Inatech Europe takes ISO 27001 and SOC 2 in-house with Obligara

London, United Kingdom — 3 November 2026 — Obligara today announced that Inatech Europe, a global provider of Energy Trading & Risk Management (ETRM) and marine fuel management software, has moved its ISO 27001 and SOC 2 programmes onto Obligara. The company has replaced scattered spreadsheets and expensive, consultant-led audit preparation with a single workspace where evidence is mapped to controls, tested for effectiveness and kept current — so the team spends its time on the business instead of on the audit.

Inatech Europe is part of the Inatech group, which provides cloud-based ETRM and fuel management software for crude, refined, marine and renewable fuels trading, and is trusted by more than 100 energy companies worldwide, including Carnival Corporation and Mitsubishi. Like any software business handling customer data, it has to prove its security posture to win and keep enterprise customers — which means holding and maintaining both ISO 27001 and SOC 2.

The challenge: two frameworks, run by hand

Maintaining two frameworks was expensive and manual. Inatech Europe was spending thousands of pounds on compliance consultants to guide the team through gathering evidence and preparing for each audit — effort that recurred every cycle.

The underlying problem was structure. Compliance data lived across spreadsheets, and evidence was collected ad hoc rather than organised against the controls it was meant to prove. That made it hard to know what was covered, what was missing and what had gone stale, and it made every audit a scramble to reassemble.

One workspace, two frameworks

Inatech Europe moved both frameworks into Obligara — ISO 27001 and SOC 2 running side by side on a shared evidence store, where the work done for one framework counts towards the other.

• Evidence mapped to controls. Each piece of evidence is linked to the ISO 27001 controls it supports, so coverage is visible at a glance instead of buried in files.
• Effectiveness, tested. Controls are tested and the results recorded, so the team can show not just that a control exists but that it is operating.
• Expiry warnings. Evidence carries an expiry, and the workspace flags what is going stale before it becomes an audit finding.
• One spine, two frameworks. The ISO 27001 → SOC 2 cross-walk means ISO 27001 controls already satisfy much of SOC 2, so the second framework is far less work than the first.

An estimated 80% annual saving

With evidence structured and mapped, Inatech Europe no longer depends on consultants to get through an audit cycle. The team gathers and maintains its own evidence, sees exactly where it stands against each control, and keeps the programme current between audits rather than rebuilding it each time.

The company estimates it saves around 80% each year against consultant-led support for ISO 27001 and SOC 2 — based on published 2026 UK market rates of £12k–£36k a year for retained ISO 27001 consultancy and £6k–£20k for SOC 2 readiness support, compared with its Obligara subscription.

“We were paying consultants thousands every cycle just to pull our evidence together and get us through the audit. With Obligara it lives in one place, mapped to the controls and tested, so my team runs it themselves and gets back to actually running the business.”

— Angshuman Paul, COO, Inatech Europe

About Inatech Europe

Inatech Europe is part of the Inatech group, a global provider of cloud-based ETRM and marine fuel management software for crude, refined, marine and renewable fuels trading. Its platforms are trusted by more than 100 energy companies worldwide, including Carnival Corporation and Mitsubishi.

About Obligara

Obligara is a compliance management platform that runs fourteen frameworks — including ISO 9001, ISO 27001 and SOC 2 — in one workspace, with a genuine cross-walk between them and embedded AI that drafts, maps and assesses across the workflow. Obligara is built and operated by Bold Communications Limited, a Valsoft Corporation company.

Media enquiries: info@obligara.com.