Your trusted business partner
We are committed to conducting business ethically and with integrity, and aim to build trust through responsible, transparent and secure business practices.
Techstep’s Management System is ISO certified according to the ISO 9001, ISO 14001, and ISO/IEC 27001 standards.
![20211126-AdobeStock_485877782](https://www.techstep.io/hubfs/22_CONTENT%20FOR%20NEW%20WEB/22_IMAGES/22_GENERAL%20STOCK%20IMAGES/20211126-AdobeStock_485877782.jpg)
Information security and privacy management
At Techstep, we have a strong commitment to privacy, security and transparency. We are currently establishing a management system based on the internationally recognised standard ISO/IEC 27001. The aim is to further increase security awareness in the organisation, and that appropriate technical, organisational, personnel and physical security controls are in place. The management system formally implements a systematic risk-based approach to information security and will include all processes related to privacy and GDPR.
Data privacy through GDPR
We work in compliance with national laws of the countries in which we operate, as well as with the EU General Data Protection Regulation (GDPR). In addition, principles from application software security are applied to ensure Techstep designs secure products.
Want to know more about information security and privacy in Techstep?
Responsible supply chain
![AdobeStock_359196610](https://www.techstep.io/hubfs/22_CONTENT%20FOR%20NEW%20WEB/22_IMAGES/22_GENERAL%20STOCK%20IMAGES/AdobeStock_359196610.jpeg)
Third party management
Our suppliers and partners are an important part of our value chain, as they provide us with the products and services we need, to deliver our solutions to our customers. Our relationship with our third parties also brings responsibilities, such as shared concern for the environmental impact of our supply chain and potential social and compliance risks if these factors are not managed appropriately.
Our Supplier Code of Conduct sets out our expectations of suppliers, which are based on the principles of the Universal Declaration of Human Rights, the International Labour Organisation (ILO) Core Conventions and UN Global Compact’s 10 principles for sustainable development.
The Transparency Act
Techstep is subject to the Norwegian Transparency Act, which entered into force 1 July 2022. The act shall promote enterprises’ respect for fundamental human rights and decent working conditions in connection with the production of goods and the provision of services. The act will ensure the general public access to information regarding how enterprises address adverse impacts on fundamental human rights and decent working conditions, as well as secure public access to information.
Techstep have established guidelines and routines to safeguard human rights and decent working conditions in our business operations. Core governing documents for Techstep’s management and compliance of human rights and decent working conditions are:
- Code of Conduct
- ESG policy
- Supplier Code of Conduct
In accordance with Section 5 of the Norwegian Transparency Act, Techstep’s annual Transparency Act Report is included as part of the Annual and Sustainability Report for 2023.
Information requests can be sent to compliance@techstep.no. We will provide you with a response within three weeks.
More information on the Norwegian Transparency Act can be found here.
Ethical business conduct
![](https://www.techstep.io/hubfs/Avidly/Images%20new%20web/Image%203.png)
Techstep’s commitment to business ethics and compliance with international regulations and internal policies is anchored in our code of conduct.
Reporting concerns
Techstep wants a low threshold for reporting concerns if you think something is wrong. If you are unsure whether your conduct or the conduct of someone else might breach our Code of Conduct, you can contact our compliance function at compliance@techstep.no.
We have also established a third-party operated channel for discrete and confidential handling of concerns. Our Code of Conduct contains information on how to report.