generated: '2026-08-05'
method: searched
probe: true
source: https://trust.zerohash.com/
url: https://trust.zerohash.com/
platform: SafeBase
public_page: https://zerohash.com/security
access: >-
  The landing page and the certification list are public. Reports and sensitive documents sit behind a "Get access"
  request flow, so the artifacts themselves are gated even though the posture is published.
certifications:
- SOC 1 Type 2
- SOC 2 Type 1
- SOC 2 Type 2
- ISO/IEC 27001:2022
- Regulation SCI
- DORA
- GDPR
- CCPA
- 23 NYCRR 500
reports:
- SOC 1 Report
- SOC 2 Report
- Regulation SCI Audit
regulatory:
- FinCEN-registered Money Services Business
- Money Transmitter licenses across 51 US jurisdictions
- New York State BitLicense (NYDFS), held by zerohash liquidity services llc
- FINTRAC Money Services Business registration (Canada)
security_program:
  statement: >-
    zerohash states it maintains a dedicated cybersecurity team and that its information security management system
    satisfies the ISO 27001 and ISO 27002 requirements.
  vulnerability_disclosure: https://zerohash.com/vdp
  see_also: security/zero-hash-vulnerability-disclosure.yml
evidence:
- source: https://trust.zerohash.com/
  http_status: 200
  keywords:
  - soc 1 type 2
  - soc 2 type 2
  - iso/iec 27001:2022
  - regulation sci
  - dora
  - 23 nycrr 500
  - ccpa
  - gdpr
- source: https://zerohash.com/security
  http_status: 200
  keywords:
  - iso 27001
  - soc 2 type 1 & 2
  - gdpr
  - bitlicense
  - bugcrowd