Census
Providers by jurisdiction of control
The population resolved in this assessment, by control token (Section 4 reconciliation). This framework has no claim-tier layer; the census is by control finding, not by evidence tier.
Providers
28
Foreign control
10
beneficial_unresolved
2
Australian control
15
Register-flag
1
10 foreign + 2 beneficial_unresolved + 15 Australian-control + 1 register-flag = 28 providers.
Sources
Every source, with hash
Per-source hashes are published in full: reference, name, URL, retrieval timestamp (UTC), artefact type, and SHA-256 of the archived artefact. Of 80 archived sources, 70 are cited in the assessment body; 10 are archived but not cited and are marked as such, not dropped. Hashes are verifiable against the archive with shasum -a 256.
Artefact type transcription (3 rows) is a faithful, verbatim reconstruction of a rendered register screen whose raw HTTP body the register does not serve to an automated request (ASIC Connect returns a bot shell to a script, not the record). It is a documented capture method for those screens, not a weaker source; two of the transcription rows (H-STK-4, H-MAQ-2) carry the register-integrity findings set out in Section 3.
Re-fetch, measured 2026-09-06. Every own raw-body row of this register, 18 rows, was fetched twice that day and the two hashes compared. 3 returned different bytes on each fetch, H-DEL-2, H-STK-1, H-STK-3, and are marked in the table: their hashes stand only against the copies this practice holds and cannot be confirmed by fetching. 1 could not be measured because a fetch failed: H-HCF-1. The rest returned the same bytes twice on that day, which holds until the publisher changes the page. The measurement is in STABILITY-2026-09-06.tsv beside the register; the register itself is unchanged and pinned, does not point to that file, and a reader of the register alone does not see this (convention 50).
| Ref | Name | URL | Retrieved (UTC) | Artefact type | SHA-256 |
|---|---|---|---|---|---|
| H-EQIX-1 | Equinix, Inc. · archived; not cited | https://www.sec.gov/Archives/edgar/data/1101239/000110123926000032/eqix-20251231.htm | 2026-07-21T08:40:40Z | Web page (raw HTML body) | a42a95fc909577bf85b6be6545d046f6938cd6398a66bb0e45379c70b5d82d54 |
| H-MSFT-1 | Microsoft Corporation · archived; not cited | https://www.sec.gov/Archives/edgar/data/789019/000095017025100235/msft-20250630.htm | 2026-07-21T08:40:40Z | Web page (raw HTML body) | 99d693f6c1544144ebeee92954f151a85bc62111837530a42855953bc01d0bbe |
| H-DEL-1 | Deloitte Touche Tohmatsu (AU) | https://abr.business.gov.au/ABN/View?abn=74490121060 | 2026-07-21T08:40:40Z | Web page (raw HTML body) | 8d29932778371d77713c52653c489065274735cbd3c62ba88c3ce1a3e7599643 |
| H-DEL-2 | Deloitte network structure Re-fetch: the served body hashes differently on each fetch, measured 2026-09-06; this hash stands only against the copy this practice holds and cannot be confirmed by fetching the address. | https://www.deloitte.com/global/en/about/governance/network-brand-alliances/about-the-network.html | 2026-07-21T08:40:40Z | Web page (raw HTML body) | 12884b4bc6e82a9fdeec1b49d06f02ef22e01698d9e22097cf7a4cc10785fbc1 |
| H-DEL-3 | Deloitte Touche Tohmatsu Limited (DTTL, UK) | https://find-and-update.company-information.service.gov.uk/company/07271800 | 2026-07-21T08:40:40Z | Web page (raw HTML body) | 5db67cb28c54b58186a47f8e6172ce8b3649137d8adc1121566b7b90d94f2ac3 |
| H-CDC-1 | CDC Data Centres Pty Ltd (ACN 125 710 394) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:04:03Z | Web page (raw HTML body) | 9be314883c44e923ba88e20a4cc1884bb9d310eb86d3a70900ab7e1898b700a9 |
| H-CDC-2 | CDC Group Holdings Pty Ltd (ACN 612 332 073) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:14:17Z | Web page (raw HTML body) | cc4dee2bae2e5f05974cb8d8da8a583ac4c63db63961187d5909a3633e4754cb |
| H-AIR-1 | AirTrunk Operating Pty Ltd (ACN 612 044 283) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:26:55Z | Web page (raw HTML body) | 423b6530e2e3d27c808dfc0c2d05014ac1a7c9ecd55bb539b6086dae88fa0d5d |
| H-DCI-1 | DCI Australia Pty Ltd (ACN 109 056 911) [MIS-ID] · archived; not cited | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:26:55Z | Web page (raw HTML body) | bfcba9e85d6f54022266a83eccc6ee7836f8e9b512844213ed728d080b2225ba |
| H-EMA-1 | Emantra Pty Ltd (ACN 116 306 453) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:26:55Z | Web page (raw HTML body) | 70f73ded89374deeef540d483f6f4a5eba308ef6b6cdcff3e2a0b796dabf3bdc |
| H-IRO-1 | Ironstar Hosting Services Pty Ltd (ACN 628 724 578) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:26:55Z | Web page (raw HTML body) | 512f1016e865f7ff4fa082a5bfa0e1bbff79dfbcfc4e4e56b16cf9b1c8eae2b6 |
| H-GOH-1 | GoHosting Pty Ltd (ACN 136 903 172) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:26:55Z | Web page (raw HTML body) | 27ae88d84da12fbaf7d19d226fd2d2134e0d59bb5e022a8c824df8f20ceac7c8 |
| H-CEN-1 | Centorrino Technologies Pty Ltd (ACN 606 931 524) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:26:55Z | Web page (raw HTML body) | cda7a957f13b600212b79614797a71cde2d4af313a7395a0780f5f5d5fb81a54 |
