Chailease is involved in corporate finance, investment business and retail banking, and has established a comprehensive monitoring mechanism for credit recipients, organized a risk management committee to formulate risk polices, and set up a review committee to do credit checks and verifications before lending. Evaluation mechanisms have been enhanced, and credit quality control implemented. To fulfill corporate social responsibilities while considering the interests of customers and shareholders as well as financial sustainability, Chailease added ESG factors to its credit evaluation process requiring credit companies to assume responsibility for employees, society and the environment. They must also abide by corporate ethics, respect employee rights and care, and prioritize environmental protection. The company is committed to reducing ESG risk to enhance the value of its long-term corporate investment/loans.

Chailease is committed to promoting energy-saving green energy products, and the green energy value chain, and is gradually expanding the development of related business while passing on green concepts. Since 2010, the company has been promoting services and finance for energy conservation, and in 2011, it established a dedicated energy-saving financing unit. It has also developed green energy financing and energy management consulting services. In 2010, the company launched its "ESCO Energy Conservation Service Financing" providing a dedicated unit to strategically cooperate with the energy technology service industry (ESCO) to assist SMEs in energy conservation and carbon reduction projects. Based on an energy conservation business owner or ESCO company's proposed conservation performance guarantee project plan, flexible leases or installment plans are drafted to satisfy the financial needs of various energy conservation projects. With installment leasing as the foundation, these projects combine green energy technology expertise such as energy conservation services or energy development to provide customers who have different types of energy-intensive venues in factories, offices, hospitals, department stores or schools with an energy conservation plan to help them join the ranks of green energy companies.

In 2020, Chailease participated in more than one hundred financial leases and installment projects for energy-saving equipment financing projects (such as LEDs, cloud-based energy-saving controllers, power savers, solar photovoltaic modules, optical energy-saving fluorescent lamps, inverters, and other equipment),with a total amount financed of over NT$2.05 billion. In addition to contributing to environmental protection, corporate social responsibility and green energy products, this also brings long-term, stable performance and benefits to the company. In the future, we will continue to replicate Taiwan's successful experience, and develop more overseas markets.

Facing with the wave of green finance and the global trend towards sustainable development and a low-carbon economy, Chailease Holding, as a fund provider, provides financing projects for energy-saving equipment and also actively supports environmental protection companies including waste treatment, removal, and resource recycling businesses, and provides funds for manufacturers that invest money in environmental protection products and reducing pollution. In 2020, it provided financing to environmental protection companies in excess of NT$240 million. By lending to the environmental protection industry, it helps the overall environment and pollution reduction and prevention. Chailease Holding hopes to exert its financial influence to the fullest, to fulfill its social responsibility, and to drive the development of sustainable finance.

To promote energy services, the company holds occasional SME Energy Conservation forums aimed at discussion of finance issues for energy conservation efforts. The forums also share information on the current status of green industry, improving the environmental awareness of SMEs while saving energy and reducing carbon. At the same time, when handling credit business, the company also seeks to rationalize earnings and ensure the interests of shareholders, and seeks to cooperate with the government's environmental development strategy. In providing goods and services, Chailease prudently incorporates environmental development strategies, while taking into account the interests of the company and of the broader society. During credit reviews for projects related to implementation or assistance of energy conservation, carbon reduction, renewable energy and other green energy industries, a positive assessment is given due to the better corporate qualities, and colleagues in the company are encouraged to promote such cases.

Chailease has actively cooperated with the government's 5 plus 2 industries innovation plan to place specific emphasis on five emerging industries: the Internet of Things, biotech projects, green energy, new agriculture and the circular economy. Chailease has provided financial leasing, installment payment, capital loan and other services to nearly 800 companies in these industries, and injected over NT$6.175 billion into the fund in 2020.The company looks forward to igniting a flame of innovation in partnership, and driving comprehensive innovation in industry. As the plan progresses and its effect becomes more widespread, the goal is to achieve overall economic growth, turning over Taiwan's investment as a whole and the environment for her industrial development.

