Following a detailed independent assessment by KPMG, Phoebus Software has successfully achieved its latest SOC 2 Type II attestation. The assessment covered a full twelve-month reporting period from 1 August 2025 to 31 July 2026, with findings confirming that Phoebus Software's controls were suitably designed and operated effectively throughout the period.
Phoebus first achieved SOC 2 Type II attestation in 2023, and the results have improved each year since. The 2026 assessment included testing across 89 unique controls, representing one of the largest and most comprehensive assurance exercises undertaken by the business. Only two minor exceptions were identified during the reporting period, demonstrating the effectiveness, maturity, and consistency of Phoebus Software's control environment.
"This independent assessment provides our current and prospective clients with significant assurance that Phoebus continues to maintain robust controls aligned with recognised industry standards and best practice," said Dale Langham, Information Security Officer at Phoebus Software.
"Achieving another successful SOC 2 Type II attestation demonstrates the effectiveness of our control environment and further strengthens our ability to support client due diligence, supplier assurance, and information security requirements. Most importantly, it reflects our ongoing commitment to information security, risk management, and operational excellence across the business."
Richard Pike, Chief Sales & Marketing Officer at Phoebus Software, added:
"SOC 2 Type II attestation is increasingly recognised across the financial services sector as an important demonstration of effective security and control practices. Achieving this attestation for the fourth consecutive year, alongside our ISO/IEC 27001:2022 certification, provides prospective and existing clients with confidence that information security, risk management, and operational excellence remain at the heart of our business."
"This achievement is a testament not only to the dedication and expertise of our Information Governance and Security Team, but also to every member of the Phoebus Team who consistently follows our policies, procedures, and control requirements. Maintaining high standards of assurance is a business-wide effort, and this result reflects the commitment shown across the organisation."
