Security Isn't a Feature. It's the Architecture.

Circle was designed from day one with post-quantum cryptography, zero-trust networking, and defense-in-depth at every layer. Security isn't bolted on — it's baked in.

Security Pillars

Defense in Depth, Every Layer

Post-Quantum Cryptography

Every key exchange, digital signature, and encrypted data store uses NIST-standardized lattice-based algorithms (CRYSTALS-Kyber, CRYSTALS-Dilithium, SPHINCS+). Data encrypted today remains confidential against quantum attacks decades from now.

CRYSTALS-Kyber key encapsulation
CRYSTALS-Dilithium digital signatures
Hybrid TLS 1.3 transport
SPHINCS+ hash-based signatures
Homomorphic encryption for computation

Zero Trust Architecture

No implicit trust, anywhere. Every request is authenticated, authorized, and encrypted — whether it originates from inside or outside the network. Microsegmentation isolates every tenant, service, and data path.

Mutual TLS on all service-to-service calls
Per-request identity verification
Microsegmented tenant isolation
AI-driven anomaly detection
Continuous posture assessment

Compliance & Audit

Immutable, PQC-signed audit logs capture every access, modification, and administrative action across all three products. Automated compliance monitoring surfaces issues before auditors do.

SOC 2 Type II certified
HIPAA compliant (BAA available)
FIPS 140-3 validated HSMs
GDPR data residency controls
CLIA/CAP lab compliance

Operational Security

Security isn't just technology — it's process. Circle runs a 24/7 Security Operations Center, conducts annual third-party penetration testing, maintains a responsible disclosure program, and requires security training for every employee.

24/7 SOC with SIEM integration
Annual third-party pen testing
Bug bounty & responsible disclosure
Employee security training
Incident response < 15 min SLA
Certifications

Independently Verified

SOC 2 Type II
Certified
2025
HIPAA
Compliant
BAA Available
FIPS 140-3
Validated
HSM Level 3
GDPR
Compliant
EU Data Residency
ISO 27001
In Progress
Expected Q3 2026
FedRAMP
In Progress
Expected Q4 2026
Need to see the details?

Request our full security whitepaper, or schedule a call with our security engineering team.