Security
Secured at every layer
Paxos operates as a regulated financial institution. We hold our signing hardware, code and team to the highest standards.
Paxos is an OCC-regulated national trust bank.
Security
Secured at every layer
Paxos operates as a regulated financial institution. We hold our signing hardware, code and team to the highest standards.
Paxos is an OCC-regulated national trust bank.
Security
Secured at every layer
Paxos operates as a regulated financial institution. We hold our signing hardware, code and team to the highest standards.
Paxos is an OCC-regulated national trust bank.
SOC 1
Type II
Evaluates internal controls over asset custody, transaction execution, fiat/crypto transfers, and reserve reconciliations.
SOC 2
Type II
Independent attestation evaluating security, processing integrity, and confidentiality criteria across architecture.
24x7
Security
Our team monitors the platform continuously and responds rapidly, ensuring resilience.
SOC 1
Type II
Evaluates internal controls over asset custody, transaction execution, fiat/crypto transfers, and reserve reconciliations.
SOC 2
Type II
Independent attestation evaluating security, processing integrity, and confidentiality criteria across architecture.
24x7
Security
Our team monitors the platform continuously and responds rapidly, ensuring resilience.
Examined from every direction
Our enterprise information-security program covers security, availability, privacy, resilience, continuity, and incident response. It’s examined continuously. Independent auditors attest on a regular cycle, and leading independent security firms evaluate the platform, including penetration testing, red-team exercises, and third-party smart-contract audits.
We assume every control will be inspected, and we build so every claim holds up when it is.
Examined from every direction
Our enterprise information-security program covers security, availability, privacy, resilience, continuity, and incident response. It’s examined continuously. Independent auditors attest on a regular cycle, and leading independent security firms evaluate the platform, including penetration testing, red-team exercises, and third-party smart-contract audits.
We assume every control will be inspected, and we build so every claim holds up when it is.
Examined from every direction
Our enterprise information-security program covers security, availability, privacy, resilience, continuity, and incident response. It’s examined continuously. Independent auditors attest on a regular cycle, and leading independent security firms evaluate the platform, including penetration testing, red-team exercises, and third-party smart-contract audits.
We assume every control will be inspected, and we build so every claim holds up when it is.
No single point of failure
The platform runs on multi-region infrastructure with redundancy at every layer. When something breaks, it stays isolated, and the rest of the platform keeps running.
1
Multi-region by design
Infrastructure spans multiple regions with redundancy at every layer, backed by regular disaster recovery testing.
2
Always on watch
Live alerting and threat monitoring feed a security operations team that is on watch every hour of the year.
3
Ready to respond
Paxos has a documented incident-response program with defined severities, on-call teams, and retrospectives.
4
No one acts alone
Multi-party authorization protects asset movements, wallets, and critical infrastructure changes across the platform.
No single point of failure
The platform runs on multi-region infrastructure with redundancy at every layer. When something breaks, it stays isolated, and the rest of the platform keeps running.
1
Multi-region by design
Infrastructure spans multiple regions with redundancy at every layer, backed by regular disaster recovery testing.
2
Always on watch
Live alerting and threat monitoring feed a security operations team that is on watch every hour of the year.
3
Ready to respond
Paxos has a documented incident-response program with defined severities, on-call teams, and retrospectives.
4
No one acts alone
Multi-party authorization protects asset movements, wallets, and critical infrastructure changes across the platform.
No single point of failure
The platform runs on multi-region infrastructure with redundancy at every layer. When something breaks, it stays isolated, and the rest of the platform keeps running.
1
Multi-region by design
Infrastructure spans multiple regions with redundancy at every layer, backed by regular disaster recovery testing.
2
Always on watch
Live alerting and threat monitoring feed a security operations team that is on watch every hour of the year.
3
Ready to respond
Paxos has a documented incident-response program with defined severities, on-call teams, and retrospectives.
4
No one acts alone
Multi-party authorization protects asset movements, wallets, and critical infrastructure changes across the platform.
Up to $1M for critical findings
Through our bug bounty program, researchers who uncover critical security vulnerabilities in the Paxos platform can earn up to $1,000,000 in USDG.
Up to $1M for critical findings
Through our bug bounty program, researchers who uncover critical security vulnerabilities in the Paxos platform can earn up to $1,000,000 in USDG.
Up to $1M for critical findings
Through our bug bounty program, researchers who uncover critical security vulnerabilities in the Paxos platform can earn up to $1,000,000 in USDG.
Get Started
Ready to get started?
SOC reports and detailed security documentation are available under NDA, and our security team can join your review directly.
Get Started
Ready to get started?
SOC reports and detailed security documentation are available under NDA, and our security team can join your review directly.
Get Started
Ready to get started?
SOC reports and detailed security documentation are available under NDA, and our security team can join your review directly.
products
Paxos-Issued Assets
developers
© 2026 paxos. All rights reserved
products
Paxos-Issued Assets
developers