> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rc.cleverhub.co/llms.txt
> Use this file to discover all available pages before exploring further.

# We’re SOC 2 Compliant

> How Hello Clever’s SOC 2 compliance keeps merchant data secure and builds trust, and what the five Trust Service Principles mean for you.

Security and trust are critical in the payment industry. Hello Clever has achieved **SOC 2 compliance**, a rigorous standard for data handling and security, demonstrating that our systems and processes are designed with your security in mind. This page explains what SOC 2 compliance covers, why it matters, and how it benefits you as a merchant.

<Note>
  SOC 2 is not a one-time achievement. It requires ongoing vigilance, regular third-party audits, and adherence to stringent data management practices to maintain. An independent auditor validated that our systems, policies, and procedures meet the standard.
</Note>

***

## What SOC 2 covers

SOC 2 (System and Organization Controls 2) is a compliance standard from the American Institute of CPAs (AICPA) that ensures service providers securely manage customer data. It is built on five Trust Service Principles.

<CardGroup cols={2}>
  <Card title="Security" icon="shield-halved">
    Systems and data are protected from unauthorised access.
  </Card>

  <Card title="Availability" icon="server">
    Systems are accessible and operational to meet customer needs.
  </Card>

  <Card title="Processing integrity" icon="circle-check">
    Data processing is accurate, timely, and secure.
  </Card>

  <Card title="Confidentiality" icon="lock">
    Confidential information is safeguarded from unauthorised disclosure.
  </Card>

  <Card title="Privacy" icon="user-shield">
    Personal information is handled according to customer expectations and industry standards.
  </Card>
</CardGroup>

***

## How it benefits merchants

<CardGroup cols={2}>
  <Card title="Enhanced data security" icon="lock-keyhole">
    Encryption in transit and at rest, advanced threat monitoring, and multi-factor authentication protect payment information and transaction details from breaches and unauthorised access.
  </Card>

  <Card title="Peace of mind from audits" icon="clipboard-check">
    Regular third-party audits verify that security controls are in place and effective over time, so issues are resolved proactively and our compliance status stays current.
  </Card>

  <Card title="Availability and reliability" icon="server">
    Resilient infrastructure, disaster recovery protocols, and redundant systems with scheduled backups keep your business operational during peak times and unexpected surges.
  </Card>

  <Card title="Data integrity and processing" icon="circle-check">
    Accurate, timely processing with complete transaction logs and automated reconciliation makes every transaction traceable, auditable, and easy to reconcile.
  </Card>

  <Card title="Privacy and confidentiality" icon="user-shield">
    Data minimisation, role-based access controls, and compliance with GDPR, CCPA, and other global standards keep your customers’ data treated with care.
  </Card>

  <Card title="Competitive advantage" icon="trophy">
    Working with a SOC 2-compliant provider reinforces customer confidence, reduces risk exposure, and can help you win clients in regulated industries who require it.
  </Card>
</CardGroup>

<Tip>
  For clients in regulated industries, working with SOC 2-compliant partners is often a requirement. Choosing Hello Clever can help you attract customers who value compliance and security.
</Tip>

***

## What’s next

Achieving SOC 2 compliance is a milestone, not a finish line. We continue to invest in our security infrastructure, expand our compliance portfolio, and conduct regular audits so the platform stays secure and compliant. To learn more about our security practices or how SOC 2 compliance benefits your business, reach out to our support team.

<Note>
  If you need our SOC 2 report or other compliance documentation for your own vendor assessment or due-diligence process, contact the support team to request the relevant materials.
</Note>


## Related topics

- [How We Handle Data](/platform-overview/compliance/how-handle-data.md)
- [Anti-Money Laundering (AML) & Counter-Terrorism Financing (CTF)](/platform-overview/compliance/aml-ctf.md)
- [Know Your Customer (KYC)](/platform-overview/compliance/kyc.md)