.svg)
.svg)
The standard we apply to every transaction is the standard we apply to ourselves.
6lock operates verified money movement infrastructure for private markets. This page provides the documentation, controls, and architecture detail needed to complete operational due diligence on 6lock.
SOC 2 Type II
Independently audited controls
Zero PII exchanged
Account holders maintain their own banking details
Continuous KYC/KYB
Automated verification and OFAC screening
Federal Reserve rails
Wire, ACH, FedNow, and RTP
Independently audited
SOC 2 Type II
Controls audited across infrastructure, access management, and data handling.
Audit-grade, end to end
6lock maintains SOC 2 Type II compliance, with controls independently audited across infrastructure, access management, and data handling.
The full report is available to clients and prospective clients under NDA.
Architecture determines security
The most important facts about 6lock are structural. They hold for every transaction on the platform.
Account holders maintain their own banking details
Leading private equity firms trust 6lock to safeguard Limited Partner funds, accelerate value creation, and lock out fraud. 6lock Secured is the mark of a firm that has made capital integrity a fiduciary standard — not an aspiration
Banking details are immutable in transit
Wire instructions live inside the platform and can be updated only by the verified account holder. Every change is logged, screened, and subject to re-verification.
Identity verification is continuous
Every participant completes identity verification — government-issued ID with biometric match — before transacting, with human approval retained in the workflow. KYC/KYB runs continuously and automatically, including OFAC screening.
Separation of duties is enforced by the system
No single individual can both authorize and execute a transaction. Multi-party approval requirements are built into every capital event workflow and extend across counterparties.
Money moves on existing bank rails
6lock orchestrates transactions across the payment rails offered by the Federal Reserve — wire, ACH, same-day ACH, FedNow, and RTP. The platform adds a verification and orchestration layer to infrastructure your institutions already trust.
Every transaction is visible in real time
Senders and recipients see money leave and land. Recipients are matched against verified records before funds move.
The verified money movement workflow
Every capital event on 6lock follows the same verified path.
Verified identity
Government ID, biometric match, human approval
Immutable instructions
Banking details held in-platform, updated only by the account holder
Multi-party approval
Separation of duties enforced on every capital event
Bank rails
Wire, ACH, FedNow, and RTP through the Federal Reserve
Real-time confirmation
Both sides see funds leave and land, matched to verified records
Controls in force
Organized the way diligence teams review them.
%201%20(1).svg){kind=icon}
Organizational security
Role-based access control governs every user permission on the platform
Background-checked personnel with least-privilege access to production systems
Security awareness training for all employees
Product security
Multi-party approval enforced on all capital event workflows
Behavioral risk monitoring and contextual fraud signals evaluated on every transaction
Full audit trail on every action, instruction change, and approval
%201%20(1).svg){kind=icon}
Data security
All sensitive data encrypted in transit and at rest with enterprise-grade encryption
LP PII is never collected, stored, or exchanged in documents or email
Continuous, automated KYC/KYB and OFAC screening
%201%20(1).svg){kind=icon}
Infrastructure security
SOC 2 Type II audited controls across infrastructure and access
Hardened cloud infrastructure with environment isolation
Independent penetration testing program
Request access
Due diligence documentation is available to clients and qualified prospective clients. Requests are reviewed and fulfilled under NDA where required.
SOC 2 Type II report
Full audited report
NDA
Penetration test executive summary
Most recent engagement
NDA
Information security policy summary
Policy framework overview
NDA
Insurance documentation
Coverage summary
NDA
Subprocessor list
Current vendor disclosure
Open
A small number of vetted partners
Identity verification partner
Identity verification
Reviewed
Banking partner
Payment rails and settlement
Reviewed
Cloud infrastructure provider
Infrastructure hosting
Reviewed
Frequently asked questions
Written to map to the questions diligence teams ask.
LPs maintain their own verified banking details within the platform. Sensitive PII is never collected into documents, exchanged over email, or handled by fund staff. Data within the platform is encrypted and access-controlled under SOC 2 Type II audited controls.
Every participant submits a government-issued ID and a biometric selfie match through an integrated identity verification partner. Verified identities are then routed for human approval before the account can transact. Verification is continuous — KYC/KYB and OFAC screening run automatically throughout the relationship.
6lock supports all major payment rails offered by the Federal Reserve: wire, ACH, same-day ACH, FedNow, and RTP. The appropriate rail is selected per transaction and use case.
6lock is built to work alongside fund administrators, and several of 6lock's earliest deployments run through fund administrator workflows. The platform reduces verification workload, automates reconciliation reporting, and gives administrators the same verified, real-time view of money movement that GPs and LPs receive.
No. Separation of duties is enforced by the system. Multi-party approval is required on every capital event, and no individual can both authorize and execute a transaction.
Banking details can be updated only by the verified account holder, inside the platform, with every change logged and re-screened. Instructions cannot be altered in transit because they never leave the platform.
Yes. 6lock maintains SOC 2 Type II compliance with independently audited controls across infrastructure, access, and data handling. The report is available under NDA through the documentation request above.
Submit a request through this page or contact our team directly. We respond to due diligence inquiries directly, including completion of DDQs and security questionnaires.
Verification is the standard
Every claim on this page is auditable, and every control described here protects live transactions today. Diligence teams are invited to verify all of it.
