INFORMATION SECURITY POLICY
Sensedia understands that its information and personal data are handled through a variety of media, storage and communication channels, all of which are subject to factors that may compromise security and privacy. As a provider of integration solutions, we are committed to ensuring that the protection of these assets is embedded in all our processes, products and organizational culture.
Accordingly, Sensedia's Top Management establishes this Policy, formally declaring its commitment to meeting all applicable requirements (legal, regulatory and contractual) and to the continual improvement of the effectiveness of its Information Security and Privacy Management System:
- Ensure the Security Triad: Implement, maintain and review controls that ensure the Confidentiality, Integrity and Availability of information owned by Sensedia or under its responsibility, protecting it against external and internal threats.
- Continually Improve the Management System: Systematically review the objectives and the effectiveness of security and privacy controls at all levels of the organization, seeking the constant evolution of institutional maturity.
- Ensure Business Continuity: Adopt and test contingency and disaster recovery plans to ensure that essential services remain available and resilient.
- Handle Security and Privacy Incidents: Ensure that adverse events are properly recorded, investigated and corrected, with timely communication to affected parties and authorities when required.
- Protect Privacy and Personal Data: Adopt technical and administrative measures to ensure that personal data is processed ethically, lawfully and transparently, fully respecting the rights of data subjects and applicable privacy regulations.
- Ensure Security and Privacy by Design: Incorporate data protection requirements from the conception of new products and services (Security and Privacy by Design), ensuring the technological resilience of our solutions.
- Promote Education and Awareness: Ensure ongoing training of employees and third parties on their security and privacy responsibilities, integrating these practices into day-to-day operations.
- Meet Compliance Requirements: Ensure strict compliance with security and privacy requirements set forth by laws, regulations and contractual clauses with interested parties.
- Make Guidelines Available to Interested Parties: Keep security policies and procedures accessible to all employees, contracted third parties and, where appropriate, customers, ensuring transparency of the practices adopted.
This policy is approved by Top Management, reviewed periodically and kept available to all interested parties through Sensedia's official communication channels.
This content summarizes the Information Security and Privacy Policy (POL-DIR-001), edition 10, approved by Top Management on October 26, 2026.