generated: '2026-07-18'
method: searched
source: https://arf.one/membership/
note: >-
  Arf publishes no security certifications (SOC 2 / ISO 27001 / PCI DSS) and no OpenAPI,
  so this file captures the regulatory / self-regulatory compliance posture Arf documents
  publicly as a licensed, Switzerland-regulated financial platform. Standards below are
  membership/regulatory affiliations, not audited security certifications.
standards:
- id: vqf-sro-aml
  conforms: true
  evidence: Member of the VQF Self-Regulatory Organization (Swiss AML/CFT self-regulation)
- id: swiss-fintech-association
  conforms: true
  evidence: Listed member on arf.one/membership/
- id: iamtn
  conforms: true
  evidence: Member of the International Association of Money Transfer Networks
- id: payments-association
  conforms: true
  evidence: Listed member on arf.one/membership/
- id: crypto-valley-association
  conforms: true
  evidence: Listed member on arf.one/membership/ (Crypto Valley Switzerland)
- id: soc2
  conforms: false
  evidence: No SOC 2 report published
- id: iso27001
  conforms: false
  evidence: No ISO 27001 certification published
- id: pci-dss
  conforms: false
  evidence: No PCI DSS attestation published