Integrated Management System Policy

NAVÉGALO S.A., a company dedicated to Data Center Services, Telecommunications (Internet and IP Telephony), Cybersecurity and Digital Marketing, with national and international presence and headquarters located in Centro Colón, San José, Costa Rica, and network nodes in Alajuelita, Berlin, Santa Ana and Raicero, has decided to maintain and continually improve an Integrated Management System (IMS) based on the standards ISO 9001:2015, ISO 14001:2015, ISO 27001:2022, ISO 50001:2018, INTE/ISO 14064-1:2019, INTE B5:2021 and PCI DSS v4.

Top Management is committed to using the IMS as a strategic tool to:

• Ensure business continuity and operational resilience.
• Comply with applicable legal, regulatory, contractual, and other requirements related to quality, environment, energy, information security, and payment data protection.
• Prevent pollution, reduce emissions, and promote energy efficiency.
• Protect critical assets and sensitive information, ensuring their confidentiality, integrity, and availability.
• Achieve continuous improvement in IMS performance and in the satisfaction of interested parties.
• Promote technological innovation and environmental and energy sustainability.

IMS Principles

To achieve this, NAVÉGALO’s Integrated Management System is based on the following principles:

• Quality and Customer Satisfaction: Direct quality efforts toward customer and stakeholder satisfaction through the commitment of the entire organization.
• Environmental Protection: Identify, evaluate, and control environmental aspects and impacts of operations.
• Energy Management: Promote the efficient use of energy and natural resources.
• Information Security: Ensure confidentiality, integrity, and availability of information.
• PCI DSS Compliance: Ensure compliance with PCI DSS v4 requirements applicable to colocation services.
• Greenhouse Gas Emission Mitigation and Reporting: Ensure quantification, reporting, and verification of greenhouse gas emissions.
• Technological Innovation: Maintain technologies that contribute to the effectiveness, efficiency, and security of the IMS.
• Training and Awareness: Train and raise awareness among personnel, contractors, and suppliers regarding IMS commitments.

This policy serves as a framework for defining IMS objectives and targets and will be reviewed at least once a year during the Management Review or when significant changes occur.

NAVÉGALO is committed to communicating and making this policy available at all organizational levels and to relevant interested parties.