# What Are the Key Differences between a SOC 1 and SOC 2 Report for a Crypto Custodian? ▴ Question

**Published:** 2025-08-09
**Categories:** Question

---

![A precisely engineered system features layered grey and beige plates, representing distinct liquidity pools or market segments, connected by a central dark blue RFQ protocol hub. Transparent teal bars, symbolizing multi-leg options spreads or algorithmic trading pathways, intersect through this core, facilitating price discovery and high-fidelity execution of digital asset derivatives via an institutional-grade Prime RFQ](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-protocol-engine-facilitating-high-fidelity-multi-leg-options-spread-execution-best-price-discovery-and-latent-liquidity-access-for-prime-brokerage.jpg)

![A precision institutional interface features a vertical display, control knobs, and a sharp element. This RFQ Protocol system ensures High-Fidelity Execution and optimal Price Discovery, facilitating Liquidity Aggregation](https://options.greeks.live/wp-content/uploads/2025/08/institutional-digital-asset-derivatives-rfq-execution-platform-interface.jpg)

## Concept

In the domain of digital asset custody, the terms SOC 1 and SOC 2 represent two distinct diagnostic lenses for evaluating the [operational integrity](https://prime.greeks.live/area/operational-integrity/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) of a service organization. They are foundational pillars of due diligence, yet their purposes are fundamentally different, addressing separate facets of risk within a custodian’s ecosystem. An institutional client’s selection of a [crypto custodian](https://prime.greeks.live/area/crypto-custodian/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) hinges on a precise understanding of what each report attests to, as this knowledge directly informs the client’s own risk management framework. The application of these established attestation standards to the nascent field of crypto custody provides a vital bridge between traditional financial discipline and the unique technological challenges of decentralized assets.

A [SOC 1 report](https://prime.greeks.live/area/soc-1-report/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite), formally known as a Report on Controls at a Service Organization Relevant to User Entities’ Internal Control over [Financial Reporting](https://prime.greeks.live/question/what-is-the-role-of-an-approved-reporting-mechanism-arm-in-the-mifir-transaction-reporting-protocol/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) (ICFR), is tailored to the financial dimension. Its primary function is to provide assurance to a custodian’s clients that the custodian’s internal controls are designed and operating effectively to prevent or detect errors that could affect the client’s own financial statements. For a crypto custodian, this translates to controls over the accuracy of reported asset balances, the correct processing of transactions that have a financial impact, and the valuation methodologies applied to the digital assets held in custody. The audience for this report is specific ▴ the client’s management and their external financial auditors, who will rely on it to assess the risk of material misstatement in their own financial reporting chain.

> A SOC 1 report provides a focused examination of a custodian’s internal controls as they pertain to the integrity of a client’s financial statements.

Conversely, a [SOC 2 report](https://prime.greeks.live/area/soc-2-report/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) addresses a broader and more technological set of concerns. It is structured around the American Institute of Certified Public Accountants’ (AICPA) [Trust Services Criteria](https://prime.greeks.live/area/trust-services-criteria/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) ▴ Security, Availability, Processing Integrity, Confidentiality, and Privacy. For a crypto custodian, where the core service is the safeguarding of cryptographic keys and the facilitation of on-chain transactions, the SOC 2 report is of paramount importance. It delves into the very architecture of the custodian’s security and operational systems.

The mandatory Security criterion, for instance, examines the controls in place to protect against unauthorized access, both logical and physical, which is the bedrock of preventing asset theft. The other criteria, while optional, provide further insight into the system’s resilience, accuracy, and data protection protocols. This report serves a wide array of stakeholders, including institutional investors, regulators, and partners, who require assurance that the custodian’s platform is fundamentally secure and reliable.

The distinction is therefore one of focus. A SOC 1 report looks inward at the financial reporting controls that support a client’s accounting records. A SOC 2 report looks at the operational and technological fortress that protects the client’s assets and data. For an institution evaluating a crypto custodian, both reports offer valuable, yet non-overlapping, insights into the custodian’s operational maturity and commitment to risk management.

![Abstract depiction of an advanced institutional trading system, featuring a prominent sensor for real-time price discovery and an intelligence layer. Visible circuitry signifies algorithmic trading capabilities, low-latency execution, and robust FIX protocol integration for digital asset derivatives](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-prime-os-high-fidelity-rfq-protocols.jpg)

![A sleek, dark teal, curved component showcases a silver-grey metallic strip with precise perforations and a central slot. This embodies a Prime RFQ interface for institutional digital asset derivatives, representing high-fidelity execution pathways and FIX Protocol integration](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-protocol-engine.jpg)

## Strategy

An institution’s strategy for leveraging [SOC reports](https://prime.greeks.live/area/soc-reports/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) in the selection and ongoing monitoring of a crypto custodian must be rooted in a clear understanding of its own risk priorities. The choice between, or the demand for both, SOC 1 and SOC 2 reports is a strategic decision that aligns the institution’s [due diligence process](https://prime.greeks.live/area/due-diligence-process/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) with the specific services being consumed. It is a process of mapping the custodian’s attested controls to the institution’s own operational and regulatory obligations.

![Abstract layers in grey, mint green, and deep blue visualize a Principal's operational framework for institutional digital asset derivatives. The textured grey signifies market microstructure, while the mint green layer with precise slots represents RFQ protocol parameters, enabling high-fidelity execution, private quotation, capital efficiency, and atomic settlement](https://options.greeks.live/wp-content/uploads/2025/07/prime-os-layered-rfq-protocol-for-digital-asset-execution-system.jpg)

## Delineating Attestation Objectives

The strategic value of these reports emerges from their differing objectives. A SOC 1 report is driven by control objectives defined by the custodian’s management, tailored to their specific services’ impact on client financial reporting. An institution’s finance and compliance teams would scrutinize this report to ensure that the custodian’s processes for trade settlement, asset valuation, and reporting of holdings are robust and auditable. Any deficiencies noted in a SOC 1 report could signal a direct risk to the integrity of the institution’s own financial statements.