| H-SPR-1 | Springfield Real Estate Sales Pty Ltd (ACN 009 648 220) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T09:26:55Z | Web page (raw HTML body) | 2e1c1e9928223ae719969759ca2ffcadec9ba8ac7ce465d098f187d99fa856e8 |
| H-GOO-1 | Google Australia Pty Ltd (ACN 102 417 032) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | 0194e23423ae4a30e3a8304c1e7f7a359ada12f249cd4a4dc11f635abc13f822 |
| H-AUC-1 | AUCyber Limited (ACN 622 728 189) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | b5c9d46b91cf7c93d15bc50755eb430a158530c709f892698fc741562db4cd93 |
| H-ORA-1 | Oracle Corporation Australia Pty Limited (ACN 003 074 468) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | b29e0c96a8a6d12863ca3571fa85bb2819408ba411c7792da2a0a5044b854d26 |
| H-FUJ-1 | Fujitsu Australia Ltd (ACN 001 011 427) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | 71c637309f9a25a437b274c0ba93ff8998921bf76180ddb7ebf55009625acfbd |
| H-VAU-1 | Vault Systems Pty Ltd (ACN 159 030 127) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | 8cf95f9660ee35bce8c6df9dbf75cdf9fd35b7eff52a54b19f45e27d564e9790 |
| H-EQAU-1 | Equinix Australia Pty Limited (ACN 092 807 264) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | e10849282151f48bf39329b4b3205e238d5d050177708d2fdbd1dfbb57e060e3 |
| H-CLC-1 | Cloud Carrier Operations Pty Ltd (ACN 668 982 483) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | 2074b5726cc127a07428ca72b26c413673bbb1515fc87ac7f297a3d47db22721 |
| H-MAQ-1 | Macquarie Technology Operations Pty Limited (ACN 082 930 916) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | 2a3e7ed9b3a89c10db1fbcd71309ebdc47d9d17930013a32ab082abfa13147b9 |
| H-MSAU-1 | Microsoft Pty Ltd (ACN 002 589 460) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | 923ff29b0723170e8198bba599ee364456ca12697569acba629527d37107f85a |
| H-IBM-1 | IBM Australia Ltd (ACN 000 024 733) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:07:38Z | Web page (raw HTML body) | 3cd13db5186a30d08998222b31a5241930d2d15bfa5ebfd43e691b6217bbf586 |
| H-DCI-2 | NineZero DC Management I Pty Ltd (ACN 607 631 809) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:25:16Z | Web page (raw HTML body) | d12cf41d89631a8957fd5fbcdd45a8da99843662c821c94348fcd8e629a8e0d6 |
| H-SEC-1 | Secure Collaboration Pty Ltd (ACN 145 533 580) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:25:16Z | Web page (raw HTML body) | a675781d3251e2e89a65d0776e5245fdff7cfb566355aec6c27a0baef6037328 |
| H-ADC-1 | Australian Data Centres - Mitchell Pty Ltd (ACN 143 135 997) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T10:25:16Z | Web page (raw HTML body) | 1a34dcbae614eeccbc2feb49c477c7fd17a8220c18e246b48b3ae0324e02322b |
| H-AWS-1 | Amazon Web Services Australia Pty Ltd (ACN 605 345 891) | Purchased ASIC extract - no public URL (verify by SHA-256) | cba_hold_hash=2026-07-18T08:47:33Z; reverified=2026-07-21T12:41:43Z | Web page (raw HTML body) | 69eda18e3696b3358db70013d20953749b36e81cc8e3611eb87bf2f589ea08a7 |
| H-MRH-1 | Michael Richardson Holdings Pty Ltd (ACN 157 686 729) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:20:00Z | Web page (raw HTML body) | 7b8bb0adc4fa46c4fb4490df2368c92141114647729ff57c7ffc955787a97305 |
| H-JYC-1 | JYC Software Pty Ltd (ACN 628 573 580) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:20:00Z | Web page (raw HTML body) | 1df336fd588fd4c67cefa46d8e5fce7b237e23b098c3f3f7cd9f4d492a00fe4e |
| H-VSL-1 | Vasan Lang Pty. Ltd. (ACN 617 767 192) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:20:00Z | Web page (raw HTML body) | 5facfb4fe691e3b84977b17155c69ebf8675b0009ad46c3687f70d26eae7f18c |
| H-CTG-1 | Centorrino Group Pty Ltd (ACN 644 720 990) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:20:00Z | Web page (raw HTML body) | 1323145ec5053dd2fdbb00b4f223ad14cf47ac6ef762176ce83eb954858477fc |
| H-HEW-1 | Hewbourne Pty. Ltd. (ACN 010 651 242) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:20:00Z | Web page (raw HTML body) | 7cb08510ec135fa39899cd1ce6838806954da661107d4d08efeda6bc6e127af8 |
| H-MUR-1 | MUR Pty Ltd (ACN 009 100 458) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:20:00Z | Web page (raw HTML body) | ed496fc75124bbfc6d5d0517da97d913ff6390d1b42048008c8733a8ffd22c8a |
| H-TMI-1 | TaylorMade IT Pty Ltd (ACN 145 482 980) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:20:00Z | Web page (raw HTML body) | d83d6d4c32f429519d6da927ccfe37a7c898d467573190038aa3db1b59571e93 |
| H-CCH-1 | Cloud Carrier Holdings Pty Ltd (ACN 668 981 520) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:20:00Z | Web page (raw HTML body) | fb43c658d429ac2887347c23d70ee062556165eae43de056d6db8d01f8d21fb2 |
| H-STK-1 | Sliced Tech Pty Ltd - AusTender CN3836764-A7 (DEWR USI Website Cloud Hosting; Supplier ABN 53 165 997 008; period 1-Jan-2022 to 31-Dec-2025) Re-fetch: the served body hashes differently on each fetch, measured 2026-09-06; this hash stands only against the copy this practice holds and cannot be confirmed by fetching the address. | https://www.tenders.gov.au/Cn/Show/a3ad46e5-b7ef-4c40-9f59-14be1dcd2e75 | 2026-07-21T13:19:06Z | Web page (raw HTML body) | 898d29ecb745a45ae18f475f29ad732d003ff4734d927770503a13fd3327b33e |
