Sustainability

Sustainability

Innofactor considers sustainability as one of the cornerstones of its long-term success. Sustainability is not only a condition for the continuation of operations. It also represents a way of responding to stakeholder expectations. Technology companies play a significant role in the mitigation of – and adaptation to – climate change. The IT sector also makes it possible for other organizations to reduce their carbon footprint. Our operations are guided by our Code of Conduct and Environmental Policy, in addition to which we comply with the leading international sustainability standards, such as the ILO Declaration on Fundamental Principles and Rights at Work, the UN Universal Declaration of Human Rights, the UN Sustainable Development Goals, and the principles of the ICC Business Charter for Sustainable Development.

Innofactor's internal operations are managed through predefined core processes and standards. The key processes related to sustainability include the company's processes relating to legal affairs, risk management, and human resources, which govern many of the main aspects of corporate responsibility. The framework for Innofactor's operations is provided by the ISO 9001, ISO 27001, ISO 13485, and AQAP-2110 standards, which the company's various processes adhere to.

Innofactor is committed to supporting the achievement of the UN Sustainable Development Goals (SDGs) by 2030. Accordingly, we have assessed the main objectives from the perspective of our business operations: SDG 8 Decent work and economic growth, SDG 5 Gender equality, and SDG 3 Good health and well-being.

Environmental Responsibility

As an organization operating in the IT sector, Innofactor has a unique opportunity to be part of the solution in reducing environmental impacts. The digital solutions we deliver to our customer organizations play an important role in mitigating and adapting to climate change. Digitalization of manual processes and digital healthcare are examples of solutions through which Innofactor promotes its customers’ – and thereby the entire society’s – sustainable development.

Our environmental policy guides the actions we take to reduce our adverse environmental impacts and respond to the challenges caused by climate change.Our environmental policy defines the principles we always follow in our own operations and in the deliveries to our customers. The principles of Innofactor’s environmental policy include continuous development, improvement of preventative actions, and reacting to the changing operating environment. Innofactor complies with all applicable laws and regulations and expects the same from its partners and suppliers. The environmental policy concerns the entire Innofactor Group and is available on our website.

Renewable district heat was used as the form of heating for the Espoo Campus for the first time. Switching the form of heating for the Campus to renewable energy reduced the emissions caused by the heating of the company's premises by 57% when compared to 2023.

Innofactor has a policy aimed at extending the lifecycle of computers. Factors considered in the renewal of computer hardware include the user's needs and the possibility of updating existing devices.

We recycle all recyclable materials such as cardboard, organic waste, metal, plastic and glass. Our electronic waste is recycled by Kuusakoski Recycling.

Remote work is an essential part of the operations of a modern digital organization. We provide our employees with good opportunities for location-independent work. Using Microsoft Teams as a meeting tool brings added value to the operations of both Innofactor and its customers.

Social Responsibility

Innofactor complies with local collective agreements and local legislation. Policies related to the personnel are documented in the HR policy process description. In addition to compliance with local legislation, Innofactor is committed to the ILO and UN principles and practices concerning human rights as applicable. The Chief People Officer has operational responsibility for implementing and developing personnel policies and generally considering social responsibility related to the workforce in Innofactor's operations.

The key elements of Innofactor's corporate culture include a flat hierarchy, close communication and good co-operation with personnel representatives (e.g. shop steward and occupational safety delegate). Innofactor has an occupational health and safety action program that is focused on occupational safety aspects that are relevant to the company's operations, such as first aid skills, ergonomics and rescue drills. Innofactor prioritizes the well-being of its employees and their ability to manage work demands, as the most significant risks to work ability in expert roles are related to coping with these demands.

In accordance with Innofactor's HR policy, there is zero tolerance for discrimination, harassment and bullying. The personnel are committed to these policies as part of the induction training process. The HR function takes action to address all incidents of discrimination, harassment and bullying, and they are investigated on a case-by-case basis. Innofactor's operating culture encourages everyone to "Be the Real You" and it is based on the "People First" principle.

Innofactor has also focused on the equal treatment of applicants in its recruitment process. For example, applicants are not asked about gender as part of the recruitment process. In accordance with the company's sustainability strategy, Innofactor aims to be inclusive and supervisors are trained on the theme of inclusivity. In line with Innofactor's Employee Value Proposition, "Be the Real You", everyone at Innofactor can be exactly who they are.

More detailed description of Innofactor's social responsibility can be found in the Sustainability Report that is published with the Innofactor Plc Annual Report 2024.

Data Security and Data Protection

Innofactor has identified the significance of data security and data protection as part of sustainable business in the IT sector and sustainability reporting. Innofactor will assess reporting related to data security and data protection in more detail in 2025.

Administrative sanctions are a metric that Innofactor has already considered to be important in previous years. In 2023 and 2024, the number of GDPR-related administrative sanctions on Innofactor was 0.

Innofactor's management has identified several critical cyber risk scenarios against which a company needs to protect itself. The company is committed to protecting its customers' and partners' information and systems and naturally, Innofactor as a company itself. In order to ensure the level of information security corresponding to the risks, Innofactor maintains a certified information security management system in accordance with the ISO27001 standard.

In its operations, Innofactor is committed to maintaining a high level of data protection and respects the privacy and rights of its personnel, customers and users. Through regular internal audits and the continuous development of data security, Innofactor develops its internal processes and practices related to data protection and data security.

Information security and data protection are mandatory parts of induction training in addition to continuous training on information security and data protection. The company's personnel are required to complete mandatory data security training once every two years. The content of the training is updated annually. Innofactor's information security group meets regularly to guide the development and implementation of information security and data protection at Innofactor. The company has a designated information security manager and a data protection officer.

Respecting Human Rights, Anti-Corruption and Anti-Bribery

Innofactor's Code of Conduct defines the general principles and guidelines that the company's employees and partners adhere to. We arrange trainings concerning the instructions in all of our offices at regular intervals.

Transparent business in accordance with the highest ethical standards is the basis of our company's operations. We use our anonymous whistleblowing channel for reporting suspected violations of our Code of Conduct. All reports received via the channel are processed in strict confidence.