RocFortis
COMPLIANCE
GUIDELINES

The RocFortis Group is committed to the highest standards of integrity, safety and ethical responsibility. Our compliance guidelines define the principles by which we work with our partners, customers and employees worldwide. These guidelines ensure legally compliant, transparent and responsible management in the areas of intelligence, investigation, security and defense.

Our partnerships are based on the following core values:

1. Legal compliance: RocFortis strictly adheres to national and international laws, regulations and compliance standards, especially in sensitive sectors such as security, defense and technology.
2. Integrity & transparency: All business processes must be fair, traceable and documented. We expect our partners to uphold the same ethical principles.
3. Data protection & confidentiality: The protection of sensitive information is our top priority. All data exchange is subject to the highest security standards in accordance with GDPR, ISO 27001 and other relevant guidelines.
4. Responsible use of technology: The use of Foreus AI, QFortis software & hardware solutions and other security and intelligence technologies must always be ethical, legally compliant and security-oriented.
5. Anti-corruption & conflicts of interest: Corruption, bribery or unethical influence peddling are unacceptable under any circumstances. Any form of conflict of interest must be disclosed immediately.

As RocFortis operates in safety-critical areas, strict safety measures are essential:

• Identity verification & due diligence: Every new business partner is evaluated through background checksand sanctions list checks.
• Access and data control: Only authorized persons are granted access to confidential information.
• Cybersecurity standards: All IT and communication systems are subject to the highest security and encryption measures.

RocFortis is committed to complying with international human rights standards. Our business partners must ensure that:

• Fair working conditions are guaranteed.
• No child or forced labor exists in the supply chain.
• Environmentally friendly technologies & sustainability are promoted.

Compliance with international sanctions and export control laws is mandatory for all business partners. This includes

• Compliance with embargo and trade restrictions
• Transparency for dual-use goods (civilian and military use)

All partners and employees are obliged to report potential violations of these guidelines immediately. RocFortis provides secure and anonymous channels for this purpose in order to identify and address compliance risks at an early stage.

Violations of our compliance guidelines can lead to:

• Immediate termination of the cooperation
• Consequences under criminal law
• reputational damage for all parties involved.

These compliance guidelines are binding for all employees, partners and contractors. Compliance with these standards is the basis for successful cooperation with RocFortis.

We reserve the right to update these guidelines regularly in order to respond to new legal and geopolitical developments.