Matium Trust Center
Matium Trust Center Updates
Matium Completes SOC 2 Type II Now Covering Security and Confidentiality
Raising the Bar: Matium Completes SOC 2 Type II Compliance with Expanded Confidentiality Coverage.
We're pleased to share that Matium has successfully completed its second annual SOC 2 Type II examination, expanding this year's scope to include the Confidentiality Trust Services Category alongside Security.
For our customers, this expanded scope translates into two concrete guarantees. Core-Internal data, the information specific to your organization's activity on the platform, remains yours: Matium does not claim ownership of customer data. The Confidentiality controls validated in this audit, covering how we classify, protect, and handle sensitive information, are the operational backbone behind that commitment: it's not just a policy statement, it's something an independent auditor has now tested.
The independent audit, conducted by Insight Assurance for the period June 1, 2025 through May 31, 2026, resulted in an unqualified opinion: our controls were suitably designed and operating effectively throughout the period to meet our service commitments. Adding Confidentiality to our scope reflects our growing investment in protecting the sensitive transaction and pricing data our customers entrust to the platform.
Thank you to our partners and stakeholders for your continued trust as we invest in the security and compliance program behind Matium.
Bailey Robin, CEO.
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Product Security
We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
App Security
We take application security seriously and are putting together a program to monitor internal apps.
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Infrastructure
We take great care to work with best-in-class infrastructure providers that provide secure computing and storage. We are happy to provide more details about our infrastructure upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.