AlphaCert achieves ISO/IEC 27001 certification
Independent certification gives superannuation funds and fund managers added assurance of AlphaCert’s information security practices.
Auckland, New Zealand, 5 November 2026: AlphaCert Labs Ltd, trading as AlphaCert, the investment data management technology and services provider trusted by leading investment managers and superannuation funds globally, has achieved ISO/IEC 27001:2022 certification. ISO/IEC 27001 is the internationally recognised standard for information security management systems (ISMS).
The certification follows an independent audit by Equal Assurance, a certification body accredited by the Joint Accreditation System of Australia and New Zealand (JAS-ANZ). It covers the sales, development and support of AlphaCert's investment data management software.
Long-standing practice, now independently certified
AlphaCert has complied with the ISO 27001 standard for many years. Formal certification was the natural next step. It gives customers independent, third-party confirmation of the controls AlphaCert has long had in place to protect their data.
ISO/IEC 27001 requires organisations to identify information security risks, put the right controls in place, and continually monitor and improve them. For AlphaCert customers, this means the platform that processes their investment data is governed by a documented, audited security framework. This covers areas such as access control, logging and monitoring, incident response and supplier management.
Supporting the obligations of Australia's superannuation funds
As a material service provider to some of Australia's largest superannuation funds, AlphaCert has met its customers' obligations under the Australian Prudential Regulation Authority (APRA) Prudential Standard CPS 234 Information Security for many years, and CPS 230 Operational Risk Management since it came into effect on 1 July 2025.
Both standards set clear expectations for how regulated entities manage information security and operational risk across their material service providers. ISO 27001 certification gives AlphaCert customers independent evidence to support their own due diligence, third-party risk assessments and board reporting.
Responding to a changing threat landscape
Phil Pietersen, Founder and CEO of AlphaCert, said the certification reflects how seriously AlphaCert takes its responsibility to customers.
| "Our customers trust us with some of their most important data, and we take that responsibility seriously. Cyber threats facing the investment industry are growing in frequency and sophistication. Awareness of those risks has never been higher, among regulators, boards and members alike. "We have complied with the ISO 27001 standard for many years. Formal certification gives our customers independent assurance that our information security practices meet an internationally recognised standard.” "Security is never finished. We will keep investing in our people, processes and technology to stay ahead of an evolving threat landscape." |
 |
What this means for AlphaCert customers
- Independent assurance: third-party verification of AlphaCert’s security controls against an international standard.
- Simpler due diligence: certification evidence that supports vendor risk assessments and CPS 230 and CPS 234 obligations.
- Ongoing accountability: annual surveillance audits, with full recertification every three years.
- Continual improvement: a security framework that evolves as threats and customer needs change.
Customers and prospective customers can request a copy of the certificate from their AlphaCert account manager.
About AlphaCertAlphaCert is a global financial technology and services provider specialising in investment data management. We help investment managers, superannuation funds and asset owners turn complex investment data into a trusted asset. The AlphaCert platform ingests, reconciles, enriches and validates data from multiple sources across listed and unlisted assets, creating a trusted, auditable source of truth. This enables automated business processes, accurate reporting and the delivery of validated data to downstream systems and data lakes. Working with organisations managing funds from $1 billion to over $400 billion, AlphaCert combines technology and specialist services to reduce operational risk, strengthen data governance and provide trusted data foundations for AI adoption and innovation. |
|
About ISO/IEC 27001
ISO/IEC 27001 is the international standard for information security management systems, published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It sets out requirements for establishing, maintaining and continually improving an ISMS to protect the confidentiality, integrity and availability of information.
Media contact
Christina Bendall, Chief Customer Officer, AlphaCert
christina.bendall@alphacert.com