2022

Environmental,
Social, andGovernance
ReportDeciphera Pharmaceuticals 2022 ESG Report1Disclaimer and Forward-Looking Statements
This report has been prepared by Deciphera Pharmaceuticals, Inc. (“Deciphera”, the “company” “we”, “us”, “our”)
for informational purposes only and not for any other purpose. Nothing contained in this report is, or should
be construed as, a recommendation, promise, or representation by Deciphera or any director, employee, agent,or adviser of Deciphera. This report does not purport to be all-inclusive or to contain all of the information you
may desire. Certain information contained in this report relates to or is based on studies, publications, surveys,
and other data obtained from third-party sources and Deciphera’s own internal estimates and research. While
Deciphera believes these third-party sources to be reliable as of the date of this report, it has not independently
verified, and makes no representation as to the adequacy, fairness, accuracy or completeness of, any
information obtained from third-party sources. Further, while Deciphera believes its internal research is reliable,
such research has not been verified by any independent source.
This report may contain forward-looking statements that are based on our current expectations, estimates, andprojections about our industry as well as management’s beliefs and assumptions. Words such as “anticipates,”“expects,” “intends,” “plans,” “believes,” “seeks,” “estimates,” “may,” “will,” and variations of these words or similar
expressions are intended to identify forward-looking statements. These statements include expectations
regarding our business strategies, drug and drug candidates, people strategies, environmental, social andgovernance efforts, including those related to diversity, equity, and inclusion, and climate, and speak only at thetime this report was prepared. Such statements are based upon the information available to us now and are
subject to change. We will not necessarily inform you of such changes. These statements are not guarantees of
future performance and are subject to certain risks, uncertainties, and assumptions that are difficult to predict.
Therefore, actual results could differ materially and adversely from those expressed in any forward-looking
statements as a result of various factors. Factors which could cause actual results to differ materially from thosein the forward-looking statements include, among others, the risks set forth in our Securities and Exchange
Commission (SEC) filings, including, without limitation the “Risk Factors” section of our Quarterly Report on Form
10-Q for the quarter ended March 31, 2023 filed with the SEC and subsequent filings with the SEC. New risk
factors and uncertainties may emerge from time to time, and it is not possible to predict all risk factors anduncertainties. There can be no assurance that an investment in our stock will meet your investment objectives,or that you will receive a return of all or part of such investment. Investment results may vary significantly overany given time period. The appropriateness of a particular investment or strategy will depend on an investor's
individual circumstances and objectives. Deciphera recommends that investors independently evaluate specificinvestments and strategies.
© 2023 Deciphera Pharmaceuticals. The Deciphera logo and QINLOCK® word mark and logo are registeredtrademarks and the Deciphera word mark is a trademark of Deciphera Pharmaceuticals, LLC. Deciphera andOne Mission, Inspired by Patients: Defeat Cancer, are trademarks of Deciphera Pharmaceuticals, LLC. All rights
reserved. This report may contain trade names, trademarks or service marks of other companies. Deciphera
relationship with, or endorsement or sponsorship of, these other parties.

Deciphera Pharmaceuticals 2022 ESG Report2

TABLE OF CONTENTSDISCLAIMER AND FORWARD-LOOKING STATEMENTS …….……..………………..….……2
WHO WE ARE ……….…………………………..………..………………………………………………….…4
Our Values …………………………………………………………………………………………………...….5
About This Report ………………………..…………….………………………………………………....…5
PATIENTS ………..………………………..………………………...……………………………………………6
Access and Affordability ………………….…………..……………..……………….……………..….…6
Quality Management, Drug Safety, and Counterfeit Drugs ………..………………….…6
Clinical Study Standards and Safety of Clinical Study Participants ……………………8Patient Advocacy and Corporate Philanthropy ………………….………..………..……….…9
OUR TEAM ………………….………..…..……...…………………..……………………...……………....10
Training and Development …………………………..……………….…………………….…………11
Diversity, Equity, and Inclusion (DEI) ………………..……………………….…………….…..…12
Employee Health and Safety ………..…………………..……….…………….…………..…………13
ENVIRONMENTAL MANAGEMENT ………….…………………………………….…….…….…….15
Environmental, Health, and Safety ………..……..…………..……..………………………….…15
Waste Management ………………………….…………………………….……………………..………15
GOVERNANCE AND LEADERSHIP…….………..………..………………………………………..…16
Risk Management and Governance of ESG …………....………………………………..….…16
Board Independence and Diversity …………….……..…..……………………………….…..…16
Business Ethics and Compliance …………………………..…….…………………………….……17
Ethical Marketing ………………………………….………….….…..………………………………….…18
Vendor Management ………………………..……………………….……………………………….….18
Information Security and Patient Privacy ……………….……..…………………………….…20
FRAMEWORKS AND STANDARDS ……………….…………….….……….……………………..…23
Sustainable Accounting Standards Board (SASB) ………………..……………………….…23

Deciphera Pharmaceuticals 2022 ESG Report3WHO WE ARE
Deciphera Pharmaceuticals, Inc. (NASDAQ: DCPH) is a biopharmaceutical company
focused on discovering, developing, and commercializing important new medicines
to improve the lives of people with cancer. We are leveraging our proprietary switchcontrol kinase inhibitor platform and deep expertise in kinase biology to develop a
broad portfolio of innovative medicines.
At Deciphera, our commitment to patients is at the center of everything we do. Our
employees come to work every day with a relentless drive to fight cancer and givepatients hope. We have all seen the destruction cancer can cause, and that unites
us in our fight.
We are impacting the lives of people living with cancer by addressing key
mechanisms of tumor and drug resistance that limit the results of some existing
therapies. We are developing kinase inhibitors using our novel approach andbuilding a diverse pipeline of wholly-owned drug candidates to improve patients’quality of life. We have one approved medicine, QINLOCK® (ripretinib), and we aredeveloping two clinical-stage drug candidates, vimseltinib and DCC-3116. In
addition, our drug discovery teams are working on new targets to develop the next
generation of cancer medicines.

