POLICY STATEMENTS

INDEX

1.

Quality Policy

2.

Management Policy QHSE

3.

Internal Regulation of Documented Information Policy

4.

Business Continuity Management System Policy

5.

Information Security and Cybersecurity Management System Policy

6.

Anti-bribery and Corruption Policy

7.

Gender Equality Policy

8.

Alcohol, Tobacco and Psychoactive Substances Consumption Policy

9.

Occupational Health and Safety Management System Policy

10. Confidentiality and data Processing Policy

11.

Social Responsibility Management System Policy

12. Hardening Policy

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEX
PDLC-001 Ver0 01MAR2021

QUALITY POLICYLICESING ASSURANCE is a company dedicated to: provide automated solutions
for software asset management, audit defense, license control and data processing

center solutions, oriented to the best practices of *Gartner, ITIL, IAITAM, ISO,
among others; with advice from licensing experts and without conflict of interest
since it does not belong to any software manufacturer; having as its main objective

to achieve customer satisfaction, Licensing Assurance directive, employees,
suppliers and the community in general.

In Licensing Assurance, we make special emphasis in offering good services or
products so that the client is well satisfied and safe at the moment of using them;continuously improving our management systems.
Under this principle, Licensing Assurance is committed to:o Offer consulting services to our clients for their benefit, without conflict of interest
between selling licenses and saving on their licensing; complying with theapplicable requirements.
o Make the client aware of the health of their licensing with information and periodic
monitoring to keep it in compliance, saving time in their departments and work
teams.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Provide savings to our customers on their software investment by continually
improving budget efficiency to invest in additional projects that make them moreproductive and help them grow their organization.
o To review, document, implement, maintain and communicate to our employees,
stakeholders and the general public our management policies, so that they

become aware of their individual obligations to achieve an attitude of permanent
vigilance regarding quality as a way of life.

o To provide a frame of reference to establish and periodically review our objectives
and goals, through management indicators that allow us to measure thesatisfaction of our customers, the effectiveness in meeting the commitments to
information security, motivation and improvement of human talent and any
process that is considered relevant and appropriate with the mission of Licensing

Assurance and allows us to achieve the vision.

* Gartner: Methodology of control, analysis and classification of the bestcompanies and products they offer.

ITIL - Information Technology Infrastructure Library.
IAITAM - International Association of Information Technology Asset Managers.
ISO - International Organization for Standardization.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEX
PCOR-001 Ver0 01MAY21

CORPORATE MANAGEMENT POLICY QHSE
LICENSING ASSURANCE LLC, is an international company, dedicated to: providing
automated software asset management solutions, audit defense, license control anddata processing center solutions, oriented to the best practices of *Gartner, ITIL,
IAITAM, ISO, among others; with advice from licensing experts and without conflict ofinterest as it does not belong to any software manufacturer.
The essential objective of our organization is based on achieving the satisfaction of

our clients and interested parties and complying with the requirements established inaccordance with the international standards **ISO 9001, ISO 14001 and ISO 45001.
For this reason, we decided to implement these management systems that include
the requirements related to quality management, environmental management, andoccupational

health and safety management,complying

with the following

commitments:o Continuous improvement of the performance of the Management Systems.
o To comply with customer requirements, legal and regulatory requirements, andthose applicable in these international standards.
o To provide safe and healthy working conditions for the prevention of injuries andhealth deterioration related to the work of personnel and interested parties.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Environmental protection, including pollution prevention, and other specificcommitments relevant to our context; ando That of eliminating hazards and reducing safety risks for safety and health atwork; in consultation and continuous participation of our human talent.
More specifically, we are committed to prepare and train our staff based on the fullknowledge of the responsibilities that each position implies in the provision of theservice, and to continuously improve the effectiveness of the quality system,
environment, safety and health at work, thus being more respectful of ourenvironment, and thus achieving the benefit of the company, our employees,
partners and stakeholders.

* Gartner: Methodology of control, analysis and classification of the bestcompanies and products they offer.