A SOC 2 report, however, is benchmarked against the standardized Trust [Services Criteria](https://prime.greeks.live/question/how-should-kpis-in-an-it-services-rfp-differ-for-cloud-services-versus-on-premise-infrastructure/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) (TSC). This provides a consistent and widely recognized framework for evaluation. An institution’s Chief Information Security Officer (CISO) and technology risk teams would lead the analysis of a SOC 2 report. Their focus would be on the technical and procedural safeguards protecting the assets.

For a crypto custodian, this is where the core custodial risks lie. The security, availability, and integrity of the systems that manage private keys, authorize transactions, and interact with blockchain networks are the primary determinants of the custodian’s ability to prevent loss.

> Strategically, a SOC 1 report validates financial process integrity, while a SOC 2 report validates the security and operational resilience of the technology platform.

![An abstract digital interface features a dark circular screen with two luminous dots, one teal and one grey, symbolizing active and pending private quotation statuses within an RFQ protocol. Below, sharp parallel lines in black, beige, and grey delineate distinct liquidity pools and execution pathways for multi-leg spread strategies, reflecting market microstructure and high-fidelity execution for institutional grade digital asset derivatives](https://options.greeks.live/wp-content/uploads/2025/08/institutional-digital-asset-derivatives-rfq-protocol-displaying-multi-leg-execution-status-and-optimal-liquidity-pathways.jpg)

## A Comparative Framework for Crypto Custodians

To effectively compare the strategic utility of each report, an institution can map the report’s focus to the specific risks inherent in crypto custody. The following table illustrates this delineation:

| Attribute | SOC 1 Report | SOC 2 Report |
| --- | --- | --- |
| Primary Focus | Internal Controls over Financial Reporting (ICFR) | Trust Services Criteria (Security, Availability, etc.) |
| Core Question Answered | Are the custodian’s controls sufficient to ensure accurate financial reporting of my assets? | Are the custodian’s systems secure, available, and resilient enough to protect my assets from theft or loss? |
| Primary Institutional Audience | CFO, Finance/Accounting Teams, External Auditors | CISO, Technology Risk Teams, Operational Due Diligence Teams, Regulators |
| Crypto Custody Example Controls | Controls over the accuracy of daily position reports; controls for reconciling on-chain balances to sub-ledger records; controls over the application of a consistent valuation policy. | Controls over private key lifecycle management (generation, storage, usage); multi-party computation (MPC) or hardware security module (HSM) implementation; disaster recovery and business continuity plans for system availability. |
| Governing Standard | Statement on Standards for Attestation Engagements (SSAE) No. 18 | AICPA Trust Services Criteria |

![Two abstract, segmented forms intersect, representing dynamic RFQ protocol interactions and price discovery mechanisms. The layered structures symbolize liquidity aggregation across multi-leg spreads within complex market microstructure](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-protocol-microstructure.jpg)

## The Strategic Interplay of Type I and Type II Reports

Within both SOC 1 and SOC 2 frameworks, the distinction between a Type I and [Type II report](https://prime.greeks.live/area/type-ii-report/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) is also of strategic importance.

- **Type I Report** ▴ This report attests to the suitability of the design of a custodian’s controls as of a specific date. It is a valuable first step, confirming that the custodian has a coherent control framework on paper. However, it offers no assurance that these controls are actually being followed consistently.

- **Type II Report** ▴ This report goes further by testing the operating effectiveness of the controls over a period, typically six to twelve months. For any institution placing significant assets with a custodian, a Type II report is the strategic standard. It provides evidence that the controls are not just well-designed but are also integrated into the daily operations of the organization.

An institution’s [due diligence](https://prime.greeks.live/area/due-diligence/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) process might accept a Type I report from a new or emerging custodian as a baseline, with the expectation that a Type II report will be produced within a reasonable timeframe. For an established custodian, the absence of a recent Type II report would be a significant red flag, indicating a potential lack of maturity in their control environment.

![Abstract metallic components, resembling an advanced Prime RFQ mechanism, precisely frame a teal sphere, symbolizing a liquidity pool. This depicts the market microstructure supporting RFQ protocols for high-fidelity execution of digital asset derivatives, ensuring capital efficiency in algorithmic trading](https://options.greeks.live/wp-content/uploads/2025/07/precision-engineered-institutional-digital-asset-derivatives-prime-os-architecture-driving-rfq-protocol-execution-and-capital-efficiency-optimization.jpg)

![A precision-engineered component, like an RFQ protocol engine, displays a reflective blade and numerical data. It symbolizes high-fidelity execution within market microstructure, driving price discovery, capital efficiency, and algorithmic trading for institutional Digital Asset Derivatives on a Prime RFQ](https://options.greeks.live/wp-content/uploads/2025/07/high-fidelity-execution-engine-core-for-institutional-digital-asset-derivatives-rfq-protocol-price-discovery.jpg)

## Execution

Executing a due diligence process that effectively incorporates SOC 1 and SOC 2 reports requires a granular, evidence-based approach. For an institutional investor or a fund, this moves beyond simply confirming the existence of a report to a detailed analysis of its contents. The execution phase is about dissecting the report to extract actionable intelligence about the crypto custodian’s operational and security posture.

