Trust Centre
Welcome to GBGs Trust Centre
This page provides an overview of the security controls in use for GBG Group.
Please note you must be an existing customer or have a non-disclosure agreement in place to access locked information.
COMING SOON: Product Family pages will be available which will provide product specific security information - these are due for release in the coming months, until then if you have a product specific query use the contact us link and a member of the team will respond as soon as they can.
John Lewis
Barclays
AmBank
Vodafone UK
Oxfam
the LEGO Group
PayPal
Lyft
American Express
ASOS plc
IBM
HSBC
Betway
BNP Paribas
Coinbase
St. James's Place
VolvoDocuments
Featured Documents
greenID achieves SOC2 Type 2
GBG are pleased to announce its greenID product has achieved SOC2 Type 2 attestation.
GBG Achieves ISO27001:2022 Re-Certification
GBG's new ISO27001:2022 certificate following the successful re-certification is now available on the Trust Centre.
GBG successfully achieved re-certification to ISO27001:2022 in February 2025, this is a fantastic achievement by the GBG team. Once the certificate is available it will be added to the Trust Centre for our customers to download.
GBG GreenID Successfully achieves SOC2 Type 1 Audit
GBG GreenID has successfully completed SOC2 Type 1, this is a key milestone on our journey to achieving SOC2 Type2
GBG IDology Achieves ISO27001:2022 Transition
GBG IDology has successfully transitioned to ISO27001:2022, whilst achieving overall recertification to the standard.
ID3Global Achieves Cyber Essentials Plus Certification
GBGs ID3Global platform has recently achieved Cyber Essentials Plus Certification
Please see our certifications section for further information.
- Access Control - Are all user IDs uniquely associated with a specific individual?
- Are there Subject Matter Experts (SMEs) and/or groups assigned to assess risk for distinct categories (e.g., operational, reputational, regulatory, technology, privacy, financial, etc.)?
- Is all organization email scanned by a DLP security solution?
- Does the organization's risk management program include processes that analyze risk at the enterprise level keeping stakeholders and senior management informed of risk management decisions?
- Is there a formalized Risk Assessment process that identifies, quantifies, and prioritizes risks based on the risk acceptance levels relevant to the organization?