Posit Human Rights Policy

Scope

This policy applies to Posit Software, PBC (“Posit”) and all of its Associates — meaning every employee (full-time, part-time, and temporary), member of the Board of Directors, officer, contractor, consultant, agent, and any other party acting on Posit’s behalf.

Our human rights responsibilities do not stop at our own front door. This policy extends to the full scope of our operations and our value chain, including the suppliers, vendors, and partners whose products and services support our work, and the communities and open-source ecosystems in which we operate. We acknowledge that our influence over these relationships varies, and we calibrate our approach accordingly, but we expect our commitment to human rights to flow through all of them.

Our Commitment

Posit is committed to respecting human rights across everything we do. We recognize the intrinsic dignity and equal worth of every person. We do not merely want to avoid causing harm — we want to be a company whose presence in the world is a genuine good.

Our commitment is grounded in three foundational international frameworks:

• The UN Guiding Principles on Business and Human Rights (UNGPs), which establish that companies have a responsibility to respect human rights and to provide or contribute to remedy when harm occurs.
• The International Bill of Human Rights, including the Universal Declaration of Human Rights, which articulates the fundamental rights and freedoms that belong to all people.
• The International Labour Organization’s (ILO) Declaration on Fundamental Principles and Rights at Work, which establishes core labor standards including freedom of association, elimination of forced and child labor, and freedom from discrimination.

Where local laws and regulations establish higher standards, we follow those. Where local law falls below international standards, we use these frameworks as our guide.

What This Means in Practice

Our People

Our Associates are our most important stakeholders. We are committed to:

• Fair and equitable compensation, benefits, and working conditions for everyone who works at Posit, regardless of location.
• Freedom of association and the right of employees to organize, consistent with applicable law.
• A workplace free from forced labor, child labor, human trafficking, and all forms of modern slavery.
• A safe, healthy, and psychologically supportive work environment. As a remote-first company, this includes digital as well as physical safety.
• Freedom from harassment, discrimination, and retaliation, as reflected in our Code of Conduct and DEIA commitments.
• Privacy and data rights for employees and users alike, consistent with our privacy policies and applicable law.

Our Value Chain

We recognize that human rights risks can exist throughout our supply chain and vendor relationships, not just inside our own walls. We are committed to working with suppliers and partners who share our values. Specifically:

• We include human rights expectations in our supplier and vendor relationships, proportionate to the risk involved.
• We will not knowingly do business with suppliers who use forced labor, child labor, or engage in human trafficking.
• Where we identify concerns in our value chain, we will work constructively toward improvement before disengagement, recognizing that responsible exit is sometimes the only appropriate outcome.

Our Community and Products

Posit builds tools that are used by researchers, educators, scientists, and data practitioners around the world. We take seriously the responsibility that comes with that reach. We are committed to:

• Designing our software and services with accessibility and inclusion in mind, so that our tools are available to all, regardless of physical ability, economic means, or location.
• Considering the potential human rights implications of our products and how they might be used, and taking appropriate steps when we identify risks.
• Developing and maintaining open-source tools that advance access to knowledge, reflecting our belief that democratizing data science is itself a human rights-aligned act.

Identifying and Addressing Human Rights Risks

Respecting human rights requires us to look honestly at where our operations and relationships might cause or contribute to harm, and to act when we find problems. This is what the UNGPs call “human rights due diligence.” For Posit, this means:

• Periodically assessing our operations and value chain relationships to identify potential negative human rights impacts, with particular attention to higher-risk areas such as our global hiring practices, vendor relationships, and how our software may be used.
• Integrating these assessments into our operational planning and risk management processes rather than treating them as isolated compliance exercises.
• Tracking and reporting on our progress, including in our PBC Report and B Corp recertification, consistent with our commitment to transparency.

Remediation

When Posit has caused or contributed to a negative human rights impact, we are committed to remediation. The goal is to make things right, not to manage perception. Depending on the nature of the impact, remediation may take different forms: a formal grievance process, disciplinary action, changes to how we work, reparative steps toward affected individuals or communities, or some combination of these.

Where we have contributed to harm through our value chain, but did not directly cause it, we will use our leverage and influence to encourage remediation and, where that fails, take appropriate steps to limit our connection to the harm.

Speaking Up

We want to know when something is wrong. If you believe Posit or anyone acting on its behalf has caused or contributed to a human rights harm, or if you believe anyone acting on Posit’s behalf is at risk of doing so, please report it. You can do so by:

• Speaking directly with your manager or People Operations.
• Contacting the Legal team.
• Using our externally available email address: stakeholders@posit.co.

Retaliation against anyone who raises a concern in good faith is strictly prohibited. We investigate all reports promptly and fairly.

Governance and Accountability

This policy has been approved by Posit’s Board of Directors. Responsibility for its day-to-day implementation rests with Legal and People Operations, with oversight provided by the Board. The General Counsel is responsible for ensuring the policy remains current and fit for purpose.

This policy is reviewed annually, or more frequently when our operating environment or legal obligations change. Updates are approved by the Board.

Policy Lifecycle and Enforcement

Review Process: This policy is reviewed annually, or as necessary in accordance with business, legal, or regulatory developments.

Exceptions: Any exceptions to this policy must be approved in writing by the General Counsel and, where appropriate, the Board, before implementation.

Enforcement: Violations of this policy may result in disciplinary action, up to and including termination of employment or contractual agreements, depending on the severity and impact of the violation.

This policy is a living document and may be updated as our community and regulatory environment evolve.

Last Update: 2026