Compliance
Compliance and Certification Roadmap
Lightbridge Holdings operates to recognized security and governance frameworks at the group level. ISO 27001, SOC 2 Type II, and ISO 42001 certifications are in progress. Every operating entity is built on the same controls.
ISO 27001
Information Security Management
ISO 27001 certification is in progress at the group level. Lightbridge Holdings operates an information security management system aligned to the ISO 27001 framework across all operating entities, with formal certification being pursued.
Recognized by: Framework: International Organization for Standardization (ISO)
SOC 2 Type II
Service Organization Controls
SOC 2 Type II attestation is in progress. Lightbridge operating entities operate controls aligned to the SOC 2 trust services criteria for security, availability, processing integrity, confidentiality, and privacy, in preparation for an independent examination.
Recognized by: Criteria: American Institute of Certified Public Accountants (AICPA)
ISO 42001
AI Management Systems
ISO 42001 certification is in progress. Lightbridge Holdings operates an AI management system aligned to the ISO 42001 framework governing responsible AI development and deployment, with particular application to Lightbridge Labs and Lightbridge Software.
Recognized by: Framework: International Organization for Standardization (ISO)
Compliance Framework
All Lightbridge entities operate under a unified compliance framework managed by Holdings. This includes continuous monitoring, employee training requirements, and incident response procedures. The framework is the basis for the ISO 27001, SOC 2 Type II, and ISO 42001 certifications now being pursued at the group level.
Certification Roadmap
Lightbridge is preparing for independent assessment against ISO 27001, SOC 2 Type II, and ISO 42001. Control gaps are tracked to resolution with executive oversight ahead of formal audit.
Continuous Monitoring
Automated monitoring of security controls, access management, and system integrity across all entities.
Incident Response
Documented incident response procedures with defined escalation paths, notification timelines, and post-incident review processes.
Privacy Policy
How Lightbridge Holdings and its subsidiaries handle personal data.