A science driven company that has rapidly grownfrom discovery to commercialization

Source: Data as of December 31, 2022.

Deciphera Pharmaceuticals 2022 ESG Report

4OUR VALUES
Deciphera is built on a foundational set of values known as PATHS: Patients, Accountability, Transparency,
Honesty and Integrity, and Stewardship. We believe how our employees achieve results is just as important
as what they achieve, which is why the values of PATHS guide everything we do.

ABOUT THIS ENVIRONMENTAL, SOCIAL, AND GOVERNANCE (ESG) REPORTThis annual ESG report marks our continued effort to share some highlights of our current practices andinitiatives in several important areas under one umbrella. There are five main sections in this report:
Patients, Our Team, Environmental Management, Governance and Leadership, and Frameworks andStandards. As you will see, in some areas our efforts are long-standing and robust, while in others we arejust beginning our journey. We are committed to advancing our capabilities and expect to provide updates
on our progress over time.
In preparing this report, we utilized the biotechnology and pharmaceutical industry standards publishedby the Sustainability Accounting Standards Board (SASB) to organize our efforts around the areas that we
believe are most relevant to our business and our stakeholders. The specific accounting standards areincluded in the Framework section at the end of this report. Unless otherwise noted, data provided within
this report is as of our 2022 fiscal year, which ended December 31, 2022.

Deciphera Pharmaceuticals 2022 ESG Report

5

PATIENTS
ACCESS AND AFFORDABILITY
We believe a patient’s financial situation should not be anaccess barrier to receiving important treatments. We do notwant concerns about cost and insurance coverage to comebetween a patient and their treatment.
Our United States Food and Drug Administration (FDA)approved medicine, QINLOCK, treats a serious illness withhealth outcomes that rapidly deteriorate without access totherapy. We aim to maximize access to our medicines andminimize the time it takes for patients to access therapy.
Patients are at the center of everything we do. Because ourpriority is to make sure patients have access to therapy, we
have invested heavily in our comprehensive patient support program, Deciphera AccessPoint, to help provide accessand affordability solutions for individuals receiving our marketed medicine. Our AccessPoint program streamlines
patient or provider requests for assistance and helps direct eligible patients to appropriate resources, including copay
assistance for eligible patients with commercial insurance. If a patient is delayed or denied access by their insurance
or cannot afford their out-of-pocket expenses and meets other requirements, they may qualify for free medication
under one of our programs.

QUALITY MANAGEMENT, DRUG SAFETY, AND COUNTERFEIT DRUGS

SafetyOur Safety Committee is a cross-functional committee chaired by the Head of Pharmacovigilance and includes
representation from the Chief Medical Officer and heads of many departments, including the Clinical Development,
Regulatory Affairs, and Legal and Compliance departments. The Safety Committee is responsible for decisions relating
to a particular medicine’s benefits and risks, changes to study conduct, determining if and when changes to the
medicine’s label for safety reasons may be warranted, and other risk management efforts.
Our routine safety signal detection and management process aims to ensure the timely review and analysis of data
and to prioritize confirmed safety signals for submission to the Safety Committee, based on the impact to publichealth and/or a change in the medicine’s benefit-risk profile.
We may also conduct stability studies with our contract manufacturer organizations to assure that a drug substanceor drug product remains within specification throughout the duration of its retest or expiry period.
We have a regulatory responsibility to report all adverse events and product complaints to the FDA, European
Medicines Agency (EMA), and other regulatory authorities. Our pharmacovigilance function is responsible for

Deciphera Pharmaceuticals 2022 ESG Report

6compliance with requirements related to safety information reporting, and for conducting training on safety reportingfor employees and relevant consultants, contractors, and interns.

Product Complaints
Our product complaints process details the steps performed for the receipt, handling, and administration of any
product complaints of our approved medicine, including compliance with applicable legal and regulatory
requirements. This process involves members of our Quality Assurance, Pharmacovigilance, Regulatory Affairs,
Medical Affairs, and Technical Operations departments. Product complaints are logged upon receipt and closed
within the allotted time described in the relevant procedure.
After an initial assessment, Quality Assurance is responsible for determining if an investigation into the complaint isneeded, which could include a visual assessment of the complaint sample, review of batch records for productmanufacture, and/or analysis of retained samples. Our process includes a review of product complaint reports atleast every six months for evidence of any potential trends. Product complaints, metrics, and trends arecommunicated to the Quality Board on at least a quarterly basis.
The Quality Board is a board of department directors and executive level employees representing key departments
who discuss the resolution of any significant identified quality related issues with our medicine, vendors, clinical trials,
inspection/audit findings, and other relevant topics.

Counterfeit Drugs
We have implemented procedures to mitigate the risk of drug diversion by identifying, recording, and reportingprescription drug losses or thefts. Our serialization procedures are designed to comply with the FDA Drug Supply
Chain Security Act Regulations specified in the Drug Quality and Security Act, and we use an electronic system toidentify and trace our drug and drug candidates as they are manufactured and distributed throughout the supply
chain. This system aims to protect consumers from exposure to drugs that may be counterfeit, stolen, or
contaminated.
Our Supply Chain team is responsible for ensuring that proper controls are added for shipping product frommanufacturer to packager, and from packager to distribution center or partner. Our procedures require that material
be tracked from the outbound shipment from our tableting vendor to the distribution center. Tracking includes
serialization (for U.S.-distributed materials), anti-counterfeiting measures, and lot number traceability. Suspectproduct identified is communicated as per the established complaint notification channels. If identified, ourprocedures require that the material be placed in quarantine and be thoroughly investigated by the Quality Assurance
and Supply Chain teams.