| H-STK-2 | Sliced Tech Pty Ltd - ABN Lookup (ABN 53 165 997 008) status check | https://abr.business.gov.au/ABN/View?abn=53165997008 | 2026-07-21T12:38:20Z | Web page (raw HTML body) | e31f9413757b44c8b2980474e6549b35155c17401541969115d41ce917ec2927 |
| H-STK-3 | Sliced Tech Pty Ltd - AusTender CN4180397 (Dept of Defence, Cyber Warfare Div; ABN 53 165 997 008; period 11-Aug-2025 to 10-Jun-2026) Re-fetch: the served body hashes differently on each fetch, measured 2026-09-06; this hash stands only against the copy this practice holds and cannot be confirmed by fetching the address. | https://www.tenders.gov.au/Cn/Show/2f7ea8c1-ddc0-4609-a3c0-f938c90e8752 | 2026-07-21T13:19:06Z | Web page (raw HTML body) | 00d320586d1acab3836c644d045eac480f0b50baa749960d251dc480b959877c |
| H-HDI-1 | HDI SYD1 Pty Limited (ACN 094 338 333) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:58:58Z | Web page (raw HTML body) | 886ba9d9d0458c7885a45f012712114830ffc7e2488cc0a04e9eeee1759d1a34 |
| H-AMC-1 | A & M Centorrino Pty Ltd (ACN 154 475 279) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:58:58Z | Web page (raw HTML body) | 2299ad338e449e26ab3396b8b1b8539c3f96bfde0b86a2e386b1a21eb6254361 |
| H-CTH-1 | CT Holdings 2 Pty Ltd (ACN 126 822 660) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:58:58Z | Web page (raw HTML body) | c75ac07dee5b17999021141f9f9593106ec8ef1842f07b16dc4767632bbb1309 |
| H-FOR-1 | Fortal Pty Ltd (ACN 073 315 161) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-21T12:58:58Z | Web page (raw HTML body) | 650184bedf87393f9c998b057521131f4edee70b8440f3dc2683282c58e4050b |
| H-HCF-1 | HCF Strategic-tier certified-provider register (source register for the whole assessment) | https://www.hostingcertification.gov.au/certified-service-providers [a] | 2026-07-21T13:19:06Z | Web page (raw HTML body) | 8ea432069b2f83781fc869e93c53c05e7e0a44c84209d943429e1e8e91709c4d |
| H-MAQ-2 | ASIC Connect Org/Business Names search 'macquarie telecom' - 'Macquarie Telecom Pty Limited' shown as FORMER name of ACN 082 930 916 (Registered; current name Macquarie Technology Operations Pty Limited per H-MAQ-1). Rendered-DOM capture; first read live 21 Jul 2026, blob captured this UTC; not backdated. | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (search: macquarie telecom) | 2026-07-21T13:46:24Z | Transcription (register/detail screen) | ddbefca67272e0f6cce7a354e33db9826882eed3a585457feadaea44c2886804 |
| H-DGT-1 | DigiCo Infrastructure REIT (ASX:DGT) replacement PDS/prospectus, dated 12 Dec 2024 - establishes the stapled structure: HMC Digital Infrastructure Ltd (ACN 682 024 924) + HMC Digital Infrastructure Trust (ARSN 682 160 578); RE Equity Trustees Limited; SYD1=Global Switch Australia; iseek acquisition (BNE2 candidate iseek Pty Ltd 094 230 467) | https://announcements.asx.com.au/asxpdf/20241212/pdf/06ckxj5xhzpb18.pdf | 2026-07-21T13:51:23Z | Web page (raw HTML body) | f649b898e9009fa7c410d1b8a09eeab12edde3347ba8e68ff59d6f463f604f59 |
| H-STK-4 | ASIC Connect Company Summary - SLICED TECH PTY LTD (ACN 165 997 008): Status Deregistered, Date deregistered 10 Jun 2026, voluntary (Form 6010); registered 25/09/2013. Primary attestation of the deregistration. | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (company: SLICED TECH PTY LTD) | 2026-07-21T13:56:11Z | Transcription (register/detail screen) | 1d39878492dd28797ed1068d9554612352266d43ca78c3bb8a9fcdbdd9185883 |
| H-DR-SEC-1 | Digital Realty Trust, Inc. - Form 10-K for the fiscal year ended 31 December 2025 (SEC EDGAR, accession 0001104659-26-015365) | https://www.sec.gov/Archives/edgar/data/1297996/000110465926015365/dlr-20251231x10k.htm | 2026-07-21T13:57:32Z | Web page (raw HTML body) | ef7e792602c7eaa03a1d06b019a971ab86fd5e54fcd94bf825348f6151b5165b |
| H-DR-ABN-1 | Digital Realty AU-registered vehicle (ABN 26966305351): Digital Realty Datafirm LLC | Other Incorporated Entity - ABN Lookup shows entity type 'Other Incorporated Entity' (US LLC registered in Australia). | https://abr.business.gov.au/ABN/View?abn=26966305351 | 2026-07-21T13:57:32Z | Web page (raw HTML body) | d454b16092357be10e8ec6855ae17ce9b40aaaf5d40ced098e27aa22ce41af96 |
| H-DR-ABN-7 | Digital Realty AU-registered vehicle (ABN 33150333467): DIGITAL REALTY DATAFIRM 2, LLC | Other Incorporated Entity - ABN Lookup shows entity type 'Other Incorporated Entity' (US LLC registered in Australia). | https://abr.business.gov.au/ABN/View?abn=33150333467 | 2026-07-21T13:57:32Z | Web page (raw HTML body) | fe6c65606abf3a60d13af3b8c34ba9ad7a914974aa97579be43615f8a953d641 |
| H-DR-ASIC-1 | ASIC Connect Organisations & Business Names search 'metronode' - 9 results (name, ACN, type, status, address), rendered-DOM transcription, 22 July 2026 · archived; not cited | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (search: metronode) | 2026-07-22T01:22:58Z | Transcription (register/detail screen) | ec445b2a5d9e09059aa78bf1a5a9ab77bd36b104867e87a0685b2caf5144efa6 |
