NATIXIS // 2021 Universal Registration Document

7 ACCOUNTABILITY REPORT ENVIRONMENTAL AND SOCIAL RESPONSIBILITY 2021 Managing environmental, social and governance risks

The self-assessmentand compliancesystemused for the past three years has been reviewedand rationalized. Its use was extended from France to all offices at the end of 2019. Travel safety around the world is enhanced through an application that brings together all travel agencies and offers training adapted to each trip. A global security unit is being developed to better coordinate actions and costs. The first two operational Committee Meetings with the various correspondents were held in 2021. In addition, employee training topics are essential. An augmented reality course is in place to better immerse learners in risky situations and teach them the right reactions to have. It will be completed in 2022 by training in high-rise buildings in virtual reality. Likewise, the protection of property and people relies on well-established practices. A building safety risk analysis is underway and training against malicious acts will be held in 2022. It relies on the use of innovative technologies with the gradual roll-out of telephone access badges and greater pooling of tools and processes. In 2017, Natixis participated in a joint initiative involving several French Banking and Insurance companies and signed the Responsible Purchasing Charter. The aim of the charter is to encourage the suppliers of the signatory banks to implement duty of vigilance measuresas part of their overall ESR approach. The charter sets a series of commitments that both parties are required to observe, based largely on the basic principles of the United Nations Global Compact in the areas of human rights, working conditions, the environment and anti-corruption (1) . Regarding the enforcement of the duty of vigilance law, Natixis and BPCE Procurement took part in a concertedeffort in the banking and insurance sector to map out ESR risks in purchasing activities, involving three other banking groups. The map, which was delivered in June 2018, enables the following risks to be measured by country and by category of purchase: Fair practices and ethics Fraud and corruption Personal data protection Copyright and patents Environment Consumption of natural resources Pollution (air, water, ground) Biodiversity Carbon emissions Waste management Human rights Duty of vigilance in purchasing

It maps out risks by drawing on the expertise of the chosen supplier for each purchasing category, in addition to statistics on each country, in accordance with recognized standards. The mapping system identified 13 types of high ESR risk-type purchases from among more than 100 purchasing categories in the banking sector. These high risk purchases are to be the subject of targeted duty of vigilance measures: Under the new consultation procedures conducted by BPCE Procurement in sensitive categories, suppliers are assessed on the basis of their ESR performance: the ESR questionnaire based on the risk map is sent to the V supplier; the supplier must detail their action plan to deal with the identified V ESR risks; BPCE Procurement/Natixis ESR together assess this response; V the ESR grade is built into the supplier’s overall grade; V the supplier action plan must be implementedwhere ESR grade is V below average; monitoring of the supplier’s action plan. V The process applied since 2018 has made it possible to assess a first series of suppliers in sensitive categories. At the end of 2021, 69% of the purchasingcategoriesconcernedby the systemhad been assessed (servers, ATMs, bank cards, relationship marketing, furniture, vehicles, etc.) and other categories are being assessed. BPCE Procurement has provided training to familiarize the procurement and ESR functions with the system, in the form of morning procurement meetings, classroom-based lessons and specific duty of vigilance e-learning courses. 100% of BPCE Procurement buyers responsible for these procurement categories have received training. For purchases made directly by Natixis, an equivalent process was implemented in 2020 as part of the new Know Your Supplier procedure (KYS). For all purchases of more than €50 thousand in one of the thirteen sensitive categories, this process is now followed for purchases made in France and will be gradually rolled out to international platforms. For several years now, Natixis has addressed the human rights and environmental risks incurred by some of its financing activities, most notably by applying the Equator Principles for project financing or specific policies for sensitive sectors. In addition, the ESR Department has implementedwith the business lines, the Compliance and Risk Departments a solution to identify, assess, and monitor corporate clients’ environmental, social and governance (ESG) risks. The assessment process will gradually be applied to the portfolio of existing clients, taking into account the review schedule (see Chapter [6.5.1]). Whistleblowing system The whistleblowingsystem forms an integral part of Natixis’ Code of Conduct and is based on a company-wide policy which sets the minimum standard to be applied throughout Natixis. It is accessible to any person holding a current employmentcontract with Natixis, as well as employees of external companies (Natixis suppliers or subcontractors). Managing risks in our financing activities

Health and safety Working conditions Discrimination Forced labor and modern-day slavery Child labor

https://back.bpce-achats.fr/storage/documents/9YMh2ecdXFSrAUhMOp4SKfZWh64bfInkxPnW5izi.pdf (French only). (1)

492

NATIXIS UNIVERSAL REGISTRATION DOCUMENT 2021