What must Olo provide to the Customer before commencing any work under the Carls Jr. agreement?

Based on the 2025 Carls Jr. Franchise Disclosure Document, before Olo commences work under the agreement with a Carls Jr. franchisee (referred to as "Operator" in this context), the franchisee may provide additional minimum security requirements in writing. Olo is then obligated to use commercially reasonable efforts to promptly implement these requirements.

This means that while Olo has a standard Security Policy available at their website, Carls Jr. franchisees have the opportunity to specify further security measures they deem necessary for their operations. Olo is expected to make a good-faith effort to incorporate these additional requirements into their service.

For a prospective Carls Jr. franchisee, this clause offers a degree of customization and control over the security aspects of the e-commerce, delivery enablement, and payment solutions provided by Olo. It allows the franchisee to address specific security concerns relevant to their business and potentially mitigate risks associated with online transactions and data handling. However, Olo's obligation is limited to "commercially reasonable efforts," meaning they are not bound to implement requirements that are technically infeasible or excessively costly.