2.1.6.3.6 Tree Star, Inc. Disaster Recovery Strategy

Encompassing FlowJo, LLC. and FlowDx, LLC

This document is focused primarily on our plan to prevent loss of data due to a range of
events, from short-term power outage to citywide natural disaster. The core of this plan is
nightly and weekly backups of our various data structures to an offsite repository.
Currently our data structures comprise a handful of servers containing around fifteen
critical elements. These include our daily software code production for FlowJo and
FlowDx, our daily financial transactions, our VOIP (Voice Over Internet Protocol) phone
records, our intranet, and the daily record of interactions on our software license server.
Also of critical importance are the accumulated archives of the history of these activities.
These are either backed up wholesale or incrementally (recording changes only), as
appropriate. We also maintain and perform a daily remotely archived backup of
several websites: FlowJo.com, FlowDx.com, TreeStar.com, JoData, and MyCyte.org.
Each of these entities is backed up daily to an offsite storage site, using automated
scripts.

We employ a hosted virtual private server located in another city, with service
replacement initiated automatically and secured against fire, earthquake, power failure,
and weather damage.

Precautionary measures deployed onsite at Tree Star, Inc. include:
• Uninterruptible Power Supplies (UPS).
• Surge Protectors.
• Fire Preventions — alarms, accessible fire extinguishers. There is a computer-friendly
extinguisher in the server room; the rest of the building meets our local
fire code for commercial buildings.
• Anti-virus software on mail server and spam protection.