstatement, whether due to fraud or error. The supervisory board responsible for overseeing the sustainability reporting process including the double materiality assessment process carried out by the company. Our responsibilities for the limited assurance engagement on the sustainability statement Our responsibility is to plan and perform the limited assurance engagement in a manner that allows us to obtain sufficient appropriate assurance evidence for our conclusion. Our assurance engagement is aimed to obtain a limited level of assurance that the sustainability statement is free from material misstatements. The procedures vary in nature and timing from, and are less in extent than for a reasonable assurance engagement. Consequently, the level of assurance obtained in a limited assurance engagement is substantially lower than the assurance that would have been obtained had a reasonable assurance engagement been performed. We apply the applicable quality management requirements pursuant to the ‘Nadere voorschriften kwaliteitsmanagement’ (NV KM, regulations for quality management) and accordingly maintain a comprehensive system of quality management including documented policies and procedures regarding compliance with ethical requirements, professional standards and other relevant legal and regulatory requirements. Our limited assurance engagement included among others: Performing inquiries and an analysis of the external environment and obtaining an understanding of relevant sustainability themes and issues, the characteristics of the company, its activities and the value chain and its key intangible resources in order to assess the double materiality assessment process carried out by the company as the basis for the sustainability statement and disclosure of all material sustainability-related impacts, risks and opportunities in accordance with the ESRS. Obtaining through inquiries a general understanding of the internal control environment, the company’s processes for gathering and reporting entity-related and value chain information, the information systems and the company’s risk assessment process relevant to the preparation of the sustainability statement and for identifying the company’s activities, determining eligible and aligned economic activities and prepare the disclosures provided for in Article 8 of Regulation (EU) 2020/852 (Taxonomy Regulation) as applicable until December 31, 2025, without obtaining assurance information about the implementation, or testing the operating effectiveness, of controls. Assessing the double materiality assessment process carried out by the company and identifying and assessing areas of the sustainability statement, including the disclosures provided for in Article 8 of Regulation (EU) 2020/852 (Taxonomy Regulation) as applicable until December 31, 2025, where misleading or unbalanced information or material misstatements, whether due to fraud or error, are likely to arise (‘selected disclosures’). We designed and performed further assurance procedures aimed at assessing that the sustainability statement is free from material misstatements responsive to this risk analysis. Considering whether the description of the double materiality assessment process in the sustainability statement made by management appears consistent with the process carried out by the company. Performing analytical review procedures on quantitative information in the sustainability statement, including consideration of data and trends. Assessing whether the company’s methods for developing estimates are appropriate and have been consistently applied for selected disclosures. We considered data and trends; however, our procedures did not include testing the data on which the estimates are based or separately developing our own estimates against which to evaluate management’s estimates. Analysing, on a limited sample basis, relevant internal and external documentation available to the company (including publicly available information or information from actors throughout its value chain) for selected disclosures. Reading the other information in the annual report to identify material inconsistencies, if any, with the sustainability statement. Considering whether: the disclosures provided to address the reporting requirements provided for in Article 8 of Regulation (EU) 2020/852 (Taxonomy Regulation) as applicable until December 31, 2025, for each of the environmental objectives, reconcile with the underlying records of the company, are consistent or coherent with the sustainability statement and appear reasonable, in particular whether the eligible economic activities meet the cumulative conditions to qualify as aligned and whether the technical screening criteria are met; and the key performance indicators disclosures have been defined and calculated in accordance with the Taxonomy reference framework as defined in Appendix 1 Glossary of Terms of the CEAOB Guidelines on limited assurance on sustainability reporting adopted on 30 September 2024 and in compliance with the reporting requirements provided for in Article 8 of Regulation (EU) 2020/852 (Taxonomy Regulation) as applicable until December 31, 2025, including the format