Hex Trust Receives SOC 2 Type II Certification from AssuranceLab, Underpinning Commitment to Internal Control and Security

Hex Trust, the leading institutional digital asset custodian, has announced that it has successfully completed its SOC 2® Type II & Cloud Security Alliance level 2 attestation. The attestation was independently conducted by AssuranceLab and evaluated Hex Trust's internal control, policies, processes, operations, and security practices against the trust service principles. This reaffirms Hex Trust's commitment to maintaining the highest standards of security, compliance, and confidentiality. The comprehensive SOC 2 Type II audit took place in December 2023, covering a one-year period from October 1, 2022, to September 30, 2023. It rigorously assessed Hex Trust's organizational controls in alignment with the trust service principles. By successfully completing this attestation, Hex Trust demonstrates its continued dedication to meeting stringent security and compliance requirements.

“At Hex Trust, we always improve, validate and verify our security and privacy practices. Being granted this certification from AssuranceLab is a testament to the thorough and diligent work of our dedicated team. It remains our priority to set the highest global standards for our products, services, and processes in order to protect our clients and their assets.”— Alessio Quaglini, CEO of Hex Trust

Hex Trust strives to meet the strictest regulatory and compliance standards and was later  completed the SOC 1 Type II attestation with Deloitte in February 2024. In terms of data center certifications, Hex Trust takes a security-oriented approach in processes to protect the business from a variety of threats and security risks. Hex Trust uses Singtel as a colocation provider, leveraging its network of cloud-enabled data centers, which offer adherence to global standards, market-leading security, extensive coverage, and more. Hex Trust also receives regular penetration testing with the help of HackerOne, a well-known cyber security services provider, to verify the capabilities of our security architecture against potential cyber-attacks.