Skip to main content

​
SOC 2 Type II

yield.xyz is SOC 2 Type II certified. Controls are examined continuously over the reporting period, not at a single point in time. The report and related trust artifacts are available on the Trust Center.

​
Audits

Every contract and integration is audited before it goes live.

Trail of Bits

Security assessment, Q3 2024

Zellic

Smart contract audits, Q1 2025 and Q3 2024
Public audit reports:

​
Ongoing security practices

  • Penetration testing and vulnerability assessments, with tracked remediation cycles
  • In-house white-hat security engineers and external security researchers
  • A documented review and change-management process before any new protocol or yield goes to production
  • 24/7 monitoring of every deployment, with yields moved to maintenance or disabled, and clients notified, if a protocol becomes unsafe

​
Regulatory engagement

yield.xyz coordinates proactively with regulators where an integration requires it, including discussions aligned with the requirements of the French Autorité des marchés financiers (AMF) for a French neobank integration.

​
Due diligence

Audit summaries, penetration test reports and supporting documentation can be shared under NDA. Contact security@yield.xyz or your account team.

​
Next steps

Trust Center

Security posture and trust artifacts.

Security notice

Incident history, active notices and how to report a vulnerability.