Golonex

The Seat

The seatWhat the seat overseesGRC & third-party risk

Readiness

All readiness reviewsCMMC / NIST 800-171EU AI Act & ISO 42001ISO 27001PCI DSSGolonex Ready

Managed Delivery

All managed delivery 01Managed GCC02Managed talent03Managed software delivery04Managed infrastructure05Security assurance06Managed Microsoft ecosystem07Managed process & AI automation

Company

About Our work Industries Blog Book a readiness review →

Legal : Code of Conduct

Last updated: June 2026

Golonex sells accountability. That only means something if we hold ourselves to the standards we help our clients meet. This Code sets out how we work.

Honesty about what we are

We never claim certifications or attestations we do not hold. All certification language we use refers to a client’s readiness journey, never to Golonex’s own status. Any individual credential we cite is genuinely held by the person we cite it for.

Honesty about scope

We deliver readiness and coordinate with the parties who issue formal sign-off — accredited certification bodies, licensed CPA firms, QSAs, and independent auditors. We are clear about what we do and do not provide, and our accountability is bounded and scoped per engagement.

Confidentiality & security

Client information is treated as confidential and protected with appropriate safeguards. We build evidence so that it lives in the client’s infrastructure, under the client’s control.

Integrity & independence

We give advice in the client’s interest, flag conflicts, and decline work where independence is required and we cannot provide it. We do not overpromise outcomes we cannot stand behind.

Contact

Concerns about conduct: hello@golonex.com.