Health & Safety Policies

Health & Safety Management Plan

Risk Register

Procedure Objective

The purpose of this procedure is to ensure ongoing and systematic identification of all hazards present in all processes, work activities, and work areas that are under the control of Soloarte Limited, and to identify and implement the control measures required to:

• eliminate the hazards and reduce the occupational health and safety risks;
• reduce, as far as is reasonably practicable, the potential for accidents to occur;
• comply with all relevant legal, customer, and other third-party requirements; and
• where practicable, meet best practices applicable to the work activities.

Scope

This procedure applies to all processes, work activities, and work areas that are under the control of Soloarte Limited.

Definitions

Accident: Any unplanned event that results in injury or ill health to people, damage to or loss of property, plant, materials, or the environment, or a loss of a business opportunity.

Control measure: Any means of managing risk to mitigate accidents and incidents, including use of policies, procedures, guidelines, work methods, training, supervision, equipment, or organizational structures, which can be of an administrative, technical, or legal nature.

Hazard: The potential of a material, activity, or process to cause an accident.

Near miss: Any event that could have resulted in an accident or incident, or any set of conditions or circumstances that have the potential to cause an accident or incident to occur.

Risk: The effect of uncertainty (i.e. the likelihood of an accident or incident occurring) and its severity, often in a negative context.

Risk assessment: A systematic method for identifying business risks and opportunities, hazards or threats, and vulnerabilities, by assessing likelihood and severity, identifying any control measures required, and prioritizing their implementation.

Risk rating: A qualitative measure of the risk identified that is used to determine the priority with which additional control measures need to be implemented to reduce the risk, and that is used to determine the frequency with which a risk assessment should be reviewed.

Responsibilities

It is the responsibility of the Top Management; DiagramX and/or DiagramPlus to:

• ensure that this procedure is implemented, and any resources required are made available; and
• monitor the effectiveness of this procedure and report the results at management reviews.

It is the responsibility of all workers to:

• identify and report any hazards that have not been assessed as part of this procedure;
• identify and report any hazards for which the current control measures are not in operation, or are inadequate;
• proactively and positively participate in the completion of any risk assessments, where they are requested to do so; and
• comply with any control measures implemented as part of a risk assessment.

It is the responsibility of all Managers to ensure that:

• the hierarchy of controls is applied to all processes, work areas, and work tasks for which they have responsibility;
• appropriate risk assessments have been completed for the processes, work areas, and work tasks for which they have responsibility;
• the results of any risk assessments of processes, work areas, and work tasks for which they have responsibility are communicated to the employees who are involved in those processes, visit those work areas, and undertake those work tasks;
• any risk assessment of a process, work area, or work task for which they have responsibility is reviewed following any changes to the relevant process, knowledge, technology, equipment, or information, and/or where an accident, incident, or near miss may occur.

Hazard Identification and Risk Assessment Requirements

A risk assessment must be completed for every process and work area that is under Soloarte Limited's control.

A risk assessment must also be completed for all work undertaken by a Soloarte Limited employee at any site or location that is under the control of a customer or other third party. Where possible, this assessment must be completed before the employee commences work at the site or location.

The following practices must be applied when conducting a risk assessment:

• all work tasks covered by the risk assessment, including routine and non-routine tasks, must be considered and (if practicable) observed;
• the area in which the tasks are undertaken must be toured;
• any equipment, infrastructure, tools, and materials used must be examined in the state that they are used for the task that is being assessed;
• the task requirements and the capabilities of the individuals undertaking those tasks must be considered;
• all persons affected by the process or work tasks, and those who have access to the work areas covered by the risk assessment, must be identified;
• any legal requirements, including specific control measures relating to specific hazards, must be identified;
• any available Accident Reports, Near Miss Reports, or Incident Logs relating to the tasks must be reviewed;
• any other sources of relevant information relating to the tasks must be reviewed. This includes, but is not limited to:
  • customer contractual requirements;
  • operating instructions;
  • maintenance reports;
  • audit reports;
  • manufacturers' handbooks, equipment, or material safety data sheets;
  • approved Codes of Practice; and
  • Health and Safety Executive and Environmental Agency guidance notes.

The following persons must be involved in the completion of each risk assessment conducted, any subsequent reviews conducted, and the review of the results of those assessments/reviews:

• one or more individuals who have recent experience in carrying out the work tasks included in the risk assessment;
• one or more individuals with experience in health and safety management and training in the risk assessment methodology that is being used;
• one or more individuals with appropriate technical knowledge of the hazards present;
• one or more individuals who have appropriate knowledge of the legal requirements and acceptable control measures required for the hazards present; and
• the individual(s) with management-level responsibility for the process, work area, or work tasks that are included in the risk assessment.

In addition to the above, a fire risk assessment must be completed for every building or site that is under Soloarte Limited's control.

Monitoring and Review

Depending on their Risk Rating, all completed risk assessments and fire risk assessments must be reviewed at the following frequencies:

• Low Ratings: Annually
• Medium Ratings: 6 Monthly
• High Ratings: 3 Monthly

In addition, all completed risk assessments and fire risk assessments must also be reviewed:

• following any occurrence of an accident or near miss that involves the process, work area, or task the assessment relates to; and
• prior to the introduction of any change to a process, work area, work task, overall management system, or control measure, where that change may introduce a new hazard, increase the risk associated with an existing hazard, or reduce the effectiveness of any control measures currently employed.

Finally, the results of all risk assessments and fire risk assessments, and any subsequent reviews of those assessments, must be:

• communicated to the employees and any other individuals who are involved in the process, work in or visit the relevant work areas, or undertake the work tasks; and
• reviewed at least annually at management reviews.

