Information Security & Confidentiality Policy

The Company adopts an enterprise cloud platform meeting global standard security requirements for business execution. System access strictly requires Multi-Factor Authentication (MFA), structurally deterring unauthorized access by eliminating password-only authentication.

The handling of business information is restricted to the cloud environment and dedicated business devices approved by the Company. Data transfers to personal emails, the use of unapproved online storage, and the saving of confidential information to external storage media such as USB drives are strictly prohibited. Furthermore, all business devices are protected by strong passwords and biometric locks. In the unlikely event of loss or theft, we implement measures to immediately erase local data via remote wipe.

The Company strictly complies with Non-Disclosure Agreements (NDAs) regarding all confidential information learned through our operations, including clients' asset status, investment strategies, and transaction details. We firmly prohibit the use of this information for purposes other than the agreed-upon business.

In the event of device loss/theft or suspected unauthorized account access, we will promptly exercise administrator privileges to execute an immediate sign-out of all sessions and password reset for the corresponding account.

When it becomes necessary to share confidential information with external professionals (tax accountants, judicial scriveners, system maintenance, etc.) for business purposes, we require these parties to comply with information protection frameworks and confidentiality obligations equal to or greater than those of the Company.