COMPANY POLICY

Commitments guiding Net Service in Quality, Environment, Worker Health and Safety, Social Responsibility, Gender Equality, and Information Security:

• Constantly meeting the agreed-upon product and service requirements with the customer.
   

• Tailoring services to the specific needs of the end-user, making these the primary requirement in product design.
   

• Upholding our role as a provider of not only products but also organizational solutions for the client.
   

• Identifying and fulfilling needs that the user may not yet recognize but could benefit from our services.
   

• Seeking solutions with high technological flexibility and excellent integration with the user's operational environment and information system.
   

• Adhering to the agreed-upon processing times with the client and promptly accommodating any project changes.
   

• Complying with the service level agreements (SLAs), with particular attention to the operational continuity of environments where Cloud solutions are employed.
   

• Providing constant post-sales assistance to clients, including product maintenance, development, and updates.
   

• Monitoring client satisfaction and the perceptions of internal and external stakeholders regularly.
   

• Periodically verifying the achievement of objectives and setting appropriate corrective actions.
   

• Continuously improving company performance, including environmental protection, worker health and safety, and information security, through the progressive consolidation of methods and processes and the internal sharing of developed know-how.
   

• Ensuring continuous staff engagement and skill development through training and information sessions, promoting growth, awareness, and responsibility among all employees, and maintaining high professional standards relevant to their roles.
   

• Identifying, evaluating, and periodically monitoring risks and opportunities associated with activities, products, and services, including social responsibility aspects.
   

• Regularly monitoring the environmental impact of activities, products, and services.
   

• Protecting the environment and preventing pollution, even in abnormal or emergency situations.
   

• Properly managing waste disposal, implementing appropriate recycling measures where possible.
   

• Using energy and materials prudently and consciously, aiming to reduce consumption and resource use.
   

• Designing systems that offer environmental benefits to the end user, such as reducing necessary prints and optimizing energy consumption through SaaS (Software as a Service) delivery.
   

• Reducing the environmental impact and potential commuting-related injuries by encouraging remote work whenever possible.
   

• Complying with applicable legal requirements and other commitments related to worker health and safety, environmental protection, labor rights, including prevailing sector regulations and international ILO and UN conventions on human and worker rights, and personal data management.
   

• Ensuring safe and healthy working conditions to prevent work-related injuries and illnesses, eliminating hazards, and reducing risks at the source by investing in new equipment, maintaining existing ones, and modifying workplaces to make them safer and healthier.
   

• Promoting remote working according to job-related needs, optimizing worker activities and creating value even remotely.
   

• Encouraging employee involvement and consultation to increase motivation and awareness of the importance of their roles in adhering to procedures, company instructions, and health and safety and social responsibility directives.
   

• Identifying, evaluating, and managing risks related to information security and IT service availability.
   

• Protecting resources involved in information security management from threats (internal, external, deliberate, accidental) that could compromise them.
   

• Making information accessible only to authorized personnel, both internal and external, ensuring service levels and complexity compatible with system requirements.
   

• Ensuring the availability, integrity, and confidentiality of processed information in any format, in compliance with applicable legislative requirements.
   

• Ensuring operational continuity through targeted organizational and technological interventions, keeping these interventions well-defined, constantly updated, and periodically verified.
   

• Ensure the availability of SaaS-delivered services even in the event of disruptive incidents.
   

• Conduct periodic exercises to continuously verify the adequacy of resilience strategies for incidents and disasters, while ensuring that business continuity plans remain up to date and effective.
   

• Ensuring all personnel are trained in information security, informed of mandatory company policies on the matter, and aware of the consequences of policy violations.
   

• Periodically evaluating the effectiveness of the Information Security Management System and IT services, as well as staff training, through simulations (vulnerability assessments, policy knowledge tests, and violation simulations).
   

• Conducting periodic reviews of the Integrated Management System by management and gradually introducing metrics to assess its performance.
   

• Separating tasks related to critical information security activities where possible.
   

• Identifying and eliminating any potential threats to information security, avoiding the use of unauthorized software, and staying updated on security trends and new types of threats.
   

• Ensuring any real or suspected information security breaches are communicated and investigated.
   

• Identifying and managing incidents and involving competent authorities for those impacting legal compliance.
   

• Continuously updating software to meet evolving regulatory requirements, ensuring product and service compliance (including Cloud services) with technical regulations, current legislation, and contracts.
   

• Rejecting the use of child labor and/or forced labor, adopting these principles in the company’s personnel selection, management, and development procedures.
   

• Respecting the freedom of trade union association and the right to collective bargaining, fully applying the current national collective labor agreement (CCNL), promptly paying agreed wages, and contributing all related social security, assistance, and insurance payments, while participating in available corporate welfare programs where possible.
   

• Respecting the right to a fair wage and proper working hours, ensuring the protection of maternity and paternity, as well as disadvantaged individuals.
   

• Upholding principles of dignity, equality, and combating all forms of discrimination and unequal treatment (in hiring, wages, access to training, and career promotions) based on race, nationality, religion, disability, gender, sexual orientation, union affiliation, or political affiliation.
   

• Promoting gender balance and the dissemination of an inclusive culture that values individual uniqueness and equal professional growth opportunities, regardless of their role in the company.
   

• Strengthening awareness initiatives at all levels to promote equal opportunities, work-life balance, shared family responsibilities, and the removal of potential obstacles, including those related to sexual orientation.
   

• Communicating transparently, both internally and externally, the commitment to pursuing gender equality, valuing diversity, and supporting the empowerment of women.
   

• Defining KPIs to verify and measure gender equality actions.
   

• Identifying initiatives that value the parenting experience, protecting the relationship between staff and the company before, during, and after maternity/paternity.
   

• Appointing a Steering Committee for the effective adoption and implementation of this integrated policy from a gender equality perspective.
   

• Allocating the necessary budget to achieve and maintain the objectives of the "Strategic Plan."
   

• Prohibiting improper disciplinary practices and condemning all illegal conduct that could conflict with the dignity or physical and/or moral integrity of the worker.
   

• Engaging suppliers of goods, activities, and services by requiring their commitment to social responsibility and compliance with the SA 8000 standard requirements.
   

• Ensuring that all stakeholders can report any episodes of law violations and SA 8000 standard requirements through a complaint system that protects the reporter from any form of retaliation.
   

• Encouraging the creation and functionality of a working group dedicated to implementing and monitoring SA 8000 standard requirements (Social Performance Team), composed equitably of Worker Representatives and Management.