Circle marked a significant compliance milestone this month by completing a System and Organization Controls (SOC) 2 Type 2 security audit under standards established by the American Institute of Certified Public Accountants (AICPA).
The SOC 2 Type 2 is a rigorous examination “conducted by an independent auditor and demonstrates how Circle achieves key information security and technology objectives, as well the company’s effectiveness in safeguarding the security, availability and confidentiality of its systems.”
Unlike the SOC 2 Type 1 report, which does “not include full testing and auditing, the Type 2 represents a higher level of security compliance.”
Marlys Rodgers, Chief Information Security Officer at Circle said:
“This achievement underscores Circle’s unwavering commitment to protecting our customers’ assets and maintaining the security of their personal and financial data. The SOC 2 Type 2 audit provides our customers and other key stakeholders a thorough and transparent view into our processes and controls, giving them even more confidence in the strength of our information security program.”
The AICPA is said to be “the world’s most influential body of professional accountants. The SOC 2 report is routinely provided to customers and regulators to show that Circle is committed to protecting customer assets and to demonstrate the robustness of our controls program.”
Over 100 controls reportedly “covering security, availability and confidentiality were tested during the evaluation process, reaffirming Circle’s commitment to maintaining the trust and confidence of our customers.”
As covered recently, Circle is pleased to announce that native USDC is now available on zkSync and accessible to developers and users – no bridging required.
Circle Mint and Circle APIs now fully support USDC on zkSync.
zkSync is a layer 2 (L2) rollup that “is hyperscaling Ethereum through zero-knowledge tech while leveraging its security.1 Zero-knowledge rollups (ZK-rollups) boost Ethereum’s capacity by handling many transactions off-chain and submitting only essential data back to Ethereum.”
Businesses and developers use zkSync to “benefit from fast, low cost transactions and native account abstraction. zkSync is on a mission to increase Ethereum’s throughput, and to fully preserve its foundational values of freedom, self-sovereignty, and decentralization at scale.”
