Quality Policy

The core objective of WERXE d.o.o. is to provide clients with the highest quality of services and products — from consulting and software development (websites, platforms, applications, modules, and custom technical solutions) to the delivery of our own digital solutions (Curriqla, PrivacyMark) which, given the sensitivity of the data they manage, are installed and run within the client's environment, with technical support and maintenance provided by WERXE.

The central principle of quality for WERXE is privacy management throughout the entire lifecycle of a client relationship — from first contact through project completion and offboarding. This is our key differentiator: we understand the GDPR and act in accordance with its principles even when doing so is demanding, including a willingness to propose an alternative solution to the client or to decline an initial request that is not compliant with data protection principles — with the decision documented. Security and confidentiality are built into the way we deliver our services (privacy-by-architecture: protection arises from the architecture of the collaboration itself, not only from policies and contracts): work takes place within the client's environment, clients' production data generally does not reside on WERXE's infrastructure, and we access clients' personal data only under a data processing agreement concluded in advance.

Expertise, commitment, and reliability set us apart from the competition and form the foundation of long-term client relationships. The company's vision is to be a recognized partner for secure and compliant digital solutions on the domestic and regional market, with a responsible approach toward employees, associates, and clients.

We achieve this through:

• managing privacy and data protection as a guiding principle in every phase of collaboration;
• considering the context of the organization and aligning the integrated management system with the company's strategic objectives;
• setting, monitoring, and reviewing measurable quality objectives, and defining employee responsibilities in line with them;
• establishing, applying, and continually improving a quality management system in accordance with ISO 9001:2015 and an information security management system in accordance with ISO/IEC 27001:2022;
• complying with legal and regulatory obligations (in particular the General Data Protection Regulation — GDPR — and cybersecurity regulations);
• monitoring and adopting new technologies and providing ongoing employee training;
• carefully selecting and regularly evaluating suppliers and external associates;
• understanding and meeting client needs and exceeding client expectations;
• responding to incidents and client requests quickly and in a structured manner, in line with agreed service levels (SLA);
• continual improvement as a process-based, cyclical approach (PDCA);
• ensuring that our policy reflects what WERXE actually does.

The company is committed to fulfilling applicable requirements and to establishing, maintaining, and continually improving an integrated management system in accordance with the requirements of ISO 9001:2015 and ISO/IEC 27001:2022. The management of WERXE d.o.o. is responsible for communicating the Quality Policy to all persons working for or on behalf of the company, and for making it available to relevant interested parties.