Can I get Aquanow's SOC 2 report?

Aquanow's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Security isn't a single yes/no, but Aquanow is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Does Aquanow have a bug bounty or vulnerability disclosure program?

Aquanow hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@aquanow.com or via a /security page (Aquanow lists a security contact).

Who are Aquanow's subprocessors?

Aquanow lists 1 subprocessor on its trust center, including Amazon Web Services. Buyers use this for fourth-party risk review.

Where is Aquanow's trust center or security page?

Aquanow's trust center is at https://trust.aquanow.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Is this your company? Buyers are checking Aquanow here. Claim aquanow.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free

Aquanow

Q: Where does Aquanow host or store data?

Aquanow hosts on AWS, and handles Customer personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.

aquanow.com · Security contact

Security overview Compliance Penetration test

Trust level

Listed

Unverified

Listed

Domain

Report

Live

Sourced from public information. Not yet verified by the company.

Aquanow is SOC 2 Type II compliant. Aquanow also holds ISO 27001.

Request report access Claim this profile

Framework

Auditor

Last report

Renewal

View official trust center ↗

About

Aquanow is a leading digital asset platform, helping a broad range of financial service clients unlock the power of crypto to drive their businesses forward. Founded in 2018, the company facilitates digital asset payments, trading, and custody use cases. In 2023, Aquanow ranked as one of the fastest growing companies in North America. To date, the company has earned the trust of over 300 institutional clients in 50+ countries.

Compliance & infrastructure

SOC 2 Type II ISO 27001

Hosting

AWS

Data handled

Customer personally identifiable informationCredit card informationPersonal health information

Documents

Subprocessors

A
Amazon Web Services · Cloud provider
Multiple

Compliance leadership

The person who leads Aquanow's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. Aquanow's penetration test vendor isn't listed yet.

Claim this profile to add it.

Recent updates

Our 2025 SOC 2 type 2 report is releasedDec 2025

We are pleased to announce that existing and prospective clients are now able to request access to our Trust Center and download a copy of our group wide 2025 SOC 2 Type 2 report.

Find Aquanow in the Cloud Security Alliance STAR registryJul 2025

We are pleased to announce that You can now find our CSA STAR registration here: https://cloudsecurityalliance.org/star/registry/clts-technologies-ltd.

Announcement: Aquanow Achieves ISO 27001:2022 CertificationDec 2024

We are thrilled to announce that Aquanow has successfully obtained ISO 27001:2022 certification as of December 2024. This prestigious certification underscores our commitment to maintaining the highest standards of information security management. Achieving ISO 27001:2022 not only reinforces our dedication to protecting our clients' data but also enhances our operational processes and risk management practices. We would like to extend our gratitude to our team for their hard work and dedication in reaching this significant milestone.

This listing is partial

7/11 details · 64%

SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

Auditorraises trust
Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
Report dateraises trust
Add your most recent report period so buyers see how current your SOC 2 is.
Renewal date
Add your renewal window so buyers know your coverage is active.
Security controls
Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.

Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is Aquanow SOC 2 compliant?

Aquanow is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Is Aquanow ISO 27001 certified?

According to Aquanow's public trust center, Aquanow is ISO 27001 certified. On SOC2C this listing is Listed.

Is Aquanow SOC 2 Type I or Type II?

Aquanow is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Can I use Aquanow's SOC 2 for a vendor risk assessment?

Yes. Aquanow's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Is Aquanow penetration tested?

Aquanow hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Show 6 more questions

Answers published by Aquanow

Reproduced from Aquanow's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗

I found a security bug. Do you have an established bug bounty program?

Yes we do, please reach out to bugbounty@aquanow.com to be invited to our program. Our program is per invitation only. - Bounty up to 3000$. - We pay for vulnerabilities we don't know about, and for potential impact. - Bounty is forfeited if there are any impacts to real-data and/or systems stability

Do you encrypt data?

Yes we do. Encryption at rest: Data is encrypted at rest using AES-256. Client data is encrypted when on internal networks, at rest in Cloud storage, database tables, and backups. Encryption in transit: Data sent in-transit is encrypted using TLS 1.2 or greater.

Do you perform vulnerability scanning and is there an SLA for resolving identified security issues?

Yes there is. We perform vulnerability scanning and package monitoring on all infrastructure related hosts, and the company products and services continuously. Externally and internally-facing services are patched on a regular schedule. Any issues that are discovered are triaged and resolved according to the Vulnerability Management Policy and SLA depending on criticality.

Is there any independent audit and assurance assessments carried out?

We operate under the highest standard of compliance and assurance against internationally recognised information security standards and assurance frameworks. We maintain a comprehensive security program, which is continuously audited by highly reputable third-party auditors. We undergo a yearly SOC 2 type 2 audit and we have implemented ISO 27001:2022, for which we are also certified since Q4 2024. We also ensure external penetration tests are performed by highly accredited providers.

Where are your servers located?

We are are a global SaaS company and our platforms supporting our group wide entities are hosted by AWS across multiple regional facilities world wide, and in support of jurisdictional data and system residency requirements.