TestMu AI Human Rights Statement

1. Our Commitment

At TestMu, respect for human rights is part of how we operate our business: in our own workplaces, in the way our technology is built and used, and in the relationships we hold with suppliers, partners and customers.

This Statement sets out the human rights we are committed to respecting, how that commitment is governed, and how anyone affected by our operations can raise a concern.

2. Frameworks We Align To

Our approach is guided by internationally recognized standards:

• The United Nations Guiding Principles on Business and Human Rights
• The International Bill of Human Rights, comprising the Universal Declaration of Human Rights and the two International Covenants
• The International Labour Organization Declaration on Fundamental Principles and Rights at Work, and the ten ILO fundamental conventions: Nos. 29 (Forced Labour, 1930), 105 (Abolition of Forced Labour, 1957), 87 (Freedom of Association and Protection of the Right to Organise, 1948), 98 (Right to Organise and Collective Bargaining, 1949), 100 (Equal Remuneration, 1951), 111 (Discrimination (Employment and Occupation), 1958), 138 (Minimum Age, 1973), 182 (Worst Forms of Child Labour, 1999), 155 (Occupational Safety and Health, 1981) and 187 (Promotional Framework for Occupational Safety and Health, 2006)
• The OECD Guidelines for Multinational Enterprises on Responsible Business Conduct
• The United Nations Sustainable Development Goals, in particular Goals 5, 8, 10 and 16
• The UK Modern Slavery Act 2015, where applicable, and we take account of the California Transparency in Supply Chains Act of 2010 where applicable

We are committed to conducting business in compliance with the labor and human rights laws of every jurisdiction in which we operate. Where national law and international standards differ, we follow the higher standard, and where they conflict we seek ways to honor the principles of internationally recognized human rights.

3. What We Commit To

3.1 Freely Chosen Employment

We prohibit forced labor, bonded labor, indentured labor, involuntary prison labor, slavery and human trafficking in our operations and in our value chain. No worker is required to lodge identity documents or deposits as a condition of employment, and workers are free to leave employment on reasonable notice.

3.2 No Child Labor

We do not employ anyone below the minimum legal working age in the relevant jurisdiction, and we expect the same of our suppliers. Young workers, where lawfully employed, are not assigned hazardous work or night work.

3.3 Non-Discrimination and Equal Opportunity

We recruit, develop, promote and reward on merit. We do not discriminate on the basis of race, color, ethnicity, national origin, caste, religion or belief, sex, gender, gender identity or expression, sexual orientation, pregnancy or parental status, marital status, age, disability, genetic information, veteran status, political opinion, trade-union membership, or any other characteristic protected under applicable law.

3.4 A Workplace Free from Harassment and Retaliation

We maintain zero tolerance for harassment, sexual harassment, bullying, victimization and retaliation: every substantiated breach is acted on. Our Global Anti-Harassment & Respectful Workplace Policy applies in every jurisdiction, and a statutory Internal Committee operates in India under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013, as described in the Prevention of Sexual Harassment (POSH) Policy. Complaints within the Internal Committee's statutory jurisdiction are handled by the Committee under the Prevention of Sexual Harassment (POSH) Statement; all other complaints are handled under the Global Anti-Harassment & Respectful Workplace Policy.

3.5 Fair Wages, Working Hours and Benefits

We pay at or above the applicable legal minimum and provide the benefits required by law in each location. Working hours comply with applicable law, overtime is managed in accordance with applicable law and compensated where required, and wages are paid on time and without unlawful deduction.

3.6 Freedom of Association

We respect the right of our people to associate freely, to join or refrain from joining a workers' organization, and to bargain collectively where applicable law provides for it, without fear of reprisal.

3.7 Health, Safety and Wellbeing

TestMu is a SaaS company. Our health and safety risks are those of an office-based and remote technology workforce: workplace environment and ergonomics, electrical and fire safety, travel, and psychological wellbeing. We commit to providing and maintaining a safe workplace, equipment and systems of work, and to conducting business in compliance with occupational health and safety law in every location where we operate.

We identify and control hazards before they cause harm, maintain evacuation plans with periodic drills, and provide first aid and access controls at our offices. Accidents, injuries and near misses are required to be reported to Human Resources with the facilities function, investigated for root cause and tracked to closure. Wellbeing support, including flexible working and mental-health awareness, is available. Executive Leadership is accountable for health and safety performance; Human Resources with the facilities function own the program day to day.

Health and safety performance, including reportable incidents, lost-time injuries and workplace fatalities, is reviewed by Executive Leadership.

3.8 Privacy and Data Protection

The right to privacy is engaged by almost everything a software company does. We operate an information security management system certified to ISO/IEC 27001 and 27017 and a privacy information management system certified to ISO/IEC 27701, with SOC 2 Type II examination annually, and our Privacy Policy, Information Security Policy and contractual commitments govern how personal data of employees, customers and their users is handled.

3.9 Human Rights and Artificial Intelligence

As an AI-native company we recognize that AI systems can affect human rights through bias, opacity, unsafe automation and the misuse of personal data. TestMu's AI management system is aligned with ISO/IEC 42001, with certification in progress, and references the NIST AI Risk Management Framework, the OECD AI Principles and applicable obligations under the EU Artificial Intelligence Act. AI systems are designed, deployed and monitored under human oversight with transparency, fairness, accountability, privacy and security as conditions of release. AI systems are assessed for potential impact on individuals before release under the oversight of the Information Security & Compliance Steering Committee (ISCSC, acting as the AI Governance Committee), and our responsible-AI commitments and applicable terms of service prohibit uses of the platform that would violate the rights of others.

4. Our Value Chain

Our most significant human rights exposure sits with the organizations we buy from and partner with. Suppliers and partners are expected to uphold the standards in this Statement and in our Supplier Code of Conduct, which addresses labor and human rights, health and safety, environment, ethics, data protection and responsible AI use, and provides for verification and remediation.

Human rights criteria form part of supplier onboarding and renewal under our supplier risk-management process. Suppliers that process customer personal data on TestMu's behalf are recorded in our published sub-processor list. Where a supplier falls short, we seek corrective action; where a supplier will not remediate a serious breach, we may suspend or end the relationship, subject to the applicable agreement.

5. Governance and Due Diligence

6. Review

This Statement is reviewed at least annually by Human Resources and Legal, and whenever there is a material change in our operations, structure or risk profile. It is reviewed by the ISCSC, approved by the Chief Executive Officer on behalf of Executive Leadership and published on the TestMu website.