Information security Policy

Biotz is a Spanish software consultancy specializing in digital transformation for enterprises. Biotz offers a comprehensive suite of products and services, with a strong focus on AI, IoT, and scalable software architecture. Biotz's solutions include the Biotz IoT platform and an open-source development platform called HOP, which help businesses build custom digital products and services faster and more efficiently. Biotz  provides expertise in areas like intelligent automation, predictive analytics, data management, and creating personalized user experiences for various industries, including manufacturing, logistics, and smart homes.

We have an Information Security Management System based on the ISO 27001:2022 standard with the objective of preserving the confidentiality, integrity, and availability of information and protecting it from a wide range of threats. This Management System is intended to ensure the continuity of business lines, minimize damage, maximize return on investment and business opportunities, and foster continuous improvement.

Our starting point and the foundation of our information security objectives and principles are as follows:

• The protection of personal data and people's privacy.
• The safeguarding of the organization's records.
• The protection of intellectual property rights.
• The assignment of security responsibilities.
• Information security training and awareness.
• The management of security incidents and business continuity.
• The management of changes that may occur at Biotz related to information security.

Through this Information Security Management System, we commit to the following:

• Developing products and services in compliance with legislative requirements, by identifying the applicable legislation for the business lines developed by the organization and included in the scope of the Information Security Management System.
• Establishing and fulfilling contractual requirements with stakeholders.
• Defining security training requirements and providing necessary training on this matter to stakeholders through the establishment of training plans.
• Managing business continuity through continuity plans that comply with internationally recognized methodologies.
• Fostering continuous improvement in information security and ensuring the effectiveness of the system.

Everyone who is part of Biotz is responsible for complying with the established information security standards and for contributing to the effectiveness of the management system.

Gipuzkoa, September 30, 2025

‍

Asier Galdos Alberdi

CEO