Home Products Technology For Brokers Security & Compliance For Developers Request Demo
Security & Compliance

Compliance by Design.
Not by Afterthought.

Every layer of the Atlas platform, from database interceptors to background surveillance workers, is built with regulatory requirements in mind. Audit trails that can't be modified. Surveillance rules that never sleep. Financial records that balance to the penny.

Immutability

Audit Trails That
Cannot Be Altered.

The Atlas audit system protects the integrity of audit data at the infrastructure level. Any attempt to update or delete audit log or ledger records is automatically blocked before it reaches the database.

Every entity change (create, update, delete) is automatically captured with the acting user ID, timestamp, IP address, and before/after values stored as structured data. This audit data is immutable and retained indefinitely.

All
Entities Audited
100%
Coverage
0
Deletable Records
Retention Period
Audit Trail Example
Order #4721 updated
Status changed from Pending to Filled
By John A. • 102.89.23.45 • Jan 15, 2025 at 9:32 AM
KYC Application approved
Client Adebayo O. verified at Tier 3
By Sarah M. • 105.112.45.67 • Jan 15, 2025 at 10:15 AM
Account frozen
Reason: Suspicious activity under review
By Sarah M. • 105.112.45.67 • Jan 15, 2025 at 11:02 AM
Modification and deletion permanently blocked
Audit records are architecturally immutable and cannot be altered after creation
Surveillance

7 Automated Surveillance Rules.
Running Continuously.

The Atlas surveillance engine monitors every trade, order, and transaction for suspicious patterns. Alerts are generated automatically, scored by severity, and routed to compliance officers for review. False positives can be dismissed with documented rationale.

1

Wash Trading Detection

Detects buy/sell sequences in the same security within configurable time windows that may indicate wash trading activity.

2

Unusual Volume

Flags orders or trade volumes that significantly exceed an account's historical average. Configurable multiplier thresholds.

3

Front Running

Identifies patterns where large orders are preceded by related trades from connected accounts, suggesting information misuse.

4

Layering & Spoofing

Monitors for order-and-cancel patterns that may indicate layering by placing and cancelling orders to manipulate the order book.

5

Large Transaction Monitoring

Flags deposits, withdrawals, and trades that exceed configurable monetary thresholds for enhanced review.

6

Rapid Price Movement

Detects trades correlated with rapid price swings. Helps identify potential market manipulation or insider activity.

7

Concentration Risk

Monitors portfolio concentration levels that may indicate excessive risk or coordinated accumulation of a single security.

Alert Management
Each alert links to the triggering order/transaction. Compliance officers can investigate, escalate, or dismiss with documented rationale.
Configurable Thresholds
Every rule's sensitivity (volume multipliers, time windows, monetary thresholds) is configurable per brokerage via the admin portal.
Forensic Detail
Alerts capture the specific suspicious indicators detected, enabling detailed investigation and evidence gathering.
KYC / AML

5-Step KYC Verification.
Digital-First.

The Atlas KYC workflow guides clients through a structured, mobile-first onboarding process. Each step is independently tracked. Documents are stored securely with time-limited access. Admin review happens in the backoffice portal with approve/reject/request-more-info workflows.

1
Personal Information
Full name, date of birth, nationality, phone number, BVN.
2
Address Verification
Street address, city, state, LGA. Utility bill or bank statement upload.
3
Identity Document
NIN, passport, voter's card, or driver's license. Document upload with type selection.
4
Employment & Income
Employment status, occupation, employer, annual income range, source of funds.
5
Selfie & Bank Verification
Selfie photo capture for identity cross-check. Bank account details for fund settlement.

Admin KYC Review

  • Queue-based review with filtering by status, date, name
  • Document viewing with zoom and secure access
  • Approve / Reject / Request More Info with notes
  • Rejection reasons categorized and tracked
  • Full KYC status timeline with action history

Account Controls

  • Freeze / Unfreeze accounts with reason documentation
  • Place / Remove regulatory holds
  • Restrict trading without freezing entire account
  • Force password reset on compromised accounts

SAR Filing

  • Suspicious Activity Report creation from surveillance alerts
  • Draft → Submitted → Under Review → Closed workflow
  • Linked to triggering account, linked transactions, and supporting evidence
Financial Controls

SEC-Grade Financial Safeguards.

