LONDON — B2C2 has achieved SOC 2 Type 2 attestation from RSM US LLP, following an independent examination of the operating effectiveness of the controls supporting the firm's OTC trading platform over an extended period.

SOC reports, developed by the American Institute of CPAs (AICPA), are widely recognised assurance frameworks that evaluate the controls and processes firms have in place to protect systems, data and operations. Unlike a Type 1 report, which assesses control design at a single point in time, Type 2 verifies that those controls operated effectively over a sustained review period — a materially higher bar of assurance.

For banks, asset managers, brokers, fintechs and other regulated institutions, this kind of independent assurance is a growing part of counterparty and vendor due diligence — increasingly demanded by risk, compliance and procurement teams as digital assets become a mainstream part of institutional portfolios.

"Type 1 tells you our controls are well-designed. Type 2 proves they hold up in practice, day after day, over time," said Simon Heinrich, Chief Technology Officer and Chief Information Security Officer at B2C2. "That's the distinction institutional counterparties actually care about, and it's the standard we're now able to demonstrate."

B2C2 first achieved SOC 2 Type 1 attestation in October 2025. This latest Type 2 report builds on that foundation, reflecting the firm's sustained investment in robust systems, disciplined processes and operational resilience as it continues to serve institutions across global digital asset markets.