Artificial Intelligence (AI) Ethics Policy

Article 1 (Principles of Responsible AI Operation)

Software Creation Studio observes the following principles in the development and operation of AI technology.

1. Transparency (Transparency)

Software Creation Studio transparently informs, to the extent possible, about the purpose of use and the operation of AI systems.

When the Client provides AI-based services to end users, Software Creation Studio supports the relevant technical environment and mode of operation so that users can understand whether AI is being used.

2. Accountability (Accountability)

Software Creation Studio continuously manages risk factors that may arise in the design, development, and operation of AI Services, and applies technical and administrative safeguards for responsible AI use.

The results provided by AI Services are intended for support and reference purposes for work, and the final decisions and business judgments made by the Client based on those results are the responsibility of the Client.

3. Safety (Safety)

Software Creation Studio implements technical and administrative measures for security management, access control, data protection, and service stability to ensure that AI Services can operate reliably.

4. Personal Information and Data Protection (Privacy & Data Protection)

Software Creation Studio complies with applicable laws and security standards to protect personal information and client data during the operation of AI Services.

Client data is handled in a manner that respects the client's rights and is not used for additional model training, weight adjustment, or widespread model improvement without the Client's consent.

Article 2 (Principles of Human-Centered AI Operation and Oversight)

Software Creation Studio adheres to the principle that AI should not replace human judgment but should be used as a tool to support work efficiency and decision-making.

The results provided by AI Services should be used as reference information, and in important decision-making processes, there should be appropriate human review and judgment.

When the Client makes significant judgments in legal, financial, medical, human resources, etc., based on AI results, a separate review procedure should be in place.

Software Creation Studio supports the technical environment so that the Client can connect, as needed, human advisory or review procedures.

Article 3 (Principles of Fairness and Bias Management)

Software Creation Studio strives to ensure that AI Services do not generate undue discrimination or unfair results for specific individuals, groups, or clients.

During the operation of AI Services, the quality of data and the appropriateness of results are continuously reviewed.

Technical and administrative improvement activities are carried out to minimize bias that may arise in the AI model or data processing. Specifically, Software Creation Studio conducts the following bias management activities.

• Regularly checks the risk of bias in AI Services at least once a year and takes necessary improvement measures based on the results of the check.
• The scope of the bias check includes evaluating the quality of AI Services results, analyzing data bias, and reviewing user feedback.
• At the Client's request, shares the results of the bias evaluation of the applicable AI Services with the Client within a reasonable scope.

Regarding bias factors that may arise due to data or operational environments provided by the Client, Software Creation Studio studies improvement measures in collaboration with the Client.

Article 4 (Principles of Data Protection and Security for AI)

Software Creation Studio considers the protection of Client data as a fundamental principle of AI Services operation.

The data provided by the Client to AI Services is handled securely within the scope of service provision.

Client data is not used for additional model training, weight adjustment, or service improvement for other clients without the Client's consent.

During the operation of AI Services, technical and administrative safeguards are applied in accordance with applicable laws and security standards to protect personal information and sensitive information.

Conversation data and context information from the PolyBot service are securely managed in each Client's environment and protected to prevent mixing with data from other Clients.

Article 5 (Transparency of AI Use and User Rights)

Software Creation Studio strives to ensure that users of AI Services can understand whether AI technology is being used and respond appropriately.

When the Client applies AI Services such as PolyBot to services directed at end users, Software Creation Studio supports clear communication that it is an AI-based service.

Supports the configuration of the Client's operational environment so that users of AI-based advisory or automation functions can utilize human advice or an alternative procedure when necessary.

Software Creation Studio considers the protection of user rights during the use of AI Services to be important.

Article 6 (AI Risk Management and Incident Response)

Software Creation Studio strives to manage errors, security issues, and service risk factors that may arise during the operation of AI Services.

1. Continuous Monitoring

Continuously monitors and carries out improvement activities regarding errors, security vulnerabilities, or unexpected outcomes that may arise during the operation of AI Services.

2. Cause Analysis and Measures

When an AI-related issue is identified, it strives to ensure service stability through cause analysis and the necessary technical measures.

3. Incident Notification and Response Procedure

In the event of a serious service failure, a security breach, or a significant malfunction of the AI system, Software Creation Studio will act according to the following procedure.

