Elemnta achieves SOC 2 Type 1 Certification, further strengthening information security

Elemnta achieves SOC 2 Type 1 Certification, further strengthening information security

Elemnta, a leading fintech brand dedicated to revolutionising the advice and wealth sector, have announced its recent attainment of SOC 2 Type 1 Certification, an internationally recognised standard for strengthening internal controls that safeguard customer data.

The accreditation is a result of Elemnta having met rigorous criteria for safeguarding data and mitigating cybersecurity risks. This milestone follows their ISO 27001 certification that was attained 12 months ago.

Elemnta, which established as a brand in September 2023, has seen strong momentum in the market with its Integration Platform and market leading Advice CRM connectivity. Notably, their success includes a collaboration with Colonial First State to enhance their FirstChoice platform by streamlining account set-up time through full data integration. The capability garnered recognition from the SuitabilityHub ‘Platform Market Wrap’, where it was awarded as top integration and automation innovation of the year when released.

Elemnta Chief Executive Officer, Shaun Green (pictured), said, “I am proud and grateful for the team’s dedication in achieving this certification. Any best-in-class capability requires equally rigorous data protection, which this milestone serves to validate alongside our role as trusted custodians of information to our clients. With ISO 27001 and SOC 2 Type 1 Certification in place, we are better equipped to address fundamental industry challenges with seamless digital integration, all while ensuring the highest standards of data security. Elemnta is on track to attaining SOC 2 Type 2 later this year.”

SOC 2 (System and Organisation Controls) is a compliance and privacy standard that specifies how organisations should manage customer data and related systems to ensure confidentiality, integrity, and availability. The standard is designed for service organisations — cloud providers, software as a service (SaaS) vendors, and other organisations that provide web-based services. To achieve SOC 2 compliance, an organisation must undergo an independent audit and demonstrate that it has implemented appropriate processes to protect its systems and data.