BASESTONE

Information Security Charter

Basestone Co., Ltd. is a company whose mission is to protect customers' information through the latest security technologies, and we recognize our responsibility to carefully protect all the information assets we handle and the personal information of our customers and employees. In particular, as a company entrusted with processing important information for customers including public institutions, we never forget that we ourselves must practice a high standard of information security. We therefore proclaim the following Information Security Charter, and all of our employees pledge to put it into practice.

  1. 1.We securely protect all information assets held by the Company and the personal information of our customers and employees, and comply with all relevant laws and regulations.
  2. 2.When collecting personal information, we collect only the minimum necessary for its purpose, and destroy it without delay once that purpose has been fulfilled.
  3. 3.We actively use the latest security technologies to keep our customers' information safe, and respond proactively to evolving threats.
  4. 4.We limit access to information assets to the scope required for work, and continuously review access rights.
  5. 5.We maintain an information security organization and framework led by our Chief Information Security Officer, and our management takes direct charge of information security activities.
  6. 6.We provide regular information security training to all employees so that information security becomes an everyday practice.
  7. 7.We continuously monitor security threats and vulnerabilities, and respond swiftly to any incident to minimize damage.
  8. 8.We regularly assess our level of information security and remedy shortcomings, building a security framework that keeps improving.

July 1, 2026

Yoosin Park, CEO, Basestone Co., Ltd.