Company Updates
Our Security and Privacy Standards: SOC 2 Type II, ISO 27001 and GDPR Compliance

Reah Team

Security and trust are the foundational layer our entire operating system is built upon, allowing global businesses to manage their finances with ease and peace of mind.
We’re excited to share we’ve added independent reviews of our security and privacy practices behind our platform by completing our SOC 2 Type II audit, receiving our ISO 27001 certification and affirming our GDPR compliance.
Each of these frameworks addresses a different part of our security and privacy responsibilities.
SOC 2 Type II tests whether security controls are followed consistently during the assessment period and examines evidence of those controls in use, such as whether access was authorised and reviewed.
ISO 27001 assesses how a company identifies security risks, assigns responsibility for them and puts measures in place to manage them.
Lastly, GDPR governs how personal data is collected, used, stored and deleted, alongside people’s rights over their information. A GDPR assessment reviews those practices against the applicable requirements, including the reasons for processing data, how long it is retained and how requests to access, correct or delete it are handled.
What these certifications and audits mean for our clients: regular assessments of the processes behind the platform you use for how security responsibilities are assigned, how controls are maintained and our commitment to handling personal data in accordance with GDPR.
Security and privacy are ongoing responsibilities. Completing an audit or receiving a certification complements our day-to-day work of managing risks, maintaining controls and handling personal data responsibly.
We’re excited to continue supporting our clients by maintaining the highest standards of security and privacy. These standards support that work and provide a basis for continued review.
Reah is a financial operating system for global businesses — fiat banking, stablecoin treasury, cross-border payments, and AI-native execution on one ledger.
Share this article