# Blockdaemon

Blockdaemon empowers businesses to manage and deploy blockchain applications through the organization's node management platform. Our platform offers a multi-chain, multi-cloud network management tool that can deploy nodes and provide infrastructure that reduces the complexity of working with blockchains while offering faster deployment times and lower cost.

Industry-leading financial institutions, exchanges, custodians, cryptocurrency platforms and developers trust Blockdaemon as their onramp to over 70 blockchain protocols; making us the number one institutional staking provider by volume.

Blockdaemon was founded in 2017 and is headquartered in Los Angeles.

## Compliance

### Standards:
- ISO 27001:2022
- GDPR
-  SOC 2 Type II

## Resources

### Compliance Reports
- [ISO 27001:2022](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=66db819bc976fc44f4fc6f3b)
- [SOC 2 Type I Report](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=671fe265c5107aa8014dbba1)
- [SOC 2 Type II Report [January 1 - April 30, 2025]](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=683e3246f8e6e337c9cec5e7)
- [SOC 2 Type II Report [May 1 - Oct 31, 2025]](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=6964bd19d324d44bec6ed57f)

### Penetration Tests
- [Blockdaemon Annual Penetration Test - WebApp & API Executive Summary](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=681c004d12e3c3e4eb120b33)
- [MPC Wallets and Vaults - Zellic Audit Report.pdf](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=69a561211d90a7ccdfdce6c5)
- [Exec Summary- MPC Wallets and Vaults - Zellic Audit Report.pdf](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=6a301c97578ca7f7f2887739)

### Risk Management Policies
- [Risk Management Policy](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=668f52b5a4d627ad546f35b4)
- [Third-Party Risk Management Policy](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=668f52b590f80dde8730c131)
- [Acceptable Use Policy](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=668f52ef01aafc5a0e98ce7d)

### Data Security Policies
- [Human Resources Security Policy](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=668f5218ffa17c6a3c7fda12)
- [Operations Security Policy](https://trust.blockdaemon.com/?requestAccessOpen=true&requestedResources=668f528301aafc5a0e98ccc2)

## Controls

### Infrastructure security
- Production Database Authentication — Secure and Unique Credentials
- Privileged Access Restrictions — Production Systems and Authorized Users
- Access Control Procedures — Requesting, Approving, and Removing Access

### Organizational security
- [CCF] Secure Media Sanitization & Equipment Disposal
- Code of Conduct — Maintained, Communicated, and Enforced
- Personnel Performance Evaluations — Periodic and Documented

### Product security
- Secure Software Development Lifecycle (SDLC) Training
- Automated Security Scanning — SAST, IaC, Dependency, and Container Analysis

### Data privacy
- Data retention procedures established
- Data classification policy established
- Data Encryption at Rest

## Data Collected
- Employee personally identifiable information
- Customer personally identifiable information
- Credit card information
- Personal health information

## Subprocessors
- Google Cloud Platform: Cloud Hosting & Data Storage
- Amazon Web Services: Cloud Hosting & Data Storage

## FAQ

### Does Blockdaemon have a Security team or formal Information Security program?

***

### Does Blockdaemon maintain cyber liability insurance?

***

### Does Blockdaemon comply with all industry security standards, laws and regulations applicable to their business?  
www.aicpa.org/soc4soISO 27001:2022 Certificate