| H-NXT-1 | NEXTDC Limited - ABN Lookup (ABN 35 143 582 521, ACN 143 582 521) current-company status; Australian Public Company, Active | https://abr.business.gov.au/ABN/View?abn=35143582521 | 2026-07-22T03:16:02Z | Web page (raw HTML body) | 1706988c69538ded6973642208a666833184c53addd382bfa871b33c11369962 |
| H-TLS-1 | Telstra Group Limited - ABN Lookup (ABN 56 650 620 303) current-company status; Australian Public Company, Active. Fresh capture: AOS-TEL-2026-001 held no hashed-on-disk listed-top artefact to inherit | https://abr.business.gov.au/ABN/View?abn=56650620303 | 2026-07-22T03:16:02Z | Web page (raw HTML body) | 79a37854d04f4b5258a3c2a223472a2557934cd6da2a0c41400822a26e5db3ae |
| H-STK-5 | The trustee for Sliced Tech Holdings Unit Trust (ABN 66 290 396 526) | https://abr.business.gov.au/ABN/View?abn=66290396526 | 2026-07-25T09:04:53Z | Web page (raw HTML body) | 697af0fd5fc25d0b7fb70ab0b94c0ed958850920510efbe71c2e4572fc3f18dc |
| H-STK-6 | SLICED TECH business name (ACT F00140871), Registered | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (search: SLICED TECH; rendered results grid: business name ACT F00140871 Registered; session-bound JSF, not reproducible by cold GET) | 2026-07-25T09:06:04Z | Rendered capture | eba7efb8eb9d74e71fe1adeac91759b2c7fbd2c4955e54c503cd6932eeaae260 |
| H-HCF-3 | Hosting Certification Framework homepage: machinery-of-government note (1 May 2023, DTA cyber-security policy functions to Home Affairs) and Certifying Authority contact | https://www.hostingcertification.gov.au/ | 2026-07-25T04:59:30Z | Rendered capture | 6454f21cc9f3f62cb4e02fe6b95b7d76c204780a604561bef2050e2d574c765c |
| H-AUC-2 | ASIC Connect Organisations & Business Names search "AUCLOUD" (rendered transcription, H-MAQ-2 convention) | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (search: AUCLOUD) | 2026-07-28T09:58:22Z | Rendered capture | 36c7112a48af28ba55faa3c353abad69f74701b3d961bec8d85cbf413e4321b1 |
| H-AUC-3 | ASIC Connect Organisations & Business Names search "AUCYBER" (rendered transcription, H-MAQ-2 convention) · archived; not cited | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (search: AUCYBER) | 2026-07-28T09:58:22Z | Rendered capture | f106bf5ef3560f52c88de1473f25f59f2f0a75ba860f194f2672e54a09811093 |
| H-AUC-4 | ASIC Connect Organisations & Business Names search "SOVEREIGN CLOUD" (rendered transcription, H-MAQ-2 convention) | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (search: SOVEREIGN CLOUD) | 2026-07-28T09:58:22Z | Rendered capture | dc0df85daf1605e57ee33b139eb11ac3205a8ecfddd0d64e53dddfd8571c99f0 |
| H-CDC-3 | ASIC Connect Organisations & Business Names search "CANBERRA DATA CENTRES" (rendered transcription, H-MAQ-2 convention) | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (search: CANBERRA DATA CENTRES) | 2026-07-28T09:58:22Z | Rendered capture | 20d9cd83bf1e697967a69590eca02686bb57ee49a4e586c45a89b7716667e45c |
| H-CDC-4 | ASIC Connect Organisations & Business Names search "CDC DATA CENTRES" (rendered transcription, H-MAQ-2 convention) | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (search: CDC DATA CENTRES) | 2026-07-28T09:58:22Z | Rendered capture | f0b699be0d2ee265ac37b64dba47cb6552f3d75ce1cf997fc5587762d8ef98f9 |
| H-AUC-5 | AUCLOUD PTY LTD (ACN 165 798 363) - ASIC Connect Company Summary, free tier (rendered transcription, H-MAQ-2 convention) | https://connectonline.asic.gov.au/RegistrySearch/faces/landing/panelSearch.jspx?searchType=OrgAndBusNm (company detail: AUCLOUD PTY LTD) | 2026-07-28T10:06:14Z | Rendered capture | c11b6d311372e4c351e5fb4e0cf4360a00b13a2865f8b91586a190c09e38f22d |
| H-AUC-6 | AUCLOUD PTY LTD (ACN 165 798 363) | Purchased ASIC extract - no public URL (verify by SHA-256) | 2026-07-28T10:09:32Z | Web page (raw HTML body) | 50e9661865da4bf31b8cf65f9fd8006bedb869c08e13d142835baa1834ea7f8d |
| H-LII-1 | 18 USC §2705 (Stored Communications Act) - statutory text, Cornell Legal Information Institute | https://www.law.cornell.edu/uscode/text/18/2705 | 2026-07-30T08:07:44Z | Web page (raw HTML body) | 3de5d44209fcfa9807722e641304250bc4a59e5c757a25ff377b9df065fdb857 |
| H-NTC-1 | Notice N1 - "AOS-HCF-2026-001 — two register observations, Hosting Certification Framework certified-provider list" (sent 21 Jul 2026) | Sent email brunel@australiaos.com.au → info@dta.gov.au, 21 Jul 2026 23:35:55 +1000; .eml export 2 Aug 2026, headers Message-ID/Date/From/To/Subject only (no delivery path) | 2026-08-02T02:31:26Z | Sent email (.eml export) | da793ebf7eeb07cb220fc351ca2531811dc27e21583b1c7f459ededd53d1f484 |
| H-NTC-2 | Notice N2 - "Register observations: HCF certified service provider list, Strategic tier" (sent 25 Jul 2026) | Sent email brunel@australiaos.com.au → hostingcertifications@homeaffairs.gov.au, 25 Jul 2026 14:53:18 +1000; .eml export 2 Aug 2026, headers Message-ID/Date/From/To/Subject only (no delivery path) | 2026-08-02T02:31:22Z | Sent email (.eml export) | 02b97d21273daa2cd72150e272be953cd096c0479e917ea3e184f0e2e7c61b5b |
