(Hong Kong, May 8, 2025) HashKey Exchange, the largest licensed virtual asset exchange in Hong Kong, announced today that HashKey Custody Services Limited** (hereinafter referred to as "HashKey Exchange") has successfully passed the dual certification of SOC 1 Type 2 and SOC 2 Type 2, becoming one of the few companies in the industry to obtain both international authoritative certifications. This marks HashKey Exchange's continued progress in compliance and security, providing more trustworthy enterprise-level digital asset services to individual and institutional investors.
HashKey Exchange has obtained two certifications at the same time, demonstrating its professional strength and compliance advantages in the field of digital asset services. Among them, the SOC 1 Type 2 certification focuses on verifying HashKey Exchange's continuous control capabilities in financial reporting accuracy, data integrity and regulatory compliance, while the SOC 2 Type 2 certification confirms its continuous service capabilities in customer data protection, risk management and system stability.
According to the audit report, HashKey Exchange's operations have been fully recognized by the auditing agency in terms of applicability and sustainability. The certification process strictly follows the requirements of Section 100 of the American Institute of Certified Public Accountants' Trust Services Standards TSP, and through multi-dimensional testing and verification including system inspections and risk assessments, it is confirmed that HashKey has always maintained efficient control effectiveness during the audit cycle.
It is worth noting that this dual certification complements HashKey Exchange's existing ISO 27001 information security management system and ISO 27701 privacy information management system, jointly building an industry-leading multi-dimensional compliance system.
The SOC 1 Type 2 report is prepared in accordance with the International Standard on Attestation Engagements No. 3402 (ISAE 3402) issued by the International Auditing and Assurance Standards Board (IAASB), while the SOC 2 Type 2 report is prepared in accordance with the standards of the American Institute of Certified Public Accountants (AICPA). Both certifications are issued by independent auditing agencies after continuous and rigorous monitoring and evaluation of the company, and are therefore widely regarded by global financial institutions as the "gold standard" for measuring the level of corporate compliance operations.
* As of January 31, 2025, HashKey Exchange is ranked 7th on Coingecko and is the highest-ranked licensed virtual asset exchange in Hong Kong.
**Note: Given that the sole function of HashKey Custody Services Limited is to provide services for HashKey Exchange's custodial customer assets, it can be simplified as HashKey Exchange in relevant statements.
About HashKey Exchange
HashKey Exchange is committed to defining new benchmarks for virtual asset exchanges in terms of compliance, fund protection, and platform security. Hash Blockchain Limited (HashKey Exchange) is one of the first licensed retail virtual asset exchanges in Hong Kong. It has been approved by the Securities and Futures Commission (SFC) of Hong Kong and holds Type 1 (Securities Trading) and Type 7 (Providing Automated Trading Services) under the Securities and Futures Ordinance, as well as a virtual asset trading platform license under the Anti-Money Laundering Ordinance, and operates a virtual asset trading platform in compliance with regulations. As the flagship business of HashKey Group, HashKey Exchange provides one-stop virtual asset trading services for professional investors (PI) and retail investors. HashKey Exchange has obtained ISO 27001 (Information Security) and ISO 27701 (Data Privacy) management system certifications. In order to comply with laws and regulations, HashKey Exchange does not provide services to users in mainland China, the United States and certain other jurisdictions. This material has not been reviewed by the Securities and Futures Commission.
