Initiatives for All Stakeholders Governance

Basic Mindset
Compliance
Information Security Initiatives

Basic Mindset

Basic Mindset on Corporate Governance

We have established the Macromill Code of Conduct to serve as the foundation of the corporate rules that our officers and employees observe in their daily work. Based on its management principles, the Macromill Code of Conduct outlines details in four key areas—compliance with laws and regulations, proper relations with society, respect for human rights, and sincere corporate activities—in accordance with policies that are essential for the proper and sound development of Macromill. All the Company officers and employees (including full-time, contract, part-time, skilled part-time, temporary, and seconded workers) fully recognize their necessary social responsibility in the various corporate activities and act in compliance with social ethics.

Code of Conduct (Japanese only)

>https://www.macromill.com/company/conduct.html

Compliance

Initiatives to prevent and eliminate corruption

Aiming to prevent corruption, the Group stipulates the prohibition of harassment and child labor as well as restrictions on gifts and entertainment in the Macromill Code of Conduct. We hold compliance training for all domestic Group employees upon joining and twice a year to promote understanding of these issues.

Training participation rate in FY2025

Compliance training: 100%*At domestic Group companies
Harassment prevention training: 100% *At the Company

In addition, to work for early detection and rectification of violations or illegal actions with respect to laws, regulations, ethics, and the Code of Conduct, the Group has set up the Macromill Group Hotline, a shared Group whistleblower contact point for all Group employees that allows anyone who discovers a breach of laws, regulations or the Code of Conduct to consult the Hotline under their own name or anonymously.

Examples of main cases reported

Actions that breach laws and regulations
Actions that breach the Code of Conduct
Actions contrary to internal processes
Other actions contrary to morality or ethics

Compliance Promotion Committee

The Compliance Promotion Committee is made up of the representative director, head of the Legal and General Affairs Division and head of the Personnel Affairs Division and was established for the purpose of promoting compliance with laws, regulations and other requirements by the Company’s executives and employees.

Information Security Initiatives

Acquisition of latest ISMS international standard
ISO/IEC 27001:2022 certification

Recent years have brought dramatic changes in consumer awareness and behavior, along with increasingly diverse values. An understanding of consumers that can inform corporate marketing and decision-making requires even more wide-ranging data utilization and analysis than ever.
In line with changes and demands in society, we want to ensure that our clients can continue using our services without concern. 4 In addition, information security training is conducted for all employees once a year, and the training participation rate was 100% in FY2025.

ISMS

An abbreviation for information security management systems, these systems are designed to protect information assets held by an organization from various risks. In 2023, we became the first company in Japan’s marketing research industry to receive this certification for all business areas.^*
In 2024, certification was also acquired by the Shinagawa Connected Office and the Macromill Base Fukuoka. In addition, Macromill’s ISMS Group certification was obtained by Group company Macromill Carenet, Inc. in 2024 and by Dentsu Macromill Insight, Inc. in 2025, as we worked to further strengthen and expand information security.

*The first for a company listed on the Japan Marketing Research Association (JMRA) full member company list to receive certification for all business areas. Based on our search on the ISMS certification organization site (https://isms.jp/lst/ind/). As of June 28, 2023.

Privacy Mark

The Privacy Mark system evaluates whether businesses have established a system to take appropriate measures to handle and manage personal information. It permits companies to use this mark in their business activities as proof of this. We acquired Privacy Mark certification in 2004 and have renewed this certification every two years.

The Information Security Department carries out educational activities