ITIL - Information Technology Infrastructure Library.
IAITAM - International Association of Information Technology Asset Managers.
ISO - International Organization for Standardization.
** ISO 9001: updated. Quality Management System
ISO 14001: updated. Environmental Management System.

ISO 45001: updated. Occupational Health and Safety Management System.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEX
PRIID-001 Ver1 01OCT21

INTERNAL REGULATION OF
DOCUMENTED INFORMATION POLICY
It is the policy of LICENSING ASSURANCE LCC, to keep its collaborators andinterested parties informed about the policies, regulations, standards, processes,

structure and procedures, so that all personnel have fully identified their role within theorganization, their relationship with all areas, and how to perform their functions inaccordance with the processes and procedures updated.
o The Licensing Assurance documented information "updated" and subject to revision

status control; is approved with the electronic signature of the General Manager
and/or Administration Manager and available in pdf so that users have all that isnecessary for the performance of their functions, which they can consult. Likewise,

documents that have not been approved are identified with the word "DRAFT" sothat the draft project or project is circulated sufficiently in advance to all
departments so that they can issue their criteria, with a view to considering anothervision of the process.
o The structure of the documentation is integrated as follows: 1st Level. - The
Management Systems Policies and Manuals, from this documented information thefollowing levels are derived. 2nd Level. - The internal regulations or norms and theContinuous Improvement Procedures Manual. 3rd Level. - It is constituted by theoperational manuals with the procedures that will contain the work instructions indetailed form to carry out an activity.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo The Administration Manager, Consulting Services Manager, Marketing Manager,
Development Manager, End User Sales Manager, DCS Sales Manager and Cloud
Sales Manager are responsible for documenting their main activities andprocesses in their operational area, as they have the authority to organize,
control, execute and ensure compliance with their processes.

o It is the obligation of the person responsible for each process to ensure that it isavailable, reviewed and kept up to date to guarantee the correct execution of theprocess assigned to it and to ensure that its procedures are reviewed andupdated at least once a year or when there are changes that merit their revision.
o The review of the operating procedures will be the responsibility of the
management of each department, who will use the format approved by the
Administration Manager and published on the Intranet. The Administration

Manager in these cases will act as a facilitator who will maintain the documented
information in an editable form and will follow up the approval with the General
Manager. Licensing Assurance documented information can be in any format andmedia and can come from any source. DO NOT send files via email. The
correct way is to register in Sharepoint and send the link via email.
o Once the policies and documented information have been approved by theGeneral Manager, the custody of the editable files and their respective publicationon the Intranet in pdf format will be the responsibility of the Administration
Manager.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXPSGCN-001 Ver0 01AGO21

BUSINESS CONTINUITY MANAGEMENTSYSTEM POLICY
LICENSING ASSURANCE is a company dedicated to: providing automated software
asset management solutions, audit defense, license control and data processing
center solutions, oriented to the best practices of *Gartner, ITIL, IAITAM, ISO, among

others; with advice from licensing experts and without conflict of interest since it does
not belong to any software manufacturer; having as its main objective to document
and implement a Business Continuity Management System under the international

standard ISO 22301: update.
Since any interruption in the business processes affects the operation, it is the
responsibility of Licensing Assurance's general management to approve the BusinessContinuity Management System, which covers the essential and critical activities ofthe organization.
Under this principle, Licensing Assurance is committed to:o Continue to deliver its products and provide its services at predefined acceptablelevels following a disruptive incident that might otherwise prevent it from fulfilling its
obligations; ensuring to continuously monitor, evaluate and improve business
continuity.
o Having robust mechanisms in place to resume activities within the required
timeframes following a disruptive incident; ensuring that these mechanisms areroutinely reviewed and updated so that they remain effective in all circumstances
within the organization.
Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Review, document, implement, maintain and communicate to our employees,
stakeholders and the general public our management policies, so that they
become aware of their individual obligations to achieve a permanent vigilant

attitude towards business continuity as a way of life.
o To provide a frame of reference to establish and periodically review our objectives

and goals, through management indicators that allow the effectiveness in thefulfillment of business continuity commitments, the motivation and improvement of
human talent and any process that is considered relevant and appropriate withthe mission of Licensing Assurance and allows us to achieve the vision.

