Eightyearsin,DuneisSOC2TypeIIattested

We started Dune in 2018 to make blockchain data accessible. Blockchains make it easy to verify and write transactions, but not to read and analyze the data inside them. Mats comes from data science, so that gap was hard to ignore. Back then, the founders of the most popular crypto apps were counting transactions on Etherscan as their product analytics.

We thought there had to be an easier way. If finance was going to run on blockchains, it would need an observable layer. So we built the first version of Dune, and it grew very fast.

Our first customers were blockchains, exchanges and DeFi protocols. They relied on Dune to understand what was happening inside their products and markets. Over eight years, a million users and thousands of teams have battle tested our data. In data, you need people using it to find where it breaks and where the gaps are. Our users found them, and we fixed them.

A few years ago, we started seeing a shift. Institutions began looking at crypto as infrastructure that is more efficient and moves value better than their traditional systems. Asset managers, banks, payment companies, hedge funds and trading firms came to us first for research: how these systems work and how much value flows through them. Many have since moved on to building their own products onchain.

Since the GENIUS Act passed in 2025, interest across Wall Street has grown tremendously. Now the SEC's innovation exemption has opened a path for tokenized US stocks to trade onchain. As more of the market moves onchain, this data matters more than ever.

Today 1000+ customers bring our stablecoin, real-world asset, prediction market, spot and perpetuals datasets into their own data stack. That data feeds trading algorithms, ratings and digital asset strategy.

Blockchains are very hard to navigate. There are many chains, assets, trading venues and payment channels, and going to a blockchain node to look for yourself does not tell you what is going on. Take Tesla: there are 12 versions of tokenized Tesla stock onchain, some synthetic and some cash-backed. Knowing which is which takes context and nuance, and we have built that up over eight years, with checks on data quality from day one. It is why the biggest financial players come to the biggest onchain data provider when they need trusted onchain data.

The data is only half of it. Institutions also need to trust how we handle their information. Attackers now use AI, attacks are getting larger and more frequent, and security teams review every provider connected to their systems. When you are serving financial institutions, you need elevated controls, processes and checks, and every handling of customer details has to be protected.

So we had an independent firm, Insight Assurance, test our Security and Confidentiality controls in daily practice across a full observation period.

SOC 2 Type II means institutions can be certain that Dune has the right controls for the risks in our line of business.

The report at a glance:

• Criteria: Security and Confidentiality.
• Scope: production infrastructure, source code and deployments, our data platform, employee devices and every tool that stores or processes customer data.
• Result: no remarks.
• Going forward: we re-audit every year.

What it means for your team:

• Your security and vendor risk teams can review the report instead of sending us a questionnaire.
• If you take Dune data into your own warehouse, you can see how it is protected on our side.
• If SOC 2 was a prerequisite for working with us, talk to our team about next steps.

We are proud to serve some of the world's biggest financial institutions in our mission to make onchain finance observable.

Fredrik and Mats

1. Go to trust.dune.com.
2. Request access with your work email.
3. We review each request and share the report with customers and prospects we are working with.