NetApp statement on slavery and human trafficking

The California Transparency in Supply Chains Act of 2010, the United Kingdom Modern Slavery Act of 2015, and the Australian Commonwealth Modern Slavery Act 2018 require certain businesses to disclose efforts to prevent or otherwise eradicate slavery and human trafficking from their supply chains. NetApp is committed to complying with these laws and to ensuring that its employees and suppliers around the globe take appropriate steps to mitigate the risk of human trafficking and slavery in our supply chain.

December 2020

Our commitment to human rights, which covers topics such as forced labor, slavery, child labor, and human trafficking, is outlined in our Human Trafficking Policy and NetApp’s Supplier Code of Conduct . As an active member of the Responsible Business Alliance (“RBA”), NetApp uses the RBA Code of Conduct (“RBA Code”) as the basis of its Supplier Code of Conduct. The RBA Code prohibits the use of forced labor, including bonded, indentured labor or involuntary prison labor, human trafficking, and child labor. Fundamental to the RBA Code is the understanding that a business, in all of its activities, must operate in full compliance with the laws, rules, and regulations of the countries in which it operates. The RBA Code contains specific requirements covering slavery and human trafficking and encompasses a broader vision than simply the elimination of human trafficking. It includes compliance with global labor standards and applicable laws; worker health and safety; the environment; business ethics; and the management of internal systems and controls to ensure effective compliance. In addition to these actions, NetApp participates in RBA activities.

NetApp’s internal policies and practices incorporate key concepts of the RBA Code and are consistent with international labor and human rights standards. NetApp is committed to complying with the changes to the U.S. Government’s Federal Acquisition Regulation with regard to Ending Trafficking in Persons, and we expect our suppliers to comply. (See our Purchasing Policy: Combating Trafficking in Persons .) We work with our supply chain to promote an environment in which workers may freely choose employment. This focus on labor and worker rights is part of a larger effort around supply chain transparency and accountability.

NetApp is a provider of storage and data management solutions for data-intensive enterprises. NetApp^® storage solutions include specialized hardware, software, and services for open network environments. We use a multichannel distribution strategy: We sell our products, solutions, and services to end-user business customers and service providers through a direct sales force and an ecosystem of partners. NetApp outsources manufacturing operations to third parties located in different countries around the world. We rely on a limited number of suppliers for materials, as well as several key subcontractors for the production of certain subassemblies and finished systems. The reporting entity for the purposes of the Australian Modern Slavery Act 2018 (Cth) is NetApp Australia Pty Ltd (“NetApp Australia”). NetApp Australia is a marketer and distributor of NetApp products in the Australian market and a provider of postsales customer support and consultancy services. NetApp Australia uses external vendors, such as marketing, professional services, real estate, and facilities suppliers, which are largely contracted through a third party. It does not own or control any other legal entities.

NetApp has taken actions to ensure transparency and to prevent abuses in our supply chain, including the following.

NetApp’s Code of Conduct , which contains specific provisions on procurement from suppliers, vendors, contractors, and supply chain relationships, provides guidance to enable employees to put our company’s values into practice. It is available in seven languages on NetApp’s intranet and in English on our company’s external website.

The principles embodied in our Code of Conduct reflect NetApp’s policies on, among other topics, compliance hotline, speaking up, investigations, antiretaliation, diversity and discrimination, conflict minerals, antitrust, antibribery and anticorruption, and protecting our company’s assets and reputation. To ensure compliance with our Code of Conduct and policies, NetApp conducts annual Code of Conduct training for all employees. Courses are administered and tracked through NetApp Learning Services, an internal organization that serves the technical and sales learning needs of NetApp employees, partners, and customers. Employees who are new to NetApp are also required to take an interactive Code of Conduct course. Additionally, every employee is required to read the Code of Conduct and certify that he or she has done so prior to joining NetApp.

NetApp’s Ethics and Compliance Program includes an Integrity and Compliance Office (ICO) and Global and Regional Business Conduct Councils. ICO oversees and administers NetApp’s Code of Conduct and is our primary resource for developing and implementing programs and tools to ensure compliance with global laws and NetApp’s policies. Our Business Conduct Councils are cross-functional governance bodies composed of senior leaders from Business, Human Resources, Finance, Internal Audit, Legal, and Integrity and Compliance Office that identify and address compliance issues. They review company investigations, drive control improvements, and identify and prioritize areas for global compliance focus. NetApp maintains a robust process for reporting slavery and human trafficking, including online channels, and our Code of Conduct contains a nonretaliation policy. Processes exist for informing senior management about allegations of slavery and human trafficking, including periodic internal reporting on allegations that arise in the supply chain and details about key investigations that are in progress or completed.

All of our employees take NetApp’s Code of Conduct training upon hire and participate in initial and annual mandatory training on the contents of the Code of Conduct. The Code covers topics such as Corporate Social Responsibility, Human Rights, Respecting the Environment, Supply Chain Relationships, Harassment-Free Workplace, Diversity, and Antidiscrimination. Through our RBA membership, we also encourage and support the participation of our employees who are responsible for supply chain management. These employees attend conferences, training, and workshops focused on understanding the RBA policies and best practices, including fighting human trafficking and forced labor. These resources are made available to NetApp suppliers who are RBA members.

As a result of carrying out its first modern slavery risk assessment for its Australia operations, NetApp will provide dedicated training to certain employees who are likely to be exposed to higher levels of modern slavery risk. The purpose of the training is to ensure that they understand what modern slavery is, the steps that NetApp takes to minimize the risk of modern slavery occurring, and how employees can raise any concerns. NetApp will also communicate expectations with respect to modern slavery to certain categories of suppliers and service providers.

As per the United Kingdom Modern Slavery Act, this statement has been approved by the boards of NetApp UK and NetApp BV and signed by a director.

As per the Australian Modern Slavery Act 2018 (Cth), this statement has been approved by the board of NetApp Australia Pty and signed by a director.