Integrated Policy for Quality, Information Security, Service Management, Business Continuity, Environment, and Personal Data Management Systems

Our company operates in the field of “Digital Design, Digital Software Development, Maintenance, Consultancy and Support Services.”

Our organization is committed to providing services in accordance with global standards and the requirements of the Quality Management System, Information Security Management System, Privacy Information Management System, Service Management System, Business Continuity Management System, and Environmental Management System; protecting customer data and all information assets at the highest level; ensuring uninterrupted service continuity without compromise; protecting nature by minimizing its environmental impacts; and continuously improving all its management systems.

Our Fundamental Commitments and Guiding Principles:

• Service Continuity and High Performance: To ensure the continuity, availability, and performance of the software development, system management, database, network, web and mobile application services, as well as consultancy activities provided to our customers.

• Proactive Risk and Environmental Management: To adopt a risk-, opportunity-, and environmental aspect-based thinking approach as an integral part of our corporate culture, thereby enhancing the effectiveness of our processes and proactively anticipating and managing potential adverse environmental and business impacts.

• Environmental Protection and Sustainability: To keep the impacts of our activities on ecological balance under control, ensure environmental protection and pollution prevention, and promote the efficient and economical use of natural resources, including energy, water, and paper.

• Green IT Through Digital Transformation: To prioritize energy efficiency in our software development, cloud infrastructure, and server management processes, reduce our carbon footprint, and contribute to improving our customers' environmental performance through our digital solutions.

• Waste Management and Recycling: To reduce waste at its source, ensure proper segregation, and facilitate recycling of all waste generated by our office operations and technological infrastructure, including electronic waste (e-waste), in compliance with applicable legal regulations.

• End-to-End Service Management: To systematically ensure the planning, design, development, delivery, monitoring, and continual improvement of all digital and operational services within the scope of service management.

• Customer Focus and Satisfaction: To regularly evaluate customer needs and expectations, continuously monitor and measure service levels (SLAs), and implement sustainable improvement initiatives aimed at increasing customer satisfaction.

• Disruption and Threat Control: To proactively identify and assess all internal and external risks that may cause service disruptions and implement the necessary preventive controls to reduce such risks to acceptable levels.

• Sustainable Infrastructure and Resource Management: To maintain the highest possible level of adequacy of human resources, information resources, software, hardware, network infrastructure, and cloud services used in service delivery, while ensuring their long-term sustainability.

• Strategic Stakeholder and Supplier Relationships: To closely monitor the impacts of suppliers, business partners, and external service providers on service delivery and the environment; evaluate their performance against objective criteria; promote environmental awareness throughout our supply chain; and develop mutually beneficial relationships.

• Management by Objectives: To establish measurable objectives for service availability, capacity, performance, business continuity, and environmental performance based on concrete data, regularly monitor progress, and dynamically improve these objectives.

• Effective Process Operations: To manage incident, service request, problem, change, and release management processes in an integrated manner and in accordance with applicable standards, thereby ensuring consistent service quality.

• Business Continuity and Resilience: To identify critical activities that may be affected by cyberattacks, infrastructure outages, emergencies, natural disasters, and human-induced incidents; manage associated risks; and ensure that services are restored within acceptable recovery time and recovery point objectives (RTO/RPO).

• Organizational Knowledge and Continuous Development: To thoroughly evaluate lessons learned from business continuity incidents, environmental emergencies, and information security incidents, thereby continuously strengthening organizational resilience and the ability to withstand and recover from disruptions.

• Information Asset Security: To protect our organization's critical information assets, customer data, and service infrastructures, ensuring the confidentiality, integrity, and availability (CIA Triad) of information assets under all circumstances.

• Personal Data Protection and Privacy: To ensure that personal data is processed lawfully, fairly, for specified, explicit, and legitimate purposes, in a proportionate, accurate, and up-to-date manner; retained only for legally permitted periods; and that the rights of data subjects under the Turkish Personal Data Protection Law (KVKK) and the General Data Protection Regulation (GDPR) are fully protected.

• Value-Oriented Service Delivery: To ensure that all services are planned, delivered, and configured in full compliance with customer and service requirements, creating clear and measurable value for business processes.

• Full Compliance with International Standards and Legislation: To ensure full and unconditional compliance with ISO 9001:2015, ISO 14001:2015, ISO/IEC 27001:2022, ISO/IEC 27701, ISO/IEC 20000-1:2018, and ISO 22301:2019 standards; applicable environmental legislation; Turkish Personal Data Protection Law No. 6698 (KVKK); and all other relevant legal, regulatory, and contractual requirements.

• Corporate Culture and Participation: To foster awareness of quality, service management, environmental protection, information security, personal data protection, and business continuity through the active participation of all employees and stakeholders, establishing these principles as an integral part of our shared corporate culture in support of our organization's sustainable growth.

• Transparency and Accessibility: To ensure that this Policy is thoroughly understood by all personnel, effectively implemented in daily operations, and appropriately communicated and made accessible to all relevant third parties, including customers, business partners, auditors, and the public.

As Top Management, we hereby commit to adopting all the above principles as the foundation of our processes and allocating all necessary resources to ensure their full and effective implementation.