Responsibility at Enfo .

Our operations are guided by the United Nations Sustainable Development Goals (Agenda 2030), the Paris Climate Agreement, and the objectives of the EU Corporate Sustainability Reporting Directive (CSRD). We are committed to developing our business so that it is ethical, transparent, and socially impactful.

We are a Reliable Partner, and we expect the same from our subcontractors. We fulfill our responsibility obligations and are a trusted partner in cooperation.

Enfo’s responsibility work is built on environmental responsibility, social responsibility, and economic and administrative responsibility. A financially stable and ethically led business forms the foundation upon which we build environmentally friendly and socially responsible solutions.

For Enfo employees, responsibility means taking environmental aspects, other people, and the community into account, as well as ensuring administrative compliance and reliability in everyday work and decision-making. Responsibility is also important to our customers, whose ecosystem Enfo is a part of.

We set goals for our operations in the context of our industry, and our certifications confirm that we develop and maintain our operational stability and necessary processes from different perspectives.

We evaluate our operations critically and recognize that we are not yet finished. Development work in the area of responsibility must continue in the long term, both independently and in cooperation with others. 

Enfo implements sustainable and environmentally friendly practices through the use of energy-efficient technologies, waste reduction, and recycling. We provide IT services essential to our customers’ business operations, safeguard their functionality and continuity, and work for a more sustainable and secure future. 

Enfo's concrete actions for environmental responsibility

• We are committed to operating in accordance with the ISO 14001 Environmental Management Standard and to continuously developing our environmental work.
• We have published and implemented an environmental policy across our organization.
• We ensure the energy-efficient use, long lifecycle, and recycling of our equipment.
• We support remote work and sustainable mobility.
• We operate in leased premises where environmental aspects are taken into account.
• The energy use of our data centers is monitored with the PUE (Power Usage Effectiveness) metric, and we comply with all environmental requirements relevant to our operations. 

Social responsibility is at the core of our operations – collaboration, trust, and expertise form the foundation of our values. We aim to create positive impacts both within our work environment and across all stakeholder groups and communities we influence. For us, this means, for example: 

• Developing expertise. At the core of our operations lies professional competence. We invest in the development of our employees by offering training and supporting on-the-job learning and career growth. 
   
• Flexible remote work opportunities. Enfo offers its employees the possibility of flexible remote work. Remote meetings and video conferences enable close cooperation despite distances, saving time and reducing emissions. 
   
• Supporting employee well-being. The well-being and endurance of all Enfo employees are supported through multiple means. Enfo has an active occupational safety committee and an early support model to address potential work ability risks at an early stage. 
   
• Positive employee experience. We conduct an annual employee survey to assess the employee experience and also monitor satisfaction through continuous pulse checks. 
   
• Enabling a positive customer experience. Our customer satisfaction levels are high. In the customer survey conducted in early 2025, 95% of respondents indicated that they would recommend Enfo. 

Enfo follows the principles of good governance and strives to act ethically and efficiently in all operations. Transparency is ensured whenever possible, taking strong information security into account. We adhere to ethical procurement principles.

We pay close attention to supplier selection and responsibility. We also require all our partners to commit in writing to responsible conduct in accordance with the Code of Conduct. Our customers require the same commitment from us. 

Compliance and Ethical Leadership

Our operations are based on high-quality management and compliance with the law. We are certified according to the ISO 9001 Quality and Management System, which demonstrates our commitment to continuous improvement and customer-centric operations. Enfo is a significant actor in the Finnish IT ecosystem, and we recognize our responsibility to contribute to its responsible development. 

Information Security

As an IT company, information security is an integral part of all our operations and service production. We protect the information of both our employees and customers and are committed to safeguarding our customers against cyber threats within our services.

We always handle our customers’ and partners’ information confidentially and ensure its integrity and availability. The ISO 27001, ISO 27701, and Katakri 2020 certifications serve as evidence that Enfo meets even the most demanding information security requirements. 

Code of conduct

Enfo has established and adheres to its Code of Conduct, which is aligned with Finnish and European legislation. We are committed to following the principles of ethics and responsibility in all our operations and to promoting the safety and respect of all parties affected by our business activities. 

Whistleblowing

Through Enfo’s whistleblowing channel, anyone can make a report in situations where there are suspicions of misconduct or violations, such as bribery, corruption, other illegal activities, or unethical behavior that conflicts with our Code of Conduct. The channel is provided by an external partner and encrypted to ensure anonymity. 

Whistleblowing reporting channel

Enfo holds the following continuously maintained certifications, under which environmental responsibility and sustainability-related matters are reported and audited by an independent authorized organization: 

• ISO14001 Environmental Management System

• ISO9001 Quality Management System

• ISO27001 Information Security Management System

• ISO27701 Privacy Information Management System

In addition, Enfo’s data center complies with the national Katakri 2020 Security Audit Criteria in areas T (Security Management) and F (Physical Security), for which a certificate has been granted by an accredited auditing body.

Enfo is preparing to meet the CSRD reporting requirements so that the necessary data can be collected from the beginning of 2025 to fulfill the reporting obligation entering into force in early 2026. The reporting will cover ESG content – Environmental, Social, and Governance responsibility.