Integrated Management System Policy

This document serves to notify the approval by Senior Management regarding the update of the Integrated Management System Policy, which is composed of the international standards ISO 9001:2015, 14001:2015, 45001:2018, 20000-1:2018, 22301:2019, 27001:2022, 37001:2016, NMX-R-025-SCFl-2015, and Protection of Personal Data Held by Private Parties:

CUSTOMSOFT, committed to providing services focused on the total satisfaction of its clients and stakeholders, promotes among its personnel the compliance with laws, regulations, applicable standards, and its Integrated Management System (IMS) Policy, aimed at addressing global requirements for quality, environmental protection, occupational safety and health, technologies, information security, business continuity, anti-bribery, labor equality and non-discrimination, protection and compliance with the duties, obligations, and requirements of the LFPDPPP and its regulations, under the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility, as established in Applicability of Information Security and Personal Data Protection controls in a continuous improvement environment, allowing it to achieve its objectives and critical success factors through its strategic, primary, and support processes.

Independently for each specialty as shown below:

Occupational Health and Safety Management: Provide safe and healthy working conditions, including the work environment. To this end, hazards are identified and risks associated with our activities are assessed. Additionally, consultation and participation of both personnel and stakeholders are promoted through surveys, campaigns, and reporting of unsafe acts and conditions. The main focus is on preventing incidents, accidents, and occupational diseases, supported by continuous awareness and training, through a committed and well-trained team.

Environmental Management: Identify environmental aspects related to our activities and reduce their impact. Consultation and participation of all personnel and stakeholders are promoted through reporting of environmental aspects and conducting campaigns. The main focus is on preventing pollution and commitment to environmental protection, based on continuous awareness and training, supported by a committed and well-trained team.

The SASSO Management ensures implementation and assigns sufficient authority to the responsible for Safety, Health, and Environment of each Project for dissemination and awareness regarding the importance of compliance in these matters to the entire work team through appropriate means, as well as existing resources (including but not limited to electronic or physical means at the operation sites).

Quality Management: Offer a service that meets the client’s expectations with a process-based approach.

Information Security Management: Identify and protect information assets, preventing the destruction, disclosure, modification, and unauthorized use of all information related to our stakeholders.

Business Continuity Management: Ensure compliance with service levels by identifying the most important conditions for sustainable commercial development in case of emergency situations in adherence to our service portfolio.

IT Service Management: Provide the training and resources necessary for the development of technological services aligned with our clients’ needs.

Personal Data Management: Regulate the legitimacy of the processing of personal data in our possession to ensure privacy and prevent unauthorized access in accordance with PO-GAL-03 Personal Data Protection.

Anti-Bribery Management: Commit to working with integrity and transparency, confronting corruption under an ethical and transparent organizational culture of respect for anti-bribery norms and laws as stipulated in PO-GAL-02 Anti-Corruption Policy.

Labor Equality and Non-Discrimination Management: Promote a culture of labor equality and non-discrimination within the organization and guarantee equal opportunities for all personnel in accordance with PO-GCH-12 Labor Equality and Non-Discrimination.

Applicable to the current certification scheme of the organization.