Integrated Management System Policy

The management of infraone, in response to the increasing competitiveness in the technology sector and the growing demands of users, considers information security and quality within its management system as fundamental aspects. The objective is to provide services recognized for their quality, with optimal reliability levels, ensuring the correct levels of information confidentiality and data integrity.

Service quality is a strategic objective of our Integrated System, offering a swift response to achieve full customer satisfaction, exceed expectations, and gain industry recognition, ensuring a commitment to continuous improvement. As a service company, infraone aims for the quality and security of its services to faithfully reflect the expectations of each user and stakeholders, ensuring the company’s long-term success.

To achieve these objectives, management provides the necessary resources for maintaining and improving the Integrated Management System in compliance with ISO 27001 and ISO 9001. It actively participates in setting and monitoring strategic SECURITY and QUALITY objectives, reviewing the Integrated System, and carrying out necessary training activities on Information Security and Quality Management.

In all its activities, the company firmly adheres to applicable legislation, especially regarding personal data protection and service provision, as well as compliance with contractual commitments made with users and third parties.

To effectively implement these commitments, management, aware of the importance of quality in our management system and Information Security, has decided to establish a Management System based on the UNE-EN ISO/IEC 27001 and UNE-EN ISO 9001 standards in our processes.

This management team declares and assumes the following principles:

• Quality management and information security are common responsibilities across all company areas.
• Each member of infraone is responsible for the information assets related to their work.
• Management is responsible for driving the implementation of this policy, verifying its execution through audits.
• The application of this policy requires the active integration of the entire workforce. To achieve this, management prioritizes motivation and training.
• Raising awareness and adapting to climate change through the participation of employees and stakeholders by developing awareness, training, and sensitization initiatives.
• Considering sustainability criteria in all business activities to minimize their environmental impact and continuously promote the rational use of resources.

This management team is committed to meeting requirements and continuously improving the effectiveness of the Management System.

To comply with this policy and move in the set direction, leadership, and consequently the progress and well-being of those who form our organization, must keep in mind two key aspects that will help us achieve this goal:

• Correctly identifying errors is the only way to achieve continuous improvement.
• The organization is a chain, and each of us is only a link. Our teamwork and strong commitment are what differentiate us and make us unique.

Last review date: March 16, 2026