INFORMATION SECURITY POLICY

ENVIRONMENT DEVELOPERS S.A.S., a company committed to sustainability, environmental conservation, and technological innovation in service of communities, hereby adopts this Information Security Policy in compliance with Law 1581 of 2012, the regulations issued by the Superintendence of Industry and Commerce, and the guidelines set forth in ISO/IEC 27001:2022. This Policy serves as the framework document for the Company’s Information Security Management System (ISMS).

The purpose of this Policy is to protect the confidentiality, integrity, and availability of the Organization’s information, ensure compliance with all applicable legal, regulatory, and contractual requirements, and promote a security culture in which every employee and collaborator understands their role and acts accordingly.

This Policy applies on a mandatory basis to all employees, contractors, partners, suppliers, volunteers, and authorized third parties who access the Organization’s information, in any form and through any of its platforms, devices, or workplaces, covering every stage of the information life cycle.

Environment Developers S.A.S. is committed to protecting data subjects’ rights to privacy, reputation, and personal integrity. Accordingly, all its activities shall be governed by the principles of confidentiality, integrity and availability, privacy, legal compliance, risk-based management, security by design, least privilege, awareness, and continuous improvement.

Data subjects may access, update, rectify, or request the deletion of their information, withdraw their consent, and submit inquiries or complaints in accordance with the established procedures. Special care shall be taken when processing sensitive personal data and safeguarding the paramount rights of children and adolescents.

Compliance with this Policy is mandatory. Any violation may result in disciplinary action and civil, criminal, or administrative liability, as applicable, as well as the termination of contracts with contractors and suppliers.

Environment Developers S.A.S. reaffirms its commitment to protecting information and undertakes to allocate the necessary resources, periodically review the performance of the ISMS, and promote its continuous improvement, ensuring full compliance with the principles and provisions established in Law 1581 of 2012 and ISO/IEC 27001:2022.