Skip to main content

QUALITY AND INFORMATION SECURITY POLICY

SOSMATIC SL mission is to offer a fully personalized, comprehensive IT assistance service that stands out for its quality and transmits the company’s core values.

The management of SOSMATIC demonstrates its commitment to the quality and information security management system within the organization. Its main objective is to achieve the satisfaction expected by clients through established processes based on a continuous improvement approach. This guarantees the continuity of information systems while minimizing the risk of damage and ensuring compliance with established objectives to safeguard the confidentiality, integrity, and availability of information at all times. To this end, the company assumes its commitment to quality and information security in accordance with the UNE-EN ISO 9001 and ISO/IEC 27001 reference standards, whereby Senior Management establishes the following principles:

  1. Ensure the satisfaction of our clients, including all stakeholders interested in the company’s results, and meet the demands and requirements specified for each service.

  2. Pursue excellence and continuous improvement by identifying opportunities for improvement in both management and relationships with clients and suppliers. Efforts will be directed not only toward controlling and correcting non-conformities but also toward preventing their causes, with optimization as the ultimate goal.

  3. Ensure the confidentiality of the data managed by the company, as well as the availability and integrity of the information systems, both in the services offered to clients and in internal management, preventing any unauthorized alterations to information.

  4. Ensure responsiveness to emergency situations, restoring the operation of critical services in the shortest possible time.

  5. Establish appropriate measures for risk treatment derived from the identification and evaluation of assets.

  6. Analyze quality indicators and monitor their progress to understand and guarantee the service and quality level desired by our clients.

  7. Disseminate quality and information security objectives and criteria across all levels of our organization to consolidate the continuous improvement process in all activities carried out within the company.

  8. Motivate and train all personnel working within the organization, both for the correct performance of their duties and to act in accordance with the requirements imposed by applicable legislation, commitments to stakeholders, reference standards, and any other applicable regulations, providing a suitable environment for process operations.

  9. Guarantee the continuous analysis of all relevant processes, establishing the appropriate improvements in each case based on the results obtained and the established objectives.

  10. Ensure the correct condition of facilities and appropriate equipment, so that they align with the company’s activities, objectives, and goals.

This Quality and Information Security Policy applies to all SOSMATIC personnel, as well as to the collaborators and suppliers with whom they jointly work. Likewise, as determined by the Quality and Security Committee, it may be communicated to stakeholders—particularly clients and suppliers—in order to involve them in the continuous improvement of the system.

Barcelona, June 17, 2026

David Casas Cartagena

Administrator