Responsible Sourcing Policy

Harness Inc. and its subsidiaries (collectively “Harness,” “we,” or the “Company”) believe that building trusted relationships with our Vendors (as defined in our Vendor Code of Conduct) is a fundamental part of delivering the highest quality products and services to our customers.  At Harness, we are guided by our company values and act with integrity as we strive to provide our customers with a leading end-to-end platform for complete software delivery.  To achieve this, we must apply these principles throughout our supply chain.

We ask that our Vendors engage with our Procurement team early and responsively, that they be transparent and ethical, and that they adhere to the highest applicable standards of data privacy and security, which helps ensure that working with Harness is a beneficial experience for all.

PURPOSE AND SCOPE

This Responsible Sourcing Policy (the “Policy”) applies to Harness and our Vendors.  It sets out our commitment to have a positive impact through our business activities, on our environment, and in our community.  This Policy will apply to all contracts and agreements awarded to Vendors by Harness.

PRINCIPLES FOR IMPLEMENTING THIS POLICY

To implement this Policy, Harness will:

• Use a risk-based approach to ensure we focus on those areas where the risk is greatest and maximum impact can be achieved.
  

• Ensure all relevant employees and third parties are aware of this Policy.
  

• Ensure the Procurement team is responsible for establishing the acceptance and compliance by key Vendors with our Vendor Code of Conduct.
  

• Base our selection of products, services, and Vendors on objective and transparent criteria that include the consideration of ethical, environmental, and social performance, and quality of corporate governance.
  

• Protect the confidentiality of information entrusted to us.
  

• Encourage and facilitate Vendor diversity through direct contracts, partnerships, and active monitoring.
  

• Achieve meaningful outcomes according to organizational and stakeholder priorities through internal collaboration, stakeholder input, and Vendor engagement.
  

• Work collaboratively with Vendors to improve ethical, environmental, and social standards with the aim of realizing continuous improvement in all these areas for both our Vendors and us.
  

• Ensure that Vendors’ staff working in our offices are treated with the same respect for diversity and workplace safety as our own staff.
  

• Take climate action and minimize environmental impacts of procurement on our operations and throughout our supply chain.
  

• Recognize a Vendor’s own standards where they are operating in accordance with corporate governance principles and ethical, environmental, and social standards like those set forth in this Policy.
  

• Seek to exert commercial influence where we are confident that improvements can be made in our Vendors’ ethical, environmental, and social performance and quality of corporate governance.

OUR PROCUREMENT DECISIONS

We are committed to making our procurement decisions based on quality of product, level of service, pricing, and this Policy.

All Vendors with whom we spend or expect to spend will be asked to comply with this Policy and our Vendor Code of Conduct by accepting such terms during onboarding in our procurement system.  

Depending on level of spend and certain other factors our Procurement and Security teams deem appropriate, “Tier 1 Vendors” may also be asked to answer questions prior to onboarding in our procurement system regarding the following topics:

• General Questions
  

• Financial Information
  

• Data Privacy and Security Practices
  

• Risk Management
  

• Corporate Governance, Ethics, and Compliance with Applicable Laws
  

• Social and Workplace Responsibility
  

• Environment

A Tier 1 Vendor is defined as a Vendor that has or will have access to sensitive and/or business critical data and systems of the Company (e.g., those Vendors on our subprocessor list as published at our Harness Trust Center), and generally is a Vendor with which our annual spend is USD $50,000 or higher.

QUESTIONS

Please direct any questions about this Policy to procurement@harness.io. This Policy will be reviewed and updated as needed periodically and in line with legal obligations, business objectives, and operational needs.