* Gartner: Methodology of control, analysis and classification of the bestcompanies and products they offer.

ITIL - Information Technology Infrastructure Library.
IAITAM - International Association of Information Technology Asset Managers.
ISO - International Organization for Standardization.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXPSGSI-001 Ver1 01DIC23

INFORMATION SECURITY ANDCYBERSECURITY MANAGEMENTSYSTEM POLICY
LICENSING ASSURANCE is a company dedicated to providing automated solutions

for software and license asset management, defense against audits, license control,and data center solutions, oriented towards best practices from Gartner, ITIL, IAITAM,
ISO, among others, with advice from licensing experts and no conflict of interest as it

does not belong to any software manufacturer. Its main objective is to document andimplement an Information Security Management System - SGSI under theinternational standard ISO 27001: updated.
The main objective of the SGSI is to guarantee the preservation and protection of
information assets, as well as to ensure authentication, authorization, integrity,
confidentiality, and availability of the same. To achieve this, a risk management
focused on assets is implemented, generating confidence in all parties involved in thesystem.
Under this principle, Licensing Assurance is committed to:oEnsure that all aspects of security are covered, thus ensuring that thehandling of information is done securely and confidentially. This allows us toprotect our strategic information and documentation from potential risks andthreats from competitors or external individuals, avoiding any unauthorizedaccess.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXoThe designated information owners appointed by the competent authority
will be employees who possess extensive knowledge of both thecorresponding information domain and the processes related to that
information, in accordance with defined commercial, legal, statutory,
regulatory, and contractual requirements.

o

The information owners will be responsible for verifying the existence of
security procedures and processes to ensure the handling and integrity of
information residing in magnetic media or documents. Data and assets must
be stored in the cloud or Sharepoint.

o

The use of the organization's logical resources is exclusively for businesspurposes (files, databases, programs, and network connections).
All administrators of electronic data platforms, as well as account andresource operators, will adhere to standards for secure equipment
installation, administration, and operation.

ooAll employees handling sensitive information of Licensing Assurance will
sign a confidentiality agreement. Contracts for new employees include a
confidentiality clause.

oRegarding document management, the company ensures that all
information is classified by security levels according to the content, following
the coding established by the company and supported by specific policy
topics as needed.

oProvide a framework for periodically reviewing objectives and goals throughmanagement indicators that enable effectiveness in complying withapplicable information security requirements, motivation of human talent,and improvement of the ISMS performance. Additionally, implementing
relevant and appropriate continuous improvement processes to achieve themission and vision of Licensing Assurance.

* Gartner: Methodology of control, analysis and classification of the bestcompanies and products they offer.
ITIL - Information Technology Infrastructure Library.

IAITAM - International Association of Information Technology Asset Managers.
ISO - International Organization for Standardization.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEX
PDAC-001 Ver0 01JUL21

ANTI-BRIBERY AND CORRUPTIONPOLICY
LICENSING ASSURANCE is a company dedicated to: provide automated software
asset management solutions, audit defense, license control and data processing

center solutions, oriented to the best practices of *Gartner, ITIL, IAITAM, ISO, among
others; with expert advice in licensing and without conflict of interest as it does notbelong to any software manufacturer; having as a fundamental objective to document
and implement a Code of Conduct in the organization under the international standard
ISO 10001:updated.
The guidelines are oriented to develop and use a code of conduct for customer
satisfaction, preserve confidentiality, integrity, prevent crimes and promote ourstandard of conduct and code of ethics applying risk management that will giveconfidence to all stakeholders.

