# Trust center: security for African institutions | Arrel

URL: https://arreltech.com/company/trust-center

> Arrel's trust center: independent audits, the perimeter and compliance on every transfer for African financial institutions.

# Trust, built for African financial institutions.

Certifications, the perimeter Arrel works within, and how compliance runs on every transfer.

[Talk to us](https://arreltech.com/company/contact-sales) [Request sandbox](https://arreltech.com/developers#sandbox)

## Independently audited against recognised standards.

![ISO 27001 certification mark](https://arreltech.com/images/compliance/iso-27001.png) **ISO 27001** Certified [![AICPA SOC 2 Type II](https://arreltech.com/images/compliance/soc-2-type-ii.png)](https://www.aicpa.org/soc4so) **SOC 2 Type II** Examined

ISO 27001 covers how Arrel manages information security risk. SOC 2 Type II is an independent examination of how Arrel's security controls operated over time.

## Operational track record.

What DAPL runs in production today.

$5B+

in orchestrated volume

50M+

fully automated trades

$300M

of transactional flows since 2024

99.9%

server uptime

## How trust works on DAPL.

01

### The perimeter

DAPL is deployed inside the client's own regulatory perimeter or a licensed partner's. Arrel is a technology provider: it does not hold client assets and is never the regulated party.

02

### Compliance on every transfer

KYT screening with Chainalysis or LedgerBrain, KYC checks with Sumsub, AML monitoring and approvals run before funds move, under the institution's rules.

03

### Data protection

Client data stays within the client's perimeter. Each institution's records are kept to its own controls and agreements.

04

### One record per movement

Every transfer records who requested and approved it, which checks ran and which provider handled it, ready for auditors and regulators.

## Request reports for your due diligence.

For risk, security and procurement teams at institutions evaluating DAPL.

NameWork email

InstitutionReport

## Security and compliance, answered.

Is Arrel ISO 27001 certified?

Yes. Arrel is certified to ISO 27001 for information security management.

Has Arrel completed a SOC 2 examination?

Yes. Arrel has completed a SOC 2 Type II examination, which tests how its security controls operated over a period of time. The report is available on request.

Does Arrel hold client assets?

No. Assets stay with the custody technology the institution chooses. Arrel is a technology provider and is never the regulated party.

How are compliance checks enforced?

Screening (KYT), identity checks (KYC) and approvals run before funds move. A transfer that fails a check is held in the institution's custody.

Where does client data stay?

Client data stays within the client's perimeter, under the institution's own controls and agreements.