Core platform

Evidence, not assurances.

Every rule change, risk decision, payout approval and data access is recorded immutably with the actor, the timestamp and the state before and after. When a regulator, a partner or a trader asks, you answer with a record.

Book a Demo

Audit trailImmutable

14:02:11policy.updatedmax_daily_dd 5% → 4%

14:02:11policy.versionedv41 snapshot written

13:47:02payout.approved$4,120 · trader 88410

13:31:55kyc.passeddoc + liveness · trader 90233

12:58:40role.changedsupport → senior support

12:12:19breach.flaggednews window · acct 71220

14:02:11policy.updatedmax_daily_dd 5% → 4%

14:02:11policy.versionedv41 snapshot written

13:47:02payout.approved$4,120 · trader 88410

13:31:55kyc.passeddoc + liveness · trader 90233

12:58:40role.changedsupport → senior support

12:12:19breach.flaggednews window · acct 71220

Why it matters

Trust is an operational requirement now.

Payment partners, regulators and traders all ask the same question: prove it.

PSP due diligence

Processors increasingly want evidence of controls before they'll underwrite prop volume. 'We're careful' is not an answer.

Disputed breaches

A trader challenges a fail. Without the rule version, the tick data and the decision trail, the argument becomes reputational.

Insider risk

Most firms cannot say who viewed a trader's bank details last month, let alone prove nobody did.

Capabilities

What gets recorded, and how you query it.

Immutable event log

Append-only, hash-chained, retained seven years. Nothing in the log can be edited or removed, including by admins.

Rule versioning

Every program change is a version. Any account is evaluated against the rule set in force when it was purchased.

PII access trail

Reads are logged as well as writes, so you can answer who looked at what, and when.

Approval chains

Multi-step sign-off on payouts and overrides, with each approver and their justification captured.

Evidence export

Scoped, timestamped export packs for auditors and payment partners, generated on demand.

SIEM streaming

Forward the event stream to your own SIEM or archive in real time.

Audit coverage

What's included

Standard on every firm running on the platform. No add-on tier, no per-seat unlock.

06capabilities
included by default

01Rule and program changes, versioned
02Risk overrides with justification
03Payout approvals and PSP routing
04Every access to trader PII
05Admin permission changes
06Immutable log export for regulators

Keep exploring

Related in this family

Dashboard & CRM

One record per trader, across every account

Explore

Reporting & Analytics

One ledger finance and marketing both trust

Explore

Questions

Questions operators ask

Are you SOC 2 and ISO 27001 certified?

Yes: SOC 2 Type II and ISO 27001. Reports are available under NDA, and the evidence export gives your auditors the operational trail alongside the certifications.

Can an administrator delete log entries?

No. The log is append-only and hash-chained; a deletion attempt is itself an event. That property is what makes the trail usable as evidence rather than as a convenience feature.

How does rule versioning affect existing traders?

Accounts are always evaluated against the rule version in force at purchase. Changing a program never retroactively fails or passes an account already in flight.

Let's talk

Walk through the audit trail.

We'll open a live log, trace a breach end to end, and generate the evidence pack a payment partner would ask for.

Book a Demo