Business Integrity

We recognize the transformative potential of Artificial Intelligence (AI) and reaffirm our commitment to its ethical, safe, transparent, fair and responsible application. Before the adoption of new technologies, we conduct comprehensive analyses of the potential impacts, contemplating ethical, social, regulatory and information technology and telecommunications risks. 

In 2025, we made significant progress in consolidating responsible AI governance. We published the Responsible AI Guideline, structuring management in strategic, tactical and operational pillars, with clear processes for decision-making and monitoring. We implemented the Preliminary Risk Assessment (APR) and the Algorithmic Impact Assessment (AIA), ensuring risk mitigation and regulatory compliance. We created the Responsible AI Office, dedicated to continuous monitoring, support to the areas and the promotion of the culture of responsibility in the use of AI. 

The disclosure of policies, standards and procedures related to ethics and integrity is carried out for our stakeholders through internal and external campaigns and actions, using several communication channels. These actions are planned based on our integrity risk analysis and are combined with specific training actions. 

Of the total number of employees, 98% completed the training on the Petrobras System Code of Ethical Conduct, accounting for 42,337 people trained at the end of the campaign, in December. 

Our integrity system is subject to the risk that managers, employees, contractors or any person doing business with us may engage in fraudulent activities, corruption or bribery, circumvent or override its internal controls and procedures, misappropriate or manipulate its assets for their personal benefit or that of third parties, against our interest. In this sense, one of the objectives of the integrity system is the prevention and treatment of these risks. 

In 2025, we re-assessed all of our processes1 based on risk factors related to fraud and corruption. 

____________________________________________________

                                   ¹Given the configuration of our process standards in hierarchy, all level 2 processes were reassessed. .

We carry out Integrity Due Diligence (DDI) of counterparties in order to know and assess the integrity risks inherent to our relationship with suppliers of goods and services; clients in the marketing of oil products and oil; institutions in sponsorship projects and agreements related to the Communication and Social Responsibility functions; participants in cooperation terms and other agreements; ship owners and brokers; and companies interested in asset divestment, acquisitions and equity interests, strategic and operational partnerships. 

In 2025, the Compliance team assigned 2,787 GRIs to our suppliers. 

Reinforcing our commitment to human rights, the topic has been part, since October 2023, of the DDI questionnaire, along with aspects related to personal data protection. We verify requirements related to human rights commitments and practices, considering, among other aspects, the existence of public commitments, policies and procedures, assessment of human rights risks and impacts, awareness and training actions, the existence and effectiveness of reporting channels, as well as risk management practices in the supply chain, such as the assessment of history and reputation and the inclusion of specific contractual clauses. The information collected will be used for preventive action with our supplier chain.