Chronicle / Security & Compliance
Security and compliance are embedded into how Chronicle engineers, operates, and maintains its data infrastructure and network. Our approach combines internationally recognized standards, independent audits, ongoing security programs, and an established network production track record since 2017.
Explore security & compliance ↓01 / Security standards & assessments
Chronicle’s security posture and controls are regularly assessed by independent third parties across certification and attestation bodies as well as audit and security teams.
Chronicle is certified to ISO/IEC 27001:2022, providing assurance that Chronicle has implemented an Information Security Management System (ISMS) covering the design, development, operation and support of Chronicle’s data services end to end.
Certificate and audit report available on request
Chronicle regularly commissions third-party penetration testing of relevant systems.
Attestation letter available on request
Chronicle smart contracts have been audited independently by leading auditor firms, including ABDK, Cantina, and ChainSecurity.
Four public audit reports in Documentation below.
Chronicle maintains an ongoing bug bounty program through Cantina.
Live since May 2024 · Rewards up to $400K
02 / Production track record
Built for operational resilience and long-term reliability.
2017 First oracle on Ethereum
03 / Security & compliance documentation
Supporting documentation is available for review. Certain materials are provided on request.
ISO/IEC 27001:2022 is a widely recognized international standard that defines requirements for an information security management system (ISMS).
Chronicle is certified to ISO/IEC 27001:2022 for the full scope of design, development, operation, and support of Chronicle’s oracle services, including the ingestion, processing, validation, cryptographic signing, and publication of price-feed and Proof of Asset data, as well as associated APIs, dashboards, and supporting cloud infrastructure; certification valid as of 31 July 2026, subject to annual audits.
A penetration test is a controlled security assessment in which testers attempt to identify and exploit vulnerabilities in an application, system, or network.
Chronicle regularly commissions third-party penetration testing of relevant systems. Reports and attestation letters are available on request.
A smart contract audit is an independent review of smart contract code intended to identify security vulnerabilities, implementation issues, and other risks.
Chronicle has undergone independent security reviews by ABDK, Cantina, and ChainSecurity.
A bug bounty program rewards security researchers for identifying and responsibly reporting qualifying vulnerabilities in live code.
Chronicle maintains an ongoing bug bounty program through Cantina.
Supporting documentation
Access the materials relevant to security review, vendor due diligence, or institutional onboarding.