Customer Reserve Formula

Automated customer reserve calculation per regulatory requirements. Credits (client cash, payables) vs debits (margin, receivables). Minimum reserve computed and tracked daily with full audit history.

Segregated Client Funds

The platform enforces logical separation of client funds from brokerage operating accounts through the ledger. Client cash, client equity, and reserved funds are tracked in dedicated ledger accounts per client.

Duplicate Transaction Prevention

Every financial transaction (deposit, withdrawal, order placement, fee charge) is protected against duplicate processing. Repeated requests are automatically rejected, preventing double-charges and double-credits.

Pre-Trade Risk Checks

Before any order is accepted: buying power validation, account freeze check, KYC status verification, regulatory hold check, position limits, and configurable order size limits. All enforced server-side.

Payment Reconciliation

Automated reconciliation between payment gateway transactions, internal ledger entries, and bank settlements. Discrepancies are flagged for manual review. Full reconciliation reports by date range.

Settlement Processing

Background worker processes T+3 settlement. Mature trades are settled automatically. Settlement reports track pending, in-progress, settled, and failed settlements by date and security.

Security Architecture

Defense in Depth.

Authentication & Authorization

  • • Industry-standard password encryption and secure session management
  • • Automatic token refresh with tamper detection
  • • Biometric authentication and PIN-based quick login (mobile)
  • • 90+ role-based permissions across 8 operational modules
  • • Admin login history tracking (IP, device, time)

Data Isolation

  • • Complete data isolation between brokerage tenants
  • • Automatic tenant detection on every request
  • • Cross-tenant access architecturally impossible
  • • Separate branding, configuration, and settings per tenant
  • • Admin roles scoped to individual brokerage

Operational Safeguards

  • • Kill switch: immediately halt all trading activity
  • • Maintenance mode: block client operations with notice
  • • Account freeze / unfreeze with reason logging
  • • Regulatory hold: block withdrawals pending investigation
  • • Force password reset on compromised accounts

Infrastructure Security

  • • Encrypted secrets management for all credentials and keys
  • • Containerized deployment with minimal attack surface
  • • HTTPS/TLS everywhere
  • • Time-limited secure document access
  • • Rate limiting and request validation on all endpoints
Access Control

90+ Permissions.
8 Default Roles. Fully Customizable.

The Atlas RBAC system gives brokerage administrators granular control over who can see and do what across the entire backoffice. Every action (viewing a report, approving a KYC, cancelling an order) is gated by a specific permission. Roles are fully customizable per brokerage.

Super Admin All permissions
Compliance Officer KYC, Surveillance, SAR, Audit
Trading Desk Orders, Routing, Executions
Finance Manager Ledger, Payments, Reports
Client Support Client view, Chat, Notes
+ 3 More Defaults Operations, Viewer, Auditor
How It Works

Granular Control

90+ individual permissions spanning 9 operational modules: clients, trading, compliance, finance, reporting, settings, admin, support, and system. Every page and every action is gated.

Pre-Built Roles

8 default roles seeded per brokerage, from Super Admin to read-only Auditor. Each role maps to the exact permissions that team function needs.

Custom Roles

Create unlimited custom roles with any combination of permissions. Assign multiple roles per admin user. Changes take effect immediately.

Two-Layer Enforcement

Permissions are checked both in the admin portal UI (pages and buttons hidden) and on the server (API rejects unauthorized requests).

Reporting

30+ Reports. Exportable. Schedulable.

Every report can be filtered by date range, exported to CSV, and scheduled for automatic delivery via email. Reports cover financial, regulatory, trading, and operational domains.

Financial

Revenue, commission, balance, liquidity, trial balance, and customer reserve reports with full audit trail.

Regulatory

KYC status, compliance alerts, SAR activity, surveillance summaries, and regulatory hold tracking for SEC, NGX, and NFIU requirements.

Trading

Order flow analytics, execution quality, fill rates, routing performance, settlement status, and position concentration analysis.

Operations

Client growth, payment volumes, reconciliation, login activity, and support metrics. All exportable to CSV/PDF with scheduled email delivery.

Compliance Shouldn't
Keep You Up at Night.

Atlas handles surveillance, audit trails, KYC workflows, and financial controls so your compliance team can focus on strategy, not spreadsheets.

Talk to Our Compliance Team