Phoebus completes latest SOC 2 Type II assessment

Phoebus Software has renewed its SOC 2 Type II attestation after KPMG assessed the technology provider’s controls over a 12-month period.

The review covered the period from 1 August 2025 to 31 July 2026 and examined 89 individual controls across the business.

Phoebus said two minor exceptions were identified during the assessment, with the findings confirming that its controls were suitably designed and operated effectively during the reporting period.

The mortgage technology provider first secured SOC 2 Type II attestation in 2023 and has now completed the process for a fourth consecutive year. It also holds ISO/IEC 27001:2022 certification.

CLIENT DUE DILIGENCE

Dale Langham, information security officer at Phoebus Software, said: “This independent assessment provides our current and prospective clients with significant assurance that Phoebus continues to maintain robust controls aligned with recognised industry standards and best practice.”

He added: “Achieving another successful SOC 2 Type II attestation demonstrates the effectiveness of our control environment and further strengthens our ability to support client due diligence, supplier assurance, and information security requirements.

“Most importantly, it reflects our ongoing commitment to information security, risk management, and operational excellence across the business.”

Richard Pike (pictured), chief sales & marketing officer at Phoebus Software, said: “SOC 2 Type II attestation is increasingly recognised across the financial services sector as an important demonstration of effective security and control practices.

“Achieving this attestation for the fourth consecutive year, alongside our ISO/IEC 27001:2022 certification, provides prospective and existing clients with confidence that information security, risk management, and operational excellence remain at the heart of our business.”

Pike added: “This achievement is a testament not only to the dedication and expertise of our Information Governance and Security Team, but also to every member of the Phoebus Team who consistently follows our policies, procedures, and control requirements.

“Maintaining high standards of assurance is a business-wide effort, and this result reflects the commitment shown across the organisation.”