Foster Moore today confirmed the successful completion of independent SOC 2 examinations across its core platforms, providing assurance of its security controls and its commitment to resilience and public-sector trust.
Catalyst achieved SOC 2 Type 1 compliance, while Verne achieved SOC 2 Type 2 compliance, with no exceptions noted. Both examinations were conducted by A-LIGN, an independent, globally trusted cybersecurity and compliance firm supporting thousands of organisations worldwide.
For government officials and regulatory authorities, a SOC 2 report provides independent, third-party assurance, issued by a licensed auditor, that a technology partner has designed and operates effective controls to protect sensitive and nationally significant data. These attestations demonstrate Foster Moore’s disciplined approach to risk management, operational governance, and cyber resilience in line with recognised trust and assurance principles.
“Trust is fundamental to the role registries play in society, and our responsibility extends far beyond delivering software,” said Nigel Dasler, CEO of Foster Moore. “These SOC 2 results demonstrate that our registry solutions are not only well-designed, but that our security and operational controls meet rigorous evolving international standards. It gives our customers confidence that we take our responsibility to protect public data seriously.”
This achievement was made possible through the dedication and collaboration of our people and partners across Foster Moore. We extend our sincere thanks to everyone involved for their commitment to maintaining the high standards of security, trust, and accountability our customers expect.
About Foster Moore
Foster Moore partners with governments and regulators around the world to design, build, and modernise registries that sit at the heart of public trust. With deep domain expertise and decades of experience in registry operations, our platforms support transparency, resilience, and secure digital services for the communities our customers serve.
About A-LIGN
A-LIGN is a leading provider of cybersecurity compliance services, trusted by more than 4,000 global organisations. A-LIGN supports organisations in managing risk and meeting compliance requirements through independent audits and security assessments.
About SOC 2 and the AICPA
The SOC 2 framework was established by the American Institute of Certified Public Accountants (AICPA). It is a globally recognised standard designed to assess how organisations safeguard data and manage operational risk across areas such as security, availability, and confidentiality. SOC 2 reports provide independent assurance that systems, people, and processes have been formally reviewed against rigorous criteria.