1. Purpose
LambdaTest Inc. d/b/a TestMu ("TestMu" or "the Company") buys, hardware, software, professional services and facilities from organizations globally. The conduct of those organizations affects our people, our customers and the communities we operate in, and it forms part of how TestMu itself is assessed.
This Supplier Code of Conduct sets out the minimum standards we expect of each supplier, vendor, reseller, distributor, consultant, agent, intermediary and business partner that works with or on behalf of TestMu ("Suppliers"), and of their own employees, sub-contractors and supply chains.
Compliance with this Code is a condition of doing business with TestMu. It supplements, and does not replace, the obligations in any contract. Where this Code and an agreement differ, the stricter requirement applies, except that audit, remediation and termination rights are exercised as the agreement provides.
2. Legal Compliance
Suppliers must comply with all applicable laws, regulations and mandatory standards in every jurisdiction in which they operate, including those governing labor and employment, health and safety, the environment, anti-bribery and anti-corruption, competition, trade control, sanctions, export control, intellectual property, data protection and artificial intelligence. Where this Code and local law differ, Suppliers must apply the higher standard and inform TestMu of the conflict.
3. Labor and Human Rights
Suppliers must respect the labor and human rights of the people who work for them, consistent with the ILO fundamental conventions (Nos. 29, 105, 87, 98, 100, 111, 138, 182, 155 and 187), the UN Guiding Principles on Business and Human Rights, the UK Modern Slavery Act 2015 and the California Transparency in Supply Chains Act of 2010, where applicable.
| Standard | What we require |
|---|---|
| Freely chosen employment | No forced, bonded, indentured or involuntary prison labor, slavery or human trafficking. No retention of identity documents or deposits. Workers free to leave on reasonable notice. |
| No child labor | No employment below the legal minimum working age. Young workers, where lawfully employed, are not given hazardous or night work. |
| Non-discrimination | Recruitment, pay, development and promotion on merit, free from discrimination on any characteristic protected by applicable law. |
| Harassment-free workplace | Prohibition of harassment, sexual harassment, bullying, abuse, threats and retaliation; a functioning complaints mechanism. |
| Wages, hours and benefits | Wages at or above the legal minimum, paid on time, without unlawful deduction; working hours and overtime within legal limits; statutory benefits provided. |
| Freedom of association | Respect for workers' rights to associate, organize and bargain collectively where applicable law provides for it, without reprisal. |
Suppliers must be able to demonstrate compliance with these standards on request and must extend equivalent requirements to their own sub-contractors and suppliers.
4. Health and Safety
Suppliers must provide a safe and healthy working environment, identify and control hazards, provide appropriate training and protective equipment, prepare for emergencies, record and investigate incidents, and comply with applicable occupational health and safety law. Suppliers working on TestMu premises must follow our site safety rules and report any incident or near miss to us without delay.
5. Environment
Suppliers must operate in a way that manages their environmental impact and complies with applicable environmental law and permits. We expect Suppliers to:
- measure and work to reduce their energy consumption and greenhouse-gas emissions;
- manage waste responsibly, including the segregation, reuse and authorized recycling of electronic waste;
- use water and materials efficiently and avoid unnecessary single-use materials; and
- provide environmental data on request, including emissions data or carbon-reporting capability where the Supplier provides cloud or infrastructure services.
Environmental practices are considered in supplier evaluation and renewal, proportionate to the goods or services provided.
6. Business Ethics and Integrity
6.1 Anti-Bribery and Anti-Corruption
Suppliers must not offer, give, request or accept a bribe, kickback, facilitation payment or any improper advantage, whether directly or through a third party, and whether involving a government official or a private party. Suppliers must maintain accurate books and records, and provide the Third-Party Anti-Bribery and Anti-Corruption Undertaking annexed to our Anti-Bribery and Anti-Corruption Statement where required by our due-diligence outcome or the applicable agreement.
6.2 Conflicts of Interest
Suppliers must disclose any actual or potential conflict of interest, including any relationship between the Supplier's owners or personnel and TestMu personnel involved in the selection or management of the Supplier.
6.3 Gifts and Hospitality
Suppliers must not offer gifts, hospitality, travel or entertainment to TestMu personnel that could improperly influence a business decision. Cash and cash equivalents, including gift cards and vouchers, must never be offered.
6.4 Fair Competition and Trade
Suppliers must compete fairly, must not participate in price fixing, bid rigging or market allocation, and must comply with applicable sanctions, export-control and trade laws.
6.5 Accurate Disclosure
Suppliers must deal with TestMu honestly, must not misrepresent their capabilities, certifications or ownership, and must notify us promptly of any investigation, enforcement action or allegation that could affect their ability to meet this Code.
7. Confidentiality, Data Protection and Information Security
Suppliers must protect TestMu, customer and personal information entrusted to them. Where a Supplier processes personal data on our behalf, it must do so only on our documented instructions, apply appropriate technical and organizational measures, meet the obligations of applicable data protection law, support data-subject requests, and enter into the required data processing terms including transfer safeguards.