Health and Safety Management Plan (V1.0) — 2025-03-25

OH&S Policy

Soloarte Limited recognizes that its business activities give rise to a range of hazards and that it has a legal responsibility to ensure the health, safety, and welfare of all persons affected by its activities.

As such the Top Management; DiagramX and/or DiagramPlus of Soloarte Limited is committed to the following:

• providing safe and healthy working conditions with an aim to prevent injury or ill health to anyone who may be affected by Soloarte Limited's work activities;
• eliminating hazards and reducing OH&S risks wherever practicable;
• complying with all relevant legal, customer, and other third-party requirements;
• continually improving its risk management and occupational health and safety performance; and
• actively consulting with and encouraging participation from its workers, and their representatives, in OH&S matters.

To achieve these commitments, Soloarte Limited maintains an effective and efficient OH&S Management System that is based on the requirements of ISO 45001:2018, and sets and maintains OH&S objectives and a supporting program of work that is focused on achieving the organization's commitments, and on eliminating or reducing the major hazards present.

The implementation of this policy is fundamental to the success of the organization's business and must be supported by all employees as an integral part of their daily work.

This policy has been authorized by: Managing Director; Nicola Ancona

Health & Safety Change Control Procedure

Procedure Objective

To define methods and responsibilities for the control of change (e.g. engineering, technical, process, and/or material changes) for any activities carried out by Soloarte Limited.

To ensure that changes are competently assessed and implemented so that they will have no unforeseen effects on:

• the performance of products when handled or used by customers;
• the health and safety of employees and contractors working under Soloarte Limited's control;
• the environment; or
• the equipment and processes.

Scope

This procedure applies to all changes or modifications controlled by Soloarte Limited's personnel, or other permanent site personnel, that could impact the activities carried out, products produced, or services supplied by Soloarte Limited.

The scope of this procedure covers any change that is not "like for like", and includes such things as:

• changes to equipment;
• changes to raw materials (specification or supply source);
• changes to operating and maintenance procedures;
• changes to automated process control sequences or logic;
• changes to operating parameters.

Definitions — Change

• Any significant change to a method of operation, process, or maintenance procedure. The approved method should already be set down in the area instructions, operating manuals, standard operating procedures, etc.
• Any change in the specification or supply source of a raw material, packaging component, or outsourced material processing service.
• Any alteration which is not "like for like", whether temporary or permanent, to hardware or a component thereof.

Changes specifically excluded from this definition are:

• process changes within the design intent, within the range of acceptable limits laid down in authorized operating manuals or standard operating procedures;
• changes to controlled documents within the management system.

Responsibilities

It is the responsibility of Soloarte Limited's Top Management; DiagramX and/or DiagramPlus to:

• ensure that this procedure is implemented, and any resources required are made available; and
• monitor the effectiveness of this procedure and report the results at management reviews.

It is the responsibility of the change "Proposer" to:

• lead and manage the implementation of a proposed change; and
• ensure that any temporary changes are reversed before the approved date.

Procedure — Proposing a Change

All proposed changes, whether permanent or temporary, shall be recorded and ensure a systematic approach to the consideration and execution of the change.

Where the need for a change is identified, a "Proposer" must provide the following information:

• A description of the change including reference to any supporting drawings, material specifications, equipment specifications, service specifications, technical assessment reports, CAPA reports, customer complaints, etc.;
• A justification for the change including reference to any supporting drawings, material specifications, equipment specifications, service specifications, technical assessment reports, CAPA reports, customer complaints, etc.;
• Impact of the change on equipment, products, IT hardware, IT software, site infrastructure, maintenance schedules, process controls, operating procedures, and/or site layout;
• Estimated cost including reference to any CAPEX proposals, project proposals, or supplier quotations;
• Planned start date and finished date for implementing the change;
• Change lifetime (Permanent or Temporary — including date that it will be reversed on if temporary);
• Change Type;
• Risk identified and planned control measures;
• Modifications required to controlled documents;
• Process verification and validation tests required (where applicable);
• Customer approvals required (where applicable);
• Training requirements; and
• Upload of any documentation to support the description, justification, cost estimate, and risk controls for the change, and links of that documentation to the change request.

Reviewing a Change

The Authorized Persons meet with Proposers to review changes that have been Raised, Implemented, Canceled, and Validated.

Proposed changes must be reviewed by Authorized persons.

For each change proposed, the relevant Authorized Person(s) will review the information and approve the change if:

• the description, justification, and cost are satisfactory;
• the risk controls are specified, and residual risks are acceptable;
• the customer approvals are correctly identified (where applicable);
• the controlled documentation modifications and training plans are correct.

OR the relevant Authorized Person(s) will:

• Reject the change and specify the reasons for the rejection.

OR the relevant Authorized Person(s) will:

• Action the Proposer to update the information.

Implementing Changes

The Proposer must ensure that all relevant controls specified in the risk assessments are in place, controlled documents have been updated, process verification and validation tests completed (including recording of results and sign-off), customer approvals granted, and training plans are completed, before the change is made live.

Validating Changes

All implemented changes must be validated to confirm that:

• they have been implemented (or reversed for Temporary changes) as specified;
• all controls specified in risk assessments are in place;
• customer authorizations have been received;
• controlled documentation has been updated; and
• training plans have been completed.

Validation of changes must be completed by the person assigned by an Authorized Person (the "Validator") within 1 week of a change going live.

If a Validator identifies any actions not completed, then they must record these in their assessment and notify the Authorized Person(s) and the Proposer of this outcome. Once outstanding actions are completed, a re-validation must be undertaken by the Validator.

If a Validator is satisfied that all actions have been completed, then they must identify this in their assessment and notify the Authorized Person(s) and the Proposer of this outcome.

Health and Safety Change Control Procedure (V1.0) — 2025-03-25