![Sleek metallic system component with intersecting translucent fins, symbolizing multi-leg spread execution for institutional grade digital asset derivatives. It enables high-fidelity execution and price discovery via RFQ protocols, optimizing market microstructure and gamma exposure for capital efficiency](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-trading-system-rfq-protocols.jpg)

## A Procedural Guide to Analyzing a Crypto Custodian’s SOC 2 Report

Given the primacy of security in the [digital asset](https://prime.greeks.live/area/digital-asset/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) space, the SOC 2 report often commands the most immediate attention. A systematic review is essential. The following procedure outlines the key steps for an institution’s risk and security teams:

- **Verification of Scope** ▴ Confirm which of the five [Trust Services](https://prime.greeks.live/question/how-do-the-soc-2-trust-services-criteria-apply-to-the-risks-of-crypto-custody/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite) Criteria are included in the report. The Security criterion is mandatory, but the inclusion of Availability, Processing Integrity, Confidentiality, and Privacy demonstrates a broader commitment to operational excellence. For a custodian, Availability is particularly significant, as it provides assurance about the institution’s ability to access its assets and transact when needed.

- **Review of the Auditor’s Opinion** ▴ The auditor’s opinion is the most critical component. An “unqualified” opinion indicates that the auditor found the custodian’s controls to be suitably designed and, for a Type II report, operating effectively. A “qualified” opinion points to one or more material issues. An “adverse” opinion is a major red flag, suggesting widespread control failures. Any opinion other than unqualified demands a deep investigation into the noted exceptions.

- **Analysis of Control Descriptions** ▴ The body of the report will detail the specific controls the custodian has implemented to meet the Trust Services Criteria. This is where the technical due diligence occurs. The team should look for controls specifically relevant to the crypto environment, such as:

<li>**[Private Key Management](https://prime.greeks.live/area/private-key-management/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite)** ▴ Detailed policies and procedures for the generation, storage, usage, and destruction of private keys. This should specify the use of technologies like Hardware Security Modules (HSMs) or Multi-Party Computation (MPC).

- **Access Controls** ▴ Both logical and physical access controls. This includes multi-factor authentication for systems, role-based access controls to limit privileges, and physical security for data centers and cold storage hardware.

- **Transaction Authorization** ▴ Controls to ensure that all outgoing transactions are legitimate and properly authorized, often involving multi-signature schemes or quorum-based approvals.

- **Change Management** ▴ Processes for managing changes to the production environment to prevent the introduction of vulnerabilities.

</li>
- **Scrutiny of a Type II Report’s Test Results** ▴ In a Type II report, the auditor will describe the tests performed and the results. Any “exceptions” noted mean that a control did not operate as intended during the testing period. The institution must evaluate the nature, frequency, and potential impact of these exceptions and assess the adequacy of management’s response.

![An abstract, multi-component digital infrastructure with a central lens and circuit patterns, embodying an Institutional Digital Asset Derivatives platform. This Prime RFQ enables High-Fidelity Execution via RFQ Protocol, optimizing Market Microstructure for Algorithmic Trading, Price Discovery, and Multi-Leg Spread](https://options.greeks.live/wp-content/uploads/2025/08/institutional-grade-digital-asset-derivatives-trading-platform-powering-high-fidelity-execution-via-advanced-rfq-protocol-prime-os-intelligence-layer.jpg)

## Key Control Areas in a Crypto Custodian’s SOC 1 Report

While the SOC 2 report covers the security of the underlying platform, the SOC 1 report provides assurance over the financial transaction lifecycle. An institution’s finance team should focus on the following control areas within the report:

- **Client Onboarding and Account Setup** ▴ Controls to ensure that new client accounts and wallet addresses are set up correctly.

- **Contribution and Withdrawal Processing** ▴ Controls to ensure that inbound and outbound asset movements are accurately recorded in the custodian’s sub-ledger.

- **Reporting Accuracy** ▴ Controls over the generation of client statements and data feeds, ensuring that reported balances and transaction histories are complete and accurate.

- **Valuation and Pricing** ▴ For custodians that provide valuation services, controls over the sources and methodologies used to price digital assets, ensuring consistency and accuracy.

> A thorough execution of due diligence involves not just verifying the presence of a SOC report, but forensically examining its contents for specific, relevant control evidence.

![Sleek, layered surfaces represent an institutional grade Crypto Derivatives OS enabling high-fidelity execution. Circular elements symbolize price discovery via RFQ private quotation protocols, facilitating atomic settlement for multi-leg spread strategies in digital asset derivatives](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-trading-system-core.jpg)

## Comparative Analysis of SOC Report Findings

The table below provides a sample of specific control objectives and potential findings that an institution might look for when executing a review of a crypto custodian’s SOC reports.

| Report Type | Control Objective / Trust Service Criterion | Example of a Strong Control (What to Look For) | Example of a Weakness or Exception (Red Flag) |
| --- | --- | --- | --- |
| SOC 2 (Security) | Private Key Security | Private keys are generated in a certified HSM, with key shares distributed among multiple, geographically separate fiduciaries under dual control. | The auditor’s tests found three instances where a former employee’s access to a key management system was not revoked within the 24-hour SLA. |
| SOC 2 (Availability) | System Redundancy | The production system is fully replicated in a separate availability zone, with automated failover tested quarterly and a documented RTO/RPO of under one hour. | The annual disaster recovery test failed to meet the stated Recovery Time Objective (RTO), and a remediation plan is not yet complete. |
| SOC 1 | Accuracy of Client Reporting | An automated reconciliation is performed hourly between the on-chain balances of all custody wallets and the client-facing sub-ledger, with any discrepancies flagged for immediate investigation. | The description of controls notes that the reconciliation between the sub-ledger and the blockchain is a manual, end-of-day process, introducing a risk of intra-day reporting errors. |

Ultimately, the execution of SOC report analysis is an active, investigative process. It transforms the attestation from a static compliance document into a dynamic source of intelligence, enabling an institution to make a truly informed and defensible decision about its choice of a crypto custodian.