Quality Assurance
Quality Assurance is responsible for continuous monitoring of raw materials, components, and services that are
essential to the quality of our finished medicines. Quality Assurance maintains oversight of vendors to help ensure
all medicines are manufactured, analyzed, and maintained as required by our global filings and regulations.

Deciphera Pharmaceuticals 2022 ESG Report7

Vendor Audits
As part of our vendor assessment process, we conduct quality audits in appropriate cases that are designed tochallenge and confirm the vendor’s practical ability to supply a product or service with an established quality systemand proper in-process controls. Vendors must ensure consistent quality, performance, and traceability.
After the initial qualification audit, periodic audits are performed to help ensure that no changes have occurred in thevendor’s operations that could affect quality.

CLINICAL STUDY STANDARDS AND SAFETY OF CLINICAL STUDY PARTICIPANTS
We rely on third parties including contract
research organizations (CROs), investigators, andclinical study sites to conduct our clinical studies
and preclinical studies. In addition to sponsoring
preclinical or clinical research, we also support
investigator-sponsored research (ISR).
We aim to ensure our CROs and other third
parties to follow the International Council on
Harmonisation’s Good Clinical Practices (GCPs),and all applicable regulations and laws in the
countries where the clinical study is being
performed, and any study-specific protocols. We
have an extensive portfolio of standard
operating procedures (SOPs) governing CRO andinvestigator site qualification and selection, on-site monitoring, independent data monitoring, and CRO management.
The governing SOPs for a clinical study may be a combination of CRO SOPs and Deciphera SOPs, which we aim toclearly define at the start of the study.

Monitoring of Clinical Studies
We take an active role in ensuring that our CROs are meeting project specifications. This includes participation in
regular meetings and review and execution of study documents and plans. We work to ensure qualified monitors areappointed for each clinical study, and a monitoring plan is developed to help conduct and document clinical studysite initiation, monitoring, and close-out activities.
To evaluate our sponsored clinical studies, we conduct on-site monitoring and oversight visits to determine whether
the monitoring plan is being followed. We also undertake procedures designed to assess whether the study activities
are conducted in compliance with GCPs and all applicable regulations, the rights and well-being of the subjects areprotected, and the study data is accurate and reliable.
In the case of potential CRO non-compliance, our policy is to notify the Quality Board of situations that we believe
place Deciphera, study subjects, or study data at risk, or that violate the contract, applicable SOPs, or regulatory
requirements. Clinical Operations and the Quality Board are then tasked to resolve any identified issues and will
generally then make a recommendation on continued use of the CRO.

Deciphera Pharmaceuticals 2022 ESG Report8Independent Data Monitoring Committee
Some Deciphera-sponsored clinical studies are determined to require an independent data monitoring committee(DMC). A DMC is an independent group established to assess the progress of a clinical study at specified intervals. It
may assess the safety data and/or the critical efficacy endpoint(s) and makes recommendations on whether tocontinue, modify, or discontinue the study. Our Clinical Development, Clinical Operations, and Regulatory Affairs
departments are responsible for determining prior to the start of a clinical study whether a DMC is required.
Recommendations of the DMC are taken into consideration by our Clinical Operations and Clinical Development
departments and escalated to the Executive Leadership team as needed.

PATIENT ADVOCACY AND CORPORATE PHILANTHROPY
We are committed to advancing healthcare, improving patient outcomes, and making a positive and lasting
contribution to the well-being of the communities in which our employees live and work. In particular, we seek tofoster collaborative, transparent, and respectful relationships with patient advocacy organizations, individual
patients, and caregivers who wish to participate in our programs, in the relevant diseases we are treating, researching,
and/or developing.
We partner with many patient organizations who share our goals andengage with similar patient populations. We aim to build
relationships with patient advocacy organizations around the world,and our patient-centric structure starts with engaging patients andpatient advocates from the early development of clinical research tocommercial activities and beyond. We seek to build trust in ourcommunities by supporting both the education of the patientcommunity and access to our medicines.
We also dedicate significant resources to support oncology-focusedorganizations through membership or sponsorship.

Charitable Contributions
Our philanthropic support focuses on non-profit organizations
whose mission or activities align with our core values. These
organizations support awareness or study of diseases in our
therapeutic areas of focus, support the patient journey, support the
improvement of communities in which Deciphera employees live
and work, or otherwise support our corporate strategy andinitiatives. Examples may include patient advocacy organizations,healthcare organizations, professional associations, medical orscientific societies, or community and civic organizations.
Under our charitable contributions policy, donation requests arereviewed by the Charitable Giving Review Committee comprised ofrepresentatives from our Legal and Compliance, Finance, Corporate
Communications, and Patient Advocacy departments.

Deciphera Pharmaceuticals 2022 ESG Report

9OUR TEAM
We believe that creating a diverse, equitable, and inclusive culture is critical to continuing to attract
and retain the top talent necessary to deliver on our mission and is key to our long-term success.
As such, we are investing in the creation of a work environment where our employees can feelinspired to deliver their best work every day. Our guiding PATHS values serve as our cultural
pillars. Grounded in these guiding principles, we focus our company-wide efforts on creating acollaborative environment where our colleagues feel respected, valued, and can contribute totheir fullest potential.
We recognize the value in maintaining a positive culture, a healthy work-life balance, and a strong
commitment to cultivate diversity because we know that the contributions of every member of
our team are necessary to achieve our mission.
We are proud to be certified by Great Place To Work® in 2023, a recognition that is based entirely
on current employee feedback about their experience working at Deciphera. We believe this is atestament to our culture of trust, transparency, and collaboration.
As of December 31, 2022, we had approximately 300 employees located primarily at ourheadquarters in Waltham, Massachusetts, our research facilities in Lawrence, Kansas, and ouroffice in Zug, Switzerland, as well as remote employees across the U.S. and Europe.

