Disclosure · Form 10-K · fiscal 2026
Karbon-X Corp. 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed September 15, 2026· period ended May 31, 2026· KARX· CIK 1729637· Updated · filing on sec.gov ↗
Karbon-X Corp.'s Form 10-K for fiscal 2026, filed September 15, 2026, names the Chief Executive Officer as its top security role, with oversight by the full board.
What Karbon-X's Item 1C says
Karbon-X's Form 10-K for fiscal 2026 places oversight of cybersecurity risk with the Board of Directors. The Chief Executive Officer is the management official who is actively engaged in oversight of cybersecurity and IT infrastructure.
Board and management oversight
The Board receives updates from the Chief Executive Officer, who monitors potential cybersecurity matters and reports to the Board as necessary.
How the company manages cyber risk
The company states that it has invested in infrastructure hardware and software to add to its data protection capabilities.
Third parties and incidents
The Chief Executive Officer works with outsourced vendors to manage all network operations for the company. The vendors keep the CEO informed on cybersecurity and privacy matters throughout the year. During the fiscal year ended May 31, 2026, the company did not experience any material cybersecurity incidents.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a board committee as responsible for cybersecurity oversight.
Read from the Form 10-K filed September 15, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Chief Executive Officer
Reports to
not identified
Board oversight
Full board
“The Board of Directors is responsible for oversight of the Company's cybersecurity risk.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“To date, the Company has not experienced, nor does it anticipate, any cybersecurity incidents that would materially affect its business, financial condition, or results of operations.”
The section
240 words, Form 10-K filed September 15, 2026 for the period ended May 31, 2026
Read by claude-sonnet-5-5 on November 10, 2026; every quote verified in the stored text by code; 1 proposed field not found in the text and left empty.
How peers in the same industry describe the seat
The SEC assigns Karbon-X Corp. standard industrial classification 2844, Perfumes, cosmetics & other toilet preparations (SEC SIC list). 2 other filers in our library have the same code. Also shown: filers whose codes the SEC assigns to the same review office (Industrial Applications and Services).
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| e.l.f. Beauty, Inc.FY 2026, filed May 21, 2026 | Chief Technology & AI Officer | not identified | full board |
| Bonk, Inc.FY 2025, filed March 31, 2026 | not identified | CFO | audit committee |
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Advanced Biomed Inc.FY 2026, filed October 13, 2026 | Chief Executive Officer | not identified | not identified |
| Bion Environmental Technologies IncFY 2026, filed September 29, 2026 | not identified | not identified | full board |
| Bloomia Holdings, Inc.FY 2026, filed September 21, 2026 | not identified | not identified | Audit Committee |
| Aehr Test SystemsFY 2026, filed July 27, 2026 | Chief Operating Officer | not identified | Audit Committee |
| Adm Tronics Unlimited, Inc.FY 2026, filed July 10, 2026 | CSO | not identified | full board |
| PetVivo Holdings, Inc.FY 2026, filed June 29, 2026 | CFO | Board | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Karbon-X Corp.'s Form 10-K as filed with the SEC on September 15, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C. Cybersecurity Risk
We are committed to using technology to improve our competitive position. We depend on a variety of information systems and technologies (including cloud technologies) to manage the operations of our growing customer base. Our core business systems consist mostly of purchased and licensed software programs that integrate together and with our app.
We manage data security and privacy at the highest levels. Our Chief Executive Officer (CEO) is actively engaged in oversight of cybersecurity and IT infrastructure and works with outsourced vendors to manage all network operations. Our vendors keep our CEO informed on cybersecurity and privacy matters throughout the year. We have strengthened our data protection capabilities through investments in our infrastructure hardware and software.
During the fiscal year ended May 31, 2026, the Company did not experience any material cybersecurity incidents.
Given the limited nature of its operations and reliance on third-party service providers for professional services, the Company has concluded that it is not materially exposed to cybersecurity threats. To date, the Company has not experienced, nor does it anticipate, any cybersecurity incidents that would materially affect its business, financial condition, or results of operations.
The Board of Directors is responsible for oversight of the Company's cybersecurity risk. In fulfilling this role, the Board receives updates from the Chief Executive Officer, who, with the assistance of external legal and accounting professionals, monitors any potential cybersecurity matters and reports to the Board as necessary.
Earlier filings on record
Fiscal 2025 Form 10-K/A, filed September 17, 2025 sec.gov ↗
Top security role, as the filing names it
Chief Executive Officer
Reports to, as the filing names it
not identified
Board oversight
Full board
“The Board of Directors is responsible for oversight of the Company's cybersecurity risk.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“To date, the Company has not experienced, nor does it anticipate, any cybersecurity incidents that would materially affect its business, financial condition, or results of operations.”
Read by claude-sonnet-5-5 on November 10, 2026; every quote verified in the stored text by code; 1 proposed field not found in the text and left empty.
Item 1C. Cybersecurity Risk
We are committed to using technology to improve our competitive position. We depend on a variety of information systems and technologies (including cloud technologies) to manage the operations of our growing customer base. Our core business systems consist mostly of purchased and licensed software programs that integrate together and with our APP.
We manage data security and privacy at the highest levels. Our Chief Executive Officer (CEO) is actively engaged in oversight of cybersecurity and IT infrastructure and works with outsourced vendors to manage all network operations. Our vendors keep our CEO informed on cybersecurity and privacy matters throughout the year. We have strengthened our data protection capabilities through investments in our infrastructure hardware and software.
During the fiscal year ended May 31, 2025, the Company did not experience any material cybersecurity incidents.
Given the limited nature of its operations and reliance on third-party service providers for professional services, the Company has concluded that it is not materially exposed to cybersecurity threats. To date, the Company has not experienced, nor does it anticipate, any cybersecurity incidents that would materially affect its business, financial condition, or results of operations.
The Board of Directors is responsible for oversight of the Company's cybersecurity risk. In fulfilling this role, the Board receives updates from the Chief Executive Officer, who, with the assistance of external legal and accounting professionals, monitors any potential cybersecurity matters and reports to the Board as necessary.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.