Modern Slavery Statement

Our businesses and supply chain

Vesta Software Group Limited (Vesta) supplies industry leading enterprise management software and related services to over 10 vertical markets around the world. These include education, ERP, event technology, healthcare, hospitality, leisure, oil and gas, retail, workforce management and payment processing.

Vesta refers to Jonas Computing (UK) Limited and all of its UK subsidiaries that are managed under the Vesta brand. Jonas Computing (UK) Limited's immediate parent company is Constellation Software UK Holdco Ltd and its ultimate controlling party is Constellation Software Inc.

Vesta is a collective of 28 businesses. The businesses have autonomy to make operational decisions and control their own commercial processes at a business level. The main supplier costs relate to hosting and maintenance costs, followed by hardware costs. Our suppliers are predominantly UK and Europe based, followed by Latin American, with 6% operating in geographies that include Africa, Asia and North America. Supplier relationships are maintained at a business unit level.

Our policies

We have a number of policies in place which help us mitigate the risks to Vesta. These include:

• Disciplinary policy
• Equal opportunities and dignity at work policy
• Grievance policy
• Whistleblowing policy

We also have the Employee Handbook, which brings together a number of best practices and policies, including the ethical and moral obligations expected, equal opportunity and diversity, discrimination, bullying and harassment, criminal offences, health and safety, employee wellbeing, grievances, whistleblowing and disciplinary procedures. In addition, we have a dedicated online zone which provides resources and support for health and wellbeing.

Due diligence and auditing

During our risk assessment we have reviewed the internal policies and processes that we have in place to enable us to assess our internal suppliers (our people). Vesta operates a central HR function, which is conducive to strong and clear controls. Knowledge of our external suppliers is centralised at a UK level, within a central library and risk assessment system. Suppliers considered higher risk are classified as Tier 1 suppliers. External assessments are made to understand the processes in place and the approach Tier 1 suppliers take to mitigating their own risk of modern slavery. These assessments produce an automated risk score, allowing us to review and focus on any suppliers of concern and to gain a high level profile of Vesta.

Our risk assessment

From the continued due diligence and assessment work undertaken, a minimal percentage of suppliers are considered Tier 1, based on what we consider our higher risk criteria.

Vesta operates internally on a number of key performance indicators (KPIs). There are specific KPIs to ensure we can measure and understand our progress, focusing on key risks. These include specific targets on bringing each of our business units' suppliers into our new supplier software, completing our internal risk assessments, any relevant external assessments for those considered high risk, and any final remediation required.

Training

Training was rolled out during 2020 to ensure all employees were aware of the Modern Slavery Act and understood what they should look out for to help mitigate any risks. All new recruits are required to complete this training as part of our onboarding process, and training requirements are reviewed on a regular basis.

Board approval

This statement is made pursuant to section 54(1) of the Modern Slavery Act 2015. Jonas Software UK's Executive Committee approved this statement in May 2025.

Signed by Richard Clancy, Group CEO, Vesta Software Group.