Compliance Overview

At ACC Trading, we´re committed to helping organizations protect privacy and strenghten trust in how they use information and achieve the potential of their digital transformation. Our cloud platform’s infrastructure, applications, and operations have been developed to comply and align with some of the most rigorous legal and regulatory requirements in industries today, including:

Statement on Standards for Attestation Engagements - SSAE

• SSAE 18 → SOC1 / SOC2

International Organization for Standardization - ISO

• ISO 27001
• ISO 27017
• ISO 27018
• ISO 9001
• ISO 27701

Federal Office for Information Security - BSI

• BSI 200-1
• BSI 200-2
• BSI 200-3

National Institute of Standards and Technology - NIST

• NIST 800-53

And others - including:

• NHS Digital Data Security and Protection Toolkit
• NCSC Cloud Security Principles
• DSGVO
• GDPR
• GIAC

We perform regularly penetration tests to ensure our backing infrastructre and operations meet the highest security standards.

The following types of security-assessment activities are performed:

• Port scanning and banner grabbing
• Fuzzing, automated vulnerability scanners, or manually run tools against ACC Trading´s deployment infrastructre
• Attempting to break out from process sandboxing or containerization
• Testing alerting and detection strategies
• Attempting to perform denial of service attacks
• Attempting container escapes, or lateral movement scenarios
• Performing social engineering, phishing, or other employee-targeted attacks

Do not hesitate to reach out to ACC Trading and learn more about security assessments. Customers who would like to perform their own penetration tests can do so under certain conditions, provided the tests are scheduled before the start of an engagement and explicitly permitted by a member of our security team.