Policies and procedures we have a clear and detailed set of policies and procedures that ensure consistency in the way we manage our day-to-day operations.

Qualified team We have a highly trained and experienced team in the implementation and maintenance of internal control systems, which ensures effective management of risks and opportunities.

Crime Prevention Model (CPM) We have developed a CPM in which we identify and document the criminal risks that may arise from our activity, as well as the definition and implementation of controls and mechanisms that enable us to prevent or detect illegal conducts.

Mechanisms for personal data protection We have different policies to guarantee the correct treatment of personal data, and these are evaluated periodically.

Internal Control over Financial Reporting (ICFR) We have a ICFR that comprises a set of controls over the financial processes, with the aim of mitigating the risks that may have a significant impact on the financial information reported internally and to third parties.

Internal Non-Financial Report Control System (INFRCS) A Internal Non-Financial Report Control System has been designed to ensure the accuracy of the company’s information and performance, as well as to respond to the different requirements and facilitate the reporting process, in line with the main current and future regulatory frameworks that will come into force in the coming years.

Mechanisms for money laundering prevention We have the main mechanisms in place to comply with the requirements established by the regulations for the prevention of money laundering, including a Prevention Manual, an OCI (Internal Control Body), a representative before SEPBLAC and evaluations of the main customers in formal and economic terms by an external advisor.