Compliance
Compliance
Lightbridge Holdings is the parent organization for the Lightbridge family of operating companies. This page explains how compliance and security responsibility is divided between Holdings and its subsidiaries.
How Responsibility Is Divided
Each Lightbridge operating company sets and manages its own compliance program, security practices, and incident response. Holdings does not centrally operate, monitor, or certify security controls on behalf of its subsidiaries; its role is corporate governance and shared infrastructure, not a group-wide compliance framework.
Subsidiary Autonomy
Each operating company is responsible for its own security posture, data handling, and compliance obligations as they apply to its own business.
Questions or Concerns
For a compliance question about a specific Lightbridge company, contact that company directly, or reach Holdings via the corporate inquiries link below.
Privacy Policy
How Lightbridge Holdings and its subsidiaries handle personal data.
Compliance and certification: frequently asked questions, answered by Lightbridge Holdings
- Does Lightbridge Holdings hold ISO 27001, SOC 2, or ISO 42001 certification?
- No. Lightbridge Holdings does not hold ISO 27001, SOC 2, or ISO 42001 certification, and does not claim to be pursuing or in progress on any of them at the group level. Any such certification, if a subsidiary earns one, would be stated on that subsidiary's own site. This page does not assert one on behalf of the group.
- Is there a single security certification that covers the whole Lightbridge group?
- No. Holdings does not operate a group-wide compliance program, so there is no single certification, audit, or attestation that covers every Lightbridge operating company at once. Each subsidiary's compliance standing, if any, is its own to state.
- Does Lightbridge Holdings conduct vendor security reviews on behalf of its subsidiaries?
- No. Vendor security review is handled independently by each operating company as part of its own procurement process. Holdings does not run, coordinate, or sign off on vendor security reviews for the companies it owns.
- Who do I contact about a specific subsidiary's compliance posture?
- Contact that operating company directly. Each Lightbridge subsidiary manages its own compliance program and is the right party to answer questions about its own controls, certifications, and practices. If you are not sure who to reach, contact Lightbridge Holdings through its corporate inquiries page and Holdings will route the question.
- Can Lightbridge Holdings complete a compliance questionnaire or issue a security attestation for a subsidiary?
- No. Holdings does not complete vendor questionnaires or issue attestations on a subsidiary's behalf, since it does not operate that subsidiary's security controls. Send these requests to the specific operating company you work with.
- Why doesn't this page list a compliance framework or certification?
- Because Holdings does not operate or certify security controls for its subsidiaries, it publishes no certification of its own. A due-diligence reviewer should look to the specific operating company for its own, independently stated compliance information.