Information Security Policy

10X Co., Ltd. (“the Company”) is committed to providing safe and reliable services and to maintaining the lasting trust of our customers and partners. As a responsible member of the information and communications industry, we strive to ensure robust information security in accordance with the following principles, thereby contributing to the sound development of society.

1. Recognition of Importance
   We recognize the importance of information security in modern society and endeavor to build a safe, secure, and convenient communication network environment while properly protecting all information assets.
2. Legal and Ethical Compliance
   Protecting information is a fundamental element of our business operations and a vital corporate responsibility. All executives and employees shall strictly observe the confidentiality of communications and comply with applicable laws, regulations, and internal rules related to information security.
   The handling of personal information is separately defined in our Privacy Policy (Personal Information Protection Policy).
3. Scope of Application
   This policy applies to all information assets under the Company’s control and to all officers, employees (including contract and temporary staff), and any other persons engaged in the Company’s business operations.
4. Governance and Security Measures
   The Company shall establish a clear organizational structure to promote and manage information security, defining responsibilities and authorities.
   We implement appropriate physical, technical, organizational, and human security measures to prevent unauthorized access, loss, falsification, or leakage of information.
5. Education and Awareness
   The Company conducts continuous education and awareness programs for all employees concerning information security (including personal data protection) to enhance understanding and ensure strict compliance.
6. Management of Outsourced Operations
   When outsourcing operations, the Company appropriately supervises contractors to ensure that they maintain an equivalent level of information security.
7. Incident Response
   The Company takes preventive measures against information security incidents and, in the event of an occurrence, promptly investigates the cause, minimizes damage, and prevents recurrence.
8. Continuous Improvement
   The Company conducts regular internal audits related to information security and continuously improves its management system in response to changes in social conditions, technology, and applicable laws.