Anticorruption Policy

Introduction

Integrity, ethics and transparency are essential values for maintaining the trust and reputation of our organization. In line with the Information Security Management System (ISMS) and meeting the requirements of ISO 27001:2022, this Policy establishes guidelines for preventing, identifying and combating any forms of corruption and bribery.

Our commitment is to ensure that all internal activities and processes are aligned with the best governance practices, promoting a healthy and sustainable business environment. The policy therefore reinforces the importance of acting responsibly and in compliance, protecting our information assets and ensuring the trust of employees, partners and other stakeholders.

OBJECTIVES

To establish the main guidelines and ratify Dengine Informática's position on repudiating and combating any form of corruption, including but not limited to extortion and bribery.

SCOPE

All managers (directors), employees and suppliers of the company Dengine Informática, hereinafter referred to as “Dengine Informática” or “Company”. All of Dengine Informática's partners and stakeholders must define their directions based on the guidelines set out in this Policy, their specific needs and the legal and regulatory aspects to which they are subject.

TERMS AND DEFINITIONS

In order to make it easier to understand the legal terms and practices that Dengine Informática wishes to combat, we present some important definitions:

• Public Administration: The set of bodies, services and entities of the direct and indirect public administration (foundations, autarchies, public companies and mixed-capital companies), and their respective agents. This concept, for the purposes of this Policy, encompasses the entire state apparatus, at all levels (Federal, State and Municipal) and powers (Executive, Legislative and Judiciary) for the provision of public services, the management of public goods and the interests of the community, as well as their respective representatives.

• Public Agent: Any individual who represents the public authorities, whether they are a civil servant or not, whether they are paid or not, whether they are in temporary or permanent service. It is anyone who exercises, even temporarily or without remuneration, by election, appointment, designation, hiring or any form of investiture or bond, mandate, position, employment or public function. Anyone who works for a private company contracted or agreed to carry out a typical Public Administration activity is considered a Public Agent.

• Politically Exposed Person (PEP) Politically exposed persons are public officials who hold or have held relevant public positions, jobs or functions in the last five (5) years, in Brazil or in foreign countries, territories and dependencies, as well as their representatives, family members and other people in their close relationship. In addition, there are examples of situations that characterize a close relationship and lead to a client being classified as a politically exposed person, such as direct or indirect control of a legal entity client.

• Injurious Acts: These are any acts or omissions that cause direct or indirect damage to the public interest and/or assets to the detriment of the interests of third parties and that contravene the principles of Public Administration (e.g. impersonality, morality, efficiency, legality and publicity) and the international commitments assumed by Brazil.

• Ethics Channel: The Ethics Channel is the channel made available by Dengine Informática for stakeholders and any third parties to anonymously report or provide information on conduct they believe to be contrary or potentially offensive to the Company's values or the legislation in force, including the Anti-Corruption Law.

• Code of Ethical Conduct: This is the set of rules, according to the version periodically updated by Dengine Informática, through which the Company enforces respect for its values and prohibits the practice of acts that characterize disrespect for ethics, the Company's values or the legislation in force, including the Anti-Corruption Law.

• Corruption: The act or effect of corrupting, offering something to a Public or Private Agent with the aim of obtaining an undue advantage for oneself or others.

• Tender: The formal administrative procedure for contracting services or acquiring products by direct or indirect Public Administration entities. In Brazil, Bids are generally regulated by Law No. 8.666/93 (the General Bidding Law), although there are also more specific rules applicable to certain situations. Examples are: Law No. 10.520/02 (which regulates public tenders); Decree No. 5.450/05 (which regulates electronic public tenders) and Law No. 13.303/16.

• Affiliated Companies: These are companies in which the Company has significant influence, and, under the terms of article 243, §4 and §5 of the Brazilian Corporation Law, (i) there is significant influence when the Company holds or exercises the power to participate in the financial or operational policy decisions of a company, without, however, controlling it; and (ii) significant influence will be presumed when the Company holds 20% (twenty percent) or more of the voting capital of the respective company, without, however, controlling it.

• Subsidiaries: These are companies in which the Company, directly or indirectly, holds partner or shareholder rights that permanently assure it a preponderance in company resolutions and the power to elect the majority of managers, under the terms of article 243, paragraph 2 of the Brazilian Corporation Law.

• Stakeholders: These are all relevant stakeholders with interests pertinent to the company, or individuals or entities that assume some kind of direct or indirect risk in relation to the company. These include: shareholders, investors, employees, society, customers, suppliers, creditors, governments, regulatory bodies, competitors, the press, associations and trade associations, users of electronic means of payment and non-governmental organizations.

