Enterprise stablecoin payments infrastructure. Build financial products, unlock new markets, move money across 130+ countries.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
ISO 27001
International standard for an information security management system, certified by accredited bodies.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
-
SOC 1
Publicly advertised on the organization’s trust center.
Compliance timeline
-
August 2024
Trust center first observed in public web archives
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Bvnk discloses on its trust center. Linked entries have their own profile in the Trust Index.
39% chain trust: 11 of 28 disclosed subprocessors are themselves in the Trust Index.
- Amazon Web Services Cloud provider
- BVNK Services Limited Data storage and processing
- Google Cloud Platform Cloud provider
- Ondato UAB Security
- Refinitiv (LSEG - LSEG Financial Solutions) Customer support
- Salesforce Sales
- Snowflake Data storage and processing
- Zendesk Customer support
- Chainalysis Data analytics
- DocuSign Document management
- incident.io IT
- Slack Collaboration
- Vanta Security
- Chili Piper Inc. Sales
- Sum and Substance Ltd (UK) Security
- ComplyAdvatage Professional services
- Notabene Inc. Professional services
- FingerprintJS, Inc., a Delaware corporation Security
- Cytix Security
- Lead Bank Finance and payments
- Cross River Bank Finance and payments
- CENTROlink Bank of Lithuania (Banking Partner) Finance and payments
- Banking Circle S.A. (banking partner via SPS UK) Finance and payments
- BBVA Finance and payments
- Clearbank (banking partner via SPS UK) Finance and payments
- Customers Bank (banking partner via SPS Spain) Finance and payments
- iban.com (GW SOLUTIONS Ltd) Finance and payments
- Unit21, Inc. Professional services
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.