{"data":{"entity":{"id":"e-gridium","name":"E-Gridium","legal_name":"E-Gridium","role":"Owner and operator of the ChargeBridge OCPI roaming and clearing hub.","url":"https://egridium.com","relationship_statement":"Electroop and E-Gridium are separate companies operating under common ownership. ChargeBridge is an E-Gridium product."},"compliance_programmes":[{"id":"iso-27001","standard":"ISO/IEC 27001:2022","status":"in-progress","phase":"Gap assessment against Annex A; ISMS scope statement maintained","target_date":"2026-12-31","statement":"The hub is operated under an information security management system aligned with ISO/IEC 27001:2022. Audit readiness is tracked control by control; no certification audit has been scheduled yet.","verified_at":"2026-10-04","certified":false},{"id":"soc2","standard":"SOC 2 Type II","status":"planning","statement":"Trust Service Criteria are mapped to the same control set; the attestation engagement is in planning.","verified_at":"2026-10-04","certified":false},{"id":"pci-saq-a","standard":"PCI DSS SAQ-A","status":"self-assessment","statement":"The hub does not store, process or route cardholder data; card payment, where it exists in a partner flow, stays with the partner’s payment provider. The SAQ-A scoping document describes the target architecture.","verified_at":"2026-10-04","certified":false}],"agreements":[{"id":"roaming-participation","title":"Charging Network Roaming Participation Agreement","version":"v4","status":"template","summary":"The interconnect agreement every partner signs before technical onboarding. It defines roles, data scope, settlement rules (hub fee kept out of netting), collection, service levels and termination. Signed together with a data processing agreement."},{"id":"dpa","title":"Data Processing Agreement (KVKK / GDPR)","version":"template","status":"template","summary":"Controller and processor roles for driver and session data exchanged over the hub; retention follows the hub’s delete-on-expiry rule."}],"note":"No certification or attestation has been issued for E-Gridium; programmes are published with their status. No numeric service level is published; service levels are defined in the participation agreement.","trust_centre_url":"https://egridium.com/en/trust"},"meta":{"version":"2026-10-04"}}