Kraken completes SOC 2 Type 2 compliance report, underscoring commitment to institutional security

Building and maintaining a high bar for security and compliance is fundamental to how we serve our clients’ needs. Today, we’re pleased to announce that Kraken’s institutional-grade qualified custody offering has successfully completed the SOC 2 Type 2 compliance examination — a significant milestone that further reinforces our longstanding commitment to protecting our institutional client’s assets and data. 

What SOC 2 Type 2 is and why it matters

SOC 2 (System and Organization Controls 2) is an internationally recognized framework developed by the American Institute of CPAs (AICPA) for managing customer data based on five “trust service principles”: security, availability, processing integrity, confidentiality and privacy. 

Successfully completing the SOC 2 Type 2 examination, building on Kraken’s prior SOC 2 Type 1 report, demonstrates not only the rigorous design of our security controls, but also their consistent execution and effectiveness over time. This independent, third-party validation builds on our existing security foundations and reflects an ongoing commitment to strengthening internal processes and technical infrastructure. These have been stress-tested to meet the highest industry standards for system reliability and the protection of sensitive data.

“Completing the SOC 2 Type 2 examination is an important milestone, but it’s just one element of our comprehensive, security-first company culture and operational strategy,” said Nick Percoco, Kraken Chief Security Officer. “We view security as a continuous, holistic commitment, one that extends beyond any single audit, reporting requirement, or certification. As Kraken continues to scale and the threat landscape evolves, we remain laser-focused on strengthening our internal controls and investing in exceptional talent to uphold our commitment to protecting our client’s data and their assets.”

What this means for our clients:

• Enhanced asset protection: SOC 2 Type 2 compliance validates that assets in Kraken’s Institutional Custody platform are safeguarded by robust, industry-leading security protocols, continuously monitored and enhanced to counter evolving cybersecurity threats.

• Trust through transparency: With this recognition, clients can have greater confidence in Kraken’s operational integrity. It reaffirms how our security controls are not only well-designed, but have been reliably executed over an extended period.

• Commitment to excellence: This achievement reflects Kraken’s ongoing investment in best-in-class security practices and infrastructure, reinforcing our mission to deliver a truly security-first offering that promotes broader adoption of digital assets globally.  

A step forward, with more to come

SOC 2 Type 2 compliance is a significant milestone, but it’s just one part of our larger security-first philosophy at Kraken. We’re committed to continuously enhancing our infrastructure, protocols, personnel, and holistic operation to ensure we’re serving our client’s needs both now, and long term.