REACH - non-regulatory announcement* 12 May 2026 Tern Plc ("Tern" or the "Company") Device Authority Strategic Partnership with Xalient Tern Plc (AIM:TERN), the investment company specialising in supporting high growth, early-stage, disruptive Internet of Things ("IoT") technology businesses, is pleased to note that Device Authority Limited ("Device Authority"), a company in which Tern currently holds 25.3% of the equity, has announced a new strategic partnership with Xalient, a leading provider of identity‑led cybersecurity services and managed solutions. Extracts from the Device Authority announcement: Device Authority, a global leader in identity and access management ("IAM") for IoT and Operational Technology ("OT") devices, today announced a new strategic partnership with Xalient, a leading provider of identity‑led cybersecurity services and managed solutions. The collaboration will strengthen Xalient's IoT security offering through the integration of Device Authority's KeyScaler platform, enabling scalable, automated protection for connected devices across complex enterprise environments. As organizations accelerate digital transformation and expand their use of connected devices, securing IoT and OT ecosystems has become increasingly complex. With billions of devices coming online - many of them unmanaged or operating in production or operational environments - traditional security models struggle to provide the visibility, control, and resilience required. At the same time, regulatory and policy pressures are increasing on both sides of the Atlantic. In the EU, requirements such as the Cyber Resilience Act are raising expectations for secure‑by‑design connected products, device visibility, vulnerability management, and compliance reporting. In the U.S., guidance and regulatory activity from bodies such as CISA, NIST, and sector‑specific regulators are driving stronger requirements around asset visibility, secure access, risk governance, and operational resilience. As a result, enterprises are being challenged to adopt automated, 'Zero Trust'‑aligned approaches that can scale across users, devices, workloads, and machine identities - without adding unnecessary operational friction. Through this partnership,