Amdax becomes the first crypto service provider in the EU to complete the ISAE 3000 Type II audit

Amsterdam, June 3, 2025 – Amdax is proud to announce that it is the first crypto service provider in the European Union to successfully complete the ISAE 3000 Type II audit. This achievement builds on the Type I audit that the company completed in 2023, which verified that the internal controls were properly designed as of 1 December 2023. The new audit confirms that these controls operated effectively and consistently across an extended period within Amdax’ day-to-day operations.

The independent audit was conducted by the renowned accounting firm Grant Thornton and covers the period from 1 August 2024 to 31 January 2025. The audit scope included:

• Custody services
• Trading via liquidity providers
• Depositing and withdrawing euro balances
• Depositing and withdrawing crypto assets
• Reconciliation of balances
• Settlement risk management
• General IT control measures, including:
  • Data and IT system backup and recovery
  • Access rights management
  • Change and incident management
  • Third-party risk management

The ISAE 3000 Type II assurance report confirms that these core processes related to digital assets were executed effectively and with integrity throughout the audit period.

“We’re proud to present Amdax’s ISAE 3000 Type II report,” says Lucas Wensing, CEO of Amdax. “This is a major milestone that underlines our ongoing commitment to trust, security, and regulatory leadership. From the very beginning, when we became the first crypto service provider registered with the Dutch Central Bank, we’ve set the bar high for compliance and reliability. This Type II audit independently confirms that our internal control framework is not only sound but consistently effective over time.” 

Ahead of regulation

As the European crypto sector prepares for incoming regulation such as MiCAR (Markets in Crypto-Assets Regulation) and DORA (Digital Operational Resilience Act), independently verified controls are becoming essential. This achievement confirms that Amdax’ risk management and compliance framework is robust and future ready.

“This audit demands more than good intentions on paper,” says Sanne de Gier, Chief Legal and Compliance Officer at Amdax. “It demonstrates that our internal controls work reliably and verifiably within our daily operations. That’s exactly the level of assurance European regulation will require.” 

With this ISAE 3000 Type II audit, Amdax strengthens its position at the forefront of a maturing and increasingly regulated crypto sector. Independent verification like this is a critical instrument in demonstrating effective internal governance in a rapidly professionalizing market.

About Amdax
Amdax is a crypto service provider based in Amsterdam, offering a broad range of services including custody, trading, staking, and asset management. The company is registered with De Nederlandsche Bank (DNB) and serves both private and institutional clients.

About Grant Thornton
Grant Thornton in the Netherlands is part of Grant Thornton International Ltd (GTIL), one of the world’s largest networks of independent accounting and advisory firms. With over 73,000 professionals in more than 150 markets, and 800+ professionals across eight offices in the Netherlands, Grant Thornton supports clients with accountancy, tax, and advisory services.