What is in progress rather than complete
Most firms publish the five pages before this one and stop. This page exists so that the other five can be read literally: if something is not listed here as outstanding, it is as stated.
| What | State | Why, and what happens next |
|---|---|---|
| SOC 2 Type II | Position and target date pending (D-G) | The firm has not yet published a readiness position. It will be stated here with a target quarter, or stated as not started. |
| Independent penetration test | Scope and cadence being set | The date of the most recent test and the testing party will be published once the first engagement is complete. |
| Disaster recovery exercise | Scheduled, not yet run | Backups are tested; a full documented DR exercise across the estate has not been. |
| Alliance register | Under review (D-H) | Named only at the level each partner will confirm on a call. |
| Status page and incident history | Omitted deliberately (D-J) | A status page showing no history reads as software with no users. It ships when there is a real feed behind it. |
| Client results with metrics | Consent conversations under way (D-K) | No client outcome is published without written permission and verified figures. |
How this page is maintained
An item leaves this page when it is complete and the corresponding page is updated in the same change — not before. If you are evaluating us and something on this list blocks you, say so: we would rather know which gap matters to you than guess at the order to close them in.