INFORMATION QUALITY AND SECURITY POLICY

At vordis, whose business activity is the “Integration of Unified Communications Products and Services”, we work to build and maintain the trust of our customers and other interested parties by providing high-quality services and ensuring the appropriate protection of the information we manage. To this end, we promote a culture based on operational excellence, continuous improvement, compliance with applicable requirements, and effective management of the risks and opportunities associated with our activities.

In line with this commitment, vordis has implemented a Quality Management System in accordance with UNE-EN ISO 9001:2015 and an Information Security Management System in accordance with UNE-EN ISO 27001:2022, integrating both systems into the organization’s daily operations as strategic elements for achieving our business objectives and ensuring customer satisfaction.

To ensure quality and information security, both externally and internally, the management team, together with the highly qualified managers and employees at vordis, has established a set of actions and systems designed to provide our customers with the necessary level of confidence. These are outlined below in our Quality and Information Security Policy:

• Understand and meet the needs and expectations of our customers, ensuring our commitment to complying with customer requirements, applicable laws and regulations governing our activities and services, requirements voluntarily adopted by our organization, applicable information security requirements, and any other obligations established by third parties.

• Enhance the effectiveness of human and technological resources to ensure the quality of our work and projects. We have a highly experienced team responsible for managing and executing projects, supported by all the necessary technical resources.

• Engage our employees in achieving Continuous Improvement by encouraging their contributions and enhancing their professional skills through the continuous training programs provided by the organization.

• Continuously improve the effectiveness of our management systems to ensure that we consistently meet the demands of an increasingly competitive market and a constantly evolving environment.

• Achieve an appropriate level of information protection by preserving the following principles:

  • Confidentiality: Ensuring that information is accessible only to individuals authorized to access it.

  • Integrity: Ensuring the accuracy and completeness of information and its processing methods.

  • Availability: Ensuring that authorized users have access to information and associated assets whenever required.

In accordance with these principles, Management reaffirms its firm commitment to combining efforts to achieve these objectives, ensuring that this policy is understood, implemented, and kept up to date at all levels of the organization.

The Management Team

Rev 4

Date: 26-10-2026