Add-On Products Information Security Policy

Add-On Products maintains an Information Security Management System (ISMS) aligned with ISO/IEC 27001:2022, covering the confidentiality, integrity, and availability of our information assets and our customers' data.

Information security is a management responsibility at Add-On Products. It is not delegated — senior management owns the ISMS and is accountable for its effectiveness.

Our information security objectives are to:

• Protect our information systems and sensitive information
• Maintain strong access controls
• Preserve the integrity of our data and systems
• Prevent loss of personal data
• Ensure business continuity and rapid recovery from disruption

This policy is reviewed at least annually, or whenever significant changes occur in our business, regulatory environment, or operations.

For more on our security and compliance program, see our Disaster Recovery Plan, Business Continuity Plan, and SOC articles in this section.