Corporate Responsibility

 

ATP Social Responsibility Policy Statement

 

View our Social Responsibility Statement

 

ATP Supplier Ethical Commitment

 

ATP Electronic, Inc and its affiliates (ATP) are committed to the highest standards of product quality and business integrity. ATP requires all of its suppliers and employees to conduct themselves with the highest standards of honesty, fairness, and integrity, complying with all applicable laws and avoiding even the appearance of impropriety.

ATP expects all employees, customers, partners, suppliers, shareholders, and stakeholders to speak up promptly about any conduct or circumstances they believe may constitute a violation of this Supplier Ethics Policy or any other ATP policy. Supplier shall promptly notify the ATP Ethics Office at ethics@tw.atpinc.com regarding any known or suspected illegal or improper behavior relating to dealings with or on behalf of ATP, including behavior by ATP’s employees or agents.

View ATP's Supplier Ethical Commitment

 

Environmental Sustainability

 
Greenhouse Gas Emissions

View Scope and Amount of Greenhouse Gas Emissions

 
Statement on Conflict Metals

 

Gold (Au), tantalum (Ta), tungsten (W) and tin (Sn) are commonly used in the electronics industry. These elements come from a variety of sources, including what is referred to as "Conflict Zones," which includes the eastern region of the Democratic Republic of the Congo (DRC).

As a manufacturer of products that contain gold, tantalum, tungsten and tin, which are considered conflict minerals, ATP is committed to sourcing these materials only from socially and environmentally responsible suppliers.

We’re taking steps across our entire supply chain to confirm our sourcing does not fund armed groups in the DRC and adjoining countries.  We continue to carry out a reasonable country of origin inquiry on the products we manufacture and perform supply chain due diligence following the processes and procedures set forth in the Organization for Economic Co-operation and Development’s Due Diligence Guidance for Responsible Supply Chains of Minerals from Conflict-Affected and High-Risk Areas.

ATP expects our suppliers to adhere to the Responsible Business Alliance (RBA) Code of Conduct, formerly known as the Electronic Industry Citizenship Coalition® Code of Conduct (www.responsiblebusiness.org/), to source materials responsibly and not knowingly use metals originating from Conflict Zones.

 
RoHS Compliance Statement

 

The Restriction of Hazardous Substances (RoHS) Directive (2011/65/EU) restricts the use of certain hazardous substances commonly used in the manufacturing of electronic equipment and requires producers of electronic equipment to reduce the concentration of these hazardous materials, which include:

  • Cadmium (Cd) ‹ 100 ppm
  • Lead (Pb) ‹ 1000 ppm
  • Mercury (Hg) ‹ 1000 ppm
  • Hexavalent Chromium (Cr VI) ‹ 1000 ppm
  • Polybrominated Biphenyls (PBB) ‹ 1000 ppm
  • Polybrominated Diphenyl Ethers (PBDE) ‹ 1000 ppm

Commission Delegated Directive (EU) 2015/863 of 31 March 2015 amends Annex II to Directive 2011/65/EU of the European Parliament and of the Council with the addition of four phthalate substances to the list of restricted substances. The following will be internally restricted effective 22 July 2019.

  • Bis(2-Ethylhexyl) phthalate (DEHP) ‹ 1000 ppm
  • Benzyl butyl phthalate (BBP) ‹ 1000 ppm
  • Dibutyl phthalate (DBP) ‹ 1000 ppm
  • Diisobutyl phthalate (DIBP) ‹ 1000 ppm

ATP products comply with the EU RoHS Directive.

 
China RoHS Compliance

 

China RoHS is similar to its European counterpart in that it prohibits the use of heavy metals (Lead, Mercury, Cadmium, Hexavalent Chromium) and two brominated compounds (Polybrominated Biphenyls and Polybrominated Diphenyl Ethers). China RoHS differs in having two phases, having no exemptions, requiring marking of product to show compliance, and requiring testing of product to show conformity in implementing the second phase.

ATP is fully committed to environment protection and sustainable development and has set in place a comprehensive program, in conjunction with our customers and suppliers, for removing polluting and hazardous substances from all of its products where this is technically feasible.

 
REACH Compliance Statement

 

REACH (Registration, Evaluation, Authorization and Restriction of Chemicals) is an EU Regulation that came into force on 1 June 2007. It aims to protect human health and the environment from the risks of chemicals.

ATP is committed to meeting all REACH requirements and providing our customers with information about the chemical substances in our products according to REACH regulations. All our products are articles according to the definition of REACH regulation.

For REACH Article 33 declaration, please contact the concerned branch of ATP Electronics Inc.

 
Waste Electrical and Electronic Equipment (WEEE)

 

The 2013 Waste Electrical and Electronic Equipment (WEEE) Regulations became law in the UK on 1 January 2014. It replaced the 2006 WEEE Regulations.

