GBG Trust Centre

Start your security review

View & download sensitive information

Ask for information

Search items

Welcome to GBGs Trust Centre

This page provides an overview of the security controls in use for GBG Group.

Please note you must be an existing customer or have a non-disclosure agreement in place to access locked information.

COMING SOON: Product Family pages will be available which will provide product specific security information - these are due for release in the coming months, until then if you have a product specific query use the contact us link and a member of the team will respond as soon as they can.

Compliance

Cyber Essentials Plus

GBG is reviewed and trusted by

John Lewis

Barclays

AmBank

Vodafone UK

Oxfam

the LEGO Group

PayPal

Lyft

American Express

ASOS plc

IBM

HSBC

Betway

BNP Paribas

Coinbase

St. James's Place

Volvo

Documents

Featured Documents

REPORTSSecurity White Paper

DOCUMENTSCustomer Guide to GBGs Trust Centre

Security Grades

UpGuard

GBG Plc

880

Reports

Security White Paper

GBG Group Policies

Acceptable Use Policy

Access Control Policy

Asset Management Policy

Access Control

Data Access

Logging

Password Security

Application Security

Code Analysis

Credential Management

Secure Development Training

Endpoint Security

Disk Encryption

DNS Filtering

Endpoint Detection & Response

Network Security

Data Loss Prevention

Firewall

IDS/IPS

Corporate Security

Email Protection

HR Security

Incident Response

Infrastructure

Status Monitoring

Disaster Recovery & Backups

Minimalist Configurations

Self-Assessments

OPTIV ISO27001

SIG Core 2024 - ExpectID

Data Security

Authentication

Data Retention & Disposal

Encryption-at-rest

AI@GBG

AI Risk Statement

Approach to AI

GBG's AI Principles

ESG

Gender Pay Report

Modern Slavery

Whistleblowing Policy

Legal

Technical and Organisational Measures

Vendor Management

Insurances

Employers Liability Insurance

EOC Public Liability £10m

EOC Public Liability £15m

Knowledge Base (FAQ)

Are there Subject Matter Experts (SMEs) and/or groups assigned to assess risk for distinct categories (e.g., operational, reputational, regulatory, technology, privacy, financial, etc.)?

Is all organization email scanned by a DLP security solution?

Does the organization's risk management program include processes that analyze risk at the enterprise level keeping stakeholders and senior management informed of risk management decisions?

Is there a formalized Risk Assessment process that identifies, quantifies, and prioritizes risks based on the risk acceptance levels relevant to the organization?

Do scans performed on incoming and outgoing email include phishing prevention?

Trust Centre Updates

GBG GreenID Successfully achieves SOC2 Type 1 Audit

Compliance

Copy link

GBG GreenID has successfully completed SOC2 Type 1, this is a key milestone on our journey to achieving SOC2 Type2

Published at N/A

GBG IDology Achieves ISO27001:2022 Transition

Compliance

Copy link

GBG IDology has successfully transitioned to ISO27001:2022, whilst achieving overall recertification to the standard.

Published at N/A

ID3Global Achieves Cyber Essentials Plus Certification

Compliance

Copy link

GBGs ID3Global platform has recently achieved Cyber Essentials Plus Certification

Please see our certifications section for further information.

Published at N/A

GBG IDology successfully achieves SOC2 Type2 Audit

Compliance

Copy link

GBGs Atlanta office has successfully completed its annual compliance audit for the period 1st July 2023 to 30th June 2024.
The report is now available to download via the Compliance Section on the Trust Centre. Please note you must be an existing customer or have signed the NDA to obtain a copy of the report.

Published at N/A

If you need help using this Trust Centre, please contact us.

Contact Support

If you think you may have discovered a vulnerability, please send us a note.

Report Issue