ETHICS & INTEGRITY
Trust in technology begins with trust in business relationships. Fair dealing, accurate records and responsible use of information are essential perspectives for ethical decisions.
DIRECTION
Customer and partner relationships, technical information, external statements and personal data all involve responsibilities. In ambiguous situations, separate facts from interests and examine authority, evidence and records.
CONDUCT STANDARDS
Each item identifies the standard, what to check and the action when an issue is found. Implementation and its scope are reported separately with verified evidence.
StandardDo not improperly coordinate pricing, bids or trading terms, obtain competitors’ confidential information improperly, or use bargaining power to impose unfair conditions.
CheckCheck quotation, evaluation and ordering criteria and define what information may be shared with competitors or suppliers.
ActionDecline collusive requests or improper terms, record the facts and notify an authorised reviewer. Do not delete records to conceal the issue.
StandardDo not request, offer or accept benefits intended to influence awards, acceptance, selection or payment, including through third parties.
CheckCheck the business purpose, actual beneficiary, connection to the transaction, approval basis and applicable law and customer rules.
ActionReject improper demands and record the offer and response. Hold an unclear benefit for review before giving or accepting it.
StandardDo not conceal interests of yourself, family or personal business that may affect purchasing, evaluation or recruitment decisions.
CheckCheck relationships, financial interests and authority before selection or transactions. A person should not solely approve a matter involving their own interest.
ActionDisclose a conflict and arrange recusal or separate review. Record the decision basis and participants.
StandardDo not fabricate or alter test, acceptance, delivery, working-time or expense evidence. Do not present selected favourable results as the complete outcome.
CheckMatch source records, authors, dates, models or versions, changes and approval information.
ActionPreserve the original and record who corrected it, when and why. Communicate corrections affecting a contract or customer decision to the relevant party.
StandardUse drawings, source code, credentials, proposals and customer information only for permitted purposes. Do not move them to unapproved external services or personal accounts.
CheckCheck ownership, contractual use and disclosure rights, authorised readers and return or deletion obligations, including third-party rights in public material.
ActionContain unauthorised sharing through recovery, access restriction and incident response. Recheck disclosures before delivery or publication.
StandardProcess only necessary personal data and limit access by work responsibility. Do not permit shared accounts or unnecessary access after departure or contract end.
CheckReview collection grounds, recipients, accounts, permissions and retention or deletion rules. Match website inquiry and download handling to the published privacy notice.
ActionRestrict access or sharing after excessive permissions, misdelivery or suspected exposure and assess applicable incident and notification duties. Follow statutory retention where required.
StandardDo not present AI output as verified fact or error-free judgement. Do not submit customer secrets or personal data to external AI without checking authority and handling terms.
CheckReview data rights and sensitivity, false detection and bias, operating conditions, human review points and ways to stop or correct use.
ActionLimit use or disclosure when errors or rights risks appear and correct results. Explain the degree of automation and human responsibility to customers and users.
StandardDo not carry out a request that may conflict with a contract, law or authority solely because of a deadline or superior’s instruction.
CheckCheck the requester, requested action, applicable terms, records and conflicts. Distinguish suspicion from established facts.
ActionHold the affected action for appropriate review until concerns are resolved. Use the published concerns route for reports and do not retaliate for good-faith reporting.
StandardDo not evade applicable export controls, sanctions or trade restrictions, or supply suspect or untraceable parts as confirmed authentic.
CheckCheck counterparties, destination and end use, required permissions, suppliers, part numbers and manufacturing provenance.
ActionHold transactions or use when restrictions or counterfeiting are suspected for competent review. Assess segregation, replacement and customer notification.
IN PRACTICE
Specific considerations depend on the site and contract.
People, circumstances and evidence
Conflicts, relationships and authority
Relevant requirements and clarifications
Rationale, scope and changes
A PRACTICAL EXAMPLE
A basic performance assessment belongs to the model and items actually tested. It should not be generalised to other products or every installation. Relevant CREWAVE product pages identify the model, assessment items, validity and limitations.
Illustrative example for reviewINFORMATION & CONCERNS
General inquiries can address the content and scope of public ESG information. Do not send sensitive incident details, identifying information or evidence through general sales inquiries. The general inquiry channel is not presented as a dedicated reporting process.
WORKING PRINCIPLES
These are public conduct and review principles for work. Roles describe functions to designate for a task, not established departments or named appointments. Implementation and results require approved policies and records for the relevant period.
These ethical conduct principles cover sales/tenders, procurement/contracts/payment, R&D, customer/supplier information and external communications. Read them alongside contractual duties and approved internal rules.
Task owners identify conflicts, improper demands and record errors; approvers review appropriateness and evidence. Separate involvement where personal, family or related-business interests could affect judgement.
Do not give or request improper payments, hospitality or favours, collude, abuse bargaining power or falsify records. Review gifts/hospitality by purpose, recipient, circumstances and applicable rules; pause when appropriateness is unclear.
Check terms and conflicts, obtain proper approval, document contracts/acceptance/payment accurately, and record changes/exceptions. Preserve relevant records and refer suspected impropriety to an authorised review route.
Check selection rationale, approvals/changes, consistency across contracts/acceptance/payment, and publication sources. Record reasons for missing evidence or later corrections; exclude confidential customer, personal and business information from public materials.
The conduct principle prohibits dismissal, threats, retaliation, ridicule or other adverse treatment for good-faith reporting or cooperation. Limit identity/case information to necessary authorised roles and consider remedy with the affected person or representative. Check current availability, the CEO delivery route and data-handling information on the online concern page.
WORKING PRINCIPLES
These public management principles address confidentiality, integrity and availability. They do not assert completed implementation of specific controls or ISMS or ISO 27001 certification.
Identify customer drawings, source code, contracts, personal data and test records by purpose and sensitivity. Distinguish asset management, use and approval roles; review storage, external disclosure and retention needs. Exclude internal accounts, network layouts and vulnerability details from public information.
Limit access to people and scope needed for legitimate work. Recheck access on joining, transfer, departure or contract end and record approval/change/removal. Review reasons, ownership and expiry for shared or exceptional access; do not send passwords in documents or inquiry forms.
Consider information classification, recipient checks, safe transfer, screen/print handling and suspicious communications in role-based awareness. Before sharing, check recipients, purpose and minimum scope; contain and escalate suspected misdelivery/loss. The 2026 safety work plan includes security education, which does not establish complete information-security implementation.
Before outsourcing, remote maintenance or cloud use, check information sharing, access duration, subcontracting, incident contacts and return/deletion terms. Review customer restrictions and retain evidence of how accounts, access and held information are handled at closure.
Use a sequence of detection, authorised escalation, impact/spread assessment, safe containment and evidence preservation, recovery and prevention review. Protect records of timing, detection, impact, action and rechecks; review applicable duties and approval for external notification. This guidance does not claim ISMS or ISO 27001 certification.
KEEP THE CONVERSATION GOING
Ask us about public information and business applications.
Messages reach the general inquiry recipients and require company, contact, email and privacy consent. Please do not send sensitive incident details or identifying records through this channel.