![A precision-engineered metallic cross-structure, embodying an RFQ engine's market microstructure, showcases diverse elements. One granular arm signifies aggregated liquidity pools and latent liquidity](https://options.greeks.live/wp-content/uploads/2025/07/institutional-rfq-engine-microstructure-for-atomic-settlement.jpg)

## References

- A-LIGN. (2023). SOC 1 vs SOC 2 ▴ What’s The Difference? 

- Aprio. (2025). SOC 1 vs. SOC 2 ▴ Key Differences for Compliance and Security.

- Bakkt. (2023). Your allies in choosing a crypto custodian ▴ SOC reports.

- Cryptio. (2023). SOC-compliance and enterprise security ▴ a deep dive into crypto accounting software with Cryptio.

- American Institute of Certified Public Accountants. (2017). SOC 2® – Reporting on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy.

- Statement on Standards for Attestation Engagements (SSAE) No. 18, Attestation Standards ▴ Clarification and Recodification.

- COSO. (2013). Internal Control ▴ Integrated Framework.

![Stacked precision-engineered circular components, varying in size and color, rest on a cylindrical base. This modular assembly symbolizes a robust Crypto Derivatives OS architecture, enabling high-fidelity execution for institutional RFQ protocols](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-rfq-protocol-architecture-optimized-for-high-fidelity-execution.jpg)

## Reflection

The integration of SOC 1 and SOC 2 reports into the due diligence framework for crypto custodians represents a maturation of the digital asset ecosystem. These attestations provide a structured language for risk, translating the abstract complexities of blockchain technology into the established lexicon of institutional control assurance. An institution’s ability to not only request these reports but to dissect them with precision is a direct reflection of its own operational sophistication. The insights gleaned from these documents are critical inputs into the architecture of a resilient digital asset strategy.

They empower an institution to move beyond trust based on reputation alone, to a state of verified confidence grounded in audited, evidence-based control frameworks. The ultimate objective is the construction of a custodial relationship that is a source of strategic strength, built upon a foundation of demonstrable security and financial integrity.

![Abstract depiction of an institutional digital asset derivatives execution system. A central market microstructure wheel supports a Prime RFQ framework, revealing an algorithmic trading engine for high-fidelity execution of multi-leg spreads and block trades via advanced RFQ protocols, optimizing capital efficiency](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-prime-os-rfq-execution-system-1.jpg)

## Glossary

<a href="https://prime.greeks.live/area/operational-integrity/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A multifaceted, luminous abstract structure against a dark void, symbolizing institutional digital asset derivatives market microstructure. Its sharp, reflective surfaces embody high-fidelity execution, RFQ protocol efficiency, and precise price discovery](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-trading-protocol-architecture-optimizing-high-fidelity-rfq-execution-and-latent-liquidity-discovery.jpg)

## Operational Integrity

Meaning ▴ Operational Integrity refers to the unwavering assurance that all processes, systems, and data within a trading or market infrastructure function consistently, correctly, and reliably as designed, maintaining a deterministic state under all operational loads and market conditions. </a><a href="https://prime.greeks.live/area/crypto-custodian/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A translucent blue algorithmic execution module intersects beige cylindrical conduits, exposing precision market microstructure components. This institutional-grade system for digital asset derivatives enables high-fidelity execution of block trades and private quotation via an advanced RFQ protocol, ensuring optimal capital efficiency](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-core-execution-architecture-intelligence-layer.jpg)

## Crypto Custodian

Meaning ▴ A Crypto Custodian is a specialized financial technology entity providing secure, institutional-grade storage and management services for cryptographic assets on behalf of clients. </a><a href="https://prime.greeks.live/question/what-is-the-role-of-an-approved-reporting-mechanism-arm-in-the-mifir-transaction-reporting-protocol/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A sleek pen hovers over a luminous circular structure with teal internal components, symbolizing precise RFQ initiation. This represents high-fidelity execution for institutional digital asset derivatives, optimizing market microstructure and achieving atomic settlement within a Prime RFQ liquidity pool](https://options.greeks.live/wp-content/uploads/2025/07/optimizing-digital-asset-derivatives-rfq-through-prime-os-precision.jpg)

## Financial Reporting

An ARM is a specialized intermediary that validates and submits transaction reports to regulators, enhancing data quality and reducing firm risk. </a><a href="https://prime.greeks.live/area/soc-1-report/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A sophisticated dark-hued institutional-grade digital asset derivatives platform interface, featuring a glowing aperture symbolizing active RFQ price discovery and high-fidelity execution. The integrated intelligence layer facilitates atomic settlement and multi-leg spread processing, optimizing market microstructure for prime brokerage operations and capital efficiency](https://options.greeks.live/wp-content/uploads/2025/07/institutional-crypto-derivatives-rfq-engine-intelligence-layer.jpg)

## Soc 1 Report

Meaning ▴ A SOC 1 Report represents an independent audit opinion on the effectiveness of a service organization's internal controls relevant to a user entity's financial reporting. </a><a href="https://prime.greeks.live/area/trust-services-criteria/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![An abstract composition of interlocking, precisely engineered metallic plates represents a sophisticated institutional trading infrastructure. Visible perforations within a central block symbolize optimized data conduits for high-fidelity execution and capital efficiency](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-protocols-multi-leg-execution-layer.jpg)