From finance, the company moved into its 5871 Business Trader website to provide a matching service for used equipment transactions. The idea is to allow equipment that was to be retired to be transferred and continue in operation. A total of 290 suppliers and 315 equipment types are on the system, and some 325 matchmaking transactions are concluded in 2020. This has been a great contribution toward the activation and sustainable operation of used equipment assets, and the 5871 Business Trader website is currently the largest professional used equipment trading site in Taiwan.

The development of sustainable finance is currently an increasingly important trend in Chailease’s business, and in response to the trends for energy conservation and carbon reduction worldwide, the government of Taiwan has also implemented low-carbon city and low-pollution policies. When Chailease launched its motorcycle loan business, it vigorously promoted electric scooters as well. The company agrees that clean energy is more friendly for the environment, and installment payments can help more people to be able to move toward electric scooters, as a means to work together to reduce air pollution. In 2020, Gogoro sold more than 145,000 scooters, and 6,800 Gogoro electric vehicles were financed in installments through Chailease. In addition, electric vehicles account for over 5% of Chailease's motorcycle installment business. And this number is rising annually, showing that Chailease is actively promoting clean energy as a contribution to the environment and a response to the low-carbon goal before private transport.

In addition to green financing, Chailease has also put forward more solutions for energy conservation and carbon reduction. The company's "HeyTruck platform app" was launched in 2019, targeting the trucking industry and driver groups that have been underserved by the traditional financial industry. One of the most critical services is the "Return Trip Matchmaking Service". In the past, if a trucker had completed a long haul trip with freight, he would have to drive back to the starting point empty. The "HeyTruck platform app" provides a means for truck drivers and cargo owners to get together, allowing drivers who would otherwise roll empty to help cargo owners who need carriers.

Since the launch of this app, an average of 300 successful matches have been made per month. This not only provides extra income for owners of large trucks, but also provides cheaper freight to shippers. And because the app allows effective use of vehicle resources, it also helps reduce carbon emissions. It is estimated that this will eliminate some 75,000 kilograms of carbon emissions in 2020. This is yet another Chailease effort for sustainable development of the global environment. （Note: Based on an average of 300 return cars per month, the distance from Taipei to Taichung is used to estimate the annual carbon reduction. The method for calculating annual carbon reduction is the number of return cars × number of round-trip kilometers × the amount of fuel consumed per kilometer × CO2 emission factor per liter of oil product.）In response to government regulations, Chailease Holding also provided loans for old diesel vehicles to help replace them with new ones. In 2020, a total of 2,049 trucks were replaced with new vehicles (approximately NT$4.955 billion as of the end of 2020). This has helped reduce diesel air pollution, reduce black smoke, improve air quality, and reduce energy consumption. Chailease Holding does its best for the sustainability of the earth.

Since the promotion of Chailease's 0card which is deeply loved by students and people just starting out in life, to encourage paperless payments, and save unnecessary wasted paper, members can make payments using the app. Looking forward to 2020, the company is launching a mobile app to allow vehicle installment loan payment, with no need to waste paper printing out bills. It is estimated that more than 6 million sheets of A4 paper has been saved, reducing carbon emissions by 3.84 tons. (Note: Each pack of A4 paper contains about 500 sheets responsible for 3.2kg/CO2 in carbon emissions. Source: Product Carbon Footprint Information Network.)

Chailease upholds corporate social responsibility. To avoid unpredictable accidental losses to enterprises, when setting up real estate collateral a customer has to insure against fire, water and earthquake risks. Items mortgaged by the company must also be insured against fire to guarantee basic insurance protection; for high-risk industries, such as shipping, based on operational responsibility requirements, shipowner liability insurance and hull insurance are required. In 2020, there were approximately 47 marine insurance contracts, with 7.25 billion in mortgagee ship interest insurance (MII). Hull insurance was about 16.47 billion, indemnifying against damage to the hull or harbor through collision, as well as against death or injury to crew members, wreckage removal and possible polluting oil spills. In addition to ensuring the sustainable operation of enterprises, this policy also contributes to the protection of the environment.