| H-NTC-3 | Notice N4 - "Further register observation: HCF certified service provider list, Strategic tier" (sent 28 Jul 2026) | Sent email brunel@australiaos.com.au → hostingcertifications@homeaffairs.gov.au, 28 Jul 2026 20:29:03 +1000; .eml export 2 Aug 2026, headers Message-ID/Date/From/To/Subject only (no delivery path) | 2026-08-02T02:31:17Z | Sent email (.eml export) | 1e7fa5ef12c8a8c56360c8652a10e1fd3912689e3a6a1080bb655665708494c0 |
| H-NTC-4 | Notice N5 - "Further register observation: HCF certified service provider list, Data Centre facilities" (sent 28 Jul 2026) | Sent email brunel@australiaos.com.au → hostingcertifications@homeaffairs.gov.au, 28 Jul 2026 21:55:32 +1000; .eml export 2 Aug 2026, headers Message-ID/Date/From/To/Subject only (no delivery path) | 2026-08-02T02:31:07Z | Sent email (.eml export) | c3165a68a641398bc6ffef29bf1059b4be9212c2753e33dcb09782d595b18b2f |
| H-COR-1 | Correspondence - "Compellability testing under the Hosting Certification Framework" (sent 21 Jul 2026; not a notice) · archived; not cited | Sent email brunel@australiaos.com.au → HCFReform@homeaffairs.gov.au, 21 Jul 2026 18:15:45 +1000; .eml export 2 Aug 2026, headers Message-ID/Date/From/To/Subject only (no delivery path) | 2026-08-02T02:31:32Z | Sent email (.eml export) | 0d17c789d5b07f40cd2d04cb6a55e3b9d3035a032ab5913fac88851bda2f0544 |
| H-NTC-6 | Notice N7 - subject as sent, reproduced exactly: 'Register observation: HCF certified service provider > list, Strategic tier — "AirTrunk Australia"' (sent 11 Aug 2026). The stray '>' and the em dash are in the subject as served and are reproduced rather than tidied. Notice period closed 25 Aug 2026; the observation publishes at v1.3 as Finding E | Sent email brunel@australiaos.com.au → hostingcertifications@homeaffairs.gov.au, 11 Aug 2026 15:21:19 +1000; .eml export 11 Aug 2026, full message with headers - a served export, not a held export | 2026-08-11T05:23:05Z | Sent email (.eml export) | 619212b27dec9d9c7b530c3cd5da7e60b47c9a2375649a6f3a5687e64d780d25 |
| H-NTC-7 | Notice N8 - subject as sent, reproduced exactly: 'Register observation: HCF certified service provider list, Strategic tier - "Oracle Australia"' (sent 11 Aug 2026). Notice period closed 25 Aug 2026; the observation publishes at v1.3 as Finding F | Sent email brunel@australiaos.com.au → hostingcertifications@homeaffairs.gov.au, 11 Aug 2026 15:21:59 +1000; .eml export 11 Aug 2026, full message with headers - a served export, not a held export | 2026-08-11T05:22:57Z | Sent email (.eml export) | 54832ecc947333b0384fb79167a36ebf08f3e0ab394df6fb42a96399944ae4da |
| H-NTC-8 | Notice N9 - subject as sent, reproduced exactly: 'Register observation: HCF certified service provider list, Strategic tier - "Digital Realty"' (sent 11 Aug 2026). Notice period closed 25 Aug 2026; the observation publishes at v1.3 as Finding G | Sent email brunel@australiaos.com.au → hostingcertifications@homeaffairs.gov.au, 11 Aug 2026 15:22:31 +1000; .eml export 11 Aug 2026, full message with headers - a served export, not a held export | 2026-08-11T05:22:45Z | Sent email (.eml export) | 13db18bdc38668e041c1ffd673264165d0bbb13e745b115ef1eb1eea85be1ac6 |
| R-DTA-1 | Response R1 - reply received from the DTA info address to notice N1, 12 Aug 2026. States the machinery-of-government change of 1 May 2023 transferring the Hosting Certification Framework and other cyber policy functions to Home Affairs, and directs enquiries to the Hosting team. Addresses neither register observation and identifies no factual error. Held export of a received message, full headers included - not a served file | mailto:info@dta.gov.au | 2026-08-12T00:24:54Z | received_email | 9ab41c73678450bc7cdaa00fe9412ff3633d5e1d0bf21606d0af173eac9c77ae |
| H-NTC-9 | Reply C1 - practice's reply to response R-DTA-1, sent 12 Aug 2026 on the existing thread. Records that the same two observations were put to the Certifying Authority on 25 July 2026, that the 25 July correspondence disclosed the earlier notice, that three further observations were put on 11 Aug 2026 with fourteen days to 25 Aug 2026, and that the 21 July notice was addressed to the Agency after the machinery-of-government change of 1 May 2023. Seeks no response. Sent export, full headers included | mailto:info@dta.gov.au | 2026-08-12T03:01:08Z | Sent email (.eml export) | a831b484043a563ca987a87e71d2a603a702cb2da484a1a4014448eb9e2645e2 |
| H-NTC-10 | Letter N3, first of two - the practice to the Digital Transformation Agency, "Re: AOS-HCF-2026-001 — two register observations, Hosting Certification Framework certified-provider list", sent 4 Aug 2026 10:58:43 +1000 on the existing 21 July thread. The post-publication notification required by PUBLICATION-RUNBOOK step 12c: carries the live verification URL and the struck SHA-256 of the published document, and records that Section 3.4 states the notice date, the period allowed and that no response had been received. Sent export; composition headers only, no Received chain and no DKIM signature, which is what a sent message carries. Retrieval time is the export time, not the send time · archived; not cited | mailto:info@dta.gov.au | 2026-08-19T04:10:00Z | Sent email (.eml export) | 705a65ca234fc4a3237f0cafd92cce5eda4b86f1ee68639f83bc9ca231013304 |
