BVNK achieves SOC 2 Type II – strengthening our security foundations in the US

The gold standard in security accreditation, SOC 2 reinforces our commitment to enterprise-grade controls.

By
Lazar Lazarov
May 15, 2025
3
min read

I'm pleased to announce that BVNK has successfully achieved SOC 2 Type II, demonstrating our commitment to maintaining robust security controls for our payments infrastructure.

What is SOC 2 Type II and why does it matter?

SOC 2 Type II is the gold standard for security compliance in the US and is widely recognized among major financial institutions and technology providers across the country.

To achieve this, BVNK underwent a rigorous independent audit that assessed our security practices across multiple areas including, covering multiple criteria – security, availability and confidentiality:

  • Access controls
  • System operations
  • Change management
  • Risk management
  • Vendor management
  • Data protection

What distinguishes SOC 2 Type II, is its comprehensive approach. Unlike other point-in-time assessments, SOC 2 Type II evaluates security controls continuously over an extended period of months. This provides a more thorough understanding of how our security controls perform consistently under real world conditions.

At BVNK, we chose to pursue SOC 2 Type II directly, bypassing the less demanding Type I assessment. This decision reflects our commitment to implementing the highest possible security standards from the outset.

Building on our security foundation

SOC 2 Type II complements our existing ISO 27001:2022 accreditation – creating a comprehensive security framework that supports our global operations. Together with our DORA compliance, these certifications demonstrate our commitment to security at every level of our organization.

For our US partners and enterprise clients, this attestation is particularly valuable as it simplifies their vendor risk assessments. Many US financial institutions require SOC 2 Type II compliance from their service providers, and achieving SOC 2 means they can confidently integrate with BVNK's payment infrastructure knowing we meet their security requirements.

Our ongoing commitment

Security is foundational to our business and embedded in everything we do at BVNK.

As we continue expanding in the US market, SOC 2 Type II provides our enterprise customers with assurances that their data is protected by security controls that meet the most stringent industry standards.

You can learn more about BVNK's security controls, credentials, and the subprocessors we use in our Trust Center.

“Many US financial institutions require SOC 2 Type II compliance from their service providers: achieving it means they can confidently integrate with BVNK's payment infrastructure knowing we meet their security requirements.”
Lazar Lazarov
Global Head of Security at BVNK

Subscribe

Get payment insights straight to your inbox

Thank you! You're signed up for the BVNK newsletter.
Oops! Something went wrong while submitting the form.