Security & compliance.
Bubble is built for regulated institutions: independently audited, non-custodial, and standards-based.
Independently audited
The Soda Labs stack has been independently reviewed by Hacken: protocol, cryptography, and implementation.
View the audit →Selective disclosure
The on-chain access list (ACL) gives auditors and regulators scoped, read-only access to exactly the data they need, nothing more.
Non-custodial
Keys stay with you. Soda Labs never holds funds, keys, or plaintext data. There is nothing for us to lose or leak.
Standards-based crypto
Quantum-resistant AES-256 and garbled-circuit MPC: battle-tested constructions, not experimental primitives.
Audit-ready reporting
Generate complete, verifiable reports over confidential activity for internal audit, external auditors, and regulators.
Policy & approvals
Enforce institutional controls (approval workflows, limits, and role-based policies) over confidential operations.
Patented technology
Three granted US patents protect the garbled-circuit constructions behind Bubble.
Live bug bounty
A standing program rewards responsible disclosure, with up to $56,000 for critical findings.
Program announcement →Dig into the details.
Papers, audits, and third-party coverage of the Soda Labs stack.