BUSINESS ETHICS & GOVERNANCE

Integrity, Accountability & Responsible Business

Clear standards. Responsible conduct. Stronger governance.
North Star is building a more systematic governance framework to support compliance, ethical business conduct, information security and accountability across its operations and value chain.

2025 governance progress — Business Ethics Policy and Data and Information Security Policy issued, strengthening expectations for lawful and responsible conduct.

OUR APPROACH

Good governance turns principles into everyday decisions.

North Star’s governance approach combines legal compliance, ethical conduct, clear responsibilities and management-system implementation. In 2025, the company strengthened this foundation through new policies covering ethics, information security, procurement, human resources and environmental management.

Integrity & Compliance

Conduct business in accordance with applicable laws, regulations and relevant customer requirements.

Accountability

Define responsibilities across management, functional teams, procurement, HR and operations to support consistent implementation.

Responsible Information

Protect technical documents, customer information and business records through defined information-security requirements.
2025 GOVERNANCE BASELINE

Measure conduct. Strengthen confidence.

The 2025 Annual Sustainability Report establishes initial governance indicators covering ethics training, reporting incidents and information security. These indicators provide a baseline for continued improvement.

1
BUSINESS ETHICS TRAINING SESSION

ETHICS FRAMEWORK

The standards behind responsible business conduct.

The Business Ethics Policy sets expectations for employees, management, contractors, suppliers and other business partners.

Ethics & Compliance

Clear standards for legal compliance, fair competition, and responsible business conduct.

Anti-Corruption & Fair

Zero tolerance for bribery, corruption, and unfair business practices.

Data & Information

Protecting customer information, technical documents, and sensitive business data.

Reporting & Oversight

Encouraging confidential reporting and responsible investigation of potential violations

Continuous Improvement

Strengthening ethics training, internal controls, and supplier accountability.

2025 IN ACTION

From governance principles to a formal policy framework.

During 2025, North Star issued six internal policies that translate legal and management requirements into more systematic internal expectations and practices.

Six new internal policies
Environmental Policy, Business Ethics Policy, Data and Information Security Policy, Sustainable Procurement Policy, Supplier Code of Conduct and Human Resources Policy.

A clearer governance foundation
The framework establishes expectations across ethics, information security, procurement, people management and environmental responsibility.

Environmental progress

Measure. Improve. Build for the long term.

INFORMATION SECURITY & REPORTING

Protect information. Speak up when something is wrong.

The Data and Information Security Policy, issued in September 2025, applies to all employees and establishes requirements for confidentiality, sensitive information handling, third-party access, record accuracy and reporting of security risks or violations.
0
Information security breach incidents
The 2025 ESG performance indicators report zero information security breach incidents.
Senior Management
DIRECTION & OVERSIGHT
Reviews ESG priorities, policies and performance and supports resource allocation.
Management Center
POLICY & GOVERNANCE
Supports policy administration, oversight and interpretation, including business ethics and information security.
Procurement
SUPPLIER GOVERNANCE
Implements sustainable procurement, supplier management and ESG-related procurement requirements.
Operations
DAILY IMPLEMENTATION
Applies sustainability measures, safe working practices and internal procedures in daily activities.

WHAT COMES NEXT

Strengthening ethics, accountability and transparency.

North Star’s next stage is focused on improving policy implementation, internal reporting, information-security controls and the consistency of governance-related data and training.

Ethics Awareness & Implementation

Reinforce ethics awareness and policy implementation.

Compliance & Accountability

Strengthen anti-corruption, compliance and accountability mechanisms.

Information Security & Protection

Improve information-security awareness and controls.

Reporting & Response

Enhance internal reporting and response mechanisms for potential violations.

Governance Data & Monitoring

Improve the completeness and consistency of ESG indicators and strengthen the link between policies, targets and performance monitoring.
NORTH STAR SUSTAINABILITY

See the full Business Ethics & Governance framework.

Read the North Star Annual Sustainability Report 2025 for detailed information on ethics, governance, information security, compliance and future priorities.