Companies / Uphold / Subprocessors
Uphold is a platform for trading, earning, borrowing, staking and spending across cryptocurrencies, stocks, ETFs, precious metals and currencies. It serves individual and enterprise customers.
Summarized from its homepage on 5 Nov 2026.
Subprocessors of Uphold
Uphold declares 35 subprocessors.
| Subprocessor | Purpose |
|---|---|
| Targeted marketing (if opted in) | |
| Cloud hosting | |
| Apex Fintech Solutions LLC | Equities trading, execution, clearing, and settlement |
| Analytics and attribution (if opted in) | |
| Atomic | Banking Partner (US Customers Only) |
| Credit/debit card processing | |
| Banking Partner (US Customers Only) | |
| Customer communications | |
| Data observability and analytics | |
| Digital identity verification and fraud monitoring |
25 more subprocessors
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inCertifications
| Standard | What the source says | Checked |
|---|---|---|
| ISO 27001Company's statement | “Uphold is certified for SOC 2 Type 2, ISO 27001, and PCI DSS, ensuring rigorous control over our information security management systems, data handling, and payment processing practices.”The company's own statement. We have not checked an accreditation registry. | 12 Nov 2026Source |
| PCI DSSCompany's statement | “Uphold is certified for SOC 2 Type 2, ISO 27001, and PCI DSS, ensuring rigorous control over our information security management systems, data handling, and payment processing practices.”The company's own statement. We have not checked a card network registry. | 12 Nov 2026Source |
| SOC 2 Type IICompany's statement | “Uphold is certified for SOC 2 Type 2, ISO 27001, and PCI DSS, ensuring rigorous control over our information security management systems, data handling, and payment processing practices.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 12 Nov 2026Source |
We last read its homepage on 12 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Uphold lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Uphold's full stack
Every vendor with its source and date, and an alert when Uphold adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call