Security & Compliance

About the SOC Type I Reports

SOC 1® Type I and SOC 2® Type I — assessing controls over financial reporting and information security respectively:

SOC 1® Type I — A report on the fairness of the presentation of management’s description of Panthertrade’s system and the suitability of the design of the controls relevant to financial reporting to achieve the related control objectives included in the description as of a specified date.
SOC 2® Type I — A report on management’s description of Panthertrade’s system and the suitability of the design of the controls, to provide reasonable assurance that Panthertrade’s principal service commitments and system requirements were achieved based on the applicable trust services criteria relevant to security, availability, and confidentiality as of a specified date.

Why This Matters

As a Securities and Futures Commission-licensed virtual asset trading platform in Hong Kong, obtaining these reports demonstrates Panthertrade's steadfast commitment to operational transparency and robust risk management. Institutional-grade controls and independent assurance form the cornerstone of building lasting trust with our clients and partners.

Requesting Access to the Reports

If you are an existing client or partner of Panthertrade and have a business need to review the SOC reports, please submit your request via email to support@panthertrade.com , specifying the intended purpose. We will assess all requests in accordance with our internal review process and reserve the right to make final determinations on eligibility and the reasonableness of purpose, as well as the right to require applicants to execute a non-disclosure agreement (NDA) and/or other legal documentation. Documents will be provided as soon as practicable following completion of all procedures and confirmation by Panthertrade.

Overview of ISO/IEC 27001 Certification

ISO/IEC 27001 is an information security management standard jointly published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It is the most widely adopted information security framework in the world. Achieving this certification demonstrates that an organisation has established a comprehensive system to effectively protect the information and data it holds against unauthorised access, disclosure or loss, while continuously monitoring and improving the relevant safeguards.

Scope of Certification — The certification covers the key security control areas involved in Panthertrade's provision of digital asset custody and trading services, including access control, data protection, operational security, business continuity, supplier management and incident management. This ensures that every stage — from system development and daily operations to third-party collaboration — is subject to systematic security oversight.

Certification Standard — ISO/IEC 27001 is the leading international standard for information security management systems (ISMS), focused on preserving the confidentiality, integrity, and availability of information. It requires organisations to assess security risks and implement appropriate controls across four themes: Organisational, People, Physical, and Technological. To achieve certification, an organisation undergoes an external audit by an accredited certification body to verify that its ISMS conforms to all applicable requirements. Certification is maintained through periodic surveillance audits and recertification within a three-year cycle.

Why It Matters

As a virtual asset trading platform licensed by the Hong Kong Securities and Futures Commission, obtaining ISO/IEC 27001 certification demonstrates that Panthertrade's information security management has reached an internationally recognised level. The company not only possesses robust technical protection capabilities, but has also embedded security management into every aspect of its daily operations — from staff training and system development to partner selection — all governed by clear policies and standards. For clients, this certification provides independent, objective third-party verification that your assets and personal data are rigorously and systematically protected on the Panthertrade platform.

Request for Certificate

If you are an existing client or partner of the company and have a business need to review the relevant certification certificate, please send an email to support@panthertrade.com to submit your request, specifying the intended purpose. The company will review all requests in accordance with its internal review procedures and reserves the right to make the final determination regarding eligibility and the reasonableness of the stated purpose. Upon approval, the document will be provided as soon as practicable.