• Conflict of Interest: A situation in which a person is involved in a decision-making process whose outcome has the power to influence and/or direct, ensuring a gain and/or benefit for them, a close family member, a company they control or a third party with which they are involved, or is in a situation that could interfere with their capacity for impartial judgment. This definition includes situations in which the objectives and interests of Dengine and its Partners in specific matters are at stake.

• Undue advantage: Any type of profit, privilege, gain or benefit contrary to the legislation and regulations in force, even if not of an economic or patrimonial nature.

• Anything of Value: Anything of tangible or intangible value, broadly defined, in any form, including but not limited to cash, cash equivalents (such as gift cards, gift certificates and discounts), scholarships, gifts, travel, meals, hospitality, entertainment, per diems, favors, compliance with a request to provide anything of value to a third party (such as a close family member of a Public Official), contributions to charity or other non-profit organization, promotional sponsorships, business or employment opportunities, or any other consideration or benefit, even if it is not of an economic or patrimonial nature. Note that the value is based on the benefit an item provides to the person receiving it, rather than the financial cost of that benefit to the company.

ANTI-CORRUPTION LEGISLATION

The main guideline of the Policy is to ensure that SCORB and its Employees, Suppliers, Third Parties and Business Partners act ethically and in compliance with applicable anti-corruption legislation, including compliance with the FCPA, the UK Bribery Act and Brazilian law, and do not carry out acts in violation of these laws, such as Acts against Public Administration.

Brazilian anti-corruption legislation provides for sanctions for those who violate it, which must be applied even if the act of corruption does not take place, since the mere intention is already punishable. Some examples of sanctions provided for in the anti-corruption legislation for legal entities are:

• Payment of a fine that may vary between 0.1% and 20% of the gross revenue of the financial year prior to the start of the administrative process, excluding taxes, it being certain that (a) the fine will never be less than the advantage gained, when it is possible to estimate it based on the gross revenue of the legal entity; and (b) if it is not possible to use the criterion of the value of the gross revenue of the legal entity, the fine may vary between R$ 6,000.00 and R$ 60,000,000.00;

• Publication in a widely circulated newspaper, by the convicted legal entity, of the condemnatory decision;

• Full reparation of the damage caused;

• Forfeiture of the assets, rights or values that represent the advantage directly or indirectly obtained from the infraction, safeguarding the right to compensation of the injured party or third party in good faith;

• Suspension or partial ban on the legal entity's activities;

• Prohibition from receiving incentives, subsidies, grants, donations or loans from public bodies or entities and from public financial institutions or those controlled by the government, for a minimum of one and a maximum of five years;

• Compulsory dissolution (extinction) of the legal entity;

• Registration of companies punished by the law in the National Register of Punished Companies (CNEP), which will publicize the sanctions applied by government agencies, the leniency agreements signed, as well as whether or not they have been complied with; and/or

• Registration of companies punished in the National Register of Ineligible and Suspended Companies (CEIS).

Under the FCPA, for each violation of the anti-bribery provisions, companies are subject to a criminal fine of up to $2 million and a civil fine of up to $16,000 per violation. Individuals, including Officers, Directors, Shareholders and Agents of Companies, are subject to a criminal fine of up to $250,000 and a prison sentence of up to five years, and a fine of up to $16,000 per violation (which may not be paid by their employer). For each violation of the accounting provisions, companies are subject to a criminal fine of up to $25 million and individuals are subject to a criminal fine of up to $5 million and a prison sentence of 9 to 20 years, as well as a civil fine not to exceed the greater of the gross monetary gain to the defendant from the violation, or a dollar limit specified based on the notoriety of the violation (up to $150,000 for individuals and $725,000 for companies). Courts may also impose criminal fines significantly higher than those established in the FCPA - up to twice the benefit obtained by the defendants in making the corrupt payment. The UK Bribery Act punishes both natural and legal persons, whether public or private. The law covers the following crimes: active and passive corruption (soliciting, offering, paying or receiving a bribe, kickback or undue advantage) of public or private individuals with the intention of inducing them to conduct themselves improperly; Offering bribes to foreign public officials; Failure to prevent (through negligence or fault) acts of corruption on the part of companies or those acting on their behalf.

Therefore, the Policy will explain that:

• This Policy will cover not only those who have directly committed a potential infraction, but also those who can be considered to be in a position to know (or should have known) of the possibility of the act of corruption occurring and are able to take action to prevent it;

• The liability of the legal entity will not exclude the individual liability of its administrators, managers or any natural person who has participated in the conduct;

• The liability of the legal entity will subsist even if there is a contractual change, transformation, incorporation, merger or corporate spin-off; and

• Under Brazilian law, the company benefiting from the unlawful acts committed, with its consent or not, and regardless of its knowledge, will be held responsible and punished, under the terms of the rules of strict liability, regardless of its actual intention or guilt.

