Code of Conduct

Doing things right and honorably is one of our most important values at Attributy... We work hard every day to achieve our purpose: to provide services that are well designed, with ethics and integrity in mind. Each day we come together to make this happen. Whether we are working with Attributy people, corporate affiliates, or contingent workers, we are dependent on each other to be mindful of and respect our ethical responsibility. We only work with partners and associates who have impeccable human rights records and high integrity and monitor our entire operation to comply with our Code of Conduct. All Attributy partners – direct and indirect – make an important impact in shaping the reputation and maintaining open, transparent company culture. It is expected that all Attributy partners commit to and abide by the legal, ethical, and business standards outlined in this document. Many thanks for upholding our values and helping us be the best service provider we can be. Kind Regards, Andreas Eisermann, President & CEO

The trust that our customers, communities, and people place in Attributy and our high standards of ethical behavior are fundamental to everything we do. It is important that we have a frame of reference for decisions we make every day. Our Code of Conduct can guide us, no matter where we are or what we do. It is how we do business.

The Code of Conduct reinforces the importance of conducting business within the framework of professional standards, laws, and regulations, together with our policies, values, and standards. It outlines the values and behaviors that define how we do business. It holds us accountable to be open-minded and responsive and to give our best.

What we achieve at Attributy is entirely dependent on how we all individually put our purpose and our values in the center of everything we do – every day, in every action. Let us encourage collaboration, cultivate curiosity and innovation, act with integrity, and continually foster a sense of care.

When making a decision, ask yourself the following:

• Is it legal?
• Does it comply with the code?
• Does it reflect our company values and ethics?
• Does it respect the rights of others?
• If you are unsure about any of the answers, ask.

The company encourages all employees to ask questions and raise issues without fear of retaliation. We are committed to treating reports seriously and investigating them thoroughly.

Employees must report suspected unethical, illegal, or suspicious behavior immediately. The company does not tolerate retaliation against anyone who makes a good faith report of suspected misconduct or otherwise assists with an investigation or audit.

To report a concern:

• Talk to your manager
• Contact the Human Resources Department
• Contact the CEO

Employees who report a concern in good faith cannot be subjected to any adverse employment action, including:

• Unfair dismissal, demotion or suspension
• Unfair denial of a promotion, transfer or other employment benefit
• Bullying and harassment, either in person or online
• Exclusionary behavior
• Any other behavior that singles out the person unfairly

Attributy is a fair quality workplace built on diversity and equal opportunity. We will not tolerate discrimination based on gender, race, color, nationality, ethnic or national origin, ancestry, citizenship, religion, age, physical or mental disability, medical condition, sexual orientation, veteran status, marital status, genetic information, or any other category protected under applicable federal, state, or local law.

We do not tolerate harassment, discrimination, or any mistreatment by or of Attributy workers (including individual contributors, managers, and contingent workers), guests, clients, or agency partners in the workplace or a work-related situation. Treat all fellow employees, customers, business partners, and other stakeholders with dignity and respect at all times.

Any type of harassment, including physical, sexual, verbal, or other, is prohibited and can result in disciplinary action up to and including termination. If you suspect harassment, discrimination, or bullying has occurred, you are encouraged — and managers are required — to immediately provide a written or oral complaint to our Human Resources Department.

Harassment can include actions, language, written words, or objects that create an intimidating or hostile work environment, such as:

• Yelling at or humiliating someone
• Physical violence or intimidation
• Unwanted sexual advances, invitations or comments
• Visual displays such as derogatory or sexually oriented pictures or gestures
• Physical conduct including assault or unwanted touching
• Threats or demands to submit to sexual requests as a condition of employment or to avoid negative consequences

We are committed to ensuring that our employees, our contractors and our customers work in a safe and respectful environment that is free of bullying. Bullying can include:

• Spreading malicious rumor or gossip
• Excluding or isolating someone socially
• Establishing impossible deliverables
• Withholding necessary information or purposefully giving the wrong information
• Intimidating someone
• Impeding someone’s work
• Unfairly denying training, leave or promotion
• Constantly changing work guidelines
• Sending offensive jokes or emails
• Criticizing or belittling someone constantly
• Tampering with a person's personal belongings or work equipment

A conflict of interest can occur when an employee's personal activities, investments, or associations compromise their judgment or ability to act in the company's best interests. Employees should avoid the types of situations that can give rise to conflicts of interest.