Chailease's core competitiveness is the basis for its product "innovation". At the same time, the company takes corporate social responsibility into account, opening up green markets and establishing the green competitiveness of the enterprise. In 2014, the company won a MOEA Bureau of Energy bid for solar photovoltaic power generation equipment, and planned to build a solar power plant and generate power for sale. In 2015, Chailease Energy Integration Corporation was born. The company provides customers with energy-saving services and helps enterprises to fulfill their social responsibilities in the areas of green energy and environmental protection. In 2016, Chailease continued to build and acquire solar power plants, and by 2018, held 1,000 such plants. This makes Chailease the company in Taiwan with the most solar power plants. Additionally, in 2017 the company combined the sharing economy and financial technology in promoting its "Chailease Citizen Power Plant", partnering with the general public to promote renewable energy and share in the benefits of power generation by allowing the public to participate in the popularization of renewable energy. By the end of 2020, a total of 18 cases had been launched to enthusiastic public response, with 100% of sales completed. These 18 cases are estimated as generating over 97,811,124 (degrees) of electricity in the next 20 years, while also fulfilling Chailease's green energy corporate social responsibility.

Chailease Energy Integration Co., Ltd., a subsidiary, leases and installs solar panels on the roofs of SME chicken coops and compositing sites. Since 2015, the company built or acquired 2,231 solar plants. The power plants boasted a total installed capacity of 663.78 MW, about 34% more than that of 2019, and are expected to reduce carbon emissions by 440,144 t., about 1,144 site of Daan Forest Park carbon absorption annually. (Note: Taipei's Daan Forest Park has an area of 25.8 hectares, with a hectare of forest absorbing 15 tons of carbon as per a calculation by Council of Agriculture)

In order to effectively manage many power plants, Chailease Energy Integration has developed its own management software to establish a solar photovoltaic smart operation management platform which has basic monitoring and operation functions, such as detecting malfunctions, alerting maintenance, receiving sunshine, and power generation. It also has smart maintenance service functions that also ensures detailed recording of power plant information which is a credible basis for future valuation, and an important reference for evaluating the corporate value of listed power plants.

Besides, to response the green energy policies raised by the government, Chailease Holdings promoted its "Chailease Citizen Power Plant" plan internally in 2017 and externally in 2018. The public can directly participate in investing and building power plants by means of subscribing the solar panels. Afterwards, based on the quantity of power generated and the selling price, investors will share the income. Having citizens participate in investment in solar generation equipment not only provides a stable investment income for investors, but also can increase domestic power sources. We expected the Chailease Citizen Power Plant plan will make solar generation more common in Taiwan and resolve the shortfall in electric power on the island. The plan can benefit everyone. Chailease Holdings works with people to implement the government's policy of "supporting green energy industry and developing green financing" and supports the development of the green energy industry with action.

At the same time, in response to changing trends of future energy use, Chailease Energy Integration Corporation, a subsidiary, also assists customers by promoting new energy creation, energy transfer, and energy storage technologies. The skilled application of energy planning includes smart power grids, electric vehicles, charging stations, and the application of energy monitoring and management systems. In addition to continuing to promote energy efficiency and carbon reduction, the company is further committed to helping enterprises establish comprehensive and innovative energy management strategies in order to integrate them with future industry trends.

In the future, Chailease Holding will continue to gradually expand related business development through its energy-efficient and green-energy value chain. By replicating Taiwan’s energy-efficient model, we will develop other overseas markets in order to make a contribution to protecting Earth's resources.

Chailease is developing both solar green energy generation and storage capabilities, opening up a road to sustainability and joining the semiconductor industry association SEMI's "PV Public Advocacy Committee". The committee want to build consensus within industry and periodically interact with relevant government officials. The "Solar Optics Public Policy Statement" was first published in 2019, actively representing Taiwan's photovoltaic industry.

Additionally, Chailease also joined the "Solar Power Generation System Commercial Industry Association", more actively connecting industry, government and think tanks while using multiple resources to actively forward knowledge on green energy and raising recognition and investment in the area, so as to spur Taiwan's achievement of energy diversification and independent supply goals.