GUIDELINES

GENERAL SEAL

Directors (officers), employees and suppliers of Dengine Informática are strictly prohibited from receiving, offering, promising, paying or providing or authorizing the provision of anything of value to or from any person, whether a Public Official or not, to influence or reward any action or decision of such person and/or to obtain or retain business or any advantage for their own benefit or that of the company or to promote any improper purpose.

6.2 GUIDELINES IN RELATION TO THE ANTI-CORRUPTION LAW AND PRACTICES REGARDING CONTRIBUTIONS TO PUBLIC ENTITIES

A. Injurious Acts: Dengine Informática does not adopt, encourage and/or allow the practice of any conduct that constitutes or results in harmful acts to the national or foreign Public Administration and other private companies, observing the provisions of Law No. 12.846/2013 (“Anti-Corruption Law”), according to an exhaustive and non-explanatory list:

• Promising, offering or giving, directly or indirectly, an undue advantage to a public official, or to a third party related to them;

• Financing, funding, sponsoring or in any way subsidizing the practice of the illegal acts provided for in this law;

• Using a natural or legal person to conceal or disguise their true interests or the identity of the beneficiaries of the acts committed;

• With regard to licitations and contracts;

• Frustrating or defrauding, by means of an arrangement, combination or any other expedient, the competitive nature of a public bidding procedure;

• Preventing, disturbing or defrauding the performance of any act of a public bidding procedure;

• Removing or seeking to remove a bidder by means of fraud or offering an advantage of any kind;

• Fraudulently bid for a public tender or contract arising from it;

• Fraudulently or irregularly creating a legal entity to participate in a public bidding process or enter into an administrative contract;

• Fraudulently obtaining an undue advantage or benefit from modifications or extensions to contracts entered into with the public administration, without authorization by law, in the public bid invitation or in the respective contractual instruments; or

• Manipulating or defrauding the economic and financial balance of contracts entered into with the public administration.

• B. Contact with Public Officials: Contact between administrators and employees, as well as in the case of suppliers acting as representatives of Dengine Informática with public agents, must take place in accordance with guidelines established in an internal rule governing relations with the Public Administration.

• C. Political contributions, donations and sponsorships: Dengine Informática does not contribute, directly or indirectly, whether through the donation or loan of goods, use or assignment of physical or advertising space, sponsorship of events, assignment of labour and/or any other resource, leafleting, sending electronic messages, posting posters, or in any other way, to political campaigns, political parties, candidates for public office or any other type of organization that carries out political activity. Although donations from individuals are not prohibited by law, Dengine Informática recommends that all those who hold senior positions in the company (management) refrain from making personal donations to electoral campaigns, including those who are part of their circle of economic dependence. Dengine Informática only sponsors projects after the appropriate evaluations and approvals have been made, in accordance with the guidelines established in internal rules. The donation of goods is permitted and is carried out following the appropriate evaluations and approvals, in accordance with the guidelines established in internal regulations.

• D. Offering gifts, hospitality or anything of value: Business decisions should be based on competitive factors. Offering or accepting gifts or business entertainment can create the appearance that business decisions are being influenced by other factors. Business gifts or entertainment may never be offered or accepted for improper purposes. Reimbursement of expenses directly related to the promotion or demonstration of the Company's commercial services or products may be accepted if they are reasonable and not made to secure an undue advantage. However, nothing should be offered to a Public Official, or to any person, if it could be perceived as an attempt to influence a commercial or official decision and/or obtain or retain an unfair deal or any advantage, or if it negatively affects the Company's reputation. The principles underlying this policy must be followed regardless of the monetary value of anything given to a Public Official or any other third party. All gifts and business entertainment:

• They must be consistent with the Company's commercial interests;

• They must not be excessive, according to local or industry standards;

• Must be given or accepted without expectation of reciprocity;

• Must be consistent with all laws and regulations; and

• Must comply with pre-approval requirements as described below.

Offering or receiving a gift, hospitality and/or anything of value must follow the rules set out in the Gifts, Hospitality and Events Procedure, available in the employee handbook, requiring the approval of the Legal and Compliance Departments, as applicable.

Important: If a public official or PEP offers something of value, the employee must submit it to Compliance for approval, under the terms specified in the Gifts, Hospitality and Events Procedure, regardless of value.

E. Corporate Restructuring: During any merger and acquisition process in which Dengine Informática participates, due diligence must be carried out on the target company to ensure, among other things, compliance with the requirements of the Anti-Corruption Law. The purchase and sale agreement or other document with the same purpose as this agreement must contain specific anti-corruption clauses and, in the case of mergers and acquisitions, it must be expressly stated that the transferee is liable for acts and facts occurring before the date of the merger or acquisition, except in the case of simulation or evident intent to defraud, duly proven. Any violation identified in the merger and acquisition process must be reported to the Executive Board for analysis and risk assessment.

