Nexo, a leading platform in the digital assets sector, has renewed its commitment to data security by successfully completing a SOC 2 Type 2 audit and achieving a new SOC 3 Type 2 assessment without exceptions. These audits, conducted by the independent auditor A-LIGN, evaluated Nexo’s compliance with stringent Trust Service Criteria, particularly focusing on Security and Confidentiality.
Key Achievements and Scope Expansion
The recent audits not only reaffirmed Nexo’s compliance with the SOC standards but also expanded the scope to include additional Trust Service Criteria, with a particular emphasis on Confidentiality. This expansion demonstrates Nexo’s proactive approach to enhancing data protection measures and ensuring that user information remains secure.
The Importance of SOC 2 and SOC 3 Compliance
The SOC 2 standard, established by the American Institute of Certified Public Accountants (AICPA), assesses an organization’s internal controls related to security, availability, processing integrity, confidentiality, and privacy. The SOC 3 report, which is a general use report, provides an overview of these controls, confirming that they meet the high standards set by SOC 2. Achieving these certifications, especially with no exceptions, highlights Nexo’s strong governance and robust data protection practices.
Commitment to Security Standards
Nexo’s dedication to security and compliance is further illustrated by its adherence to the highest standards in the industry. This includes meeting the CCSS Level 3 Cryptocurrency Security Standard for asset storage and obtaining ISO 27001, ISO 27017, and ISO 27018 certifications, all granted by the certification body RINA. Additionally, Nexo holds the CSA Security, Trust & Assurance Registry (STAR) Level 1 Certification, further solidifying its reputation as a secure and reliable platform in the digital assets space.
Nexo’s Leadership Perspective
Milan Velev, Chief Information Security Officer at Nexo, emphasized the significance of these achievements, stating, “Completing the gold standard in client data protection for the second consecutive year brings me great pride and a profound sense of responsibility. It is crucial for Nexo customers to have compliance peace of mind, knowing that we diligently adhere to security regulations and remain committed to annual SOC audits.”
Nexo’s recent SOC 2 and SOC 3 certifications, along with its comprehensive set of security certifications, underscore the company’s unwavering commitment to data security and regulatory compliance. These achievements provide Nexo’s clients with the assurance that their data is handled with the highest level of security and confidentiality, positioning Nexo as a trusted partner in the digital asset industry.
Source: cryptodaily.co.uk
