Artificial Intelligence (AI) Ethics Policy

Article 1 (Principles of Responsible AI Operation)

The Software Creation Studio adheres to the following principles in the development and operation of AI technology. Software Creation Studio

1. Transparency

The Software Creation Studio provides transparent guidance on the purpose and operation of AI systems to the extent possible. Software Creation Studio

When clients provide AI-based services to end users, we support the relevant technical environment and operational methods to ensure that users understand the use of AI.

2. Accountability

The Software Creation Studio continuously manages potential risks that may arise during the design, development, and operation of AI services, applying technical and managerial safeguards for responsible AI usage. Software Creation Studio

The outputs provided by AI services are intended for business support and reference purposes, and any final decision-making and business judgments made by clients based on these outputs are the responsibility of the clients.

3. Safety

The Software Creation Studio implements technical and managerial measures for security management, access control, data protection, and ensuring service reliability so that AI services can operate securely. Software Creation Studio

4. Privacy & Data Protection

To protect personal information and customer data during the operation of AI services, Software Creation Studio complies with relevant laws and security standards.

Customer data is respected, and will not be used for additional training of AI models, weight adjustments, or generalized AI model improvements without the client's consent.

Article 2 (Human-Centered AI Operations and Oversight Principles)

Software Creation Studio adheres to the principle that AI should be used as a tool to support work efficiency and decision-making, rather than replacing human judgment.

The outputs provided by the AI service should be used as reference information, and appropriate human review and judgment should be conducted in important decision-making processes.

Clients must operate separate review procedures when making significant decisions based on AI results in areas such as law, finance, healthcare, and human resources.

Software Creation Studio supports a technical environment that allows clients to connect with human consultation or review processes as needed.

Article 3 (Principles of Fairness and Bias Management)

Software Creation Studio works to ensure that AI services do not result in unfair discrimination or unjust outcomes for specific individuals, groups, or clients.

We continuously review data quality and the appropriateness of results during the operation of AI services.

We carry out technical and managerial improvement activities to minimize bias that may occur in the AI model or data processing. Specifically, the Software Creation Studio conducts the following bias management activities. Software Creation Studio

• We conduct regular assessments of the bias risks associated with AI services at least once a year and implement necessary improvements based on the results.
• The scope of bias checks includes quality assessments of AI service output, data bias analysis, and user feedback reviews.
• Upon request from clients, we will share the bias assessment results of the AI services applicable to that client within a reasonable scope.

We will review improvement measures in collaboration with clients regarding potential bias factors arising from the data or operational environment provided by clients.

Article 4 (AI Data Protection and Security Principles)

Software Creation Studio prioritizes the protection of client data as a core principle of AI service operations.

The data provided by the client to the AI service will be processed securely within the scope of the service provision purpose.

Customer data will not be used for additional training of AI models, weight adjustments, or service improvements for other clients without the client's consent.

Technical and managerial protective measures in accordance with relevant laws and security standards are applied to protect personal and sensitive information during the operation of AI services.

The conversational data and context information of the PolyBot service are securely managed in a client-specific environment, ensuring they are not mixed with data from other clients.

Article 5 (Transparency in AI Utilization and User Rights)

Software Creation Studio strives to help AI service users understand the use of AI technology and respond appropriately.

When clients apply AI services such as PolyBot to end-user services, we support them in clearly indicating that it is an AI-based service.

Supports the client's operational environment configuration to allow users of AI-based consultation or automation features to access human consultation or alternative procedures if needed.

Software Creation Studio places great importance on protecting user rights during the utilization of AI services.

Article 6 (AI Risk Management and Incident Response)

Software Creation Studio makes efforts to manage errors, security issues, and service risks that may arise during the operation of AI services.

1. Continuous Monitoring

Continuously monitors and improves any errors, security vulnerabilities, or unexpected results that may occur during the operation of AI services.

2. Cause Analysis and Action

We strive to ensure service stability through cause analysis and necessary technical measures when AI-related issues are identified.

