Announcement PDF Rules 4.7.3 and 4.10.3 ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 1 Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations Name of entity Infotrust Ltd ABN/ARBN Financial year ended: 73 089 224 402 30 June 2026 Our corporate governance statement1 for the period above can be found at:2 ☐ These pages of our annual report: ☒ This URL on our website: https://investors.infotrust.com.au/ The Corporate Governance Statement is accurate and up to date as at 30 September 2026 has been approved by the board. The annexure includes a key to where our corporate governance disclosures can be located.3 Date: 30 September 2026 Name of authorised officer authorising lodgement: Nina Mlinarevic, Company Secretary 1 “Corporate governance statement”isdefined in Listing Rule 19.12 to mean the statement referred to in Listing Rule 4.10.3 which disclosesthe extent to which an entity hasfollowed the recommendationsset by the ASX Corporate Governance Councilduring a particular reporting period. Listing Rule 4.10.3 requires an entity that is included in the official list as an ASX Listing to include in its annual report either a corporate governance statement that meets the requirements of that rule or the URL of the page on its website where such a statement is located. The corporate governance statement must disclose the extent to which the entity has followed the recommendations set by the ASX Corporate Governance Council during the reporting period. If the entity has not followed a recommendation for any part of the reporting period, its corporate governance statement must separately identify that recommendation and the period during which it was not followed and state its reasonsfornot following the recommendation and what (if any) alternative governance practices it adopted in lieu of the recommendation during that period. Under ListingRule 4.7.4, if an entitychoosesto include its corporate governance statement on its websiterather than in itsannual report, it must lodge a copy of the corporate governance statement with ASX at the same time as it lodgesits annualreport with ASX. The corporate governance statement mustbe current as at the effective date specified in that statement for the purposesof Listing Rule 4.10.3. Under Listing Rule4.7.3, an entity must also lodge with ASX a completed Appendix4G at the same time as it lodges its annual report with ASX. The Appendix 4G serves a dual purpose. It acts as a key designed to assist readers to locate the governance disclosures made by a listed entity under Listing Rule 4.10.3 and under the ASX Corporate Governance Council’s recommendations. It also acts as a verification tool forlisted entities to confirm that theyhave met the disclosure requirementsof Listing Rule 4.10.3. The Appendix4G is not a substitutefor, and is not to be confused with, the entity'scorporategovernance statement. Theyserve different purposes and an entity must produce each of them separately. 2 Tick whichever optionis correct and then complete the page number(s)of the annualreport, or the URL of the web page, where your corporate governance statement can be found. You can, if you wish, delete the option which is not applicable. 3 Throughout thisform, where you are given two or more options to select, you can, if you wish, delete any option which is not applicable and just retain the option that is applicable. If you select an option that includes “OR” at the end of the selection and you delete the other options, you can also, if you wish, delete the “OR” at the end of the selection. See notes 4 and 5 below for further instructions on how to complete this form. Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 2 ANNEXURE – KEY TO CORPORATE GOVERNANCE DISCLOSURES Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 PRINCIPLE 1 – LAY SOLID FOUNDATIONS FOR MANAGEMENT AND OVERSIGHT 1.1 A listed entity should have and disclose a board charter setting out: (a) the respective roles and responsibilities of its board and management; and (b) those matters expressly reserved to the board and those delegated to management. ☒ and we have disclosed a copy of our board charter at: https://investors.infotrust.com.au/corporate-governance - 1.2 A listed entity should: (a) undertake appropriatechecks beforeappointing a directoror seniorexecutive orputting someoneforward for election as a director; and (b) provide security holders with all material information in its possession relevant to a decisionon whetheror not to elect or re-elect a director. ☒ - 1.3 A listed entity should havea written agreement with each director and seniorexecutive setting out the terms of their appointment. ☒ - 1.4 The company secretary of a listed entity should be accountable directly to the board, through the chair, on all matters to do with the proper functioning of the board. ☒ - 4 Tick the boxin thiscolumn onlyif you have followed the relevant recommendation in full forthe whole of the period above. Where the recommendation hasa disclosure obligation attached, you must insert the location where that disclosure has been made, where indicated by the line with “insert location” underneath. If the disclosure in question hasbeen made in your corporate governance statement, you need onlyinsert “ourcorporate governance statement”. If the disclosure hasbeen made in your annual report,you should insert the page number(s) of your annual report (eg “pages 10-12 of our annual report”). If the disclosure has been made on your website, you should insert the URL of the web page where the disclosure has been made or can be accessed (eg “www.entityname.com.au/corporate governance/charters/”). 