On March 12, 2021, a MOU signing ceremony was held for the green electricity trading platform created through cooperation between the electricity industry and banks. The deputy general manager of Chailease Energy Integration Xie Minghong attended the meeting (fourth from left) to support the launch of the green electricity trading platform that accelerates Green power trading, promotes the supply of green industries and works for the environment.

In order to take a multi-faceted approach to customer service and to further improve service quality, Chailease's subsidiaries Chailease Finance Co., Ltd. and FINA Finance & Trading Co., Ltd. continued conducting customer satisfaction surveys every year. Questions about product and service needs were added in the hopes that the results would serve as the basis for improving service and service development. In this way, we can simultaneously know if our services meet customer needs.

In 2020 Chailease Holdings invited approximately 5,428 corporate customers to take the Customer Satisfaction Survey, which asked questions regarding to service attitude, industry understanding, product descriptions, operational accuracy, service efficiency, after-sales service, overall performance, future interactions, and recommendations to others. Then the customer satisfaction indicators would be converted into the score. Average overall rates of satisfaction with Chailease Finance and FINA Finance & Trading reached to 95.8% respectively, which show that the clients are “satisfied” or higher with our overall service.

After the results were calculated, a qualitative approach was also used to gain more information about special cases. These results became an important topic in management committee meetings. It is hoped that by establishing multiple communication channels, we will be able to hear more customer voices, understand customers’ real needs, and propose the most appropriate improvement methods to achieve our goal of providing customers with the best possible service.

These topics entered into discussions among the operations and management committee. The hope is to strive to establish more and diversified channels of communication so that the company can better listen to the voices of many customers and understand their true needs. This is the way to find a pathway to improvement and gradually increase customer satisfaction with a goal of providing customers with truly excellent service.

Chailease Holdings places great emphasis on different perspectives. We collect customers’ opinions actively and take a very open-minded view of employee suggestions or any innovative thinking within the group. We set up an employee suggestion system and an incentive platform to get innovative suggestions, encouraging employees to bring forth new ideas. We hope the system will allow the thoughts from employees could be implemented, so that we can always know what the customer's need in advance.

Before bringing out a new product or service, we would have internal assessment of the legality which ensures the product or service complying with laws. All promotional ads, public relations news or employment ads which are post in print, electronically or in sound form must go through the company's internal auditing and managing processes. The coherent units must review and approve its legality to ensure the rights of those getting information and to maintain the company's reputation and image. Items officially online should be adjusted at all time based on customers’ opinions and the feedback of our employees, to meet our sole goal that design products which can meet our customers' needs.

To effectively promote information security work, the Company established the “Information Security Committee” in accordance with the “Regulations for Information Security Policy,” to take charge of promoting and governing information security, monitoring and managing information security risks, and reporting major information security incidents. The Committee shall hold a meeting at least once a year and may hold a meeting to report major decisions to the Board of Directors, if necessary.

In accordance with the provisions of Article 8 and 9 of the "Regulations Governing Establishment of Internal Control Systems by Public Companies", Chailease has established internal control systems and related operational specifications for information circulation and other management environment, including personal information, and computerized information system. Simultaneously, to comply with the provisions of Article 13 of the Regulations, our company information and communication security inspection is included in the annual audit plan.

