As a SOC2 Type II certified and regulatory compliant company, Parfin takes security seriously, applying best-in-class governance and controls.

Pillars of Our Security

Key Aspects of Our Approach

All user data is fully encrypted, passwords are hashed and salted
We use HSMs that have achieved FIPS 140-2 Level 2 rating or higher
All of our website data is transmitted over encrypted Transport Layer Security (TLS)
connections (i.e., HTTPS)
All API keys are stored in encrypted virtual HMAC wallets
As an additional layer of security all sensitive data are also encrypted by HSM

Mandatory 2FA for all user accounts when logging in and performing sensitive actions
Customisable authorisation engine to ensure transaction initiator and approver are separate
Mandatory Whitelisting of addresses with 24 hour delayed approvals
Multiple user roles with varying levels of access and control

SOC2 Type II Certified by Ernst & Young, the gold standard for security assessment in financial markets
Comprehensive insurance policies
Regular Penetration Testing
We partner with enterprise vendors to mitigate against distributed denial-of-service (DDoS) attacks
Policies and procedures to enforce security and data privacy
All software improvements require rigorous testing and approval from the Parfin executive team
24/7 system and security monitoring with specialist incident response
Our founders and directors are unable to individually or jointly transfer funds out of the clients wallet

Let Parfin handle the intricacies of digital asset management so that you can focus on your business

Parfin is a modular platform for secure digital asset custody, trading and management