Anti-Slavery & Human Trafficking Policy

Modern slavery is a crime and a violation of fundamental human rights. It takes various forms, such as slavery, servitude, forced and compulsory labor, and human trafficking, all of which have in common the deprivation of a person's liberty by another in order to exploit them for personal or commercial gain.

Cynox Security LLP is committed to acting ethically and with integrity in all our business relationships and to implementing and enforcing effective systems and controls to ensure modern slavery is not taking place anywhere in our own business or in any of our supply chains.

We are committed to ensuring there is transparency in our own business and in our approach to tackling modern slavery throughout our supply chains, consistent with our disclosure obligations under the UK Modern Slavery Act 2015 and international standards.

This policy applies to all persons working for us or on our behalf in any capacity, including:

• Employees at all levels, directors, officers, agency workers, and seconded workers.
• Contractors, external consultants, third-party representatives, and business partners.
• Suppliers, sub-contractors, technology vendors, and service providers across global jurisdictions.

This policy does not form part of any employee's contract of employment and we may amend it at any time.

Cynox Security prohibits any form of modern slavery within its operations. Specifically, we strictly mandate that:

We operate a zero-tolerance policy toward modern slavery and human trafficking in our supply chain. As part of our contracting processes, we include specific prohibitions against the use of forced, compulsory, or trafficked labor.

Our due diligence procedures include:

• Risk-profiling suppliers based on geographic location, sector vulnerability, and operational scope.
• Requiring key suppliers to confirm compliance with the UK Modern Slavery Act 2015 and equivalent laws.
• Reserving audit rights to verify working conditions and employment verification processes.
• Terminating relationships with suppliers who fail to remediate identified modern slavery risks.

As a technology and cybersecurity consultancy, our primary supply chain comprises software licenses, cloud infrastructure, professional services, and hardware procurement.

We evaluate risk on an ongoing basis through internal controls, vendor risk assessment questionnaires, and third-party compliance verification tools. Higher-risk vendor categories are subjected to deeper annual audits and document verifications.

The prevention, detection, and reporting of modern slavery in any part of our business or supply chains is the responsibility of all those working for us or under our control.

If you suspect or become aware of any instance of modern slavery, servitude, or human trafficking, you are encouraged to notify your manager or our Compliance Officer immediately.

Training on this policy, and on the risk our business faces from modern slavery in its supply chains, forms part of the induction process for all individuals who work for us.

Our zero-tolerance approach to modern slavery must be communicated to all suppliers, contractors, and business partners at the outset of our business relationship with them and reinforced as appropriate thereafter.

The Designated Compliance Officer and executive leadership team have overall responsibility for ensuring this policy complies with our legal and ethical obligations, and that all those under our control comply with it.

This policy is reviewed annually to ensure its continued effectiveness and alignment with evolving statutory requirements and global industry standards.