Deciphera Pharmaceuticals 2022 ESG Report

10TRAINING AND DEVELOPMENT
To assess and build out our organizational learning anddevelopment strategy, we created a learning anddevelopment maturity map with prioritized areas of focus
from 2020 to 2022. In 2022, we increased our focus on
employee growth and development by introducing
Individual Development Planning (IDP) and launching thefirst annual Career Development Day. IDP is a tool offeredto Deciphera employees to support in career and personal
development. Its primary purpose is to help individuals
reach short and long-term career goals.
We provide over 100 Learning and Development programs
to employees on leadership, team management,
performance
management,
careerdevelopment,
communication, change management, and project management.
We place a special focus on developing leaders and managers. We recognize that development needs differ between
a new manager and a seasoned leader and have tailored our approach accordingly. Our offerings have included
hosting bi-monthly sessions for all people managers to connect, share, and learn among a community of peers
around topics such as avoiding burnout, facilitating employee development planning, and leading through change.
As part of our new-hire onboarding process, we offer an internal mentoring program that pairs employees across thecompany. All members of Deciphera’s extended Executive Leadership team are included and serve as mentors. We
also offer newly-hired employees the opportunity to take part in our Insights Communication Style program, whichraises awareness of individual communication needs and the needs and preferences of colleagues.
As one measure of the effectiveness of our Learning and Development programs and employee engagement, we
track program participation and completion. We aim to maintain a 100% program completion or invitation rate for
employee participation in our Learning and Development programs.

Performance Management and Employee Recognition
We expect each employee to set individual performance goals andparticipate in quarterly check-in meetings with their manager. We
also gather stakeholder feedback to aid in year-end performanceand compensation discussions. We provide resources andtrainings for managers specifically to address how to lead these
performance check-ins.
We also have a Reward and Recognition program that is designed
to promote a culture of appreciation and reinforce Deciphera’scommitment to our core values. This peer-nominated program
includes tiers of monetary awards classified as a high five, threecheers, or standing ovation to recognize above-and-beyond
contributions to our organization. Employees can also write thankyou notes to colleagues as a form of recognition.

Deciphera Pharmaceuticals 2022 ESG Report11DIVERSITY, EQUITY, AND INCLUSION (DEI)
We are committed to building a culture that embraces the uniqueness of our people and finds strength in our
differences. We recognize our duty to cultivate diversity within the organization and to ensure that every voice isheard. We understand that varied perspectives lead to the best ideas and outcomes. By creating a workplace where
every individual can feel welcome and valued, we will better meet the needs of those we serve.
Following the work of the DEI Task Force in 2021, 14 employees were selected to form a cross-functional DEI Council.
The DEI Council carefully crafted its Mission and Vision statements in partnership with an expert external consultant.
These statements are included below.
Vision: At Deciphera, The DEI Council works together to help drive authentic, culturally sensitive treatments for our
diverse global patient community. We do this by ensuring an inclusive, learning focused, action-orientedorganizational culture.
Mission: The Deciphera DEI Council helps cultivate a more diverse, inclusive and equitable organizational culture byleading initiatives that impact recruitment, advancement, data analysis, and clinical trials among others. We commit
to continual personal development, teamwork and respect in order to drive this initiative.
The DEI Council has defined the following objectives:•••

Foster awareness and education of diversity, equity, and inclusion in the workplace.
Celebrate and educate on diverse cultures and backgrounds at Deciphera.
Continue to build and retain a diverse and inclusive workforce.

Workstreams have been established tochampion each of these goals with plansto routinely report out to the employeebase. These workstreams have launchedvarious activities and resources toimprove understanding of ourselves andothers, and to cultivate a sense of
empathy toward different experiences.
We have enhanced the dedicated spaceon our internal web platform for DEI
articles, event replays, information
sharing, and a calendar for internal andexternal events and communications. We
have also leveraged LinkedIn Learning to
introduce a formal training component.
Additionally, we are maximizing our
Employee Assistance Program to provide
external resources for our employees.
Our CEO has also signed the Massachusetts Biotechnology Council’s CEO pledge for a more equitable and inclusive
life sciences industry that commits to measurable action across six key areas.

Deciphera Pharmaceuticals 2022 ESG Report12Below are diversity metrics for gender and ethnicity, based on voluntary employee self-reporting.

Deciphera Team Diversity Metrics
Global Gender Diversity

U.S. Ethnic Diversity
20%
41%

2%
4%
1%
4%

59%
69%

Male
FemaleAsianBlack / African American

Hispanic

Two or More Races

Unknown

White / Caucasian

For Vice Presidents and above, our team is 47% female and 31% self-reported as non-Caucasian.
Voluntary and involuntary turnover rate across all employees was in alignment with, or lower than, theindustry average.
Source: Voluntary self-identification at hire as of December 31, 2022; Ethnic diversity metrics represent only U.S. employee data.

EMPLOYEE HEALTH AND SAFETY

Benefits
We understand that our employees are our greatest asset and we strive to prioritize a healthy work-life balance.
Deciphera scored in the top quartile of large and midsize employers who participated in Gallagher’s 2022 Benefits
Strategy & Benchmarking Survey. We were recognized as an organization that provides innovative solutions forcreating organizational structures, workplace policies and total rewards, which inclusively engage and motivate its
employees. Current benefits that support these efforts include the following: every employee is eligible for up to

Deciphera Pharmaceuticals 2022 ESG Report13$1,000 annually to spend on “life needs” including but not limited to, gym memberships, exercise equipment,
health/wellness applications, student loan repayment, day care, or pet insurance. Additionally, employees are eligible
for up to $600 for fitness and weight loss reimbursements. We provide all employees with a family building benefit,
paid parental leave, a monthly cell phone stipend, paid
time off, and summer and winter company shutdowns
to rest and recharge, including a summer bonus. For
more information about our current benefits andcompany culture, please view our careers page.

