Spherity Achieves 2026 SOC 2® Type II Compliance, Reinforcing Gold Standard for Customer Data Security

Annual SOC 2 report underscores Spherity’s unwavering commitment to protecting sensitive enterprise data and maintaining continuous compliance.

Dortmund, Germany ​​- February 26, 2026 — Spherity, a global leader in digital identity software, is proud to announce the successful completion of its Service Organization Control (SOC 2) Type II examination for 2026. This achievement provides Spherity’s enterprise customers and industry partners with continued assurance that the company meets the most rigorous global standards for data security and operational integrity.

The 2026 audit confirms that Spherity’s controls are suitably designed and operating effectively to achieve Spherity's service commitments and system requirements based on the applicable trust services criteria. By maintaining this rigorous standard, Spherity ensures that its internal processes are consistently aligned with the security and privacy needs of its global client base.

“Maintaining SOC 2 Type II compliance for another year is more than a milestone; it is a core component of our identity. As we continue to scale our digital identity solutions globally, ensuring our clients’ data remain protected through robust, audited controls is one of our top priorities. This 2026 report reflects our dedication to transparency and our role as a trusted partner in the digital ecosystem.”  Dr. Michael Rüther, COO/CFO at Spherity GmbH.

SOC 2 Type II audits provide independent, third-party confirmation that an organization has effectively maintained stringent security controls over an extended period. Unlike a point-in-time assessment, the Type II report evaluates the long-term effectiveness of a company’s policies and procedures, ensuring reliability and risk mitigation are woven into the fabric of daily operations.

Spherity’s 2026 audit was conducted by Zero Day CPA, PC, utilizing the Secureframe platform to manage continuous compliance. Secureframe serves as the foundation for Spherity’s continuous compliance strategy, enabling the team to track, analyze, and resolve requirements instantaneously to ensure uninterrupted adherence to global standards.

“Completing a SOC 2 Type II examination provides meaningful independent assurance regarding the effectiveness of an organization’s security controls. We’re pleased to have supported Spherity through this examination.” Lance Samona, CPA, Zero Day CPA, PC 

About Spherity

Spherity is a global software provider specialising in digital product passports and decentralised identity solutions that enable data sovereignty. As a pioneer of Self-Sovereign Identity (SSI), Spherity delivers secure and verifiable identity solutions for organisations, individuals, machines, and products. The company provides identity and compliance solutions for regulated industries, including an European Business Wallet, DSCSA-compliant authentication and authorisation for the US pharmaceutical supply chain, and the Digital Product Passport mandated by the European Commission.

‍About Secureframe

Secureframe is an AI-powered cybersecurity platform that reduces the cost and complexity of achieving and maintaining continuous compliance with frameworks including CMMC, FedRAMP, SOC 2, ISO 27001, PCI DSS, and more. Thousands of organizations in both the public and private sectors use Secureframe to harden security infrastructure, safeguard sensitive data, and simplify ongoing compliance to provide customers and partners with the assurance they need.

Backed by top-tier investors including Kleiner Perkins, Gradient Ventures, and IQT, Secureframe is redefining what’s possible in cybersecurity and compliance. Learn more at www.secureframe.com.

About Zero Day CPA

Zero Day CPA, PC is a U.S.-based audit firm specializing in SOC 1, SOC 2, HIPAA, and cybersecurity compliance for technology-driven companies. The firm supports over 500 customers and works closely with modern engineering and security teams to deliver efficient, independent assurance.