Under this principle, Licensing Assurance is committed to:o Follow and apply in our processes the Foreign Corrupt Practices Act of the UnitedStates (Foreign Corrupt Practices Act - FCPA), combat bribery of foreign public
servants in international business transactions of the organization for economic

cooperation and development (Convention of the Organization for Economic Cooperation - OECD), local legislation on anti-corruption; as well as other regulations
on anti-corruption and anti-bribery where Licensing Assurance offers its services.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Ensure anti-bribery provisions prohibiting bribery of foreign government officials.
o Securing books and records provisions that set requirements for record keeping

and internal controls. The OECD Convention contains a similar structure.
o Prohibit bribery of public officials and of any person, regardless of whether or notthat person is a public official; it also prohibits bribery in the private sector.
o Ensure compliance with this policy by all Licensing Assurance employees,

regardless of where they reside or where business is conducted, including Joint
Ventures, as well as all agents, consultants, business partners and other thirdparty representatives when acting on behalf of Licensing Assurance.
o Ensure that any questions or concerns regarding compliance with this Anti-Bribery

and Anti-Corruption Policy should be directed to Licensing Assurance's
Administrator Manager.

o Have a whistleblower hotline and mechanism for reporting any violations of anticorruption legislation.
o Periodically review our objectives and goals, through management indicators thatallow the effectiveness in compliance with the code of ethics, motivation andimprovement of human talent and any process that is considered relevant andappropriate with the mission of Licensing Assurance and allows us to achieve thevision.

* Gartner: Methodology of control, analysis and classification of the bestcompanies and products they offer.
ITIL - Information Technology Infrastructure Library.
IAITAM - International Association of Information Technology Asset Managers.
ISO - International Organization for Standardization.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEX
PDEG-001 Ver0 01MAR21

GENDER EQUALITY POLICY
LICENSING ASSURANCE LLC is a company dedicated to: providing automatedsoftware asset management solutions, audit defense, license control and dataprocessing center solutions, oriented to the best practices of *Gartner, ITIL, IAITAM,
ISO, among others; with advice from licensing experts and without conflict of interest
since it does not belong to any software manufacturer; having as its main objective to
document and implement a Compliance Management System under the international
standard ISO 37301: updated.
The general management is convinced that promoting Gender Equality leads to agreater general social welfare towards the construction of egalitarian societies within

the organization in order to give confidence to all its stakeholders.
Under this principle, Licensing Assurance in terms of Gender Equity and Gender Non-

Discrimination is committed to.
o Identify the main obligations affecting the organization and carry out theassessment of the risks of non-compliance.

o Promote the culture of compliance in a broad sense, promoting training andawareness of staff.

o Veto differential remuneration based on gender.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Promote gender equity in the value chain.

o Develop strategies and programs for empowerment, communication and training
with a gender focus, aimed at reducing conscious and unconscious biases.

o Combat discrimination, promote justice, equality and dignity of the human person
and respect for human rights.

o Promote prevention, protection and zero tolerance to all types of gender-based
violence.
o Actively join the global movement to eliminate all forms of gender-based
discrimination.

* Gartner: Methodology of control, analysis and classification of the bestcompanies and products they offer.

ITIL - Information Technology Infrastructure Library.
IAITAM - International Association of Information Technology Asset Managers.
ISO - International Organization for Standardization.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXPATSP-001 Ver1 01OCT22

ALCOHOL, TOBACCO AND PSYCHOACTIVE
SUBSTANCES CONSUMPTION POLICY
The senior management of LICENSING ASSURANCE LLC is committed to provide
its employees and other interested parties with an environment free of tobaccosmoke, its derivatives, drugs and alcohol, as well as to prevent its adverse effects on
their health and maintain safe working conditions, in accordance with the provisions of
the legal system by the government agencies of each country; in order to contribute to
the proper performance of personnel in the organization, as well as the prevention ofnegative impact on the work environment. Therefore, it is committed to:o Raise awareness in the prevention of the consumption of tobacco, alcohol andother psychoactive substances, as well as socialize the policy on a frequent basis

