Custody and security

Client assets, held apart.

Client digital assets and client money are recorded and held apart from the assets of the company, then set against holdings at the custody addresses every working day.

Open an accountCompliance framework
Defense in depth

Six layers around every balance.

Protection is built in layers, from custody at the base up to the controls on your own account. Each layer stands on its own so no single failure can reach client funds.

  1. 01

    Cold storage custody

    Base layer

    The greater part of client digital assets is held in cold storage, with keys generated and kept offline. No single key exists anywhere in a form that can move funds on its own.

  2. 02

    Reserve and float kept apart

    Fund separation

    Deposits settle to a reserve address. Withdrawals are met from a separate float address that carries only what near term demand requires. Moving value between the two calls for approval from more than one authorised officer.

  3. 03

    Multi party sign off

    Release control

    Releasing a withdrawal or moving custody funds requires approval from more than one person. A second factor is confirmed on every withdrawal and on any change to security settings.

  4. 04

    Hardened, monitored platform

    Operations

    The systems that run the exchange are locked down, logged and watched around the clock. Access is granted at the lowest level that works and every change to a live system is reviewed by a second engineer.

  5. 05

    Controls on every account

    Account layer

    Each account carries its own controls, some always on and some for you to enable. Together they keep sign in, devices and withdrawals under your command.

  6. 06

    Independent assurance

    Assurance

    Ledger balances are reconciled against custody holdings every working day and an outside firm runs a full penetration test each year, with anything material fixed before the report is closed.

Keys generated and held offlineNo single key can move funds on its own
The platform around custody

Engineered to hold under pressure.

Custody is the core. The platform built around it is locked down, watched and tested so the controls that keep client funds apart stay dependable through every trading day.

  • Least privilege accessAccess to live systems is limited to named staff, granted at the lowest level that works and reviewed each quarter.
  • Reviewed changesEvery change to a live system is checked by a second engineer and written to a change log open to audit.
  • Logging and monitoringInfrastructure and application logs are retained and watched for anything out of the ordinary.
  • Incident responseA written incident plan sets out how we escalate, contain, notify clients and notify regulators.
  • Business continuityBusiness continuity and disaster recovery plans are exercised at least once a year.
Open an accountCompliance framework
The account layer

Controls on every account.

Some controls are always on and cannot be switched off. Others are there for you to turn on when you want them.

Two factor sign inRequired on every withdrawal request and on any change to security settings.
Always on for withdrawals
Withdrawal allow listAn address has to be added before use and waits twenty four hours.
Always on
Device bindingA new device has to be confirmed by email before it gets in.
Always on
Sign in alertAn email goes out on each sign in from a device not seen before.
Always on
Session timeoutA session ends after a spell of no activity and on a password change.
Always on
Face or fingerprint sign inAvailable in the app on devices that support it.
Your choice
ApartClient custody
OfflineCold storage keys
DailyCustody reconciliation
YearlyIndependent testing
Responsible disclosure

Telling us about a flaw.

Tell the security team about a suspected flaw before you share it anywhere else. Do not reach, change or wipe data that belongs to someone else, and do not slow the service while you test. We confirm every report and keep you posted until the matter is closed.

Report a vulnerabilityContact support

Open a verified trading account today.

Signing up takes only a few minutes and most identity checks are done within one working day.

Open an accountCompliance framework