Effective January 1, 2025

• Organization: CODEMAKER Unip. Lda.
• Address: Av. Visconde Barreiros, 358, 4th Floor, Right Wing, 4470-151 Maia, Portugal

1. Introduction

CODEMAKER Unip. Lda. is a company dedicated to developing innovative, secure, and high-quality software solutions. Our Quality Policy aims to ensure excellence in all processes, products, and services, meeting and exceeding the expectations of our customers and other stakeholders.

Quality is a commitment that cuts across the entire organization and is integrated into every phase of the software development lifecycle. This policy is based on the principles of continuous improvement, customer focus, process-based management, and compliance with recognized standards.

2. Quality Objectives

• Ensure the delivery of software that meets the specified requirements, both functional and non-functional;
• ensure high levels of performance, security, availability, and usability;
• promote the continuous improvement of organizational and technical processes;
• keep customer satisfaction a priority by monitoring metrics and gathering feedback;
• continuously develop the teams' technical and interpersonal skills;
• comply with relevant standards and regulations, such as ISO 9001, ISO/IEC 12207, ISO/IEC 27001, and the General Data Protection Regulation (GDPR).

3. Principles of Quality

1. Customer focus: We understand our customers' needs and work to provide them with value-added solutions.
2. Leadership: Management defines and upholds a clear purpose, encouraging everyone to get involved.
3. Employee Engagement: Skilled and motivated employees contribute significantly to the organization's effectiveness.
4. Process-based approach: Managing activities as interrelated processes leads to greater efficiency and predictability.
5. Continuous improvement: Constant improvement is a strategic commitment of the company.
6. Evidence-based decisions: We make decisions based on reliable data and careful analysis.
7. Relationship Management: We maintain mutually beneficial relationships with customers, partners, and suppliers.

4. Scope of Quality

This policy applies to all areas related to the software life cycle, including:

• requirements gathering and analysis;
• system design and architecture;
• development and coding;
• tests (unit, integration, system, and acceptance);
• implementation and maintenance;
• technical support and customer service;
• project and product management;
• information security and data protection.

5. Operational Guidelines

5.1. Requirements Management

• All requirements must be documented, validated, and managed throughout the project;
• Changes are processed through a formalized change control process.

5.2. Software Development

• Use of agile methodologies (Scrum, Kanban) or traditional methodologies, depending on the project context;
• implementation of best practices in coding, code review, and continuous integration;
• adoption of DevOps practices for automation and operational efficiency.

5.3. Quality Control

• Performing automated and manual tests based on defined acceptance criteria;
• use of metrics to assess product quality and process efficiency;
• conducting regular internal audits.

5.4. Information Security

• Implementation of measures to protect sensitive and personal data, in accordance with the GDPR;
• adoption of secure development practices (e.g., OWASP and the secure development lifecycle);
• Effective management of access, logs, and backups.

5.5. Human Resources Management

• Ongoing training in technology, management, and quality;
• performance evaluation focused on competencies and objectives;
• promoting a culture of collaboration, innovation, and responsibility.

6. Management Commitment

The Board of Directors commits to:

• ensure the necessary resources for the implementation and improvement of the Quality Management System (QMS);
• promote internal communication and alignment with strategic objectives;
• monitor the effectiveness of processes and the QMS;
• to promote a culture of excellence, innovation, and professional ethics;
• ensure compliance with legal and regulatory requirements.

7. Evaluation and Continuous Improvement

• Key performance indicators (KPIs) are used to evaluate the effectiveness of processes;
• improvement initiatives follow the PDCA cycle (Plan, Do, Check, Act);
• The policy is reviewed periodically to ensure its appropriateness and effectiveness;
• Feedback from customers and employees is viewed as an essential contribution to the organization's development.

8. Dissemination of the policy

This Quality Policy is widely disseminated:

• through internal channels, such as the intranet, training sessions, and formal communications;
• together with partners and customers, when applicable;
• on the company's official website.

---

Validated on January 1, 2025
, André Vieira