Quality Policy

ISO 22301 — Business Continuity Management System

PLT-17. Business Continuity Policy · R3 / 14.06.2022

1. Protect the safety and health of our employees, managers and guests during an incident.
2. Ensure that the impact of any disruption on our operations remains within limits defined in the Business Impact Analysis.
3. Ensure full recovery after any disruption within defined boundaries.
4. Maintain our reputation as a credible, reliable partner and service provider in the eyes of all stakeholders.
5. Prevent damage to our corporate image through media channels resulting from any business continuity event.
6. Improve the effectiveness, suitability and adequacy of the business continuity management system through leadership, planning and performance evaluation.
7. Manage our core business — electronic data and e-invoice exchange — in compliance with legal requirements set by competent regulators.

ISO 27001 — Information Security Management System

PLT-01. Information Security Policy · R1 / 14.06.2022

1. Manage information assets, identify their security values, needs and risks, and develop and apply security risk controls.
2. Fulfill legal and regulatory requirements, contractual obligations and corporate responsibilities to internal and external stakeholders.
3. Reduce the impact of information security threats on business continuity and contribute to continuity.
4. Maintain the capability to respond rapidly to information security incidents and minimize their impact.
5. Maintain and improve the level of information security through a cost-effective control infrastructure over time.
6. Raise awareness by providing information security management training to all personnel.
7. Address Confidentiality, Integrity and Availability — the three pillars of information security — within a risk management framework.

ISO 20000 — IT Service Management System

PLT-14. IT Service Management Policy · R1 / 14.06.2022

1. Improve the efficiency and productivity of customers' business processes through uninterrupted, high-quality service in electronic data transfer.
2. Enable continuous document exchange between customers and their business partners via our web platform at the lowest cost.
3. Automate processes within our integration services, saving time and labor.
4. Through our information update service, ensure that data transferred from customers becomes the most accurate, up-to-date and meaningful information for them.