We are thrilled to share that SonarX (formerly Sonarverse) has hit yet another milestone in our institutional journey – SOC 2 Type I compliance. This achievement highlights our commitment to security and compliance, serving as 3rd-party validation of our dedication to institutional-level clarity and transparency in Crypto and Web3.
SOC 2 Type I compliance for SonarX signifies an independent third-party auditor’s evaluation of our internal controls, specifically focusing on the security and availability of systems and data. This examination, conducted in adherence to the AICPA’s Trust Service Criteria and Code of Professional Conduct, verifies that SonarX has implemented necessary controls to safeguard customer data. The attainment of SOC 2 Type I compliance reflects our commitment to transparency, security, and adherence to industry standards. It assures our clients of the robust security measures in place within our platform, in accordance with our guiding principles.
Guiding Principles: The 4 C’s
At the heart of our security and privacy policies lie the principles of the 4 C’s:
Controlled Access:
Access is granted meticulously, adhering to the principle of least privilege. Only those with a valid business need have access to sensitive information, ensuring a secure and controlled environment.
Countermeasure Layers:
Security controls are strategically implemented in layers, aligning with the defense-in-depth approach. This layered approach enhances our overall security posture, providing robust protection against potential threats.
Consistency:
Our commitment to security is consistent across all areas of the enterprise. Security controls are uniformly applied, creating a cohesive and comprehensive security framework.
Constantly Improving:
Security is not a static concept at SonarX. We embrace an iterative approach, continuously improving controls for enhanced effectiveness and increased auditability. This dedication reflects our commitment to staying ahead in the ever-evolving security landscape.
SonarX remains resolute in our mission to prioritize security and compliance, offering users a platform they can trust.