Polygon Labs says it has completed a SOC 2 Type 1 examination of the security controls for the Open Money Stack API and dashboard. Independent audit firm Schellman & Company carried out the review. The September 2 announcement gives businesses using Polygon's payment infrastructure an external assessment of how its security controls were designed at a particular point in time.

The review covered the Security trust services criteria, one part of the broader SOC 2 framework. A Type 1 examination evaluates whether relevant controls are suitably designed as of a specified date. It does not test whether those controls operated consistently for months. Polygon says a Type 2 examination, which would assess performance over a longer period, is already underway.

The distinction matters for banks and payment companies evaluating a technology vendor. They often need evidence of security processes before placing customer workflows on a third-party platform. An independent report can support procurement and audit reviews, while the scope still has to be understood precisely: this examination relates to the Open Money Stack API and dashboard, not a blanket audit of every application or blockchain activity associated with Polygon.

Polygon is building the stack to handle pay-ins, payouts, accounts and routing around stablecoins. Its security review addresses an operational hurdle for customers considering that service. The next step is the Type 2 examination, which would provide evidence about controls operating over time. Until that work is complete, the September result should be understood as a completed design assessment of the specified payment components.