5 If you have followed all of the Council’s recommendations in full for the whole of the period above, you can, if you wish, delete this column from the form and re-format it. Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 3 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 1.5 A listed entity should: (a) have and disclose a diversity policy; (b) through its board or a committee of the board set measurable objectives forachieving gender diversity in the composition of its board, senior executives and workforce generally; and (c) disclose in relation to each reporting period: (1) the measurable objectives set for that period to achieve gender diversity; (2) the entity’s progress towards achieving those objectives; and (3) either: (A) the respective proportions of men and women on the board, in seniorexecutive positions and across the whole workforce (including how the entity has defined “senior executive” for these purposes); or (B) if the entity is a “relevant employer” under the Workplace Gender Equality Act, the entity’s most recent “Gender Equality Indicators”, as defined in and published under that Act. If the entity was in the S&P / ASX 300 Index at the commencement of thereportingperiod, themeasurable objective for achieving gender diversity in the composition of its board should be to have not less than 30% of its directors of each gender within a specified period. - ☒ set out in our Corporate Governance Statement OR ☐ we are an externally managed entity andthis recommendation is therefore not applicable 1.6 A listed entity should: (a) have and disclose a process for periodically evaluating the performance of the board, its committees and individual directors; and (b) disclose for each reporting period whether a performance evaluation has been undertaken in accordance with that process during or in respect of that period. ☒ and we have disclosed the evaluation process referred to in paragraph (a) at: The Corporate Governance Statement and whether a performance evaluation was undertaken for the reporting period in accordance with that process at: The Corporate Governance Statement - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 4 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 1.7 A listed entity should: (a) have and disclose a process forevaluatingthe performance of its seniorexecutives at least onceevery reporting period; and (b) disclose for each reporting period whether a performance evaluation has been undertaken in accordance with that process during or in respect of that period. ☒ and we have disclosed the evaluation process referred to in paragraph (a) at: The Corporate Governance Statement and whether a performance evaluation was undertaken for the reporting period in accordancewith that process at: The Corporate Governance Statement - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 5 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 PRINCIPLE 2 - STRUCTURE THE BOARD TO BE EFFECTIVE AND ADD VALUE 2.1 The board of a listed entity should: (a) have a nomination committee which: (1) has at least three members, a majority of whom are independent directors; and (2) is chaired by an independent director, and disclose: (3) the charter of the committee; (4) the members of the committee; and (5) as at the end of each reporting period, the number of times the committee met throughout the period and the individual attendances of the members at those meetings; or (b) if it does not have a nomination committee, disclose that fact and the processes it employs to address board succession issues and toensure that the board has the appropriate balance of skills, knowledge, experience, independence and diversity to enable it to discharge its duties and responsibilities effectively. - ☒ set out in our Corporate Governance Statement OR ☐ we are an externally managed entity andthis recommendation is therefore not applicable 2.2 A listed entity should have and disclose a board skills matrix setting out the mix of skills that the board currently has or is looking to achieve in its membership. ☒ and we have disclosed our board skills matrix at: The Corporate Governance Statement - 2.3 A listed entity should disclose: (a) the names of the directors considered by theboard to be independent directors; (b) if a director has an interest, position, affiliation or relationship of the typedescribed in Box 2.3butthe board is of the opinion that it does not compromise the independence of the director, the nature of the interest, position orrelationship in question andan explanation of why the board is of that opinion; and (c) the length of service of each director. ☒ and we have disclosed thenames