Human Rights Policy

Purpose#

DefectDojo is committed to respecting and promoting human rights in all operations, guided by the Universal Declaration of Human Rights (UDHR), the UN Guiding Principles on Business and Human Rights, and applicable laws. This policy affirms our responsibility to prevent adverse human rights impacts and foster dignity, equality, and fairness.

Scope#

This policy applies to all employees, contractors, suppliers, partners, and stakeholders engaged with DefectDojo globally.

Policy Statement#

Non-Discrimination & Inclusion#

• Prohibit discrimination based on race, gender, religion, disability, age, sexual orientation, or other protected statuses.
• Promote diversity and inclusion in hiring, advancement, and workplace culture.

Safe & Healthy Workplace#

• Ensure safe working conditions, free from harassment, abuse, or unsafe practices.
• Provide training on health and safety protocols and mental health resources.

Fair Labor Practices#

• Pay fair, livable wages meeting or exceeding legal minimums.
• Prohibit forced, bonded, or child labor.
• Respect legal working hours and overtime regulations.

Freedom of Association#

• Uphold employees’ rights to join unions, bargain collectively, or engage in lawful labor activities without retaliation.

Privacy & Data Protection#

• Protect personal data and privacy in line with applicable regulations (e.g., GDPR).

Community Impact#

• Engage stakeholders to assess and mitigate human rights risks in communities where we operate.
• Avoid complicity in human rights abuses linked to operations.

Responsible Sourcing#

• Require suppliers and partners to adhere to this policy through contractual agreements and audits.
• Address violations promptly, including termination for non-compliance.

Implementation#

• Training: Provide regular human rights training for employees and managers.
• Due Diligence: Assess human rights risks in operations, supply chains, and projects.
• Reporting: Maintain confidential channels (e.g., hotline, HR) to report concerns without retaliation.
• Corrective Action: Investigate violations promptly and implement appropriate remedies.
• Collaboration: Partner with NGOs, governments, and industry groups to advance human rights, as deemed appropriate by DefectDojo’s CEO.

Accountability & Governance#

• Oversight of policy implementation is provided by the Human Rights Steering Committee.
• Conduct annual audits and public reporting on progress and challenges.
• Violations of this policy may result in disciplinary action, up to and including termination of employment or contract.

Policy Review#

This policy is reviewed biennially, or as needed, to align with evolving standards, applicable laws, and stakeholder feedback.