ENCOURAGING THE DENUNCIATION OF HARMFUL ACTS, WHETHER VERIFIABLE OR NOT, TO THE PUBLIC ADMINISTRATION, PRACTICED BY EMPLOYEES, DIRECTORS OF DENGINE INFORMÁTICA AND OTHER STAKEHOLDERS OF THIS POLICY:

• Dengine Informática encourages and supports reporting any act or omission that may constitute a breach of the Code of Ethical Conduct or the legislation in force, including the Anti-Corruption Law, and undertakes to investigate, punish and/or inform the competent authorities of any deviations that may be reported to the Company, with the greatest possible rigor, respecting the confidentiality of the complainant.

• Whistleblowing should preferably be done through the Ethics Channel, available on the SCORB Portal, without excluding any means or channel available to the whistleblower if they are unable to access this channel.

• All complaints received and processed by the Ethics Channel, even when not anonymous, will be treated confidentially. The Internal Audit of Dengine Informática manages the receipt of these complaints and the investigation of the records, without prejudice to the notification and collaboration of an independent company and other competent authorities, as necessary.

DISCLOSURE

• All stakeholders, without exception, will be made aware of this Policy and its respective updates at least once a year. This Policy is available on the Dengine Informática intranet and website.

• All managers, employees, trainees and apprentices must sign an agreement to adhere to the Anti-Corruption Policy, and suppliers must accept the agreement to adhere to the guidelines established by Dengine Informática.

TRAINING

All administrators, employees, trainees and apprentices must undergo mandatory online training every year and sign the agreement to this policy.

CONSEQUENCE MANAGEMENT

Employees, suppliers or other stakeholders who observe any deviations from the guidelines of this Policy may report the fact to Management via the People and Management Portal, in the Ombudsman and Ethics Channel option, which is a permanent channel for suggestions, criticisms and complaints, available at https://www.scorb.com.br/gente_gestao , It is at the company's discretion whether to identify or remain anonymous. Internally, failure to comply with the guidelines of this Policy will result in the application of measures to hold the agents who fail to comply accountable, depending on the seriousness of the breach.

RESPONSIBILITIES

EMPLOYEES:

• To observe and ensure compliance with this policy, as well as with the provisions of the code of ethical conduct and, when necessary, to contact the board of directors for advice on situations that conflict with this policy or upon the occurrence of situations described therein.

THIRD PARTIES AND SUPPLIERS:

• Observe and ensure compliance with this Policy, as well as the provisions of the Code of Ethics and Conduct for Suppliers and, when necessary, activate the channels available at Dengine Informática for consultation on situations that conflict with this Policy or upon the occurrence of situations described therein.

BOARD OF DIRECTORS:

• Observe and ensure compliance with this policy, as well as with the provisions of the Code of Ethical Conduct and, when necessary, to contact the Executive Board for advice on situations that conflict with this policy or when situations described in it occur.
• Monitoring compliance with the guidelines set out in this policy, reviewing it annually, keeping it up to date to reflect any changes in the direction of Dengine Informática and supporting any doubts regarding the content and its application.
• Carrying out the Know Your Supplier process when prospecting, selecting, contracting and monitoring with quality and suitability criteria, in accordance with internal rules and procedures. In addition, report to the Board of Directors any signs of corruption on the part of suppliers when identified.
• Provide guidance to Dengine Informática on the applicability, interpretation and updating of laws or regulations related to the themes of this Policy.
• Ensure that the due diligence process is carried out in the context of M&A transactions when Dengine Informática is the buyer, including checks associated with compliance with the requirements of the Anti-Corruption Law.
• Independently assess the rules and procedures established in this Policy, mitigating risks in terms of management, controls and internal processes, and investigate cases of whistleblowing and report them to the Board of Directors.

ADDITIONAL DOCUMENTATION

• Law 12.846/13 (“Anti-Corruption Law”)
• Decree 8.420 of 2015
• Law No. 8.429/92 (“Administrative Improbity Law”)
• Law No. 8.666/93 (“General Bidding Law”)
• Decree-Law No. 2.848/40 (“Penal Code”)
• Principle 10 of the Global Compact (www.unglobalcompact.org)
• CGU Ordinances 909 and 910 of 2015
• CGU Normative Instructions No. 01 and 02 of 2015
• Code of Ethical Conduct
• Code of Ethics and Conduct for Suppliers
• Sustainability Policy
• Compliance Policy
• Internal rules that are constantly improved, approved by the competent authorities and made available to all employees.

GENERAL PROVISIONS

It is the responsibility of Dengine Informática's Management to amend this Policy whenever necessary. This Policy comes into force on the date of its approval by the Board of Directors and revokes any rules and procedures to the contrary.