of the directors consideredby the board to be independent directors at: The Corporate Governance Statement and, where applicable, the information referred to in paragraph (b) at: The Corporate Governance Statement and the length of service of each director at: The Corporate Governance Statement - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 6 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 2.4 A majority of the board of a listed entity should be independent directors. - ☒ set out in our Corporate Governance Statement OR ☐ we are an externally managed entity andthis recommendation is therefore not applicable 2.5 The chair of the board of a listed entity should be an independent directorand, in particular, should not be the same person as the CEO of the entity. - ☒ set out in our Corporate Governance Statement OR ☐ we are an externally managed entity andthis recommendation is therefore not applicable 2.6 A listed entity should have a program for inducting new directors and forperiodically reviewingwhetherthere is a need forexisting directors to undertake professional development to maintain the skills and knowledge needed to perform their role as directors effectively. ☒ - PRINCIPLE 3 – INSTIL A CULTURE OF ACTING LAWFULLY, ETHICALLY AND RESPONSIBLY 3.1 A listed entity should articulate and disclose its values. ☒ and we have disclosed our values at: https://www.infotrust.com.au/about-us - 3.2 A listed entity should: (a) have and disclose a code of conduct for its directors, senior executives and employees; and (b) ensure that the board or a committee of the board is informed of any material breaches of that code. ☒ and we have disclosed our code of conduct at: https://investors.infotrust.com.au/corporate-governance - 3.3 A listed entity should: (a) have and disclose a whistleblower policy; and (b) ensure that the board or a committee of the board is informed of any material incidents reported under that policy. ☒ and we have disclosed our whistleblower policy at: https://investors.infotrust.com.au/corporate-governance - 3.4 A listed entity should: (a) have and disclose an anti-bribery and corruption policy; and (b) ensure that the board or committee of the board is informed of any material breaches of that policy. ☒ and we have disclosed our anti-bribery and corruption policy at: https://investors.infotrust.com.au/corporate-governance - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 7 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 PRINCIPLE 4 – SAFEGUARD THE INTEGRITY OF CORPORATE REPORTS 4.1 The board of a listed entity should: (a) have an audit committee which: (1) has at least three members, all of whom are non- executive directors and a majority of whom are independent directors; and (2) is chaired by an independent director, who is not the chair of the board, and disclose: (3) the charter of the committee; (4) the relevant qualifications and experience of the members of the committee; and (5) in relation to each reporting period, the number of times the committee met throughout theperiod and the individual attendances of themembers at those meetings; or (b) if it does not have an audit committee, disclose that fact and the processes it employs that independently verify and safeguard the integrity of its corporate reporting, including the processes forthe appointment and removal of the external auditor and the rotation of the audit engagement partner. ☒ [If the entity complies with paragraph (a):] and we have disclosed a copy of the audit and risk committee charterat: https://investors.infotrust.com.au/corporate-governance and the information referred to in paragraphs (4) and (5) at: The Corporate Governance Statement and the Director’s Report, which is included in the 2026 Annual Report ☐ set out in our Corporate Governance Statement 4.2 The board of a listed entity should, before it approves the entity’s financial statements fora financial period, receive from its CEO and CFO a declaration that, in their opinion, the financial records of the entity have been properly maintained and that the financial statements comply with the appropriate accounting standards and give a true and fair view of the financial position and performance of the entity and that the opinion has beenformedon thebasis of a sound system of risk managementand internal control which is operatingeffectively. ☒ - 4.3 A listed entity should disclose its process to verify the integrity of any periodic corporatereport it releasesto the market that is not audited or reviewed by an external auditor. ☒ - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 8 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 PRINCIPLE 5 – MAKE TIMELY AND BALANCED DISCLOSURE 5.1 A listed entity should have and disclose a written policy for complying with its continuous disclosure obligations under listing rule 3.1. ☒ and we have disclosed ourcontinuous disclosure compliance policy at: https://investors.infotrust.com.au/corporate-governance - 5.2 A listed entity should ensure thatits board receives copies of all material market announcements promptly afterthey have been made. ☒ - 5.3 A listed entity that gives