Ceva Sustainable Procurement Policy

September 8th 2026

1. Purpose

The purpose of this Policy is to ensure that Ceva procures products and services in a manner that supports its business objectives while upholding standards of ethical conduct, respect for human rights, environmental sustainability, information security, and regulatory compliance throughout the supply chain. This Policy complements Ceva’s procurement policies and procedures, Code of Conduct and Business Ethics, and Human Rights Policy, and establishes the principles governing the incorporation of sustainability criteria into supplier selection, engagement, and management.

2. Scope

This Policy applies to all of Ceva’s procurement activities and should be implemented by all employees involved in the selection, qualification, management, and evaluation of suppliers globally.

As a semiconductor IP developer, Ceva does not conduct manufacturing activities or procure manufacturing services or raw materials, either directly or indirectly. Accordingly, its supplier base is primarily service-oriented and, similar to that of software companies, is generally considered to present relatively low sustainability-related risks.

Consistent with Ceva’s existing procurement procedures, this Policy will be implemented using a risk- and materiality-based approach. Accordingly, although all suppliers are expected to meet the standards described in this Policy, only suppliers meeting the applicable thresholds- will be subject to all due diligence processes described herein.

3. Supplier Standards and Expectations

Human Rights and Labor Practices

Ceva expects its suppliers to conduct business in compliance with applicable laws, internationally recognized human rights and labor standards, and Ceva’s Human Rights Policy. Suppliers are expected to prohibit child labor, forced labor, discrimination, harassment, and abusive behavior; respect employees’ rights to freedom of association and collective bargaining, in line with local laws and regulations; provide safe and healthy working conditions; maintain appropriate channels for employees to raise concerns without fear of retaliation; comply with applicable wage, and employment requirements, including providing clear and documented wage information, paying overtime at applicable premium rates, prohibiting disciplinary wage deductions, and working toward the provision of a living wage; comply with applicable requirements regarding working hours, including limits on maximum weekly working time and provision of regular rest periods in line with internationally recognized labor standards, including relevant ILO conventions; comply with leading employment practices such as charging recruitment fees to workers, particularly migrant workers, shall not retain workers’ identity documents, and provide employment contracts in a language that workers can understand.

Environmental Sustainability

Ceva expects its suppliers to conduct their operations in an environmentally responsible manner and in compliance with applicable environmental laws and regulations. Suppliers are expected to identify, manage, and seek to reduce the environmental impacts associated with their activities, including, where relevant, energy use, greenhouse gas emissions, water consumption, resource use, and waste generation. Ceva also expects suppliers to provide relevant environmental information upon request where required for Ceva’s sustainability management programs.

Business Integrity

Ceva expects its suppliers to conduct business with integrity, transparency, and in compliance with applicable laws, regulations, contractual obligations, and the principles reflected in Ceva’s Code of Conduct and Business Ethics. Suppliers are expected to comply with anti-corruption and anti-bribery requirements, avoid conflicts of interest, maintain accurate records. Privacy and cybersecurity are a key third party risk Ceva manages, and expects all relevant suppliers to have an advanced information security management system in place, to protect confidential information and intellectual property, and comply with applicable information security and contractual requirements.

4. Supplier Risk Assessment, Qualification, and Engagement

Prior to engagement, Ceva applies defined qualification thresholds based on the financial scale of the engagement, the nature of the products or services provided, and the associated compliance, information-security, environmental and social risks.

Suppliers meeting the applicable qualification thresholds are subject to a dedicated due diligence process, with the scope of review determined by the nature and level of the identified risks. Higher-risk or more material suppliers may be subject to enhanced review.

Relevant risk factors may include the nature and location of the supplier’s operations, financial materiality of the engagement, access to Ceva systems or information, labor and human-rights considerations, environmental impacts, regulatory exposure and business continuity risk.

Where supplier performance, compliance, or sustainability-related deficiencies are identified, Ceva may engage with the supplier to address the issue and promote improvement within a specified timeframe. Ceva may conduct follow-up reviews, where appropriate, to verify progress. Failure to address significant or repeated deficiencies may result in further action, including suspension, disqualification, or termination of the supplier relationship in accordance with Ceva’s procedures.

5. Training and Awareness

Employees responsible for procurement, supplier qualification and supplier management receive periodic training on this Policy, including its human rights, labor, environmental, business integrity and supplier due-diligence requirements.

6. Supplier Engagement

Ceva seeks to maintain constructive and transparent relationships with its suppliers in order to support responsible business practices and continuous improvement. Supplier engagement may include communicating Ceva’s expectations, discussing relevant sustainability and compliance topics, reviewing supplier performance, addressing corrective actions where needed, and supporting supplier awareness and development activities, as appropriate.

Suppliers are expected to communicate relevant requirements to their subcontractors and suppliers, where appropriate, and to cooperate with reasonable requests for information or documentation relating to this Policy.

In addition, engagement letters and contracts with suppliers include a requirement to read and comply with Ceva’s Code of business Conduct and Ethics. The suppliers are therefore contractually obliged by the Code, as well as by future amendments to it.

7. Governance and Responsibilities

The Procurement Department is responsible for overseeing the implementation of this Policy, integrating its principles into relevant procurement processes, and periodically reviewing its effectiveness. Relevant functions may support the Procurement Department, as needed, in matters within their areas of expertise.