| H-NTC-11 | Letter N3, second of two - the practice to the Certifying Authority (Department of Home Affairs), "Re: Register observations: HCF certified service provider list, Strategic tier", sent 4 Aug 2026 11:05:34 +1000 as a reply on the 25 July notice thread. The post-publication notification required by PUBLICATION-RUNBOOK step 12c: carries the live verification URL and the struck SHA-256 of the published document; discloses unprompted that Section 3.4 overstates the 25 July notice interval as fourteen days when it allowed ten; and keeps the 28 July observations distinct, recording that they are withheld and unidentified pending their notice period. Sent export; composition headers only, no Received chain and no DKIM signature, which is what a sent message carries. Retrieval time is the export time, not the send time · archived; not cited | mailto:hostingcertifications@homeaffairs.gov.au | 2026-08-19T04:35:00Z | Sent email (.eml export) | 6e786b7c21bf0e59605ec4f4de1700ccc87703d38e2266ca3793df558a92e166 |
| A-DEED-1 | Hosting Certification Framework, Deed of Certification (Template), 20 pages, marked Official: Sensitive Legal - Privilege, parties named as the Digital Transformation Agency and a Service Provider. The instrument in which the Strategic tier ownership and control conditions operate. Published on the framework own site and linked from no page on it [INHERITED CAPTURE, convention 7] Retrieved under assurance-method-gap-2026-08 on 2026-08-24T05:46:43Z and re-verified against its recorded hash on 2026-08-25. The blob is held in that case; this row records the practice re-verification and is excluded from this case stated capture window | https://www.hostingcertification.gov.au/sites/default/files/2021-11/Deed%20of%20Certification%20%5BForm%5D.pdf | originating_retrieval=2026-08-24T05:46:43Z; reverified=2026-08-25T01:20:00Z | publisher_pdf | 3b7f03819a27aae5550b8ce5a434bea2e29b36806d44729d4cd25e79dd101a2f |
| L-SOCI-2 | Security of Critical Infrastructure Act 2018 (Cth), Federal Register of Legislation compilation, as cited in Section 3 [INHERITED CAPTURE, convention 7] Retrieved under compellability-landscape-2026-08 on 2026-08-11T08:25:02Z and re-verified against its recorded hash on 2026-08-25. The blob is held in that case; this row records the practice re-verification and is excluded from this case stated capture window | https://www.legislation.gov.au/C2018A00029/2026-06-04/2026-06-04/text/1/epub/OEBPS/document_1/document_1.html | originating_retrieval=2026-08-11T08:25:02Z; reverified=2026-08-25T01:20:00Z | Web page (raw HTML body) | f6a8dd06cbdeb355bf79b3ee800f26607ebdf213a18f1ba82184f79748cc6f18 |
| H-NTC-12 | Notification 12c - subject as sent, reproduced exactly: 'Re: Register observation: HCF certified service provider > list, Strategic tier — "AirTrunk Australia"' (sent 25 Aug 2026), a reply on the 11 August N7 thread. Publication notification, not a notice: it states that v1.3 is published, gives the verify address and the published document's SHA-256, and records that with Findings E, F and G all six observations notified to the Department are published and none is withheld. The stray '>' and the em dash are in the subject as sent and are reproduced rather than tidied, as at H-NTC-6 · archived; not cited | Sent email brunel@australiaos.com.au → hostingcertifications@homeaffairs.gov.au, 25 Aug 2026 12:49:54 +1000; .eml export 25 Aug 2026, full message with headers - a served export, not a held export | 2026-08-25T02:50:07Z | Sent email (.eml export) | 4d2fad3d083727b305a177d9803cd7a6c0f5a4c2973c686982614b6c1a0d5d85 |
| H-NTC-13 | Notification 12c-3 - subject as sent, reproduced exactly: 'Re: Register observation: HCF certified service provider > list, Strategic tier — "AirTrunk Australia"' (sent 7 Oct 2026), the practice's two-sentence email to the Certifying Authority of that date, a reply to H-NTC-12 on the 11 August N7 thread. The stray '>' and the em dash are in the subject as sent and are reproduced rather than tidied, as at H-NTC-6 and H-NTC-12 · archived; not cited | Sent email brunel@australiaos.com.au → hostingcertifications@homeaffairs.gov.au, 7 Oct 2026 11:12:18 +1100; .eml export 7 Oct 2026, full message with headers - a served export, not a held export | 2026-10-07T00:15:04Z | Sent email (.eml export) | 8ccd9e5ee5b92af77e4cec1a5d9f8c9c8b67cf9789b0114cd32923c2c9bce7af |
[a] H-HCF-1 provenance: [NOTE: blob captured 2026-07-21T13:19:06Z, same calendar day (21 Jul 2026) as the original get_page_text working-notes capture in RESOLUTION-STATUS section (c); the earlier intra-day state is attested only by those working notes; NOT backdated. Content verified identical: 'Sliced Tech Pty Ltd' and 'Macquarie Telecom Pty Ltd' still listed]
Verification chain
How this record is verified
Verification chain: archival. Every source this assessment relies on was captured at retrieval and is pinned by SHA-256 in a register held by the practice. A reader can recompute any published source hash against the artefact and against the live source. Where the two differ, the source has changed since capture and the capture is what the assessment read.
