Business ethics

Underpinned by robust corporate governance frameworks, responsibility and transparency drive integrity and ethics at Aleatica Mexico. We ensure compliance with laws and internal policies while fostering a corporate culture grounded in ethical principles.

Code of ethics and conduct

Our code of ethics and conduct reflects best practices and represents our organisational culture. It is a core tool that guides our team to make the right decisions in all circumstances.

We develop annual communication and training plans to reinforce the core principles of the code of ethics and conduct, the Anti-Corruption Policy, and related internal policies.

Our ethical pillars:

Safety First

Ensuring the safety of our employees, business units, and customers is our top priority.

Social and Environmental Sustainability

We are committed to community outreach and environmental stewardship.

Service Excellence

We strive for excellence in customer service, quality, and innovation.

Corporate Integrity

We enforce a zero-tolerance policy for bribery, money laundering, and conflicts of interest.

Passion for the Team

We promote respect for human rights, diversity, and inclusion in everything we do.

I CARE, our ethical channel

We have implemented I CARE, our ethical channel (which stands for ME IMPORTA in Spanish), managed by the Compliance Department and designed to ensure confidentiality and protect whistleblowers from any form of retaliation. Reports can also be submitted anonymously. The channel is open to all employees and stakeholders.

Through I CARE, we reaffirm our collective commitment to integrity and transparency. We value the perspectives and concerns of every team member and stakeholder—whether to report unethical or illegal conduct or to raise questions or concerns. As members of Aleatica Mexico, we are all responsible for maintaining an ethical environment and reporting any actions that are improper, unlawful, or potentially harmful to our organisation.

Contact methods for reporting misconduct or breaches of Aleatica's ethics policies include:

Intranet

Corporate Integrity > Ethical Channel I CARE

Internet

http://icare.aleatica.com/

Phone

Mexico: 800 681 6945

Compliance investigation process

When the Compliance Department decides to open an investigation, an investigator is appointed based on the nature of the allegation. This person coordinates with relevant departments to carry out the investigation and evaluates whether precautionary measures should be taken while the process is underway.

All reports with sufficient basis are investigated. The designated governance body for Compliance matters is notified at least quarterly.

Key compliance indicators

In 2024, a total of

184 reports and enquiries

were received, 20.26% more than in 2023.

In 2024, no confirmed corruption cases

resulted in disciplinary action.

Request additional information

No

I CARE
Report or enquiry

Compilance Department responds to the informant confirming receipt

Is there enough information?

Si

Appoint an investigator. Initiate investigation.

Interviews. Evidence collection.

Analysiis and evaluation of results.

Decision-making, disciplinary, and corrective measures.

Closure and follow-up on recomendations.

Anti-money laundering and counter-terrorist financing

We strictly comply with applicable laws and regulations on anti–money laundering (AML) and counter–terrorist financing (CTF), and we only conduct business with third parties that operate legally and whose funds originate from lawful sources.

In Mexico, the company responsible for managing the electronic toll collection system is classified as a “reporting entity” under the Federal Law for the Prevention and Identification of Transactions Involving Illicit Funds. In compliance with this law, we submit monthly reports to the Financial Intelligence Unit (UIF) of the Secretariat of Finance and Public Credit, detailing the issuance of prepaid cards and any instances where customer deposits on those cards exceed the thresholds established by law

Zero tolerance for corruption

In line with our Anti-Corruption Policy, we maintain a firm stance of zero tolerance towards any form of corruption, both within and outside our organisation, in all operations and interactions with third parties—whether public or private.

During 2024, the Compliance Department delivered in-person courses on ethics and anti-corruption, strengthened the anti-harassment campaign, and placed particular emphasis on training for people in leadership positions and team members with direct reports on ethical conduct. In November, we held a Compliance Week, during which we launched an ethical culture survey.

The overall survey score was 90%, with the highest-rated pillar

The highest-rated pillar—knowledge of the Compliance Programme and resources—scoring 97%.
n 2024, we completed the Crime Prevention Model (MPD for its acronym in Spanish) review in Mexico, updating the applicable risks for each Business Unit and the controls in place to mitigate them.
In 2024, 244 third parties were assessed in relation to corruption-related risks.

Conflicts of interests

In compliance with the Conflict of Interest Standard, all directors and board members at Aleatica Mexico are required to complete an annual Declaration of Interests. This document includes information on their professional activities with other organisations, affiliations, and family interests, among others, with the aim of identifying any potential conflicts of interest. The results are submitted to the Audit Committee.

If an employee or board member is involved in a conflict of interest, they must:

1.Report any conflict of interest to the Compliance Department

as soon as a potential or actual conflict of interest becomes known in commercial relations with customers, suppliers, or any other third party with whom Aleatica has any kind of relationship or whose activities are related or may generate reputational or regulatory risks. Employees or individuals in management positions must report any situation that appears to be a conflict of interest or seek clarification if they are unsure whether what they perceive involves a risk.

by the employee or director involved in the potential conflict of interest to the Compliance Department, using the Conflict of Interest form available on the corporate intranet, or through I CARE, Aleatica's ethics channel, if they wish to remain anonymous.

Regarding the conflict of interest until it is resolved. Thus, once the employee has been notified of the existence of a conflict of interest, they must take the following measures:

  • Refrain from making decisions that could undermine Aleatica’s decision-making processes.
  • Do not use Aleatica’s data for personal gain.

As of this report's end, no conflicts of interest have been found regarding: Publications involving a related party; Relationships with a controlling shareholder; Cross-shareholdings with suppliers or other stakeholders; Board memberships involving affiliation with multiple organisations.