IRPC Public Company Limited
AI Governance Policy
2026

To promote the effective development and adoption of Artificial Intelligence (AI) in business operations and organizational development, the Company is committed to promoting Responsible AI by ensuring that AI is developed, acquired, deployed, and used in a manner that is ethical, transparent, accountable, secure, human-centric, and aligned with sustainable development objectives, guided by Environmental, Social and Governance (ESG) principles. The Company seeks to create long-term value and sustainable growth under an appropriate governance framework while complying with applicable laws and regulations, and adopting relevant internationally recognized standards, frameworks, principles, and best practices, including ISO/IEC 42001, the NIST AI Risk Management Framework (AI RMF), OECD AI Principles, the EU AI Act, and other applicable international references. This Policy is established to enhance the Company's competitiveness, create added value, strengthen stakeholder confidence, and support the achievement of the Company's strategic objectives in a sustainable manner. The Company therefore establishes the AI Governance Policy as follows:

1. Promote the adoption and utilization of Artificial Intelligence (AI) in business operations and organizational development to enhance efficiency, foster innovation, and create added value under the governance, oversight, and support of the Board of Directors, management, and relevant functions.

2. Establish fundamental principles for the development, acquisition, deployment, and use of AI that are ethical, transparent, fair, secure, and accountable.

3. Establish processes to identify, assess, monitor, report, and manage AI-related risks and impacts, including legal, regulatory, ethical, human rights, privacy, security, and environmental considerations.

4. Establish requirements for data governance, personal data protection, and data quality management to ensure that data used by AI systems is accurate, reliable, and appropriately protected.

5. Establish appropriate security measures for AI systems and associated data to prevent unauthorized access, use, disclosure, modification, disruption, and cyberattacks.

6. Establish measures to prevent bias, discrimination, human rights violations, and the development, acquisition, or use of AI systems that engage in manipulative behavior, exploitation of vulnerabilities, social scoring, or unauthorized biometric surveillance, or otherwise violate applicable laws, ethical principles, or internationally recognized human rights.

7. Develop, maintain, and continuously improve the Company's AI governance framework by establishing appropriate standards, procedures, and supporting guidelines, including governance measures for internally developed and externally acquired AI systems, in alignment with applicable laws and internationally recognized standards, frameworks, principles, and best practices, including ISO/IEC 42001, the NIST AI Risk Management Framework (AI RMF), the OECD AI Principles, the EU AI Act, and other relevant international references.

8. Define appropriate boundaries for the development, acquisition, and use of AI, and prohibit any AI applications that violate applicable laws, ethical principles, or human rights, or that may cause adverse impacts on individuals, society, or the Company.

9. Promote the development and use of AI that supports the efficient utilization of resources and energy, reduction of greenhouse gas emissions, mitigation of environmental impacts, and the creation of sustainable economic, social, and environmental value.

10. Ensure that AI systems and AI governance practices are regularly monitored, reviewed, evaluated, audited and continuously improved to maintain their effectiveness and alignment with applicable laws, internationally recognized standards, frameworks, principles, and best practices, technological advancements, evolving risk landscapes, and other relevant international developments.

This Policy shall apply to all business units of IRPC Public Company Limited and its subsidiaries, as well as throughout its value chain. Directors, executives, employees, business partners, contractors, suppliers, service providers, and all relevant parties shall comply with this Policy, uphold its principles, serve as role models, and support, promote, and continuously monitor its effective implementation in accordance with the Company's commitment to good corporate governance and sustainable development.

Announced and effective on 15 September 2026

(Asst. Prof. Dr. Chaiyaporn Puprasert)
Chairman

Note: This Policy has been approved by the Board of Directors, at the meeting number 10/2026 on 21 July 2026.