## Trust Services Criteria

Meaning ▴ Trust Services Criteria (TSC) represent a set of authoritative principles and related criteria developed by the American Institute of Certified Public Accountants (AICPA) for evaluating the effectiveness of controls over information and systems. </a><a href="https://prime.greeks.live/area/soc-2-report/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![Precision-engineered, stacked components embody a Principal OS for institutional digital asset derivatives. This multi-layered structure visually represents market microstructure elements within RFQ protocols, ensuring high-fidelity execution and liquidity aggregation](https://options.greeks.live/wp-content/uploads/2025/07/principal-os-architecture-for-institutional-digital-asset-derivatives-rfq.jpg)

## Soc 2 Report

Meaning ▴ A SOC 2 Report, or Service Organization Control 2 Report, constitutes an independent auditor's attestation regarding a service organization's controls relevant to security, availability, processing integrity, confidentiality, or privacy. </a><a href="https://prime.greeks.live/area/due-diligence-process/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A layered, spherical structure reveals an inner metallic ring with intricate patterns, symbolizing market microstructure and RFQ protocol logic. A central teal dome represents a deep liquidity pool and precise price discovery, encased within robust institutional-grade infrastructure for high-fidelity execution](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-prime-os-orchestrating-rfq-protocols-for-high-fidelity-execution-and-multi-asset-liquidity.jpg)

## Due Diligence Process

Meaning ▴ The Due Diligence Process constitutes a systematic, comprehensive investigative protocol preceding significant transactional or strategic commitments within the institutional digital asset derivatives domain. </a><a href="https://prime.greeks.live/area/soc-reports/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A central glowing core within metallic structures symbolizes an Institutional Grade RFQ engine. This Intelligence Layer enables optimal Price Discovery and High-Fidelity Execution for Digital Asset Derivatives, streamlining Block Trade and Multi-Leg Spread Atomic Settlement](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-engine-microstructure-core.jpg)

## Soc Reports

Meaning ▴ SOC Reports, or Service Organization Control Reports, are independent third-party audit reports that attest to the effectiveness of a service organization's internal controls. </a><a href="https://prime.greeks.live/question/how-should-kpis-in-an-it-services-rfp-differ-for-cloud-services-versus-on-premise-infrastructure/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![Abstractly depicting an Institutional Grade Crypto Derivatives OS component. Its robust structure and metallic interface signify precise Market Microstructure for High-Fidelity Execution of RFQ Protocol and Block Trade orders](https://options.greeks.live/wp-content/uploads/2025/07/principals-integrated-crypto-derivatives-rfq-protocol-architecture.jpg)

## Services Criteria

KPIs in an IT services RFP must evolve from asset-focused metrics for on-premise to outcome-based service level guarantees for cloud. </a><a href="https://prime.greeks.live/area/type-ii-report/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A modular institutional trading interface displays a precision trackball and granular controls on a teal execution module. Parallel surfaces symbolize layered market microstructure within a Principal's operational framework, enabling high-fidelity execution for digital asset derivatives via RFQ protocols](https://options.greeks.live/wp-content/uploads/2025/07/high-fidelity-institutional-digital-asset-derivatives-rfq-protocol-controls.jpg)

## Type Ii Report

Meaning ▴ A Type II Report, specifically a SOC 2 Type II attestation, represents an independent auditor's opinion on the design and operating effectiveness of a service organization's internal controls relevant to security, availability, processing integrity, confidentiality, or privacy over a specified period, typically six months or longer. </a><a href="https://prime.greeks.live/area/due-diligence/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A precision-engineered, multi-layered system component, symbolizing the intricate market microstructure of institutional digital asset derivatives. Two distinct probes represent RFQ protocols for price discovery and high-fidelity execution, integrating latent liquidity and pre-trade analytics within a robust Prime RFQ framework, ensuring best execution](https://options.greeks.live/wp-content/uploads/2025/08/digital-asset-derivatives-rfq-protocols-high-fidelity-execution.jpg)

## Due Diligence

Meaning ▴ Due diligence refers to the systematic investigation and verification of facts pertaining to a target entity, asset, or counterparty before a financial commitment or strategic decision is executed. </a><a href="https://prime.greeks.live/area/digital-asset/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A gleaming, translucent sphere with intricate internal mechanisms, flanked by precision metallic probes, symbolizes a sophisticated Principal's RFQ engine. This represents the atomic settlement of multi-leg spread strategies, enabling high-fidelity execution and robust price discovery within institutional digital asset derivatives markets, minimizing latency and slippage for optimal alpha generation and capital efficiency](https://options.greeks.live/wp-content/uploads/2025/07/inst-digital-asset-deriv-rfq-os-for-optimal-high-fidelity-trade-exec.jpg)

## Digital Asset

Meaning ▴ A Digital Asset is a cryptographically secured, uniquely identifiable, and transferable unit of data residing on a distributed ledger, representing value or a set of defined rights. </a><a href="https://prime.greeks.live/question/how-do-the-soc-2-trust-services-criteria-apply-to-the-risks-of-crypto-custody/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![Geometric planes, light and dark, interlock around a central hexagonal core. This abstract visualization depicts an institutional-grade RFQ protocol engine, optimizing market microstructure for price discovery and high-fidelity execution of digital asset derivatives including Bitcoin options and multi-leg spreads within a Prime RFQ framework, ensuring atomic settlement](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-execution-engine-architecture.jpg)

