We're excited to share that Monarch has achieved SOC 2 Type II compliance. This independent certification verifies our security practices meet rigorous industry standards for protecting your data.
What is SOC 2 certification?
SOC 2 is like a health inspection for data security. An independent auditor thoroughly examines a company's infrastructure and operations to verify they meet strict standards for security, availability, and confidentiality.
Unlike self-reported security practices, SOC 2 means we opened our doors to outside experts who independently verified our security controls. From how we encrypt your bank connections to how we control employee access and monitor for threats, every aspect of our security has been tested and confirmed.
Why this matters
When you connect all your financial accounts to Monarch, you're trusting us with your complete financial picture. SOC 2 certification provides documented proof that we're protecting that data with rigorous standards and best-in-class practices.
While SOC 2 is a new milestone for us, the underlying security practices are not—we’ve built Monarch with these controls in mind from the beginning. What’s changed is that an independent auditor has now spent months to thoroughly test and verify that we’re operating them effectively over time.
SOC 2 compliance means:
- Independent verification – Third-party auditors confirm our security practices, not just our internal team
- Documented processes – Everything from employee access controls to incident response procedures is tested and verified
- Continuous accountability – We're held to these standards not just once, but on an ongoing basis
- Industry-recognized standards – SOC 2 is one of the most rigorous security certifications available
For our professional partners who use Monarch with clients, SOC 2 provides independent documentation for your compliance needs and the confidence to answer clients who ask whether Monarch is secure.
What's next
Achieving SOC 2 certification is a significant milestone, but security is an ongoing commitment. We'll continue investing in the infrastructure, processes, and team needed to protect your financial data as we grow.
This certification joins our other security measures, including 256-bit encryption, multi-factor authentication, and read-only account access. Together, they create multiple layers of protection for your financial life.
Managing your money requires trust. We're committed to earning that trust every day with actions backed by independent verification and team of experts always keeping up the rigorous controls needed as technology evolves.
