Product Initiatives: Accessibility & Equity Program and Law Enforcement Device Share

2.1 Overview

The Accessibility & Equity Program provides discounted access to CEREBRAL STRATUM subscriptions and devices for eligible individuals, facilitated through two distinct mechanisms depending on the nature of the participating organisation or individual.

Target beneficiaries include, but are not limited to:

• NDIS participants and NDIS-registered service providers acting on behalf of clients

• Homelessness services and their clients

• Financially disadvantaged individuals referred through community organisations, welfare agencies, or social services

• Other programs for under-privileged individuals as identified through future partner agreements

2.2 Partner Wholesale Model

Eligible organisations may enter a private pricing agreement with BlueGuardian Co. Under this model:

• BlueGuardian provides devices and subscriptions to the partner organisation at a negotiated wholesale rate.

• The partner organisation is responsible for distribution to end users and may elect to absorb some or all of the remaining cost.

• Partners are onboarded as recognised BlueGuardian partner entities. Partner onboarding, wholesale order management, and inventory for this channel are managed through Brightpearl.

• The end user's CEREBRAL STRATUM account is a standard user account; the partner arrangement is a commercial relationship between BlueGuardian and the organisation, not visible to or binding on the end user.

Key principle: The end user owns their data, their account, and their devices. A partner organisation facilitating discounted access does not gain visibility into or control over the end user's device data.

2.3 Individual Voucher / Access Code Model

For organisations that prefer a lower-friction model, or for cases where individuals self-identify eligibility, a voucher and access code mechanism is available:

• Partners self-service generate voucher codes within the constraints of their pricing agreement.

• Individuals redeem vouchers at checkout (Shopify) to receive a discount on a subscription, a device, or a bundle.

Source of truth: Shopify and Brightpearl are the authoritative systems for voucher issuance and partner pricing agreements respectively.

2.4 Vouchers and Gift Cards as a Platform Capability

The voucher and gift card infrastructure is a general platform capability with utility across multiple contexts:

• Retail bundles: A device purchased through a retail partner may include a voucher for an initial subscription period.

• Promotional campaigns: Time-limited promotional discounts for new users or specific market segments.

• Gifting: Individuals purchasing a device as a gift may include a gift card or activation voucher.

• Partner incentives: Non-welfare partner organisations (e.g. automotive clubs, insurance providers) may distribute vouchers as member benefits.

The implementation should be designed as a general-purpose voucher platform from the outset.

2.5 Subscription Tier Applicability

The Accessibility & Equity Program applies a discount to standard tier pricing (Foundation, Pro, Business). It does not create a separate subscription tier. The end user receives a standard tier subscription at a reduced or zero cost; their feature entitlements are identical to a full-price subscriber at the same tier.

3.1 Overview

Users may voluntarily share read-only, time-limited access to specific device telemetry with law enforcement personnel for the purpose of asset recovery. This feature is strictly user-initiated; BlueGuardian does not proactively share user data with law enforcement and does not respond to informal requests for data outside of lawful process.

3.2 Design Principles

• User-initiated and user-revocable. Only the account owner can generate a law enforcement share link.

• Minimal data exposure. The share is scoped to the data a law enforcement officer needs for asset recovery — no more.

• Read-only. A law enforcement share link confers no ability to modify device configuration or take any action on the device or account.

• Time-limited. All shares have an expiry set by the user, within a platform-defined maximum.

• Scoped to specific device(s). A share link is generated for one or more explicitly selected devices, not for the entire account.

• Auditable. Share link generation, access events, and revocation are logged and visible to the account owner.

3.3 Data Accessible via a Law Enforcement Share

The following data is explicitly excluded from law enforcement shares:

• Geofence configurations and named places

• Alert rules and notification history

• Account holder identity and contact information

• Other devices on the account not explicitly included in the share

• CAN bus telemetry and vehicle diagnostic data

• Subscription or billing information

Rationale for exclusions: Geofence configurations and named places can reveal sensitive personal context (home address, workplace, regular routines) not necessary for asset recovery and could expose the user to risk in adversarial situations.

3.4 Share Link Workflow

1. User navigates to the affected device(s) in the CEREBRAL STRATUM client.

2. User selects "Share with Law Enforcement" and selects the device(s) to include.

3. User sets an expiry duration (within platform maximum).

4. Platform generates a time-limited, cryptographically signed share token.

5. User receives a shareable URL and optionally a summary of what data is included.

6. The share URL renders a read-only, unauthenticated view scoped to the included devices and permitted data types.

7. The user can view active shares and revoke any share at any time.

8. On expiry or revocation, the share link is invalidated.

3.5 Relationship to Support Impersonation Workflow

3.6 Privacy and Legal Considerations

• BlueGuardian does not verify the identity of the person accessing a law enforcement share URL. The URL is effectively a bearer token; responsibility for appropriate use rests with the user who generates and shares it.

• The feature does not constitute a formal data sharing arrangement with law enforcement agencies and does not replace lawful process for compelled disclosure.

• Future consideration: a verified agency access model may be appropriate if uptake warrants it.