To identify potential risks, we used the DIHR compliance assessment tool developed by the Danish Institute of Human Rights (DIHR), as well as various internal sources (whistleblower channel, audits, inspections, personnel surveys, experiences) and external sources (country- and sector-specific human rights reports, industry benchmarks).