Trust Center - Figment
Figment
Security First | Risk Mitigation | Slashing Prevention
Figment's multi-layered security approach encompasses continuous proactive measures and purpose built controls to maximize the resiliency and security of its staking services.
Security is integrated throughout all aspects of Figment to reduce risk and enable the assurance, integrity and confidentiality customers expect.
Resources
Security Program
| Information Security Policy | Copy link for Information Security Policy |
| 2026 Information Security Policy | |
| Request access Information Security Policy | |
| Risk Management Procedure | Copy link for Risk Management Procedure |
| 2024 Risk Management Procedure | |
| Request access Risk Management Procedure | |
| Technical Security Policy | Copy link for Technical Security Policy |
| 2026 Technical Security Policy, v2.2 | |
| Request access Technical Security Policy | |
| Annual Risk Assessment Summary | Copy link for Annual Risk Assessment Summary |
| 2025 Annual Risk Assessment Summary Report | |
| Request access Annual Risk Assessment Summary | |
| Figment Incident Management Summary | Copy link for Figment Incident Management Summary |
| 2025 Incident Management Summary | |
| Request access Figment Incident Management Summary | |
| BCP/DR Statement and Plan Excerpt | Copy link for BCP/DR Statement and Plan Excerpt |
| 2024 BCP/DR Statement and excerpt of first two pages of the BCP/DR Plan. | |
| Request access BCP/DR Statement and Plan Excerpt | |
| 2025 Vendor Management Procedure | Copy link for 2025 Vendor Management Procedure |
| Vendor Management Procedure | |
| Request access 2025 Vendor Management Procedure |
Penetration Tests
| Figment Mutable Push Transfer Splitter Smart Contract Security Assessment Report | Copy link for Figment Mutable Push Transfer Splitter Smart Contract Security Assessment Report |
| Request access Figment Mutable Push Transfer Splitter Smart Contract Security Assessment Report | |
| Figment ETH2 Depositor (0x01 Validators) Smart Contract Security Audit Report | Copy link for Figment ETH2 Depositor (0x01 Validators) Smart Contract Security Audit Report |
| Request access Figment ETH2 Depositor (0x01 Validators) Smart Contract Security Audit Report | |
| Figment ETH2 Depositor (0x02 Validators) Smart Contract Security Audit Report | Copy link for Figment ETH2 Depositor (0x02 Validators) Smart Contract Security Audit Report |
| Request access Figment ETH2 Depositor (0x02 Validators) Smart Contract Security Audit Report | |
| Figment App, Admin, and API Pentest Report 2025 | Copy link for Figment App, Admin, and API Pentest Report 2025 |
| Request access Figment App, Admin, and API Pentest Report 2025 | |
| Figment API Pentest Report 2024 | Copy link for Figment API Pentest Report 2024 |
| Request access Figment API Pentest Report 2024 | |
| Figment App and Admin Pentest Report 2024 | Copy link for Figment App and Admin Pentest Report 2024 |
| Request access Figment App and Admin Pentest Report 2024 | |
| Figment Staking Gen 2 (SG2) Environment Pentest Report 2024 | Copy link for Figment Staking Gen 2 (SG2) Environment Pentest Report 2024 |
| Request access Figment Staking Gen 2 (SG2) Environment Pentest Report 2024 |
Compliance
| 2025 Figment SOC 2 Type 2 Report | Copy link for 2025 Figment SOC 2 Type 2 Report |
| Request access 2025 Figment SOC 2 Type 2 Report | |
| 2025 Figment SOC 2 Bridge Letter.pdf | Copy link for 2025 Figment SOC 2 Bridge Letter.pdf |
| Request access 2025 Figment SOC 2 Bridge Letter.pdf | |
| 2025 Certificate - ISO:27001.2022.pdf | Copy link for 2025 Certificate - ISO:27001.2022.pdf |
| View 2025 Certificate - ISO:27001.2022.pdf | |
| 2025 Figment SOC 1 Type 1 Report | Copy link for 2025 Figment SOC 1 Type 1 Report |
| Figment 2025 SOC 1 Type 1 Audit Report | |
| Request access 2025 Figment SOC 1 Type 1 Report | |
| FIGMENT 2025 CSAE 3000 NORS Assurance Report | Copy link for FIGMENT 2025 CSAE 3000 NORS Assurance Report |
| Request access FIGMENT 2025 CSAE 3000 NORS Assurance Report | |
| SOC 1 Type 1 Bridge Letter | Copy link for SOC 1 Type 1 Bridge Letter |
| Request access SOC 1 Type 1 Bridge Letter | |
| 2026 SOC 2 Type 2 Bridge Letter | Copy link for 2026 SOC 2 Type 2 Bridge Letter |
| 2026 SOC 2 Type 2 Bridge Letter | |
| Request access 2026 SOC 2 Type 2 Bridge Letter |
Legal & Insurance
| Certificate of Insurance E&O - Technology | Copy link for Certificate of Insurance E&O - Technology |
| Request access Certificate of Insurance E&O - Technology | |
| Certificate of Insurance - Proof Excess Liability (Slashing) | Copy link for Certificate of Insurance - Proof Excess Liability (Slashing) |
| Policy Type: Excess Cyber Liability. | |
| Request access Certificate of Insurance - Proof Excess Liability (Slashing) | |
| Certificate of Insurance - Tech EO_Cyber_Staking Policy | Copy link for Certificate of Insurance - Tech EO_Cyber_Staking Policy |
| Cyber & Tech E&O/Slashing Coverage Binder (Policy No. RUSPTEOCY3752025) for Figment USA, Inc | |
| Request access Certificate of Insurance - Tech EO_Cyber_Staking Policy | |
| Certificate of Insurance - D&O | Copy link for Certificate of Insurance - D&O |
| Directors & Officers (D&O) Certificate of Insurance (N° 25-001) for Figment Inc. | |
| Request access Certificate of Insurance - D&O | |
| Certificate of Insurance - CGL | Copy link for Certificate of Insurance - CGL |
| This document is a Certificate of Insurance for Figment Inc. provided for evidence purposes. | |
| Request access Certificate of Insurance - CGL |
Bulk download will only work on resources that are accessible and not view only.