Human Rights & Modern Slavery

Bonterra Human Rights Statement

Bonterra is committed to respecting and promoting human rights across all aspects of our business operations and stakeholder engagements through our products and services, and our role as an employer. As a remote-first software company, we acknowledge that we can influence human rights both positively and adversely, including rights related to privacy, non-discrimination, and maintaining a clean, healthy, and sustainable environment.

Bonterra is guided by our mission, values, the United Nations Universal Declaration of Human Rights and the UN Guiding Principles on Business and Human Rights. Our Bonterra human rights statement outlines our commitment to human rights and applies to all countries and regions in which we operate. We comply with all applicable laws and regulations.

Below are our policies and activities related to human rights as they affect our employees, our suppliers and business practices, and our customers.

Respect for Human Rights

Bonterra is committed to a work environment in which all individuals are treated with respect and dignity. All employees have the right to work in a professional atmosphere that promotes equal employment opportunities and prohibits discriminatory practices, including any form of harassment.

Bonterra expects that all relationships among persons in the workplace will be business-like and free of harmful bias, prejudice, and harassment. Our policies require that employees and applicants be treated fairly and without regard to Protected Categories (as defined in the Equal Employment Opportunity Policy.)

Bonterra has ZERO TOLERANCE for and will not condone or tolerate any form of discrimination or harassment in the workplace by any employee, independent contractor or any third parties and will, to the extent permissible by law, seek to apply its policy against any harassment by third parties. Any employee violating this policy will be subject to appropriate disciplinary action, up to and including termination of employment.

Bonterra has implemented the following policies to support this commitment:

*Located in the Bonterra Employee Handbook (rev 07/2024)

Workers’ Rights

We are committed to fair employment practices, including fair wages, reasonable working hours, and a safe working environment.

We oppose forced labor, child labor, modern slavery, and human trafficking in any form.

Through our benefits and policies, we are dedicated to providing a safe and healthy workplace, ensuring compliance with safety regulations and promoting employee well-being. We also have established emergency action plans for our two offices.

We actively monitor and report any work-related injuries, harassment claims, and grievances through multiple confidential channels, including an anonymous hotline and online reporting platform, to respond to and detect any trends that we need to address to ensure continuous improvement for our employees and contractors. We commit to transparency by reporting on our human rights performance in our executive reports. Our non-retaliation policy ensures that all employees can raise concerns without fear of reprisal.

Privacy and Data Protection

We recognize the importance of protecting personal data and are committed to respecting employee privacy. Our Office of the Chief Information Security Officer ensures our data handling practices comply with applicable privacy laws, ensuring transparency and security. In addition to our Information Security Management System (ISMS) Policy and in accordance with our Incident Management policy, we regularly conduct security incident response tests and report any cybersecurity incidents to the Bonterra Board of Directors quarterly.

All Bonterra employees are expected to follow the Bonterra Privacy Policy and receive security awareness training. Our Risk & Compliance Teams conduct internal audits and testing per our ISMS Policy and Bonterra participates in the following 3rd party audits: Security Operations Center (SOC) 2 Type II, International Organization for Standardization (ISO) 27001, Federal Risk and Authorization Management Program (FedRAMP) Moderate, Payment Card Industry Data Security Standard (PCI DSS), and TruSight.

Our Data Privacy Framework is detailed in our Bonterra Privacy Policy. For more information regarding Bonterra's adherence to the General Data Protection Regulation and other data protection laws of the European Union, the European Economic Area, and their respective member states, Switzerland, and the United Kingdom, please see the Bonterra Data Processing Addendum.

We expect our customers to uphold their customer responsibilities as outlined in the Bonterra Master Subscription and Services agreement including unauthorized access or use and transmission of sensitive data.

Supply Chain Responsibility

We conduct due diligence and encourage our suppliers to adhere to responsible business practices. Our due diligence process is led by our Information Security Compliance team. The vendor evaluation consists of:

1. Request submission by the requestor;
2. Request for information (RFI) to the vendor to ensure their security, DEIB and ESG practices are aligned with Bonterra policies and values; and
3. Final risk reviews prior to making final approvals.

Community Engagement

In addition to providing software and services to the social good space, we aim to positively impact the communities in which we operate through philanthropy, volunteering, and partnerships. As part of our Doers of Good program, employees receive paid time off to volunteer for non-profits or do acts of community good.

We strive to mitigate adverse environmental impacts our operations may have on local communities and complete GHG Assessments each year that are 3rd party verified.

Governance and Accountability

Our Board of Directors, along with the Bonterra Leadership Team, holds ultimate responsibility for our human rights policies. Employees are expected to adhere to the policies noted here and report any concerns or violations.

Bonterra provides channels for employees and stakeholders to raise concerns or report violations. In the event that the concern cannot be raised to the supervisor or Bonterra point of contact, it can be raised confidentially by submitting a Workday case or anonymously through our Employee Ethics Hotline (managed by a third-party provider).

All concerns will be investigated promptly, with appropriate corrective actions taken if necessary. Material violations and outcomes are reported to the Bonterra Leadership Team and the Board of Directors.

We promote awareness of these reporting channels through policies and communications. We prohibit retaliation against anyone who, in good faith, raises a grievance or concern per our Anti-Retaliation Policy.

Continuous Improvement

We are committed to regularly reviewing and improving our human rights practices in response to emerging risks and stakeholder feedback. This statement will be evaluated and updated periodically to reflect evolving standards and our growth as a responsible enterprise software company.