Occupational Health and Safety Policy

PRONETSYS S.A.S., identified with NIT 901.386.859-4 (hereinafter, “Pronetsys” or “the company”), a technology services company that provides consulting, technical support both remotely and at customer premises, software development, hosting, backup, VoIP telephony, networking and analytics, is committed to protecting the safety and health of all the people who work with it, through the implementation and continuous improvement of its Occupational Health and Safety Management System (SG-SST).

This policy is adopted in accordance with Decree 1072 of 2015, the Sole Regulatory Decree of the Labor Sector, and Resolution 0312 of 2019, which defines the minimum standards of the SG-SST.

1. Senior management commitment

Management and the Legal Representative assume responsibility for the SG-SST and undertake to:

• Allocate the necessary financial, technical and human resources, and designate the person responsible for the SG-SST with the qualifications required by regulations.
• Identify hazards, assess and evaluate risks, and establish the corresponding controls.
• Protect the safety and health of all workers, contractors and visitors through the continuous improvement of the system.
• Comply with current national regulations on occupational risks and with the other requirements to which the company subscribes.
• Guarantee the participation and consultation of workers and their representatives.

2. Scope

This policy applies to all workplaces of Pronetsys, which has no office or physical premises of its own: the places of residence from which each staff member performs remote work, telework or work from home, the customer premises where on-site services are provided, and work-related travel within and outside the Aburrá Valley (Medellín metropolitan area). It covers workers, regardless of their type of employment relationship, as well as contractors, interns, apprentices, suppliers and visitors, insofar as it applies to them.

3. Objectives

1. Prevent. Identify hazards, assess and evaluate the risks of all activities, and establish controls to prevent occupational accidents and occupational diseases.
2. Protect. Promote workers’ physical and mental health, including the management of psychosocial risk.
3. Comply. Meet the minimum standards of the SG-SST and the regulations applicable to our activities.
4. Prepare. Maintain an emergency prevention, preparedness and response plan.
5. Improve. Measure the system’s performance and improve it continuously.

4. Priority hazards and controls

The hazard identification and risk assessment matrix is updated at least once a year and whenever services, workplaces or processes change, or an accident occurs. Every worker has the right and the duty to stop a task when they become aware of a serious and imminent risk, and to report it immediately to their supervisor, without retaliation.

5. Prevention of alcohol and psychoactive substance use

The use of alcohol and psychoactive substances increases the risk of accidents, especially when driving, doing electrical work and working at heights. Therefore:

• It is prohibited to use them during working hours and to report to work under their influence, in accordance with the Workplace Conduct Handbook and the Internal Work Regulations.
• The SG-SST includes campaigns to prevent alcoholism, smoking and drug dependence, as required by Resolution 1843 of 2025. Enclosed workplaces are smoke-free spaces, in accordance with Law 1335 of 2009.
• Alcohol or psychoactive substance testing will only be performed under the terms of Resolution 1843 of 2025: in positions that involve risk, with technical justification, within a prevention program, by qualified personnel and with confidential handling of the results.
• The company directs anyone who needs support to the services of their health insurer (EPS) and of the occupational risk insurer (ARL), with a focus on prevention and care.

6. Emergency preparedness and response

• The company maintains an emergency prevention, preparedness and response plan adapted to its operation without physical premises, based on an analysis of the threats and vulnerability of remote workplaces and of activities at customer premises, with personnel trained as an emergency brigade and first aid supplies for technical visits.
• Drills are conducted at least once a year, with the participation of workers, and their results and improvement actions are recorded.
• At customer premises, personnel familiarize themselves with the evacuation routes and assembly points, and follow the customer’s emergency plan.
• Those who work remotely receive guidance to identify the threats at their workplace and the emergency numbers.
• Continuity of services during emergencies is managed in accordance with the Business Continuity Plan, always giving priority to people’s lives and physical integrity.

7. Reporting and investigation of incidents and accidents

1. Respond and notify. In the event of any accident, immediate care is provided and the supervisor and the SG-SST Officer are informed, regardless of where it occurs: remote workplace, customer premises or public roads.
2. Report. The company reports the occupational accident or occupational disease to the ARL and the EPS within two (2) business days following its occurrence or diagnosis, using the established form.
3. Investigate. Incidents and accidents are investigated within fifteen (15) days following their occurrence, in accordance with Resolution 1401 of 2007, with the participation of the Occupational Health and Safety Monitor (Vigía) or the COPASST and the immediate supervisor.
4. Correct and learn. Corrective and preventive actions are implemented and the lessons learned are shared with the team.

Incidents without injury, unsafe acts and unsafe conditions are also reported. Reporting never results in retaliation.

8. Worker participation

Workers participate in the SG-SST through their representation: an Occupational Health and Safety Monitor (Vigía de Seguridad y Salud en el Trabajo) when the company has fewer than ten (10) workers, or a Joint Occupational Health and Safety Committee (COPASST) when it has ten (10) or more, elected in accordance with current regulations. In addition, the Workplace Coexistence Committee, governed by the Workplace Conduct Handbook, contributes to the prevention of psychosocial risk. All workers have the duty to take care of their health, comply with safety rules, use protective equipment, participate in training and report hazards.

9. Legal compliance and continuous improvement

• The company identifies and updates the applicable regulations in a legal requirements matrix, and complies with the minimum standards of Resolution 0312 of 2019 according to its number of workers and its risk class.
• It carries out the annual self-assessment of the minimum standards, and defines and executes the improvement plan and the annual work plan.
• It conducts occupational medical evaluations in accordance with Resolution 1843 of 2025.
• It applies the continuous improvement cycle—plan, do, check and act—with indicators, an annual audit and review by senior management.

10. Signature, dissemination and review

This policy is disseminated to all workers and interested parties, is available on this website and on the internal digital channels that workers access from their workplace, and is reviewed at least once a year and whenever the company’s conditions or the regulations change, in accordance with Decree 1072 of 2015. The date of this version is shown in the document header.