## Trust Services

A SOC 2 report provides auditable proof of a crypto custodian's control environment, translating security claims into institutional-grade trust. </a><a href="https://prime.greeks.live/area/private-key-management/?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" class="glossary-item-box">
![A sophisticated, modular mechanical assembly illustrates an RFQ protocol for institutional digital asset derivatives. Reflective elements and distinct quadrants symbolize dynamic liquidity aggregation and high-fidelity execution for Bitcoin options](https://options.greeks.live/wp-content/uploads/2025/08/institutional-digital-asset-derivatives-rfq-protocol-architecture.jpg)

## Private Key Management

Meaning ▴ Private Key Management defines the comprehensive discipline governing the secure generation, storage, access, and lifecycle administration of cryptographic private keys, which are the fundamental digital credentials required to authorize transactions and assert ownership over digital assets within a distributed ledger system. </a>

**Tags:** [Type II Report](https://options.greeks.live/area/type-ii-report/), [Operational Integrity](https://options.greeks.live/area/operational-integrity/), [Trust Services Criteria](https://options.greeks.live/area/trust-services-criteria/), [SOC 1 Report](https://options.greeks.live/area/soc-1-report/), [Due Diligence Process](https://options.greeks.live/area/due-diligence-process/), [Digital Asset Due Diligence](https://options.greeks.live/area/digital-asset-due-diligence/)	

## Discover More

- 
### [How Can a Hedge Fund Manager Effectively Conduct Due Diligence on a Potential Prime Broker?](https://options.greeks.live/question/how-can-a-hedge-fund-manager-effectively-conduct-due-diligence-on-a-potential-prime-broker/)
![Sleek, dark components with a bright turquoise data stream symbolize a Principal OS enabling high-fidelity execution for institutional digital asset derivatives. This infrastructure leverages secure RFQ protocols, ensuring precise price discovery and minimal slippage across aggregated liquidity pools, vital for multi-leg spreads.](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-rfq-protocol-systemic-execution-interface.jpg)

Effective prime broker due diligence is the architectural design of a core dependency, ensuring systemic resilience and capital efficiency.

- 
### [How Might the Proposed Removal of RTS 28 Reports Change EU Best Execution Strategy?](https://options.greeks.live/question/how-might-the-proposed-removal-of-rts-28-reports-change-eu-best-execution-strategy/)
![Two distinct, polished spherical halves, beige and teal, reveal intricate internal market microstructure, connected by a central metallic shaft. This embodies an institutional-grade RFQ protocol for digital asset derivatives, enabling high-fidelity execution and atomic settlement across disparate liquidity pools for principal block trades.](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-protocols-high-fidelity-execution-prime-os.jpg)

The removal of RTS 28 reports shifts the best execution focus from public compliance to building a superior internal data and analytics framework.

- 
### [Acquiring Digital Assets before They List on Any Exchange](https://options.greeks.live/guide/acquiring-digital-assets-before-they-list-on-any-exchange/)
![Two sleek, metallic, and cream-colored cylindrical modules with dark, reflective spherical optical units, resembling advanced Prime RFQ components for high-fidelity execution. Sharp, reflective wing-like structures suggest smart order routing and capital efficiency in digital asset derivatives trading, enabling price discovery through RFQ protocols for block trade liquidity.](https://options.greeks.live/wp-content/uploads/2025/08/institutional-digital-asset-derivatives-rfq-prime-os-execution.jpg)

Secure tomorrow's assets at today's price. The definitive guide to pre-exchange acquisition.

- 
### [How Do Global Regulatory Discrepancies Influence Cross-Border Crypto Options RFQ Operations?](https://options.greeks.live/question/how-do-global-regulatory-discrepancies-influence-cross-border-crypto-options-rfq-operations/)
![A sleek, institutional grade sphere features a luminous circular display showcasing a stylized Earth, symbolizing global liquidity aggregation. This advanced Prime RFQ interface enables real-time market microstructure analysis and high-fidelity execution for digital asset derivatives. It represents dynamic price discovery via sophisticated RFQ protocols, optimizing capital efficiency.](https://options.greeks.live/wp-content/uploads/2025/07/institutional-grade-digital-asset-derivatives-trading-platform-displaying-global-liquidity-aggregation-and-real-time-price-discovery-for-rfq-protocols.jpg)

Global regulatory divergence necessitates agile compliance frameworks for cross-border crypto options RFQ, optimizing liquidity access and execution quality.

- 
### [What Is the Role of a Custodian in Crypto Options Trading?](https://options.greeks.live/question/what-is-the-role-of-a-custodian-in-crypto-options-trading/)
![Abstract geometric planes in teal, navy, and grey intersect. A central beige object, symbolizing a precise RFQ inquiry, passes through a teal anchor, representing High-Fidelity Execution within Institutional Digital Asset Derivatives. This depicts optimal Price Discovery and Liquidity Aggregation.](https://options.greeks.live/wp-content/uploads/2025/07/rfq-protocols-for-digital-asset-derivatives-high-fidelity-execution-liquidity-aggregation-price-discovery-market-microstructure.jpg)

A crypto custodian provides the secure, segregated asset foundation essential for mitigating counterparty risk in options trading.

- 
### [How Does Operational Due Diligence Differ from Financial Due Diligence?](https://options.greeks.live/question/how-does-operational-due-diligence-differ-from-financial-due-diligence/)
![The abstract image features angular, parallel metallic and colored planes, suggesting structured market microstructure for digital asset derivatives. A spherical element represents a block trade or RFQ protocol inquiry, reflecting dynamic implied volatility and price discovery within a dark pool. This visualizes high-fidelity execution pathways for principal's capital, minimizing slippage and optimizing capital efficiency.](https://options.greeks.live/wp-content/uploads/2025/07/optimized-institutional-digital-asset-derivatives-rfq-protocol-framework-ensuring-principal-best-execution-and-latent-liquidity-capture.jpg)

Financial diligence verifies an asset's recorded value; operational diligence assesses its system's potential to create future value.

