Management System Policy.

Journi Limited is committed to delivering technology services that meet client requirements while protecting the information entrusted to us.

Our management system provides a framework for consistent service delivery, information security and continual improvement. It supports our strategic direction across the design, development and management of digital solutions, web and mobile applications, custom software, technology consultancy and technical support.

Scope

This policy applies to the people, processes, information assets and infrastructure involved in delivering and supporting Journi’s services.

It covers employees, contractors and relevant third-party collaborators across all working locations, including remote environments, and the cloud services, development environments and collaboration platforms used in our operations.

Quality and client satisfaction

We are committed to understanding client needs and delivering services that meet agreed requirements and applicable obligations.

We establish and maintain processes that support consistent delivery, clear responsibilities and appropriate records throughout each engagement, from initial consultation through development, deployment and ongoing support.

We seek to improve service quality, responsiveness, delivery performance and client satisfaction through feedback, performance monitoring and corrective action.

Information security

We are committed to protecting the confidentiality, integrity and availability of client data, source code, intellectual property and operational information throughout the service lifecycle.

We assess information security risks and apply proportionate safeguards. Security is integrated into our technology and operational decisions through shared responsibility, complementary controls, least privilege and appropriate information handling.

Our Information Security Policy sets out these commitments in more detail.

Applicable requirements

We are committed to satisfying applicable legal, regulatory, contractual and other requirements relevant to our services and information security.

We identify and review these requirements, including relevant data protection obligations and commitments to clients and suppliers, and address changes through our management processes.

Objectives and planning

This policy provides the framework for setting and reviewing quality and information security objectives.

Objectives reflect our strategic direction, organisational context, relevant interested parties’ requirements, risks, opportunities and performance. Quality objectives address service conformity and client satisfaction. Information security objectives address regulatory compliance, client data protection, operational resilience, security awareness and risk management.

Objectives are documented and measurable, where practicable for information security objectives. Plans identify the actions, responsibilities, resources, timescales and methods needed to evaluate results. Progress is monitored and reviewed through the management review process.

Leadership and responsibilities

Top Management approves this policy, ensures that it supports Journi’s strategic direction and provides the resources needed for an effective management system.

The Management System Manager coordinates the system, maintains this policy and reports on performance and improvement needs.

Operational and technology leaders embed these commitments into service delivery, technical decisions and supporting controls. Those responsible for people management ensure that personnel receive appropriate communication, training and awareness.

All personnel are responsible for understanding and applying the requirements relevant to their work.

Continual improvement

We are committed to continually improving the suitability, adequacy and effectiveness of our management system.

We use client feedback, performance information, risk assessments, internal audits, incidents, corrective actions and management reviews to identify improvements, address causes of problems and evaluate the effectiveness of actions taken.

Communication and review

This policy is communicated to personnel during onboarding and through ongoing internal communication and training. Relevant personnel are required to understand and apply its commitments.

It is made available to clients, suppliers and other relevant interested parties through our website and other appropriate channels.

The Management System Manager coordinates a review at least annually and earlier when significant changes, audit findings or changes in applicable requirements warrant it. Revisions require Top Management approval and are communicated to affected personnel. Controlled copies and previous editions are maintained through our internal document-control process.