QUADIENT // 2021 Universal Registration Document

RISK FACTORS AND INTERNAL CONTROL Internal control and internal audit framework

Alongside these investments, the Digital Departement continues to drive standardization across information systems by adopting global standards and backed-up by audit and compliance processes, resulting in higher quality systems, with reduced risk and at a lower operational cost. Global risk management ensures the continuous assessment and mitigation of key operational risks. Information security remains a major focus for Quadient. The need for security is even greater with the deployment of new SaaS solutions. With that in mind, Quadient has implemented an Information Security organization that enables specialist focus around solutions, group activities and use of personal data. This specialist approach ensures that dedicated capabilities are engaged where security matters most: in protecting customers, employees and protecting personal data that is entrusted to us. For the second year running, information security is a top three investment area for Digital, enhancing protection, detection, response and recovery capabilities, and demonstrating effective practice that has enabled CyberSecurity insurance renewal. At the core of information systems, data management is paramount. In this regard, Quadient ensures that employee and customer data management is compliant with the GDPR and other similar regulations. PREPARATION AND RELIABILITY CONTROL OF INFORMATION Each subsidiary has a team which reports to the local chief financial officer who is a member of the subsidiary’s management committee. Each team includes a management control structure and is responsible for preparing accounting and management data as part of the monthly reporting process. The Group finance department is responsible for identifying changes in operating conditions in order to anticipate any possible impacts these may have on the Company's accounting principles. Headquarters' management is also informed about significant local developments at regular operational reviews, and during other visits to subsidiaries. The Group financial controlling department has the role of coordinator in this domain. Accounting and financial information

CONSOLIDATION The current electronic reporting and consolidation system, which is in place at all consolidated subsidiaries, delivers consistent monitoring of budget and management data, improves lead times for producing the data (through automatic task scheduling management, with a reminder system) and improves the accuracy of consolidation information. Using the analysis data which is provided by the subsidiaries’ management control departments via this system and reviewed by local management, the Company’s chief financial officer receives a permanent flow of data that explains any differences in the consolidated reporting. The number of access authorizations to the information system is limited to a certain number of people per subsidiary to ensure the reliability and integrity of the reporting and consolidation data. This system has made it possible to monitor management indicators; it also produces sales and marketing data for the subsidiaries. CASH AND FINANCING Quadient S.A.’s financial team manages the Company’s cash centrally. In order to mitigate its risk exposure, the Company has developed procedures, including exchange rate and interest rate risk management, cash pooling and the optimization of the Company’s financing requirements. FORECASTS Quadient provides its shareholders with information on its medium-term forecasts. These forecasts are formulated based on the Company’s three-year plan and take into account market conditions at the beginning of 2021, namely the competitive environment and the economic conditions in the countries where the Company operates. Should there be a significant change in market conditions or the competitive environment, Quadient cannot guarantee that it would be able to achieve its forecasts.

4

99

UNIVERSAL REGISTRATION DOCUMENT 2021