to all employees and related persons. That is, manage awareness and training
activities that seek the creation of healthy habits and lifestyles in relation to thedamage caused by cigarettes, alcoholic beverages and psychoactive substances in

the health of individuals and their environment.
o Disseminate to all employees and other interested parties the physical, social,economic and psychological effects of smoking, alcohol and other psychoactive
substances, and the impact they have on the family, work and social life of those

who use them.
o Develop activities and implement actions to promote and strengthen the protective

factors included in the Occupational Health and Safety Program.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Prohibit activities, functions or duties under the influence of alcohol or
psychoactive substances during working hours. In other words, the improper useof non-prescription and prescription drugs or the use, possession, distribution andsale of alcohol, tobacco and psychoactive substances during the performance ofwork or contractual activities is prohibited.

o It is the direct responsibility of each employee and other stakeholders to ensure
their well-being and take care of their health (self-care).

o In order to comply with this policy, LICENSING ASSURANCE LLC, expects thecommitment of all its employees and other interested parties, with their active
participation in all activities of the awareness and training program of theorganization. As well as, to ensure the self-care, improvement, conservation andrecovery of their personal health and the health of the members of theirhousehold, avoiding harmful actions and omissions, and complying with thetechnical instructions and mandatory standards issued by the competentauthorities.
o Refer to the procedure for Prevention and Care of Alcohol, Tobacco andPsychoactive Substances Consumption - MPAD-015 of the Administration's
Procedures Manual.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXPSG SyST-001 Ver2 01JUN23

OCCUPATIONAL HEALTH AND SAFETY
MANAGEMENT SYSTEM POLICY
LICENSING ASSURANCE LLC, is a company dedicated to: provide automated solutions
for software asset management, audit defense, license control and data processing center
solutions, oriented to the best practices recommended by *Gartner, ITIL, IAITAM, ISO,

among others; with expert advice on licensing, without conflict of interest as it does notbelong to any software manufacturer; having as its main objective to document andimplement a Management System for Safety and Health at Work - SG SyST; under theinternational standard ISO 45001: updated.
Under this principle, is committed to:o Encourage its employees and other stakeholders; a culture of safe and healthy working

conditions of self-protection and prevention of injuries and deterioration of health related
to work and that are consistent with the purpose, size and context of the organization andthe specific nature of the risks and opportunities for Safety and Health at Work.
o To have a frame of reference that allows setting clear objectives in relation to
Occupational Health and Safety. In addition, it is important to provide adequate
resources, both human, technical and economic, to ensure the effective documentationand evaluation of the Occupational Health and Safety Management System. In this way,
to promote a safe and healthy work environment for all employees and to implement
effective preventive and corrective measures from their home office.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo ​Comply with current applicable legislation, internal regulations and voluntarily
subscribed commitments regarding Occupational Health and Safety.

o Promote a safe and healthy work environment, and this is only possible throughthe constant identification of risks and the application of appropriate safetymeasures. A fundamental task in the work environment is the identification andevaluation of the hazards that may exist, in order to determine their possible
negative effects on Safety and Health at Work. In this way, employees will be able
to take appropriate preventive and corrective measures to improve working

conditions and carry out effective risk management in their home office.
o Practice continuous improvement in the performance of the Occupational Healthand Safety Management System to promote leadership and a culture ofOccupational Health and Safety.
o Develop activities and implement actions to promote and strengthen theprotective factors included in the Occupational Health and Safety Program.

o Disseminate this policy, raise awareness, promote education and training of
personnel in the procedures, hazards and risks and their controls in the area ofOccupational Safety and Health.
o Promote consultation and participation of workers and their representatives in thedevelopment

and improvementof the Occupational Health and Safety

Management System, especially in controlling work-related risks and hazards.

o Assume that Occupational Health and Safety is as important as quality,
productivity and excellence in activities and processes.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEX
PCTD-001 Ver3 01JUN22

