Our corporate group is aware that the proper protection of information assets held by the Group, including information entrusted to us by clients who use our services, from various information security-related threats is a vitally important responsibility. In accordance with this thinking, we hereby declare that we will proactively work to establish, operate, and maintain an information security management system by setting forth and implementing a basic policy on information security.

1. We shall comply with laws, regulations, and other norms and standards related to information security.
2. We shall take organizational, human, physical, and technical safety management measures through ISMS activities to work on and firmly put in place information security measures.
3. We shall continuously review and improve management systems related to information security in line with changes in social conditions and the environment.

May 28, 2021

Kotaro Sawada, Representative Director

ZOZO, Inc.