in which the activities are presented. Considering the overall presentation, structure and the fundamental qualitative characteristics of information (relevance and faithful representation: complete, neutral and accurate) reported in the sustainability statement, including the reporting requirements provided for in Article 8 of Regulation (EU) 2020/852 (Taxonomy Regulation) as applicable until December 31, 2025. Considering, based on our limited assurance procedures and evaluation of the assurance evidence obtained, whether the sustainability statement as a whole is free from material misstatements and prepared in accordance with the ESRS. Eindhoven, February 12, 2026 Deloitte Accountants B.V. R.H.M. Hermans Definitions and Abbreviations Alternative Performance Measures Several alternative performance (non-IFRS) measures are disclosed in our annual report. The reason for disclosing alternative performance measures is to provide information to our diverse group of stakeholders interested not only in IFRS measure, but also in non-IFRS measures. Furthermore, CM.com has provided guidance on several of these (non-IFRS) financial measures, derived from the consolidated financial statements. An overview of the alternative performance measures with their definitions1 is provided: Performance measure Definitions Adjusted EBITDA EBITDA corrected for one-offs Adjusted Leverage ratio Net debt divided by last twelve months Adjusted EBITDA Adjusted OPEX OPEX corrected for one-offs Annual Recurring Revenue (ARR) Represents the annual recurring revenue streams from customers at the end of the period, related to subscription-based product pricing CAPEX Investments in intangible fixed assets and tangible fixed assets Constant Currencies (CC) Income and expenses, in local currencies, are recalculated to euros, using the average exchange rates of the comparison period in previous calendar year Churn rate The percentage of revenue from lost customers generating over € 100 in the last twelve months, measured from the reporting quarter, compared to the same quarter in the previous year EBIT Earnings before interest and tax EBITDA Operating result less amortization, depreciation, and impairments (if any) Free Cash Flow EBITDA less CAPEX, less changes in Net Working capital Gross margin % Gross profit divided by revenue Gross profit Revenue less cost of services Net debt Nominal value of the outstanding revolving credit facility, less unrestricted cash at bank. In 2024, net debt included the convertible bonds Net Working capital Changes in inventories, trade and other receivables, trade and other payables, and contract liabilities, excluding receivables from and payables to merchants and financial institutions One-offs Non-recurring, extraordinary or non-core items, being restructuring costs in 2024 and 2025 OPEX Employee benefits, other operating expenses, and other operating income Other Definitions and Abbreviations Abbreviation Definition Abbreviation Definition A2P Application-to-Person COO Chief operating officer AGI Artificial General Intelligence CPaaS Communication platform as a service AGM Annual general meeting CSAT Customer satisfaction score AI Artificial intelligence CSRD Corporate sustainability reporting directive AMR Actively managed risk CTA Comparable transaction analysis APAC Asia - Pacific CTO Chief technical officer API Application Program Interface D&I Diversity & Inclusion ARR Annual recurring revenue DAS Dutch accounting standards Articles of Association the articles of association of CM.com DCC Dutch civil code AScX Amsterdam small cap index DMA Double materiality assessement B2B Business to Business DNSH Do no significant harm B2C Business-to-consumer DORA Digital Operational Resilience Act BI Business Intelligence DTA Deferred tax asset Business unit a business unit of CM.com DTL Deferred tax liability CAGR Compound annual growth rate EBA European Banking Authority CAPEX Capital expenditure EBITDA Earnings before interest, taxes, depreciation, and amortization CCA Climate change adaption or Comparable company analysis EBIT Earnings before interest, and taxes CCaaS Contact center as a service EC European Commission CCM Climate change mitigation ECL Expected credit losses CDP Customer data platform ELTIP Extraordinary Long-term Incentive Plan CEO Chief executive officer EMEA Europe, Middle East, and Africa CFO Chief financial officer ESEF European single electronic reporting format CGU Cash-generating unit ESG Environmental, social and governance CISO Chief information security officer ESRS European sustainability reporting standards CIT Current income tax EU European Union CM.com CM.com N.V. ExCo the Executive Committee of CM.com CMBA Our high-potential program FAQ Frequently asked questions CMRICS CM.com Business Adventure FCF Free Cash Flow CNY Yuan Founder Committee the founder committee as instituted pursuant to the Articles of Association Corporate Governance Code the Dutch Corporate Governance Code of 2022 Founders the founders of CM.com; Jeroen van Glabbeek and Gilbert Gooijers Company CM.com N.V. FTE Full-time equivalent FY Financial year Managing Director a member of the Management Board GBP British pound sterling MB Management