Information Security Basic Policy

Mizuki Co., Ltd. (hereinafter referred to as “the Company”) is committed to protecting its information assets from threats such as accidents, disasters, and criminal acts in order to maintain the trust of our customers and society, the Company will implement information security measures company-wide based on the following policy.

1. Management Responsibility
The Company will take the lead under management initiative to continuously and systematically improve and enhance information security.

2. Establishment of Internal Structure
The Company will establish an organizational framework to maintain and improve information security and will define information security measures as formal internal rules.

3. Employee Commitment
All employees of the Company will acquire the necessary knowledge and skills required for information security and will ensure the effective implementation of information security practices.

4. Compliance with Laws and Contractual Requirements
The Company will comply with all laws, regulations, standards, and contractual obligations related to information security, and will meet the expectations of our customers.

5. Response to Violations and Incidents
In the event of violations of laws or contracts related to information security, or the occurrence of information security incidents, the Company will respond appropriately and endeavor to prevent recurrence.

December 20, 2025
Mizuki Co., Ltd.
Taichi Mizuki, Representative