Governance, run by the group

Our companies see vehicles, people and places. That carries responsibility, so data protection, security and AI policy are set once by the group and applied by every company.

Data protection

Each company collects only what its job needs and keeps it only as long as it needs it. Our privacy programme is built to POPIA in South Africa and the UAE Personal Data Protection Law, and to the law of every market a company enters.

Security

Access, change and incident management follow one group standard, organised around SOC 2 and ISO/IEC 27001, so a customer of any company can expect the same controls.

Responsible AI

Our products support people; they do not watch them. Systems are designed with human decision-making in the loop and without surveillance of staff, and our AI management approach is organised around ISO/IEC 42001.

Frameworks and status

FrameworkScopeStatus
POPIAPersonal information, South AfricaIn progress
UAE PDPLPersonal data, United Arab EmiratesIn progress
SOC 2Security controlsIn progress
ISO/IEC 27001Information security managementIn progress
ISO/IEC 42001AI managementIn progress

We update this table as each assessment or certification completes. Questions about our programme can be sent to the group.

Partner, invest or build with the group

Enterprises, investors, founders and future colleagues all start in the same place.