February 2026

CRT, a leading provider of supervisory technology solutions for financial regulators worldwide, is proud to announce the successful certification against ISO/IEC 20000-1:2018 (Information Technology – Service Management) and ISO 22301:2019 (Security and Resilience – Business Continuity Management Systems).

These certifications join the company's existing ISO/IEC 27001:2022 (Information Security Management Systems) and ISO 9001:2015 (Quality Management Systems) certifications, establishing a comprehensive four-pillar governance framework that covers how CRT develops, secures, delivers, and sustains the CORA AI Suptech Platform for financial authorities across Europe, Asia, Africa, and the Caribbean.

Our Certification Portfolio

| Standard | Scope & Significance | |---|---| | ISO/IEC 20000-1:2018 | Ensures that IT service delivery processes — from incident management to continuous improvement — are systematically managed and meet internationally recognized benchmarks. | | ISO 22301:2019 | Confirms robust business continuity management systems designed to ensure operational resilience and minimize disruption risk. | | ISO/IEC 27001:2022 | Validates comprehensive information security controls protecting the confidentiality, integrity, and availability of data processed through the CORA AI Suptech Platform. | | ISO 9001:2015 | Demonstrates a systematic approach to quality across all organizational processes, ensuring products and services consistently meet client requirements. |

Why This Matters for Financial Regulators

Financial regulators operate in an environment where trust, reliability, and resilience are not aspirational qualities — they are operational imperatives. Central banks, securities commissions, and insurance supervisors that adopt the CORA AI Suptech Platform are entrusting critical national supervisory infrastructure to an external technology partner. The standards governing that partnership must be independently verified, not simply claimed.

With these four ISO certifications, CRT provides its clients with verifiable assurance across four essential dimensions:

• Service Reliability — IT service delivery that is systematically managed, measured, and continuously improved
• Operational Resilience — Independently verified business continuity ensuring uninterrupted supervisory functions
• Information Security — Comprehensive security controls protecting sensitive supervisory data at every layer
• Quality by Design — Systematic quality management ensuring consistent delivery against client requirements

Setting the Standard for SupTech Vendor Accountability

Financial regulators hold their supervised entities to the highest standards of governance, risk management, and operational resilience. CRT believes that a technology partner serving these institutions must operate at the same level of accountability.

These four ISO certifications are not simply credentials on a corporate profile. They represent an ongoing organizational commitment to the processes, systems, and culture required to serve the world's financial authorities with the reliability, security, and quality they demand. Every certification is subject to regular surveillance audits, ensuring that CRT continuously meets — and is held to — these international standards.

As the SupTech landscape continues to evolve, CRT remains committed to investing in the frameworks and practices that enable financial regulators to adopt technology with confidence — knowing that their partner has been independently verified against the standards that matter most.