Snapshot 181497
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Privy powers secure wallet infrastructure for apps building on crypto and stablecoin rails. Keys, transactions, and user data are protected with enterprise-grade security, while our modular architecture ensures low-latency performance and reliability required to scale globally. security@privy.io Privacy PolicyOpens in new tab Security you can measure, trust you can verify Privy secures millions of wallets and identities for regulated fintech and banking businesses and high-velocity digital asset products alike. From our cryptographic key architecture to our incident-response playbooks, every layer of our platform is built and operated by engineers who think about security. At Privy, all engineering is security engineering. Privy protects more than 120 million accounts and processes billions of dollars monthly in onchain value. Independently verified controls Our security program is anchored by a SOC 2 Type II attestation (Refreshed annually) and reinforced by recurring penetration tests from respected firms including Cure53, Zellic, SwordBytes, and Doyensec. These quarterly assessments validate that our controls operate effectively and continuously meet industry benchmarks for security and confidentiality Transparency by default This Trust Center is your single pane of glass for architecture documentation, penetration-test summaries, policies, and vendor lists—everything you need to complete a security review. Request access to our latest SOC 2 report or download public artifacts directly from the portal. A standing invitation to researchers Security is a shared effort. If you uncover a vulnerability, please report it through our HackerOne Bug BountyOpens in new tab; we offer safe-harbor, rapid triage, and competitive rewards. Together, we keep your business and your customers, safe. Compliance SOC 2 GDPR CCPA Resources View all Architecture Security Packet (Full) Wallet and Integration Architecture Code Integrity and Deployment View 1 more Reports Shamir Secret Sharing Audit Zellic - Delegated Actions Audit Report Policies Security Training and HR Policy Information and Application Security Policy Guides Stablecoin Infrastructure Primer Onchain Yield Primer Flexible Custody Primer Fintech Proof of Concept (POC) Guide Other resources SOC 2 Type II - 2026 SOC 2 Type I - 2024 Rate limiting at Privy Aikido AI Pentest Report - April 2026 Controls View all Infrastructure security Remote access MFA enforced Unique production database authentication enforced Encryption key access restricted View 15 more Infrastructure security controls Organizational security Asset disposal procedures utilized through MDM Production inventory maintained Portable media encrypted View 10 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 34 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Cloud provider Database (and Vercel via upstream) runs on AWS. Cloudflare • Cloud monitoring Datadog • Data monitoring GitHub • Version control FAQ