Prividium completes SOC 2 Type II examination

General
,
1

image
image1200×630 53.4 KB

Matter Labs has completed a SOC 2 Type II examination for the Prividium platform, covering security, availability, confidentiality and privacy. It was conducted by Thoropass Assurance, an AICPA-accredited independent audit firm.

The Type I examination earlier this year checked that controls were designed correctly as of May 29. Type II goes further and tests that they operated effectively over a period: in this case July 1 to September 30, 2026. For banks and regulated institutions, the Type II report is usually the document their vendor risk teams require before a platform can go to production. The report is available to customers and qualified prospects under NDA.

SOC 2 attestation is one of the deliverables under TPP-18. The Q3 report listed the Type II audit as underway; it is now complete. Happy to take questions here.

2

A SOC 2 Type II report is what banks ask for before they sign with a vendor, so this shows Prividium is now a commercial product for regulated institutions.

For the Token Assembly it raises a simple question: will Prividium licensing revenue be reported to governance, and is any part of it planned to flow to ZK? I asked about fees in the DTCC thread as well. A single answer covering both would be welcome.