Bold Communications and Valsoft Corporation company, launch Obligara: ISO 9001, ISO 27001 and SOC 2 in one workspace
Obligara is the first compliance platform to ship an ISO 27001 → SOC 2 cross-walk as a core feature — 93 Annex A controls instantiated per workspace and 71 Trust Services Criteria mapped — with embedded AI that does the compliance legwork — gap analysis, readiness scoring and drafting — so teams walk into the audit already prepared.
London, UK — 14 July 2026 — Bold Communications Limited, a Valsoft Corporation company, today announced the launch of Obligara, a compliance management platform that runs ISO 9001, ISO 27001 and SOC 2 in one workspace — with ISO 27001 → SOC 2 cross-walk and embedded AI that drafts, maps and assesses across the workflow. Obligara is built and operated by Bold Communications and backed by the resources of Valsoft Corporation, and draws on the institutional knowledge of a group that operates vertical-market software businesses across regulated industries.
Each workspace instantiates all 93 Annex A controls of ISO 27001:2022, and a 71-entry cross-walk carries that control evidence directly onto the 71 SOC 2 Trust Services Criteria. Organisations that already hold ISO 27001 can activate SOC 2 readiness without rebuilding their evidence base from scratch — weeks of duplicate work removed.
A second differentiator comes from Bold Communications' own ground: NSI ARC monitoring. Obligara models the NSI Alarm Receiving Centre scheme as a first-class framework, something most GRC platforms don't touch at all. It is built from the expertise of a team that has worked inside the standard, so monitoring centres run their NSI obligations on the same process map, evidence store and audit trail as their ISO 9001:2015, ISO 27001:2022 and SOC 2 work.
“A failed audit or a lapsed certification can cost a business contracts, insurance terms, even its licence to operate,” said Nathan Meldrum, the technical architect behind Obligara. “Most teams manage quality, security and trust in separate tools and a folder of spreadsheets, then rediscover the gaps under audit pressure. Obligara gives leaders a live view of where they stand across every framework, so compliance becomes something they manage with confidence rather than discover under pressure.”
Three frameworks, modelled properly
ISO 9001, ISO 27001 and SOC 2 are each instantiated with their real clauses, controls and criteria, not generic templates. A Statement of Applicability, asset register, supplier governance, incident management and risk treatments stay in sync with the work. The ISO 27001 → SOC 2 cross-walk carries evidence across the 71 Trust Services Criteria, and a 40-control starter pack lets teams begin SOC 2 standalone. The day-to-day modules — process map, document control, CAPAs and non-conformance, an internal audit wizard, evidence store with expiry tracking, competency matrix and management reviews — all link back to one shared audit trail.
Embedded AI with human sign-off
Obligara ships five embedded AI surfaces — a chat assistant, AI gap analysis, an AI readiness analyser, an AI mapping suggester and form-fill assists. Each runs read-only inside the workspace's row-level-security boundary: the AI drafts and assesses, citing record references such as CAPA-012 and RISK-007, but it cannot mutate a record. Every assist fills a form for a person to review and save, and the audit log records the human's signature, never the model's output.
Deployment, data residency and access
Obligara is available as managed SaaS with UK / EU data residency, or self-hosted on-premise or in a customer's own cloud for the most data-sensitive deployments. Single sign-on via SSO / SAML is supported across both. Security and trust details are published at obligara.com/security.
About Obligara
Obligara is a compliance management platform that unifies ISO 9001, ISO 27001 and SOC 2 in one workspace, with a genuine ISO 27001 → SOC 2 cross-walk between frameworks, embedded AI, and a shared audit trail. Obligara is a product of Bold Communications Limited.
For more information, please visit www.obligara.com.
About Valsoft Corporation
Valsoft acquires and develops vertical market software businesses that provide mission-critical solutions in their respective niches. Valsoft's strategy is to invest for the long term, enabling businesses to benefit from global expertise, shared best practices, and a decentralized structure that allows them to retain their entrepreneurial spirit while achieving sustainable growth.
For more information, please visit: www.valsoftcorp.com
Media Contact
For Media and Marketing enquiries, please contact media@obligara.com.