Ethics and Compliance Program Description

I. Introduction

Knoa Pharma LLC and its subsidiaries (the “Company”) are committed to establishing and maintaining an effective, risk-based, and data-driven ethics and compliance program consistent with the “Compliance Program Guidance for Pharmaceutical Manufacturers” issued by the Office of Inspector General, U.S. Department of Health and Human Services (“HHS-OIG Guidance”). In light of the Company’s opioid-related business activities, the program is further designed to address obligations and enforcement expectations applicable to controlled substances, including the Controlled Substances Act (CSA) and DEA requirements, and to reflect Department of Justice (DOJ) expectations for effective compliance programs.

The purpose of our Ethics & Compliance Program is two-fold: (1) to prevent, detect, and remediate violations of laws, regulations, the Injunction to which the Company is subject (the “Injunction,” a copy of which can be found here), or Company policies and (2) to promote a culture of the highest ethics. As called for in the HHS-OIG Guidance, we have tailored our Ethics & Compliance Program to fit the unique environment of our organization. For example, for opioid and other controlled substance activities, the Company maintains enhanced controls, including a Suspicious Order Monitoring (SOM) program, diversion risk assessments, distributor/third-party oversight, and escalation and reporting protocols. Moreover, our Ethics & Compliance Program is dynamic; we regularly review and enhance it to meet our evolving compliance needs.

Our Company is committed to conducting business in a lawful and ethical manner. We do not tolerate human rights abuses within our own business operations, and we expect all our business partners, including suppliers, to engage in sound human rights practices, to treat workers fairly and with dignity and respect.

The fundamental elements of our Ethics & Compliance program are described below.

II. Overview of Ethics & Compliance Program

  1. Leadership and Structure.
    • Margaret K. Feltz is our Vice President, Chief Compliance Officer (“CCO”), and serves as the primary contact for compliance activities. The Company seeks to ensure the CCO has sufficient authority, independence, resources, and access to information to exercise independent judgment and effectuate change as needed. The CCO is responsible for developing, operating, and monitoring the Ethics & Compliance Program, including opioid/controlled substances compliance and the SOM program. The CCO reports to the Company’s Chief Executive Officer, is a member of the Company’s Executive Committee, and has direct, unfiltered access to the Chief Executive Officer and the Audit Committee of the Board of Directors, including for escalation of significant compliance issues, diversion risk concerns, or potential CSA/DEA reporting matters.
    • We have established a Compliance Committee & Risk Management Council (Council) to advise the CCO and assist in the implementation of the Ethics & Compliance Program. The Council includes cross-functional leadership (e.g., Legal, Regulatory, Quality, Commercial, Supply Chain, IT, and Human Resources) and oversees risk assessments, controls, and remediation.
  2. Written Standards.
    • The Company’s Code of Ethics is our statement of ethical and compliance principles guiding our daily operations. The Code establishes our expectation that management, employees, and certain agents of the Company act in accordance with all laws, regulations, and Company policies. The Code describes our fundamental principles and values, providing a framework for action within our organization.  
    • We have published Healthcare Law Compliance Policies and supporting procedures to address industry compliance risks and to train our employees to act in accordance with these policies. For opioid and other controlled substance activities, we maintain additional policies and procedures addressing CSA/DEA obligations, anti-diversion expectations, distributor and third-party oversight, data integrity, and Suspicious Order Monitoring (including order review, investigation, blocking, and reporting decision protocols).
    • We have established annual spending limits for certain promotional activities directed toward healthcare professionals (HCPs) who prescribe or may influence prescribing in California and elsewhere. At the present time our annual spending limit is $1,000.00 per HCP. Examples of items that fall within this spending limit are infrequent, modest, in-service meals for HCPs and their staff; infrequent, modest meals in connection with product specific and non-product educational programs; and items of use to HCPs in their practice or to their patients. This amount does not include cash payments or honoraria paid to HCPs pursuant to contracts for bona fide consulting or other services. Our Company does not and will not provide any item of value to any HCP with the intent of influencing prescribing habits.
  3. Education and Training. A critical element of our Ethics & Compliance Program is the education and training of employees on their legal and ethical obligations under applicable state and federal requirements. We provide general compliance training and supplemental role-based training tailored to job functions and risk (e.g., Commercial, Medical, Supply Chain, Customer Service, Finance, and leadership). For opioid and other controlled substance activities, training includes CSA/DEA obligations, diversion red flags, SOM processes, escalation and reporting expectations, and documentation requirements.
  4. Internal Lines of Communication. Our Company actively fosters dialogue among management and employees. Our goal is that all employees know who to turn to when seeking answers or reporting possible Code violations and are able to do so without fear of retaliation. We maintain open-door policies, confidentiality protections, and a non-retaliation policy. We also maintain a confidential, toll-free Integrity Helpline (1-877-787-3831) through which employees and external parties may report concerns or suspected violations of law, regulation, Company policies, or our Injunction, including potential diversion concerns, suspicious orders, or CSA/DEA-related issues.
  5. Auditing and Monitoring. Our Ethics & Compliance Program includes monitoring, auditing, and evaluating adherence to compliance policies and procedures. The nature, extent, and frequency of monitoring and auditing may vary according to regulatory requirements, changes in business practices, and risk. For opioid and other controlled substance activities, monitoring and auditing may include SOM governance and effectiveness testing; establishment of thresholds and rules; investigation timeliness; documentation of order block/ship/report decisions; data integrity controls; and periodic reviews of distributor/third-party compliance obligations.
  6. Responding to Potential Violations.  Our Company sets forth clear disciplinary consequences for violating laws, the Injunction, or Company policies. We consider each situation on a case-by-case basis and apply discipline consistently to address inappropriate conduct and deter future violations. Where potential controlled substances issues are identified (including suspicious order concerns or potential diversion), we follow documented escalation, investigation, and—where applicable—reporting protocols and implement timely corrective actions.
  7. Corrective Action Procedures. A compliance program increases the likelihood of identifying and preventing unlawful and unethical behavior. As HHS-OIG recognizes, even an effective program may not prevent all violations. Our Ethics & Compliance Program requires prompt response to potential violations of law, regulation, the Injunction, or Company policies, including controlled substances concerns. We assess whether issues are due to gaps in policies, practices, training, systems, or internal controls; conduct root cause analyses; implement corrective and preventive actions (CAPA); and test for sustained effectiveness to prevent recurrence.

Declaration Clause for California, as of July 1, 2026

Our Company hereby declares that, to the best of its knowledge and based on a good-faith understanding of statutory requirements, we have established a Comprehensive Compliance Program compliant with California Health and Safety Code §§ 119400–119402. The Company is committed to conducting business according to the highest ethical standards. While we cannot completely eliminate the possibility that an individual may violate these standards, our Ethics & Compliance Program is reasonably designed to detect and prevent violations of state and federal laws, including healthcare and controlled substances laws, as well as our internal policies and procedures. As of May 1, 2026, when Knoa Pharma began its operations, the above-referenced compliance program was in place, and we continually reassess and enhance the program to improve effectiveness.

Documents

Privacy Policy Updates

Please read carefully the Knoa Pharma LLC Privacy Policy (the "Privacy Policy"), which is part of the Knoa Pharma LLC Terms and Conditions, before you access, download, or otherwise use any of our websites, related other parties’ websites, mobile applications, or any electronic service (collectively, the “Service"). This Privacy Policy describes the information collected through your use of the Service, how we use it, how we share it, how we protect it, and the choices you can make about your information.