> For the complete documentation index, see [llms.txt](https://docs.clickoptions.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.clickoptions.ai/trust/audits-and-reports.md).

# Audits and Reports

ClickOptions is committed to independent verification and transparent reporting across the platform.

#### **Smart Contract Audits**

* Independent third-party smart-contract audits are a **pre-listing commitment**: all on-chain modules (including future Vault and governance contracts) are audited before deployment, with findings addressed before listing.
* Re-audits are performed after every major protocol upgrade.
* Audit reports are published for community review once available.

#### **Penetration Tests**

* The ClickOptions infrastructure (trading engine, APIs and front-end) undergoes **regular penetration testing** by certified cybersecurity firms.
* Tests cover application, network and cloud infrastructure layers.
* Key findings and remediation measures are summarised in periodic security disclosures.

#### **Attestations**

* SOC 2 and ISO/IEC 27001 are pursued on a **readiness** basis; any certification is stated only once achieved.
* ClickOptions publishes attestations for licensing status, compliance reviews and treasury operations as they become available.

#### **Vault Reports (roadmap)**

* Once ClickVault launches, a **Vault Transparency Dashboard** is intended to display real-time capital utilisation, coverage ratios and settlement buffers.
* Periodic reports would summarise Vault capital inflows/outflows, PnL distribution and utilisation statistics.

#### **Future: Proof of Reserves & Liabilities**

* ClickOptions is building toward a **cryptographic proof-of-reserves and liabilities framework**, allowing independent verification of:
  * client balances held in platform-controlled wallets;
  * total Vault capital locked in smart contracts (once live); and
  * matching obligations (open option contracts).
* This system is intended to integrate **Merkle-tree attestations** and independent auditor sign-off.

<br>