• Self-Risk Evaluation and Check of Internal Control Systems by Operation Units
  In order to implement the self-supervision mechanism of information communication safety, ensure the implementation of the information cycle and personal information processing-related internal control systems can be adjusted in time in response to changes in the environment, so as to reduce the risk of negligence in information communication safety operations. In accordance with relevant internal and external laws, regulations, and risk assessment results, each unit decides on its own assessment procedures and methods. The frequency of execution depends on the nature of the work of each unit. It must be handled at least once a year, and the defects and abnormalities found in the assessment will be proposed for improvement. The results of the self-assessment are sent to the internal audit unit for review and review of the implementation of the self-assessment.
• Control of Information Flow Security Audit and Inspection
  The independent internal audit department shall draft an annual information security audit and inspection plan according to the results of self-risk evaluation and risks of each operation unit. This audit and inspection plan shall be submitted to the management and the internal audit department shall conduct due diligence based on the plan. Reports of due diligence will be submitted to the management. Defects and recommendations thereof will be tracked and improved within a due date.
• Information Security Training
  Each unit's new recruits are required to attend education and training classes encompassing courses of specific information security, the company's internal rules, related laws, cybercrime, and general knowledge of information security. Each year, information technology-related departments shall establish an annual education and training program and arrange personnel to participate in external workshops accordingly. Those participating in training courses will also need to pass relevant professional examinations. We also arrange companies with expertise to introduce (or educate about) important information security projects and conduct related case studies.

Regarding the management of the information service processing procedure, Chailease takes information management as its basis and builds demand management, incident management, problem management, change management, requisition form management, online management, knowledge management, and usability management, supplemented by risk management orientation, from the demands of information services at the user end to the final completion online or solutions to problems or demands, to keep close tabs on information security.

As cyber-attacks increased and the method of attack became complex, many information security problems in enterprises have occurred. Hence, the government and competent agencies have increased the requirement on enhancing risk management of information security in enterprises. However, to prevent threats and attacks, the promotion and education on the information security awareness of internal personnel are among the key factors for successful information security policy the Course hours Online Introduction to Chailease’s information environment 0.25 Offline Information security and policy propaganda 0.5 implementation, in addition to the application of technological tools. Regarding this matter, when newcomers arrive - in addition to providing relevant internal professional knowledge - the Company also asks them to complete necessary relevant information security training, to take precautionary measures. Moreover, the overall training completion rate is 100%. Employees who have joined the company have also completed the relevant information security training requirements and with a 100% coverage rate.

Information unit provided gateways and terminal protection function, as well as quarantine alert for the virus program. Moreover, the unit can further detect external suspicious intrusion behavior through network flow control and analysis.

Four disaster restoration drills were conducted each year, including 2 exotic environment system restoration drills, 1 information unit restoration drill, and 1 synchronized exotic restoration drills by information unit, front- and back- end. This way, the systems and data within the enterprise can have the best protection measures. With reasonable measures and methods, we can shorten the restoration time for system interruption as much as possible and reduce data loss resulting from the business interruption.

Information security is a major risk issue for business operations. In order to prevent and respond to the possible impact of information security incidents, the ISO 27001 Information Security Management System (ISMS) was introduced in 2021, and it is expected to apply for external verification in 2022. We built an information security management system for the information used in the organization to properly protect the confidentiality, integrity and availability of information. As the Company is pursuing continued operations, we use a management system that meets international standards to achieve the goal of organizational operational safety, thereby enhancing customer trust and becoming the most reliable partner.

Before the implementation of the new personal information protection law, the Company already had in a place a security mechanism for maintaining personal information, including the formulation of “Data Classification Management Measures”, “Personal information Protection Key Points”, “Information Security Policy”, “Information Security Management Key Points”, and other specifications. We clearly formulated the protection procedures to be followed for the authorization, use, storage, management and destruction of personal information. At the same time, in order to demonstrate our persistence and commitment of attaching great importance to the safety of customers’ personal information, a personal information protection team has been established to ensure the implementation of the personal information law.

Regarding the protection of personal information, the Company has three lines of defense controls to ensure that the collection, processing or utilization of personal information complies with external laws and internal regulations:

• The first-line business and responsible units shall respect the rights and interests of the parties involved in the collection, processing, and use of personal information, shall not exceed the necessary scope of the specific purpose, and shall have a legitimate and reasonable connection with the purpose of the collection. In addition, each subsidiary shall assign personal information protection management personnel and incorporate the operation of personal information protection management system into the Company’s supervision and management. If a major violation of personal information protection related laws and regulations is discovered, it should be reported to the unit responsible for personal information management immediately.
• Second-line personal information protection specialist units are responsible for supervising, coordinating, and monitoring personal information protection related matters, and should report to the board of directors at least once a year. If a major violation of personal information protection related laws and regulations is discovered, it should be reported to the board of directors immediately.
• Third-line auditing units shall conduct inspections of the implementation of personal information protection in accordance with regulations. If it is otherwise provided by laws or regulations or required by the competent authority, each subsidiary may, depending on actual needs, appoint an independent third party to conduct the inspection of the matters specified in the preceding paragraph, and provide inspection recommendations.

