Security and Procurement Policy

Sky Guard Security ApS designs and manufactures professional UAV and security technology solutions for government agencies, public sector organisations and defence bodies across the European Union. This Security and Procurement Policy describes our approach to secure procurement processes, information security practices and supply chain integrity. We understand that government and defence customers have stringent security requirements, and we are committed to meeting or exceeding those expectations throughout the procurement lifecycle.

Sky Guard Security supports multiple procurement routes to accommodate the diverse requirements of public sector customers: • Open tender participation: We regularly participate in published public procurement tenders and framework competitions across EU member states. • Framework agreements: We are available for inclusion in standing framework agreements for rapid deployment of technology solutions. • Direct procurement: For urgent operational needs or purchases below threshold values, we support direct procurement processes in accordance with applicable rules. • Cooperative procurement: We can participate in joint procurement initiatives involving multiple government agencies or cross-border procurement arrangements. All procurement activities are conducted in full compliance with EU Directive 2014/24/EU (the Public Procurement Directive) and EU Directive 2009/81/EC (the Defence and Security Procurement Directive), where applicable.

Sky Guard Security implements comprehensive information security measures to protect customer data, procurement information and technical documentation: • Access control: Role-based access controls restrict information access to authorised personnel only • Encryption: All sensitive data is encrypted in transit (TLS 1.3) and at rest (AES-256) • Network security: Multi-layered network security including firewalls, intrusion detection and continuous monitoring • Incident response: Documented incident response procedures with defined escalation paths and notification timelines • Business continuity: Business continuity and disaster recovery plans are maintained and tested regularly Our information security practices are aligned with ISO/IEC 27001 principles and are subject to periodic internal review.

We maintain stringent supply chain security to ensure the integrity and authenticity of all products delivered to government customers: • Component traceability: Every component is sourced through vetted suppliers with a verified, fully documented chain of custody from raw material to finished system • Anti-counterfeiting: Components and systems are verified against our internal engineering specifications and serial number records • Tamper evidence: Products are delivered with tamper-evident packaging and can be verified against our production and assembly records • Logistics security: Secure logistics arrangements including tracked shipments, delivery confirmation and chain-of-custody documentation • Supplier due diligence: All component suppliers undergo due diligence assessment including financial stability, regulatory compliance and security practices

Sky Guard Security personnel involved in government contracts and sensitive projects are subject to appropriate security measures: • Background checks for all personnel handling sensitive government information • Confidentiality agreements and non-disclosure obligations • Regular security awareness training • Clean desk and clean screen policies • Controlled access to sensitive project areas and information Where required by contract or regulation, we facilitate formal security clearance processes for personnel assigned to classified projects.

All products manufactured by Sky Guard Security undergo quality assurance procedures including: • Incoming inspection and verification against procurement specifications • Functional testing prior to dispatch • Configuration management and version control • Documentation packages including test reports, compliance certificates and acceptance test procedures • Warranty and support documentation Our quality management approach is aligned with ISO 9001 principles and is continuously improved based on customer feedback and operational experience.

Sky Guard Security provides comprehensive post-delivery support to government customers: • Dedicated government account management with defined response times • Priority technical support with 24/7 availability for critical deployments • Preventive maintenance programmes • Software and firmware update management • Spare parts availability with guaranteed lead times • On-site support and training as required Service Level Agreements (SLAs) are tailored to the specific requirements of each government customer and deployment.

For procurement enquiries and security-related questions: Government sales: government@skyguardsecurity.eu Security office: security@skyguardsecurity.eu Phone: +45 70 20 30 40 Sky Guard Security ApS Copenhagen, Denmark