Bybit, which describes itself as a New Financial Platform with more than 80 million users worldwide, has completed a SOC 2 Type II audit independently conducted by Deloitte.
SOC 2 Type II is an independent assurance framework developed by the American Institute of Certified Public Accountants (AICPA). Unlike a point-in-time assessment, a Type II audit evaluates whether relevant controls operated effectively over a defined review period.
For Bybit, the audit examined measures supporting the company's security and risk-management objectives, including governance, technology, processes and organizational responsibilities.
The company said its security framework is designed to translate broader security objectives into defined responsibilities and coordinated processes across the organization. Management oversight is intended to support consistent implementation of those measures in day-to-day operations.
Bybit said the completion of the audit provides independent assurance regarding the operation of its security controls and represents a further step in its efforts to strengthen security governance.
The company also said the responsibility for user protection extends across its organization, rather than being limited to its security teams.
SOC 2 report adds to existing security certifications
Bybit said the SOC 2 Type II report is intended to provide users, institutional clients and business partners with additional information about its security and risk-management practices.
For users, the independent assessment provides external validation of controls related to sensitive information and service reliability. For institutional clients and partners, the report can provide additional information for security reviews and due diligence.
The audit also forms part of Bybit's broader compliance framework. The company said it complements its existing ISO/IEC 27001 certification and PCI DSS compliance validation, which address different aspects of information security, data protection and payment-card security.
Bybit said the combination of these assessments provides different perspectives on its security and operational controls rather than serving as interchangeable certifications.
The exchange plans to maintain the standards covered by the assessments as its platform and customer base continue to expand. It said findings from independent reviews will be used to identify areas for further improvement.
Bybit said it will continue strengthening its security and compliance capabilities while maintaining its focus on user protection across its global operations.
Arman Shirinyan
Dan Burgin
