Phoebus secures SOC 2 Type II attestation, reinforcing commitment to data security and client trust

07 October 2025

Phoebus Software has successfully completed its attestation under the internationally recognised SOC 2 Type II standard, highlighting its commitment to safeguarding client data and maintaining the highest standards of operational security and governance.

Service Organisation Control Type II (SOC 2) is a cybersecurity compliance framework developed by the American Institute of Certified Public Accountants (AICPA). It provides assurance that a business has rigorous controls in place to manage customer data securely across the Trust Services Principles of security and availability. Unlike a certification, SOC 2 is an attestation report – it validates through an independent audit that a company’s controls are not only well-designed but also operate effectively over an extended period of time.

Warren Higgins, Chief Information Officer at Phoebus, says:

“Compliance with SOC 2 shows our clients, partners and regulators that we treat security and data protection as a continuous process, not a one-off exercise. At a time when trust is everything, this attestation report provides independent verification that our service is built to handle security threats and operational disruptions, ensuring customer data remains safe and accessible.”

“SOC 2 proves that controls are not only well-designed and maintained but effective in practice and constantly improved to stay ahead of new threats. This gives our clients confidence that security and reliability aren't afterthoughts for us; they're baked into everything we do, every single day.”

This attestation demonstrates Phoebus’ ability to support major financial institutions across the UK and Ireland with secure, resilient and compliant loan and savings servicing technology. By complying with SOC 2, Phoebus continues to mitigate risks associated with data breaches, ensure transparency in its processes and provide the market with confidence in its long-term operational maturity. There is no doubt that in the world we operate in today, institutions should only be considering core suppliers that have SOC 2 attestation”.