Versions
All five published states, with hashes
A revision does not replace its predecessor. v1.0's bytes are unchanged, its hash still resolves, and the file remains downloadable at its own address. Recompute either with shasum -a 256.
| Version | Published | Status | File | SHA-256 |
|---|---|---|---|---|
| 1.3 | 25 August 2026 | Current · served: own record · see Corrections | AOS-HCF-2026-001.pdf | 7a545b3316667905c78b52ec6b6c7dbf38eb9627953453c67fd6abd99c513a22 |
| 1.2 | 11 August 2026 | Superseded, not withdrawn · served: own record · see Corrections | AOS-HCF-2026-001-v1.2.pdf | 7ac47464508b5656b0728f4f981e39acb0a17919ec3103269a0148d97c3050a0 |
| 1.1 | 11 August 2026 | Superseded, not withdrawn · served: third-party capture · see Corrections | AOS-HCF-2026-001-v1.1.pdf | 12ede4cb0b012ac91e3e4fbcbc5d646b70f0a41b44668e4d03077a52b3c576de |
| 1.0 | 4 August 2026 | Superseded, not withdrawn · served: third-party capture | AOS-HCF-2026-001-v1.0.pdf | 9d4eeadc2f5a5aa344bd9e0d3cb0b65a51e0179fce07184d8ed162e98597c08e |
| 0.9-draft | 22 July 2026 | Rehearsal build, never a published assessment. Withdrawn from this page 28 September 2026 · no longer served | AOS-HCF-2026-001-v0.9-draft.pdf (not served) | 981919f8699a2147d788d8a60b27533167d57457d5a05701390fefc379720871 |
The third-party captures establishing service are Internet Archive captures of this case's current-version address: 8 August 2026 12:02:08 UTC, whose bytes are v1.0's, and 11 August 2026 01:07:02 UTC, whose bytes are v1.1's. v1.2 and v1.3 are established by no capture and are served from this practice’s own record. v1.3 is the current version. The two captures above are unchanged: they are facts about what the Internet Archive holds, not about which version is current.
A rehearsal build (v0.9) was withdrawn from this page on 28 September 2026 because it named private individuals that the published versions do not. Its hash is recorded in the corrections register.
Corrections
Note, 5 October 2026. The findings speak as at 21 July 2026. Captures of the Hosting Certification Framework register from then to 3 October 2026 show it changing in two ways this assessment does not record. Between 28 August and 3 September 2026 the IC4 and IC5 entry on which Finding B rests changed from "Macquarie Telecom Pty Ltd" to "Macquarie Technology". By 3 October 2026 it read "Macquarie Technology Group", as did the two other Macquarie entries Finding B quotes, which read "Macquarie Technology" on 3 September 2026. Between 28 August and 3 September 2026 "Vocus - TransACT House Dickson" was added to the register under the heading "Service Provider and Certified Strategic Enclave". The findings, as at 21 July 2026, are unaltered by either change, and v1.3 is not amended. The register capture [R-HCF-5] was retrieved on 28 August 2026 under AOS-HCD-2026-001 and re-verified against its recorded hash on 5 October 2026 (origin stability: unmeasured; hash listed on AOS-HCD-2026-001). The register capture [H-HCF-L1] was retrieved on 3 September 2026 under AOS-CPI-2026-001 and re-verified against its recorded hash on 5 October 2026 (origin stability: unmeasured; hash listed on AOS-CPI-2026-001). The register capture [DSE-9] was retrieved on 3 October 2026 under general-findings/dse-google-secret-cloud-2026-10 and re-verified against its recorded hash on 5 October 2026 (origin stability: stable; hash listed on AOS-DGC-2026-001).
Correction, 7 October 2026. Twenty-six passages that version 1.3 carries unchanged from earlier versions, and one it adds, were wrong or unsupported on its date, 25 August 2026.
Thirteen present version 1.1’s acts as version 1.3’s: publishing Findings C and D, withdrawing the Metronode identification, correcting AUCloud and Vault Cloud from no_parent, and withdrawing a draft formulation of the disposal reasoning.
Pages 11 and 34 count four findings; version 1.3 has seven, adding E, F and G.
Page 13’s account of the notices and of the last check for responses predates version 1.3: the notices set out two of the seven findings, and the practice’s records were checked again on 25 August 2026.
Page 2 says the verification record lists every source; it omits those cited from the unpublished revision register. Page 5’s source counts, its account of where version 1.3’s own sources are pinned and its statement that the record’s hash is unchanged since version 1.0 are wrong for version 1.3’s record, and page 8 names three capture types where that record uses six.
Page 6 gives 11 August 2026, version 1.1’s date, as the date of version 1.3.
Pages 26 and 28 call the companies register the only ownership instrument the framework’s published materials identify. Neither the framework document nor the standard Deed of Certification names it. The phrase is withdrawn.
Page 34 says the set it describes is smaller by one entry and otherwise unchanged; it also lost the three entries version 1.3 publishes as Findings E, F and G.
No finding moves, and version 1.3 is not amended. Every passage is quoted in full, with what is right, in the practice’s corrections register.
What changed in v1.3, and why
v1.3 publishes three findings that were notified and withheld while their notice period ran, and adds a sentence stating that the period closed. It was made on 25 August 2026, the day the period closed. No finding is withdrawn and no count moves.
| Where | What changed | Why |
|---|---|---|
| 3.7, 3.8, 3.9 | Findings E, F and G published | Notified to the Certifying Authority 11 August 2026 and withheld from v1.2 while the notice period ran; the period closed 25 August 2026. No response had been received in this practice's records as at 11:00 on that date |
| 3.4 | v1.2 has nothing on the three notices of 11 August; v1.3 adds "As at the date of this revision, no response has been received from the Certifying Authority to any of the six notices served on it, and the notice period for the three of 11 August closed on 25 August 2026, the date this revision is made" | Their notice period closed on 25 August 2026, the date v1.3 is made. The response-status sentences bounded to 4 August and 11 August are unchanged and remain true as at the times they state |
This section was published under the wrong heading and is corrected here. The two rows above sat in the table headed “What changed in v1.2, and why”, so the page documented v1.3’s changes under a v1.2 title while the version table beside it correctly read 1.3. Nothing in the PDF is affected: its bytes are struck above and it does not reissue.
