At Alpaca, we are committed to building a stable, secure, and trusted experience for our customers and partners. As part of this ongoing effort, we’re pleased to announce that we have successfully renewed the SOC 2 Type 2 compliance assessment. This achievement further demonstrates our dedication to ensuring correct protocols and standards are safely in place for data security.
What is a SOC 2 Type Assessment?
Developed by the American Institute of Certified Public Accountants (AICPA), System and Organization Controls (SOC) examinations are industry standards that provide service organizations independent validation of the internal administrative, technical, and physical controls of their systems, procedures, and infrastructure.
SOC 2, in particular, defines the criteria for managing sensitive customer data rooted in five trust service principles which are:
Security
Protection of the system’s resources against inappropriate use and unauthorized access.
Availability
Accessibility of the system’s products or services as mentioned by a contract or service level agreement (SLA).
Processing Integrity
Demonstrates whether a system can deliver complete, valid data accurately, timely, and efficiently.
Confidentiality
Whether disclosure of information considered confidential is restricted to a specified set of persons or organizations.
Privacy
Addresses if the system’s collection, use, retention, and disclosure of personal information conforms according to an organization's privacy policy and fulfills AICPA’S generally accepted privacy principles (GAPP).
Importance of Completing the SOC 2 Assessment
Renewal and completion of SOC 2 compliance assessment indicates Alpaca has demonstrated the required design, operational controls, and principles to protect information and computer systems from unauthorized access, unauthorized disclosure of information, and danger to systems that could compromise information or systems. Alpaca has attained the Type II report, which details the operational effectiveness of those systems and includes a historical element that shows how controls were managed effectively by the business.
Securities brokerage services are provided by Alpaca Securities LLC ("Alpaca Securities"), member FINRA/SIPC, a wholly-owned subsidiary of AlpacaDB, Inc. Technology and services are offered by AlpacaDB, Inc.
Cryptocurrency services are made available by Alpaca Crypto LLC ("Alpaca Crypto"), a FinCEN registered money services business (NMLS # 2160858), and a wholly-owned subsidiary of AlpacaDB, Inc. Alpaca Crypto is not a member of SIPC or FINRA. Cryptocurrencies are not stocks and your cryptocurrency investments are not protected by either FDIC or SIPC. Depending on your location, cryptocurrency services may be provided by West Realm Shires Services, Inc., d/b/a FTX US (NMLS #1957771). Please see the Disclosure Library for more information.
This is not an offer, solicitation of an offer, or advice to buy or sell securities or cryptocurrencies, or open a brokerage account or cryptocurrency account in any jurisdiction where Alpaca Securities, Alpaca Crypto, or FTX US respectively, are not registered or licensed, as applicable.
