Policies

Our policies and guidelines are intended to provide support and guidance in our day-to-day operations in order to achieve our vision and objectives.

Our policies cover the following areas: quality, ethics, human resources and work environment, communication, data protection, finance, environment, information and cybersecurity, as well as security and preparedness.

Quality Policy

We always place the patient at the centre of our operations while carrying out our mission in a cost-effective manner. Our quality management system, applicable regulations, guidelines, and other requirements from authorities and stakeholders govern how we procure materials and services, manufacture, and supply medicinal products.

We achieve this by:

• acting in accordance with our quality management system
• training, developing, and motivating our employees
• building quality into our processes and ways of working
• applying a risk-based approach and making decisions based on scientific evidence
• continuously improving our quality management system, processes, and tools
• conducting regular internal inspections within the area

Ethics policy

Everything we do is characterised by sound ethics. We act professionally and responsibly, and we maintain a respectful approach towards each other, our owner, customers, suppliers, the wider community, and the company. We promote social responsibility and have zero tolerance for criminal activity and corruption.

We achieve this by:

• complying with the UN Declaration of Human Rights and promoting equal value for all people
• never unlawfully disclosing confidential information and complying with our customers’ confidentiality requirements
• adhering to our Code of Conduct and ensuring that our suppliers comply with our Supplier Code of Conduct
• ensuring that our financial reporting is complete, transparent, and compliant with applicable legislation and best practice
• complying with tax legislation and practices in the areas in which we operate
• maintaining professional and transparent relationships with authorities

Human Resources and Work Environment Policy

A safe, secure, and stimulating work environment is essential for the health and well-being of our employees and for APL to conduct a sustainable and successful business.

We strive to be an attractive employer by promoting employee engagement, community, development, and well-being, while ensuring a healthy and safe work environment in close collaboration with occupational health and safety representatives and workplace representatives.

Our objectives are to:

• create a culture where dialogue and the opportunity to influence are central
• ensure that our physical, social, and organisational work environment is perceived as positive and is managed proactively and systematically
• provide managers and employees with the conditions needed to develop and take responsibility

We achieve this by:

• complying with applicable occupational health and safety and labour legislation, as well as our internal guidelines and procedures
• having overarching occupational health and safety objectives and an equal treatment plan
• preventing and managing risks through systematic work environment management, including training, risk identification, risk assessment, measures, and follow-up
• acting on early signals to prevent ill health and sickness absence
• having clear work environment delegations with defined authority and mandates
• being prepared to manage sudden serious incidents and crisis situations
• maintaining zero tolerance for harassment and abusive behaviour
• ensuring a work environment free from alcohol and drugs
• acting in accordance with our leadership criteria and values
• utilising and further developing competence and experience
• translating organisational objectives into concrete individual contributions and following up performance
• actively promoting equal opportunities in terms of career and salary development
• fostering an inclusive and positive workplace where everyone feels valued

Communication policy

Our communication is consistent, supports our mission, contributes to our strategic objectives, and builds relationships with stakeholders. We are perceived as transparent and relevant to our target audiences, and our communication motivates and engages. Long-term relationships and knowledge of our organisation and operations are key elements of our communication.

We achieve this by:

• ensuring that information about our public service mission is clear and easily accessible
• maintaining consistent communication and tone of voice and using the same terminology internally and externally
• ensuring consistent communication across all channels towards our target audiences
• influencing our target audiences with the right messages, at the right time, and through the right channels to support our transformation journey
• always being mindful of whom we represent and our role when using social media
• allowing designated representatives, the CEO, and in the CEO’s absence the CFO, to manage external media contacts

Finance Policy

APL’s management of liquidity and financial risks shall be well balanced and aligned with the company’s overall objectives and strategy. Risk management shall be characterised by a holistic approach, coordination, and risk control.

