Supplier’s Declaration of Conformity

Sun Life Tech declares, under its own responsibility, that the Information Security Management System within the scope stated below has been internally assessed and determined to conform to the applicable requirements of ISO/IEC 27001:2022.

The determination is supported by the organization’s documented ISMS scope, information-security policies, asset inventory, risk assessment, risk-treatment plan, Statement of Applicability, operating procedures, internal audit, management review, corrective-action process, and retained evidence.

This declaration is a first-party supplier’s declaration of conformity. It does not constitute accredited third-party certification, independent certification-body registration, or endorsement by the International Organization for Standardization.