Third Party Index

Snapshot 54814

Document
Trust center
URL
https://secureandtrusted.gbgplc.com/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
486562 bytes
SHA-256 (raw)
40ba4748098e0697d5161081ea5049c6416ead8541bb0fe210914ee76a232da6
SHA-256 (normalized text)
7036a07526a36aa56723789263d48a98f0dbe245c77a133af8c7ce39fc93aefa

Normalized text

Scripts and page chrome removed; this is what change detection compares.

ExpectID Successfully Maintains SOC 2 Type II
Trust Centre
Start your security review
View & download sensitive information
Ask for information
GBG Trust Centre
Welcome to GBGs Trust Centre
This page provides an overview of the security controls in use for GBG Group.
Please note you must be an existing customer or have a non-disclosure agreement in place to access locked information.
In the unlikely event the information in the Trust Centre does not answer your security related questions please do reach out to the Information Security Team via email: secureandtrusted@gbgplc.com
Compliance
Cyber Essentials Plus
FedRAMP Moderate
ISO/IEC 20243:2024
ISO/IEC 27001 SoA
ISO/IEC 27001:2022
SOC 2 Type 1
SOC 2 Type 2
PCI DSS v4.0.1
GBG is reviewed and trusted by
John Lewis
Barclays
AmBank
Vodafone UK
Oxfam
the LEGO Group
PayPal
Lyft
American Express
ASOS plc
IBM
HSBC
Betway
BNP Paribas
Coinbase
St. James's Place
Volvo
Documents
Featured Documents
DOCUMENTSCustomer Guide to GBGs Trust Centre
If you think you may have discovered a vulnerability, please send us a note.
Report issue
Security Grades
UpGuard
GBG Plc
909
GB Group Policies
Coordinated Vulnerability Disclosure Policy
Acceptable Use Policy
Access Control Policy
View more
Operational Resilience and Redundancy
Operational Resilience and Redundancy Policy
Overarching Operational Resilience and Redundancy Plan
FedRAMP - Incident Reporting
FedRAMP - Report an Incident
Self-Assessments
SIG Core - Capture
SIG Core - CloudCheck
SIG Core 2025 - ExpectID
View more
Access Control
Data Access
Logging
Password Security
Service Management
Capacity Management
Change Enablement Policy
Continual Improvement Policy
View more
Application Security
Code Analysis
Credential Management
Secure Development Training
View more
Corporate Security
Email Protection
HR Security
Incident Response
View more
Supplier Management
Supplier Minimum Security Standards
Data Security
Authentication
Data Retention & Disposal
Encryption-at-rest
View more
Endpoint Security
Disk Encryption
DNS Filtering
Endpoint Detection & Response
View more
Infrastructure
Status Monitoring
Disaster Recovery & Backups
Minimalist Configurations
View more
Network Security
Data Loss Prevention
Firewall
IDS/IPS
View more
GBGs Approach to DORA and APRA CPS230
DORA - FAQs
APRA CPS230 - FAQs
AI@GBG
GBG's AI Principles
AI Risk Statement
Approach to AI
View more
ESG
Environment Social and Governance
Gender Pay Report
Modern Slavery
View more
Legal
Privacy Policy
Technical and Organisational Measures
Vendor Management
Insurances
EOC Public Liability - £5m
PI and Cyber Insurance
Trust Centre Updates
ExpectID Successfully Maintains SOC 2 Type II
Compliance
We are proud to announce, ExpectID has successfully maintained SOC2 Type II audit report. The report is now available on the certifications page of the GBG Trust Centre
GBG Response to React Vulnerabilities
Vulnerabilities
We have completed a thorough review of our systems and confirmed that no externally facing systems are impacted by the recently reported React vulnerabilities. We will continue to monitor guidance from our security partners and take any necessary actions to ensure ongoing protection.
GBG successfully expands ISO27001:2022 certification.
Compliance
We are pleased to share the exciting news that GBG has strengthened our ISO27001:2022 certification by further certifying our ISMS globally. Additional entities have been included to further demonstrate our compliance and previous certifications for GBG Atlanta, GBG Manchester, NH and GBG Canberra are now retired and covered by this new certification. This work enables our customers and partners to confidently and efficiently know our ISO27001:2022 status.
Our new Certificate and Statement of Applicability are now uploaded to the Trust Centre.
ExpectID successfully maintains SOC2 Type2
Compliance
We are proud to announce, ExpectID has successfully maintained SOC2 Type 2 audit report. The report is now available on the certifications page of the GBG Trust Centre
greenID achieves SOC2 Type 2
Compliance
GBG are pleased to announce its greenID product has achieved SOC2 Type 2 attestation.