The Regulations, which refer to the EU Directive 2012/19/EU, restrict the use of hazardous substances in electrical and electronic equipment and set targets for the collection, recovery and recycling of WEEE. Producers placing products into the EU market are obliged to identify equipment suitable for recycling and allow it to be separated from other waste streams. The "crossed out wheelie bin" symbol with a black bar beneath it denotes that the product falls within these WEEE directive guidelines and should either be printed directly on the product or within the user documentation. As a WEEE producer, ATP Electronics Inc. must support its market share proportion of the financial burden of the collection, treatment and recycling of EEE products, and is legally required to register with the Environment Agency (EA) directly or via the Producer Compliance Scheme (PCS).

 

協調漏洞揭露政策

 
一、政策目的:
在ATP,我們將產品的安全性視為首要任務。但無論我們在產品安全上投入多少努力,仍可能存在未被發現的安全漏洞。如果您發現任何漏洞,歡迎通知我們,以便我們盡快採取行動解決漏洞,協助我們更好地提升產品安全,並更完善地保護使用者的隱私與資料。
 
二、適用範圍:
由ATP銷售之所有產品。
 
三、通報流程:
(1) 如果您發現安全漏洞,請依以下指示辦理:
請使用我們提供的PGP公開金鑰 (超連結)加密您的通報內容後,將您發現的漏洞,寄送電子郵件至ATP_Security@tw.atpinc.com,以防止洩漏關鍵資訊。
請勿利用您發現的漏洞或安全問題進行任何未經授權的存取、資料蒐集或其他可能影響系統、服務或使用者的行為,例如下載超過驗證漏洞所必要的資料,或刪除、修改他人資料。
在漏洞問題未解決(修復完成並發布公告後/經本公司確認可公開後)前,請勿向第三方透露漏洞相關資訊/ PoC。(承諾時限請參考下方表格)
請勿進行任何實體安全攻擊、社交工程、分散式阻斷服務攻擊、垃圾郵件或對第三方應用程式的攻擊或測試。
o 僅於驗證漏洞所需的最小必要範圍內進行測試,不進行與漏洞驗證無關的深入測試。
o 不得存取、竄改、刪除、下載或公開任何非本人所有的敏感資訊或業務資料。
o 不得進行 DoS/DDoS、社交工程、實體攻擊、惡意持續存取、勒索軟體攻擊或橫向擴散等具破壞性的行為。
o 不得進行任何可能影響生產環境穩定性或服務可用性的測試。
o 在完成漏洞處理程序前,不得自行向第三方揭露漏洞細節或其他敏感資訊。
為協助我們驗證及重現漏洞,請於通報時提供足夠的資訊,包括但不限於:
o 受影響產品的資訊(例如:產品編號或型號);以及
o 漏洞的詳細描述,以及重現漏洞的步驟說明。
如需進一步資訊以確認或修補較複雜的漏洞,我們可能與您聯繫。敬請留意電子郵件,並隨時與我們聯絡。
(2) 我們承諾:
我們將在7個工作天內發出電郵回覆,確認收悉您的報告並說明後續處理流程。
我們將以保密方式處理您的通報,並於未經您書面同意前,不會向第三方揭露您的個人資料;但法令另有規定或主管機關依法要求者,不在此限。
對於所有收到之通報,我們將依其內容進行評估,惟不保證所有通報皆公開揭露。我們將視案件情形,在合理範圍內向您提供處理進展,包括通報之評估結果及預計的解決日期(如適用)。

處理階段

承諾時限

確認收到報告並分配追蹤編號

7個工作日內。

回覆初步驗證結果(有效/無效/需補充資訊)

10個工作日內。

處理進展更新

至少每30天一次,直至結案。

修復措施發布與公告

原則上自完成驗證日起90天內進行揭露。實際揭露時程得依修補作業複雜度、供應鏈協調進度、影響範圍及風險評估結果調整。

如經確認通報內容屬有效漏洞,我們將於安全公告、版本更新公告或其他公開資訊中致謝並列示您為漏洞通報者;如您不希望公開身分,請於通報時在電子郵件中告知。
 
四、法律聲明與安全港(Safe Harbor):
對於遵循本政策、出於善意且以提升安全性為目的之安全研究,如符合下列條件,ATP不會就該等行為主動向通報者主張民事損害賠償責任,亦不會提出刑事告訴。
o 行為係基於善意且以揭露或改善資安漏洞為目的,並符合本政策之要求,未涉及惡意利用漏洞、未經授權存取、資料竊取、造成服務中斷或其他造成損害之行為;且
o 於漏洞完成修補或經ATP書面同意公開前,未對外揭露漏洞細節或其他可能增加資安風險之資訊。
如通報者未遵循本政策、惡意利用漏洞,或從事其他未經授權或違法行為,ATP保留依法主張民事權利、提出刑事告訴及採取其他法律救濟措施之權利。
本聲明僅代表ATP就其自身權利之行使所為之承諾,不影響主管機關依法行使職權,亦不影響任何第三人依法主張其權利。
 
五、免責聲明:
本政策及相關程序可能隨時更新,恕不另行通知。
我們致力於在合理可行範圍內儘速處理所通報之問題,並於問題完成處理後,儘速發佈修復措施或安全性更新。

安全更新下載連結(如有)

 

安全公告(如有)

 

聯繫我們