Home Trust Center Vendor Code of Conduct

Vendor Code of Conduct

Security & Compliance

Vendor Code of Conduct

Echo360 is committed to maintaining high standard of business conduct and ethics, and we seek Vendors who share in our commitments. This Vendor Code of Conduct sets out the minimum standards expected from our valued Vendors and suppliers. This Code is incorporated into all agreements and applies to all of our Vendors.

Ethical Conduct

Compliance, Applicable Laws

Vendors will comply with applicable local and international laws, rules and regulations and will also comply with this Code of Conduct. In the event that any applicable law or regulation is more restrictive than this Code of Conduct, such law or regulation shall govern.

Conflict of Interest

Echo360 is committed to identifying and addressing real and potential conflicts of interest that may arise in the conduct of its business. Vendors must avoid engaging in any activity that would create an actual or apparent conflict of interest regarding their provision of products or services to Echo360. If a Vendor becomes aware of an actual or potential conflict of interest, the Vendor must notify Echo360 immediately.

Competition, Fair Dealing and Gifts

Echo360 seeks to compete in a fair and honest manner and expects the same of its Vendors. Echo360 does not tolerate anti-competitive behavior in any form and seeks competitive advantages through superior performance rather than through unethical or illegal business practices.

Bribery and Corruption

Echo360 does not tolerate corruption or bribery in any form and expects its Vendors not to engage in any form of illegal or inappropriate activity, including corruption, extortion, embezzlement, or bribery, regardless of the country in which the Vendor provides services to Echo360. Soliciting, accepting, offering, paying bribes or making other improper payments, including facilitation payments, is strictly prohibited, whether directly or through any third party.

Money Laundering

Echo360 does not tolerate economic crime, including money laundering and terrorist financing activities. Vendors shall not provide any service or enter into any arrangement that facilitates or may constitute Echo360 being involved directly or indirectly in economic crime.

Sanctions and Export Controls

Vendors must not conduct activities nor assist any other party in violating applicable economic sanctions or export control laws and regulations.

Employment Practices

Echo360 provides equal employment opportunities for all and we expect our Vendors to share the same commitment. Vendors shall not discriminate based on race, ethnicity, color, age, gender, gender identity or expression, sexual orientation, political beliefs, citizenship, national origin, religion, disability, parental status, economic/class status, veteran status, or any other protected status.

Echo360 is committed to comply with applicable wage, hour and overtime laws and regulations. Vendors shall set working hours, wages and overtime pay in compliance with applicable laws in the country or countries in which they operate.

Harassment, Discrimination and Equal Opportunity

Echo360 promotes a working environment in which all individuals are able to make best use of their skills free from discrimination or harassment. Vendors must not tolerate any form of discrimination including but not limited to race, religion, disability, sex and age. Unfair treatment, harassment or any form of bullying will not be tolerated.

Freedom of Association

Echo360 principals and staff have the right to lawfully form and join organizations of their own choosing and peacefully associate. Vendors must comply with applicable laws and regulations governing the legal rights of their employees to join or not to join worker organizations, including trade unions.

Human Rights and Child Labor

Human rights are inherent to all human beings regardless of race, sex, nationality, ethnicity, religion or any other status. Everyone is entitled to these rights, without discrimination. Echo360 is opposed to and does not tolerate any form of child labor.

Human Trafficking and Modern Slavery

Vendors shall not engage in or support human trafficking or modern slavery, including forced, bonded or involuntary labor. Vendors should reject any form of slavery or human trafficking and monitor their supply chain regularly to identify and mitigate any potential risks.

Health and Safety Conduct

Echo360 is committed to maintaining a safe and healthy workplace in line with internationally declared human rights and expects the same commitment from Vendors. Vendors shall provide a healthy and safe working environment and shall minimize and respond to health and safety incidents and accidents occurring in the workplace. Vendors must conform to all applicable health and safety laws, regulations, and to industry codes and provide adequate personal protective equipment where required.

Environmental Conduct

Echo360 is committed to minimizing the direct and indirect environmental impacts of its operations and works to continuously improve its environmental performance. Echo360 aims to promote a more sustainable supply chain and is working towards proactive engagement to mitigate environmental impacts.

Echo360 expects Vendors to identify and manage the environmental impacts of their organization, to minimize greenhouse gas emissions and to promote environmental responsibility, effective waste management and efficient use of natural resources.

Additional Vendor Policies

Intellectual Property

Echo360 is committed to protecting its intellectual property. We expect Vendors to respect the intellectual property rights of Echo360 and others. Vendors shall not use Echo360 intellectual property in a manner that is not authorized by us nor other parties’ unlicensed software or technology in support of or in connection with work for or with Echo360.

Confidentiality and Data Privacy

Echo360 requires its Vendors not to disclose and maintain the confidentiality of information accessed through their contractual relationship with us. Vendors must ensure that their personnel authorized to handle our data commit to confidentiality and adopt appropriate technical and organizational measures to safeguard our information.

Vendors must adhere and strictly comply with applicable data protection, privacy, and information security laws and associated regulatory requirements as well as with the highest industry standard information security policies whenever our confidential and proprietary information, and particularly personal information, is collected, stored, processed, disclosed, transferred and/or shared. Vendors must process personal data strictly according to Echo360’s instructions.

Information Security

Echo360 expects Vendors to be committed to protecting information entrusted to it, as well as physical and IT assets, through information security controls. Vendors shall develop, implement and use information security controls that meet Echo360’s requirements to maintain and protect information, including physical and electronic assets, obtained from Echo360, our clients and other third parties.

Vendors shall ensure their Information Security Program: (i) includes administrative, technical, and physical safeguards consistent with applicable federal and/or state statutes or regulations, (ii) describes physical security, change management procedures, and privacy policies, (iii) protects against unauthorized access and anticipated threats, and (iv) maintains confidentiality, integrity, availability, and disposal, of Echo360 information.

Due Diligence and Monitoring

Vendors must have processes and controls in place to comply with this Code. Where appropriate, Echo360 may conduct risk-based due diligence to assess its relationship with Vendors. Vendors must provide complete and accurate information to facilitate due diligence efforts undertaken by Echo360, where requested.

General Terms

Vendors who work for or with Echo360 agree to: adhere to the requirements and expectations set out in this Code; provide complete and accurate information to facilitate third party due diligence efforts undertaken by Echo360; and comply with the applicable laws and regulations in the country or countries where they operate.

Our Vendors are directed to report observed illegal or unethical behavior to the Echo360 Legal Department at legal@echo360.com or any of our executive officers. This Code will be reviewed periodically and the updated Code will be available on our website.