At BeOneSec, we are committed to ethical, responsible, and transparent conduct. For this reason, we provide all stakeholders—both internal and external—with the following formal mechanism to submit grievances, complaints, or reports, ensuring a clear, confidential process free from retaliation.

This policy applies to employees, clients, suppliers, collaborators, partners, academic institutions, and any other person or organization related to our activity.

1. How to submit a grievance or complaint

BeOneSec offers the following channel to submit a grievance, complaint, or report related to the company or its operations:

[email protected]

This channel is available to internal and external stakeholders.

2. Grievance and complaints handling process

All communications received will be handled confidentially, impartially, and diligently.

2.1 Grounds for accepting a grievance

We will accept complaints related to:

• Conduct contrary to ethics, the law, or the company’s values.

• Regulatory or contractual non-compliance.

• Practices that may negatively affect people, communities, or the environment.

• Harassment, discrimination, or unfair treatment.

• Misuse of the company’s services.

2.2 Process steps and estimated timelines

Receipt of the grievance
Acknowledgement of receipt within a maximum of 7 calendar days.

Initial assessment
Review to determine whether the matter meets the criteria to be treated as a formal grievance.

Investigation and analysis
Collection of relevant information and, where applicable, request for additional clarifications.

Resolution
Communication of the decision and any corrective actions adopted, where appropriate.

The estimated timeframe to complete the process is 30 to 45 days, depending on the complexity of the case.

2.3 Resolution

BeOneSec will facilitate an appropriate resolution, which may include:

• Corrective measures.

• Changes to internal processes.

• Recommendations or preventive actions.

• Other solutions proportionate to the matter reviewed.

3. Communication and response

During the process, the company commits to:

• Periodically informing the reporting person about the status of their grievance and progress made.

• Confirming in writing once a resolution has been achieved.

If a communication is not accepted as a grievance, BeOneSec will provide a clear, reasoned explanation outlining the grounds for that decision.

4. Whistleblower protection policy

BeOneSec guarantees the protection of all individuals who use this mechanism in good faith.

4.1 Commitment against retaliation

The company does not tolerate any form of retaliation against individuals who submit a complaint or report legitimately, whether internally or externally.

4.2 Consequences in case retaliation is identified

Any act of retaliation will be considered a serious misconduct and may result in:

• Disciplinary measures.

• Internal sanctions.

• Legal action, where applicable.

4.3 Protection mechanisms

To ensure the safety of reporting persons:

• The identity and shared information are kept confidential.

• Access to information is restricted solely to those responsible for managing the process.

• Potential risks to the reporting person are assessed, and preventive measures are adopted when necessary.

5. Principles of the grievance mechanism

This mechanism is governed by the following principles:

• Confidentiality

• Impartiality

• Transparency

• Protection against retaliation

• Continuous improvement