> ## Documentation Index
> Fetch the complete documentation index at: https://yieldxyz.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Audits & compliance

> SOC 2 Type II, third-party smart contract audits, ongoing security testing and the material available for due diligence.

## SOC 2 Type II

yield.xyz is SOC 2 Type II certified. Controls are examined continuously over the reporting period, not at a single point in time. The report and related trust artifacts are available on the [Trust Center](https://trust.yield.xyz).

## Audits

Every contract and integration is audited before it goes live.

<CardGroup cols={2}>
  <Card title="Trail of Bits" icon="magnifying-glass">
    Security assessment, Q3 2024
  </Card>

  <Card title="Zellic" icon="file-contract">
    Smart contract audits, Q1 2025 and Q3 2024
  </Card>
</CardGroup>

Public audit reports:

* [Zellic: Smart Contract Security Assessment (OAV), Q1 2025](https://github.com/Zellic/publications/blob/master/StakeKit%20-%20Zellic%20Audit%20Report.pdf)
* [Zellic: Smart Contract Security Assessment (Fee Wrapper), Q3 2024](https://github.com/Zellic/publications/blob/master/StakeKit%20FeeWrapper%20-%20Zellic%20Audit%20Report.pdf)

## Ongoing security practices

* Penetration testing and vulnerability assessments, with tracked remediation cycles
* In-house white-hat security engineers and external security researchers
* A documented review and change-management process before any new protocol or yield goes to production
* 24/7 monitoring of every deployment, with yields moved to maintenance or disabled, and clients notified, if a protocol becomes unsafe

## Regulatory engagement

yield.xyz coordinates proactively with regulators where an integration requires it, including discussions aligned with the requirements of the French Autorité des marchés financiers (AMF) for a French neobank integration.

## Due diligence

Audit summaries, penetration test reports and supporting documentation can be shared under NDA. Contact [security@yield.xyz](mailto:security@yield.xyz) or your account team.

## Next steps

<CardGroup cols={2}>
  <Card title="Trust Center" icon="building-shield" href="https://trust.yield.xyz">
    Security posture and trust artifacts.
  </Card>

  <Card title="Security notice" icon="triangle-exclamation" href="/legal/security-notice">
    Incident history, active notices and how to report a vulnerability.
  </Card>
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.