Compliance- Trust Center
Security, compliance and governance — transparently delivered. Access certifications, policies, and compliance documentation in one centralized portal.
📊 Overview
UPDATED MARCH 2026GoLite Mobile operates a governance-first security and compliance program aligned with international standards. Our Trust Center provides real-time access to all certifications, policies, and regulatory documentation. All documentation is managed through a continuous-review model. Public documents are freely accessible; restricted documentation requires notification and a signed NDA where applicable.
🏅 Certifications
Active certifications and current compliance status of GoLite's key frameworks.
ISO 27001
Information Security Management System certification, validating our enterprise-grade security controls and digital risk governance framework.
SOC 2 Type II
Security, Availability, and Confidentiality trust service criteria independently audited and verified across all platform operations.
GDPR / UK GDPR
Full compliance with EU and UK General Data Protection Regulations across all data processing activities and digital touchpoints.
Cyber Essentials Plus
UK government-backed scheme protecting against the most common cyber threats, independently verified at the Plus level.
ISO 42001 — AI
AI management system standard governing responsible development and deployment of artificial intelligence systems within GoLite operations.
CCPA Compliance
California Consumer Privacy Act compliance programme, supporting data rights for all applicable US-based customers and end users.
🔐 Security
Architecture, controls, and operational security. GoLite Mobile.
Identity & Authentication
MFA · SSO · Zero Trust access
Multi-factor authentication is enforced across all systems. SSO with Zero Trust network access controls access to all internal and partner-facing platforms.
Access Control
RBAC · Principle of least privilege · Privileged access management
Role-based access control restricts system access by job function. All privileged accounts are subject to enhanced monitoring and regular recertification.
Monitoring & Incident Response
24/7 SOC · SIEM · Incident management
A 24/7 Security Operations Centre monitors all systems in real time. Documented incident response procedures ensure rapid detection, containment, and communication.
Encryption & Data Protection
TLS · AES-256 · Key management
All data is encrypted in transit via TLS 1.2+ and at rest via AES-256. Encryption key management follows NIST guidelines with annual key rotation.
🔒 Privacy
GDPR CompliantGoLite Mobile processes and protects data with rights.
Lawfulness & Transparency
All personal data is collected and processed on a defined lawful basis. GoLite Mobile maintains a public-facing record of processing activities and privacy notices.
Purpose Limitation
Data collected for a specified purpose is never repurposed without a new lawful basis. Processing is strictly limited to defined and documented operational objectives.
Data Minimisation
GoLite Mobile collects only the personal data strictly necessary for each processing purpose. Excess data fields are eliminated at the point of collection design.
Storage Limitation
Retention schedules are applied to all data categories. Personal data is automatically purged or anonymised at the end of its defined retention window.
Request Your Data
Submit a Subject Access Request and receive a full export of all personal data held by GoLite Mobile within 30 days.
Correct Your Data
Request correction of inaccurate or incomplete personal data held on your account at any time.
Delete Your Data
Exercise your right to erasure. GoLite Mobile will action verified deletion requests within 30 days, subject to legal retention obligations.
Data Portability
Receive your personal data in a structured, machine-readable format for transfer to another service provider of your choice.
Object to Processing
Object to processing based on legitimate interests or for direct marketing purposes at any time without providing a reason.
Right to Restriction
Request restriction of processing while a complaint or accuracy challenge is being resolved by our Data Protection team.
🤖 AI Governance
ISO 42001 In ProgressAI ethics, explainability, and responsible deployment — GoLite Mobile.
Human-in-Command
All consequential AI-assisted decisions are subject to human review. No automated system makes final determinations on customer-affecting outcomes without oversight.
Explainability
AI outputs used in customer-facing contexts are explainable by design. GoLite Mobile documents the logic, inputs, and confidence thresholds for all deployed models.
Policy Enforcement
AI deployment is governed by an internal AI Ethics & Governance Policy reviewed quarterly and aligned with the EU AI Act and ISO 42001 framework.
Fairness & Bias
All models are evaluated for demographic bias prior to deployment. Bias audits are conducted annually and results are made available in our AI Transparency Report.
AI Disclosure
Customers are informed whenever AI is used to assist in decisions affecting their account, service, or pricing. Disclosure is embedded at point-of-interaction.
Data Minimisation
AI training pipelines are subject to strict data minimisation controls. Synthetic data is preferred where operationally viable to reduce personal data exposure.
⚖️ Risk & Compliance
Regulatory risk management and framework coverage.
Telecom Regulatory Compliance
Ongoing alignment with regulatory, monitoring and reporting obligations.
Anti-Bribery & Corruption
UK Bribery Act 2010 and international anti-corruption framework — zero-tolerance policy with third-party due diligence.
Sanctions & Export Controls
OFAC, HM Treasury and EU sanctions screening — ongoing monitoring of counterparty sanctions exposure across all markets.
PCI DSS (Payments)
Payment Card Industry Data Security Standards compliance for all card-present and card-not-present transaction environments.
Business Continuity & DR
Tested Business Continuity Plan and Disaster Recovery procedures with defined RPO/RTO targets across all critical systems.
ESG & Sustainability Reporting
Annual sustainability report published — Carbon offset tracking, governance disclosures, Blue Economy commitments.
📜 Policies
Internal governance policies, available for public review.
Information Security Policy
Privacy & Data Protection Policy
Acceptable Use Policy
AI & Governance Policy
Anti-Bribery & Anti-Corruption Policy
Business Continuity & Disaster Recovery Policy
Vulnerability Disclosure Policy
📂 Compliance Documents
Privacy Policy
golitemobile.com
Terms of Service
golitemobile.com
Cookie Policy
golitemobile.com
Data Processing Agreement (DPA)
Partner use
SOC 2 Type II Report
Security audit
ISO 27001 Certificate
Information security
Penetration Test Summary
Redacted executive report
Business Continuity Plan
Executive summary only
AI/CPRA/AI Governance Policy
Subprocessor List
Cyber Essentials Plus Certificate
Annual Sustainability Report