Ethics and Compliance Policy
Last updated: November 5, 2026
1. Purpose and Scope
This policy sets out how Innospike, UAB ("GetMac", "we", "us", or "our") conducts its business. It covers bribery and corruption, modern slavery and human trafficking, fraud, sanctions and export controls, and how concerns can be raised.
It applies to everyone who works for us or on our behalf: directors, employees and contractors ("our people"). Where it says what we expect of suppliers, it applies to them too.
We are a small company. This policy is written to match that, and we will extend it as the company grows.
2. Responsibility
The Company's director is responsible for this policy, for making sure it is followed, and for reviewing it at least once a year. Every person who works for us reads and acknowledges this policy when they join, and again whenever it changes materially.
3. Our Business and Its Risks
We provide an online service: macOS virtual machines that run our customers' continuous integration jobs. The service runs on hardware we own, in a data centre in Lithuania. We sell a standard service at published prices, mostly through self-service sign-up and card payments. We do not use sales agents or intermediaries, and we do not bid for public-sector contracts.
Our main supplies are computer hardware from established manufacturers and their authorised resellers, data centre services in the EU, and software services from established providers. These are listed on our Subprocessors page.
We have assessed the risks covered by this policy as low. The main inherent risk we have identified is forced labour in the global electronics supply chain, far upstream of the finished products we buy. We address it in section 5.
4. Anti-Bribery and Corruption
We have zero tolerance for bribery and corruption, and we comply with the anti-corruption laws of Lithuania and of every country we do business in. Where they apply to our dealings, these include the UK Bribery Act 2010 and the US Foreign Corrupt Practices Act.
Our people must not:
- offer, promise, give, request or accept a bribe, a kickback or any other improper advantage, directly or through anyone else;
- make facilitation payments ("grease payments") to speed up routine actions;
- give or accept gifts, hospitality or entertainment that could influence, or appear to influence, a business decision. Modest, occasional hospitality in the normal course of business is acceptable. Cash or cash equivalents never are.
We pay genuine prices for genuine goods and services, and we keep accurate and complete accounting records of every transaction.
5. Modern Slavery and Human Trafficking
We have zero tolerance for forced, bonded or compulsory labour, child labour and human trafficking, in our own business and in our supply chain. We support the UN Global Compact's principles on human rights and labour.
In our own business, we:
- employ or engage people only on lawful terms, under written agreements, at no less than the legally required pay and without unlawful deductions;
- keep working hours within the law;
- never hold anyone's identity documents or charge recruitment fees;
- respect everyone's right to leave their job.
In our supply chain, we buy hardware only from established manufacturers and authorised resellers whose own supplier-responsibility and responsible-minerals programmes address the risk of forced labour. We expect all our suppliers to meet the same standards we apply to ourselves. We will stop working with any supplier found to be using forced labour or trafficking, or to be involved in either.
6. Fair Treatment
We treat everyone fairly and with respect. We do not tolerate discrimination, harassment (including sexual harassment) or bullying, whether based on sex, gender identity, race, ethnicity, age, sexual orientation, disability, religion or belief, family circumstances, or any other characteristic protected by law. This applies to how our people behave towards each other, and towards our customers, suppliers and their staff, including when they visit a customer's premises.
7. Fraud
We do not tolerate fraud, false accounting or dishonesty of any kind. We keep accurate records, check that payments are genuine, and separate who requests a payment from who approves it wherever our size allows. We expect our suppliers and partners to act honestly and in good faith.
8. Sanctions and Export Controls
We comply with the sanctions that apply to us as an EU company, and we take UN, UK (OFSI) and US (OFAC) sanctions into account. We do not do business with sanctioned individuals, entities or organisations, and we do not provide our service in comprehensively sanctioned jurisdictions.
Card payments for our service are processed by Stripe, which screens customers and transactions against international sanctions lists. Customers sign in with GitHub or Google accounts, and GitHub applies its own trade-control restrictions.
If we become aware that a customer is, or acts for, a sanctioned party, we suspend their account, stop accepting payments from them, and report the matter to the relevant authority where the law requires it. If such a matter relates to a customer's business with us, we also tell that customer.
Our service uses only standard, mass-market encryption, which is not subject to export licensing under EU Regulation (EU) 2021/821.
9. Confidentiality
Our people may use confidential information belonging to our customers, suppliers or partners only for the purpose it was shared for. We do not refer to any customer in our marketing or other public communications without that customer's permission.
10. Raising Concerns
Anyone, whether one of our people, a customer, a supplier or a member of the public, can raise a concern about a possible breach of this policy or of the law. Concerns can be sent to the Company's director at [email protected]. We treat them confidentially, look into every one, and reply.
No one will suffer any detriment for raising a genuine concern in good faith, even if it turns out to be mistaken. Retaliating against anyone who raises a concern is itself a breach of this policy.
People who work for us also have the protections of the Lithuanian Law on the Protection of Whistleblowers. That includes the right to report directly to the Prosecutor General's Office of the Republic of Lithuania.
11. Breaches
A breach of this policy by one of our people may lead to disciplinary action, up to dismissal or termination of their contract. A breach by a supplier may lead us to end our relationship with them. Where the law requires it, we report breaches to the relevant authorities.
12. Environment
We aim to keep our environmental impact low. We use energy-efficient hardware and run it at high utilisation: each continuous integration job runs on a temporary virtual machine that is destroyed when the job ends. We keep hardware in service for as long as it is supported, and we recycle retired equipment through certified channels.
13. Contact
Innospike, UAB — Lithuania, European Union