SafetyWe are committed to helping protect our employees’
physical safety and to provide an environment thatprioritizes health and mental wellbeing. For both ourWaltham, Massachusetts and Lawrence, Kansas
locations, we have instituted comprehensive emergency
action plans to establish the policies and procedures for emergency preparedness, prevention, response, andrecovery. All employees complete workplace respect (anti-harassment and anti-discrimination) training, as well as
office safety training that includes an interactive emergency action plan training conducted at hire. We also conductrole-specific health and safety training such as personal protective equipment and hazard communication training
for our lab personnel.

Drug Takeback Program
We participate in the Pharmaceutical Product Stewardship Work Group (PPSWG) in the United States to enable proper
disposal of unused medicines. The PPSWG manages the takeback of Deciphera medication from patients andcoordinates these efforts through MED-Project, a stewardship organization that implements and operates mandated
household unwanted medicine and sharps takeback programs.

OUR HYBRID WORKPLACE MODEL
During the COVID-19 pandemic, our employees demonstrated that we can be productive and effective working
remotely as an organization. As a result, we implemented a hybrid workplace model to offer employees on-goingflexibility to balance their work and life needs. We have developed high-level guidelines to provide guidance on whathybrid work looks like for our organization. We understand that there is no one solution for accommodating all our
employee needs, so we have created flexible guidelines to establish guardrails for this new way of working.
Employees are empowered to collaborate with their managers to develop what workstyle best supports their job
responsibilities, productivity, business needs, and personal commitment. Some roles may have more flexibility thanothers in this hybrid model (i.e. field or lab personnel).

Deciphera Pharmaceuticals 2022 ESG Report

14

ENVIRONMENTAL MANAGEMENT
We are committed to promoting environmental stewardship across ouroperations and we recognize that we play a part in contributing to thehealth and safety of our communities.
ENVIRONMENTAL, HEALTH, AND SAFETY
Our headquarters in Waltham, Massachusetts is
Leadership in Energy and Environmental Design (LEED)Core and Shell certified with energy and water-efficientinternal design elements such as motion-controlled
lights and faucets, LED lighting, and scheduled
thermostat settings designed to minimize heat andcooling when occupants are not in the building.

materials such as cardboard, paper, and aluminumcans at our facilities. We also participate in electronic
waste collection events hosted at our Waltham
location to properly dispose of equipment such as
computers, printers, monitors, and batteries. Someelectronic equipment is donated to local colleges forreuse. In Lawrence, Kansas, we also recycle a variety of
consumable waste products such as batteries,
cardboard, and non-plastic biodegradable containers.
Our lab facility conducts disposal activities ofhazardous and non-hazardous waste in partnershipwith a certified third-party vendor to handle chemicals
and medicine substances. Lab personnel are required
to complete hazardous waste awareness training onan annual basis.

WASTE MANAGEMENT
We are an Environmental Protection Agency (EPA)small quantity generator of hazardous waste. We
participate in household recycling activities for certain
materials and occasionally participate in waste
collection events. All employees complete hazardous
waste awareness training.
While we are currently in the process of developing amore formalized Waste Management Program, we
provide our employees with the ability to recycle

Deciphera Pharmaceuticals 2022 ESG Report15

GOVERNANCE AND LEADERSHIPRISK MANAGEMENT AND GOVERNANCE OF ESG
Our Board of Directors (Board) sets high standards for our employees, officers, and directors. Implicit in thisphilosophy is the importance of sound corporate governance. It is the duty of the Board to serve as a prudent fiduciaryfor our stockholders and to oversee the management of our business.
We face a number of risks, including risks relating to our financial condition, research, development andcommercialization activities, operations, strategic direction, and intellectual property. Management is responsible forthe day-to-day management of risks we face, while our Board, as a whole and through its committees, has
responsibility for the oversight of risk management.
The role of our Board in overseeing the management of our risks is conducted primarily through committees of theBoard, as identified in the charters for each of the committees. The full Board discusses with management our key
risk exposures, their potential impact on us, and the steps we take to help manage them.
During 2022, our Board had four standing committees: the Audit Committee, Compensation Committee, Nominating
and Corporate Governance Committee, and Science and Technology Committee. Each of these committees was
responsible for different aspects of risk management, including risks related to ESG oversight. The Audit Committee
has a special responsibility to oversee the guidelines and policies that govern the process by which the exposure torisk is managed by Deciphera’s management.
The charter of the Nominating and Corporate Governance Committee provides that the committee periodicallyreview, and provide oversight with respect to, the company’s strategy, initiatives, and policies concerning corporatesocial responsibility, including environmental, social, and governance matters.

BOARD INDEPENDENCE AND DIVERSITY
In evaluating proposed director candidates, we consider factors such as character, integrity, judgment, diversity,
independence, skills, education, expertise, business acumen, business experience, ability to contribute to the strategic
direction of the company, length of service, understanding of our business and industry, conflicts of interest, andother commitments. While we have no formal policy regarding Board diversity, the overall diversity of our Board is
an important consideration in the director recruitment, nomination, and selection process. Our Nominating andCorporate Governance Committee assesses diversity in connection with the annual nomination process as well as in
new director searches. As we pursue future Board recruitment efforts, our Nominating and Governance Committee
will continue to seek out candidates who can contribute to the diversity of views and perspectives of the Board inaccordance with the committee's policies for director candidates.
In August 2021, the SEC approved Nasdaq’s Board Diversity Rule, which requires Nasdaq-listed companies to have or
explain why they do not have at least two diverse directors, including one who self-identifies as female and one who
self-identifies as either an underrepresented minority or LGBTQ+. Nasdaq-listed companies are required to have atleast one diverse director by December 2023 and a second director who satisfies another diversity category by

Deciphera Pharmaceuticals 2022 ESG Report

16

December 2025. In addition, the Board Diversity Rule requires companies to annually disclose anonymized statisticalinformation on board diversity using a diversity matrix in its proxy statement. We value diversity on our Board andcurrently have two female directors.
Eight of nine directors are independent, in accordance with Nasdaq listing standards, and we also adhere toheightened independence requirements for members of certain committees.For more information about our Board,please refer to our most recent proxy statement.

