Your security,
our priority
State-of-the art security
Security is in our DNA. We’re obsessed with protecting you, your money, and your data. Our platform follows strict security standards, and we empower our community through ongoing education.
Data protection
We use advanced encryption to secure your data and ensure all third-party partners meet strict security and compliance standards before integration.
System monitoring & testing
Our platform is continuously monitored by our Security Operations Centre. We also conduct regular audits and penetration tests to proactively identify and address vulnerabilities.
Team standards
Everyone at Uphold is background checked by accredited vendors. We require ongoing security and privacy training to ensure our team is always prepared to protect your data.
Your security starts with these protections
Verifying your identity adds an extra layer of protection and helps us keep your account and transactions secure.
Create a strong, unique password for your Uphold account. We also use email verification to confirm activity that looks unusual or suspicious.
Turn on 2FA to add an extra level of security if your login details are ever stolen or compromised.
Stay alert to emails or messages pretending to be from Uphold.
If you're unsure whether something is legit, contact us directly here.
Avoid using public Wi-Fi or leaving your device unattended while logged in. Always log out when you’re done, especially in shared environments.
Always use secure internet connections and look for “https” and the padlock in your browser. Keep your device protected with antivirus software, a firewall, and regular updates.
Security at our core
Our proprietary tech—including Reserveledger™ and Reservechain™—audited independently, lets you verify our assets, solvency, and transaction flows. You can check our reserves anytime to confirm your funds are safe.
As a FinCEN Registered Money Services Business (MSB) in the United States, and as an EMD Agent of an Electronic Money Issuer regulated by the FCA in the United Kingdom, Uphold is committed to compliance.
Regulatory compliance & anti-money laundering (AML) controls
We enforce strong KYC and AML controls to support verification and detect suspicious activity, ensuring compliance with laws across the U.S., Europe, and other jurisdictions.
Real-time due diligence for customers, employees, partners, and developers.
Compliance with OFAC regulations, including detection and reporting of unusual activity.
Reporting per the Bank Secrecy Act (BSA), including currency transaction and activity reports.
Adherence to BSA record keeping requirements.
Cooperation with lawful information requests from authorized law enforcement.
Uphold is committed to securing customer accounts and protecting privacy and data. Our technology complies with global laws to safeguard Personally Identifiable Information (PII) in line with top industry standards.
Robust security certifications
We are proud to hold the following certifications, reflecting our commitment to the highest security standards:
SOC 2 type 2 certification
Demonstrates our adherence to stringent information security policies and procedures.
Enhanced Security: Assurance that Uphold uses industry-leading practices to protect your data.
Operational excellence: Confidence in our ability to deliver reliable and high-performing service.
Trust and Transparency: Ongoing commitment to transparency and improving how we safeguard sensitive information.
ISO 27001 certified
Validates our comprehensive Information Security Management System (ISMS).
Enhanced data protection: ISO 27001 enforces strong controls to defend against breaches and cyberattacks.
Legal and regulatory compliance: Certification ensures we meet ISO 27001-aligned legal and industry standards.
Customer trust: ISO 27001 signals our commitment to protecting your data and earning your trust.
Continuous improvement: ISO 27001 drives us to regularly update our security to face new threats.
The payment card industry data security standard PCI/DSS
PCI/DSS is a security standard from Visa, MasterCard, American Express, Discover, and JCB to ensure companies handling card data stay secure. Managed by the PCI Security Standards Council, it protects transactions.
Uphold is one of the first digital currency platforms certified, proving our commitment to data security.