a new and substantive investor or analyst presentationshould release a copy of the presentation materials on the ASX Market Announcements Platform ahead of the presentation. ☒ - PRINCIPLE 6 – RESPECT THE RIGHTS OF SECURITY HOLDERS 6.1 A listed entity should provide information about itself and its governance to investors via its website. ☒ and we have disclosed informationaboutus and ourgovernance on our website at: https://investors.infotrust.com.au/ - 6.2 A listed entity should have an investor relations program that facilitates effective two-way communication with investors. ☒ - 6.3 A listed entity should disclose how it facilitates andencourages participation at meetings of security holders. ☒ and we have disclosed how we facilitate and encourageparticipation at meetings of security holders at: The Corporate Governance Statement - 6.4 A listed entity should ensure thatall substantiveresolutions at a meeting of security holders are decided by a poll ratherthan by a show of hands. ☒ - 6.5 A listed entity should give security holders theoption to receive communications from, andsend communications to, the entity and its security registry electronically. ☒ - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 9 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 PRINCIPLE 7 – RECOGNISE AND MANAGE RISK 7.1 The board of a listed entity should: (a) have a committee orcommittees to oversee risk, each of which: (1) has at least three members, a majority of whom are independent directors; and (2) is chaired by an independent director, and disclose: (3) the charter of the committee; (4) the members of the committee; and (5) as at the end of each reporting period, the number of times the committee met throughout the period and the individual attendances of the members at those meetings; or (b) if it does not have a risk committee or committees that satisfy (a)above, disclose that fact and the processes it employs for overseeing the entity’s risk management framework. ☒ [If the entity complies with paragraph (a):] and we have disclosed a copy of the audit and risk committee charter: https://investors.infotrust.com.au/corporate-governance and the information referred to in paragraphs (4) and (5) at: The Corporate Governance Statement and the Director’s Report, which is included in the 2026 Annual Report - 7.2 The board or a committee of the board should: (a) review the entity’s risk management framework at least annually to satisfy itself thatit continues to be sound and that the entity is operating with due regard to the risk appetite set by the board; and (b) disclose, in relation to each reporting period, whether such a review has taken place. ☒ and we have disclosed whether a review of the entity’s risk managementframework was undertakenduring the reporting period at: The Corporate Governance Statement - 7.3 A listed entity should disclose: (a) if it has an internal audit function, how the function is structured and what role it performs; or (b) if it does not have an internal audit function, that fact and the processes it employs for evaluating and continually improving the effectiveness of its governance, risk management and internal control processes. ☒ [If the entity complies with paragraph (b):] and we have disclosed thefact that we do nothavean internal audit function and theprocesses we employforevaluatingand continually improving the effectiveness of our risk management and internal control processes at: The Corporate Governance Statement - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 10 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 7.4 A listed entity should disclose whether it has any material exposure to environmental orsocial risks and, if it does, how it manages or intends to manage those risks. ☒ and we have disclosed whether we have any material exposure to environmental and social risks at: The Corporate Governance Statement and, if we do, how we manage or intend to manage those risks at: ……………………………………………………………………………. - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 11 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 PRINCIPLE 8 – REMUNERATE FAIRLY AND RESPONSIBLY 8.1 The board of a listed entity should: (a) have a remuneration committee which: (1) has at least three members, a majority of whom are independent directors; and (2) is chaired by an independent director, and disclose: (3) the charter of the committee; (4) the members of the committee; and (5) as at the end of each reporting period, the number of times the committee met throughout the period and the individual attendances of the members at those meetings; or (b) if it does not have a remuneration committee, disclose that fact and the processes it employs forsettingthe level and composition of remunerationfordirectors and senior executives and ensuring that such remuneration is appropriate and not excessive. - ☒ set out in our Corporate Governance Statement OR ☐ we are an externally managed entity andthis recommendation is therefore not applicable 8.2 A listed entity should separately disclose its policies and practices regarding theremuneration of non-executive directors and the remuneration