Employees need to disclose any relationships, associations, or activities that could create actual, potential, or even perceived conflict of interest to their manager or the Human Resources Department.

Only the President and the CEO are authorized to represent the company to media and/or legal authorities. Employees should refer all requests for information or interviews to the Executive Board.

Attributy's confidential, proprietary information is a valuable asset all Attributy Personnel are expected to protect. Attributy Personnel is required to use confidential information of Attributy for business purposes only and must always keep such information in strict confidence. This responsibility extends to confidential information of third parties that we have received under non-disclosure agreements.

Your obligation to maintain the confidentiality of this non-public information means you are not permitted to share any such information outside of Attributy unless Attributy has appropriate non-disclosure agreements in place. For help in establishing such an agreement, or if you have questions about provisions of a non-disclosure agreement currently in place, please contact your direct supervisor.

Attributy Personnel should use proper judgment in deciding what is appropriate to share internally in furtherance and/or direct impact of one's position. Please always remember that improper use or disclosure of confidential business information could seriously damage Attributy's reputation with users, business partners, and our community, exposing us to liabilities and potential company harm or damages.

Confidential information may include:

• Customer lists
• Supplier lists
• Pricing information
• Terms of contracts
• Company policies and procedures
• Financial statements
• Marketing plans and strategies
• Trade secrets
• Any other information that could damage the company or its customers or suppliers if it were disclosed

The company complies with the requirements of the country and international privacy laws. All employees sign an agreement that contains provisions for information confidentiality and non-disclosure.

The company and its employees do not disclose any private, personal information of:

• Employees
• Customers
• Suppliers
• Competitors
• Third parties

Employees store all personal information securely, mark it as confidential and store it only for as long as it is needed for the purpose for which it was collected.

When providing personal information, employees limit access to only those with a clear business need for the information.

Employees are required to report any breaches of privacy, including the loss, theft of or unauthorized access to personal information, to their manager.

While the company competes aggressively for new business, relationships with business partners are built upon trust and mutual benefits and compliant with competition/antitrust laws.

Employees are required to:

• Communicate the company’s products and services in a manner that is fair and accurate, and that discloses all relevant information
• Familiarize themselves with the company’s fair competition policies and remain aware of the consequences of any violation of policies or laws governing fair competition
• Consult the company’s legal department before engaging in any new practice that may affect fair competition
• Refrain from price fixing, bid rigging, and any other anti-competitive activities
• Use only publicly available information to understand business, customers, competitors, business partners, technology trends, and regulatory proposals and developments
• Advise their manager immediately of possible violations of fair competition practices

The company will not attempt to influence the judgement or behavior of a person in a position of trust by paying a bribe or kickback. This applies to persons in government and in private business.

The company does not permit facilitation (or “grease”) payments to government officials or private business in order to secure or speed up routine actions.

Employees are to:

• Select third parties carefully and monitor them continuously to ensure they comply with the company’s anti-bribery policies
• Keep accurate books and records at all times and monitor that funds are not being used for bribery or facilitation payments
• Refuse any offer or request for an unlawful payment and report the incident to the company’s ethics and compliance officer

While gifts and entertainment among business associates can be appropriate ways to strengthen ties and build goodwill, they also have the potential to create the perception that business decisions are influenced by them. The company is committed to winning business only on the merits of its products, services and people and complies with all legal requirements for giving and receiving gifts and entertainment.

Employees are to:

• Use sound judgment and comply with the law, regarding gifts and other benefits
• Never allow gifts, entertainment or other personal benefits to influence decisions or undermine the integrity of business relationships
• Never accept gifts or entertainment that are illegal, immoral or would reflect negatively on the company
• Never accept cash, cash equivalents, stocks or other securities

Employees may accept occasional unsolicited personal gifts of nominal value such as promotional items and provide the same to customers and business partners.

Employees should check with the ethics and compliance officer before giving or receiving anything of value when in doubt.

The company does not make political contributions.

