Private update

Prepared for Marty

Where MovementAI stands, and where I humbly ask for your help and guidance.

A respectful request for your perspective on whether Belpointe might be open to offering institutional guidance, including how best to approach insurance through Belpointe’s resources or my existing Howden Global relationship.

Marty,

I wanted to give you a straightforward update on where MovementAI stands and ask whether Belpointe could publicly serve as an advisor to MovementAI. I believe Belpointe’s involvement may provide the trust and institutional credibility USPS needs to see before our first Building Brain pilot can move forward.

We have worked our way through the USPS conversation in Florida and are now at what I understand to be the final local gatekeeper for a pilot at the Largo Post Office. USPS was the first organization to say yes to the concept. We do not have a signed pilot agreement yet, so I am treating this as serious interest pending the authorized contracting, security, data and insurance reviews.

The proposed pilot is intentionally limited. For eight weeks, MovementAI would use only approved operating information to help the branch identify late-arriving volume, route-readiness pressure and manpower gaps earlier. Existing USPS systems would remain in place. Recommendations would be reviewed by people, not executed autonomously. Quotron could provide a physical display for approved status messages, but only after its security, permissions and offline behavior are accepted.

MovementAI does not currently carry the insurance coverage that a federal operating environment is likely to require. Before we can sign or begin work, we may need to put the appropriate policies in place for a technology vendor with potential access to operational data and an occupied facility.

My direct question is whether it would be feasible for Belpointe to come on publicly as an advisor to MovementAI, with the title, scope, responsibilities, approvals and other specifics worked out together before anything is announced. As part of that discussion, I would like your guidance on whether the insurance path should run through capabilities available within Belpointe or its trusted partners, through my established contact at Howden Global Group, or through a coordinated approach.

What we need to solve

The right cybersecurity support, broker and insurance package

USPS may require MovementAI to demonstrate a supportable cybersecurity program before sensitive systems or operational data is transferred. At the same time, USPS’s published supplier clauses require workers’ compensation, employers’ liability, general liability, automobile coverage, proof before work begins and, when applicable, errors and omissions. Those published figures are only a floor; the final contract schedule can require more. We should not buy coverage blindly before receiving the actual USPS insurance schedule or understanding the security controls, independent testing and cyber liability requirements that will apply.

General liability

Likely $1M/$2M minimum; prepare to quote $2M/$4M

Workers’ compensation

Statutory, with $1M employers’ liability

Business auto

$1M, including hired and non-owned vehicles

Umbrella / excess

Prepare a $5M option

Technology E&O

Prepare a $5M option for software, analytics and integration risk

Cyber and privacy

Prepare a $5M option for data, security and incident-response risk

Whichever path you recommend, the broker must review additional-insured status, primary and noncontributory wording, waiver of subrogation, cancellation notice, subcontractor requirements, claims-made continuity and policy exclusions. The final USPS agreement, not this planning estimate, will control.

A major USPS pain point

Cybersecurity must be designed before systems data is transferred

USPS may be turning over sensitive systems and operational data to MovementAI. Our CTO has strong cybersecurity expertise, but internal capability alone may not be enough to satisfy USPS procurement, security review and insurance underwriting. We need an independently supportable security program and insurance structure before accepting production data.

Marty, you may have a useful perspective on how seriously the Postal Service and federal government treat this risk, even if cybersecurity is not part of your network. If you happen to know a qualified contractor, cybersecurity firm, insurance professional or someone who could make an introduction, that would be helpful, but there is no assumption that you do.

Federal cybersecurity contractor

Someone experienced with USPS or federal supplier security requirements who can help translate AS-805-I into an implementation and evidence plan.

Independent security testing

A qualified firm for architecture review, penetration testing, monthly vulnerability scanning and documentation that can be produced during a USPS assessment.

Cyber insurance specialist

A broker or advisor who can coordinate cyber liability and Technology E&O coverage with the actual USPS contract, data exposure and incident-response obligations.

The question for Marty

How important do you believe this will be to the Postal Service and federal government? If anyone qualified comes to mind, an introduction would be appreciated. Your guidance would also help determine which of these needs Belpointe may be positioned to support directly or through trusted relationships. Either way, the final controls, limits and contract language must be confirmed with USPS, counsel and the selected insurer.

What the advisory relationship could unlock

Guidance beyond the two properties

Marty, the public record suggests Belpointe may have the experience and relationships to advise MovementAI on more than potential access to Aster & Links and VIV. If the overall advisory concept is feasible, I would appreciate your guidance on which capabilities are truly available inside Belpointe, which come through trusted partners and who, if anyone, you would want involved, including whether insurance should begin there or through my Howden Global contact.

Insurance and risk

Belpointe publicly identifies insurance among its lines of business, and its asset-management platform says it can facilitate corporate insurance solutions. You may prefer to involve people already inside your organization or trusted network before I formally engage Howden.

Legal and corporate operations

Belpointe identifies legal services as an internal discipline. Its corporate operations leadership also covers legal, product development and firm strategy. That experience could help us recognize indemnity, data, liability and vendor-contract issues before USPS counsel raises them.

Property and construction operations

Belpointe has development, construction management, property management and asset management in house. Those teams already understand occupied-building access, contractor insurance, vendor onboarding, incident reporting and system-data approvals.

Family office and corporate consulting

Belpointe’s family-office ecosystem includes risk management and corporate consulting. That may help us structure MovementAI as an institutionally prepared company, not only prepare two properties for a pilot.

Research basis: Belpointe family of companies, Belpointe OZ overview, and Belpointe Asset Management. These sites describe capabilities generally; I am relying on you to tell me which Belpointe entity and people, if any, are appropriate.

What I need from you

The central ask

  1. 1

    Would it be feasible for Belpointe to come on publicly as an advisor to MovementAI? I am not asking us to decide every term now. I am asking whether the concept is workable so we can discuss the right role, scope, responsibilities, approvals and structure.

  2. 2

    If it is feasible, may I tell USPS that Belpointe is advising MovementAI once we have agreed on the exact public wording? Nothing would be announced or represented without your approval and the approval of the appropriate Belpointe entity.

  3. 3

    I already have a well-established relationship at Howden Global Group. Would you prefer that I use that relationship for insurance, or involve insurance and risk people inside Belpointe, or others you know and trust, before I formally engage Howden?

  4. 4

    I have already met the Belpointe multifamily lead through your introduction and have reached out, but we have not connected yet. If USPS asks whether it would be the first pilot, may I say only that Belpointe is also willing, in principle and subject to its own approvals, to evaluate MovementAI at Aster & Links and VIV?

Private discussion draft · Any Belpointe advisory role, public language, insurance path or property involvement remains subject to written approval by the appropriate parties.