Information Security Policy Statement

TAUNIQO.AI S.L. is aware of and assumes its commitment to information security according to the ISO 27001 reference standard.

The purpose of this Information Security Policy Statement is to protect the information assets involved in the services provided by TAUNIQO.AI S.L.

It is the policy of TAUNIQO.AI S.L. to ensure that:

• Information is protected against losses of availability, confidentiality and integrity.
• Information is protected against unauthorised access.
• Applicable legal requirements are met.
• Business requirements regarding information security and information systems are met.

The Security Committee assesses the information assets of TAUNIQO.AI S.L., from which the risk analysis and subsequently risk management will derive; both the analysis and the risk management will be reviewed annually by Management, which will decide whether a new analysis and risk management exercise is carried out. Risks to be treated will be reflected in the Risk Treatment Plan.

Security incidents are reported and handled appropriately.

Procedures are established to comply with the Security Policy.

The Security Officer is responsible for maintaining this Policy, the management manual and the procedures, and for providing support in their implementation, as well as supervising and checking that the Risk Treatment Plan for each year is fulfilled.

Each employee is responsible for complying with this Policy and its procedures as they apply to their role.

It is the policy of TAUNIQO.AI S.L. to implement, maintain and monitor the ISMS.

TAUNIQO.AI S.L. is committed to the continuous improvement of the IMS. To that end it relies on Policies, objectives, internal-audit results, data analysis, corrective actions and management review to facilitate continuous improvement. This Policy has been approved by the Management of TAUNIQO.AI S.L. and will be reviewed annually.