Suppliers with access to TestMu systems or data must:
- maintain an information security program proportionate to the risk;
- restrict access to those who need it, and patch and monitor their systems;
- notify TestMu of any actual or suspected security or privacy incident affecting our data without undue delay, and in any event within the timeframe set out in the contract, through the contact set out in the Supplier's contract or, where no other contact is specified, to security@testmuai.com (security incidents) or privacy@testmuai.com (privacy incidents); and
- obtain our prior written authorization before sub-processing.
8. Responsible Use of Artificial Intelligence
TestMu's AI management system is aligned with ISO/IEC 42001, with certification in progress, and references the NIST AI Risk Management Framework, the OECD AI Principles and applicable obligations under the EU Artificial Intelligence Act. AI systems are designed, deployed and monitored under human oversight with transparency, fairness, accountability, privacy and security as conditions of release. We expect the same discipline from our Suppliers.
Where a Supplier develops, provides or uses AI systems in delivering goods or services to TestMu, the Supplier must:
- disclose the use of AI, including the models or third-party AI services involved;
- maintain human oversight and accountability for AI-assisted decisions affecting TestMu, our people or our customers;
- take reasonable steps to identify and mitigate bias, inaccuracy and unsafe behavior;
- not input TestMu confidential information or personal data into third-party AI services that retain, share or train on inputs, without our prior written authorization; and
- not use TestMu or customer data to train models made available to other parties, and not otherwise use TestMu or customer data to train models except as permitted by the applicable agreement.
9. Intellectual Property
Suppliers must respect intellectual property rights, use TestMu marks and materials only as authorized, comply with open-source license obligations, and ensure that deliverables do not infringe the rights of any third party.
10. Raising Concerns
Suppliers and their workers may report a concern about conduct connected with TestMu (including breaches of this Code) through any of the following channels:
| Channel | Who may use it | Address |
|---|---|---|
| Ethics and whistleblower channel | Anyone, inside or outside the Company, including employees, contractors, customers, suppliers and partners. Reports may be made anonymously where local law permits. Reports may be made anonymously by email. | whistleblower@testmuai.com |
| Human Resources | Employees and consultants, for workplace matters | hr@testmuai.com |
| Customer, supplier and contractor matters | Service, contractual or relationship complaints and governance enquiries. Conduct concerns received here are routed to the ethics and whistleblower channel. | support@testmuai.com |
| Privacy and security | Data protection requests and the Data Protection Officer; security vulnerabilities and incidents | privacy@testmuai.com / security@testmuai.com |
Reports to the ethics and whistleblower channel are received by Human Resources, which may engage Legal, Governance, Risk & Compliance or external advisers. Reports are acknowledged normally within five business days where contact details are provided, assessed for severity and conflict of interest, investigated independently of the business area concerned, and closed with a recorded outcome and tracked corrective action. Serious matters and matters involving senior leadership are investigated independently of management and overseen by the Information Security & Compliance Steering Committee (ISCSC). Nothing in this document prevents any person from reporting a concern to a government, regulatory or law-enforcement authority, and no confidentiality obligation owed to the Company restricts such a report.
Security and privacy incidents affecting TestMu data or systems are notified as set out in section 7, not through the channels above.
TestMu prohibits retaliation of any kind against any person who, in good faith, raises a concern, reports a suspected breach or assists an investigation, whether or not the concern is substantiated. Retaliation is itself a breach of the Code of Business Conduct & Ethics and is subject to disciplinary action following investigation. Knowingly making a false report is also a breach.
TestMu expects Suppliers to maintain their own confidential reporting mechanism and equivalent protection. Reporting, confidentiality, non-retaliation and investigation are governed in full by our Whistleblower Policy.
11. Verification, Remediation and Consequences
| Mechanism | How it works |
|---|---|
| Due diligence | Risk-based assessment at onboarding and at renewal under our supplier risk-management process, proportionate to what the Supplier provides. Suppliers that process customer personal data on TestMu's behalf are recorded in our published sub-processor list and are subject to a data processing agreement. |
| Self-assessment | Suppliers may be asked to complete questionnaires and to provide certifications, audit reports or policy documents. |
| Right to audit | TestMu, or an independent party acting for it, may audit compliance with this Code, and the Supplier must cooperate with any such audit on reasonable notice and subject to confidentiality. |
| Corrective action | Where a shortfall is identified, the Supplier must agree and implement a corrective action plan within an agreed period. |
| Consequences | Persistent or serious breach may result in suspension, termination of the contract, and exclusion from future engagement. Suspected criminal conduct may be reported to the competent authorities, and is reported where the law requires. |
This Code is incorporated by reference into TestMu's supplier agreements.
12. Acknowledgement
Suppliers are required to acknowledge this Code at onboarding and to re-confirm compliance annually on request. Acknowledgement may be given by signature, by acceptance in our procurement system, or by acceptance of contractual terms that incorporate this Code by reference.
13. Review
This Code is reviewed at least annually by Governance, Risk & Compliance with the procurement function. It is reviewed by the ISCSC and is approved by the Chief Executive Officer on behalf of Executive Leadership.