Quality and Information Security Policy

The organization seeks continuous improvement in its processes and customer services. To this end, it has established a Quality and Information Security Management System based on the UNE-EN ISO 9001 standard for the following scope "Provision of consulting services in the field of cybersecurity and information technology. Operation of information systems. Sale of software licenses" and the UNE-EN ISO/IEC 27001 standard for the scope "Information systems that support consulting services in cybersecurity and information technology, workplace support, and the sale of software licenses, with software development activities being expressly excluded from the scope. In accordance with the applicable declaration of applicability." This policy will pursue the fulfillment of objectives and goals and greater control of processes, enabling us to achieve customer satisfaction, guarantee the highest level of information security, and continuously improve the system. Our policy is based on the following points:

• Resolving any kind of need or requirement of our customers by putting our organization, human and technical resources at their disposal to achieve customer satisfaction while guaranteeing information data protection
• Commitment to comply with all requirements, whether legal, contractual, information security or any other kind, that might be applicable to us based on our activity.
• Achieving and maintaining high levels of customer satisfaction.
• Commitment to promote an understanding and dissemination of our Quality and Information Security Policy within the organization, through continuous training and communication to our employees.
• Guiding our company's personnel to achieve commitment to quality and information security, aiming at at preventing non-compliance and errors by using tools such as weekly monitoring of the work performed.
• Providing the reference framework of for the establishment of the proposed quality and information security objectives.

The Management of Midway Technologies ensures that this Quality and Security Policy is adjusted to the purpose of the organization, communicated, reviewed, understood and implemented by the company’s personnel in order to achieve continuous improvement in the effectiveness of the Quality Management and Information Security Systems.

January 22, 2026

Signed: Management

Revision: 03