Information Security Policy

version 20260302

The labels and subsidiaries of 1Optic, TripAiku, and SubSecondSolutions, develop and manage software solutions for reading, processing, and publishing data. Through these solutions, customers can monitor and manage their systems, gain new insights, and support their core business.

1Optic believes in Sustainable Progress (our WHY): instead of short-term thinking and going for quick gains, we choose to invest in our software, people, and processes to achieve increasingly better results and sustainable relationships in the long term.

Compliance with standards such as ISO27001:2022 seamlessly aligns with this vision. To put words into action, we have drafted this statement as part of our Information Security Management System (ISMS). The statement is updated at least once a year or earlier in case of relevant events in the field of information security.

This text is public and has been communicated to all employees of (the subsidiaries of) 1Optic.

Ad Hendrikx
Management 1Optic
March 2026

Availability, Integrity, and Confidentiality

For the data processed by our solutions, the following three generally known guidelines apply:

• Availability of data – our customers receive their data in a timely manner in accordance with the agreed Service Level Agreement (SLA) or Data Delivery Agreement (DDA).
• Integrity of data – our customers must always be able to assume that the data we publish is complete and accurate.
• Confidentiality of data – our customers can assume that confidential data is only accessible to recipients with the proper authorization (in accordance with SLA or DDA).

Objective

The objective is to ensure that the data of 1Optic and its customers is complete, of high quality, and available in a timely manner at all times. Data processing forms the core of our services. In line with our WHY, we believe that reliable and well-managed data is the foundation for sustainable progress. In this way, we continuously work on enhancing our professionalism and IT maturity as an organization.

Our processes and managed services (such as online monitoring) are designed to structurally support this primary objective. In addition, we maintain a risk management policy in which information security risks are periodically analyzed and evaluated. Our incident response policy defines how we handle incidents and how we systematically learn from them to prevent recurrence. We also actively invest in the awareness and expertise of our employees.

In accordance with our WHY, we continuously invest in further improving and optimizing our processes to ensure lasting quality and reliability.

Responsibility

The CEO is ultimately responsible for this information security policy and the measures to be implemented. Together with the CISO, the execution of the policy is ensured. Questions and comments regarding information security can be emailed to ciso@1optic.io.

Engagement

Since data processing is our core business, we continuously improve our processes (and our ISMS), not because it ‘has to be done’, but because our organization is convinced that sustainable growth is the best way to grow and strengthen the relationship with all stakeholders.