Environmental policy
1. Purpose and Scope
This Environmental Policy sets out the principles by which SSH Communications Security Oyj (“SSH”) manages the environmental impact of its operations. It applies to all SSH employees, contractors and subsidiaries, and covers our offices, business travel, IT equipment, and the data center and cloud services we use to deliver our software products.
SSH is a software company. We do not manufacture physical goods, and our most material environmental impacts arise from business travel and commuting, physical offices, and the electricity consumed by data centers and cloud platforms that host our services.
2. Our Commitment
SSH is committed to conducting its business in a way that protects the environment and contributes to the global transition to a low-carbon economy. We integrate environmental considerations into our operational decisions, our procurement, and our travel practices, and we work to continuously reduce the environmental impact of our activities.
We support the objectives of the Paris Agreement and the EU’s ambition of achieving climate neutrality by 2050. SSH aims to achieve net zero greenhouse gas emissions across its own operations, business travel and supply chain by 2035, and to set interim emissions reduction targets to track progress toward this goal. We work with suppliers who share this ambition.
3. Compliance with Laws and Regulations
SSH complies with all applicable environmental laws, regulations and other binding requirements in the jurisdictions where we operate, including Finnish environmental legislation and relevant EU regulations. Where no specific legal requirement applies, we follow good industry practice.
4. Environmental Focus Areas
4.1 Business Travel
Business travel is one of the most material sources of greenhouse gas emissions in SSH’s operations. We follow a virtual-first principle: meetings, customer interactions and internal collaboration are conducted online wherever this is effective. We default to economy class for air travel and combine trips and meetings requiring travel whenever possible. Travel-related emissions are tracked and reviewed.
4.2 Data Centers and Cloud Services
The electricity consumed by the data centers and cloud platforms that host SSH’s services is the second key material source of our environmental footprint. Our data centers are more than 99% certified as carbon neutral and expected to be fully carbon neutral in 2027. When selecting and reviewing data cloud providers, we give preference to suppliers who use renewable electricity, disclose Power Usage Effectiveness (PUE), and have published decarbonization plans aligned with science-based targets.
4.3 Offices and IT Equipment
In our offices we work to reduce energy consumption and prefer providers that use renewable electricity. Currently (5/2026), roughly 95% of our global office space use carbon neutral electicity and 90% use carbon neutral heating/cooling. We encourage and enable diverse recycling and extend the working life of IT equipment such as laptops, monitors and servers where this is practical. All end-of-life electronic equipment is recycled through certified recyclers in line with the WEEE Directive.
4.4 Suppliers and Procurement
SSH considers environmental performance as one criterion when selecting and reviewing suppliers, in particular providers of cloud and hosting services, IT hardware, and business travel. We expect our key suppliers to operate in compliance with applicable environmental legislation and to be willing to share information about their environmental practices and performance.
5. Roles and Responsibilities
The CEO of SSH has overall responsibility for this Policy and its implementation. Day-to-day responsibility for environmental matters is assigned to designated functions within SSH, including those responsible for facilities and IT, procurement and travel All SSH employees are expected to act in accordance with this Policy in their daily work.
6. Monitoring and Continuous Improvement
SSH is working on developing better ways to monitor environmental performance of its operations and investigating the indicators that are most relevant to our business. We are developing measures to track our Scope 1, Scope 2 and Scope 3 greenhouse gas emissions in line with the European Sustainability Reporting Standards (ESRS) and will provide this data to customers and business partners from reporting year 2027 on. Environmental performance is reviewed at least annually by management, and this Policy is used to identify opportunities for further improvement.
7. Communication and Review
This Policy is made available to all SSH employees and is published on SSH’s website so that it can be accessed by customers, investors, suppliers and other interested parties. The Policy is reviewed at least every two years, and updated when there is a material change in our operations, applicable regulations, or environmental commitments.
8. Approval
This Environmental Policy has been approved by the CEO of SSH Communications Security Oyj on behalf of the company.