The 3.4 row, and the sentence above the table, are corrected here, 7 October 2026. From 25 August 2026 until this regeneration the row quoted “the three of 11 August remain open until 25 August 2026” as v1.2’s words, and from 28 August 2026 the sentence above said v1.3 closes the sentence that described the period as open. v1.2 does not print those words and has nothing on the three notices of 11 August: they were the wording of v1.3’s own draft of 19 August 2026, changed before v1.3 was published. Nothing in the PDF is affected: its bytes are struck above and it does not reissue.
What changed in v1.2, and why
v1.2 corrects a method disclosure and two sentences that followed from its absence. It was identified by this practice's own review of its unserved correspondence, hours after v1.1 published and before any external party raised it. No finding is withdrawn and no count moves.
| Where | What changed | Why |
|---|---|---|
| 3.1 | "the Deed of Certification the framework requires of certified providers, which is not public" becomes a reading of the published standard form, and its ABN field and section 127(1) execution are named | The standard form has been published on the framework's own site since November 2021 and is linked from no page on it. The finding does not move - what is not public is any executed deed, and the limitation the sentence carries is strengthened, because the register carries no legal-entity identifier and the Deed carries an ABN field |
| 3.2 | "Macquarie Technology – Government Cloud Service offering" becomes "Macquarie Technology - Government Cloud Service offering" | The register prints a hyphen. The first Macquarie entry quoted in the same sentence carries an en dash on the register and is unchanged: the register is inconsistent between its own two entries and the document now follows each. No finding moves |
| 4.2 | "Google Australia - Cloud Service offering (Google Cloud Platform - Australian Regions)" and "Microsoft Azure Cloud (Australian Regions)" are restored in full, and Google's separator corrected to the register's hyphen | Both quotations dropped the words "Australian Regions" without an ellipsis. They are the register's own geographic scoping of a certified offering, in an assessment about jurisdiction of control. Neither company carries a finding, and the sentence's point is strengthened: an offering scoped by region is further from a legal entity than one named without scope |
| 7 item 8 | A second interpretive step disclosed: matching a printed string against a register name disregards the corporate suffix | v1.1 applied the step without stating it. It is load-bearing: under exact matching, "Canberra Data Centres" and "AUCloud" resolve to nothing on the companies register, and item 8's own carve-out would dispose of Findings C and D. Findings A and B do not depend on it - those strings match letter for letter. A reader is entitled to see the step and to reject it |
| 3.6 | Finding D: "corresponding exactly to the current registered name" becomes "corresponding - with the corporate suffix disregarded - to the current registered name" | The list prints "AUCloud"; the company is AUCLOUD PTY LTD. The correspondence is real but it is not exact, and v1.1 asserted that it was. The finding does not move |
| Executive summary | "while exactly matching the registered name of an unconnected company" becomes "while matching - with the corporate suffix disregarded - the registered name" | The same inaccuracy in the summary of the same finding |
What changed in v1.1, and why
Every correction below was identified by this practice's own post-publication verification, before any external party raised one. No finding, count, token subtotal or reconciliation moved: the census is the same 10 foreign + 2 beneficial_unresolved + 15 Australian-control + 1 register-flag = 28 providers it was at v1.0.
| Where | What changed | Why |
|---|---|---|
| 3.5, 3.6 | Findings C and D published | Notified to the Certifying Authority 28 July 2026 and withheld from v1.0 while the notice period ran; the period closed 11 August 2026 |
| 3.2 | Supplementary note added | "Macquarie Telecom", without the corporate suffix, is a current registered business name of the certified entity; the finding concerns the former corporate-form name the list prints, not the entity's entitlement to trade |
| 3.3 | Interval restated as 41 days | v1.0 said "six weeks"; the measured interval is 41 days, five weeks and six days |
| 3.4 | Notice periods stated per notice; a duplicated paragraph collapsed | v1.0 said fourteen days were allowed in each case; the notice of 25 July allowed ten days to the same publication date. Disclosed unprompted to the Certifying Authority on 4 August 2026 |
| 4.2 | Digital Realty: the Metronode identification withdrawn | The certified operating entity is not pinned on the evidence held; the jurisdiction cell is unchanged |
| 4.2 | DCI Data Centers: declared parent dated | The declared name ceased on the parent's own SEC record in 2022; which post-restructure entity is the ultimate parent is not resolvable from the extract. Canada stands |
| 4.4 | AUCloud: token corrected no_parent to resolved; ticker corrected | A controlling holder at 89.96 per cent from 3 February 2025. The ticker was never AUC. Australian control unchanged |
| 4.4 | Vault Cloud: token corrected no_parent to resolved | The member hop opens and terminates in Australia. Australian control unchanged |
| 4.4, 2.2 | The no_parent test restated | Listing status alone does not establish that a company is a top company; two of the four entries carrying the token failed the corrected test, both caught by this practice's own audit |
| 5.2 | HDI SYD1: the intermediate member restored | v1.0 named the notified ultimate holding company as the member; the member is an intermediate holding company. The finding is unchanged |
| 5.3 | Membership completeness stated exactly | The extract prints 23 members whose ordinary parcels account for all but 3,998 of the shares on issue; percentages are computed on issued capital and are unchanged |
| 7 item 8 | Coverage restated and the disposal test replaced | The list-name test has now been run for all 28 entries. An earlier disposal formulation turning on corporate suffixes was withdrawn before publication; the test as applied, and the interpretive step it takes, are stated on the face of the document |
| 7 item 11 | Cross-reference corrected | Pointed to the wrong sections |
| Throughout | Register re-checked on the publication date; two registers disclosed | The certified-provider list was re-captured 11 August 2026 and its one difference from the 21 July capture is stated. Sources retrieved for this revision are pinned in a revision register that is not published at this revision, and the document says so |
Download
Assessment PDF
The attested assessment is the signed PDF. Its SHA-256 is published below.