AvePoint Assessed Against Official IRAP Controls, Demonstrating its Longstanding Commitment to Security for Government Entities

Australian Transport Safety Bureau sponsors AvePoint's IRAP assessment, issued by the Australian Government, to support its record management and compliance in Microsoft 365.

MELBOURNE, Australia, May 19, 2021 /PRNewswire/ -- AvePoint, Inc.^[1], the largest data management solutions provider for the Microsoft cloud, today announced the AvePoint Online Services cloud platform, and its Cloud Backup ^[2], Cloud Governance ^[3], and Cloud Records ^[4] solutions were assessed against the Information Security Registered Assessors Program ^[5] (IRAP) official controls on April 4, 2021 in Australia. The assessment demonstrates AvePoint's commitment to, and expertise in, protecting sensitive government data.

Through the Australian Cyber Security Centre (ACSC), the Australian Signals Directorate (ASD) initiated the IRAP to ensure the standard of cybersecurity and information security assessments for ICT systems processing or storing government information. After the ASD removed the Cloud Services Certification Program last year, all cloud providers were encouraged, but not required, to undergo IRAP assessment. As initiated by cloud vendors, assessments are performed by IRAP certified assessors, all of whom have a detailed knowledge of information security and compliance requirements as mandated by the Australian Government.

AvePoint, in partnership with The Australian Transport Safety Bureau ^[6] (ATSB) initiated the IRAP assessment process to help modernize and further automate the ATSB's record management. As a result of the sophisticated, five-step authorization, the ATSB will now be able to utilize AvePoint Cloud Records to automatically identify, capture and manage records in Microsoft 365 in alignment with the Australian Government record keeping requirements.

"At the ATSB, we have a strong focus on collaboration and record keeping and were looking at innovative ways to ensure our data would be secure and accessible, in alignment with our cloud strategy," said Angelo Santosuosso, Record Manager at the ATSB. "Leveraging our previous relationship with AvePoint, we were confident their cloud records suite would enable us to achieve our objectives."

More than 130 government entities in Australia use AvePoint to migrate, manage and enhance protection of their Microsoft 365 and SharePoint data. Additionally, the validation AvePoint received from IRAP reflects a significant market opportunity, as collaboration security remains a top priority for government entities in the region.

"Our public sector customers all face unique security challenges, and industry specific regulations" said Alexander Dick, Manager of Federal Public Sector, AvePoint Australia. "Our hope is that in achieving the IRAP certification, we can assure government entities and beyond of our adherence to security through rigorous and continual assessments like this one."

"AvePoint is clearly committed to information security, and addresses risk and compliance in a sophisticated and comprehensive way, which resulted in an impressive level of ISM control adherence," said Sah Vasilevski, Principal Consultant at Security Centric and IRAP Assessor. "The responsiveness of globally dispersed teams during AvePoint's IRAP journey speaks volumes of their organizational agility."

For more information on AvePoint Public Sector and its solutions, please visit https://www.avepoint.com/solutions/us-public-sector ^[7]. To receive a copy of the IRAP assessment, please visit https://www.avepoint.com/lp/irap-assessment ^[8].

Forward Looking Statements This press release contains certain forward-looking statements within the meaning of the federal securities laws including statements regarding AvePoint's products, markets, and product certifications, as well as expected future performance, activities, assessments, and market opportunities of AvePoint. These forward-looking statements generally are identified by the words "believe," "project," "expect," "anticipate," "estimate," "intend," "strategy," "future," "opportunity," "plan," "may," "should," "will," "would," "will be," "will continue," "will likely result," and similar expressions. Forward-looking statements are predictions, projections and other statements about future events that are based on current expectations and assumptions and, as a result, are subject to risks and uncertainties. Many factors could cause actual future events to differ materially from the forward-looking statements in this press release, including but not limited to: changes in the competitive and regulated industries in which AvePoint operates, variations in operating performance across competitors, changes in laws and regulations affecting AvePoint's business and changes in AvePoint's ability to implement business plans, forecasts, and to identify and realize additional opportunities, and the risk of downturns in the market and the technology industry. You should carefully consider the foregoing factors and the other risks and uncertainties described in the "Risk Factors" section of the registration statement on Form S-4 filed in connection with a proposed business combination between AvePoint and Apex Technology Acquisition Corporation ("Apex") as well as in other documents filed from time to time with the SEC. These filings identify and address other important risks and uncertainties that could cause actual events and results to differ materially from those contained in the forward-looking statements. Forward-looking statements speak only as of the date they are made. Readers are cautioned not to put undue reliance on forward-looking statements, and AvePoint assumes no obligation and does not intend to update or revise these forward-looking statements, whether as a result of new information, future events, or otherwise.

Investors and security holders are able to obtain free copies of the registration statement, the proxy statement/prospectus, and all other relevant documents filed or that will be filed with the SEC by Apex in connection with the proposed transaction with AvePoint through the website maintained by the SEC at www.sec.gov ^[9]. The information contained on, or that may be accessed through, the websites referenced in this press release is not incorporated by reference into, and is not a part of, this press release.

About AvePointAvePoint enables you to collaborate with confidence. A five-time Microsoft Partner of the Year, AvePoint is the only full-suite data management provider for digital collaboration platforms. We migrate, manage and protect data within these platforms to make organizations more productive, secure and compliant.

More than 16,000 customers and 7 million cloud users, including a quarter of the Fortune 500, use our products. Our SaaS solutions are also available to managed service providers who can access, use, and resell them from cloud marketplaces around the world, spanning more than 60 countries.

Founded in 2001, AvePoint is privately held and headquartered in Jersey City, NJ. For more information visit: https://www.avepoint.com ^[10].

Contact InformationNicole Caci, PR Manager Nicole.caci@avepoint.com ^[11] // (973) 349. 9637

Source: AvePoint, Inc.