Datamole Integrated Management System Policy

Your partner for data and AI innovation

Datamole is an innovation and development company of around 100 people in Prague, Brno and Český Krumlov. We design, develop, deliver and operate software specialising in data- and AI-driven solutions, together with related consulting and support. We help companies in industry and agriculture become AI-driven businesses, building these solutions together with their experts.Our customers trust us with their data, their machines and their domain knowledge, and often with the future of their products. Quality is how we repay that trust: the work must deliver real value, not just run. Security is how we keep it: what they share with us must stay protected. This system is how we make sure both happen on every project as we grow, and all of us at Datamole stand behind it.

Purpose

This policy sets out Datamole's top-management commitment to its Integrated Management System (IMS) — a single management system covering both quality (ISO 9001) and information security (ISO/IEC 27001).

Its purpose is to help Datamole operate reliably and professionally as it scales, across three areas:

• Quality — understanding the domain, then delivering value the customer can measure
• Information security — secure by design, with controls matched to the risk
• Governance and continual improvement — named ownership, measurable objectives, and lessons fed back

Scope

The IMS covers all Datamole activities and processes involved in delivering services, protecting information and meeting the requirements of interested parties, and the information assets those activities depend on. It applies to everyone working with or for Datamole — employees, independent contractors and, where their contract binds them, external parties.

Policy Statement

Datamole's leadership commits the organisation to the following.

Quality — delivering work our customers value

• Understand the domain before we build. We invest in understanding each customer's domain and goals so we solve the right problem, not just ship working software.
• Meet requirements and deliver measurable value. We deliver solutions that meet agreed customer, legal, regulatory, and contractual requirements, define and track the outcomes our work is meant to deliver, and judge success by the impact realised for the customer — treating their success as the measure of our own.
• Work collaboratively with consistent agile delivery. We run projects iteratively and in close partnership with customers and their subject-matter experts, responding to change rather than defending a plan. Our shared delivery methodology gives every project a common backbone — consistent quality whoever is on the team — while staying light enough to adapt to each customer.
• Build with technical excellence. We hold ourselves to sound engineering standards — review, testing, and craftsmanship — so what we deliver is robust, maintainable, and worthy of our name, not merely functional.
• Estimate and communicate honestly. We give our best effort at estimating complexity, keep a transparent cost structure, and surface problems early — no hidden agendas, toward customers, suppliers, or each other.

As can be seen from the previous section, there are numerous reasons for processing your personal data. These reasons result in the following legal grounds justifying the data processing that we do:
you have given us your consent (e.g. to use cookies), or it is necessary for pursuing our legitimate interests (e.g. for being able to address your claims or claims of third parties), or for the performance of the contract or taking steps prior to entering into a contract (e.g. for answering your questions). Our legitimate interests also include managing access to our offices, protecting people, property and information in them, and keeping evidence that visitors have confirmed our office rules and confidentiality (section 2.E).

Governance and continual improvement

• Manage risks and opportunities deliberately. We identify and address risks and opportunities to both quality and security, and we react to changes in our internal and external context.
• Set, measure, and review objectives. This policy is the framework for establishing measurable quality and security objectives, which we monitor and review at planned intervals.
• Keep the system lean, owned, and understood. We maintain processes that reflect how we actually work, each with a named owner, and keep documentation practical — adding controls because they reduce risk or overhead, not to satisfy paperwork. We build the competence and awareness people need to operate the IMS, because it works only if people understand and own it.
• Continually improve. We strengthen the suitability, adequacy, and effectiveness of the IMS based on audit results, operational experience, and the evolution of threats, technology, and the market.