Security architecture and access control
Access to a proprietary trading system is a control, not a convenience. Every privileged action is authenticated, authorized, attributed and logged.
Control Domains
Named individual accounts, joiner-mover-leaver lifecycle and periodic access recertification.
Least privilege by design. No single role holds trading, treasury, risk-limit and administration authority.
Mandatory MFA for privileged users, with re-authentication on high-risk actions.
Data encrypted in transit and at rest under current institutional cryptographic standards.
HSM and multi-signature custody. API credentials and private keys are never exposed to the browser.
Severity-tiered response, session revocation, forensic logging and post-incident review.
Session and Access Controls
- Session timeout on configurable inactivity
- Device and session visibility for administrators
- Immediate session revocation capability
- IP and geolocation logging on every login
- Failed-login throttling and account lockout
- Allowlisted withdrawal destinations
- Segregation of duties on treasury movement
- Immutable, hash-chained audit log
Boundary
The published security posture describes internal controls for company systems and company capital only.