BUSINESS ETHICS AND COMPLIANCE
We are committed to conducting our business, including interactions in the healthcare community, in compliancewith applicable laws and ethical standards. Our Code of Business Conduct and Ethics and our Healthcare Compliance
Program (as described in our Healthcare Compliance Manual) represent statements of ethics and complianceprinciples that guide our operations and activities and set forth our basic principles, values, and framework for action.
Additionally, we have adopted the Pharmaceutical Research and Manufacturers of America’s (PhRMA’s) Code on
Interactions with Healthcare Professionals as a core element of our Healthcare Compliance Program.
We provide our Code of Business Conduct and Ethics and Healthcare Compliance Manual to all employees, conduct
mandatory training on the provisions, and require each employee to sign annual certifications confirming theirunderstanding and intent to comply with the requirements and applicable laws set forth in each policy.
Our General Counsel (GC) serves as the focal point for general compliance activities under the Code of BusinessConduct and Ethics and promotes an open-door policy for our employees to seek guidance on compliance issues orreport suspected non-compliance. The GC reports on general compliance matters and the status of the complianceprogram at periodic meetings with our CEO and Board. Our Chief Compliance Officer (CCO) serves as the focal point
for healthcare law compliance activities and promotes an open-door policy for our employees to seek guidance on
healthcare law compliance issues or report suspected non-compliance. The CCO reports on general healthcare law
compliance matters and the status of the healthcare law compliance program at periodic meetings with our CEO andBoard.

Healthcare Compliance
Committee
Board of Directors

Chief Executive Officer

General Counsel

Chief Compliance Officer
Compliance Department

Our Healthcare Compliance Committee (HCC) has the responsibility to advise and provide feedback to the CCO in thedevelopment, operation, and monitoring of the Healthcare Compliance Program. The HCC meets periodically and iscomprised of representatives from key business functions in the company, such as our Human Resources,
Medical/Scientific Affairs, Regulatory Affairs, Commercial, Finance, and Legal and Compliance departments.
Each employee is required to abide by these general and healthcare compliance principles and has a duty to reportsuspected compliance violations directly to the GC, the CCO, a member of our Compliance department, or via otherreporting mechanisms we make available, such as the Deciphera Ethics Hotline, which is toll-free and available 24
hours a day, 7 days a week. The hotline is monitored by the Chair of the Audit Committee and the GC. Our policy isthat the company will not retaliate, harass, or otherwise take adverse action against an employee or contractor who

Deciphera Pharmaceuticals 2022 ESG Report17

makes a good-faith report of any known or suspected violation or seeks assistance to address a compliance concern.
We also conduct regular assessments of employees to ensure that they comply with applicable compliance policies
and procedures and relevant federal and state laws and regulations. The auditing and monitoring process considers
whether appropriate policies exist and whether the policies were implemented, communicated, and followed. Any
findings are documented and reported to management.

ETHICAL MARKETINGThe Deciphera policy on promotional interactions with healthcare professionals (HCPs) aims to ensure that these
activities meet our ethical standards and fulfill our legal and regulatory responsibilities. Members of the Commercial
department and all personnel engaged in external communications receive training on this policy and are required
to confirm overall comprehension as part of the training.
It is our policy that all labeling, advertising, and promotional materials, and all promotional presentations related to
Deciphera products, comply with the Food, Drug, and Cosmetic Act, FDA regulations, and other applicable federal,state, and local laws. All such materials are carefully reviewed with the goal of assuring compliance and medical andscientific accuracy, by a multi-disciplinary review committee, including members from the Medical Affairs, Legal, andRegulatory departments.
Our employees are strictly prohibited from engaging in off-label promotion to HCPs, and our policy requires that wewill not engage in the promotion of a medicine, or new use of a medicine, prior to its approval by the FDA or theapplicable regulatory authority outside the U.S. If a member of our Commercial team receives an unsolicited request
for information about an unapproved use or information that is inconsistent with the label, our policy requires thatthe question is referred to Medical Affairs using approved medical information request forms, that the HCP isconnected with the Medical Science Liaisons (MSLs) team, or that the HCP is directed to call our medical information
line. Commercial employees are not permitted to answer questions about unapproved uses.

VENDOR MANAGEMENT
Throughout our supply chain, we work with various partners involved in the development, manufacture, and testingof our medicines. These service providers include contract development and manufacturing organizations (CDMOs),
CROs, and other vendors. We do not own or operate any manufacturing or testing facilities and we rely on partners
to manufacture and test our clinical and commercial drug supply.

CDMO Selection and OversightPartnership with CDMOs starts in the drug development phase and continues through to the drug manufacturingphase.
Selection and oversight of CDMOs generally involves several steps outlined below, including planning, identification,
evaluation, and oversight, and we consider risk management the foundation for this process.

Deciphera Pharmaceuticals 2022 ESG Report18

Phases of selection and oversight of contract service providers managed by Technical Operations at Deciphera.

Technical Operations, in collaboration with Quality Assurance, maintains oversight of the selected CDMO to help
ensure sustained compliance with defined performance criteria, following the quality agreement between Decipheraand the CDMO. This oversight may include performance review meetings, review of service provider metrics, periodic
update meetings, and on-site technical oversight. We believe in the importance of two-way communication with ourservice providers, whom we view as true partners.

