


Information Security Basic Policy

To ensure the continuous maintenance and development of our business activities, CAST Inc. (hereinafter referred to as "the Company") shall protect all information assets under its handle from threats such as accidents, disasters, and crimes. In order to meet the trust of society, the Company will implement company-wide information security initiatives based on the following policy.
1. Establishment and Continuous Improvement of the Information Security Management System
The Company shall establish a management system to ensure information security and arrange the necessary resources and organization. Furthermore, led by executive management, the Company will promote the continuous improvement and enhancement of information security measures.
2. Compliance with Laws, Regulations, and Contractual Requirements
The Company shall comply with all laws, regulations, standards related to information security, as well as contractual obligations agreed upon with our customers.
3. Provision of Education and Training for All Employees
The Company shall regularly and continuously provide all employees with the education and training on the knowledge, skills, and internal regulations required to ensure information security, thereby guaranteeing the success of our information security initiatives.
4. Response to Violations and Information Security Incidents
In the event of any violation of laws, breach of contract, or incident related to information security, the Company shall take appropriate action, striving to minimize the impact, investigate the cause, and prevent recurrence.
Date of Enactment: February 6, 2026
CAST Inc.
Kei Nakatsuma
President and CEO