NATIXIS_REGISTRATION_DOCUMENT_2017

6 ENVIRONMENTAL AND SOCIAL RESPONSIBILITY Report by one of the Statutory Auditors

Report by one of the Statutory 6.6 Auditors, a designated independent third-party body, on the consolidated social, environmental and societal information contained in the management report

Fiscal year endedDecember 31,2017 To the shareholders,

for in Article L. 225-102-4 of the French Commercial Code (vigilance plan) and by Act no. 2016-1691 of December 9, 2016 on the preventionof corruption(the Sapin II Act). Our work was performedby a team of five people over a period of approximately four weeks between December 2017 and March 2018. We called upon our CSR experts to help us performthis work. We performed our work in accordance with the order dated May 13, 2013, defining the conditions under which the independentthird party performs its engagement;in accordance with the professional code of the Compagnie nationale des commissaires aux comptes (France’s National Association of Statutory Auditors) relating to this assignment, and pursuant to the international standard ISAE 3000 for the conclusion on the fairnessof the information (1) .

In our capacity as the StatutoryAuditors to the companyNatixis S.A. appointedas an independentthird-partybody, accreditedby the French Accreditation Commission (COFRAC) under No. 3-1048,we hereby present our report on the consolidatedsocial, environmental and societal information (hereinafter the “CSR Information”)prepared for the fiscal year ended December 31, 2017, as presented in the ManagementReport, pursuant to the provisions of Article L. 225-102-1 of the French Commercial Code. Company’s responsibility The Board of Directors is responsible for drawing up a ManagementReport including the CSR Informationprovided for in Article R. 255-105-1 of the French Commercial Code, in accordance with the standard applied by the Company (hereinafterthe “Standard”),a summary of which is provided in the Management Report. This Standard is available from the Company’sregisteredoffice on request. Independence and quality control Our independence is definedby regulatorytexts, the Frenchcode of ethics (code de déontologie) of our profession and the requirementsof ArticleL. 822-11of the FrenchCommercialCode. In addition, we have implemented a system of quality control including documented policies and procedures regarding compliance with the ethical requirements, French professional standards and applicable legal and regulatory requirements. to certify that the ESR Information required is included in the a managementreport, or that any omissionis explainedpursuant to the third Sub-Paragraphof Article R.225-105of the French Commercial Code (Certificate of inclusion of the ESR Information); to draw a conclusionexpressing reasonable assurance on the a fact that all the significant aspects of the ESR Information, taken as a whole,are presentedin a fair manner,in accordance with the Standards (Reasoned opinion on the fairness of the ESR Information). It is not our responsibility, however, to assess any other applicable legal provisions, including in particular those provided Statutory Auditor’s responsibility It is our responsibility,on the basis of our work:

I 

CERTIFICATE OF INCLUSION

OF ESR INFORMATION

Nature and scope of the work

We familiarized ourselves with the presentation of the sustainable development Standards, in accordance with the social and environmentalconsequenceslinked to the company’s activities and to its commitments,and, where applicable, to the resulting initiatives or programs, on the basis of meetings with the managersof the departmentsconcerned.We comparedthe CSR Informationset out in the managementreport with the list provided for by Article R. 225-105-1 of the French Commercial Code. In the event that some consolidated information was missing, we checked that explanations had been provided in accordancewith the provisions of Sub-Paragraph3 of Article R. 225-105 of the French Commercial Code. We verified that the CSR Information covers the scope of consolidation, i.e., the company, its subsidiariesas defined by Article L. 233-1 and the controlled entities as defined by Article L. 233-3 of the French Commercial Code, within the limitations set out in the methodological note accompanying the CSR Information presentedin the managementreport. Conclusion Based on this work, we hereby certify that the CSR Information requiredis includedin the managementreport.

ISAE 3000 – Assurance engagements other than audits or reviews of historical financial information. (1)

436

Natixis Registration Document 2017