Professional Standards Behind the Technology We Build.

01

Code of Conduct & Professional Ethics

Everyone representing Averiq Technologies is expected to conduct business professionally, honestly and responsibly.

Our standards include

• Acting with honesty and integrity
• Treating clients, colleagues and partners respectfully
• Communicating truthfully about capabilities and commitments
• Taking responsibility for work and decisions
• Protecting confidential information
• Avoiding deceptive or misleading practices
• Following applicable contractual and legal obligations
• Raising concerns when inappropriate conduct or material risks are identified

Professional conduct applies to interactions in person, remotely, electronically and through company-related communication channels.

02

Respectful Workplace

Averiq Technologies aims to maintain a professional environment in which people are treated with dignity and respect.

Harassment, bullying, intimidation, retaliation and other inappropriate workplace conduct are not acceptable.

Team members should communicate professionally, respect appropriate boundaries and contribute to a collaborative working environment.

03

Equal Opportunity & Fair Treatment

Employment and professional opportunities should be evaluated based on relevant skills, qualifications, performance, potential, conduct and legitimate business requirements.

Averiq Technologies is committed to maintaining a professional environment free from unlawful discrimination.

04

Recruitment & Vacancies

Averiq Technologies aims to maintain a fair, professional and transparent recruitment process.

Recruitment principles

• Publish genuine vacancies only
• Provide reasonably accurate job descriptions
• Evaluate applicants against role-related requirements
• Protect applicant information
• Avoid requesting unnecessary sensitive personal information
• Communicate professionally with candidates
• Avoid discrimination in hiring decisions
• Verify qualifications or references when appropriate and legally permitted
• Obtain appropriate authorization before conducting checks where required

Averiq Technologies does not charge candidates a fee to apply for employment.

05

Applicant Privacy

Information submitted during recruitment should be used for legitimate recruitment and hiring purposes and accessed only by people who reasonably require it for those purposes.

Candidate CVs, contact information, interview notes and related information should be handled responsibly and retained only as appropriate for legitimate business or legal requirements.

06

Confidentiality & Data Secrecy

Confidential information is a business asset and must be protected appropriately.

Confidential information may include

• Client information
• Customer data
• Source code
• Credentials and API keys
• Database information
• Architecture and system documentation
• Business plans, pricing and proposals
• Contracts and financial information
• Employee and applicant information
• Intellectual property
• Internal communications
• Security information

Team members and contractors should access confidential information only where legitimately required for their responsibilities. Confidential information must not be disclosed, copied, transferred or used for unauthorized purposes.

Confidentiality responsibilities may continue after an employment, contractor or client relationship ends where required by agreement or law.

07

Customer Data Handling

Client and customer data entrusted to Averiq Technologies should be handled only for authorized business and project purposes.

Purpose limitation

Use customer information only for authorized and legitimate purposes related to the engagement.

Data minimization

Access and collect only information reasonably necessary for the work being performed.

Need-to-know access

Limit access to people and systems that reasonably require the information.

Secure handling

Use appropriate safeguards when storing, processing or transferring sensitive information.

Controlled sharing

Do not disclose customer information to unauthorized individuals or third parties.

Responsible retention

Avoid retaining customer information longer than reasonably required by contractual, operational or legal requirements.

Secure disposal

When information no longer needs to be retained, dispose of it using appropriate methods.

08

Privacy

Averiq Technologies respects the privacy of clients, website visitors, applicants, employees and business contacts.

Our privacy principles include

• Transparency
• Purpose limitation
• Data minimization
• Appropriate security
• Responsible retention
• Controlled access
• Appropriate handling of privacy requests
• Responsible third-party processing

This section describes our general privacy principles. It is not a substitute for a formal website privacy notice where one is legally required.

09

Information Security

Security is a shared responsibility across the design, development and operation of technology.

Principles we work to

• Appropriate authentication
• Access control
• Secure credential management
• Appropriate encryption where warranted
• Secure development practices
• Software dependency awareness
• Vulnerability management
• Backups where appropriate
• Logging and monitoring where appropriate
• Incident reporting
• Secure configuration
• Environment separation where appropriate

We intentionally do not publish internal security configurations or operational details. These principles describe our standards, not our implementation.

10

Access Control & Least Privilege

Access to systems and information should be limited according to legitimate business responsibilities.

