2021 Universal Registration Document

4 CORPORATE RESPONSIBILITY

Engaging our stakeholders to meet their needs better

the role of digital technology in shaping opinion, notably as regards the use of social media as a political tool.

Safe AI Sopra Steria is a sponsor to the project of the Université de Technologie de Compiègne (UTC) Foundation for Innovation to create a Chair on “Safer and more Robust Learning for Safer Artificial Intelligence”. This Chair is largely dedicated to promoting AI that is safe, and more precisely safe and robust. In addition to safety and robustness, the concept of safe AI encompasses transparency, ethics and explainability. The fruit of these various workstreams will be applicable in all the Group’s sectors and verticals and will help bring findings from academic research to bear in solving clients’ problems. It will also help promote an atmosphere of confidence and trust. Commitments in support of digital sovereignty Building trust in digital technology helps address the challenges of digital sovereignty. This encompasses a range of complex questions such as the threat posed to our data by the extraterritoriality of US law, the manipulation of opinion by fake news and the use of personal data for business purposes. Alongside state and institutional actors, the Group is committed to initiatives aimed at strengthening digital sovereignty, building a cybersecurity community in France and Europe and helping public and private sector organisations better manage their data. Sopra Steria is a founding member and member of the Board of Directors of Campus Cyber, a cybersecurity hub established at the initiative of the French President and the French national agency for information systems security (ANSSI). This initiative aims to promote France’s excellence in cybersecurity by bringing together experts and national and international stakeholders from the sector and developing synergies around innovative projects. The Group also plays a very active role within Pôle Excellence Cyber, a non-profit organisation founded by the French Ministry of the Armed Forces and the Brittany region that brings together stakeholders from all over the country involved in research, training and industry to help develop France’s cybersecurity sector and promote it internationally. Sopra Steria is also an active member of the European Cyber Security Organisation (ECSO), which it joined in 2020. ECSO exists to bring together public and private sector players from across the European cybersecurity industry and act as preferred point of contact in its dealings with the European Commission. In 2021, Sopra Steria joined the Franco-German Gaia-X initiative (European Association for Data and Cloud) to participate in a project to define secure cloud architectures and standards aligned with European values of openness, transparency and trust, alongside other businesses and institutions, and to help create data spaces in various sectors of the economy (banking, energy, transport, healthcare, industry, etc.). The Group also sponsors two research chairs in France: “Cybersecurity and digital sovereignty” with the national defence p institute IHEDN, whose work covers issues relating to data management and mapping the datasphere as well as legal issues; Through its sponsorship of the “Digital, Governance and p Sovereignty” academic chair at Sciences Po, the Group is working in three main areas: new criteria for defining sovereignty at a time when digital technology appears to be transcending borders and legislative constraints; legal regulation of digital issues, notably in connection with the US Cloud Act and tax-related matters; and

Suppliers and partners 4.3. Aligning the supply chain with corporate responsibility priorities RESPONSIBLE PURCHASING POLICY 4.3.1. According to the Group’s risk mapping exercise and the duty of vigilance, risks associated with the supply chain do not constitute a main risk factor for Sopra Steria. The relevant information is set out in section 4.7., “Duty of vigilance and vigilance plan” (pages 148 to 149). The responsible purchasing programme is aimed at aligning the supply chain with the Group’s priorities. The programme also seeks to manage associated risks while taking into account very strict labour-related, environmental and ethical requirements. The Group is working to gradually reduce carbon emissions from its supply chain under its target of achieving net-zero emissions by 2028. It aims to do this by increasing the proportion of suppliers pursuing a low-carbon strategy so as to reduce the carbon footprint of the Group’s indirect activities. Sopra Steria measures the environmental footprint of its supply chain and is pursuing actions to shrink it in keeping with its commitment to the Science Based Targets initiative. With effect from 2019, all Group entities now follow a responsible purchasing approach and are subject to Group purchasing procedures. Corporate responsibility criteria must be applied to all purchases; this approach has been strengthened through the introduction of Group oversight in 2020. The Group earned a score of A in CDP’s 2021 Supplier Engagement Leader rating for its leadership and performance in engaging its suppliers on climate change. Suppliers’ charter Since 2019, the Group suppliers’ charter has been expanded to cover the entire Group. All suppliers must sign the Group suppliers’ charter to confirm that they agree to the principles set out in it. The charter includes requirements relating to business ethics, fundamental human and environmental rights, and compliance with regulations in force. Efforts to have suppliers sign the Group suppliers’ charter were p stepped up in France in 2021. The charter has now been signed by 1,427 suppliers, equating to 66% of eligible suppliers accounting for annual expenditure of over €5k. A total of 2,771 suppliers have signed up across the Group, p equating to 57% of eligible suppliers. The charter was revised in 2021 to include all third parties p (excluding clients). EcoVadis assessment Suppliers are assessed via the EcoVadis platform. The assessment takes into account a range of issues: social issues and human rights, business ethics, the environment and responsible purchasing. For suppliers with a score of 24/100 or less (overall and/or on the “Business ethics” module), an alert is triggered by EcoVadis. The supplier is then contacted by Sopra Steria’s Purchasing Department to put in place the necessary corrective actions and undergo a new EcoVadis assessment within a period of three months.

140

SOPRA STERIA UNIVERSAL REGISTRATION DOCUMENT 2021