Environmental, Social, Governance.

DataExpert BV is a Dutch private limited company with its registered office at Vendelier 65, 3905 PD Veenendaal, and four further offices in the Netherlands, Sweden and Denmark. This statement sets out the environmental, social and governance commitments we operate against, and the data points we intend to publish once our first formal reporting cycle is complete. We will be direct about gaps. Where a figure is not yet measured to a standard we are willing to publish, the relevant claim is left as a [FILL IN] marker rather than a placeholder estimate, so the omission is visible rather than buried.

1. Environmental

DataExpert operates a small physical footprint across five EU offices, with most of our operational energy use tied to forensic-workstation and data-processing infrastructure. We measure office energy consumption, prioritise renewable-energy suppliers where they are available in our markets, and design our cloud-infrastructure choices around providers with verifiable renewable-energy commitments. Our business-travel posture is conservative — most engagement work is delivered remotely or from the client's own secure facility, with travel reserved for evidence acquisition, on-site incident response, and training delivery.

[FILL IN: total annual energy consumption (kWh) across the five offices for the most recent reporting year, the renewable-energy share of that total, an estimate of scope-1 (direct), scope-2 (purchased electricity) and scope-3 (business travel, commuting, supply chain) emissions, and a year-on-year comparison once a second cycle is available.]

2. Social

Our work in cybersecurity and digital forensics is unbalanced toward male representation across the industry, and we acknowledge this in our own workforce. We are actively building a hiring pipeline that broadens representation across gender, background, and geography. Through the DataExpert Academy we support entry pathways for new practitioners — including bursary places on foundational forensics and OSINT courses for candidates from under-represented groups — and we contribute to industry initiatives that improve access to digital- evidence and incident-response training.

Staff welfare commitments include role-appropriate mental- health support for analysts who handle distressing material (a structural risk in forensic and OSINT work), formal whistleblowing channels, and a written code-of-conduct that every employee and sub-contractor signs as part of onboarding. [FILL IN: workforce gender split, headcount and office distribution, Academy bursary participation figures, staff-retention rate, and the name of the external mental-health support provider used for analyst-exposure support.]

3. Governance

DataExpert BV is governed by a management board accountable to its shareholders, registered with the Netherlands Chamber of Commerce (Kamer van Koophandel) under number 30093689 (Utrecht). We operate an internal information-security management system, run conflict-of-interest procedures on every engagement, and maintain whistleblowing and ethics channels accessible to all staff and sub-contractors. Independence from any single vendor or advisory firm is a structural choice as much as a commercial one — we work with the major forensics, OSINT and crypto-tracing platforms on an even footing, and decline engagements where a vendor relationship would compromise our findings.

[FILL IN: names and roles of the statutory director(s) per the KvK extract; the composition of any board-level committees (audit, risk, ethics) including independent / non-executive members; a description of the ethics-channel intake and triage process; and aggregate statistics on ethics-channel reports received and resolved in the most recent reporting year.]

4. Reporting

We publish a consolidated ESG statement on an annual cadence, with interim updates where material changes warrant them. The statement covers the metrics outlined above and any external-assurance arrangements we have in place. We treat the report as an internal management tool, not a marketing artefact — early cycles will be short and honest about what is not yet measured.

[FILL IN: confirmed first-publication date of the full ESG report, the reporting period it covers, the reporting framework adopted (for example GRI, the European Sustainability Reporting Standards under CSRD where in scope, or a defined narrative framework), and the name of any external assurance partner engaged to review the figures.]

5. Contact

Questions about this statement, or requests for the underlying data once it is published, can be sent to info@dataexpert.nl with "ESG" in the subject line, or by post to DataExpert BV, Vendelier 65, 3905 PD Veenendaal, Netherlands.