Alpaca Effectively Renews SOC 2 Type 2 Assessment, Strengthening Commitment to Data Security

At Alpaca, we are committed to building a stable, secure, and trusted experience for our customers and partners. As part of this ongoing effort, we’re pleased to announce that we have successfully renewed the SOC 2 Type 2 compliance assessment. This achievement further demonstrates our dedication to ensuring correct protocols and standards are safely in place for data security.

What is a SOC 2 Type Assessment?

Developed by the American Institute of Certified Public Accountants (AICPA), System and Organization Controls (SOC) examinations are industry standards that provide service organizations independent validation of the internal administrative, technical, and physical controls of their systems, procedures, and infrastructure.

SOC 2, in particular, defines the criteria for managing sensitive customer data rooted in five trust service principles which are:


Protection of the system’s resources against inappropriate use and unauthorized access.


Accessibility of the system’s products or services as mentioned by a contract or service level agreement (SLA).

Processing Integrity

Demonstrates whether a system can deliver complete, valid data accurately, timely, and efficiently.


Whether disclosure of information considered confidential is restricted to a specified set of persons or organizations.


Addresses if the system’s collection, use, retention, and disclosure of personal information conforms according to an organization's privacy policy and fulfills AICPA’S generally accepted privacy principles (GAPP).

Importance of Completing the SOC 2 Assessment

Renewal and completion of  SOC 2 compliance assessment indicates Alpaca has demonstrated the required design, operational controls, and principles to protect information and computer systems from unauthorized access, unauthorized disclosure of information, and danger to systems that could compromise information or systems. Alpaca has attained the Type II report, which details the operational effectiveness of those systems and includes a historical element that shows how controls were managed effectively by the business.

Alpaca - Developer-First API for Crypto and Stocks
Alpaca’s easy to use APIs allow developers and businesses to build apps, embed investing, and trade algorithms.

Securities brokerage services are provided by Alpaca Securities LLC ("Alpaca Securities"), member FINRA/SIPC, a wholly-owned subsidiary of AlpacaDB, Inc. Technology and services are offered by AlpacaDB, Inc.

Cryptocurrency services are made available by Alpaca Crypto LLC ("Alpaca Crypto"), a FinCEN registered money services business (NMLS # 2160858), and a wholly-owned subsidiary of AlpacaDB, Inc. Alpaca Crypto is not a member of SIPC or FINRA. Cryptocurrencies are not stocks and your cryptocurrency investments are not protected by either FDIC or SIPC. Depending on your location, cryptocurrency services may be provided by West Realm Shires Services, Inc., d/b/a FTX US (NMLS #1957771). Please see the Disclosure Library for more information.

This is not an offer, solicitation of an offer, or advice to buy or sell securities or cryptocurrencies, or open a brokerage account or cryptocurrency account in any jurisdiction where Alpaca Securities, Alpaca Crypto, or FTX US respectively, are not registered or licensed, as applicable.

Interested in learning more about Broker API?

Don't miss out on any updates about our Broker API suite of solutions! Share your details with us and be the first to know about our latest content.

Author image
About Sonia Sethi
You've successfully subscribed to Alpaca Blog | Developer-First API for Stocks, Options, and Crypto
Great! Next, complete checkout for full access to Alpaca Blog | Developer-First API for Stocks, Options, and Crypto
Welcome back! You've successfully signed in.
Success! Your account is fully activated, you now have access to all content.