Compliance & Security
Enterprise-grade security and compliance standards to protect your data and meet regulatory requirements.
Compliance Standards
SOC 2 Type II
Security, availability, processing integrity, confidentiality, and privacy controls aligned toward SOC 2 expectations.
ISO 27001
Information security management practices informed by ISO/IEC 27001 guidance.
GDPR
We publish GDPR-related notices and provide rights request channels for EU/EEA users.
CCPA
We publish CCPA-related notices and provide rights request channels for California consumers.
HIPAA
LicenseChain is not a HIPAA covered entity or business associate by default; contact us before processing protected health information.
PCI DSS
Card payments are processed by PCI DSS–compliant third-party payment partners; LicenseChain does not store full card numbers.
Security Features
End-to-End Encryption
All data is encrypted in transit and at rest using industry-standard AES-256 encryption.
Multi-Factor Authentication
Mandatory MFA for all administrative access and optional for end users.
Role-Based Access Control
Granular permissions and access controls based on user roles and responsibilities.
Audit Logging
Comprehensive audit trails for all system activities and user actions.
Seller payout compliance
Default seller payouts are USDC on Base and may run through automated dashboard payout systems when eligibility rules are met. Bank/SEPA transfers are manual, require business verification (KYB), and are limited to verified B2B cases that meet minimum matured balance and beneficiary-matching rules. See Terms — Seller Payouts and Settlements.
Data Residency
Choose your data storage location to meet regional compliance requirements.
Regular Security Audits
Third-party security assessments and penetration testing on a regular basis.
Need More Information?
Contact our compliance team for detailed information about our security practices and compliance certifications.