Hong Kong’s Largest Virtual Asset Exchange Achieves Compliance and Security Milestone
HashKey Exchange, Hong Kong’s largest licensed virtual asset exchange, announced on May 8 that its flagship business, HashKey Custody Services Limited (hereinafter referred to as “HashKey Exchange”), has successfully obtained dual certifications of SOC 1 Type 2 and SOC 2 Type 2, becoming one of the few companies in the industry to achieve both international authoritative certifications.
This marks the continued progress of HashKey Exchange in compliance and security, providing more reliable enterprise-level digital asset services for individual and institutional investors.
The simultaneous acquisition of these two certifications highlights HashKey Exchange’s professional strength and compliance advantages in the digital asset service sector. The SOC 1 Type 2 certification focuses on verifying HashKey Exchange’s ongoing control capabilities in financial reporting accuracy, data integrity, and regulatory compliance, while the SOC 2 Type 2 certification confirms its ongoing service capabilities in customer data protection, risk management, and system stability.
According to the audit report, HashKey Exchange’s operations have received comprehensive recognition from the auditing body in terms of applicability and sustainability. The certification process strictly follows the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria TSP Section 100 requirements, and through multidimensional testing, including system checks and risk assessments, it has been verified that HashKey maintained effective control throughout the audit period.
Notably, this dual certification complements HashKey Exchange’s existing ISO 27001 information security management system and ISO 27701 privacy information management system, collectively establishing an industry-leading multidimensional compliance framework.
The SOC 1 Type 2 report is prepared based on the International Auditing and Assurance Standards Board (IAASB) International Standard on Assurance Engagements 3402 (ISAE 3402), while the SOC 2 Type 2 report is based on standards issued by the AICPA. Both certifications are issued after independent auditing firms conduct ongoing rigorous monitoring and evaluation of the company, and are widely regarded by global financial institutions as the “gold standard” for measuring a company’s compliance operational level.
* As of January 31, 2025, HashKey Exchange ranks 7th on Coingecko, the highest-ranked licensed virtual asset exchange in Hong Kong.
Note: Given that the sole function of HashKey Custody Services Limited is to provide services for the custody of clients’ assets at HashKey Exchange, it can be simplified to HashKey Exchange in related statements.
About HashKey Exchange
HashKey Exchange aims to set a new benchmark for virtual asset exchanges in compliance, capital protection, and platform security. Hash Blockchain Limited (HashKey Exchange) is one of the first licensed retail virtual asset exchanges in Hong Kong. It has been approved by the Securities and Futures Commission (SFC) of Hong Kong and holds licenses under the Securities and Futures Ordinance for Type 1 (securities trading) and Type 7 (providing automated trading services), as well as a license for operating virtual asset trading platforms under the Anti-Money Laundering Ordinance, ensuring compliant operation of the virtual asset trading platform. As the flagship business of HashKey Group, HashKey Exchange provides one-stop virtual asset trading services for professional investors (PIs) and retail investors. HashKey Exchange has obtained ISO 27001 (Information Security) and ISO 27701 (Data Privacy) management system certifications. To comply with laws and regulations, HashKey Exchange does not provide services to users in Mainland China, the United States, and certain other jurisdictions. This material has not been reviewed by the Securities and Futures Commission.
For more details, please visit HashKey Exchange. Follow us on Twitter and LinkedIn.
Media inquiries, please contact: [email protected]
Disclaimer
Advertising Disclaimer: This article is provided by the contributor and does not represent the views of the editorial team. This article is not intended to provide any investment, asset advice, or legal opinions and should not be construed as an offer to buy, sell, or hold assets. Any services, programs, or tools mentioned in the advertising content are for reference only, and the final actual content or rules are subject to the announcements or explanations by the contributor. The editorial team is not responsible for any potential risks or losses and reminds readers to conduct due diligence before making any decisions or actions.
