Security

Our custodian partner, Gemini, is committed to providing the best digital asset security protection possible. The Gemini team is dedicated to the safety of their users and has been at the forefront in being the world’s first cryptocurrency exchange and custodian to earn an ISO 27001 certification and complete a SOC 1 Type 2 exam, SOC 2 Type 2 exam.

Strong security culture has enabled Gemini to be an industry leader in dealing with potential outside threats. Gemini has a comprehensive security program with robust and innovative features that meet and exceed industry standards. Our custodian uses HSMs to securely store sensitive data like private keys, which are certified by the U.S Department of Commerce as meeting FIPS 140-2 Level 3 requirements or higher for cryptographic modules in this category.
Gemini follows the principle of least-privilege by applying tiered, role-based access-controls to their production environment. Administrative access requires multi-factor authentication. Two-Factor Authentication (2FA) is required when a client logs in to their account or makes digital asset withdrawals. A client can create an Approved Address list that restricts their crypto withdrawals to approved addresses only, or disables all crypto withdrawals from their account. Rate-limiting is applied to certain account operations, such as a client’s login attempts, in order to thwart brute force attacks.

The company supports 24/7 secured access and controlled facilities with institutional-grade security in order to protect clients' assets, which team views as a top priority.

You can learn more here.