As regulatory scrutiny increases and enterprise procurement standards tighten, independent validation of security governance is no longer optional. It is expected.
SOC 2, developed by the American Institute of Certified Public Accountants (AICPA), validates that an organisation’s security controls are suitably designed against the Security Trust Services Criteria at a defined point in time.
As of 1 December 2025, independent auditors confirmed that the controls across Radweb’s infrastructure, development lifecycle and operational environment met the required standards. The report was issued in February 2026. Cyber Essentials Plus certification followed, including external technical testing of live systems.
Together, these certifications confirm structured controls across:
- Role-based access and enforced authentication
- Encryption of data in transit and at rest
- Secure development and formal change management
- Continuous vulnerability monitoring and penetration testing
- Incident response and disaster recovery planning
- Vendor oversight and risk governance
Cyber Essentials Plus further validates that live infrastructure has been independently tested against common threat vectors, including configuration, patch management and perimeter security weaknesses.
“Property compliance platforms do not get to be casual about security. We manage inspection evidence, compliance documentation, tenant information and operational records at scale. This certification validates that controls are structured, documented and independently assessed. It reflects how the business operates – disciplined, measured and accountable.”
Competitive Positioning in a Maturing Market
Inventory Base supports residential inventory reporting and compliance workflows across the UK. Formal security accreditation strengthens assurance for letting agents, landlords and enterprise clients operate within tightening regulatory frameworks.
By achieving SOC 2 and Cyber Essentials Plus, Radweb moves beyond baseline security claims and into independently validated assurance. This positions Inventory Base alongside technology providers operating in regulated financial, legal and enterprise environments.
For procurement teams and risk officers, this materially reduces vendor risk and strengthens confidence in long-term platform partnerships.