Employees are free to support any political party or entity on a personal level. However, this must be kept separate from company business.

The company may make charitable contributions to causes and organizations that are not politically affiliated.

Employees should check with the VP Operations, President, or CEO before making any charitable contributions on behalf of the company.

All documents, databases, voice messages, mobile device messages, computer documents, files and photos are records.

Employees are required to:

• maintain these records and protect their integrity for as long as required
• maintain official record keeping systems to retain and file records required for business, legal, financial, research or archival purposes
• dispose of your records according to the company’s records retention and disposition schedule

Employees should never destroy documents in response to, or in anticipation of, an investigation or audit.

The company requires all employees to protect its assets. All assets should be used for legitimate purposes, efficiently, and for company business only.

Assets include facilities, equipment, computers and information systems, telephones, employee time, confidential and proprietary information, corporate opportunities and company funds.

Suspected incidents of fraud, theft, negligence, and waste should be reported to the CEO.

The company complies with anti-money laundering laws. Money laundering is the process of concealing illicit funds by moving them through legitimate businesses to hide their criminal origin.

Employees must never knowingly facilitate money laundering or terrorist financing and must take steps to prevent inadvertent use of the company's business activities for these purposes. Employees are required to immediately report any unusual or suspicious activities or transactions such as:

• attempted payments in cash or from an unusual financing source
• arrangements that involve the transfer of funds to or from countries or entities not related to the transaction or customer
• unusually complex deals that don’t reflect a real business purpose
• attempts to evade record-keeping or reporting requirements

Employees may learn information about the company, associates, clients, business partners or other companies that is not publicly available. It is illegal for any individual to use information obtained in this way for personal gain or to share it with others.

Employees are prohibited from:

• Buying or selling securities based on non-publicly available knowledge gained in the course of business
• Providing information or tips, or encouraging another person to buy or sell securities based on inside information

Employees are required to report suspected insider trading immediately to the ethics and compliance department.

The company conducts business in accordance with applicable health and safety requirements and strives for continuous improvement in its health and safety policies and procedures.

All employees are expected to perform their work in compliance with applicable health and safety laws, regulations, policies and procedures and apply safe work practices at all times in all locations.

Applicable safety and health requirements must be communicated to visitors, customers or contractors at any company location.

Employees are required to immediately report workplace injuries, illnesses or unsafe conditions, including “near-misses.”

The company is committed to operating in an environmentally responsible manner, from the provision of products and services, to the operation of its offices and facilities, selection of suppliers and other business activities.

The company complies with all applicable environmental laws and regulations as well as self-directed commitments to sustainable practices and environmental protection.

The company expects its employees to help it safeguard all computer equipment and data against intentional malicious acts by individuals inside or outside the company. Cyber-security training is provided to all employees to ensure compliance with computer security policies.

The company safeguards against inappropriate access by individuals or groups untrained in correct company policies or procedures.

The company does not use software for which it does not have a license.

The company understands that occasional personal use of the internet during work hours is a reasonable request and allows this, within reason. Employees can ask for clarification from their managers if in doubt.

However, the company does not allow internet use to support a personal business, political venture, or embarrass the company and its customers.

The company respects the right of employees to use social media for personal and professional purposes.

Employees are responsible for complying with company policies and procedures when communicating on social media. Employees are accountable for any information they publish online.

Employees are required to:

• Reveal their relationship with the company when commenting online on issues related to the company
• Respect the privacy of other employees and refrain from publishing photos of them without their consent
• Ensure any information they post related to the company is accurate
• Comply with the rules of the social media sites they use

Employees must not:

• “Pretext”, or pretend to be someone they are not online
• Speak on behalf of the company if they are not expressly authorized to do so
• Share confidential information about the company, its clients, stakeholders or suppliers
• Post comments or pictures that could harm the company’s brand, reputation or commercial interests

By certifying to the company Code of Conduct, you acknowledge that:

• You have read the entire Code of Conduct and understand your responsibilities related to it.
• You have had the opportunity to ask questions to clarify any unclear aspects of the code.
• You agree to abide by its principles.
• You agree to report to the company any violations of the code.
• You agree to cooperate in any investigations of violations of the code.