Document Owner: CEO/CTO

Last Updated: October 21, 2025

Review Frequency: Annually

1. Purpose

This document defines Kino AI's secure software development practices to ensure applications are designed, developed, tested, and deployed with security as a fundamental requirement.

2. Scope

This policy applies to all software development activities at Kino AI, including:

• New feature development
• Bug fixes and maintenance
• Third-party integrations
• Infrastructure as code
• Internal tools and scripts

3. Software Development Lifecycle Overview

Kino AI follows an iterative development process with security integrated at every stage:

Requirements → Design → Development → Testing → Deployment → Maintenance
      ↓           ↓          ↓           ↓          ↓            ↓
   Security   Security   Security    Security  Security     Security
   Review     Review     Practices   Testing   Review       Monitoring

4. Development Environment

4.1 Version Control

• All code must be managed in Git version control (GitHub Enterprise)
• No code exists outside of version control