Alpaca is SOC II certified and leverages segregated secure compute environments for any cryptographic assets. We ultimately store crypto assets with our downstream crypto custody provider.

Additionally, Alpaca has also added account protections in the form of MFA enforcement and whitelisting on withdrawals to ensure assets remain safely on the platform.