The Company is committed to enhancing information security management, establishing appropriate protection measures for all information areas within the Company in accordance with relevant internal and external regulations and regulations as well as regularly reviewing the suitability of the regulations to prevent improper disclosure of customer personal information, so as to reduce penalties by the competent authority that could damage the Company’s reputation.

Chailease Holding and its subsidiaries attach great importance to customer information security and personal information protection. When customers provide personal information, we request they sign the ”Notice of Collection, Processing and Utilization of Personal information”, and strictly control the use of customers’ personal information. If it is necessary to cross products or use the customer’s personal information for non-primary collection purposes, it must comply with laws and regulations and obtain customer consent, and shall be handled in accordance with the following principles:

A. Comply with relevant government laws and regulations and information management principles.
B. Customer personal information is strictly stored in Chailease Holding and its subsidiaries or its entrusted information storage system with high security and stability.
C. Acquisition and use of data must be within the scope of data authorization stipulated by Chailease Holding and its subsidiaries.
D. Appropriate technical and organizational security measures have been adopted to protect customers’ personal information from loss or any illegal processing.
E. Customers’ personal information should not to be provided to anyone other than those notified by Chailease Holding and its subsidiaries, except when required by a judicial unit or other competent authority in accordance with applicable laws and through formal and legal procedures.

In addition, information personnel should perform the necessary systematic covering of personal information and control the secondary use of personal information in accordance with personal information security protection and operational risk levels. According to different business areas, we set up different levels of data access authorization and implemented USB storage device lockout management to reduce the risk of data leakage, thereby enhancing the control and checking of data copying. We have also set up strict specifications and controls for internal transmission of customer information. They are regularly reviewed by the internal audit unit to ensure that all control mechanisms are effectively implemented. There has been no personal information leakage (including personal information PII, such as name, and ID number that can be distinguished or traced to individuals).

To ensure the confidentiality of customer data, all our employees receive personal information confidentiality and operational security law training. This provides them with a reference and develops their consciousness of personal information issues so they will conduct good data security practices and protect personal information in their daily work. We also require employees to appropriately perform their responsibilities of protecting confidentiality and managing data, with rigorous internal rules for management as well as the gradual establishment of an audit trail and records tracing systems. The management of personal information has been included in the scope of annual audit of inspection of information and communications security and self-assessment, and through these comprehensive and targeted reviews, we will increase the protection of customer data by employees and increase knowledge of and compliance with relevant law. The auditing units of the Company and its subsidiaries shall conduct inspections of the implementation of personal information protection in accordance with regulations. If it is otherwise provided by laws or regulations or required by the competent authority, each subsidiary may also, depending on actual needs, appoint an independent third party to conduct the inspection of the matters specified in the preceding paragraph and provide inspection recommendations. In 2020, the company did not have any information security violations that caused the leakage of customers' personal information, and there were no confirmed complaints of infringement of customer privacy or loss of customer information.

In the future, we will continue to optimize e-mail security review mechanisms, enhance customer data protection mechanisms, improve existing data security mechanisms and establish specialized information security officers to comprehensively raise the level of data protection and security, and establish a safe, reliable operating environment. The goals for collection, manner of use and rights associated with customer data are laid out clearly in informed consent forms and contracts to assist customer in fully understanding the rights and responsibilities of both parties.

Company employees dedicated to the protection of personal information act based on the relevant rules of the company to appropriately handle and provide feedback on such matters, and appropriate rules are set and revised. At the same time, education and training program within the company has been enhanced and case studies and educational materials are created so that improvements of our business processes and the rigor of our internal rules will reduce the occurrence of customer complaints.