Operational security
LiveProduction secrets stay server-side, internal operational routes are protected, and the booking database is isolated behind service-side access controls.
Enterprise Trust Centre
Built for organisations that need more than a chauffeur booking
Black Pearl Executive is building its operating platform around traceable controls for security, privacy, chauffeur compliance, incident handling and enterprise procurement.
Assurance overview
Controls procurement teams can understand
We distinguish between controls already operating and programmes still being formalised. Certification is never implied where it has not been completed.
Driver & vehicle compliance
LiveA central compliance register tracks driver, vehicle, company and supplier evidence with review status and expiry dates.
Incident governance
LiveSafety, service, privacy, security and operational exceptions can be recorded with severity, ownership, investigation status and resolution evidence.
Dispatch accountability
Live foundationBlack Pearl maintains a dedicated decision-log structure for rule-based, AI-assisted and human dispatch decisions, including human overrides and reasons.
Enterprise account controls
LiveApproved corporate users can access a company-scoped Enterprise Portal for bookings, journey oversight, payment terms, PO controls and procurement assurance without seeing other clients or internal Control Centre data.
ISO/IEC 27001 readiness
ProgrammeControls are being organised toward an ISO/IEC 27001-ready information-security management programme. Black Pearl does not claim ISO certification at this stage.
Enterprise controls
Evidence, not just promises
The platform is being designed so major clients can verify operational controls through documented records instead of relying on informal assurances.
01
Protected Operations and Compliance Centres
02
Server-side API credentials and production secrets
03
Driver and vehicle document-expiry register
04
Safety, privacy and security incident register
05
Booking status and operational history
06
Explainable dispatch decision-log foundation
07
Company-scoped Enterprise Portal with named corporate roles
08
Corporate account, payment-term and PO controls
09
Procurement and due-diligence evidence workflow
10
GDPR-oriented data minimisation and retention programme
11
Business-continuity and security-control programme
Privacy & security
A measured security programme
Black Pearl is developing formal GDPR governance, incident-response procedures, data-retention rules, supplier oversight and ISO/IEC 27001 readiness alongside the operating platform. Where a control is still being formalised, we describe it as a programme rather than presenting it as certified.
Certification status
ISO certification is not currently claimed
Our current objective is to build the evidence, policies, access controls, risk management and audit discipline needed for a future ISO/IEC 27001 certification process.
Enterprise roadmap
Assurance layers now being operationalised
01
RBAC foundation — live
Server-side role permissions now separate super-admin, operations, dispatch, compliance, finance and read-only access. Named identity and MFA activation is the next step.
02
Enterprise SSO — integration ready
SAML/OIDC connection records are ready for Microsoft Entra ID or Okta. Federation is activated only after provider, domain and claims testing.
03
Procurement Pack — internal draft
A controlled pack now includes security, incident, continuity, retention, access/MFA, SSO/RBAC, SLA, DPA and ISO-readiness documents.
04
Security assurance — programme live
The assessment register and penetration-testing programme are live. Independent third-party testing is planned and must be completed before external-tested claims are made.
05
SLA reporting — foundation live
A protected 30-day assurance report measures operational and security evidence. Contractual targets remain client-specific until signed.
06
ISO pathway — control register live
The ISO/IEC 27001 readiness register is live for evidence tracking, internal audit preparation and management review. Certification is not currently claimed.
Supplier due diligence
Need documents for procurement?
Send us your vendor questionnaire or list of required documents and we will coordinate the appropriate commercial, privacy, insurance and operational information.