generated: '2026-08-04'
method: searched
probe: true
source: https://mudrex.com/security
url: https://mudrex.com/security
description: >-
  Mudrex's published security and compliance posture. The automated probe
  matched "soc 2" and "iso 27001" on mudrex.com; this file is the searched fill
  from the dedicated /security page, which names the certification versions and
  the audit cadence. Mudrex publishes no downloadable report portal, no
  sub-processor list and no vulnerability-disclosure program — the page is a
  security marketing page rather than a trust center with artifacts.
certifications:
- {name: 'ISO 27001:2022', scope: information security management system, evidence: 'https://mudrex.com/security'}
- {name: 'SOC 2 Type II', cadence: 'continuous independent audit; quarterly reviews, annual re-certification', evidence: 'https://mudrex.com/security'}
registrations:
- name: FIU-IND
  detail: >-
    Registered Virtual Digital Asset Service Provider with India's Financial
    Intelligence Unit ("FIU REGISTERED" badge site-wide).
practices_claimed:
- Secure custody infrastructure and partners (partners not named).
- KYC (PAN & Aadhaar) and TOTP two-factor authentication required before API key issuance.
contacts:
  support: help@mudrex.com
  support_page: https://mudrex.com/support
evidence:
- source: https://mudrex.com/security
  keywords: [soc 2, iso 27001, fiu registered]
  http_status: 200
  fetched: '2026-08-04'
gaps:
- No published vulnerability-disclosure policy, bug bounty, or security@ contact
  (/.well-known/security.txt returned 404 on every host probed 2026-08-04).
- No trust portal serving the SOC 2 report or ISO certificate under NDA.
- No named custody partner, no insurance disclosure, no proof-of-reserves page.