Need to know

Access is granted for a defined, legitimate purpose.

Least privilege

Access is no broader than the responsibility requires.

Authorized access

Access is granted through appropriate approval.

Accountability

Access carries responsibility for how it is used.

Access should be reviewed or removed when responsibilities or relationships change.

11

Intellectual Property

Averiq Technologies respects the intellectual property rights of clients, employees, contractors, partners and third parties.

Team members should

• Use properly authorized software and content
• Respect licensing requirements
• Avoid unauthorized copying
• Protect proprietary source code and documentation
• Respect client-owned intellectual property
• Follow contractual ownership provisions
• Avoid incorporating unauthorized proprietary material into deliverables

Ownership of project deliverables and intellectual property may be defined by the applicable client agreement or contract.

12

Acceptable Use of Company Technology

Company technology, accounts, systems and information resources should be used responsibly and primarily for legitimate professional purposes.

Inappropriate use includes

• Unauthorized system access
• Credential sharing
• Intentional security bypass
• Introducing malicious software
• Unauthorized disclosure of information
• Illegal activities
• Harassment
• Deliberate misuse of company or client resources

13

AI & Responsible Technology

Averiq Technologies supports the practical and responsible use of artificial intelligence where it can create meaningful business value.

Human responsibility

AI-assisted work remains subject to appropriate human judgement and accountability.

Confidentiality

Confidential client information should not be submitted to unauthorized public AI services.

Data responsibility

AI implementations should consider the source, sensitivity and appropriate use of data.

Accuracy

AI-generated outputs should not automatically be treated as correct.

Security

AI integrations should be evaluated for appropriate security and access considerations.

Transparency

Where appropriate, clients should understand when AI forms a material part of a proposed solution.

Responsible application

AI should not be implemented merely because it is fashionable; its use should address a legitimate business requirement.

14

Our Responsibility to Clients

Trust is fundamental to technology engagements.

Averiq personnel should

• Protect client information
• Respect contractual confidentiality obligations
• Communicate capabilities honestly
• Avoid unnecessary access to client data
• Identify known material risks
• Maintain appropriate professional boundaries
• Avoid knowingly misrepresenting project progress
• Respect client intellectual property
• Use project information only for authorized purposes

We do not publish client names, project information, screenshots or case studies without appropriate authorization.

15

Conflicts of Interest

Team members should avoid situations where personal, financial or outside interests improperly influence — or appear to improperly influence — professional decisions.

Potential conflicts should be disclosed appropriately so they can be evaluated and managed.

16

Ethical Business Conduct

Averiq Technologies does not support bribery, corruption, kickbacks or improper influence in business relationships.

Gifts, hospitality, commissions and business arrangements should never be used to improperly influence a business decision.

17

Third Parties & Vendors

External vendors, platforms and service providers can affect the confidentiality, security and reliability of technology solutions.

Where appropriate, third parties are considered against factors such as

• Business suitability
• Security
• Privacy
• Reliability
• Contractual requirements
• Data handling
• Access requirements

18

Remote & Digital Working

Professional, confidentiality and security responsibilities apply regardless of where work is performed.

Team members working remotely should take reasonable measures to protect

• Devices
• Credentials
• Client information
• Company information
• Conversations
• Screens
• Files
• Network access

19

Incident Reporting

Suspected loss, unauthorized disclosure, inappropriate access, security incidents or other material information risks should be reported promptly through appropriate internal channels.

Examples may include

• Lost devices
• Compromised credentials
• Accidental disclosure
• Suspicious access
• Malware
• Unauthorized data transfer
• Security vulnerabilities
• Privacy concerns

20

Records & Information Management

Business records should be accurate, appropriately protected and retained according to legitimate business, contractual and legal requirements.

Records should not be intentionally falsified, improperly altered or destroyed to conceal inappropriate conduct.

21

Raising Concerns

Averiq Technologies encourages legitimate concerns about misconduct, security, privacy, discrimination, harassment, conflicts of interest, unethical practices or significant project risks to be raised appropriately.

Concerns should be treated seriously and handled as confidentially as reasonably possible.

22

Policy Governance

Averiq Technologies may review and update its policies as the company, technology, regulatory environment and business requirements evolve.

Public policies provide general guidance and do not replace contractual obligations, employment agreements, client-specific requirements or applicable law.