First Edition

Basic Information Security Policy

Guidelines for Action

1. We will implement appropriate organizational and technical measures to ensure the protection of the confidentiality, integrity, and availability of information assets, and respond to evolving information technologies and new threats.
2. We will provide information security training to all employees, ensure thorough understanding of this policy, and strive to raise and maintain awareness.
3. We will establish objectives related to the management system and information security, review them periodically, and implement continuous improvement to maintain them.
4. We will delegate responsibility and authority to the management representative to implement, maintain, and improve the management system.

Enacted June 12, 2026

Arches Co., Ltd.

CEO

Hiroki Kato