CONFIDENTIALITY AND DATAPROCESSING POLICY
LICENSING ASSURANCE LLC, in the development of its principles: profitability,
customer loyalty, quality of service, cycle and duration of service, ability and skill of

personnel in customer service, as well as responsibility, respect, transparency andfairness, determines the information of its employees, customers and suppliers as oneof the most important assets; therefore, it declares the importance of an adequate
treatment of its information, following the regulatory framework that regulates it ineach of the countries where it has presence.
Under this principle, it is committed to.

a. The information we collect and store from our customers may include thefollowing:

I. Public data: is the data that is not private or sensitive. For example: number andtype of identity document, information contained in public documents, marital status,
occupation or profession, corporate telephone and e-mail.
II. Private data: are those that, due to their intimate or reserved nature, are only

relevant to the owner. For example: income level, financial data, dependents,
composition of the family group, employment information, preferences in social
networks, as well as contact data such as address, telephone and personal email.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEX
III. Sensitive data: category of personal data that is reduced to the most intimate
and sensitive category of its owner, whose inadequate treatment may lead todiscrimination and/or the suffering of a serious and difficult to repair damage. Thiscase only applies when Licensing Assurance offers its services to clients in the
medical field that handle biometric data and medical history, or data related tohealth in general.
b. To treat the data of collaborators and employees for the purpose of theirrelationship with Licensing Assurance, the performance of their duties or theprovision of their services, retirement or termination. This treatment includes, among
others: selection process and binding activities, development plans, recognition andpayment of legal and extra-legal benefits, internal and external communications,processing of information in different technological applications installed in Licensing
Assurance servers.
c. Treat the data for the surveillance and security of people and goods of Licensing
Assurance, which may be developed through the capture of images in video

surveillance systems and use such information in different processes and labor andadministrative procedures, such as fraud investigation, fraud prevention and/or
disciplinary and sanctioning processes.
d. General principles to ensure the protection of personal data of customers andLicensing Assurance's business, the following are established as general principles
for the processing of information.

o Principle of legality: there will be no processing of personal information ofcustomers without observing the rules established in the current regulations.
o Principle of purpose: the incorporation of data to the physical or digital

databases of Licensing Assurance will obey a legitimate purpose, which will betimely informed to the client in the confidentiality policy.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Principle of truthfulness and quality: Licensing Assurance will strive to ensurethat the information of its customers is accurate and updated, for which it has
efficient means for updating and rectification of personal data.
o Principle of transparency: within the mechanisms that we establish for the
exercise of the rights of information, the client is guaranteed access to information

about data concerning him/her.
o Principle of restricted access and circulation: Licensing Assurance iscommitted to ensure that only authorized persons can access the client's

information. Licensing Assurance has contractual means to guarantee theconfidentiality and restricted circulation of the information.
o Security principle: Licensing Assurance takes all technical and administrative

measures to ensure that customer information, stored in digital databases, does
not circulate or is not accessed by unauthorized persons.
o Principle of confidentiality: all persons involved in the processing of customer
data that are not of a public nature are obliged to ensure the confidentiality of theinformation, even after the end of their relationship with any of the tasks thatcomprise the treatment and may only make provision or communication of datawhen it corresponds to the development of the activities authorized by law andunder the terms of this.

o Validity of data processing: the information provided by customers will remain
stored for the time that is determined by the contract or that is indicated by law for
the fulfillment of the purposes for which it was incorporated.
o Modifications to the privacy policy and treatment of personal data: Licensing
Assurance reserves the right to modify the rules of confidentiality and dataprotection in order to adapt them to new legal, jurisprudential, technicalrequirements and, in general, when necessary to provide a better service.
o Acceptance of this privacy policy: the holder of the information accepts thetreatment of his/her personal data, in accordance with the terms of this privacy
policy, when he/she provides the data through our channels or customer service
points and when he/she requests the service, acquires, or uses any of our

products or services.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXPSG RS-001 Ver0 01JUL23

