Human rights

Statement on Human Rights Due Diligence

Approach and governance

This statement describes Tieto’s human rights due diligence processes, including how the company identifies, prevents, mitigates and accounts for actual and potential adverse impacts on human rights, in accordance with the Norwegian Transparency Act.

1. Commitment and governance 

Tieto is committed to respecting internationally recognized human rights in accordance with the UN Guiding Principles on Business and Human Rights (UNGPs) and the OECD Guidelines for Multinational Enterprises. The company is a participant in the UN Global Compact.

This commitment is reflected in Tieto’s Human Rights Policy, supported by the Code of Conduct, Human Resource Policy, Supplier Code of Conduct, Privacy Policy, Security Policy, and AI Policy. These policies set expectations for employees and business partners and require the integration of human rights considerations into relevant business processes.

The Group Executive Team is responsible for implementation. A cross-functional Human Rights Steering Committee supports the integration of due diligence across the organization. The Board is informed of material risks and the effectiveness of due diligence processes on a biannual basis. 

2. Due diligence approach

Tieto conducts ongoing human rights due diligence in line with the OECD framework. This includes identifying, assessing, preventing, mitigating, and accounting for actual and potential adverse human rights impacts. 

3. Identified adverse human rights impacts 

Tieto identifies and prioritizes salient human rights risks based on severity and likelihood, using risk assessments, supplier evaluations, and internal and external expertise. 

The most significant potential adverse impacts relate to: 

  • Privacy
  • Freedom of opinion and expression  
  • Discrimination  
  • Labour rights  

Additional risk areas include corruption and environmental impacts with human rights implications. 

Key risks are identified across: 

  • Supply chain (labour rights, discrimination)  
  • Own workforce (labour rights, discrimination)  
  • Downstream use of technology (privacy, freedom of expression, discrimination)  

4. Measures to prevent and mitigate adverse impacts 

Tieto implements measures across its value chain to address identified risks: 

  • Supply chain: Geographical risk screening and sustainability assessments are integrated into supplier evaluation and selection processes.  
  • Own operations: Targets and measures related to equal opportunities, labour rights, and social dialogue are implemented. Code of Conduct and human rights trainings are provided to employees.  
  • Business relationships and downstream: Human rights risk assessments are applied in sales processes, with ongoing efforts to expand coverage across all business units.  
  • Continuous improvement: A readiness assessment for the EU Corporate Sustainability Due Diligence Directive (CSDDD) has been conducted, with implementation of improvement actions ongoing from 2026.  

5. Tracking effectiveness 

Tieto monitors the effectiveness of its due diligence through internal governance structures, regular reporting, and defined metrics. 

The company has established a target of zero severe human rights breaches. Severe breaches are defined as confirmed violations through legal rulings, OECD National Contact Point findings, or substantiated external allegations not addressed by the company. No such breaches were identified in 2023, 2024, or 2025. 

6. Grievance mechanisms and remediation 

Tieto provides mechanisms for raising concerns related to human rights, including whistleblowing channels accessible to employees, business partners, and external stakeholders. 

Reported concerns are assessed and addressed in accordance with established procedures. Where Tieto identifies that it has caused or contributed to adverse impacts, it is committed to enabling remediation in line with international standards. 

7. Transparency and access to information 

Tieto publishes information on its human rights due diligence in its annual reporting.

In accordance with the Norwegian Transparency Act, the company responds to requests for information regarding how it addresses actual and potential adverse human rights impacts. Any questions on how we at Tieto or any of our subsidiaries work to respect human rights should be sent via email to transparency@tieto.com with the subject heading "Transparency Act". Requests for information from the public are followed up within a reasonable time, and no later than three weeks.

This statement reflects the company’s human rights due diligence processes as of the reporting year 2025 and will be updated annually.