just now
Digital assets payments platform BVNK has achieved SOC 2 Type II accreditation, a security compliance standard widely recognised by U.S. financial institutions and technology providers. The company said the certification demonstrates its commitment to maintaining robust security controls across its payments infrastructure.
SOC 2 Type II involves an independent audit of security practices across multiple criteria, including security, availability, and confidentiality. Areas assessed include access controls, system operations, change management, risk management, vendor management, and data protection. Unlike a point-in-time assessment, SOC 2 Type II evaluates security controls over an extended period, offering a continuous view of performance under real-world conditions.
BVNK pursued the more demanding Type II certification directly, bypassing the less rigorous Type I process. The company said the decision reflects its aim to implement the highest possible security standards from the outset.
SOC 2 Type II adds to BVNK’s ISO 27001:2022 accreditation and DORA compliance, creating a security framework that supports its global operations. The company said the attestation will be particularly valuable for its U.S. partners and enterprise clients, as it simplifies vendor risk assessments.
“Many US financial institutions require SOC 2 Type II compliance from their service providers: achieving it means they can confidently integrate with BVNK's payment infrastructure knowing we meet their security requirements,” said Lazar Lazarov, Global Head of Security at BVNK.
BVNK said security remains central to its business operations and that the certification provides enterprise customers in the U.S. with assurances that their data is protected by controls meeting stringent industry standards.
