Governance

Governance that sustains trust

How Centriu organizes itself to operate responsibly, ethically and transparently — with structure, policies and risk management aligned with international best practices.

See the pillars
Transparency about our positioning. Centriu is not a certified company and does not use seals or logos that suggest official certification. The practices described represent internal operational adaptations and best practices aligned with the requirements of international standards — operational compliance and continuous improvement, not certification granted by an accredited body.
Pillars

How we organize ourselves

Six fronts that sustain responsible decisions, data protection and integrity in everyday operations.

Structure and policies

The way Centriu organizes itself to make decisions with responsibility and consistency.

  • Internal policies formalized and reviewed periodically.
  • Roles and responsibilities clearly defined.
  • Continuous improvement cycle for controls.

Risk management

Continuous identification, assessment and treatment of security, privacy and operational risks.

  • Risk-based approach to protect data and services.
  • Continuous monitoring and reassessment of threats.
  • Response and operational continuity plans.

Ethics and integrity

A culture of integrity and prevention of fraud and bribery, aligned with the principles of ISO 37001.

  • Code of conduct and anti-bribery policy.
  • Guidelines on gifts, hospitality and conflicts of interest.
  • Integrity channel with confidential handling and non-retaliation.

AI governance

Responsible, transparent and supervised use of Artificial Intelligence, aligned with ISO/IEC 42001.

  • Policy for ethical and responsible use of AI.
  • Human oversight at critical points (human-in-the-loop).
  • Transparency about the presence of AI features.

Data governance

Ownership, classification and access control of data throughout its entire life cycle.

  • Access on a need-to-know basis and the principle of least privilege.
  • Classification and segregation of data and environments.
  • Record of processing activities (ROPA).

Transparency and accountability

Clear communication about practices, controls and the continuous evolution of governance.

  • Transparent positioning: alignment, not certification.
  • Communication about service availability and continuity.
  • Documentation available upon request.

Trust & documents

ISO conformity

Alignment with the requirements of the ISO 27001, 27701, 20000-1, 42001 and 37001 standards.

Access

Compliance

Legal and regulatory compliance, LGPD and international standards.

Access

Privacy Policy

How we handle and protect personal data.

Access

Service status

Availability and operation of the platform.

Access

Integrity channel: integridade@centriu.com. Reports handled confidentially and without retaliation.

Legal notice: the governance practices described on this page represent internal operational adaptations and the adoption of best practices aligned with the requirements of recognized international standards. Centriu does not claim to hold certification and does not use seals, logos or any elements that suggest official certification. Any certifications may only be issued by duly accredited certification bodies.