Regulatory & Security

Company Information

Regulatory Status

Certifications & Audits

• SOC 2 Type II

  Not currently certified. Asset Flow maintains internal security and operational controls designed to protect customer information and platform systems.

• ISO 27001

  Not currently certified. Asset Flow continues to review and strengthen its information-security practices in line with recognised industry standards.

Custody & Insurance

• Primary Custodian

  Not applicable. Asset Flow does not rely on a separate third-party custodian for the assets covered by this service.

• Asset Insurance

  Not currently provided. Customers should not assume that digital assets held or processed through the platform are covered by a third-party insurance policy unless explicitly stated in the applicable service terms.

Security & Compliance Commitment

Asset Flow maintains security, access-control, account-protection, monitoring and compliance procedures appropriate to its services. Where independent certifications, audits, custody arrangements or insurance coverage become applicable, relevant information will be disclosed on this page.

Platform Security Infrastructure

At Asset Flow Limited, keeping your account, personal information, and digital assets safe is one of our main priorities. We use several security measures to help protect your information and reduce the risk of unauthorised access.

• 256-bit AES encryption

  Your data is protected with strong 256-bit AES encryption both when it is stored on our systems and when it is being transferred. This helps keep personal and account information unreadable if it is intercepted or accessed without permission.

• Multi-signature wallets

  Digital assets are stored in multi-signature (multi-sig) wallets. Certain transactions require more than one authorised approval before they can be completed, which helps reduce the risk of a single person or compromised device moving funds.

• Two-Factor Authentication (2FA)

  2FA is required for user accounts and administrative access. After a password is entered, a second one-time code is needed to sign in, adding an extra layer of protection if a password is ever exposed.

• Transaction monitoring

  Transactions are monitored automatically to help identify unusual or suspicious activity. Flagged activity can then be reviewed so that potential issues can be looked into promptly.

• Cold storage

  The majority of digital assets are kept in cold storage, meaning they are held offline and kept separate from internet-connected systems. This helps reduce their exposure to online threats.

We continuously review and improve our security systems to help keep the platform and its users protected.