MoonPay has expanded the scope of its annual SOC 2 Sort 2 certification, including Privateness as a brand new audit class and bringing three extra merchandise underneath unbiased evaluation as the corporate continues rising past crypto on-ramps.
The newest audit now covers Digital Accounts, MoonPay Commerce and MoonPay Commerce, extending the identical safety and privateness requirements already utilized to MoonPay’s core funds enterprise.
The corporate obtained a clear opinion, the best final result out there underneath a SOC 2 Sort 2 audit, confirming that its controls operated successfully all through the evaluation interval.
Why It Issues
In contrast to a SOC 2 Sort 1 audit, which evaluations whether or not controls are correctly designed at a single time limit, SOC 2 Sort 2 evaluates how these controls carry out over a number of months in real-world operation.
This yr’s audit additionally added Privateness to the evaluation, which means MoonPay is now licensed throughout 4 of the 5 Belief Companies Standards outlined by the American Institute of Licensed Public Accountants (AICPA): Safety, Availability, Confidentiality and Privateness.
As MoonPay expands its product suite, the corporate says the extra protection offers prospects and companions better confidence in how delicate private and monetary info is managed throughout the platform.
“Including Privateness to our SOC 2 Sort 2 scope displays how critically we take the accountability that comes with dealing with delicate information at scale,” mentioned Doug Innocenti, MoonPay’s Chief Data Officer and Chief Safety Officer.
“For our prospects and companions, this report is a solution to independently confirm that dedication slightly than take our phrase for it.”
Past the On-Ramp
The recertification continues MoonPay’s broader push towards enterprise-grade compliance. The corporate first achieved SOC 2 Sort 2 certification in 2024 and likewise maintains ISO 27001, ISO 27018, ISO 27701 and PCI DSS certifications overlaying info safety, privateness and cost information.
These requirements have gotten more and more essential as crypto infrastructure suppliers compete for banks, cost firms and enterprise prospects that require unbiased safety verification earlier than integrating third-party companies.
MoonPay says future audit cycles will proceed increasing the certification as newly acquired companies are built-in into the platform.
As crypto firms mature into monetary infrastructure suppliers, certifications and regulatory compliance have gotten aggressive differentiators alongside pricing, liquidity and product options. For enterprise prospects, safety is more and more a part of the product itself.