- 
### [What Are the Best Practices for Selecting and Managing Counterparties in an RFQ?](https://options.greeks.live/question/what-are-the-best-practices-for-selecting-and-managing-counterparties-in-an-rfq/)
![Precision-engineered metallic tracks house a textured block with a central threaded aperture. This visualizes a core RFQ execution component within an institutional market microstructure, enabling private quotation for digital asset derivatives. It represents high-fidelity execution and atomic settlement via a robust Principal's operational framework.](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-rfq-execution-framework-precision-microstructure-component.jpg)

A robust counterparty framework is an active risk management system, not a passive due diligence checklist.

- 
### [The Professional’s Guide to Pre-Market Token Evaluation](https://options.greeks.live/guide/the-professionals-guide-to-pre-market-token-evaluation/)
![A sleek, cream and dark blue institutional trading terminal with a dark interactive display. It embodies a proprietary Prime RFQ, facilitating secure RFQ protocols for digital asset derivatives. This system ensures high-fidelity execution, optimizing portfolio margin for complex multi-leg spreads, critical for best execution.](https://options.greeks.live/wp-content/uploads/2025/08/institutional-digital-asset-derivatives-rfq-terminal-for-best-execution.jpg)

Master the pre-market: Where professional traders secure tomorrow's value, today.

- 
### [How Can a Crypto Custodian Demonstrate the Effectiveness of Its Incident Response Plan to Auditors?](https://options.greeks.live/question/how-can-a-crypto-custodian-demonstrate-the-effectiveness-of-its-incident-response-plan-to-auditors/)
![A sophisticated, layered circular interface with intersecting pointers symbolizes institutional digital asset derivatives trading. It represents the intricate market microstructure, real-time price discovery via RFQ protocols, and high-fidelity execution. The design evokes quantitative analysis, smart order routing, and the intelligence layer of a Prime RFQ for capital efficiency.](https://options.greeks.live/wp-content/uploads/2025/07/prime-os-institutional-digital-asset-derivatives-rfq-market-microstructure.jpg)

A crypto custodian proves its incident response effectiveness through a curated portfolio of evidence: documented plans, live-fire simulation results, and performance metrics.

