Information Security Policy

Laser Digital Japan Co., Ltd. (hereinafter referred to as "the Company") recognises that the appropriate management of information is a critical management issue. To ensure customers can use our services with confidence, we shall endeavour to protect and appropriately manage information in accordance with this Information Security Policy (hereinafter referred to as "this Policy").

1. Definitions

The definitions of key terms used in this Policy are as follows.

(1) Information Assets

・　"Information assets" refer to the information itself and the information systems that handle it. This includes the hardware, software, networks, and other components that constitute the information systems.

(2) Information Security

・　"Information security" refers to maintaining the confidentiality, integrity, and availability of information assets.

・　Confidentiality: A state where only authorised individuals can access the information

・　Integrity: A state where accurate information is stored and processed correctly

・　Availability: A state where information can be effectively utilised when required

2. Scope of Application

The scope of this policy covers all information assets held by the Company, all its officers and employees, and all external contractors.

3. Management and Operational Framework

・　To establish, maintain, and enhance the Company's information security management and operational framework, the responsible structure, roles, and persons in charge shall be clearly defined, along with the duties and authority of the relevant employees.

・　The Corporate Officer in charge of IT systems shall be the person with overall responsibility for implementing the Company's information security measures.

4. Formulation of Information Security Measures

When formulating information security measures, we shall undertake continuous improvement of countermeasures based on risk analysis of information assets, including measures against cyber-attacks and internal misconduct.

5. Awareness and Training

We shall ensure awareness among our officers and employees regarding compliance with laws, regulations, and rules concerning information security, this Policy, and internal regulations established based on this Policy. This shall be achieved through methods enabling constant internal access, alongside regular educational activities.

6. Obligation to Comply

All officers and employees shall recognise the importance of information security and comply with laws, regulations, and rules concerning information security, this Policy, and internal regulations established based on this Policy.

7. Audit

The effectiveness and appropriateness of information security management shall be verified through self-assessment, internal audits, external audits, and other means.

Established on 17 October 2025

Laser Digital Japan Co., Ltd.