Information Security Policy Statement

We at Traydstream recognize that Information Security is the responsibility of each and every one of us in the organization. We are committed to creating a secure ecosystem that will enable us to protect customers' and our information, data, intellectual properties, assets and fulfill our security obligations by implementing the 'Information Security Management System'.

Traydstream is committed to maintaining:

1. Confidentiality, Integrity, and Availability of information within the organization
2. Fulfilling Regulatory, Legal and Statutory compliance requirements, Intellectual property rights, Data protection and privacy obligations

1. Ensuring all personnel are trained in information security and their roles and responsibilities towards information security management
2. Ensuring the organization and its personnel are committed to protection of the organization's information assets from all threats, whether internal or external, deliberate or accidental in nature

Ensuring Business Continuity plans (BCP) are established, maintained, and tested to mitigate the organization's continuity and resilience. Processes are designed to support continuation of business operations with minimal disruptions.

Recognizing, assessing, and managing information security risks proactively by implementing a structured risk management process. This includes:

1. Identifying potential threats and vulnerabilities
2. Evaluating their impact on business objectives
3. Applying appropriate controls to mitigate risks
4. Conducting regular risk assessments integrated into decision-making processes
5. Ensuring informed, risk-based actions across the organization

Ensuring the continual improvement of the effectiveness of the Information Security Management System (ISMS) by:

1. Evaluating performance against security objectives and metrics
2. Addressing audit findings and identified risks promptly
3. Incorporating feedback from stakeholders and interested parties
4. Tracking actions to ensure the ISMS adapts to evolving threats
5. Supporting organizational goals through aligned security practices

This Information Security Policy Statement applies to:

1. All employees, contractors, consultants, and third-party personnel who have access to Traydstream's information systems and assets
2. All information assets owned or managed by Traydstream, including digital and physical assets
3. All Traydstream offices, remote work environments, and cloud-based systems
4. All third-party service providers and supply chain partners who process or store Traydstream data

Non-compliance with this policy may result in disciplinary action, up to and including termination of employment or contract, and may result in legal proceedings where applicable.