---

## Raw Schema Data

```json
{
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
        {
            "@type": "ListItem",
            "position": 1,
            "name": "Home",
            "item": "https://options.greeks.live"
        },
        {
            "@type": "ListItem",
            "position": 2,
            "name": "Question",
            "item": "https://options.greeks.live/question/"
        },
        {
            "@type": "ListItem",
            "position": 3,
            "name": "What Are the Key Differences between a SOC 1 and SOC 2 Report for a Crypto Custodian?",
            "item": "https://options.greeks.live/question/what-are-the-key-differences-between-a-soc-1-and-soc-2-report-for-a-crypto-custodian/"
        }
    ]
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "https://greeks.live/#organization",
    "name": "Greeks.Live",
    "url": "https://greeks.live/",
    "description": "Greeks.live is the definitive toolkit for the professional options trader, dedicated to empowering our users with institutional-grade data, advanced analytics, and a comprehensive suite of trading tools designed to provide a decisive edge in the market. Every article and guide published under the Greeks.live name is a product of our deep commitment to data-driven analysis and our mission to support the global trading community.",
    "email": "support@greeks.live",
    "logo": {
        "@type": "ImageObject",
        "url": "https://options.greeks.live/wp-content/uploads/2025/07/Greeks.Live-Logo-Icon.svg"
    },
    "hasPart": [
        {
            "@type": "WebSite",
            "name": "About Us",
            "url": "https://about.greeks.live"
        },
        {
            "@type": "WebSite",
            "name": "App Download Page",
            "url": "https://about.greeks.live/#/download/basic_trade"
        },
        {
            "@type": "WebSite",
            "name": "Newcomers' Guide",
            "url": "https://twisty-sign-c8b.notion.site/Guide-for-Greeks-live-X-Deribit-Newbies-5a08a3052822427d800af6eaf3704c8d"
        },
        {
            "@type": "WebSite",
            "name": "Knowledge Base",
            "url": "https://linktr.ee/greeks.live"
        },
        {
            "@type": "WebSite",
            "name": "Option Terminology",
            "url": "https://greekslive.notion.site/88dfc00e7c584d4d8969b6302a79a12f?pvs=4"
        },
        {
            "@type": "WebSite",
            "name": "Terms of Service",
            "url": "https://greeks.live/#/tos"
        },
        {
            "@type": "WebSite",
            "name": "Disclaimer",
            "url": "https://greeks.live/#/disclaimer"
        }
    ],
    "sameAs": [
        "https://x.com/greekslive",
        "https://youtube.com/@greeks_live?si=-KjT0Lkw4WUCI0tD",
        "https://t.me/greekslive_notifications",
        "https://t.me/greekslive",
        "https://pinterest.com/greekslive/"
    ],
    "makesOffer": [
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "RFQ Platform",
                "url": "https://rfq.greeks.live",
                "description": "Execute institutional-grade block trades for crypto options and futures. This platform provides deep, over-the-counter (OTC) liquidity via a professional Request for Quote system.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Lending Tools",
                "url": "https://lend.greeks.live",
                "description": "Manage crypto lending and borrowing activities to earn yield or secure loans. This suite of tools helps users analyze interest rates and manage collateralized debt positions.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Data Lab",
                "url": "https://greeks.live/#/deribit/tools/datalab/BTC",
                "description": "Analyze historical and real-time options data with advanced metrics. This tool is designed for backtesting strategies and identifying market trends through comprehensive data visualization.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Profit & Loss Analysis (PnL)",
                "url": "https://greeks.live/#/deribit/tools/pnl_analysis",
                "description": "Track and analyze the Profit and Loss (PnL) of your options portfolio. This tool provides detailed performance metrics to help traders evaluate and refine their strategies.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Position Visualization",
                "url": "https://greeks.live/#/deribit/tools/pv/BTC",
                "description": "Visualize complex options positions and their corresponding risk profiles. This tool generates payoff diagrams to help traders intuitively understand potential profit, loss, and exposure.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Options Calculator",
                "url": "https://greeks.live/#/deribit/tools/calculator",
                "description": "Calculate the theoretical price and risk parameters ('the Greeks') of crypto options. An essential tool for pricing new trades and analyzing the sensitivity of existing positions.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Greeks.live Main Platform",
                "url": "https://greeks.live/",
                "description": "The central hub for the Greeks.live suite of professional cryptocurrency options and derivatives trading tools. Access analytics, manage positions, and explore the ecosystem.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Community Forum",
                "url": "https://t.greeks.live",
                "description": "Join the official Greeks.live community. Connect with other traders, share insights, and receive the latest updates directly from the team.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Greeks.live for Deribit",
                "url": "http://deribit.greeks.live",
                "description": "A dedicated interface for trading on the Deribit exchange. This platform leverages Greeks.live's advanced analytics and tools specifically for users of Deribit's options and futures markets.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Greeks.live for OKX",
                "url": "http://okx.greeks.live",
                "description": "A dedicated interface for trading on the OKX exchange. This platform integrates Greeks.live's powerful analytics with the OKX marketplace, focusing on its options and derivatives products.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "GLVS.AI Trading Platform",
                "url": "https://www.glvs.ai/",
                "description": "An AI-powered platform for automated crypto options trading. Leverage advanced algorithms and data-driven signals to develop and deploy sophisticated, hands-free trading strategies.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "API Testnet & Sandbox",
                "url": "https://test.greeks.live",
                "description": "A dedicated testnet environment for developers to test their API integrations and automated trading strategies. This sandbox allows for full functionality testing without risking real funds.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        }
    ],
    "subOrganization": [
        {
            "@type": "Organization",
            "name": "GreeksLive HK Co., Limited",
            "email": "support@greeks.live",
            "telephone": "+852-56418949",
            "address": {
                "@type": "PostalAddress",
                "streetAddress": "Unit 11, 27/F, K. Wah Centre, 191 Java Road",
                "addressLocality": "Hong Kong",
                "addressRegion": "North Point",
                "addressCountry": "CN",
                "postalCode": "0000"
            },
            "geo": {
                "@type": "GeoCoordinates",
                "latitude": "22.2932357",
                "longitude": "114.2022026"
            },
            "image": "https://options.greeks.live/wp-content/uploads/2025/08/Wah-Centre-Hong-Kong.jpg"
        }
    ]
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "Article",
    "mainEntityOfPage": {
        "@type": "WebPage",
        "@id": "https://options.greeks.live/question/what-are-the-key-differences-between-a-soc-1-and-soc-2-report-for-a-crypto-custodian/"
    },
    "headline": "What Are the Key Differences between a SOC 1 and SOC 2 Report for a Crypto Custodian? \u25b4 Question",
    "description": "A SOC 1 report validates a crypto custodian's financial reporting controls, while a SOC 2 report validates its technology and security architecture. \u25b4 Question",
    "url": "https://options.greeks.live/question/what-are-the-key-differences-between-a-soc-1-and-soc-2-report-for-a-crypto-custodian/",
    "datePublished": "2025-08-09T22:29:25+00:00",
    "dateModified": "2025-08-09T22:29:33+00:00",
    "articleSection": [
        "Question"
    ],
    "author": {
        "@id": "https://greeks.live/#organization"
    },
    "publisher": {
        "@id": "https://greeks.live/#organization"
    },
    "image": {
        "@type": "ImageObject",
        "url": "https://options.greeks.live/wp-content/uploads/2025/07/principals-integrated-crypto-derivatives-rfq-protocol-architecture.jpg",
        "caption": "Embodying a Principal's Institutional Grade Crypto Derivatives OS, this image showcases its sophisticated architecture. A metallic joint symbolizes the intricate Market Microstructure and FIX Protocol underpinning High-Fidelity Execution for Multi-Leg Spread and Block Trade via RFQ Protocol. The illuminated teal interior signifies a deep Liquidity Pool facilitating transparent Price Discovery, managing Gamma Exposure, and ensuring Atomic Settlement."
    },
    "keywords": [
        "AICPA",
        "Crypto Custodian",
        "Cybersecurity Audit",
        "Digital Asset",
        "Digital Asset Due Diligence",
        "Due Diligence",
        "Due Diligence Process",
        "Financial Audit",
        "Operational Integrity",
        "Private Key Management",
        "SOC 1 Report",
        "SOC 2 Report",
        "SOC Reports",
        "Trust Services Criteria",
        "Type II Report"
    ]
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "WebSite",
    "url": "https://options.greeks.live/",
    "potentialAction": {
        "@type": "SearchAction",
        "target": "https://options.greeks.live/?s=search_term_string",
        "query-input": "required name=search_term_string"
    }
}
```


---

**Original URL:** https://options.greeks.live/question/what-are-the-key-differences-between-a-soc-1-and-soc-2-report-for-a-crypto-custodian/