3. Incident Notification and Response Procedures

In the event of a significant service disruption, security breach, or major malfunction of the AI system, the Software Creation Studio will respond according to the following procedures. Software Creation Studio

• (1) Initial Notification: Within 24 hours of recognizing a significant incident, we will notify the affected clients in writing (including email). The notification will include an overview of the incident, the expected scope of impact, and initial response actions.
• (2) Post-Incident Analysis: We strive to prepare a Post-Incident Report within a reasonable period after resolving an incident and provide it to the client. The report will include the cause of the incident, the scope of impact, response actions, and plans to prevent recurrence.
• (3) Legal Notification in Case of Data Breach: In the event of a personal data breach, we will notify the relevant supervisory authority within the legal deadline (72 hours) in accordance with the Personal Information Protection Act of South Korea and Article 33 of the GDPR, and also notify the data subject in accordance with relevant laws.
• (4) Client Collaboration: We collaborate with clients to resolve issues and minimize damages when necessary.

Article 7 (AI Governance and Compliance with Global Standards)

Software Creation Studio maintains a continuous management system for responsible AI operations.

We continually improve our AI service operational standards by considering internationally discussed AI ethical principles and risk management criteria. Software Creation Studio refers to the following international frameworks and standards.

• OECD Principles on AI (2019)
• European Union Artificial Intelligence Act (EU AI Act, Regulation (EU) 2024/1689)
• ISO/IEC 42001 (Artificial Intelligence Management System)
• UNESCO Recommendation on the Ethics of AI (2021)

The following principles are significantly reflected during the operation of AI services.

1. Risk-Based Approach

We apply an appropriate level of management considering the purpose, scope of impact, and potential risks of AI systems.

2. Transparency and Explainability

We provide guidance to help understand the purpose and operation of AI services to the extent possible.

3. Safety & Reliability

We conduct ongoing assessments and improvement activities to ensure the stable operation and quality enhancement of AI services.

4. Responsible AI Use

We strive to ensure that AI technology is utilized in a manner that respects human rights and social values.

Article 8 (AI Ethics Governance System)

To ensure the implementation and oversight of this policy, Software Creation Studio operates the following internal governance framework.

1. Overall Policy Implementation

The implementation of this policy is overseen by the Data Protection Officer (DPO), who regularly checks compliance with the AI Ethics Policy and takes necessary improvement actions when needed.

2. External Consultation

In the event of significant issues related to AI ethics or the need for policy improvements, Software Creation Studio may seek advice from external legal, technical, and ethical experts.

3. Regular Review

This policy will be reviewed regularly at least once a year to reflect advancements in AI technology, changes in legislation, and global AI ethics trends, and will be amended as necessary.

4. Contact Information

Inquiries and feedback regarding this policy can be submitted through the contact information below.

• Personal Information Protection Officer: Peter Cho
• Email: governance@softwarecreation.studio
• Address: 100 Cheonggyecheon-ro, Jung-gu, Seoul, Signature Tower West, 9th Floor

Article 9 (Relationship with Related Policies)

This policy applies in conjunction with Software Creation Studio's Terms of Service, Privacy Policy, Cookie Policy, and AI service operational policies.

This policy defines the ethical principles and operational directions regarding the use of AI technology, and the conditions of service use, data processing standards, scope of responsibility, and usage restrictions will be governed by related policies.

Privacy protection, service use conditions, and contract-related matters are governed by the privacy policy and terms of use, respectively.

Article 10 (Policy Changes and Notifications)

In the event of changes to this policy, Software Creation Studio will announce the reasons for the changes, the details of the changes, and the effective date on its website at least 30 days prior to the effective date. Software Creation Studio

Previous versions of the policy will be retained for review on the website.

Supplementary Provisions

This Artificial Intelligence (AI) Ethics Policy will be effective from July 3, 2026.

Through responsible AI technology utilization, Software Creation Studio supports clients' digital transformation and sustainable growth, and we will continuously work to provide reliable AI services.