Virtual Trader’s information security controls are independently audited every year — and have been certified with no recorded exceptions since 2020.
ISO 27001 : 2022, SOC 1 Type II, and SOC 2 Type II reports are available to customers and prospective customers on request.
OUR COMMITMENT
Security you can audit, not just take on trust.
Virtual Trader sits inside the financial close of some of the world’s largest multinationals. That position sets our design standard. Security is specified, built, and evidenced as part of the product, and it is owned at board level rather than delegated to a policy document.
Our Information Security Management System governs how the platform is built and runs day to day; from how access is granted to how changes reach production. Risks are identified, treated, and re-tested on a continuous cycle, and the same framework applies to the providers on which our platform relies.
Independent auditors examine that system every year and report on how our controls actually operated throughout the period, so what you receive is verified evidence rather than a self-assessment. Our certifications have been maintained continuously, without exception, since our first registration.
For finance, procurement, and IT teams running due diligence on us, that means the answers are already documented and available under NDA.
Annual
ISO 27001, SOC 1, and SOC 2 audits, repeated every year
Independent
Controls tested and reported on by external auditors
Exception-free
Certification maintained continuously since 2020
Three security accreditations.
One posture.
ISO27001 : 2022
The international standard for managing risks to the security of data held by an organization. It defines an Information Security Management System of policies, processes, and registers, mapped to a comprehensive set of controls for the secure storage of customer and employee data while complying with legal requirements such as GDPR.
Audited by Citation Limited
SOC 1 Type II
Developed by the American Institute of Certified Public Accountants, SOC 1 reports reassure customers that their financial data is handled safely and securely. A Type II report demonstrates how those controls operate effectively over a period of time.
Audited by The Moore Group, CPA
SOC 2 Type II
Designed specifically for cloud service providers, SOC 2 demonstrates a robust framework of security controls, policies, and procedures to safeguard customer data. The Type II report evidences the effective operation of those controls across the audit period.
Audited by The Moore Group, CPA
All three reports are available on request.
Current and prospective customers can receive a copy on completion of a non-disclosure agreement.
BEYOND OUR PERIMETER
Oversight of our subservice organizations.
Our security posture includes proactive oversight of the providers underpinning our platform so that every layer of the Virtual Trader ecosystem meets the same standards to which we hold ourselves.
Oracle EBS or OCI Infrastructure
Hosting and platform
Microsoft
Identity and productivity
Atlassian
Change and issue management
We review each provider’s own independent assurance reports as part of an annual due-diligence cycle, and we treat any identified risks through our ISMS.