CRO Qualification and Selection
The overall process to qualify, select, and monitor CROs is generally similar to that of CDMOs.
We aim to ensure that our CROs are compliant with the International Council on Harmonisation’s Good Clinical
Practices and any additional applicable regulations and laws in the countries where the clinical study is being
conducted. We also require any study-specific documentation, contract, or protocols specific to the project. This
oversight may be conducted through appropriate pre-qualification activities, audits, or clinical documentation review.
Before a material CRO is selected, our process is designed to generally include the following elements:•

Qualification: The Clinical Operations team defines the scope of the project to be outsourced and proposes
qualification activities such as a review of SOPs for the prospective CRO. For critical vendors (such as those
performing activities on a pivotal study), the Clinical Operations and Quality Assurance teams may require an
on-site pre-selection vendor qualification by a Quality Assurance auditor. This assessment may include a
review of the CRO’s training records of assigned staff, physical facilities, computer systems, quality
infrastructure and internal audit procedures, and a review of past activity and performance for vendors usedpreviously. Qualification scope and assessment are presented to the Quality Board for review every quarter.

Deciphera Pharmaceuticals 2022 ESG Report19•

Selection: Upon determining that one or more material CRO(s) will be required for the execution of a clinicalstudy, specifications and project requirements may be defined in a request for a proposal (RFP) or similar
document. When utilizing an RFP process, we identify potential CROs to contact regarding capabilities andspecialties, and a competitive bid process is conducted to evaluate project approaches and to ensurecompetitive pricing whenever feasible. Clinical Operations will select the vendor considered most suitable tothe project based upon the CRO’s ability to meet project specifications, assure project staffing, assurance ofcompliance with applicable regulatory requirements, and competitive pricing.

INFORMATION SECURITY AND PATIENT PRIVACY
We strive to protect the confidentiality, integrity, and availability of the personal and corporate information we
manage.
Our cybersecurity mission is to enable safe and secure ways to do business by protecting Deciphera information
systems, assets, and data. Our goal is to build and maintain a sustainable and flexible cybersecurity program that
reduces risk, while enabling the business to run effectively.
Our Cybersecurity Steering Committee oversees technical matters regarding cybersecurity, and we have identified an
Information Technology (IT) Governance, Risk, Compliance, and Cybersecurity officer with the mission and resources
to develop, implement, and maintain our Enterprise Information Security Program. Our policy requires that the Board
receives cybersecurity updates on at least an annual basis.
The Cybersecurity Steering Committee has an approved charter reviewed annually by the Chief Financial Officer (CFO)
to ensure it is aligned with our business strategy. The Cybersecurity Steering Committee has three key roles:•••

Systems assurance: Overseeing the establishment and maintenance of effective cybersecurity mechanisms
throughout Deciphera.
Documentation: Reviewing documented policies, standards, processes, and procedures that will have a direct
or indirect impact on the security and privacy of information at Deciphera.
Management of information security risk: Identifying and managing significant cybersecurity risks across ourorganization, including escalating to the Executive Leadership team where appropriate.

Information Security and Business Continuity
We aim to protect our information assets, resources, and data by maintaining the following IT Asset Management(ITAM) business practices and Sarbanes-Oxley (SOX) compliance across the enterprise:Continuous monitoring: We have implemented
continuous vulnerability scanning and remediation,
multifactor authentication, data loss prevention, andother state-of-the-art technologies to continuously
improve the maturity level of our cybersecurity
program. Our policies and systems are set up so
information system events can be identified andcorrected, and operator and fault logging can be
enabled, collected, and reviewed. We seek to comply

Deciphera Pharmaceuticals 2022 ESG Reportwith relevant legal, regulatory, and contractual
requirements applicable to logging and event
monitoring.
Information security incident management: We work toeffectively detect, respond, and resolve security eventsand potential incidents that may impact the security of
our information assets. We have a documented
cybersecurity incident response (CSIR) plan that is20

tested annually. Our CSIR function manages theincident response process.
Cybersecurity program: We have a robust, multi-layered
defense that includes internal experts, matureprocesses, and defense technologies designed to
identify, detect, protect, respond, and recover frompotential security incidents. We also leverage managed
security services for our advanced security operations
center and near real-time managed detection andresponse capabilities. We use network security controls
such as firewalls, intrusion prevention and detection
systems, virtual private networks, segmentation
techniques, service edge cloud security architecture
tools, and zero trust network access management tohelp protect our information assets from compromise
from both external and internal factors.
Cybersecurity attacks continue to become even moresophisticated and dangerous. Cybersecurity tools andtechnology, combined with training and awarenesscampaigns, have been implemented to help enable us
to detect and prevent such attacks. We use acontinuous improvement approach and leverageindustry leading cybersecurity resources to adapt andimprove our prevention, detection, and response
methods as the threats and attack vectors change.
Training and awareness: We generally conduct rolebased security and privacy training during three
timeframes: within 30 days of authorizing employee
access to the system, when required by systemchanges, and annually thereafter. We also require
review and acknowledgement of all corporate IT
security policies annually and conduct quarterly
simulated phishing exercises. Finally, we have

implemented a Deciphera CyberHero program torecognize and reward outstanding efforts by employees
to protect Deciphera information assets, resources, anddata.
Third-party risk management: Our practice is toperform initial and ongoing due diligence of our third
parties who maintain material data or information for
us to help evaluate and verify third party information
security capabilities. We have implemented acybersecurity third-party risk management process toassess mission- and business- critical third parties forcyber risks and to assist the business in making riskinformed technology product and services decisions.
Cybersecurity risk and maturity assessments: We
conduct periodic assessments of our assets to evaluate
the effectiveness of applicable security controls that are
implemented to help protect endpoints and mobile
devices from malware and information leakage. To help
ensure the availability of business-critical technology
resources during adverse conditions, we also manage
and maintain business continuity and disaster recovery(business resilience) capabilities.
Annually, we conduct a cybersecurity risk assessment,
which includes interviews with executive leadership tounderstand their views on cybersecurity risks to
Deciphera and overall risk assessment. We supplement
this with an external review of our information security
and privacy controls to assess our cybersecurity maturity
as compared to our peers and other highly-regulatedindustries. The results of these assessments arereported to the Board as part of the periodic
cybersecurity update.