Board GDPR General Data Protection Regulation MSS Minimum social safeguard GenAI Generative Artificial Intelligence NASDAQ National Association of Securities Dealers Automated Quotations General Meeting the General Meeting of CM.com NDR Net dollar retention Group CM.com N.V. and its group companies NIS2 Directive on Security of Network and Information Systems HDS Health Data Host NOC Network operations center HQ Head quarter NSR the nomination, selection and remuneration committee of CM.com HR / HRM Human resources (management) NPS Net promotor score HY (First) half year of the financial reporting period NWC Net working capital IaaS Infrastructure as a Service OPEX Operating expenses IASB International accounting standards board OTT Over the top (e.g. WhatsApp Business, Apple Business Chat, Google RCS, Facebook messenger and Viber) ICE Internal control environment P&L Profit & Loss IFRS International financial reporting standards PaaS Platform as a service IIA Institute of Internal Auditors PCI Payment card industry INR Indian rupee POS Point-of-sale IPO Initial Public Offering PSP Payment Service Provider IPPF International Professional Practices Framework Q Quarter IROs Impacts, risks and opportunities QR-code Quick Response code ISAE International standard on assurance engagements R&D Research and development ISO International organisation for standardisation RCS Rich Communication Services IT Information Technology RCF Revolving Credit Facility JPY Japanese yen ROU Right-of-use KPI Key performance indicator RSU Restricted share unit (plan) KPP Key person plan RTS Regulatory technical standards KYC Know your customer SaaS Software as a service LLM Large Language Model SDG Sustainable development goals LTIs / LTIP Long-term incentives (plan) SEK Swedish krona LTs Leadership Teams Senior Management the senior management of CM.com, consisting of: (i) each member, not being a Managing Director, of the Executive Committee; and (ii) each member, not being a Managing Director, of the Extended Management Team M&A Mergers and acquisitions SGD Singapore dollar Management Board the management board of CM.com SMS Short message service STIs /STIP Short-term incentives (plan) TDC Total direct compensation TSC Technical screening criteria TSR Total shareholder return TTM Trailing twelve months TWCG Those who charged with governance UK United Kingdom USD U.S. dollar VAT Value-added tax WACC Weighted average cost of capital WBSO Government grant for research and development work YoY Year-over-year ZAR South african rand Not all companies calculate alternative performance measures in the same manner or on a consistent basis. As a result, these measures and ratios may not be comparable to measures used by other companies under the same name or similar definitions. Backcover 724500QDJRUMSPRDHW252025-01-012025-12-31724500QDJRUMSPRDHW252023-12-31ifrs-full:RetainedEarningsMember724500QDJRUMSPRDHW252023-12-31724500QDJRUMSPRDHW252024-01-012024-12-31ifrs-full:IssuedCapitalMember724500QDJRUMSPRDHW252024-01-012024-12-31ifrs-full:SharePremiumMember724500QDJRUMSPRDHW252024-01-012024-12-31ifrs-full:ReserveOfEquityComponentOfConvertibleInstrumentsMember724500QDJRUMSPRDHW252024-01-012024-12-31ifrs-full:TreasurySharesMember724500QDJRUMSPRDHW252024-01-012024-12-31ifrs-full:ReserveOfExchangeDifferencesOnTranslationMember724500QDJRUMSPRDHW252024-01-012024-12-31ifrs-full:RetainedEarningsMember724500QDJRUMSPRDHW252024-12-31ifrs-full:IssuedCapitalMember724500QDJRUMSPRDHW252024-12-31ifrs-full:SharePremiumMember724500QDJRUMSPRDHW252025-12-31724500QDJRUMSPRDHW252024-12-31ifrs-full:ReserveOfEquityComponentOfConvertibleInstrumentsMember724500QDJRUMSPRDHW252024-12-31ifrs-full:TreasurySharesMember724500QDJRUMSPRDHW252024-12-31ifrs-full:ReserveOfExchangeDifferencesOnTranslationMember724500QDJRUMSPRDHW252024-12-31ifrs-full:RetainedEarningsMember724500QDJRUMSPRDHW252025-01-012025-12-31ifrs-full:IssuedCapitalMember724500QDJRUMSPRDHW252025-01-012025-12-31ifrs-full:SharePremiumMember724500QDJRUMSPRDHW252025-01-012025-12-31ifrs-full:ReserveOfEquityComponentOfConvertibleInstrumentsMember724500QDJRUMSPRDHW252025-01-012025-12-31ifrs-full:TreasurySharesMember724500QDJRUMSPRDHW252025-01-012025-12-31ifrs-full:ReserveOfExchangeDifferencesOnTranslationMember724500QDJRUMSPRDHW252025-01-012025-12-31ifrs-full:RetainedEarningsMember724500QDJRUMSPRDHW252024-12-31724500QDJRUMSPRDHW252025-12-31ifrs-full:IssuedCapitalMember724500QDJRUMSPRDHW252025-12-31ifrs-full:SharePremiumMember724500QDJRUMSPRDHW252025-12-31ifrs-full:ReserveOfEquityComponentOfConvertibleInstrumentsMember724500QDJRUMSPRDHW252025-12-31ifrs-full:TreasurySharesMember724500QDJRUMSPRDHW252025-12-31ifrs-full:ReserveOfExchangeDifferencesOnTranslationMember724500QDJRUMSPRDHW252025-12-31ifrs-full:RetainedEarningsMember724500QDJRUMSPRDHW252024-01-012024-12-31724500QDJRUMSPRDHW252023-12-31ifrs-full:IssuedCapitalMember724500QDJRUMSPRDHW252023-12-31ifrs-full:SharePremiumMember724500QDJRUMSPRDHW252023-12-31ifrs-full:ReserveOfEquityComponentOfConvertibleInstrumentsMember724500QDJRUMSPRDHW252023-12-31ifrs-full:TreasurySharesMember724500QDJRUMSPRDHW252023-12-31ifrs-full:ReserveOfExchangeDifferencesOnTranslationMemberiso4217:EURiso4217:EURxbrli:shares