The Information Security and Privacy Policy is formulated based on the following aspects and is continuously improved:
1. Development, management, usage, and operation of Authme products.
2. Information security and privacy regulations established by national or regulatory organizations.
3. Information security and privacy contracts signed with partners/third parties and the obligations that must be fulfilled.
4. Potential information security and privacy incidents.

The fundamental principles to be adhered to under the Information Security and Privacy Policy are as follows:
1. Establish an information security and privacy management system in accordance with ISO/IEC 27001:2022 and ISO 27701:2019 to ensure the confidentiality, integrity, and availability of information assets, meeting the expectations of stakeholders.
2. Strictly comply with Taiwan’s applicable laws and regulations on information security and privacy relevant to the scope of certification.
3. Continuously improve the performance of the information security and privacy management system.
4. Review the Information Security and Privacy Policy at least once a year.
5. Communicate the effectiveness of its implementation to stakeholders of the company.