SOC 2 Type II — In Progress
We have implemented SOC 2 controls across our platform and infrastructure. A formal Type II audit is planned as part of our compliance roadmap.
SOC 2 (System and Organization Controls 2) is a framework developed by the American Institute of CPAs (AICPA) that evaluates an organization's information systems against five Trust Services Criteria. Ledger Link is committed to meeting these standards and is actively working toward formal certification.
Controls Implemented
We have implemented security, availability, and confidentiality controls across our application and infrastructure, including encryption at rest (AES-256), encryption in transit (TLS 1.3), role-based access control, audit logging, and automated backups.
Infrastructure Certified
Our cloud providers — AWS (via Supabase), Vercel, and Cloudflare — maintain their own SOC 2 Type II certifications. Your data is hosted on infrastructure that has passed independent audits.
Formal Audit Planned
We are preparing for a formal SOC 2 Type II audit to independently verify our controls. This is a priority on our compliance roadmap and is tracked on our public roadmap.
SOC 2 evaluates organizations against five Trust Services Criteria. Here is how Ledger Link addresses each:
Protection against unauthorized access and system abuse:
System uptime and accessibility commitments:
Accurate and timely data processing:
Protection of sensitive information:
Personal information protection:
Once our SOC 2 Type II audit is complete, the report will be available upon request under NDA. In the meantime, we can provide:
Contact our security team at security@theledgerlink.com
For questions about our security practices or compliance status, contact security@theledgerlink.com.