Cybersecurity

Evolution of Smart Project

In 2025, Smart, an initiative aimed at modernizing processes and systems through the use of SAP S/4HANA, brought standardization and agility to financial processes. The results of this phase can already be seen in the Company’s day-to-day operations:

Economia - Segurança | bullets Evolução do Projeto Smart

Reduction in the accounting closing timeline to as little as five business days. The goal is to reach a maximum of three business days after the learning curve period;
Strengthened discipline in keeping data updated and accurate in the system;
Rapid adaptation to the new tax system. The platform has already been programmed taking into account the specific characteristics of the adjustments.

The registration of master data (regarding suppliers, customers, products and materials) was also standardized, with a dedicated area responsible for recording this information using unified support and software. In addition to standardizing registration processing timelines across all Klabin units, the system eliminates duplicate information. Smart also brought advances in land and lease management and generated improvements in wood transportation. Thanks to the information integration enabled by the new SAP system, a truck unloading wood at a mill now spends just over one minute in the weighing area, compared to the previous five minutes—a significant reduction considering the hundreds of vehicles circulating daily.

In 2026, project efforts will focus on the standardization of operational areas such as Maintenance, Production and Product quality. More than 2,000 employees have already been trained in the maintenance module this year. With this system, it will be possible, for example, to monitor the life cycle of a machine in a synchronized manner, from acquisition to decommissioning.

The Procurement area is also gaining new functionalities. One of them is Ariba, a portal through which suppliers will be able to register, submit documents and track the validation process. The tool enables the generation of comparative analyses, the creation of product catalogs with quotations and the execution of auctions, bringing greater agility to supplier selection and purchase order approvals.

Economia - Segurança | slider Privacidade de dados

Privacy and personal data protection

Management of incidents involving personal data

A corporate procedure for handling incidents involving personal data was developed and published, including an action plan in the event of an occurrence.

Monitoring of activities involving personal data

Through a Data Loss Prevention (DLP) system, Klabin has been monitoring the processing of data carried out by employees. The objective is to prevent information theft, as well as raise awareness among teams about the proper and secure handling of personal data, strengthening best practices.

Learning on the ENK Portal

The Privacy and Data Protection area actively participated in the AI Office, the team responsible for evaluating and guiding the use of artificial intelligence solutions within the Company. Its role focuses on identifying and assessing risks related to the processing of personal data in AI applications, as well as providing guidance on the implementation of mitigation measures and compliance with privacy and personal data protection regulations.

Alignment of artificial intelligence use

In 2025, no incidents involving personal data occurred that would require notification to the National Data Protection Agency (ANPD) and/or to personal data subjects.

Cybersecurity highlights

Economia - Segurança | bullets Destaques da segurança cibernética

The cybersecurity process maturity level was maintained.
Employee training proved effective in enabling faster identification of cybersecurity risks.
Recovery tests were carried out in partnership with SAP.
Individual cybersecurity maturity assessments were conducted using a tool already used for risk assessment.
The internal audit team evaluated cybersecurity requirements. Audit results are shared with senior leadership to provide relevant information for cybersecurity management.
In 2025, no cases of privacy breaches or data loss were recorded.

Employee training

In 2025, 77.2% of employees received digital literacy training to support Klabin’s cybersecurity culture, down 2.2 percentage points from 2024. In turn, the rate among contractors fell significantly in this period, from 67.5% to 23.8%. This reduction was due to the removal of the cybersecurity video from the occupational safety training provided to workers joining the Company. In 2026, the cybersecurity video was reintroduced into this training program, and the indicator is expected to return to the levels achieved in previous years.

Economia - Segurança | tootip Capacitação de colaboradores EN

Starting in 2026, Klabin will also include communications about identified risks in the training process.

Advances in the use of AI

Since 2024, Klabin has had a multidisciplinary team called the AI Office, which evaluates the implementation of artificial intelligence tools in the Company’s routine operations. The group analyzes aspects such as risks, security levels and potential productivity gains.

In 2025, more than 300 AI-related requests were submitted to the team and, after their potential to deliver value to the Company was evaluated, 18 were selected for development. One of them uses AI technology to automate orders in SAP, while another ongoing project uses cameras with visual processing capabilities to identify impurities in wood loads.

Other highlights of the AI Office’s work include:

Economia - Segurança | bullets Avanços no uso de IA

The deployment of Microsoft’s AI platform (Copilot) for all employees, reinforcing the use of the technology within Klabin’s own digital environment;
The creation of criteria to define when the Information Technology team should support AI development and when employees themselves may develop agents within the systems already used by Klabin. This assessment considers aspects such as business value, risks and implementation complexity;
Provision of training on the topic on the Klabin Business School (ENK) Portal and a special training program for executives, including a visit to Microsoft.

Innovation with AI

In partnership with technology startup SparkBeyond, Klabin has been combining processes to improve products through a pilot project on a machine at its Monte Alegre site. The goal is to organize knowledge about the process and correlate it with the data generated by the machine. The initiative was launched in 2025.