Information Security Policy

1. Management responsibility

The Representative Director takes the lead in working on information security on an ongoing basis.

2. Internal structure

We appoint a person in charge of information security and put in place a structure to advance our efforts. We set out our information security measures as internal rules and comply with them.

3. Employees and collaborators

Employees and collaborators acquire the knowledge and awareness needed for information security and put them into practice in their daily work. This policy also applies when work is done on personal computers.

4. Handling information

• We use two-step verification on work accounts and do not reuse passwords.
• We keep computers and the software used for work up to date.
• We share data only with the people who need it.
• When using external services such as generative AI, we take care with confidential and personal information.
• Personal information is handled in accordance with our Privacy Policy.

5. Compliance with laws and contractual obligations

We comply with laws on information security, government guidelines and other norms, and our contractual obligations.

6. Responding to violations and incidents

If a violation of laws or contracts relating to information security, or an incident such as an information leak, occurs, we promptly investigate the cause, contain the damage, respond appropriately, and work to prevent recurrence. Where necessary, we notify those affected.

7. Review

We regularly review the state of our information security and keep improving our efforts.