Information Security Policy

Basic Philosophy

Aloha Works Co. Ltd. (hereinafter "the Company") handles a wide range of information assets, including information entrusted to us by our customers. In order to maintain the trust of our customers, the Company considers it our responsibility to implement appropriate safety-management measures for these information assets and to protect them. To achieve this, taking into account applicable laws and regulatory requirements as well as our contractual security obligations, we set security objectives and promote activities related to information security.

Basic Policy

• We will implement optimal security measures and promote security activities.
• Officers and employees shall act in accordance with the Company's security-related rules and strive to prevent incidents involving information assets. In the unlikely event that an incident occurs, they shall promptly take appropriate measures, including measures to prevent recurrence.
• We will carry out awareness and educational activities regarding information security.
• We will periodically review this Information Security Policy in response to changes in business activities, organizational changes, technological changes, and the like, and will pursue continuous improvement of our information security framework.
• As management, we will fulfill and support our responsibilities in order to realize this Information Security Policy.
• We will strictly comply with applicable laws and regulatory requirements as well as our contractual security obligations.

ISO 27001:2022 certification

The Company's information security management system is certified to the international standard ISO 27001:2022.