Information Security Policy

Under the leadership of our Representative Director, we continuously maintain and improve information security.

Our Representative Director is responsible for information security, including the management of information assets and the implementation of security measures.

We comply with laws and regulations related to information security, including the Act on the Protection of Personal Information, as well as applicable norms and contractual requirements agreed with our customers.

· We use customer information only for the purposes defined in our contracts.

· We do not hold the IDs or passwords of external systems used by our customers.

· When we use generative AI for automation, we select services whose contracts or settings ensure that input data is not used for AI training.

· Upon termination of a contract, we return or delete information in the manner agreed with the customer.

To protect information assets from unauthorized access, leakage, tampering, loss, destruction and service disruption, we implement technical and operational measures, including keeping operating systems and software up to date, malware protection, strong passwords and multi-factor authentication, access control, and data backups.

We provide ongoing education to everyone involved in our work to raise their knowledge and awareness of information security.

If an information security incident occurs or is suspected, we respond promptly to minimize damage, report to affected customers without delay, and take measures to prevent recurrence.

We review the above efforts regularly and continuously improve them.