Information security is a fundamental priority for Go-Delegate International LLC, a companycommitted to excellence in providing outsourcing services to businesses located in the UnitedStates. We recognize the importance of protecting the confidentiality, integrity, and availabilityof the data we handle, both for our clients and for our own operation. Therefore, this policyestablishes the principles and measures we adopt to ensure security in data processing.

This policy applies to all employees, contractors, suppliers, and business partners of Go-DelegateInternational LLC, as well as to any third parties who may have access to data on our behalf.

We are committed to complying with all applicable data protection laws and regulations, both in Colombia and the United States. This includes, among others, the General Data ProtectionRegulation (GDPR) of the European Union and the Personal Data Protection Law in Colombia.

Information security is the responsibility of everyone at Go-Delegate International LLC. Management is committed to allocating adequate resources and providing ongoing training toensure the effective implementation of security measures.

We continuously identify, assess, and mitigate risks related to data processing. This includesconducting data protection impact assessments and implementing appropriate security controls.

We are committed to protecting our clients’ data through the use of appropriate technical, organizational, and administrative measures. This includes data encryption, firewall implementation, access control, staff training, and security patch management.

When we transfer data to countries outside of Colombia, we ensure that appropriate securitymeasures are applied and that legal requirements for international data transfer are met.

We guarantee the confidentiality of the data we process and commit not to disclose it tounauthorized third parties, except where necessary for the provision of services or permitted bylaw.

We implement a security incident management procedure to detect, report, and respondappropriately to any security breach that may affect the data we process.

We commit to regularly reviewing this policy, as well as our security practices and controls, toensure their effectiveness and adapt them to changes in the operational and legal environment.

Non-compliance with this policy may result in disciplinary action, including termination ofemployment or termination of the contractual relationship, as appropriate.

For any questions or concerns related to this policy, please contact the data protection officer ofGo-Delegate International LLC at jvelez@go-delegate.com.