Crypto▲ Bullish
KuCoin Secures ISO 22301 Certification for Business Continuity
KuCoin's ISO 22301 certification requires procedures for maintaining services during disruptions and restoring operations after incidents, adding to its existing SOC 2 Type II and ISO 27001 controls.
Continue with
KuCoin secured ISO 22301:2019 certification for its business continuity management system, the exchange said Aug. 11. The international standard requires organizations to identify possible disruptions and establish continuity plans, including processes for restoring critical services when incidents occur.
The certification covers disruptions from cyber incidents, infrastructure failures, problems with outside service providers, and other unexpected events. KuCoin said the framework extends beyond preventing incidents by requiring procedures for keeping important operations running and restoring services when interruptions happen.
For a cryptocurrency exchange that operates around the clock, such requirements are particularly relevant. Trading, asset transfers, payments, and other services must remain accessible across different regions and time zones. KuCoin identified cloud outages, blockchain node failures, payment infrastructure problems, and third-party provider dependencies among the operational risks exchanges need to manage alongside cybersecurity threats.
The certification adds to a set of existing controls. KuCoin already held SOC 2 Type II, ISO 27001:2022, ISO 27701, and the Cryptocurrency Security Standard, according to previous reporting. The exchange also uses third-party proof-of-reserves audits. Together, the certifications form what KuCoin calls its Trust Framework, now including ISO 22301 for business continuity.
Business continuity controls have become part of regulatory requirements for financial and crypto companies in several markets. In the European Union, the Markets in Crypto-Assets Regulation sets rules for crypto-asset service providers, while the Digital Operational Resilience Act requires ICT risk management, incident handling, resilience testing, and third-party risk controls. KuCoin also cited guidance from the Monetary Authority of Singapore and the Hong Kong Monetary Authority on continuity planning.
KuCoin operates under MiCA through its European subsidiary. The exchange secured a MiCA license in Austria in late 2025, allowing KuCoin EU Exchange GmbH to provide regulated crypto services across 29 European Economic Area countries through passporting. The Austrian authorization covers trading, custody, and other digital asset services. MiCA places requirements on licensed crypto service providers involving capital, governance, customer asset segregation, and disclosures.
BC Wong, KuCoin CEO, said at the time that regulatory compliance was part of the company’s long-term strategy. The authorization followed KuCoin’s registration as a Digital Currency Exchange with Australian financial intelligence agency AUSTRAC in November 2025.
According to Wong, MiCA made regulatory compliance a basic requirement for companies operating in Europe. He said the exchange was investing in custody systems, compliance workflows, and market-making infrastructure while operating under the European framework.