CREDIX Co., Ltd (we) recognizes that it is our social responsibility to secure information security in terms of the sensitivity of the information that we deal with and will keep improving it as an important and continuous fact. Furthermore, we will provide strict information security regulation by establishing a Security Policy (Policy) with executives' approval.

CREDIX Co., Ltd
CEO Takuya Kobayashi
April 1, 2019

1. Purpose of information security

   We will properly protect information assets and manage information security. We will prevent information security accidents such as information leakage, falsification, and theft. In addition, we will establish a trustworthy relationship with customers, our partners, and society.

2. Scope of application

   Our company will apply this policy to all information assets owned by the Company and all employees including board members.

3. Scope of Activation

   1. We will maintain information security's confidentiality, integrity, and availability.
   2. We will observe laws and regulations regarding information security.
   3. We will observe contracts for information security.
   4. We will protect information assets centered on customer information and update them regularly so that our business activities can be resumed promptly from a serious failure or disaster.
   5. We will regularly educate our executives and employees on information security.
   6. We will enact risk management properly by setting up a standard to evaluate information security risk in order to set up an information security management system.

4. Management system

   In order to promote information security, we will appoint a security officer in which the management layer will be involved in protecting cardholder data and maintaining the PCI DSS compliance program. The security staff will make regular reports to the management, and by doing so, will actively carry out activities to accurately grasp the information security situation at the company level and take necessary measures promptly.

5. Continuous improvement

   We will strive to reform and improve our information security management system as well as this policy in order to keep up with the changes that might affect our information asset's risks.

As listed above