of executive directors and other senior executives. ☒ and we have disclosed separately our remuneration policies and practices regarding theremuneration of non-executive directors and the remunerationof executive directors andother senior executives at: Remuneration Report, which is found in the Annual Report - 8.3 A listed entity which has an equity-based remuneration scheme should: (a) have a policy on whether participants are permitted to enter into transactions (whether through the use of derivatives orotherwise) which limit the economic risk of participating in the scheme; and (b) disclose that policy or a summary of it. ☒ and we have disclosed ourpolicy on this issue ora summary of it at: the Corporate Governance Statement - Appendix 4G Key to Disclosures Corporate Governance Council Principles and Recommendations ASX Listing Rules Appendix 4G (current at 17/7/2020) Page 12 Corporate Governance Council recommendation Where a box below is ticked,4 we have followed the recommendation in full for the whole of the period above. We have disclosed this in our Corporate Governance Statement: Where a box below is ticked, we have NOT followed the recommendation in full for the whole of the period above. Our reasons for not doing so are:5 ADDITIONAL RECOMMENDATIONS THAT APPLY ONLY IN CERTAIN CASES 9.1 A listed entity with a directorwho does not speak the language in which board or security holder meetings are held or key corporate documentsare written should disclosethe processes it has in place to ensure the director understands and can contribute to the discussions at those meetings and understands andcan discharge their obligations in relation to those documents. - ☐ set out in our Corporate Governance Statement OR ☒ we do not have a director in this position and this recommendation is therefore not applicable OR ☐ we are an externally managed entity andthis recommendation is therefore not applicable 9.2 A listed entity establishedoutside Australia should ensure that meetings of security holders are held at a reasonable place and time. - ☐ set out in our Corporate Governance Statement OR ☒ we are established in Australia and this recommendation is therefore not applicable OR ☐ we are an externally managed entity andthis recommendation is therefore not applicable 9.3 A listed entity establishedoutside Australia, and an externally managed listed entity that has an AGM, should ensure that its external auditor attends its AGM and is available to answer questions from security holders relevant to the audit. - ☐ set out in our Corporate Governance Statement OR ☒ we are established in Australia and not an externally managed listed entity and this recommendation is therefore not applicable ☐ we are an externally managed entity that does not hold an AGM and this recommendation is therefore not applicable 1 FY26 Corporate Governance Statement The Board of Directors (Board) of Infotrust Ltd (Infotrust or Company) is responsible for the corporate governance of the Company and its subsidiaries (Group). The Board is committed to maintaining high standards of corporate governance that supports the Company’s long-term success, and promotes sustainable creation of shareholder value and investor confidence. This Corporate Governance Statement (Statement) outlines the Company’s governance framework and the extent to which it has complied with the ASX Corporate Governance Council’s Corporate Governance Principles and Recommendations (4th Edition) (ASX Recommendations) during the reporting period. The ASX Recommendations are not prescriptive, and where the Company has not followed an ASX Recommendation the reasons for the departure are explained. This Statement should be read in conjunction with the Company’s 2026 Annual Report and the governance policies and charters on the Company’s website at https://investors.infotrust.com.au/. This Statement is current as at 30 September 2026 and has been approved by the Board. PRINCIPLE 1: LAY SOLID FOUNDATIONS FOR MANAGEMENT AND OVERSIGHT Recommendation 1.1 - Role of the Board and Management The Board is responsible for setting and approving the Company’s strategic direction, overseeing management’s performance and monitoring the effective implementation of the Company’s corporate governance framework. In carrying out these responsibilities, the Board seeks to protect and enhance long-term shareholder value while having regard to the interests of other stakeholders, including employees, customers, suppliers and the broader community. The Board has adopted a formal Board Charter, available on the Company’s website: https://investors.infotrust.com.au/corporate-governance. The Charter defines the matters reserved for the Board’s determination and those matters delegated to management. The Board has delegated responsibility for the day-to-day management and operations of the Groupto the ManagingDirector (Managing Director),whomaydelegateauthority to members of the senior executive team as appropriate. The Board retains ultimate responsibility for the Group’s strategy, governance, oversight and risk management. 2 Recommendation 1.2: Appointment of Directors The Nominatio