Identity & access
One account model across platforms, with role separation, granular permissions, session control and enforced two-factor authentication for staff.
Architecture
One core.
Many desks.
Identity, money movement, permissions and audit are solved once, in the centre. Each platform is a surface on top of that core — which is why a second product costs weeks, not years.
Identity · Ledger · Risk · Audit
What lives in the centre.
Core services
01
02
Ledger
Double-entry money movement. Every deposit, adjustment, commission and payout is a posting — balances are derived, never edited in place.
03
Risk & limits
Shared limit engine: exposure ceilings, per-client caps, velocity checks and automated holds that fire before money leaves.
04
Audit trail
Who did what, from where, and what the record looked like before. Append-only, exportable, and built for an auditor rather than a developer.
05
Workflow
Approval chains for withdrawals, KYC decisions, payouts and market resolution — with maker-checker where the risk warrants it.
06
Reporting
Operational and regulatory reporting from the same data the desk runs on, with scheduled exports and immutable snapshots.
It has to speak to everything you already use.
Integrations
01
Trading servers
MT4 and MT5 manager and web APIs, in-house matching engines, and simulated environments for staging and demos.
Execution
02
Payments
Card acquirers, bank transfer rails, regional wallets and crypto processors — each behind one internal payment interface.
Money in / out
03
Compliance vendors
KYC and document verification, sanctions and PEP screening, and chain analytics for digital-asset flows.
Onboarding
04
Market data
Price feeds and reference data for pricing, settlement and exposure — normalised once, consumed everywhere.
Data
05
Communications
Transactional email and SMS, messaging channels, and your own support desk — events pushed out through webhooks.
Client contact
Security is a default, not a package.
Posture
Encrypted throughout
TLS in transit, encryption at rest, and secrets held outside the application.
Least privilege
Staff see only their function. Elevated actions are logged and time-boxed.
Isolated tenants
One operator's data never shares a boundary with another's.
Recoverable
Scheduled backups, off-site copies and rehearsed restore procedures.
Two ways to run it.
Deployment
Model A
Managed by AXFINTECH
We host, monitor, patch and back up your instance in the region you choose. You operate the desk; we operate the platform. Best when you want to launch quickly without adding infrastructure staff.
Model B
On your infrastructure
The platform is deployed into your own cloud or data centre, under your control and your security review, with an agreed release and support process. Best when your licence or policy requires it.
Technical review