Better Health for All

CompoSecure's Arculus authentication technology has partnered with Circular Protocol and IT Lab to launch a blockchain-based healthcare ecosystem.

This initiative aims to improve data accuracy, protect patient privacy, and prevent fraud in the healthcare industry. The system allows authorized personnel and patients to digitally sign off on procedures and transactions on the Circular blockchain, providing patients with secure access to their medical information. This system is expected to launch in Q2 2025 in Italy, with over 8,000 pharmacies, and in the U.S. market. CompoSecure, L.L.C. is certified to ISO 27001:2022 for information security management. The company also mentioned COVID-19 as one of the biggest challenges faced, indicating a general awareness of global health crises.

Fair Money & Economic Opportunity

CompoSecure, Inc. manufactures premium financial cards, security, and authentication solutions for financial institutions and businesses, primarily targeting high-income individuals as end-users.

The company does not offer lending, deposit, or consumer credit products, nor does it manage customer financial data in a way that would necessitate open-banking APIs or fair lending compliance. Therefore, all KPIs related to consumer financial services, such as underserved client share, pricing fairness, exploitative fee exposure, inclusion initiatives, data accessibility, fair lending compliance, wealth building outcomes, financial literacy initiatives, debt burden ratio, geographic inclusion, and product simplicity, are not applicable to its core business model.

Honest & Fair Business

CompoSecure, Inc. provides a confidential and anonymous system for financial, accounting, and audit complaints, including a secure hotline and web form, with a 14-16 digit code for message status tracking.

The company's governance documents include an anti-corruption policy, and amendments to its Code of Business Conduct and Ethics were made to address areas such as international business, gifts, DEI, health and safety, harassment, and political contributions.

Kind to Animals

No relevant quantitative data was found in the provided article to assess CompoSecure, Inc. against the 'Kind to Animals' ethical value.

The article describes a job opening for an ESG Manager but contains no specific information regarding animal welfare, cruelty-free practices, animal testing, or related metrics.

No War, No Weapons

CompoSecure, Inc. specializes in the design and manufacture of premium financial cards, security and authentication products, and cryptocurrency storage solutions.

The company's core business, as described in the provided articles, focuses on these civilian applications, including metal payment cards made with 65% post-consumer recycled stainless steel. There is no evidence in the articles to suggest any involvement in arms manufacturing, military contracts, dual-use technology with military applications, sales to embargoed regimes, or any other defense-related activities. Consequently, all KPIs related to defense exposure, oversight, compliance, and divestment are not applicable to the company's stated business model.

Planet-Friendly Business

CompoSecure matches 100% of its electricity and gas usage with renewable energy credits.

The company uses metal payment cards that contain 65% post-consumer recycled stainless steel. No environmental compliance violations were mentioned in the provided articles. CompoSecure has achieved ISO 14001 certification and received an EcoVadis Silver Medal for the second consecutive year, placing it in the top 15% of companies globally for sustainability.

Respect for Cultures & Communities

No cultural appropriation incidents are reported in the provided articles.

The company's operations, which involve premium financial cards and security products, do not inherently impact cultural contexts, thus no specific cultural impact assessment protocol or FPIC processes are mentioned. Similarly, there is no evidence of operations near cultural or heritage sites, resulting in no reported disruptions. While CompoSecure is committed to using and developing diverse suppliers, including minority-owned businesses, and encourages suppliers to report on diversity metrics, there is no specific data on the number of indigenous or minority-owned suppliers engaged or the percentage of procurement spending directed to local suppliers.

Safe & Smart Tech

CompoSecure has no documented data breaches, and its SOC 2 Type 2 (December 2022)

and ISO 27001:2022 (October 2024) certifications, issued without qualification or exceptions, indicate a strong security program. The company holds multiple certifications including ISO 27001:2022, ISO 9001:2015, SOC 2 Type 2, and FIDO2 for its Arculus Authenticate™ product. There are no documented incidents of unauthorized data use, and the SOC 2 Type 2 certification validates strong data controls and privacy capabilities. However, the company's privacy policy states that California residents can only make CCPA-related data access or portability requests twice within a 12-month period, which represents a significant limitation on user data control. While Arculus Authenticate™ is FIDO2 certified, a strong authentication standard, there is no specific information on the availability of multi-factor authentication across 70-80% of all company services. CompoSecure mentions vulnerability scanning as part of its risk-based cybersecurity approach but provides no specific metrics on remediation timeframes. The privacy policy indicates that personal information is kept for as long as necessary to respond to questions, complaints, or claims, or to meet legal requirements, with different retention periods for different data types, which suggests some data minimization efforts but not strict short-term retention. The company's privacy policy addresses requirements related to EU, EEA, and California privacy laws, but the limitation on CCPA requests suggests gaps in full compliance with user rights.