Crypto Fund Administrators

Headcount

Number of employees the company states.

Funding raised (USD)

Total outside funding the company states it has raised, in US dollars.

Regulator of record

The regulator the company names as its main supervisor.

SOC 2 Type 2 report

An independent auditor tested the company's security controls over a period of months. The audit firm and the period are in the note.

SOC 2 Type 1 report

An independent auditor checked the company's security controls at one point in time. Weaker than Type 2.

SOC 1 Type 2 report

An independent auditor tested the controls behind the company's financial reporting over a period of months.

SOC 1 Type 1 report

An independent auditor checked the controls behind the company's financial reporting at one point in time.

ISO 27001 certified

The company holds an ISO/IEC 27001 information security certificate. Certificate number, certification body and expiry are in the note; verified means we found it on a public certificate register.

Annual penetration test

An outside firm tries to break into the company's systems at least once a year. The firm is in the note when named.

CCSS level

CryptoCurrency Security Standard level the company was audited to. Level 3 is the highest.

Level 1

Basic CCSS controls audited.

Level 2

Stronger CCSS controls audited, including key redundancy.

Level 3

The highest CCSS level: full controls, tested, with formal policies.

Cryptographic audit

An independent review of the signing scheme itself, not the company's processes. Firm and year in the note.