Information Security Policy

This is an English translation of the original Japanese document for reference. In the event of any discrepancy between the two versions, the Japanese version shall prevail.

To protect the information entrusted to us by our clients and our own information assets from threats such as accidents, disasters and crime, and to earn the trust of our clients and society, Pandon G.K. (“we”, “us” or “our”) addresses information security based on the following policy.

Management responsibility

Our management takes the lead in maintaining and improving information security in an organized and continuous manner.

Internal structure

We maintain a structure for maintaining and improving information security, and establish our information security measures as formal internal rules.

Staff commitment

Our staff acquire the knowledge and skills necessary for information security and ensure that our information security efforts are carried out reliably.

Compliance with laws and contractual requirements

We comply with laws, regulations, norms and contractual obligations relating to information security, and meet the expectations of our clients.

Response to violations and incidents

If a violation of laws or contracts or an incident relating to information security occurs, we respond appropriately and work to prevent recurrence.

Our approach in development work

In our software development services, we:

• Use information and credentials entrusted to us by clients only to the extent necessary for the work, and limit who can access them
• When entering work-related information into AI services used for development, use only services whose settings or contracts ensure that the information is not used to train AI models
• Keep credentials out of source code and configuration files, and manage them appropriately
• Return or delete information entrusted to us after the work ends, as provided in the agreement

Continuous improvement

We regularly review these efforts and work to improve them continuously.