VerifyVASP Renews SOC 2 Type II Assessment
We are pleased to announce that we have successfully completed our SOC 2 Type II assessment for the fourth consecutive year.
Reaffirming our last assessment completed in June 2025, this came as the digital assets and Web3 industry continues to progress on institutional adoption and the wider convergence with traditional finance, which calls for a more robust trust and cybersecurity infrastructure.
SOC (System and Organisation Controls) is a suite of compliance standards defined by the American Institute of Certified Public Accountants (AICPA) that assesses a service organisation’s controls around the trust principles of security, availability, processing integrity, confidentiality or privacy.
The SOC 2 Type II report evaluates the design and operating effectiveness of security controls over an extended period. The purpose of this assessment is to provide clients of VerifyVASP’s Platform and Service with details on the control environment that VerifyVASP has in place to meet the Trust Services Criteria of Security, Availability and Processing Integrity.
The VerifyVASP platform was assessed for SOC 2 Type II from 1 February 2025 to 31 January 2026.
This independent assessment outcome reiterates VerifyVASP’s commitment to uphold the industry best practices and standards in cybersecurity, data privacy and operational effectiveness. The assessment is crucial given the international nature of blockchain transactions, which involves secure transmission of personal identifiable information (PII) and cross-border data sharing.
As an industry-proven solution which has zero-incident record since the company's founding in 2019, we believe that it is ever important that our platform and services remains the institutional-grade best solution that can guard Web3 ecosystem players against heightened cybersecurity risks, as highlighted by the series of high-profile hacks and data leaks across the Web3 industry in recent years.
The VerifyVASP solutions are architected to the strictest data protection and policy requirements. We serve over 150 member VASPs across over 30 jurisdictions, having facilitated verifications representing over US$500bn in asset value. As a global leader in Travel Rule solution, we treasure the trust placed by our members. We will continue to strive to uphold the best standard in handling of sensitive data required for full Travel Rule, data protection and technology risk compliance.
If you are interested to obtain the updated 2026 Assessment Report, please reach out to [email protected].