QSearch Information Security Policy

Document No.: ISMS-01-01 | Version: 1.0 | Issue Date: September 18, 2026 | Classification: Public

1. Purpose

This Policy is established to build and continuously strengthen the Information Security Management System (ISMS) of Mind Modeling Inc. (數解人意科技股份有限公司, hereinafter "the Company"), and to safeguard the confidentiality, integrity and availability of its information assets.

Information security is the foundation of the social listening, online buzz and data services the Company provides. This Policy aims to guard against internal and external risks, keep customer data secure and services running reliably, and comply with ISO 27001 and other applicable standards and requirements.

2. Scope

This Policy applies to all of the Company's information assets, systems, business processes, personnel and partners, to ensure that information security management is effective and consistent.

3. Organization and Responsibilities

To ensure its information security strategy is carried out effectively, the Company has established a dedicated information security team responsible for risk management and day-to-day operations. Management takes an active part in information security governance, provides sufficient resources and clearly assigns responsibilities. All personnel within the scope of this Policy must comply with applicable laws and Company regulations, and are responsible for reporting information security incidents or concerns, so that together we foster a strong information security culture.

4. Implementation Principles

The Company follows the PDCA (Plan, Do, Check, Act) cycle to implement and continually improve its ISMS in phases, ensuring that this Policy and its controls remain effective and responsive to evolving information security threats and business needs.

5. Review and Evaluation

This Policy is reviewed and updated at least once a year, taking into account changes in laws and regulations, technological developments, stakeholder feedback and internal operations, so that it continues to meet practical needs and legal requirements. Revisions take effect only after review and approval by the Information Security Committee, and are communicated to relevant personnel and stakeholders through appropriate means.

6. Information Security Manual

The Company maintains a dedicated Information Security Manual that sets out the specific procedures and measures of the management system. The Manual supports the implementation of this Policy and day-to-day management, and is revised as the business evolves to keep information secure.

Revision History

The latest version of this Policy is the one published on this page. In case of any discrepancy between the English and Chinese versions, the Chinese version shall prevail.