Legal & Compliance

Familiarising Yourself with Policies and Standards

Employees are required to read, understand and comply with the policies, processes, procedures and standards applicable to their role, including requirements relating to quality, information security, service management, data protection and compliance.

Employees should regularly consult the IMS and other official internal sources to ensure they are following the latest applicable requirements.

Training, Awareness & Staying Informed

Employees must complete all mandatory training and awareness activities assigned to them within the established deadlines and are responsible for staying informed about relevant updates to company policies, IMS requirements, and applicable legal, regulatory and contractual obligations.

Employees should regularly consult the relevant internal resources and participate in applicable training and awareness activities to ensure they have the knowledge required to fulfil their responsibilities effectively.

For more information on scheduled training sessions, refer to the "Training & Awareness > Mandatory Training Schedule" Intranet page.

Complying with Legal, Ethical and Internal Requirements

Employees are expected to conduct their activities in accordance with applicable legal, regulatory, contractual and internal requirements, as well as Devoteam Portugal’s ethical principles and Code of Conduct.

This includes respecting requirements relating to data protection, information security, confidentiality, conflicts of interest, anti-corruption and other compliance obligations relevant to their role.

Reporting Non-Compliance and Concerns

Employees must promptly report any actual or suspected noncompliance, security incident, data protection concern, breach of policy, unethical conduct or other compliance concern through the appropriate reporting channels.

Depending on the nature of the matter, this may include the relevant Service Desk channel, or the Devoteam Portugal Compliance Team at pt.compliance@devoteam.com

For suspected ethical misconduct or wrongdoing, employees may also use Devoteam's Ethical Alert System.

Protecting Information and Company Assets

Employees are responsible for appropriately protecting information, personal data, information systems, equipment, intellectual property and other company or client assets entrusted to them.

These resources must be used securely and responsibly and in accordance with applicable policies and procedures, including Devoteam's IT Charter and Information Security Policies.

Supporting Continual Improvement

Employees are encouraged to contribute to the continual improvement of the IMS by identifying and reporting nonconformities, risks, weaknesses and improvement opportunities related to processes, controls, services or working practices.

Employees shall also support corrective and improvement actions relevant to their responsibilities, where applicable.