Patient Privacy
For personally identifiable information in our possession, we implement commercially reasonable technical andorganizational security safeguards designed to help protect against misuse, inappropriate disclosure, or unauthorizedaccess to patient data. Opt-in language on patient-facing websites and materials is designed to describe storage anduse of patient data consistent with applicable privacy laws. For more information, please view our Privacy Policy.
We are committed to compliance with all applicable privacy laws, including the Health Insurance Portability andAccountability Act (HIPAA) and state privacy laws in the U.S. that address the protection of personal information,

Deciphera Pharmaceuticals 2022 ESG Report21

including protected health information (PHI) or individually identifiable health information. Although HIPAA does notdirectly apply to Deciphera as a pharmaceutical manufacturer, the unlawful use of a patient’s PHI by Deciphera or our
employees may subject Deciphera to legal risk and potential civil or criminal penalties. HIPAA establishes national
standards to protect PHI and prohibits covered entities, such as HCPs, from using or disclosing PHI without theindividual’s specific written consent, unless an exception applies.
The EU General Data Protection Regulation (GDPR) and U.S. state privacy laws, including the California Privacy Rights
Act, also impact our business activities and how we may collect, use, share, or store personal data or patient data.

Deciphera Pharmaceuticals 2022 ESG Report

22

FRAMEWORKS AND STANDARDSSUSTAINABLE ACCOUNTING STANDARDS BOARD (SASB)SASB has identified the sustainability issues that are most likely to affect the long-term financial condition or operating
performance of companies within a specific industry. Below are the disclosure topics and accounting metrics
associated with the Biotechnology and Pharmaceutical industry and a reference for where these topics are discussed
within the report.

Topic

Safety of Clinical Trial
Participants

Access to Medicines

Affordability andPricing

SASB CodeESG Report
Reference

Discussion, by world region, of management process for
ensuring quality and patient safety during clinical trials

HC-BP-210a.1

Clinical Trial
Standards andSafety ofClinical Trial
Participants

Number of FDA Sponsor Inspections related to clinical
trial management and pharmacovigilance that resultedin: (1) Voluntary Action Indicated (VAI) and (2) Official
Action Indicated (OAI)

HC-BP-210a.2

None

Total amount of monetary losses as a result of legal
proceedings associated with clinical trials in developing
countries

HC-BP-210a.3

None

Description of actions and initiatives to promote accessto health care products for priority diseases and inpriority countries as defined by the Access to Medicine
Index

HC-BP-240a.1

Access andAffordability

List of products on the WHO List of Prequalified
Medicinal Products as part of its Prequalification of
Medicines Programme (PQP)

HC-BP-240a.2

None

Number of settlements of Abbreviated New Drug
Application (ANDA) litigation that involved payments
and/or provisions to delay bringing an authorized
generic product to market for a defined time period

HC-BP240b.1

None

Percentage change in: (1) average list price and (2)average net price across U.S. product portfolio compared
to previous year

HC-BP240b.2

None

Accounting Metric

Deciphera Pharmaceuticals 2022 ESG Report23Percentage change in: (1) list price and (2) net price of
product with largest increase compared to previous year

HC-BP240b.3

None

HC-BP-250a.1

Available via
FDA Adverse
Event
ReportingwebsiteNumber of fatalities associated with products as reported
in the FDA Adverse Event Reporting System

HC-BP-250a.2

Available via
FDA Adverse
Event
ReportingwebsiteNumber of recalls issued; total units recalled

HC-BP-250a.3

None

Total amount of product accepted for take-back, reuse,or disposal

HC-BP-250a.4

None

Number of FDA enforcement actions taken in response
to violations of current Good Manufacturing Practices(cGMP), by type

HC-BP-250a.5

None

HC-BP-260a.1

Quality
Management,
Drug Safety,
and Counterfeit
Drugs

Discussion of process for alerting customers andbusiness partners of potential or known risks associatedwith counterfeit products

HC-BP-260a.2

Quality
Management,
Drug Safety,
and Counterfeit
Drugs

Number of actions that led to raids, seizure, arrests,
and/or filing of criminal charges related to counterfeit
products

HC-BP-260a.3

None

Total amount of monetary losses as a result of legal
proceedings associated with false marketing claims

HC-BP-270a.1

None

Description of code of ethics governing promotion ofoff-label use of products

HC-BP-270a.2

EthicalMarketingDiscussion of talent recruitment and retention efforts forscientists and research and development personnel

HC-BP-330a.1

Training andDevelopment(1) Voluntary and (2) involuntary turnover rate for: (a)executives/senior managers, (b) mid-level managers, (c)professionals, and (d) all others

HC-BP-330a.2

Training andDevelopment

List of products listed in the Food and Drug
Administration’s (FDA) MedWatch Safety Alerts for
Human Medical Products database

Drug Safety

Description of methods and technologies used tomaintain traceability of products throughout the supply
chain and prevent counterfeiting

Counterfeit Drugs

Ethical Marketing

Employee Recruitment,
Development andRetention

Deciphera Pharmaceuticals 2022 ESG Report24Supply Chain
Management

Percentage of (1) entity's facilities and (2) Tier I
suppliers' facilities participating in the Rx-360
International Pharmaceutical Supply Chain Consortium
audit program or equivalent third-party audit programsfor integrity of supply chain and ingredients

HC-BP-430a.1

None

Total amount of monetary losses as a result of legal
proceedings associated with corruption and bribery

HC-BP-510a.1

None

Description of code of ethics governing interactions withhealth care professionals

HC-BP-510a.2

Business Ethics
and ComplianceBusiness Ethics

ACTIVITY METRICS: Biotechnology and Pharmaceuticals

Category

Activity Metric

SASB Code

Unit of Measure

Quantitative

Number of patients treated

HC-BP-000.A

Who We Are

Quantitative

Number of drugs (1) in portfolio and (2) in researchand development (Phases 1-3)

HC-BP-000.B

Website: Pipeline

Deciphera Pharmaceuticals 2022 ESG Report25