We manage the following risks:

• Financing risk: APL’s policy allows for long-term indebtedness; however, net interest-bearing debt must not exceed 90 percent of equity.
• Interest rate risk: APL’s policy is to minimise interest rate risk by fixing loan interest rates for periods of 1–10 years, taking external conditions and market developments into account.
• Currency risk: APL’s policy is to assess risks and consider currency hedging for major transactions in foreign currencies.
• Liquidity risk: APL’s policy is to ensure access to sufficient liquid funds to meet operational needs by ensuring that overdraft facilities combined with liquid assets cover the company’s expenses for two months.
• Credit risk: APL’s policy is to conduct credit assessments of all potentially new CDMO customers.
• Administrative risks: APL’s policy is to minimise risks through a well-functioning internal control system and external audits.

Environmental Policy

We integrate a sustainability perspective into our operations, and our environmental work contributes to achieving the sustainability goals of Agenda 2030, the Paris Agreement, and Sweden’s national environmental quality objectives.

To contribute to a sustainable and healthy environment for future generations, we focus on and act to promote sustainable resource use, energy consumption, and the prevention of emissions.

In addition to complying with applicable laws, national regulations, and binding environmental requirements, APL works continuously to improve and meet stakeholders’ expectations regarding environmental performance.

We achieve this by:

• providing training and working systematically to minimise risks that may negatively affect or harm people and the environment
• maintaining open dialogue to create engagement and responsibility
• having clear areas of responsibility within environment, fire safety, and electrical safety
• reducing and optimising energy and water consumption
• increasing and optimising the use of renewable and sustainable input materials
• reducing waste generation
• maintaining buildings and equipment to ensure optimal service life
• choosing energy sources, travel, and transportation options with the lowest possible climate impact
• being well prepared to manage sudden serious incidents (crises)

Information and Cybersecurity Policy

Our mission depends on access to reliable information. We must protect our valuable information from both external and internal threats to ensure its availability when needed, its integrity and traceability, and that only authorised individuals have access to it. Continued digitalisation and an increasing frequency of complex cyberattacks—exploiting both technical vulnerabilities and human weaknesses—require us to continuously develop and strengthen our information and cybersecurity.

We achieve this by:

• training employees and raising awareness, emphasising the importance of personal responsibility
• working systematically with information and cybersecurity as an integrated part of organisational processes
• managing risks based on information classification and implementing appropriate organisational, personnel-related, physical, and technical security measures
• reporting observations, risks, and incidents that may impact information and cybersecurity
• maintaining procedures for handling cyber incidents and recovery, which are regularly tested
• complying with relevant authority requirements, industry standards, and guidelines

Data Protection Policy

We safeguard the privacy of our employees, patients, and customers. In our processing of personal data, we comply with the General Data Protection Regulation (GDPR), the Swedish Authority for Privacy Protection, and other governing regulations.

We achieve this by:

• appointing a Data Protection Officer (DPO)
• processing personal data in a lawful and fair manner
• maintaining a register of all personal data processing activities within the company
• signing data processing agreements with our suppliers and customers
• conducting regular internal inspections within the area

Security and Preparedness Policy

The changing global situation and security policy developments place increased demands on us as a state-owned company. We must protect our assets, strengthen organisational resilience, and enhance our ability to manage various types of disruptions and undesirable events. Active and systematic security and preparedness efforts are essential to building resilience so that we can maintain operations during peacetime crises, heightened readiness, and ultimately war, in accordance with our public service mission.

We achieve this by:

• creating redundancy for prioritised activities through alternative processes, stockpiling, and reserve capacity
• planning to ensure workforce availability during heightened readiness
• training employees to increase knowledge of security and preparedness issues and strengthening organisational capabilities through exercises
• having contingency plans to mitigate consequences and minimise downtime in the event of disruptions
• identifying and analysing changing threat landscapes in both the external environment and local context
• cooperating and collaborating with authorities, municipalities, and other stakeholders

For questions about APL's Privacy Policy, please contact us via e-mail: info@apl.se