Security
Apex operates under bank-grade security standards with zero-trust architecture, hardware security modules, and an immutable audit log of every system action — visible to you.
SOC 2
Type II audited
ISO 27001
Certified
PCI DSS
Level 1
FedRAMP
Moderate
Architecture
All data encrypted at rest and in transit using FIPS 140-2 validated cryptography. Keys rotate every 90 days, custody held in FIPS-3 HSMs.
Independently audited annually by Deloitte for security, availability, processing integrity, and confidentiality.
FIDO2 / WebAuthn for enterprise accounts. YubiKey, Touch ID, Face ID, and Windows Hello supported natively.
Every administrative action recorded permanently and verifiably. Exportable as cryptographically signed JSONL.
No implicit trust. Every request authenticated, authorized, and encrypted regardless of origin — internal or external.
EU, UK, US, and APAC data residency. Customer data never leaves your selected jurisdiction.
Insurance
Apex deposits are insured up to $500M per legal entity through our FDIC sweep network, spread across 30+ partner institutions. Every deposit. Every currency. Every account.
Responsible disclosure
Found a vulnerability? Our bug-bounty program pays up to $250,000 for critical issues.
security@apexinternational.io