Professional Integrity

Since 2019, GFT has been a member of the United Nations Global Compact, the largest voluntary initiative for responsible corporate governance worldwide. Together with our Corporate Governance framework, it forms the foundation for how we manage our business responsibly. We believe that strong governance stakeholder engagement, and transparent sustainability practices are essential to long-term business success.

The Administrative Board of GFT Technologies SE is responsible for corporate strategy and all major decisions, including sustainability-related impacts, risks and opportunities. Supported by the Group CSR Committee, it oversees the implementation of our CSR Agenda, monitors progress and helps ensure that environmental and social objectives are considered in corporate strategy and governance.

We can only be successful if we take due account of the needs and expectations of our stakeholders. Direct stakeholders are our clients, employees and shareholders, as well as our suppliers and partners.

This also establishes relationships with numerous indirect stakeholders.

GFT’s Compliance Management System ensures adherence to legal requirements, ethical standards, and internationally recognized labor and social norms, as set out in our global Code of Ethics and Code of Conduct. We respect employees’ rights to freedom of association and collective bargaining, and where restricted by law, support alternative forms of representation. The Compliance Office oversees implementation, training, and reporting channels. More information is available on our Compliance page. 

Our cybersecurity & resilience strategy aims to protect the company, its people, and its tangible and intangible assets, while ensuring business continuity.

Our information security management system (ISMS) is certified to ISO/IEC 27001 for exemplary areas and ensures consistent security policies across all entities.

All employees are responsible for data security and complete annual mandatory training. Our Global Information Security Operations Centre (GISOC) monitors systems 24/7, supported by a zero trust network model. GFT’s resilient business model includes distributed delivery processes, cloud-based applications, and a hybrid working model, ensuring business continuity and security. 

Our data protection framework is built on respect for human rights and legislation, fostering trust in digital transformation for our clients, partners, and employees.

Our policies and guidelines ensure a high level of data protection across all GFT operations, even in countries without robust data protection laws. Mandatory and optional training ensures employees understand and comply with these standards. Our GFT Group Data Sharing Agreement is a unified approach to safely share personal data within the Group. 

A global incident handling process is in place for quick response to any data breaches, protecting individuals’ rights and preventing significant damage. Our Data Protection by Design approach and commitment to Responsible AI help ensure that digital transformation is secure, transparent and trustworthy.

Learn more about our approach on our Responsible AI page.