REG Technologies Achieves SOC 2 Type I Certification and Passes ISO 27001 Surveillance Audit

REG Technologies has announced the successful completion of its SOC 2® Type I audit in March 2026, alongside passing its latest ISO/IEC 27001:2022 surveillance audit in the same month, reinforcing its continued commitment to robust cybersecurity governance and operational resilience.

The SOC 2 Type I report provides independent validation of REG’s internal controls relating to security, availability and confidentiality, while the ISO 27001 surveillance audit confirms the ongoing effectiveness of its Information Security Management System (ISMS), originally certified in 2024.

Together, these milestones demonstrate that REG’s security framework is not only established but continuously maintained and assessed against internationally recognised standards.

REG’s security journey predates its ISO 27001 certification, with the company having first achieved Cyber Essentials certification in 2019. While Cyber Essentials is no longer a strategic focus, its early adoption reflects a longstanding proactive approach to information security and secure engineering practices.

“Security at REG is designed into our platforms and operating model from the outset,” said Diogo Xavier Luís, Chief Technology Officer at REG Technologies. “Independent certifications such as ISO 27001 and SOC 2 provide our customers with confidence that our controls are implemented, tested and continuously improved in line with evolving threats and regulatory expectations.”

Operating in highly regulated insurance markets worldwide, REG recognises that trust is built through verifiable governance and ongoing assurance. “Our goal is not only to meet recognised security standards, but to demonstrate ongoing accountability through audit, surveillance and transparent risk management practices,” added Luís.

About REG Technologies:

REG Technologies is a compliance and regulatory risk software provider serving the insurance and financial services industry. The company’s platform enables organisations to identify and verify counterparties, streamline onboarding and due diligence workflows, and maintain ongoing compliance monitoring throughout the business relationship. REG Technologies supports brokers, Managing General Agents, carriers, insurance and financial services networks in meeting regulatory requirements and reducing operational and counterparty risk. Founded in 2013, the company is headquartered in London.