Kraken SOC 2 status and provider evidence

f regions. Kraken will not relocate a client’s workspace from the selected region or geography without the client’s prior consent.We align with General Data Protection Regulation (GDPR) take this as the standard across the business. We also include an additional layer of compliance by factoring in other applicable modern data protection laws, where required and appropriate. We continuously review and update our data protection policies and

o security and compliance can be found here.Your card details never touch Kraken’s systems, and our payment partners (e.g. Stripe) are certified to the highest industry standards (PCI DSS Level 1). This setup reduces risk for you and ensures payments are handled safely, securely, and in full compliance with global standards.If you choose to use your own payment provider, you’ll want to make sure that setup meets your own PCI compliance require

iner hosts) for containment and response to potential Indicators of Compromise (IOCs) as and when necessary.Compliance and CertificationsKraken’s Customer and Kraken Flex maintain SOC 1® Type 2 and SOC 2® Type 2 attestations. These reports are published on a twice-annual basis to enable our clients with various reporting schedules to meet their necessary assurance needs.Kraken holds ISO/IEC 27001:2022 certification and uses ISO27001 as the b

ntainment and response to potential Indicators of Compromise (IOCs) as and when necessary.Compliance and CertificationsKraken’s Customer and Kraken Flex maintain SOC 1® Type 2 and SOC 2® Type 2 attestations. These reports are published on a twice-annual basis to enable our clients with various reporting schedules to meet their necessary assurance needs.Kraken holds ISO/IEC 27001:2022 certification and uses ISO27001 as the basis for our Infor