Sodexo UK

Other United Kingdom Website Reviewed Sept. 22, 2026

Sodexo Limited delivers food services and integrated facilities management across the UK and Ireland, part of France-headquartered Sodexo Group.

Report an issue with this profile

Compliance Frameworks

GDPR 2016/679
Partial
Group Data Protection Officer role referenced with a UK&I contact ([email protected]); Binding Corporate Rules published. No ICO number and no customer DPA found.

Contact & Responsible Disclosure

No certification evidence for the UK entity

**No public evidence of any ISO certification held by Sodexo Limited.** The only relevant statement on their own site says "the majority of our operations around the world **comply with** international ISO 9001, HACCP and OSHAS 18001 safety standards".

That is a compliance claim rather than a certification, it is scoped globally rather than to the UK entity, and it references **OHSAS 18001, which has been withdrawn** and superseded by ISO 45001. It should not be published as a certification.

The UK&I Carbon Reduction Plan makes no ISO claim; it cites CDP A− and NHS Evergreen Level 4, which are ratings and assessments.

Sodexo does run a vulnerability disclosure programme, though its security.txt Expires value (2026-01-01) is stale.

Assess Sodexo UK in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register