Home / Security & Compliance
What we've documented, and how requirements get handled.
If you're placing a delivery partner behind a client program, our posture becomes part of the answer you give your client. This page sets out what exists today and how program specific requirements are worked through.
01Where we stand on certification
An accurate description beats an implied certification that doesn't survive a question.
Our position is straightforward. Our ethics and compliance programme is internally assessed and documented. It is not third party certified. That's an accurate description of where a company of our size and stage genuinely sits, and it's a better basis for a partnership than an implied certification.
If your client requires a specific certification, tell us early. You'll get a clear answer about where we stand rather than a hedge, and you can factor it into your decision before it's built into a proposal.
02The framework we hold ourselves to
A documented ethics and labour compliance programme, adopted August 2026.
- 01
Anti trafficking, forced labour and child labour
Policy, an annual labour and human rights risk assessment, and supplier attestation requirements.
- 02
Social responsibility
Fair wages, working conditions, health and safety, and a human rights process that extends to subcontractors.
- 03
Anti bribery and anti corruption
Policy, a maintained risk register, a gifts and hospitality register, and periodic monitoring.
- 04
Whistleblowing and ethics reporting
A confidential reporting channel available to employees, contractors and the professionals working on our programs.
- 05
Supplier code of conduct
Issued to suppliers and subcontractors, with signed attestations collected and logged.
03How program requirements get handled
Most requirements reach us as flow downs from your client. We work through them during scoping.
- 01
We start from your client's actual requirements
Not a generic questionnaire, but the specific obligations in the contract you're delivering against.
- 02
We tell you what we can meet and what we can't
Where a requirement is outside what we can support today, you'll hear it during scoping rather than finding it in a gap analysis later.
- 03
Program specific controls get documented
Handling, retention, access and any client specific obligations are written into the program rather than assumed.
- 04
Your reviewer can talk to ours
A direct conversation resolves more than a questionnaire round trip.
04What we can share during diligence
Available on request, under a confidentiality agreement where appropriate.
- Corporate and entity documentation
- Our ethics and compliance policy set
- Supplier code of conduct and attestation process
- Agent screening and qualification approach
- Confidentiality and data handling terms applying to people on our programs
- Quality approach and review criteria
- Escalation and reporting structure
05Questions procurement tends to ask
Specific questions, specific answers.
Are you certified against a recognised security standard?
No, and we won't imply otherwise. Our programme is internally assessed and documented.
Can you accept our client's flow down terms?
Send them and we'll review them properly. Some we'll accept, some we'll want to discuss, and some we may not be able to meet.
Where is program data handled?
That depends on the delivery arrangement, and it's agreed and documented during scoping rather than assumed.
Do you subcontract further?
Our supplier code of conduct and attestation process govern anyone we work with. The specifics for your program are settled in the agreement.
06Request our documentation
Tell us what your client's contract requires and we'll send what we have, and be clear about what we don't.
How this works
- Let us know what you're reviewing against and who's asking
- We route it to the right person on our side
- You get what exists, and a straight answer about what doesn't