Information Security Policy

Purpose

This Policy sets out TraceCORE's commitment to protecting company and client information across its software development, digital transformation, and delivery activities.

Policy Statement

TraceCORE is committed to protecting company and client information by establishing, implementing, maintaining, monitoring, reviewing, and continually improving an Information Security Management System (ISMS) appropriate to the Company's size, remote operating model, business activities, software development activities, and information security risks.

Information security is managed through defined roles and responsibilities, risk-based controls, documented policies and procedures, staff awareness, access management, secure remote working practices, supplier and contractor oversight, secure software development practices, incident management, internal audits, management reviews, and continual improvement.

TraceCORE applies information security controls in a practical and proportionate manner, based on information security risks and applicable legal, regulatory, contractual, and client requirements.

Information Security Objectives

Through its ISMS, TraceCORE aims to:

• protect the confidentiality, integrity, and availability of company, client, and project information;
• support the development of secure software products and digital solutions;
• reduce the likelihood and impact of information security incidents;
• maintain compliance with applicable legal, regulatory, and contractual requirements;
• maintain ISO/IEC 27001:2022 certification status and continually improve the ISMS.

Further Information

The full Information Security Policy, including detailed controls, roles and responsibilities, and internal procedures, is available to clients and partners under NDA or on a contractual basis.

Approval

This Policy is approved by Alexander Makarov, CEO.

Effective Date: September 25, 2026

Last Updated: September 25, 2026