SOCIAL RESPONSIBILITY MANAGEMENTSYSTEM POLICY
LICENSING ASSURANCE LLC, is a company dedicated to provide automatedsolutions for software asset management, audit defense, license control and dataprocessing center solutions, oriented to maximize its contribution to sustainable
development and social responsibility as a continuous process; which allows having a
positive impact on the future by evaluating its sphere of influence and determining its
responsibilities; having as a fundamental objective to document and implement a
Social Responsibility Management System under the international standards IQNet

SR 10:updated and ISO 26000:updated.
Under this principle, it is committed to:o Accountability: Promote in Senior Management (Corporate Governance); theimplementation of best practices and accountability for its impact on society, theeconomy and the environment giving priority to transparency, risk management andethical management of the company.
o Transparency: Disseminate relevant and truthful financial and non-financial
information on the performance of the company's activities; as specified in the Codeof Ethics (MPAD-003 Standard of Business Conduct and Ethics); maintaining
responsible, fluidand bidirectional

communication

withkey stakeholders,

employees, customers, suppliers and partners, institutions and society.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Ethical behavior: Always Complying with current legislation, as well ascomplying with the commitments related to Social Responsibility subscribed by
the company; as well as complying with the Code of Ethics.
o Respect for the interests of stakeholders: Support the training andprofessional development of all employees and workers. Promote diversity andequal opportunities, facilitating work-life balance. Promote health and safety atwork. Contribute to better management of environmental resources and raise
employee awareness of the importance of sustainable activities.
o Respect for the principle of legality: Act in a socially responsible manner, incompliance with applicable laws and regulations; periodically review the degreeof compliance with the applicable legal framework and keep informed of legal
obligations.
o Respect for international standards of behavior: Abide by the principle ofrespect for the principle of appropriate environmental or social law and, to theextent possible and appropriate, review the nature of our relationships andactivities in any jurisdiction in which the company operates to ensure that humanrights are respected, protected and guaranteed for all and to prevent any
violations and abuses.
o Respect for human rights: Respect the universality of human rights, labor
practices and the environment, strongly rejecting child, forced or compulsory
labor, corruption and respecting the rights of association.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEX
PDH-001 Ver1 01ENE24

HARDENING POLICY
LICENSING ASSURANCE LLC, is a company dedicated to: providing automatedsoftware and license asset management solutions, audit defense, license control anddata processing center solutions, oriented to the best practices of *Gartner, ITIL,
IAITAM, ISO , among others; with advice from licensing experts and without conflict ofinterest since it does not belong to any software manufacturer; having as its
fundamental objective, document and implement a set of prioritized actions of best
cyber defense practices that mitigate the most common attacks against systems andnetworks under CIS Control TM: Updated.
The primary goal of controls is to detect, prevent, respond to, and mitigate damage

from the most common to the most advanced of those attacks; ensuring theconfiguration of system components (servers, applications, among others); in order toevaluate and improve its current security status.
Under this principle, Licensing Assurance is committed to:o Offense informs defense: Use knowledge of actual attacks that havecompromised systems to provide the foundation to continually learn from these

events and build effective and practical defenses. Including only those controls
proven to stop known real-world attacks.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com

INDEXo Prioritization: Invest first in the controls that will provide the greatest risk
reduction and protection against the most dangerous actors and that can befeasibly implemented in the IT environment.
o Measurements and Metrics: Establish common parameters to provide a sharedlanguage for executives, IT specialists, auditors and security officials to measure

the effectiveness of security measures within the organization, so that necessary
adjustments can be quickly identified and implemented.

o Continuous diagnosis and mitigation: Perform continuous measurements totest and validate the effectiveness of current security measures and to help
direct the priority of next steps.
o Automation: Automate defenses so the organization can achieve reliable,scalable, and continuous measurements of its adherence to controls and related
metrics.

Licensing Assurance LLC 16192 Coastal Highway Lewes, DE 19958 I 1 (786) 629-9078 info@licensingassurance.com