• (1) Initial Notification: Within 24 hours of becoming aware of a serious incident, it will notify the affected Clients in writing (including email). The notification includes a summary of the incident, the anticipated scope of impact, and initial response measures.
• (2) Post-Incident Analysis: After resolving the incident, it strives to prepare and provide the Client, within a reasonable timeframe, a post-incident report (Post-Incident Report). The report includes the cause of the incident, the scope of impact, response measures, and a prevention plan to avoid recurrence.
• (3) Legal Notification in Case of Data Breach: When the incident involves a breach of personal information, it will notify the competent supervisory authority within the legal timeframe (72 hours) in accordance with the Personal Information Protection Act of Korea and Article 33 of the European GDPR, and will also notify the affected individuals in accordance with applicable legislation.
• (4) Collaboration with the Client: When necessary, collaborates with the Client to resolve the issue and minimize damages.

Article 7 (AI Governance and Compliance with Global Standards)

Software Creation Studio maintains a continuous management system for responsible AI operation.

Continuously improves the operational criteria of AI Services considering the ethical principles of AI and the risk management criteria discussed internationally. Software Creation Studio refers to the following international frameworks and standards.

• OECD Principles on AI (OECD Principles on AI, 2019)
• EU Artificial Intelligence Act (EU AI Act, Regulation (EU) 2024/1689)
• ISO/IEC 42001 (Management System for Artificial Intelligence)
• UNESCO Recommendation on the Ethics of AI (Recommendation on the Ethics of AI, 2021)

Durante la operación de los Servicios de IA, se reflejan de forma destacada los siguientes principios.

1. Gestión basada en el riesgo (Risk-Based Approach)

Aplica un nivel de gestión adecuado teniendo en cuenta la finalidad, el alcance del impacto y los factores de riesgo potenciales del sistema de IA.

2. Transparencia y explicabilidad (Transparency & Explainability)

Informa, en la medida de lo posible, sobre la finalidad de uso y el modo de operación de los Servicios de IA para que puedan comprenderse.

3. Seguridad y fiabilidad (Safety & Reliability)

Lleva a cabo comprobaciones y actividades de mejora continuas para una operación estable y una mejora de la calidad de los Servicios de IA.

4. Uso responsable de la IA (Responsible AI Use)

Se esfuerza por que la tecnología de IA se utilice en una dirección que respete los derechos humanos y los valores sociales.

Artículo 8 (Sistema de gobernanza de la ética de la IA)

Para la implementación y la supervisión de esta Política, Software Creation Studio opera el siguiente sistema de gobernanza interno.

1. Dirección de la implementación de la Política

La implementación de esta Política está dirigida por el Delegado de Protección de Datos (DPO). El Delegado de Protección de Datos comprueba periódicamente el cumplimiento de la Política de Ética de la IA y adopta las medidas de mejora necesarias cuando corresponda.

2. Asesoramiento externo

Cuando surja un asunto grave relacionado con la ética de la IA o cuando sea necesaria una mejora de la Política, Software Creation Studio podrá recabar el asesoramiento de expertos externos en materia jurídica, técnica y ética.

3. Revisión periódica

Esta Política se revisa periódicamente al menos una vez al año, reflejando los avances de la tecnología de IA, los cambios legislativos y las tendencias globales en materia de ética de la IA, y se modifica cuando es necesario.

4. Contacto

Las consultas y los comentarios relativos a esta Política pueden dirigirse a los datos de contacto que se indican a continuación.

• Delegado de Protección de Datos: Peter Cho
• Correo electrónico: governance@softwarecreation.studio
• Dirección: 100 Cheonggyecheon-ro, Jung-gu, Seúl, Signature Tower West, 9F

Artículo 9 (Relación con las políticas relacionadas)

Esta Política se aplica junto con los Términos del Servicio (Terms of Service), la Política de Privacidad (Privacy Policy), la Política de Cookies (Cookie Policy) y la Política de Operación de los Servicios de Inteligencia Artificial (IA) de Software Creation Studio.

Esta Política establece los principios éticos y la dirección operativa relativos al uso de la tecnología de IA; las condiciones de uso del servicio, los criterios de tratamiento de datos, el alcance de la responsabilidad y las restricciones de uso se rigen con prioridad por las políticas relacionadas.

Las cuestiones relativas a la protección de la información personal, las condiciones de uso del servicio y el contrato se rigen, respectivamente, por la Política de Privacidad y los Términos del Servicio.

Artículo 10 (Modificación y notificación de la Política)

Cuando se modifique esta Política, Software Creation Studio lo anunciará a través del sitio web al menos 30 días antes de la fecha de entrada en vigor, especificando los motivos de la modificación, el contenido modificado y la fecha de entrada en vigor.

Las versiones anteriores de la Política se conservan para su consulta a través del sitio web.

Disposición adicional

Esta Política de Ética de la Inteligencia Artificial (IA) entra en vigor el 3 de julio de 2026.

Software Creation Studio apoya la transformación digital y el crecimiento sostenible de sus clientes mediante el uso responsable de la tecnología de IA, y se esforzará de forma continua por prestar Servicios de IA fiables.