GenerativeX

Policy

Information Security Policy

Our policy for protecting the confidentiality, integrity, and availability of information assets.

Established Date: August 12, 2025

Last Revised: May 7, 2026

01

Basic Policy

GenerativeX Inc. aims first and foremost to earn the satisfaction of our customers and all stakeholders involved in our business, striving to be a company that is trusted and relied upon.

02

Action Guidelines

  1. 01Implement appropriate organizational and technical measures to ensure the protection of the confidentiality, integrity, and availability of information assets, and respond to evolving technologies and emerging threats.
  2. 02Provide information security education to all employees, thoroughly communicate this policy, and continuously raise and maintain awareness.
  3. 03Establish objectives for the management system and information security, regularly review compliance with required matters, and carry out continuous improvement and maintenance.
  4. 04Delegate responsibility and authority to a management representative to execute, maintain, and improve the management system.
  5. 05To protect information assets, establish and maintain an Information Security Policy and related regulations, conduct business operations in accordance with them, and comply with applicable laws, regulations, other relevant requirements related to information security, as well as contractual obligations with customers.
  6. 06Establish, implement, and continuously review and improve an Information Security Management System (ISMS) with objectives designed to realize our fundamental principles.

03

Approval

GenerativeX Inc.

Chief Executive Officer

Rei Araki