Worldline - 2019 Universal Registration Document

D

EXTRA-FINANCIAL STATEMENT OF PERFORMANCE Reporting methodology and scope for non-financial indicators

Reporting scope for the indicators resulting from the materiality analysis D.6.2.2 [GRI 102-45] [GRI 102-49] [GRI 102-10] [GRI 102-4]

The reports concern the financial year from January 1, 2019 to December 31, 2019. It gathers the information on the environmental, social and societal impacts of Worldline and its entities. The report includes all entities acquired before the end of 2019. Worldline obtains its non-financial data from internal measurements and external sources (third parties). The frequency of the extra financial reporting will be annually. The 2019 CSR reporting scope covers 29 countries: Argentina, Austria, Belgium, Brazil, Chile, China, Czech Republic, Estonia, Finland, France, Germany, Hong Kong, Hungary, India,

Indonesia, Italy, Latvia, Lithuania, Luxembourg, Malaysia, Netherlands, Poland, Singapore, Spain, Sweden, Switzerland, Taiwan, United Kingdom and the USA. The tables Key performance indicators in Sections D.1.4, D.2.6, D.3.5, D.4.6 and D.5.4 specify the scope associated with each indicator provided. Following the deconsolidation with the Atos group, Worldline will not be part anymore of the reporting scope of Atos as part of the 1 st of January 2020.

Reporting tools [GRI 103-3 Indirect Economic Impacts] [GRI 103-3 Market Presence] D.6.2.3 [GRI 103-3 Procurement Practices] [GRI 103-3 Anti-Corruption] [GRI 103-3 Energy] [GRI 103-3 Emissions] [GRI 103-3 Employment] [GRI 103-3 Occupational Health and Safety] [GRI 103-3 Training and Education] [GRI 103-3 Diversity and Equal Opportunity] [GRI 103-3 Customer Privacy] [GRI 103-3 Economic Performance]

Since 2011, the Atos group has used a SAP Sustainability Performance Management (SuPM) as a global tool to facilitate the gathering of information, global workflows, validations, exploitation and visualization of KPIs results. Worldline has used this reporting tool since 2014. Since the carve-out with the Atos group (1 st of May 2019), Worldline continue using SuPM in 2019 but will have its own reporting tool as part of the 1 st of January 2020.

For 2019, most of the CSR indicators are gathered using SuPM. Most of HR indicators data have been extracted from the Atos group’s HR tool – Clarity – and uploaded into SuPM via linking and interfaces. A few indicators are still not gathered into the sustainability global tool but have been collected at Worldline level in other tools or through interviews and discussions.

Methodology of indicators [GRI 103-1 Worldline Specific Disclosures] D.6.3 [GRI 103-2 Indirect Economic Impacts]

Detailed information related to indicators from TRUST2020 program D.6.3.1

Quality Score of 8,751 – Contracts’ Service Availability & Response Times When applicable and agreed with the customer, Worldline contracts may include Service Level Agreements (SLA) linked to the availability and/or the response time of the delivered services. Therefore the SLAs are categorized in terms of “Service Availability” and “Response Time”. The SLA fulfillments are measured and reported on a monthly basis to ensure timely remediation actions in case of the deviations from the agreed on SLAs. Although each Worldline group entity is responsible to monitor all its contractual SLAs, since 2018 the SLA monitoring and reporting at Worldline group level focus on the large service contracts and also on the most business and customer critical SLAs. To measure the level of adherence to the SLAs in the scope of Global reporting, Worldline has defined an indicator called “ Quality Score Service Availability & Response Time ” for contracts. The quality score - service availability & Response Time is then calculated by dividing the number fulfilled critical SLAs by the total number of identified business critical SLAs. Then the ratio is multiplied by the financial weight of each contract. The consolidated Quality Score Service Availability and Response Time, as well as any SLA breach in the scope of

Global reporting is communicated to the Worldline Executive Management on a monthly basis to ensure immediately remediation actions. 100% of incident responses compliant with Worldline security policy The number of security incidents and the number of security events correspond to the number of tickets that have been opened to signal an incident during the reporting period. There are three principal ways of opening a ticket: When the system logs a security event considered as ● being security relevant an alarm is created, a team analyses all the alarms and decides if a ticket needs to be open or not; When a client warns Worldline about a wrong information ● treatment; When an employee is subject to a security incident. ● The different types of security incidents are defined through Worldline security policy. The compliance rate is calculated by dividing the Number of incident responses compliant with Worldline security policy by the total number of incident responses.

200

Universal Registration Document 2019